GitLab

https://bugs.webkit.org/show_bug.cgi?id=66678

Source/WebCore: 

RefPtr the focusable node to prevent getting deleted by mutation
event.

Reviewed by Dave Hyatt.

Test: fast/frames/focus-controller-crash-change-event.html

* page/FocusController.cpp:
(WebCore::FocusController::advanceFocusInDocumentOrder):

LayoutTests: 

Reviewed by Dave Hyatt.

* fast/frames/focus-controller-crash-change-event-expected.txt: Added.
* fast/frames/focus-controller-crash-change-event.html: Added.


git-svn-id: svn://svn.chromium.org/blink/trunk@93514 bbb929c8-8fbe-4397-9dbb-9b2b20218538