FrameView can be null in addTextMatchMaker() after appendChild(iframe)

third_party/WebKit/Source/core/testing/Internals.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  * Copyright (C) 2013 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
@@ skipping 1023 matching lines @@
                                            unsigned index,
                                            ExceptionState& exceptionState) {
   DocumentMarker* marker = markerAt(node, markerType, index, exceptionState);
   if (!marker)
     return String();
   return marker->description();
 }
 
 void Internals::addTextMatchMarker(const Range* range, bool isActive) {
   DCHECK(range);
+  if (!range->ownerDocument().view())
+    return;
+
   range->ownerDocument().updateStyleAndLayoutIgnorePendingStylesheets();
   range->ownerDocument().markers().addTextMatchMarker(EphemeralRange(range),
                                                       isActive);
 
   // This simulates what the production code does after
   // DocumentMarkerController::addTextMatchMarker().
   range->ownerDocument().view()->invalidatePaintForTickmarks();
 }
 
 static bool parseColor(const String& value,
@@ skipping 2106 matching lines @@
 
 void Internals::crash() {
   CHECK(false) << "Intentional crash";
 }
 
 void Internals::setIsLowEndDevice(bool isLowEndDevice) {
   MemoryCoordinator::setIsLowEndDeviceForTesting(isLowEndDevice);
 }
 
 }  // namespace blink