PrivateScriptRunner::installClassIfNeeded should not run for a null frame

third_party/WebKit/Source/bindings/core/v8/PrivateScriptRunner.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "bindings/core/v8/PrivateScriptRunner.h"
 
 #include "bindings/core/v8/DOMWrapperWorld.h"
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/core/v8/V8Binding.h"
@@ skipping 210 matching lines @@
             RELEASE_ASSERT_NOT_REACHED();
         }
 
         isInitialized = v8Boolean(true, isolate);
         V8HiddenValue::setHiddenValue(isolate, holderObject, V8HiddenValue::privateScriptObjectIsInitialized(isolate), isInitialized);
     }
 }
 
 v8::Local<v8::Value> PrivateScriptRunner::installClassIfNeeded(Document* document, String className)
 {
+    if (!document->contextDocument()->frame())
+        return v8::Local<v8::Value>();
+
     v8::HandleScope handleScope(toIsolate(document));
     ScriptState* scriptState = ScriptState::forWorld(document->contextDocument()->frame(), DOMWrapperWorld::privateScriptIsolatedWorld());
     if (!scriptState->contextIsValid())
         return v8::Local<v8::Value>();
 
     ScriptState::Scope scope(scriptState);
     return classObjectOfPrivateScript(scriptState, className);
 }
 
 namespace {
@@ skipping 109 matching lines @@
     v8::Local<v8::Value> result;
     if (!V8ScriptRunner::callFunction(v8::Local<v8::Function>::Cast(method), scriptState->executionContext(), holder, argc, argv, scriptState->isolate()).ToLocal(&result)) {
         rethrowExceptionInPrivateScript(scriptState->isolate(), block, scriptStateInUserScript, ExceptionState::ExecutionContext, methodName, className);
         block.ReThrow();
         return v8::Local<v8::Value>();
     }
     return result;
 }
 
 } // namespace blink