| Torne (Richard Coles) | 5c87bf8 | 2012-11-14 11:46:17 +0000 | [diff] [blame] | 1 | <script> |
| 2 | var w; |
| 3 | function clear() { |
| 4 | // Id doesn't matter, the crash happens while trying to access the NULL Document to lookup the Id. |
| 5 | w.clearTimeout(153); |
| 6 | } |
| 7 | |
| 8 | function test() { |
| 9 | w = window.open("data:text/html,"+ |
| 10 | "<script>" + |
| 11 | "function navigate() { location.href='data:text/html,<body>Close this page and wait.</body>'};" + |
| 12 | "setTimeout(navigate,0);</" + |
| 13 | "script>"); |
| 14 | |
| 15 | setInterval(clear, 20); |
| 16 | } |
| 17 | </script> |
| 18 | <body><p>This test reproduces the crash that happens when JavaScript has access to DOMWindow which is disconnected from its Frame. This crash was fixed by http://trac.webkit.org/changeset/49786</p> |
| 19 | To reproduce the crash: |
| 20 | <ul><li>Click the link below, the popup window opens.</li><li>Close the popup window.</li><li>Wait about 10 seconds (~10, page cache should start deleting pages) and observe the crash.</li></ul> |
| 21 | Crashes on Safari 4.0.3</p><p><a href="javascript:test()">Crash me!</a></p> |
| 22 | </body> |