In Node::parentOrHostElement(), the call to shadowHost() can only return an Element*, or 0. In the former case, the following test is unnecessary, while in the 0 case (if that should ever occur) it would crash.
Created attachment 124526 [details] Patch
Comment on attachment 124526 [details] Patch ok
Comment on attachment 124526 [details] Patch Clearing flags on attachment: 124526 Committed r106242: <http://trac.webkit.org/changeset/106242>
All reviewed patches have been landed. Closing bug.