Merge 109362

Source/WebCore/html/HTMLElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008 Apple Inc. All rights reserved.
  * Copyright (C) 2009 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/)
  * Copyright (C) 2011 Motorola Mobility. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 339 matching lines @@
 {
     Node* firstChild = node->firstChild();
     return firstChild && !firstChild->nextSibling();
 }
 
 static inline bool hasOneTextChild(ContainerNode* node)
 {
     return hasOneChild(node) && node->firstChild()->isTextNode();
 }
 
-static void replaceChildrenWithFragment(HTMLElement* element, PassRefPtr<DocumentFragment> fragment, ExceptionCode& ec)
+static void replaceChildrenWithFragment(HTMLElement* elementNode, PassRefPtr<DocumentFragment> fragment, ExceptionCode& ec)
 {
+    RefPtr<HTMLElement> element(elementNode);
 #if ENABLE(MUTATION_OBSERVERS)
-    ChildListMutationScope mutation(element);
+    ChildListMutationScope mutation(element.get());
 #endif
 
     if (!fragment->firstChild()) {
         element->removeChildren();
         return;
     }
 
-    if (hasOneTextChild(element) && hasOneTextChild(fragment.get())) {
+    if (hasOneTextChild(element.get()) && hasOneTextChild(fragment.get())) {
         static_cast<Text*>(element->firstChild())->setData(static_cast<Text*>(fragment->firstChild())->data(), ec);
         return;
     }
 
-    if (hasOneChild(element)) {
+    if (hasOneChild(element.get())) {
         element->replaceChild(fragment, element->firstChild(), ec);
         return;
     }
 
     element->removeChildren();
     element->appendChild(fragment, ec);
 }
 
-static void replaceChildrenWithText(HTMLElement* element, const String& text, ExceptionCode& ec)
+static void replaceChildrenWithText(HTMLElement* elementNode, const String& text, ExceptionCode& ec)
 {
+    RefPtr<HTMLElement> element(elementNode);
 #if ENABLE(MUTATION_OBSERVERS)
-    ChildListMutationScope mutation(element);
+    ChildListMutationScope mutation(element.get());
 #endif
 
-    if (hasOneTextChild(element)) {
+    if (hasOneTextChild(element.get())) {
         static_cast<Text*>(element->firstChild())->setData(text, ec);
         return;
     }
 
     RefPtr<Text> textNode = Text::create(element->document(), text);
 
-    if (hasOneChild(element)) {
+    if (hasOneChild(element.get())) {
         element->replaceChild(textNode.release(), element->firstChild(), ec);
         return;
     }
 
     element->removeChildren();
     element->appendChild(textNode.release(), ec);
 }
 
 // We may want to move a version of this function into DocumentFragment.h/cpp
 static PassRefPtr<DocumentFragment> createFragmentFromSource(const String& markup, Element* contextElement, ExceptionCode& ec)
@@ skipping 656 matching lines @@
 #ifndef NDEBUG
 
 // For use in the debugger
 void dumpInnerHTML(WebCore::HTMLElement*);
 
 void dumpInnerHTML(WebCore::HTMLElement* element)
 {
     printf("%s\n", element->innerHTML().ascii().data());
 }
 #endif