Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(220)

Unified Diff: third_party/WebKit/LayoutTests/http/tests/dom/crash-on-querying-event-path.html

Issue 1374533002: Null out LocalDOMWindow::m_frame on navigation. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: try to fix crash-on-querying-event-path.html Created 5 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/LayoutTests/http/tests/dom/crash-on-querying-event-path.html
diff --git a/third_party/WebKit/LayoutTests/http/tests/dom/crash-on-querying-event-path.html b/third_party/WebKit/LayoutTests/http/tests/dom/crash-on-querying-event-path.html
deleted file mode 100644
index 657bf25f120b7fe4df5fa95d3690b47759872102..0000000000000000000000000000000000000000
--- a/third_party/WebKit/LayoutTests/http/tests/dom/crash-on-querying-event-path.html
+++ /dev/null
@@ -1,48 +0,0 @@
-<html>
-<head>
-<script src="/js-test-resources/js-test.js"></script>
-</head>
-<body>
-<script>
-var jsTestIsAsync = true;
-description('This is a regression test for crbug.com/400476. It should not crash and then brag about it.')
-
-var root = document.documentElement;
-var iframe = root.ownerDocument.createElement('iframe');
-var timeouts = [];
-iframe.onload = iframeOnload;
-root.appendChild(iframe);
-
-function iframeOnload() {
- var defaultView = iframe.contentDocument.defaultView;
- defaultView.onpageshow = onPageShow;
- iframe.src = null;
- timeouts[timeouts.length] = window.setTimeout(nextIframeLoaded, 100);
-}
-
-function onPageShow() {
- eventObj = arguments[0];
-}
-
-function nextIframeLoaded() {
- timeouts.forEach(window.clearTimeout);
-
- // Access of eventObj.path caused the crash.
- // The test is somewhat flaky, in that the test may pass as correct
- // despite the bug being the code. The exact conditions
- // are unclear, but 1, asan helps detect the crash and 2, the
- // preceeding gc()s increase the likelihood of it occurring.
- gc();
- gc();
- gc();
- gc();
- gc();
- var path = eventObj.path;
- debug(path);
-
- testPassed('totally did not crash.');
- finishJSTest();
-}
-</script>
-</body>
-</html>

Powered by Google App Engine
This is Rietveld 408576698