From d8dd893d690e9d208fe4a71b7d62374687d279f4 Mon Sep 17 00:00:00 2001 From: Steve Block Date: Thu, 9 Sep 2010 11:53:31 +0100 Subject: Cherry-pick security fix in WebKit change 62271 See http://trac.webkit.org/changeset/62271 Bug: 2986936 Change-Id: I368b10ff368aef5317c01b18524f1e0521df056e --- WebCore/rendering/RenderWidget.cpp | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/WebCore/rendering/RenderWidget.cpp b/WebCore/rendering/RenderWidget.cpp index f6f6da8..6f93790 100644 --- a/WebCore/rendering/RenderWidget.cpp +++ b/WebCore/rendering/RenderWidget.cpp @@ -27,6 +27,7 @@ #include "AnimationController.h" #include "GraphicsContext.h" #include "HitTestResult.h" +#include "RenderCounter.h" #include "RenderView.h" #include "RenderWidgetProtector.h" @@ -114,6 +115,9 @@ void RenderWidget::destroy() if (RenderView* v = view()) v->removeWidget(this); + if (m_hasCounterNodeMap) + RenderCounter::destroyCounterNodes(this); + if (AXObjectCache::accessibilityEnabled()) { document()->axObjectCache()->childrenChanged(this->parent()); document()->axObjectCache()->remove(this); -- cgit v1.1