-
inferno@chromium.org authored
Reviewed by Simon Fraser. Null out the parent stylesheet pointer when a css rule is removed. https://bugs.webkit.org/show_bug.cgi?id=51993 Tests: fast/dom/StyleSheet/removed-media-rule-deleted-parent-crash.html fast/dom/StyleSheet/removed-stylesheet-rule-deleted-parent-crash.html * css/CSSRuleList.cpp: (WebCore::CSSRuleList::deleteRule): * css/CSSStyleSheet.cpp: (WebCore::CSSStyleSheet::deleteRule): 2011-01-06 Abhishek Arya <inferno@chromium.org> Reviewed by Simon Fraser. Tests that we do not crash when accessing a deleted parent stylesheet from a removed css rule. https://bugs.webkit.org/show_bug.cgi?id=51993 * fast/dom/StyleSheet/removed-media-rule-deleted-parent-crash-expected.txt: Added. * fast/dom/StyleSheet/removed-media-rule-deleted-parent-crash.html: Added. * fast/dom/StyleSheet/removed-stylesheet-rule-deleted-parent-crash-expected.txt: Added. * fast/dom/StyleSheet/removed-stylesheet-rule-deleted-parent-crash.html: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@75168 268f45cc-cd09-0410-ab3c-d52691b4dbfc
c8367559