-
aroben@apple.com authored
WebCore: Fix Bug 17876: REGRESSION (r31060): Attempting to visit Ofcom page causes crash <http://bugs.webkit.org/show_bug.cgi?id=17876> Reviewed by John. Test: fast/dom/remove-named-attribute-crash.html * dom/NamedAttrMap.cpp: (WebCore::NamedAttrMap::removeAttribute): Store the Attribute we're going to remove from the m_attributes Vector in a RefPtr so it doesn't get deleted when it is removed from the Vector. LayoutTests: Test for Bug 17876: REGRESSION (r31060): Attempting to visit Ofcom page causes crash <http://bugs.webkit.org/show_bug.cgi?id=17876> Reviewed by John. * fast/dom/remove-named-attribute-crash-expected.txt: Added. * fast/dom/remove-named-attribute-crash.html: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@31095 268f45cc-cd09-0410-ab3c-d52691b4dbfc
1638ef9a