2009-03-03  Scott Violet  <sky@google.com>

        Reviewed by Eric Seidel.

        https://bugs.webkit.org/show_bug.cgi?id=24325
        Crash on replacing document contents during drop.

        Makes sure a node is in the document during a move before using it.

        Test: fast/events/crash-on-mutate-during-drop.html

        * editing/MoveSelectionCommand.cpp:
        (WebCore::MoveSelectionCommand::doApply):

LayoutTests:

2009-03-03  Scott Violet  <sky@google.com>

        Reviewed by Eric Seidel.

        https://bugs.webkit.org/show_bug.cgi?id=24325
        Crash on replacing document contents during drop

        Makes sure we don't crash during dnd with DOM mutation event listener
        that mutates the document on drop.

        * fast/events/crash-on-mutate-during-drop-expected.txt: Added.
        * fast/events/crash-on-mutate-during-drop.html: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@41403 268f45cc-cd09-0410-ab3c-d52691b4dbfc