Ensure we check the page pointer before using it after we come out of NPP_Han...

webkit/tools/test_shell/plugin_tests.cc

 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <string>
 
 #include "base/file_util.h"
 #include "base/path_service.h"
 #include "base/string_util.h"
+#include "net/base/escape.h"
 #include "testing/gtest/include/gtest/gtest.h"
 #include "third_party/WebKit/WebKit/chromium/public/WebScriptSource.h"
+#include "third_party/WebKit/WebKit/chromium/public/WebInputEvent.h"
 #include "webkit/glue/webframe.h"
 #include "webkit/glue/webview.h"
 #include "webkit/tools/test_shell/test_shell.h"
 #include "webkit/tools/test_shell/test_shell_test.h"
 
 using WebKit::WebScriptSource;
 using WebKit::WebString;
 
 // Provides functionality for creating plugin tests.
 class PluginTest : public TestShellTest {
@@ skipping 94 matching lines @@
 
   test_shell_->webView()->GetMainFrame()->LoadHTMLString(
       html, GURL("about:blank"));
   test_shell_->WaitTestFinished();
 
   std::wstring text;
   test_shell_->webView()->GetMainFrame()->GetContentAsPlainText(10000, &text);
 
   ASSERT_EQ(true, StartsWith(text, L"DONE", true));
 }
+
+// Tests that if a frame is deleted as a result of calling NPP_HandleEvent, we
+// don't crash.
+TEST_F(PluginTest, DeleteFrameDuringEvent) {
+  FilePath test_html = data_dir_;
+  test_html = test_html.AppendASCII("plugins");
+  test_html = test_html.AppendASCII("delete_frame.html");
+  test_shell_->LoadURL(test_html.ToWStringHack().c_str());
+  test_shell_->WaitTestFinished();
+
+  WebKit::WebMouseEvent input;
+  input.button = WebKit::WebMouseEvent::ButtonLeft;
+  input.x = 50;
+  input.y = 50;
+  input.type = WebKit::WebInputEvent::MouseUp;
+  test_shell_->webView()->HandleInputEvent(&input);
+
+  // No crash means we passed.
+}