[webkit-reviews] review requested: [Bug 19762] Crash in svg/webarchive/svg-cursor-subresources.svg : [Attachment 21958] First attempt

[bugzilla-daemon at webkit.org]

Rob Buis <rwlbuis at gmail.com> has asked	for review:
Bug 19762: Crash in svg/webarchive/svg-cursor-subresources.svg
https://bugs.webkit.org/show_bug.cgi?id=19762

Attachment 21958: First attempt
https://bugs.webkit.org/attachment.cgi?id=21958&action=edit

------- Additional Comments from Rob Buis <rwlbuis at gmail.com>
The problem was that CSSCursorImageValue used getElementById to lookup the
stored ids, but the
element pointed to by the id could be already removed from the document. I
think this only happens
during GC calls, using removeChild API does remove the element from the id
cache in the document.
Cheers,

Rob.