angler-fishThe Vulnerability History Project

Fix UAF in WebSocketDispatcherHost

      If Send() fails in SendOrDrop(), then |message| will have been deleted,
but SendOrDrop() will still try to access its header fields.

Fixed.

BUG=338354
TEST=content_unittests

Review URL: https://codereview.chromium.org/148263009

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@247627 0039d316-1c4b-4281-b951-d872f2087c98
    
commit 09b09312b9847e025249b9ba5bb2071dd77a19c3
+2 -5
expand_less