chromiumembedded / cef

Chromium Embedded Framework (CEF). A simple framework for embedding Chromium-based browsers in other applications.
https://bitbucket.org/chromiumembedded/cef/
Other
3.38k stars 467 forks source link

In the InputStreamReader, the prematurely release of the read buffer may result in dangling pointer in ~ReadResponseCallbackWrapper() #3760

Closed JCYang closed 3 months ago

JCYang commented 3 months ago

Describe the bug A dangling pointer is found by newly added raw_ptr<> facility. It's an net::IOBuffer owned by InputStreamReader. It's because a prematurely released of the net::IOBuffer.

To Reproduce Steps to reproduce the behavior:

  1. In our app, the bug will trigger dangling pointer detections quite easily.
  2. Not scheduled to create a small test case yet.

Expected behavior No dangling pointer detected.

Versions (please complete the following information):

Additional context Does the problem reproduce with the cefclient or cefsimple sample application at the same version? Not tried yet.

Does the problem reproduce with Google Chrome at the same version? Not chrome bug. It's a CEF bug.

PR is coming.

JCYang commented 3 months ago

https://bitbucket.org/chromiumembedded/cef/pull-requests/791