0
Go to file
Alvin Ji 9e137eaf38 geolocation: Use WeakPtr to prevent UAF in permission callback
Previously, the permission request callback used base::Unretained(this).
This assumed that the GeolocationServiceImpl would always outlive the
permission request. However, if the owning RenderFrameHost is destroyed
before the permission request completes, the callback would be invoked
on a destroyed GeolocationServiceImpl instance, leading to a crash.

To fix this, this CL replaces base::Unretained(this) with
weak_factory_.GetWeakPtr(). This ensures that the callback is only
executed if the GeolocationServiceImpl instance is still valid. If the
instance has been destroyed, the WeakPtr will become invalid, and the
callback will be safely skipped.

Bug: 396303129
Change-Id: Ic2a71bce5eb90f04957e1d85e8f31b824c93ad93
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6266168
Reviewed-by: Matt Reynolds <mattreynolds@chromium.org>
Commit-Queue: Alvin Ji <alvinji@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1422352}
2025-02-19 21:03:02 -08:00
2025-02-19 18:19:50 -08:00
2025-02-19 16:51:29 -08:00
2025-02-19 18:45:19 -08:00
2025-02-19 18:37:35 -08:00
2025-02-19 12:02:22 -08:00
2025-02-18 06:19:46 -08:00
2025-01-29 15:00:06 -08:00

Logo Chromium

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

The project's web site is https://www.chromium.org.

To check out the source code locally, don't use git clone! Instead, follow the instructions on how to get the code.

Documentation in the source is rooted in docs/README.md.

Learn how to Get Around the Chromium Source Code Directory Structure.

For historical reasons, there are some small top level directories. Now the guidance is that new top level directories are for product (e.g. Chrome, Android WebView, Ash). Even if these products have multiple executables, the code should be in subdirectories of the product.

If you found a bug, please file it at https://crbug.com/new.

Description
Chromium是一个开源浏览器项目,提供了一种安全、快速、稳定的方法来体验Web。该浏览器可以在多个平台上下载,包括Mac、Windows、Linux和ChromiumOS。项目原始地址: https://chromium.googlesource.com/chromium/src.git
https://www.mobibrw.com/gitea-mirrors/chromium/src.git
Readme BSD-3-Clause 89 GiB
Languages
C++ 74.4%
Java 8.2%
Objective-C++ 4.6%
TypeScript 4%
Python 2.5%
Other 6.1%