Merge 96707 - Crash in SVGTRefElement::updateReferencedText.

Source/WebCore/svg/SVGTRefElement.h

 /*
  * Copyright (C) 2004, 2005, 2008 Nikolas Zimmermann <zimmermann@kde.org>
  * Copyright (C) 2004, 2005, 2006 Rob Buis <buis@kde.org>
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 20 matching lines @@
 
 class SVGTRefElement : public SVGTextPositioningElement,
                        public SVGURIReference {
 public:
     static PassRefPtr<SVGTRefElement> create(const QualifiedName&, Document*);
 
 private:
     friend class SubtreeModificationEventListener;
 
     SVGTRefElement(const QualifiedName&, Document*);
+    virtual ~SVGTRefElement();
 
     bool isSupportedAttribute(const QualifiedName&);
     virtual void parseMappedAttribute(Attribute*);
     virtual void svgAttributeChanged(const QualifiedName&);
 
     virtual RenderObject* createRenderer(RenderArena*, RenderStyle*);
     virtual bool childShouldCreateRenderer(Node*) const;
     virtual bool rendererIsNeeded(const NodeRenderingContext&);
 
     virtual void insertedIntoDocument();
     virtual void removedFromDocument();
 
+    void clearEventListener();
+
     void updateReferencedText();
 
     virtual void buildPendingResource();
 
     BEGIN_DECLARE_ANIMATED_PROPERTIES(SVGTRefElement)
         DECLARE_ANIMATED_STRING(Href, href)
     END_DECLARE_ANIMATED_PROPERTIES
 
     RefPtr<SubtreeModificationEventListener> m_eventListener;
 };
 
 } // namespace WebCore
 
 #endif // ENABLE(SVG)
 #endif