Don't mark a history navigation as in page in a new renderer process.

content/renderer/render_frame_impl.cc

Index: content/renderer/render_frame_impl.cc
diff --git a/content/renderer/render_frame_impl.cc b/content/renderer/render_frame_impl.cc
index 3a2094408cf8e876b2f266deaa32c7dfd869c6c4..5b7bc9438580ddb4bf931fa5538a510a400a531d 100644
--- a/content/renderer/render_frame_impl.cc
+++ b/content/renderer/render_frame_impl.cc
@@ -5492,6 +5492,16 @@ void RenderFrameImpl::NavigateInternal(
                         : blink::WebFrameLoadType::BackForward;
         should_load_request = true;
 
+        // If this is marked as a same document load but we haven't committed
+        // anything, treat it as a new load.  The browser shouldn't let this
+        // happen.
+        // TODO(creis): Add a similar check if the DSN doesn't match, and add a
+        // NOTREACHED when we're confident this won't happen.
+        if (history_load_type == blink::WebHistorySameDocumentLoad &&
+            current_history_item_.isNull()) {
+          history_load_type = blink::WebHistoryDifferentDocumentLoad;
+        }
+
         // If this navigation is to a history item for a new child frame, we may
         // want to ignore it in some cases.  If a Javascript navigation (i.e.,
         // client redirect) interrupted it and has either been scheduled,