WebCore/manual-tests/crash-on-accessing-domwindow-without-frame.html
author Dremov Kirill (Nokia-D-MSW/Tampere) <kirill.dremov@nokia.com>
Mon, 04 Oct 2010 01:32:07 +0300
changeset 2 303757a437d3
parent 0 4f2f89ce4247
permissions -rw-r--r--
Revision: 201037 Kit: 201039

<script>
var w;
function clear() {
    // Id doesn't matter, the crash happens while trying to access the NULL Document to lookup the Id.
    w.clearTimeout(153);
}

function test() {
    w = window.open("data:text/html,"+
        "<script>" +
        "function navigate() { location.href='data:text/html,<body>Close this page and wait.</body>'};" +
        "setTimeout(navigate,0);</" + 
        "script>");

    setInterval(clear, 20);
}
</script>
<body><p>This test reproduces the crash that happens when JavaScript has access to DOMWindow which is disconnected from its Frame. This crash was fixed by http://trac.webkit.org/changeset/49786</p>
To reproduce the crash:
<ul><li>Click the link below, the popup window opens.</li><li>Close the popup window.</li><li>Wait about 10 seconds (~10, page cache should start deleting pages) and observe the crash.</li></ul>
Crashes on Safari 4.0.3</p><p><a href="javascript:test()">Crash me!</a></p>
</body>