Rolling out r187463, because it caused memory corruption on multiple tests.
authorap@apple.com <ap@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 28 Jul 2015 16:29:44 +0000 (16:29 +0000)
committerap@apple.com <ap@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 28 Jul 2015 16:29:44 +0000 (16:29 +0000)
commitdb5d82c556b8c96fd380f932dee746c4b4b13be0
tree7928536aaaf97bf24032163b76f4e2f52aea9bad
parent9446d901760aa4b30296eee85bc4d3b3fafa4803
Rolling out r187463, because it caused memory corruption on multiple tests.

Original bug:
Crash happens when calling removeEventListener for an SVG element which has an instance inside a <defs> element of shadow tree
https://bugs.webkit.org/show_bug.cgi?id=147290

* svg/custom/remove-event-listener-shadow-disallowed-element-expected.txt: Removed.
* svg/custom/remove-event-listener-shadow-disallowed-element.svg: Removed.
Source/WebCore:

* svg/SVGUseElement.cpp:
(WebCore::removeDisallowedElementsFromSubtree):
(WebCore::associateClonesWithOriginals):

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@187486 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/svg/custom/remove-event-listener-shadow-disallowed-element-expected.txt [deleted file]
LayoutTests/svg/custom/remove-event-listener-shadow-disallowed-element.svg [deleted file]
Source/WebCore/ChangeLog
Source/WebCore/svg/SVGUseElement.cpp