REGRESSION: Several tests crashing after r139853

[Levi Weintraub]

Falkiness dashboard: http://goo.gl/MTsB7

Failing tests: 
fast/frames/valid.html
fast/events/form-iframe-target-before-load-crash.html
fast/events/before-unload-with-subframes.html
fast/css/stylesheet-enable-first-alternate-link.html

Here's an example crash:
crash log for DumpRenderTree (pid 2621):
STDOUT: <empty>
STDERR: Received signal 11 <unknown> 000000000000
STDERR:  [0x7fe875fbf88e] base::debug::StackTrace::StackTrace()
STDERR:  [0x7fe875fbf138] base::debug::(anonymous namespace)::StackDumpSignalHandler()
STDERR:  [0x7fe86bd368f0] <unknown>
STDERR:  [0x7fe871f0e878] WebCore::Frame::page()
STDERR:  [0x7fe871f0eab3] WebCore::InspectorInstrumentation::instrumentingAgentsForFrame()
STDERR:  [0x7fe8733d0e50] WebCore::InspectorInstrumentation::frameClearedScheduledNavigation()
STDERR:  [0x7fe8733d09ab] WebCore::NavigationScheduler::timerFired()
STDERR:  [0x7fe8733d2c5c] WebCore::Timer<>::fired()
STDERR:  [0x7fe872b97aa5] WebCore::ThreadTimers::sharedTimerFiredInternal()
STDERR:  [0x7fe872b979cf] WebCore::ThreadTimers::sharedTimerFired()
STDERR:  [0x7fe8763865d1] webkit_glue::WebKitPlatformSupportImpl::DoTimeout()
STDERR:  [0x7fe87638795d] base::internal::RunnableAdapter<>::Run()
STDERR:  [0x7fe87638784b] base::internal::InvokeHelper<>::MakeItSo()
STDERR:  [0x7fe87638778b] base::internal::Invoker<>::Run()
STDERR:  [0x7fe875fb51a5] base::Callback<>::Run()
STDERR:  [0x7fe87607a787] base::Timer::RunScheduledTask()
STDERR:  [0x7fe87607a87b] base::BaseTimerTaskInternal::Run()
STDERR:  [0x7fe87607abd7] base::internal::RunnableAdapter<>::Run()
STDERR:  [0x7fe87607ab5b] base::internal::InvokeHelper<>::MakeItSo()
STDERR:  [0x7fe87607ab07] base::internal::Invoker<>::Run()
STDERR:  [0x7fe875fb51a5] base::Callback<>::Run()
STDERR:  [0x7fe875ffab2b] MessageLoop::RunTask()
STDERR:  [0x7fe875ffac46] MessageLoop::DeferOrRunPendingTask()
STDERR:  [0x7fe875ffb4db] MessageLoop::DoWork()
STDERR:  [0x7fe875f99736] base::MessagePumpGlib::RunWithDispatcher()
STDERR:  [0x7fe875f99b16] base::MessagePumpGlib::Run()
STDERR:  [0x7fe875ffa71b] MessageLoop::RunInternal()
STDERR:  [0x7fe875ffa5d2] MessageLoop::RunHandler()
STDERR:  [0x7fe87603282e] base::RunLoop::Run()
STDERR:  [0x7fe875ff9f00] MessageLoop::Run()
STDERR:  [0x0000005184ae] webkit_support::RunMessageLoop()
STDERR:  [0x000000499986] TestShell::waitTestFinished()
STDERR:  [0x000000490c4c] TestShell::runFileTest()
STDERR:  [0x00000046c974] runTest()
STDERR:  [0x00000046d4ca] main
STDERR:  [0x7fe86b9c1c4d] <unknown>
STDERR:  [0x00000046ad09] <unknown>
STDERR:   r8: 000000000000004c  r9: 0101010101010101 r10: 0000000000000000 r11: 00007fe86ba28c96
STDERR:  r12: 0000000000000001 r13: 00007fffcd83ae10 r14: 0000000000000000 r15: 0000000000000000
STDERR:   di: cdcdcdcdcdcdcdcd  si: 0000000000000000  bp: 00007fffcd8394b0  bx: 0000000000000000
STDERR:   dx: 0000000000001cf7  ax: cdcdcdcdcdcdcdcd  cx: 0000000000185fa0  sp: 00007fffcd8394b0
STDERR:   ip: 00007fe871f0e878 efl: 0000000000010282 cgf: 0000000000000033 erf: 0000000000000000
STDERR:  trp: 000000000000000d msk: 0000000000000000 cr2: 0000000000000000

[Levi Weintraub]

These only occur on Debug.

[Levi Weintraub]

Marked the broken tests as crashing in r139893.

[Ken Kania]

I'm unable to repro any of these failures on my local linux box. I'll try windows.

From the crash stack, the problem looks like the frame is being deleted during the redirect, and we end up accessing junk.

[Brian Burg]

Wrong component.