In Document::destroyRenderTree()
Created attachment 322669 [details] patch
Created attachment 322674 [details] patch
https://trac.webkit.org/r222863
<rdar://problem/34816981>