Commit 6a6cd20a authored by Sergei Glazunov's avatar Sergei Glazunov Committed by Chromium LUCI CQ

Exclude BigEndianWriter::end_ from rewrite_raw_ptr_fields

This field points past the end of an allocation; therefore, it can
refer to an invalid allocation slot, which will lead to a crash in
the CheckedPtr constructor.

Bug: 1158039
Change-Id: Iaa141a51e680994a4c6bc9aabb6039621424706b
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2611704
Auto-Submit: Sergei Glazunov <glazunov@google.com>
Reviewed-by: default avatarDaniel Cheng <dcheng@chromium.org>
Commit-Queue: Daniel Cheng <dcheng@chromium.org>
Cr-Commit-Position: refs/heads/master@{#840290}
parent f23d5be3
...@@ -128,6 +128,10 @@ views::internal::ClassPropertyValueSetter::property_ # passed to templated para ...@@ -128,6 +128,10 @@ views::internal::ClassPropertyValueSetter::property_ # passed to templated para
(anonymous namespace)::ScopedFunctionHelper::function_ # function pointer template (anonymous namespace)::ScopedFunctionHelper::function_ # function pointer template
KeyedServiceBaseFactory::service_name_ # used in decltype KeyedServiceBaseFactory::service_name_ # used in decltype
# Populated manually - this field points past the end of an allocation;
# therefore, it can refer to an invalid allocation slot
base::BigEndianWriter::end_
####### #######
# CheckedPtr2/MTECheckedPtr-specific sections # CheckedPtr2/MTECheckedPtr-specific sections
####### #######
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment