Disconnect frame owners when detaching frames.

Source/web/tests/WebFrameTest.cpp

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 6487 matching lines @@
     EXPECT_TRUE(client.didNotify());
     EXPECT_EQ(0xff0000ff, frame->document().themeColor());
     // Change of second theme-color meta tag will not change frame's theme
     // color.
     client.reset();
     frame->executeScript(WebScriptSource("document.getElementById('tc2').setAttribute('content', '#00FF00');"));
     EXPECT_TRUE(client.didNotify());
     EXPECT_EQ(0xff0000ff, frame->document().themeColor());
 }
 
+// Make sure that an embedder-triggered detach with a remote frame parent
+// doesn't leave behind dangling pointers.
+TEST_F(WebFrameTest, EmbedderTriggeredDetachWithRemoteMainFrame)
+{
+    // FIXME: Refactor some of this logic into WebViewHelper to make it easier to
+    // write tests with a top-level remote frame.
+    FrameTestHelpers::TestWebViewClient viewClient;
+    FrameTestHelpers::TestWebRemoteFrameClient remoteClient;
+    WebView* view = WebView::create(&viewClient);
+    view->setMainFrame(WebRemoteFrame::create(&remoteClient));
+    FrameTestHelpers::TestWebFrameClient childFrameClient;
+    WebLocalFrame* childFrame = view->mainFrame()->toWebRemoteFrame()->createLocalChild("", &childFrameClient);
+
+    // Purposely keep the LocalFrame alive so it's the last thing to be destroyed.
+    RefPtr<Frame> childCoreFrame = toCoreFrame(childFrame);
+    view->close();
+    childCoreFrame.clear();
+}
+
 class WebFrameSwapTest : public WebFrameTest {
 protected:
     WebFrameSwapTest()
     {
         registerMockedHttpURLLoad("frame-a-b-c.html");
         registerMockedHttpURLLoad("subframe-a.html");
         registerMockedHttpURLLoad("subframe-b.html");
         registerMockedHttpURLLoad("subframe-c.html");
         registerMockedHttpURLLoad("subframe-hello.html");
 
@@ skipping 264 matching lines @@
     EXPECT_EQ(1u, frameClient.navigationalDataReceivedCount());
 
     // Neither should a page reload.
     localFrame->reload();
     EXPECT_EQ(4u, frameClient.provisionalLoadCount());
     EXPECT_FALSE(frameClient.wasLastProvisionalLoadATransition());
     EXPECT_EQ(1u, frameClient.navigationalDataReceivedCount());
 }
 
 } // namespace