When a cached frame is being teared down, its original owner page may have been destroyed. So it is not safe to access the page and its data. PR272137
Created attachment 181060 [details] the patch
Comment on attachment 181060 [details] the patch Clearing flags on attachment: 181060 Committed r138652: <http://trac.webkit.org/changeset/138652>
All reviewed patches have been landed. Closing bug.
Created attachment 181356 [details] the fix
reopen
Created attachment 181358 [details] the fix
Comment on attachment 181358 [details] the fix Clearing flags on attachment: 181358 Committed r138846: <http://trac.webkit.org/changeset/138846>