| Index: Source/core/svg/SVGElementInstance.cpp
|
| diff --git a/Source/core/svg/SVGElementInstance.cpp b/Source/core/svg/SVGElementInstance.cpp
|
| index 75974cd4446e49289f11a3adb739b2fcbb93606e..b4c08892a3cf68bcc6412a077ec264f89fb8f438 100644
|
| --- a/Source/core/svg/SVGElementInstance.cpp
|
| +++ b/Source/core/svg/SVGElementInstance.cpp
|
| @@ -139,7 +139,7 @@ void SVGElementInstance::detach()
|
|
|
| // Deregister as instance for passed element, if we haven't already.
|
| if (shadowTreeElement() && m_element->instancesForElement().contains(shadowTreeElement()))
|
| - m_element->removeInstanceMapping(this);
|
| + m_element->removeInstanceMapping(shadowTreeElement());
|
| // DO NOT clear ref to m_element because JavaScriptCore uses it for garbage collection
|
|
|
| m_shadowTreeElement = nullptr;
|
| @@ -157,7 +157,7 @@ void SVGElementInstance::setShadowTreeElement(SVGElement* element)
|
| ASSERT(element);
|
| m_shadowTreeElement = element;
|
| // Register as instance for passed element.
|
| - m_element->mapInstanceToElement(this);
|
| + m_element->mapInstanceToElement(shadowTreeElement());
|
|
|
| }
|
|
|
|
|