These need to be weak pointer hash sets: HashSet<RenderElement*> m_clients; HashSet<RenderLayer*> m_clientLayers;
Looks like this was fixed by https://commits.webkit.org/267914@main.
Fixed by https://commits.webkit.org/267914@main.
<rdar://problem/116043640>