[webkit-dev] RenderListItem::resetMarkerValue

[Steven Fisher]

I've had a couple crashes in the nightly by  
RenderListItem::resetMarkerValue. It looks like it was changed  
yesterday. I've never seen this before today, so I think it might  
have just been introduced.

Exception:  EXC_BAD_ACCESS (0x0001)
Codes:      KERN_PROTECTION_FAILURE (0x0002) at 0x0000009c

Thread 0 Crashed:
0   com.apple.WebCore              	0x01255d4c  
WebCore::RenderListItem::resetMarkerValue() + 8
1   com.apple.WebCore              	0x012371f0  
WebCore::updateListMarkerNumbers(WebCore::RenderObject*) + 68
2   com.apple.WebCore              	0x01237e18  
WebCore::RenderContainer::removeChildNode(WebCore::RenderObject*) + 200
3   com.apple.WebCore              	0x01226e40  
WebCore::RenderBlock::removeChild(WebCore::RenderObject*) + 624
4   com.apple.WebCore              	0x0125d5dc  
WebCore::RenderObject::remove() + 84
5   com.apple.WebCore              	0x0125d634  
WebCore::RenderObject::destroy() + 24
6   com.apple.WebCore              	0x0122ceb8  
WebCore::RenderBox::destroy() + 64
7   com.apple.WebCore              	0x011a404c  
WebCore::NodeImpl::detach() + 160
8   com.apple.WebCore              	0x011a7fb4  
WebCore::ContainerNodeImpl::detach() + 56
9   com.apple.WebCore              	0x011a7fb4  
WebCore::ContainerNodeImpl::detach() + 56
10  com.apple.WebCore              	0x011a95bc  
WebCore::ContainerNodeImpl::removeChildren() + 112
11  com.apple.WebCore              	0x01092164  
WebCore::HTMLElementImpl::setInnerHTML(WebCore::DOMString const&,  
int&) + 56

If you  need more information I can try to write up a report  
tomorrow, but since it seems to be a regression I thought I'd say  
something here immediately.