It calls into RenderCounter::invalidate() which in turn calls back to the CounterNode to remove the renderer.
m_rootRenderer->invalidate(); // This makes m_rootRenderer point to the next renderer if any since it disconnects the m_rootRenderer from this.
Created attachment 291702 [details]
Comment on attachment 291702 [details]
Clearing flags on attachment: 291702
Committed r207374: <http://trac.webkit.org/changeset/207374>
All reviewed patches have been landed. Closing bug.