When pumping tokens yield for scripts waiting for resources.

third_party/WebKit/LayoutTests/fast/parser/resources/write-script-waiting-for-style-crash.html

Index: third_party/WebKit/LayoutTests/fast/parser/resources/write-script-waiting-for-style-crash.html
diff --git a/third_party/WebKit/LayoutTests/fast/parser/resources/write-script-waiting-for-style-crash.html b/third_party/WebKit/LayoutTests/fast/parser/resources/write-script-waiting-for-style-crash.html
new file mode 100644
index 0000000000000000000000000000000000000000..9fc045e1400e4743abfab71ec57394b184483a3a
--- /dev/null
+++ b/third_party/WebKit/LayoutTests/fast/parser/resources/write-script-waiting-for-style-crash.html
@@ -0,0 +1,11 @@
+<style>
+@import url(a)</style>
+<script>
+function f() {
+ window.parent.postMessage(1, '*');
+ var t = document.documentElement.outerHTML;
+ document.writeln(t);
+}
+</script>
+<style onload="f()"></style>
+<iframe></iframe>

[kouhei (in TOK), 2016/06/24 09:02:54]

Please format.

Would it be possible to create a test case that directly triggers the issue?
If that is difficult, please add a reference to the crbug.