From f4fdf5a825c6ef551759cd28ce97b34d174371bf Mon Sep 17 00:00:00 2001
From: "bzbarsky%mit.edu"
 <bzbarsky%mit.edu@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Mon, 18 Jun 2007 15:30:57 +0000
Subject: [PATCH] Don't tear down part of the content tree while there are
 still frames referencing it.  Bug 384728, r+sr=tor

git-svn-id: svn://10.0.0.236/trunk@228236 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/layout/svg/base/src/nsSVGUseFrame.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mozilla/layout/svg/base/src/nsSVGUseFrame.cpp b/mozilla/layout/svg/base/src/nsSVGUseFrame.cpp
index 299dd3491d3..f1b4dedb8ea 100644
--- a/mozilla/layout/svg/base/src/nsSVGUseFrame.cpp
+++ b/mozilla/layout/svg/base/src/nsSVGUseFrame.cpp
@@ -149,9 +149,9 @@ nsSVGUseFrame::AttributeChanged(PRInt32         aNameSpaceID,
 void
 nsSVGUseFrame::Destroy()
 {
-  nsSVGUseElement *use = NS_STATIC_CAST(nsSVGUseElement*, mContent);
-  use->DestroyAnonymousContent();
+  nsRefPtr<nsSVGUseElement> use = NS_STATIC_CAST(nsSVGUseElement*, mContent);
   nsSVGUseFrameBase::Destroy();
+  use->DestroyAnonymousContent();
 }