SVG: SVGAnimateElement should not cache |m_animatedElements|

Source/core/svg/SVGElementInstance.cpp

 /*
  * Copyright (C) 2007, 2008 Nikolas Zimmermann <zimmermann@kde.org>
  * Copyright (C) Research In Motion Limited 2010. All rights reserved.
  * Copyright (C) 2011 Torch Mobile (Beijing) Co. Ltd. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  * Library General Public License for more details.
  *
  * You should have received a copy of the GNU Library General Public License
  * along with this library; see the file COPYING.LIB.  If not, write to
  * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
  * Boston, MA 02110-1301, USA.
  */
 
 #include "config.h"
 
 #include "core/svg/SVGElementInstance.h"
 
 #include "core/dom/ContainerNodeAlgorithms.h"
 #include "core/events/Event.h"
 #include "core/events/EventListener.h"
+#include "core/svg/SVGDocumentExtensions.h"
 #include "core/svg/SVGElement.h"
 #include "core/svg/SVGUseElement.h"
 
 #include "wtf/RefCountedLeakCounter.h"
 
 namespace WebCore {
 
 DEFINE_DEBUG_ONLY_GLOBAL(WTF::RefCountedLeakCounter, instanceCounter, ("WebCoreSVGElementInstance"));
 
 // EventTarget API
@@ skipping 97 matching lines @@
 
     for (SVGElementInstance* node = firstChild(); node; node = node->nextSibling())
         node->detach();
 
     // Deregister as instance for passed element, if we haven't already.
     if (shadowTreeElement() && m_element->instancesForElement().contains(shadowTreeElement()))
         m_element->removeInstanceMapping(shadowTreeElement());
 
     m_shadowTreeElement = nullptr;
 
+    // SMIL animations need to be restarted in order to exclude |shadowTreeElement()|.
+    m_element->document().accessSVGExtensions().rebuildSMILElementReferencesForTarget(m_element.get());
+
     m_directUseElement = nullptr;
     m_correspondingUseElement = nullptr;
 
 #if !ENABLE(OILPAN)
     removeDetachedChildrenInContainer<SVGElementInstance, SVGElementInstance>(*this);
 #endif
 }
 
 void SVGElementInstance::setShadowTreeElement(SVGElement* element)
 {
     ASSERT(element);
     m_shadowTreeElement = element;
     // Register as instance for passed element.
     m_element->mapInstanceToElement(shadowTreeElement());
 
+    // SMIL animations need to be restarted in order to include |shadowTreeElement()|.
+    m_element->document().accessSVGExtensions().rebuildSMILElementReferencesForTarget(m_element.get());
 }
 
 void SVGElementInstance::appendChild(PassRefPtr<SVGElementInstance> child)
 {
     appendChildToContainer<SVGElementInstance, SVGElementInstance>(*child, *this);
 }
 
 const AtomicString& SVGElementInstance::interfaceName() const
 {
     return EventTargetNames::SVGElementInstance;
@@ skipping 59 matching lines @@
     visitor->trace(m_directUseElement);
     visitor->trace(m_element);
     visitor->trace(m_shadowTreeElement);
     visitor->trace(m_previousSibling);
     visitor->trace(m_nextSibling);
     visitor->trace(m_firstChild);
     visitor->trace(m_lastChild);
 }
 
 }