Bug 451323, r+sr=roc

content/base/src/nsTextNode.cpp

@@ -112,6 +112,7 @@ public:
                               PRBool aNullParent = PR_TRUE);
 
   NS_DECL_NSIMUTATIONOBSERVER_ATTRIBUTECHANGED
+  NS_DECL_NSIMUTATIONOBSERVER_NODEWILLBEDESTROYED
 
   virtual nsGenericDOMDataNode *CloneDataNode(nsINodeInfo *aNodeInfo,
                                               PRBool aCloneText) const
@@ -358,6 +359,13 @@ nsAttributeTextNode::AttributeChanged(nsIDocument* aDocument,
   }
 }
 
+void
+nsAttributeTextNode::NodeWillBeDestroyed(const nsINode* aNode)
+{
+  NS_ASSERTION(aNode == static_cast<nsINode*>(mGrandparent), "Wrong node!");
+  mGrandparent = nsnull;
+}
+
 void
 nsAttributeTextNode::UpdateText(PRBool aNotify)
 {