[webkit-reviews] review requested: [Bug 102183] REGRESSION(r134495): It made svg/custom/use-instanceRoot-event-listeners.xhtml fail and fast/events/attribute-listener-deletion-crash.html timeout : [Attachment 174248] A more appropriate fix.

[bugzilla-daemon at webkit.org]

Mark Lam <mark.lam at apple.com> has asked  for review:
Bug 102183: REGRESSION(r134495): It made
svg/custom/use-instanceRoot-event-listeners.xhtml fail and
fast/events/attribute-listener-deletion-crash.html timeout
https://bugs.webkit.org/show_bug.cgi?id=102183

Attachment 174248: A more appropriate fix.
https://bugs.webkit.org/attachment.cgi?id=174248&action=review

------- Additional Comments from Mark Lam <mark.lam at apple.com>
This patch has a more appropriate fix that conforms to the contract that when
JSEventListener::m_wrapper is 0, we expect JSEventListener::m_jsFunction to be
0.