chromium/third_party/blink/web_tests/fast/loader/frame-creation-removal.html

<html>
<head>
<script>

if (window.testRunner)
    testRunner.dumpAsText();

function loaded()
{
    var theFrame = document.getElementById('lbIframe');
    if (theFrame)
        document.body.removeChild(theFrame);

    var objIframe = document.createElement("iframe");
    objIframe.setAttribute('id','lbIframe');
    document.body.appendChild(objIframe);
};

</script>
</head>

<body onload="loaded();">
This is a test for 5823684.  If onload handlers aggressively remove and create new iframes in a particular way, we would crash because the frames hadn't been installed into the frame tree correctly before the frame tree was being manipulated.<br>
If you do not crash, you have passed this test.<br>
<iframe src="resources/frame-creation-removal-iframe.html"></iframe>
</body>
</html>