| Index: Source/core/dom/ContextFeatures.h | 
| diff --git a/Source/core/dom/ContextFeatures.h b/Source/core/dom/ContextFeatures.h | 
| index b3f309fbfe6ba9137dd787babbc5ee9650e1441e..109b781ff09430b53a7191edd8f6e78cbc302e42 100644 | 
| --- a/Source/core/dom/ContextFeatures.h | 
| +++ b/Source/core/dom/ContextFeatures.h | 
| @@ -102,9 +102,14 @@ inline bool ContextFeatures::isEnabled(Document* document, FeatureType type, boo | 
|  | 
| inline void ContextFeatures::urlDidChange(Document* document) | 
| { | 
| -    if (m_client) | 
| -        return; | 
| -    m_client->urlDidChange(document); | 
| +    // FIXME: The original code, commented out below, is obviously | 
| +    // wrong, but the seemingly correct fix of negating the test to | 
| +    // the more logical 'if (!m_client)' crashes the renderer. | 
| +    // See issue 294180 | 
| +    // | 
| +    // if (m_client) | 
| +    //     return; | 
| +    // m_client->urlDidChange(document); | 
| } | 
|  | 
| } // namespace WebCore | 
|  |