## Key Vulnerability Information ### Basic Information - **Type**: Vulnerability - **Priority**: P1 - **Severity**: S1 - **Status**: Fixed - **Component Tags**: Blink ### Description - This issue was discovered while attempting to fix [https://crbug.com/chromium/39985](https://crbug.com/chromium/39985). - Upstream submission: [https://bugs.webkit.org/show_bug.cgi?id=39388](https://bugs.webkit.org/show_bug.cgi?id=39388). ### Fix Information - **Revision**: [http://src.chromium.org/viewvc/chrome?view=rev&revision=48114](http://src.chromium.org/viewvc/chrome?view=rev&revision=48114) - **Modified Files**: - [http://src.chromium.org/viewvc/chrome/branches/WebKit/375/LayoutTests/fast/dom/Geolocation/notimer-after-unload-expected.txt](http://src.chromium.org/viewvc/chrome/branches/WebKit/375/LayoutTests/fast/dom/Geolocation/notimer-after-unload-expected.txt) - [http://src.chromium.org/viewvc/chrome/branches/WebKit/375/LayoutTests/fast/dom/Geolocation/notimer-after-unload.html](http://src.chromium.org/viewvc/chrome/branches/WebKit/375/LayoutTests/fast/dom/Geolocation/notimer-after-unload.html) - [http://src.chromium.org/viewvc/chrome/branches/WebKit/375/LayoutTests/fast/dom/Geolocation/resources/notimer-after-unload.js](http://src.chromium.org/viewvc/chrome/branches/WebKit/375/LayoutTests/fast/dom/Geolocation/resources/notimer-after-unload.js) - [http://src.chromium.org/viewvc/chrome/branches/WebKit/375/WebCore/ChangeLog?r1=48114&r2=48113](http://src.chromium.org/viewvc/chrome/branches/WebKit/375/WebCore/ChangeLog?r1=48114&r2=48113) - [http://src.chromium.org/viewvc/chrome/branches/WebKit/375/WebCore/page/Geolocation.cpp?r1=48114&r2=48113](http://src.chromium.org/viewvc/chrome/branches/WebKit/375/WebCore/page/Geolocation.cpp?r1=48114&r2=48113) ### Notes - Ensure the timer is stopped in `Geolocation::disconnectFrame()`. - Merged 59859 - 20100520, reviewed by Marcus Bulach ().