Comment #1 on issue 25490 by [email protected]: Crash in  
SelectFileDialogImpl::OnSelectSingleFileDialogResponse
http://code.google.com/p/chromium/issues/detail?id=25490

the code is

void SelectFileDialogImpl::OnSelectSingleFileDialogResponse(
     GtkWidget* dialog, gint response_id,
     SelectFileDialogImpl* dialog_impl) {
   if (IsCancelResponse(response_id)) {
     dialog_impl->FileNotSelected(dialog);
     return;
   }

   gchar* filename = gtk_file_chooser_get_filename(GTK_FILE_CHOOSER(dialog));
   dialog_impl->FileSelected(dialog, FilePath(filename));
}

we are crashing on the last line. If gtk_file_chooser_get_filename()  
returned NULL we
wouldn't crash, we'd just have an empty FilePath. I don't think dialog_impl  
can
possibly be invalid when we get called back since the SelectFileDialogImpl  
destructor
destroys all dialogs it's managing, so we wouldn't be called back after  
destruction.
So it seems most likely that |filename| is garbage, and libstdc++ crashes  
while
trying to find the null char at the end of it. Really have no clue how that  
could
happen though.

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to