src/inspector · 1cb133e312a9e33c78c8cfca6e8bd59246f44d02 · Linshizhi / V8

[inspector] fix use-after-free in ConsoleHelper::reportCall · d99308ef

kozyatinskiy authored Oct 03, 2016

InspectedContext can be destroyed inside of V8ConsoleMessage::createForConsoleAPI call.

BUG=chromium:646175
R=dgozman@chromium.org,alph@chromium.org

Review-Url: https://codereview.chromium.org/2388463002
Cr-Commit-Position: refs/heads/master@{#39939}

d99308ef

Name	Last commit	Last update
..
build		Loading commit data...
BUILD.gn		Loading commit data...
DEPS		Loading commit data...
OWNERS		Loading commit data...
PRESUBMIT.py		Loading commit data...
debugger-script.js		Loading commit data...
debugger_script_externs.js		Loading commit data...
injected-script-native.cc		Loading commit data...
injected-script-native.h		Loading commit data...
injected-script-source.js		Loading commit data...
injected-script.cc		Loading commit data...
injected-script.h		Loading commit data...
injected_script_externs.js		Loading commit data...
inspected-context.cc		Loading commit data...
inspected-context.h		Loading commit data...
inspector.gyp		Loading commit data...
inspector.gypi		Loading commit data...
inspector_protocol_config.json		Loading commit data...
java-script-call-frame.cc		Loading commit data...
java-script-call-frame.h		Loading commit data...
js_protocol-1.2.json		Loading commit data...
js_protocol.json		Loading commit data...
protocol-platform.h		Loading commit data...
remote-object-id.cc		Loading commit data...
remote-object-id.h		Loading commit data...
script-breakpoint.h		Loading commit data...
search-util.cc		Loading commit data...
search-util.h		Loading commit data...
string-16.cc		Loading commit data...
string-16.h		Loading commit data...
string-util.cc		Loading commit data...
string-util.h		Loading commit data...
v8-console-agent-impl.cc		Loading commit data...
v8-console-agent-impl.h		Loading commit data...
v8-console-message.cc		Loading commit data...
v8-console-message.h		Loading commit data...
v8-console.cc		Loading commit data...
v8-console.h		Loading commit data...
v8-debugger-agent-impl.cc		Loading commit data...
v8-debugger-agent-impl.h		Loading commit data...
v8-debugger-script.cc		Loading commit data...
v8-debugger-script.h		Loading commit data...
v8-debugger.cc		Loading commit data...
v8-debugger.h		Loading commit data...
v8-function-call.cc		Loading commit data...
v8-function-call.h		Loading commit data...
v8-heap-profiler-agent-impl.cc		Loading commit data...
v8-heap-profiler-agent-impl.h		Loading commit data...
v8-injected-script-host.cc		Loading commit data...
v8-injected-script-host.h		Loading commit data...
v8-inspector-impl.cc		Loading commit data...
v8-inspector-impl.h		Loading commit data...
v8-inspector-session-impl.cc		Loading commit data...
v8-inspector-session-impl.h		Loading commit data...
v8-internal-value-type.cc		Loading commit data...
v8-internal-value-type.h		Loading commit data...
v8-profiler-agent-impl.cc		Loading commit data...
v8-profiler-agent-impl.h		Loading commit data...
v8-regex.cc		Loading commit data...
v8-regex.h		Loading commit data...
v8-runtime-agent-impl.cc		Loading commit data...
v8-runtime-agent-impl.h		Loading commit data...
v8-schema-agent-impl.cc		Loading commit data...
v8-schema-agent-impl.h		Loading commit data...
v8-stack-trace-impl.cc		Loading commit data...
v8-stack-trace-impl.h		Loading commit data...
v8-value-copier.cc		Loading commit data...
v8-value-copier.h		Loading commit data...