When style changes, set the LayoutObject as a client for all StyleImage loads.

third_party/WebKit/Source/core/layout/LayoutListItem.cpp

 /**
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  * Copyright (C) 2003, 2004, 2005, 2006, 2010 Apple Inc. All rights reserved.
  * Copyright (C) 2006 Andrew Wellington (proton@wiretapped.net)
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
@@ skipping 45 matching lines @@
     if (style()->listStyleType() != NoneListStyle
         || (style()->listStyleImage() && !style()->listStyleImage()->errorOccurred())) {
         if (!m_marker)
             m_marker = LayoutListMarker::createAnonymous(this);
         m_marker->listItemStyleDidChange();
         notifyOfSubtreeChange();
     } else if (m_marker) {
         m_marker->destroy();
         m_marker = nullptr;
     }
+
+    StyleImage* oldImage = oldStyle ? oldStyle->listStyleImage() : nullptr;
+    if (oldImage != style()->listStyleImage()) {
+        if (oldImage)
+            oldImage->removeClient(this);
+        if (style()->listStyleImage())
+            style()->listStyleImage()->addClient(this);
+    }
 }
 
 void LayoutListItem::willBeDestroyed()
 {
     if (m_marker) {
         m_marker->destroy();
         m_marker = nullptr;
     }
+
     LayoutBlockFlow::willBeDestroyed();
+
+    if (style() && style()->listStyleImage())
+        style()->listStyleImage()->removeClient(this);
 }
 
 void LayoutListItem::insertedIntoTree()
 {
     LayoutBlockFlow::insertedIntoTree();
 
     updateListMarkerNumbers();
 }
 
 void LayoutListItem::willBeRemovedFromTree()
@@ skipping 413 matching lines @@
             // assume that all the following ones have too.
             // This gives us the opportunity to stop here and avoid
             // marking the same nodes again.
             break;
         }
         item->updateValue();
     }
 }
 
 } // namespace blink