[webkit-reviews] review requested: [Bug 9787] fast/frames tests failing (bad pointer to owner element) under MallocScribble : [Attachment 9277] Patch

[bugzilla-request-daemon at opendarwin.org]

Anders Carlsson <andersca at mac.com> has asked  for review:
Bug 9787: fast/frames tests failing (bad pointer to owner element) under
MallocScribble
http://bugzilla.opendarwin.org/show_bug.cgi?id=9787

Attachment 9277: Patch
http://bugzilla.opendarwin.org/attachment.cgi?id=9277&action=edit

------- Additional Comments from Anders Carlsson <andersca at mac.com>
I reworked things a bit so that RenderPart doesn't have to know about the
frame. Instead, the elements reset the owner element in ::detach.

With this patch I can't reproduce the crash.