Skip to content

Conversation

@nornagon
Copy link
Contributor

@nornagon nornagon commented Apr 2, 2020

Protect automatic pull handlers with Mutex

In some cases, |rendering_automatic_pull_handlers_| in
DeferredTaskHandler can be touched from both the main thread and the
audio rendering thread. This CL adds a lock when it is updated,
processed, and cleared.

crash on the repro case after 30 min.

Test: Locally confirmed that the ASAN build with this patch does not
Bug: 1061018
Change-Id: I5f4440edcdc26e4a3afbfe8fad88492bdb49c323
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2101712
Commit-Queue: Hongchan Choi hongchan@chromium.org
Reviewed-by: Raymond Toy rtoy@chromium.org
Cr-Commit-Position: refs/heads/master@{#750000}

Notes: Security: backport fix for CVE-2020-6451: Use after free in WebAudio

@nornagon nornagon requested a review from a team as a code owner April 2, 2020 23:17
@nornagon nornagon added the 7-2-x label Apr 2, 2020
@electron-cation electron-cation bot added the new-pr 🌱 PR opened recently label Apr 2, 2020
@nornagon nornagon added the backport-check-skip Skip trop's backport validity checking label Apr 3, 2020
@electron-cation electron-cation bot removed the new-pr 🌱 PR opened recently label Apr 3, 2020
@nornagon nornagon force-pushed the cherry-pick/7-2-x/chromium/b5950ad76471 branch from 96e9747 to 1db534f Compare April 6, 2020 18:51
@nornagon nornagon merged commit 72a7588 into 7-2-x Apr 7, 2020
@release-clerk
Copy link

release-clerk bot commented Apr 7, 2020

Release Notes Persisted

Security: backport fix for CVE-2020-6451: Use after free in WebAudio

@nornagon nornagon deleted the cherry-pick/7-2-x/chromium/b5950ad76471 branch April 7, 2020 18:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

7-2-x backport-check-skip Skip trop's backport validity checking

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants