Upstream a test from chromium.org where we had a race removing objects from a frame and an iframe.
Created attachment 45188 [details] Patch
style-queue ran check-webkit-style on attachment 45188 [details] without any errors.
Comment on attachment 45188 [details] Patch I could have sworn I wrote a very similar (if not the same) test for webkit.org? Do we know what the orginal chromium/webkit bug which produced this test was?
Comment on attachment 45188 [details] Patch Not sure this really belongs in fast/events. I know that the load event is an event, but this seems more like a frame test to me.
There is a fast/frames/onload-remove-iframe-crash.html test, but it is somewhat different. The original crash and test predates our move to SVN (Eric, I can send you a pointer to the bug log). I agree that fast/frames is probably a better place for this, so I'll submit a new patch.
Created attachment 45357 [details] Patch
style-queue ran check-webkit-style on attachment 45357 [details] without any errors.
Created attachment 45360 [details] ignore this - patch submitted to the wrong bug.
Comment on attachment 45357 [details] Patch OK. Setting cq+ too since you're not yet a committer. Soon! :)
Comment on attachment 45357 [details] Patch Clearing flags on attachment: 45357 Committed r52484: <http://trac.webkit.org/changeset/52484>
All reviewed patches have been landed. Closing bug.