-
rdar://problem/9755843mitz@apple.com authored
<rdar://problem/9755843> anonymous RenderMathMLOperator sets itself as the renderer of its parent mfenced node Reviewed by Darin Adler. Source/WebCore: Test: mathml/operator-hijacks-fenced-node.xhtml * rendering/mathml/RenderMathMLOperator.cpp: (WebCore::RenderMathMLOperator::updateFromElement): Rather than unconditionally setting the node’s renderer to this, just restore it to whatever it was before calling destroyLeftoverChildren(). LayoutTests: * mathml/operator-hijacks-fenced-node-expected.txt: Added. * mathml/operator-hijacks-fenced-node.xhtml: Added. git-svn-id: http://svn.webkit.org/repository/webkit/trunk@94455 268f45cc-cd09-0410-ab3c-d52691b4dbfc
7fa6645c