关键信息 漏洞类型: Heap-use-after-free (堆使用后释放) 组件: PluginPlaceholder::ReplacePlugin 优先级: P1 严重性: S2 状态: Fixed (已修复) 报告者: in...@chromium.org 报告时间: 2012-10-18 12:04 AM 详细报告链接: https://cluster-fuzz.appspot.com/testcase?key=127563910 崩溃类型: Heap-use-after-free READ 8 崩溃地址: 0x7f613f39b6b8 崩溃状态: - PluginPlaceholder::ReplacePlugin - PluginPlaceholder::LoadPlugin - WebCore::WidgetHierarchyUpdatesSuspensionScope::moveWidgets - WebCore::ContainerNode::removeChildren 回归信息链接: https://cluster-fuzz.appspot.com/revisions?range=150627:150709 测试用例下载链接: https://cluster-fuzz.appspot.com/download/AMIfv94AyPIZQcHASQudo0w0kCg7Mm7Y9RUdeu88VtViPLTtbUYo3UPJRFwISvyUdwXRF-aFC8VrVF6L9MQoh2BJ-y8YhJbcBX1oM70mxYBn_6oUJz_C7eXUdgtXQVWz7L_21XIoaYFfXZta7G1DX8vkKz0p75i9RKp2s88s69Gkoc9gGb_JDKo 附加要求: 需要交互手势