<html>
<body>
We pass if we don't crash under ASAN.
<script>
if (window.testRunner)
    testRunner.dumpAsText();

window.onload = function() {
    i.remove();
    document.body.appendChild(i);
}

i = document.body.appendChild(document.createElement("iframe"));
i.src = "about:blank";
i.addEventListener("load", frames[0].eval('(function(){location="javascript:location"})'));
</script>
</body>
</html>