| Index: LayoutTests/fast/loader/remove-iframe-during-history-navigation-same.html
 | 
| diff --git a/LayoutTests/fast/loader/remove-iframe-during-history-navigation-same.html b/LayoutTests/fast/loader/remove-iframe-during-history-navigation-same.html
 | 
| new file mode 100644
 | 
| index 0000000000000000000000000000000000000000..36153f999d9ea73ef90a66cb749f15a461fde994
 | 
| --- /dev/null
 | 
| +++ b/LayoutTests/fast/loader/remove-iframe-during-history-navigation-same.html
 | 
| @@ -0,0 +1,30 @@
 | 
| +<!-- One iframe's popstate handler removes another iframe from the
 | 
| +     document during a history navigation that affects both frames.  The
 | 
| +     history navigation selects the same document in both frames.
 | 
| +
 | 
| +     Should not crash. -->
 | 
| +
 | 
| +<script>
 | 
| +  if (window.testRunner) {
 | 
| +    testRunner.dumpAsText();
 | 
| +    testRunner.waitUntilDone();
 | 
| +  }
 | 
| +
 | 
| +  window.onload = function () {
 | 
| +    frames[0].history.pushState("first", "first");
 | 
| +    frames[0].onpopstate = function () {
 | 
| +      document.body.innerHTML = "PASS";
 | 
| +      if (window.testRunner)
 | 
| +        testRunner.notifyDone();
 | 
| +    };
 | 
| +    frames[1].history.pushState("second", "second");
 | 
| +
 | 
| +    history.go(-2);
 | 
| +  }
 | 
| +</script>
 | 
| +
 | 
| +<body>
 | 
| +  NOT TESTED
 | 
| +  <iframe src="resources/empty-subframe.html"></iframe>
 | 
| +  <iframe src="resources/empty-subframe.html"></iframe>
 | 
| +</body>
 | 
| 
 |