[webkit-reviews] review requested: [Bug 25096] CRASH in WebCore::appendChildToContainer : [Attachment 29362] Fix and test case

[bugzilla-daemon at webkit.org]

Eric Seidel <eric at webkit.org> has asked  for review:
Bug 25096: CRASH in WebCore::appendChildToContainer
https://bugs.webkit.org/show_bug.cgi?id=25096

Attachment 29362: Fix and test case
https://bugs.webkit.org/attachment.cgi?id=29362&action=review

------- Additional Comments from Eric Seidel <eric at webkit.org>
 LayoutTests/ChangeLog				    |	15 ++
 .../createDocument-namespace-err-expected.txt	    |	51 +++++++
 .../createDocument-namespace-err.html		    |	13 ++
 .../resources/createDocument-namespace-err.js	    |  146 ++++++++++++++++++++
 WebCore/ChangeLog				    |	14 ++
 WebCore/dom/ContainerNode.cpp			    |	 1 +
 WebCore/dom/DOMImplementation.cpp		    |	 5 +-
 7 files changed, 243 insertions(+), 2 deletions(-)