[webkit-reviews] review requested: [Bug 18135] Crash in Frame::tree appending iframe : [Attachment 20320] a patch and a layout test

[bugzilla-daemon at webkit.org]

Feng Qian <ian.eng.webkit at gmail.com> has asked	for review:
Bug 18135: Crash in Frame::tree appending iframe
http://bugs.webkit.org/show_bug.cgi?id=18135

Attachment 20320: a patch and a layout test
http://bugs.webkit.org/attachment.cgi?id=20320&action=edit

------- Additional Comments from Feng Qian <ian.eng.webkit at gmail.com>
My attempt to fix the crash. Frame::init() should be called after the subframe
is appended to the frame tree.

I am still not good at right layout test, feel free to make changes.