Comment #12 on issue 25826 by [email protected]: Crash -
net::GrowableIOBuffer::set_capacity(int)
http://code.google.com/p/chromium/issues/detail?id=25826
The following revision refers to this bug:
http://src.chromium.org/viewvc/chrome?view=rev&revision=33036
------------------------------------------------------------------------
r33036 | [email protected] | 2009-11-24 18:10:51 -0800 (Tue, 24 Nov 2009)
| 11 lines
Changed paths:
M
http://src.chromium.org/viewvc/chrome/branches/249/src/net/base/io_buffer.cc?r1=33036&r2=33035
M
http://src.chromium.org/viewvc/chrome/branches/249/src/net/http/http_network_transaction_unittest.cc?r1=33036&r2=33035
M
http://src.chromium.org/viewvc/chrome/branches/249/src/net/http/http_stream.h?r1=33036&r2=33035
M
http://src.chromium.org/viewvc/chrome/branches/249/src/net/http/http_stream_parser.cc?r1=33036&r2=33035
Recommit this change - follow up merge will fix the issue detected on trunk
with it.
Merge 32856 - A large ContentLength header followed by a connection close
could trigger an out of memory condition. Fixed problem, added unit test,
and clarified the API. This is probably the real problem in issue 25826.
BUG=28346, 25826
TEST=HttpNetworkTransactionTest.LargeContentLengthThenReset
Review URL: http://codereview.chromium.org/418035
------------------------------------------------------------------------
--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings
--
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
