Missing m_registeredAsCandidate = false.

Source/core/dom/StyleElement.cpp

 /*
  * Copyright (C) 2006, 2007 Rob Buis
  * Copyright (C) 2008 Apple, Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 100 matching lines @@
 }
 
 void StyleElement::clearDocumentData(Document& document, Element* element)
 {
     if (m_sheet)
         m_sheet->clearOwnerNode();
 
     if (m_registeredAsCandidate) {
         ASSERT(element->inDocument());
         document.styleEngine().removeStyleSheetCandidateNode(element, element->treeScope());
+        m_registeredAsCandidate = false;
     }
 }
 
 StyleElement::ProcessingResult StyleElement::childrenChanged(Element* element)
 {
     ASSERT(element);
     if (m_createdByParser)
         return ProcessingSuccessful;
 
     return process(element);
@@ skipping 95 matching lines @@
 {
     document.styleEngine().addPendingSheet();
 }
 
 DEFINE_TRACE(StyleElement)
 {
     visitor->trace(m_sheet);
 }
 
 }