The code to set the source attribute in MessageEvent.initMessageEvent() in the v8 bindings is broken, because it assumes that the passed-in parameter is a wrapped DOMWindow object, when instead it's an object that inherits from DOMWindow via the prototype chain. This causes fast/events/init-events.html to fail downstream in Chrome.
Created attachment 47663 [details] Patch
Comment on attachment 47663 [details] Patch Nice! That came out very pretty.
Comment on attachment 47663 [details] Patch Clearing flags on attachment: 47663 Committed r54070: <http://trac.webkit.org/changeset/54070>
All reviewed patches have been landed. Closing bug.