fast/layers/resize-layer-deletion-crash.html crashes in ~RenderLayer under GuardMalloc when checking if the document is being destroyed.
Created attachment 18426 [details] Move layer destruction into RenderObject::destroy()
Comment on attachment 18426 [details] Move layer destruction into RenderObject::destroy() Looks fine. r=me
Fixed in <http://trac.webkit.org/projects/webkit/changeset/29457>.