Why this CL triggers an OilPan crash.

third_party/WebKit/Source/core/page/FrameTree.cpp

 /*
  * Copyright (C) Research In Motion Limited 2010. All rights reserved.
  * Copyright (C) 2006 Apple Computer, Inc.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 168 matching lines @@
     return nullptr;
 
   for (Frame* frame = page->MainFrame(); frame;
        frame = frame->Tree().TraverseNext()) {
     if (frame->Tree().GetName() == name)
       return frame;
   }
 
   // Search the entire tree of each of the other pages in this namespace.
   // FIXME: Is random order OK?
-  for (const Page* other_page : Page::OrdinaryPages()) {
+  for (const Page* other_page : page->RelatedPages()) {
     if (other_page == page || other_page->IsClosing())
       continue;
     for (Frame* frame = other_page->MainFrame(); frame;
          frame = frame->Tree().TraverseNext()) {
       if (frame->Tree().GetName() == name)
         return frame;
     }
   }
 
   return nullptr;
@@ skipping 96 matching lines @@
 void showFrameTree(const blink::Frame* frame) {
   if (!frame) {
     printf("Null input frame\n");
     return;
   }
 
   printFrames(&frame->Tree().Top(), frame, 0);
 }
 
 #endif