| Index: third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp
|
| diff --git a/third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp b/third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp
|
| index 2ec5dbe5079dbff768689ae17f3948f8a0045cb6..e5246f9fc850d7d7d5d0b1dff88ad3d758d61d5c 100644
|
| --- a/third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp
|
| +++ b/third_party/WebKit/Source/core/frame/EventHandlerRegistry.cpp
|
| @@ -273,7 +273,7 @@ void EventHandlerRegistry::documentDetached(Document& document)
|
| const EventTargetSet* targets = &m_targets[handlerClass];
|
| for (const auto& eventTarget : *targets) {
|
| if (Node* node = eventTarget.key->toNode()) {
|
| - for (Document* doc = &node->document(); doc; doc = doc->ownerElement() ? &doc->ownerElement()->document() : 0) {
|
| + for (Document* doc = &node->document(); doc; doc = doc->localOwner() ? &doc->localOwner()->document() : 0) {
|
| if (doc == &document) {
|
| targetsToRemove.append(eventTarget.key);
|
| break;
|
|
|