Merge 134377 - Crash when replacing parts of text inputs with content: url(...)

Source/WebCore/html/TextFieldInputType.cpp

Index: Source/WebCore/html/TextFieldInputType.cpp
===================================================================
--- Source/WebCore/html/TextFieldInputType.cpp	(revision 134456)
+++ Source/WebCore/html/TextFieldInputType.cpp	(working copy)
@@ -425,6 +425,9 @@
 void TextFieldInputType::attach()
 {
     InputType::attach();
+    // If container exists, the container should not have any content data.
+    ASSERT(!m_container || !m_container->renderStyle() || !m_container->renderStyle()->hasContent());
+
     element()->fixPlaceholderRenderer(m_placeholder.get(), m_container ? m_container.get() : m_innerText.get());
 }