RenderSVGResourceContainer does not clear cached data on removal
authorfmalita@chromium.org <fmalita@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 26 Nov 2012 15:03:36 +0000 (15:03 +0000)
committerfmalita@chromium.org <fmalita@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Mon, 26 Nov 2012 15:03:36 +0000 (15:03 +0000)
commitf7d3cbbee74197fc8eb57224b31300d35cd6681c
treee18dd59876bdbe657869d5dd7ddc6cf386558bfd
parent6e606f396eff3a1bdabc0a824b8040c9f942e701
RenderSVGResourceContainer does not clear cached data on removal
https://bugs.webkit.org/show_bug.cgi?id=102620

Reviewed by Dirk Schulze.

Source/WebCore:

RenderSVGResourceContainer::removeClient needs to also remove the client from specialized
caches, otherwise we can end up with stale references.

Test: svg/custom/stale-resource-data-crash.svg

* rendering/svg/RenderSVGResourceContainer.cpp:
(WebCore::RenderSVGResourceContainer::removeClient):

LayoutTests:

* svg/custom/stale-resource-data-crash-expected.txt: Added.
* svg/custom/stale-resource-data-crash.svg: Added.

git-svn-id: https://svn.webkit.org/repository/webkit/trunk@135719 268f45cc-cd09-0410-ab3c-d52691b4dbfc
LayoutTests/ChangeLog
LayoutTests/svg/custom/stale-resource-data-crash-expected.txt [new file with mode: 0644]
LayoutTests/svg/custom/stale-resource-data-crash.svg [new file with mode: 0644]
Source/WebCore/ChangeLog
Source/WebCore/rendering/svg/RenderSVGResourceContainer.cpp