Reviewed by Mark Rowe.
authormitz@apple.com <mitz@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 2 Oct 2008 04:54:06 +0000 (04:54 +0000)
committermitz@apple.com <mitz@apple.com@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Thu, 2 Oct 2008 04:54:06 +0000 (04:54 +0000)
commite009b32c1ab9780ea289e0228f43b831bddff777
tree802430f7608bd2028d6eccfcd3cea379d82ff547
parent8f92da198195b4311ccca62f4d7505970b4f994f
    Reviewed by Mark Rowe.

        - https://bugs.webkit.org/show_bug.cgi?id=21293
          REGRESSION: Crash beneath RenderSVGViewportContainer::viewportTransform() during SVGSVGElement destruction

        * svg/SVGMarkerElement.cpp:
        (WebCore::SVGMarkerElement::~SVGMarkerElement): Call detach() here so
        that renderer destruction happens before the SVGMarkerElement is
        destroyed.
        * svg/SVGSVGElement.cpp:
        (WebCore::SVGSVGElement::~SVGSVGElement): Ditto for SVGSVGElement.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@37180 268f45cc-cd09-0410-ab3c-d52691b4dbfc
WebCore/ChangeLog
WebCore/svg/SVGMarkerElement.cpp
WebCore/svg/SVGSVGElement.cpp