• inferno@chromium.org's avatar
    Removed m_owner accessed in custom scrollbars. · 2cc6f339
    inferno@chromium.org authored
    https://bugs.webkit.org/show_bug.cgi?id=64737
    
    Reviewed by David Hyatt.
    
    Problem does not reproduce in DRT, even with Eventhandler tricks
    and gc(). So, adding a manual test.
    
    * manual-tests/custom-scrollbar-renderer-removed-crash.html: Added.
    * page/FrameView.cpp:
    (WebCore::FrameView::clearOwningRendererForCustomScrollbars):
    * page/FrameView.h:
    * rendering/RenderBox.cpp:
    (WebCore::RenderBox::willBeDestroyed): when this renderbox is getting
    destroyed, clear the custom scrollbar in this frameview having this renderbox
    as its owning renderer.
    * rendering/RenderScrollbar.cpp:
    (WebCore::RenderScrollbar::getScrollbarPseudoStyle): fix the null check.
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@94107 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    2cc6f339