Unreviewed rebaseline of fast/loader/recursive-before-unload-crash.html
authoreae@chromium.org <eae@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 22 May 2012 07:18:33 +0000 (07:18 +0000)
committereae@chromium.org <eae@chromium.org@268f45cc-cd09-0410-ab3c-d52691b4dbfc>
Tue, 22 May 2012 07:18:33 +0000 (07:18 +0000)
* platform/chromium/fast/loader/recursive-before-unload-crash-expected.txt: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117922 268f45cc-cd09-0410-ab3c-d52691b4dbfc

LayoutTests/ChangeLog
LayoutTests/platform/chromium/fast/loader/recursive-before-unload-crash-expected.txt [new file with mode: 0644]

index 1827216..8b41b2c 100644 (file)
@@ -1,5 +1,11 @@
 2012-05-22  Emil A Eklund  <eae@chromium.org>
 
+        Unreviewed rebaseline of fast/loader/recursive-before-unload-crash.html
+
+        * platform/chromium/fast/loader/recursive-before-unload-crash-expected.txt: Added.
+
+2012-05-22  Emil A Eklund  <eae@chromium.org>
+
         Even more unreviewed chromium test expectation updates.
 
         * platform/chromium-linux-x86/platform/chromium/compositing/filters: Removed.
diff --git a/LayoutTests/platform/chromium/fast/loader/recursive-before-unload-crash-expected.txt b/LayoutTests/platform/chromium/fast/loader/recursive-before-unload-crash-expected.txt
new file mode 100644 (file)
index 0000000..8465358
--- /dev/null
@@ -0,0 +1,10 @@
+CONSOLE MESSAGE: Blocked alert('onbeforeunload called, and iframe hasn't been added yet.') during beforeunload.
+ALERT: Adding iframe
+This test demonstrates a problem with our handling of the beforeunload event.
+If a script manages to try and navigate the frame from beforeunload - when a navigation is already pending - we end up blowing out the stack by recursively consulting the policy delegate then running onbeforeunload repeatedly.
+After this happens, the FrameLoader is in a bogus state where it thinks it is in the middle of a provisional load, but it doesn't have a provisional document loader.
+In this state, the frame is very difficult to navigate anywhere else, and attempts to load new things within the frame can result in a crash.
+This was reproducibly identified on sears.com following a bizarre Safari specific code path.
+Click here to run the beforeunload test and blow out the stack
+Click here to append an iframe and crash
+