commit f9e6e288a5aa959f05c374806121aaf0fc52d440
author esprehn@chromium.org <esprehn@chromium.org@bbb929c8-8fbe-4397-9dbb-9b2b20218538> Mon Oct 14 11:34:53 2013
committer esprehn@chromium.org <esprehn@chromium.org@bbb929c8-8fbe-4397-9dbb-9b2b20218538> Mon Oct 14 11:34:53 2013
tree 7b4f68ec3e4756e76fbfd37df941f9b612d4bd6c
parent f422ec268452b4cb5c2be2d9b70977d881e38e1d

Harden FrameSelection methods against JS running inside recalcStyle

RenderView::selectionBounds and repaintSelection both call into
updateStyleIfNeeded which is not safe since the JS that can run as
the result of the recalcStyle can free the RenderView. Instead
FrameSelection should be doing this and adding the needed RefPtrs
to ensure it doesn't use free'd FrameViews or RenderViews.

Review URL: https://codereview.chromium.org/25004008

git-svn-id: svn://svn.chromium.org/blink/trunk@159575 bbb929c8-8fbe-4397-9dbb-9b2b20218538