[webkit-reviews] review requested: [Bug 16163] SVG crash in Node::setChanged() on Debug builds only (trashed parent) : [Attachment 17806] First attempt

[bugzilla-daemon at webkit.org]

Rob Buis <rwlbuis at gmail.com> has asked	for review:
Bug 16163: SVG crash in Node::setChanged() on Debug builds only (trashed
parent)
http://bugs.webkit.org/show_bug.cgi?id=16163

Attachment 17806: First attempt
http://bugs.webkit.org/attachment.cgi?id=17806&action=edit

------- Additional Comments from Rob Buis <rwlbuis at gmail.com>
This should fix it. I am not sure if the SVGResource::removeClient in
SVGStyledElement::detach was expected to be called, but apparently when detach
is called from ~Node the SVGStyledElement object does not exist so its detach
can't be called. Let me know whether the testcase reduction needs more
changes...
Cheers,

Rob.