← Back to team overview

ubuntu-webapps-bugs team mailing list archive

[Bug 1510963] Re: Potential UAF when deleting a webview that's displaying fullscreen Flash content

 

** Changed in: oxide
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
WebApps bug tracking, which is subscribed to Oxide.
https://bugs.launchpad.net/bugs/1510963

Title:
  Potential UAF when deleting a webview that's displaying fullscreen
  Flash content

Status in Oxide:
  Fix Released

Bug description:
  If a webview that is displaying fullscreen Flash content is deleted,
  we don't correctly null out the |container_| pointer on RWHV, which
  could result in a use-after-free

To manage notifications about this bug go to:
https://bugs.launchpad.net/oxide/+bug/1510963/+subscriptions


References