DescriptionFix NULL pointer usage, it is P1 crash bug.
Just after DownloadControllerAndroidImpl::CreateGETDownload() being called and just before
DownloadControllerAndroidImpl::PrepareDownloadInfo() being run, the Loader object that holds the request pointer could have been removed from the pending_loaders_ map (in resource_dispatcher_host_impl.cc) because of a request cancel.
If that happens, the request pointer will be correctly NULL, but we don't check that.
This scenario is not a race condition since all the three methods are called in the IO thread, but the order of the calling each of the 3 methods can lead to this problem.
BUG=165784
Committed: https://src.chromium.org/viewvc/chrome?view=rev&revision=173504
Patch Set 1 #
Total comments: 4
Patch Set 2 : #Patch Set 3 : #Messages
Total messages: 7 (0 generated)
|