Issue 3457: Crash in DownloadManager::Shutdown
http://code.google.com/p/chromium/issues/detail?id=3457
New issue report by [EMAIL PROTECTED]:
I came across this when doing some testing.
DownloadManager::Shutdown has the following code:
for (std::set<DownloadItem*>::const_iterator rm_it = to_remove.begin();
rm_it != to_remove.end(); ++rm_it) {
DownloadItem* download = *rm_it;
download->Remove(true);
// Same as above, delete the download if it is not in 'downloads_'.
if (download->db_handle() == kUninitializedHandle)
delete download;
}
Invoking Remove deletes 'download', so that the if is going to be
referencing a deleted object and we'll crash.
Issue attributes:
Status: Untriaged
Owner: [EMAIL PROTECTED]
Labels: Type-Bug Pri-1 OS-All Area-BrowserUI
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Chromium-bugs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/chromium-bugs?hl=en
-~----------~----~----~----~------~----~------~--~---
