Commit 5396c974 authored by aroben@apple.com's avatar aroben@apple.com

Fix a crash in RenderWidget::destroy when navigating away from a page with an <iframe>

        This was a regression caused by r40679

        Reviewed by Dave Hyatt.

        Tested by many many tests.

        * rendering/RenderWidget.cpp:
        (WebCore::RenderWidget::destroy): Only deref the RenderWidget after we
        finish accessing its members.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@40709 268f45cc-cd09-0410-ab3c-d52691b4dbfc
parent 559b4629
2009-02-05 Adam Roben <aroben@apple.com>
Fix a crash in RenderWidget::destroy when navigating away from a page
with an <iframe>
This was a regression caused by r40679
Reviewed by Dave Hyatt.
Tested by many many tests.
* rendering/RenderWidget.cpp:
(WebCore::RenderWidget::destroy): Only deref the RenderWidget after we
finish accessing its members.
2009-02-05 Simon Fraser <simon.fraser@apple.com>
Reviewed by Anders Carlsson
......@@ -100,10 +100,11 @@ void RenderWidget::destroy()
RenderBlock::removePercentHeightDescendant(this);
setNode(0);
deref(arena);
if (hasLayer())
layer()->destroy(arena);
deref(arena);
}
RenderWidget::~RenderWidget()
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment