| Index: third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp
|
| diff --git a/third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp b/third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp
|
| index 0f3d57d9727e351aa96330fcabdc8b0eb067d513..afcc99393165bc0c9899aa7de42e4217a486a3f7 100644
|
| --- a/third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp
|
| +++ b/third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp
|
| @@ -273,7 +273,7 @@ void EventHandlerRegistry::documentDetached(Document& document)
|
| const EventTargetSet* targets = &m_targets[handlerClass];
|
| for (const auto& eventTarget : *targets) {
|
| if (Node* node = eventTarget.key->toNode()) {
|
| - for (Document* doc = &node->document(); doc; doc = doc->ownerElement() ? &doc->ownerElement()->document() : 0) {
|
| + for (Document* doc = &node->document(); doc; doc = doc->localOwnerElement() ? &doc->localOwnerElement()->document() : 0) {
|
| if (doc == &document) {
|
| targetsToRemove.append(eventTarget.key);
|
| break;
|
|
|