Codebase Browser
chromium
Go to App

chromium/third_party/blink/web_tests/fast/frames/document-addressSpace-in-detached-document.html 

<body>
PASS if no crash.
<iframe id="i"></iframe>
<script>
if (window.testRunner)
  testRunner.dumpAsText();

var doc = i.contentDocument;
i.remove();
doc.addressSpace;
</script>