-
mitz@apple.com authored
Reviewed by Sam Weinig. - fix https://bugs.webkit.org/show_bug.cgi?id=18879 <rdar://problem/5909481> Reproducible crash when removing a gradient Test: fast/gradients/crash-on-remove.html * css/CSSImageGeneratorValue.cpp: (WebCore::CSSImageGeneratorValue::CSSImageGeneratorValue): (WebCore::CSSImageGeneratorValue::addClient): Added a call to ref() the value. (WebCore::CSSImageGeneratorValue::removeClient): Added code to deref() the value. LayoutTests: Reviewed by Sam Weinig. - test for https://bugs.webkit.org/show_bug.cgi?id=18879 <rdar://problem/5909481> Reproducible crash when removing a gradient * fast/gradients/crash-on-remove-expected.txt: Added. * fast/gradients/crash-on-remove.html: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@32854 268f45cc-cd09-0410-ab3c-d52691b4dbfc
780300f4