1 <script> 2 var w; 3 function clear() { 4 // Id doesn't matter, the crash happens while trying to access the NULL Document to lookup the Id. 5 w.clearTimeout(153); 6 } 7 8 function test() { 9 w = window.open("data:text/html,"+ 10 "<script>" + 11 "function navigate() { location.href='data:text/html,<body>Close this page and wait.</body>'};" + 12 "setTimeout(navigate,0);</" + 13 "script>"); 14 15 setInterval(clear, 20); 16 } 17 </script> 18 <body><p>This test reproduces the crash that happens when JavaScript has access to DOMWindow which is disconnected from its Frame. This crash was fixed by http://trac.webkit.org/changeset/49786</p> 19 To reproduce the crash: 20 <ul><li>Click the link below, the popup window opens.</li><li>Close the popup window.</li><li>Wait about 10 seconds (~10, page cache should start deleting pages) and observe the crash.</li></ul> 21 Crashes on Safari 4.0.3</p><p><a href="javascript:test()">Crash me!</a></p> 22 </body> 23