Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick 42e15c2055c4 from chromium #36576

Merged
merged 4 commits into from
Dec 11, 2022

Conversation

ppontes
Copy link
Member

@ppontes ppontes commented Dec 6, 2022

Avoid use-after-free in ValidationMessageOverlayDelegate

When ValidationMessageOverlayDelegate calls
ForceSynchronousDocumentInstall, it can somehow cause another validation
overlay to be created and delete the ValidationMessageOverlayDelegate.
This patch avoids additional code from being run inside the deleted
ValidationMessageOverlayDelegate.

(cherry picked from commit a37b66ded21af7ff1442bddd2ec3a0845535b3d6)

Fixed: 1382581
Change-Id: I044f91ecb55c77c4a5c40030b6856fc9a8ac7f6f
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4019655
Reviewed-by: David Baron dbaron@chromium.org
Commit-Queue: Joey Arhar jarhar@chromium.org
Cr-Original-Commit-Position: refs/heads/main@{#1071652}
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/4043489
Commit-Queue: David Baron dbaron@chromium.org
Auto-Submit: Joey Arhar jarhar@chromium.org
Cr-Commit-Position: refs/branch-heads/5359@{#911}
Cr-Branched-From: 27d3765d341b09369006d030f83f582a29eb57ae-refs/heads/main@{#1058933}

Ref electron/security#249

Notes: Security: backported fix for CVE-2022-4181.

@ppontes ppontes requested review from a team as code owners December 6, 2022 16:16
@ppontes ppontes added 21-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes labels Dec 6, 2022
@MarshallOfSound MarshallOfSound merged commit 0d75377 into 21-x-y Dec 11, 2022
@MarshallOfSound MarshallOfSound deleted the cherry-pick/21-x-y/chromium/42e15c2055c4 branch December 11, 2022 09:22
@release-clerk
Copy link

release-clerk bot commented Dec 11, 2022

Release Notes Persisted

Security: backported fix for CVE-2022-4181.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
21-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants