DescriptionClear link element sheet before clearing ownerNode.
clearOwnerNode synchronously updates the list of active stylesheets, and
if the m_sheet member of HTMLLinkElement is set, it is considered to be
an active stylesheet. If it is later added to the StyleResolver, it will
crash when ownerNode and ownerDocument are null.
This was already fixed a long time ago for StyleElement in [1].
[1] https://codereview.chromium.org/13508006
R=dstockwell@chromium.org
BUG=426959
Committed: https://crrev.com/c22d69c2cf412a27f10419bef5c246236b87d70c
Cr-Commit-Position: refs/heads/master@{#361867}
Patch Set 1 #
Messages
Total messages: 12 (5 generated)
|