0ct0pu5/ladybird
1
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2024-12-12 09:20:36 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

Tests: Fix use-after-free in TestRefPtr.self_observers

Browse source 
We can't unref an object to destruction while there's still a live
RefPtr to the object, otherwise the RefPtr destructor will try to
destroy it again, accessing the refcount of a destroyed object (before
realizing that oops! the object is already dead)
This commit is contained in:
Andrew Kaster 2021-05-12 04:46:16 -06:00 committed by Linus Groh
parent 28987d1b56
commit 09fe9f4542
Notes: sideshowbarker 2024-07-18 18:11:23 +09:00 
Author: https://github.com/ADKaster
Commit: https://github.com/SerenityOS/serenity/commit/09fe9f4542b
Pull-request: https://github.com/SerenityOS/serenity/pull/7060
Issue: https://github.com/SerenityOS/serenity/issues/4592
1 changed files with 14 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
Tests/AK/TestRefPtr.cpp
View file

@ -128,6 +128,7 @@ TEST_CASE(assign_copy_self)
}
TEST_CASE(self_observers)
{
{
RefPtr<SelfAwareObject> object = adopt_ref(*new SelfAwareObject);
EXPECT_EQ(object->ref_count(), 1u);
@ -143,8 +144,7 @@ TEST_CASE(self_observers)
EXPECT_EQ(object->ref_count(), 1u);
EXPECT_EQ(object->m_has_one_ref_left, true);
EXPECT_EQ(SelfAwareObject::num_destroyed, 0u);
object->unref();
}
EXPECT_EQ(SelfAwareObject::num_destroyed, 1u);
}