/[chrome]
Chromium logo

Revision 247627


Jump to revision: Previous Next
Author: ricea@chromium.org
Date: Wed Jan 29 05:22:37 2014 UTC (9 years, 3 months ago)
Changed paths: 1
Log Message:
Fix UAF in WebSocketDispatcherHost

If Send() fails in SendOrDrop(), then |message| will have been deleted,
but SendOrDrop() will still try to access its header fields.

Fixed.

BUG=338354
TEST=content_unittests

Review URL: https://codereview.chromium.org/148263009

Changed paths

Path Details
Directorytrunk/src/content/browser/renderer_host/websocket_dispatcher_host.cc modified , text changed

Properties

Name Value
commit-bot commit-bot@chromium.org

Powered by ViewVC 1.1.26 ViewVC Help