luci-bi...@appspot.gserviceaccount.com would like Chromium LUCI CQ, Keren Zhu, Avi Drissman and Bryan Oltman to review this change.
Revert "[macOS] Make modal sheet presentation asynchronous to prevent UAF bugs"
This reverts commit 90309b0d2c7d8f975a2e3cc672d3e59b3e19947e.
Reason for revert:
LUCI Bisection has identified this change as the cause of a test failure. See the analysis: https://ci.chromium.org/ui/p/chromium/bisection/test-analysis/b/5250851556818944
Sample build with failed test: https://ci.chromium.org/b/8676059972782943729
Affected test(s):
[://chrome/test\:browser_tests!gtest::BookmarkAccountStorageMoveDialogPixelTest#InvokeUi_ShowMoveBookmarkToAccount](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:browser_tests%21gtest::BookmarkAccountStorageMoveDialogPixelTest%23InvokeUi_ShowMoveBookmarkToAccount?q=VHash%3A812306a38c719b85)
[://chrome/test\:browser_tests!gtest::BookmarkAccountStorageMoveDialogPixelTest#InvokeUi_ShowMoveFolderToAccount](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:browser_tests%21gtest::BookmarkAccountStorageMoveDialogPixelTest%23InvokeUi_ShowMoveFolderToAccount?q=VHash%3A812306a38c719b85)
[://chrome/test\:browser_tests!gtest::ExtensionInstallBlockedByParentDialogTest#InvokeUi_app](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:browser_tests%21gtest::ExtensionInstallBlockedByParentDialogTest%23InvokeUi_app?q=VHash%3A812306a38c719b85)
[://chrome/test\:browser_tests!gtest::ExtensionInstallBlockedByParentDialogTest#InvokeUi_extension](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:browser_tests%21gtest::ExtensionInstallBlockedByParentDialogTest%23InvokeUi_extension?q=VHash%3A812306a38c719b85)
[://chrome/test\:browser_tests!gtest::SettingsOverriddenDialogBrowserTest#InvokeUi_SimpleDialog](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:browser_tests%21gtest::SettingsOverriddenDialogBrowserTest%23InvokeUi_SimpleDialog?q=VHash%3A812306a38c719b85)
and 14 more ...
If this is a false positive, please report it at http://b.corp.google.com/createIssue?component=1199205&description=Analysis%3A+https%3A%2F%2Fci.chromium.org%2Fui%2Fp%2Fchromium%2Fbisection%2Ftest-analysis%2Fb%2F5250851556818944&format=PLAIN&priority=P3&title=Wrongly+blamed+https%3A%2F%2Fchromium-review.googlesource.com%2Fc%2Fchromium%2Fsrc%2F%2B%2F8086464&type=BUG
Original change's description:
> [macOS] Make modal sheet presentation asynchronous to prevent UAF bugs
>
> Modal sheet animations run a nested run loop synchronously in AppKit.
> During this loop, the main thread remains active, allowing the parent or
> child widget to be closed and its C++ bridge synchronously destroyed.
> This leads to Use-After-Free (UAF) bugs when the nested loop exits and
> execution resumes in the member functions of the deleted bridge.
>
> This CL runs modal sheet presentations asynchronously to prevent UAF:
> - Always post the sheet animation task to the message loop (previously
> only done for remote cocoa).
> - Add the SetVisibilityStateBridgeDestruction regression test.
>
> This CL also removes a weak pointer check in
> FullscreenControllerTransitionComplete that is no longer necessary now
> that the modal sheet presentation is asynchronous.
>
> Include-Ci-Only-Tests: true
> Fixed: 518006007,502109333,502101200
> Change-Id: I9a911b80d087f79920cbd944af854dbf82c6f6ae
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8086464
> Commit-Queue: Bryan Oltman <bryan...@google.com>
> Reviewed-by: Keren Zhu <kere...@chromium.org>
> Cr-Commit-Position: refs/heads/main@{#1663648}
>
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
LUCI Bisection could not automatically submit this revert because LUCI Bisection has not yet support auto-commit of revert CL for test failure.
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
| Bot-Commit | +1 |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
| Commit-Queue | +2 |
| Owners-Override | +1 |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |