2011-09-26  Tim Horton  <timothy_horton@apple.com>

        <animateColor> applied to filtered ellipse does not update
        https://bugs.webkit.org/show_bug.cgi?id=68457
        <rdar://problem/10154777>

        Reviewed by Darin Adler.

        Invalidate the filter's cache when style changes take place so that style changes are respected.

        Test: svg/filters/animate-fill.svg

        * rendering/svg/SVGResourcesCache.cpp:
        (WebCore::SVGResourcesCache::clientStyleChanged):
        (WebCore::SVGResourcesCache::clientUpdatedFromElement):

2011-09-26  Max Perepelitsyn  <pph34r@gmail.com>

        Set but unused variables cleanup in v8 bindings (gcc 4.6)
        https://bugs.webkit.org/show_bug.cgi?id=68079

        Reviewed by Adam Barth.

        Test: http/tests/websocket/tests/hybi/send-object-tostring-check.html

        * bindings/scripts/CodeGeneratorV8.pm:
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp:
        (WebCore::ConfigureV8TestMediaQueryListListenerTemplate):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::ConfigureV8TestObjTemplate):
        * bindings/v8/WorkerScriptDebugServer.cpp:
        (WebCore::WorkerScriptDebugServer::addListener):
        * bindings/v8/custom/V8HTMLOptionsCollectionCustom.cpp:
        (WebCore::V8HTMLOptionsCollection::lengthAccessorSetter):
        * bindings/v8/custom/V8WebSocketCustom.cpp:
        (WebCore::V8WebSocket::sendCallback):

2011-09-26  Tony Chang  <tony@chromium.org>

        switch the initial value of flex-order to 0
        https://bugs.webkit.org/show_bug.cgi?id=68820

        The spec changed from having an initial value of 1 to 0.

        Reviewed by Ojan Vafai.

        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::initialFlexOrder):

2011-09-26  Chris Rogers  <crogers@google.com>

        OfflineAudioDestinationNode must wait for thread completion in uninitialize()
        https://bugs.webkit.org/show_bug.cgi?id=68725

        Reviewed by Kenneth Russell.

        No new tests.  This fixes internal implementation details.

        * webaudio/OfflineAudioDestinationNode.cpp:
        (WebCore::OfflineAudioDestinationNode::uninitialize):

2011-09-26  Xan Lopez  <xlopez@igalia.com>

        [GTK] Do not ignore 'Replaceable' attributes in the DOM bindings
        https://bugs.webkit.org/show_bug.cgi?id=68837

        Reviewed by Martin Robinson.

        * bindings/scripts/CodeGeneratorGObject.pm: add getters (but not
        setters) for 'Replaceable' attributes. Punt for the future
        actually making them settable, since it seems non trivial.

2011-09-26  Ryosuke Niwa  <rniwa@webkit.org>

        Leopard build fix.

        * testing/Internals.cpp:
        (WebCore::Internals::setZoomAnimatorTransform):

2011-09-26  Joshua Bell  <jsbell@chromium.org>

        IndexedDB: Null key path gets stored as empty string key path
        https://bugs.webkit.org/show_bug.cgi?id=68726

        Reviewed by Tony Chang.

        Store additional flag to indicate if object store key path
        is null vs. empty. Added additional runtime tests for integrity
        of object store metadata.

        * storage/IDBLevelDBBackingStore.cpp:
        (WebCore::checkObjectStoreAndMetaDataType):
        (WebCore::IDBLevelDBBackingStore::getObjectStores):
        (WebCore::IDBLevelDBBackingStore::createObjectStore):
        * storage/IDBLevelDBCoding.cpp:

2011-09-26  John Bauman  <jbauman@chromium.org>

        Fix nonpremultiplied webgl toDataURL to jpeg
        https://bugs.webkit.org/show_bug.cgi?id=68366

        The canvas spec says that toDataURL to formats without an alpha must
        be "composited onto a solid black background using the source-over
        operator." Do that.

        Reviewed by Kenneth Russell.

        * platform/graphics/cg/ImageBufferCG.cpp:
        (WebCore::CGImageToDataURL):
        (WebCore::ImageBuffer::toDataURL):
        (WebCore::ImageDataToDataURL):
        * platform/image-encoders/skia/JPEGImageEncoder.cpp:
        (WebCore::RGBAtoRGB):

2011-09-26  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [CMake] Remove FindFreetype.cmake
        https://bugs.webkit.org/show_bug.cgi?id=68778

        Reviewed by Adam Barth.

        CMake has provided its own FindFreetype.cmake forever, so there is no
        need to have another implementation in WebKit.

        No new tests, just a buildsystem change.

        * CMakeListsEfl.txt: Use FREETYPE_{LIBRARIES,INCLUDE_DIRS} instead of
        Freetype_{LIBRARIES,INCLUDE_DIRS}.

2011-09-26  Alexei Svitkine  <asvitkine@chromium.org>

        Fix full-page rubber band overhang appearing when gesturing during a slow page load.
        https://bugs.webkit.org/show_bug.cgi?id=68568

        Chromium bug: http://code.google.com/p/chromium/issues/detail?id=97243

        (This also happens on Safari.)

        The problem was that ScrollView::overhangAmount() was returning a full-page overhang due to contentsSize() being 0 briefly during a page load, which was then getting used by ScrollAnimatorChromiumMac.mm to update the overhang on a gesture event. This change makes the relevant logic not return an overhang if the contentsSize() is empty.

        Reviewed by Adam Barth.

        No new tests, since this is highly timing-related.

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::overhangAmount):
        (WebCore::ScrollView::wheelEvent):

2011-09-26  W. James MacLean  <wjmaclean@chromium.org>

        [chromium] Revise zoom animator backend to use full transform instead of just scale.
        https://bugs.webkit.org/show_bug.cgi?id=68535

        Reviewed by Kenneth Russell.

        * page/Settings.cpp:
        (WebCore::Settings::Settings):
        * page/Settings.h:
        (WebCore::Settings::setZoomAnimatorScale):
        (WebCore::Settings::zoomAnimatorScale):
        (WebCore::Settings::setZoomAnimatorPosition):
        (WebCore::Settings::zoomAnimatorPosX):
        (WebCore::Settings::zoomAnimatorPosY):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        (WebCore::LayerRendererChromium::drawLayersInternal):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore::LayerRendererChromium::setZoomAnimatorTransform):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::setZoomAnimatorTransform):
        (WebCore::CCLayerTreeHost::updateLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::setZoomAnimatorTransform):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        * testing/Internals.cpp:
        (WebCore::Internals::setZoomAnimatorTransform):
        * testing/Internals.h:
        * testing/Internals.idl:

2011-09-26  Dan Bernstein  <mitz@apple.com>

        REGRESSION (r95926) Assert firing in svg/clip-path/clip-path-on-svg.svg
        https://bugs.webkit.org/show_bug.cgi?id=68819

        Reviewed by Dave Hyatt.

        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::scheduleRelayout): Revert to using view() instead of the RenderView**
        parameter of isRooted, since only the former returns 0 when the document is detached.

2011-09-26  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: XMLHttpRequest console logging messages should link to network panel when possible.
        https://bugs.webkit.org/show_bug.cgi?id=67399

        Reviewed by Pavel Feldman.

        * inspector/ConsoleMessage.cpp:
        (WebCore::ConsoleMessage::ConsoleMessage):
        * inspector/ConsoleMessage.h:
        * inspector/InspectorConsoleAgent.cpp:
        (WebCore::InspectorConsoleAgent::resourceRetrievedByXMLHttpRequest):
        * inspector/InspectorConsoleAgent.h:
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::resourceRetrievedByXMLHttpRequestImpl):
        * inspector/front-end/ConsoleMessage.js:
        (WebInspector.ConsoleMessage.prototype._formatMessage.else.else.linkifier):
        (WebInspector.ConsoleMessage.prototype._formatMessage):
        * inspector/front-end/ResourcesPanel.js:
        (WebInspector.ResourcesPanel.prototype.showAnchorLocation):
        * inspector/front-end/inspector.js:
        (WebInspector.linkifyStringAsFragmentWithCustomLinkifier):
        (WebInspector.linkifyStringAsFragment):

2011-09-26  Jer Noble  <jer.noble@apple.com>

        White flash when entering full-screen using element.webkitRequestFullScreen()
        https://bugs.webkit.org/show_bug.cgi?id=68481

        Reviewed by Simon Fraser.

        No new tests; covered by existing full screen tests.

        During an animation, renderers may try to paint into the FullScreenRenderer's 
        GraphicsLayer, and an optimization we previously added for the FullScreenRenderer's 
        background will cause these paints to fail. Remove this optimization in 
        containsPaintedContent, and taking non-composited elements into full screen will
        animate correctly.

        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::containsPaintedContent):

2011-09-26  Mihai Parparita  <mihaip@chromium.org>

        Unreviewed, rolling out r95960.
        http://trac.webkit.org/changeset/95960
        https://bugs.webkit.org/show_bug.cgi?id=58608

        Significantly changes table border rendering

        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::drawLineForBoxSide):

2011-09-23  Simon Fraser  <simon.fraser@apple.com>

        Repaint tests don't work in WebKit2
        https://bugs.webkit.org/show_bug.cgi?id=68453

        Reviewed by Sam Weinig.

        Have FrameView keep track of repaint rects when asked to, and
        expose this set of repaint rects via private WebKit API for later
        use by DumpRenderTree.
        
        The repaint rects are in WebView coordinates, so we have to
        unapply the scroll offset.

        * WebCore.exp.in:
        * page/FrameView.cpp:
        (WebCore::FrameView::FrameView):
        (WebCore::FrameView::reset):
        (WebCore::FrameView::repaintContentRectangle):
        (WebCore::FrameView::setTracksRepaints):
        * page/FrameView.h:
        (WebCore::FrameView::isTrackingRepaints):
        (WebCore::FrameView::resetTrackedRepaints):
        (WebCore::FrameView::trackedRepaintRects):

2011-09-26  Antti Koivisto  <antti@apple.com>

        Optimize matching of common pseudo classes
        https://bugs.webkit.org/show_bug.cgi?id=68633

        Reviewed by Dave Hyatt, Darin Adler, Dimitri Glazkov.
        
        :link, :visited and :focus are quite common. They often used as univeral selectors (including in our
        default stylesheet) so we try to match them for all elements in the document. They take always the 
        slow matching path. In addition we match link styles twice due to visited link pseudo style generation
        so the overhead is doubled. As a result substantial portion of our style matching time is spent 
        dealing with these pseudo classes. 
        
        This patch adds new lists to RuleSet for common pseudo class rules. The rules on the lists are only checked
        if the element has approprate type and stat. ases where the rightmost pseudo class can then be rejected immediately.
        We can also enable the fast path checking for the rest of the selector in many cases.
    
        This seems to be >30% progression in selector matching performance with typical style sheets. It saves ~0.9s
        when loading the full HTML5 spec.

        * css/CSSStyleSelector.cpp:
        (WebCore::RuleData::hasRightmostSelectorMatchingHTMLBasedOnRuleHash):
        (WebCore::RuleSet::idRules):
        (WebCore::RuleSet::classRules):
        (WebCore::RuleSet::tagRules):
        (WebCore::RuleSet::shadowPseudoElementRules):
        (WebCore::RuleSet::linkPseudoClassRules):
        (WebCore::RuleSet::visitedPseudoClassRules):
        (WebCore::RuleSet::focusPseudoClassRules):
        (WebCore::RuleSet::universalRules):
        (WebCore::RuleSet::pageRules):
        
            Add a new lists, some stylistic renamings.
    
        (WebCore::CSSStyleSelector::matchRules):
        
            New link and focus checks.

        (WebCore::CSSStyleSelector::matchRulesForList):
        (WebCore::CSSStyleSelector::checkSelector):
        
            Inline the rightmost selector tag checking, skip if unnecessary.
        
        (WebCore::isSelectorMatchingHTMLBasedOnRuleHash):
        
            Common pseudo classes now match based on early filtering (though it is not a hash in this case).

        (WebCore::RuleData::RuleData):
        (WebCore::RuleSet::~RuleSet):
        (WebCore::RuleSet::addRule):
        
            Sort pseudo classes to new lists.
        
        (WebCore::RuleSet::collectFeatures):
        (WebCore::RuleSet::shrinkToFit):
        (WebCore::CSSStyleSelector::matchPageRules):
        * css/SelectorChecker.cpp:
        (WebCore::SelectorChecker::checkSelector):
        
            Adopt to expanded fast path (this is used by querySelectorAll).

        (WebCore::SelectorChecker::fastCheckRightmostSelector):
        (WebCore::SelectorChecker::fastCheckSelector):
        
            Rightmost selector is now checked differently than the rest. RuleSet based selection in CSSStyleSelector
            is equivalent to fastCheckRightmostSelector().
        
        (WebCore::isFastCheckableRelation):
        (WebCore::isFastCheckableMatch):
        (WebCore::isFastCheckableRightmostSelector):
        (WebCore::SelectorChecker::isFastCheckableSelector):
        (WebCore::SelectorChecker::checkOneSelector):
        (WebCore::SelectorChecker::commonPseudoClassSelectorMatches):
        (WebCore::SelectorChecker::isFrameFocused):
        * css/SelectorChecker.h:
        (WebCore::SelectorChecker::isCommonPseudoClassSelector):
        (WebCore::SelectorChecker::linkMatchesVisitedPseudoClass):
        (WebCore::SelectorChecker::matchesFocusPseudoClass):
        (WebCore::SelectorChecker::tagMatches):
        
            Refactor a bunch of shared checks into functions.

2011-09-12  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION(r74971): Selection doesn't work correctly in BiDi Text
        https://bugs.webkit.org/show_bug.cgi?id=57340

        Reviewed by Eric Seidel.

        This patch adds the end point adjustment mechanism at bidi boundaries similar to the one NSTextView implements.

        To understand the problem, suppose we have strong RTL letters "ABC" in a LTR block (visually laid out as CBA).

        Per NSTextView convention, logical offsets between each letter is placed as (0)C(2)B(1)A(3). In other words,
        placing the caret visually on the left of CBA yields the position inside the text node of "ABC" at offset 0.
        Likewise, placing it between C and B yields ("ABC", 2), and placing it on the right of CBA yields ("ABC", 3).

        Now suppose a user attempts to select the letter A by a mouse drag from the right of CBA to a point between
        B and A. First, the initial mouse down places the selection's base at ("ABC", 3). Then as the mouse pointer
        moves to a point on the left of A, the selection's extent is set at ("ABC", 1), selecting "BC".

        To mitigate this issue, NSTextView adjusts selection base and extent under certain conditions. In the above
        example, NSTextView detects user's intent and changes the selection's base to ("ABC", 0) temporarily.

        This patch implements a similar trick on WebKit. We adjust the base or the extent when they're at the left
        end or at the right end of a bidi run and the other end is inside of the run. In the above example, the
        base position on the right of A is the right end of a bidi run and the extent position between B and A is
        inside the same run (CBA), so we would adjust the base to be ("ABC", 0) as NSTextView does.

        Take another example abcABC. Note offsets are assigned as (0)a(1)b(2)c(3)C(5)B(4)A(6) When the user starts
        a mouse drag from the right of A to a point between B and A, we adjust the selection base to be ("abcABC", 3)
        because the base is at the right end of a bidi run and the extent is in the same run. We keep the adjustment
        when the mouse pointer moves to a point between C and B. However, when the mouser pointer reaches a point
        between letters b and c, the selection extent is placed at ("abcABC", 2). Because the extent is outside of
        the bidi run started from the selection base, we restore the original base at this point. Had we not done this,
        we'll end up selecting just "c".

        While this algorithm is implemented in FrameSelection::setNonDirectionalSelectionIfNeeded, this patch adds
        various member functions to RenderedPosition to facilitate abstraction around inline boxes and bidi runs.

        Test: editing/selection/select-bidi-run.html

        * editing/FrameSelection.cpp:
        (WebCore::adjustEndpointsAtBidiBoundary): Added. Implements the endpoints adjustment algorithm.
        (WebCore::FrameSelection::setNonDirectionalSelectionIfNeeded): Calls adjustEndpointsAtBidiBoundary, and
        restores the original base as needed.
        * editing/FrameSelection.h:
        * editing/RenderedPosition.cpp:
        (WebCore::RenderedPosition::RenderedPosition):
        (WebCore::RenderedPosition::prevLeafChild): Added to cache prevLeafChild of the current inline box.
        (WebCore::RenderedPosition::nextLeafChild): Ditto for nextLeafChild.
        (WebCore::RenderedPosition::isEquivalent): Compares two RenderedPositions considering neighboring inline boxes
        so that the rightmost position in a box and the leftmost position in the following box is considered equal.
        (WebCore::RenderedPosition::bidiLevelOnLeft): Added. Returns the bidi level of the run on the left. We can't
        add a generic bidiLevel to this class because it'll be ambiguous at bidi boundaries.
        (WebCore::RenderedPosition::bidiLevelOnRight): Ditto for the run on the right.
        (WebCore::RenderedPosition::leftBoundaryOfBidiRun): Added.
        (WebCore::RenderedPosition::rightBoundaryOfBidiRun): Added.
        (WebCore::RenderedPosition::atLeftBoundaryOfBidiRun): Added.
        (WebCore::RenderedPosition::atRightBoundaryOfBidiRun): Added.
        (WebCore::RenderedPosition::positionAtLeftBoundaryOfBiDiRun): Returns Position at the left edge of a bidi run
        if RenderedPosition is at such a position. Asserts atLeftBoundaryOfBidiRun.
        (WebCore::RenderedPosition::positionAtRightBoundaryOfBiDiRun): Ditto for the right edge.
        * editing/RenderedPosition.h:
        (WebCore::RenderedPosition::atLeftBoundaryOfBidiRun): Added.
        (WebCore::RenderedPosition::atRightBoundaryOfBidiRun): Added.
        (WebCore::RenderedPosition::atLeftmostOffsetInBox): Added.
        (WebCore::RenderedPosition::atRightmostOffsetInBox): Added.
        (WebCore::RenderedPosition::uncachedInlineBox): Added. We can't use a static const variable because gcc thinks
        reinterpret_cast<InlineBox*>(1) is not an integral value.
        (WebCore::RenderedPosition::RenderedPosition):
        * editing/VisibleSelection.h:
        (WebCore::VisibleSelection::visibleBase): Added.
        (WebCore::VisibleSelection::visibleExtent): Added.
        * page/EventHandler.cpp:
        (WebCore::EventHandler::updateSelectionForMouseDrag):

2011-09-26  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95256.
        http://trac.webkit.org/changeset/95256
        https://bugs.webkit.org/show_bug.cgi?id=68814

        Temporary CRASH calls no longer needed (Requested by enne on
        #webkit).

        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::commitTo):

2011-09-26  Mark Rowe  <mrowe@apple.com>

        <http://webkit.org/b/68809> IconDatabase::syncThreadMainLoop can assert if wakeSyncThread is called before thread starts executing

        If wakeSyncThread is called before syncThreadMainLoop starts executing then m_syncThreadHasWorkToDo would be set
        while executing the body of the sync thread loop, causing us to skip blocking on the condition variable. This would
        lead to us hitting the assertion failure due to m_disabledSuddenTerminationForSyncThread being false, unless the main
        thread happened to call wakeSyncThread a second time while the first loop iteration was executing.

        Reviewed by Anders Carlsson.

        * loader/icon/IconDatabase.cpp:
        (WebCore::IconDatabase::syncThreadMainLoop): Clear m_syncThreadHasWorkToDo to indicate that we're about to perform
        all pending work.

2011-09-26  Antaryami Pandia  <antaryami.pandia@motorola.com>

        Groove/inset/outset borders show solid if the color is black.
        https://bugs.webkit.org/show_bug.cgi?id=58608

        Reviewed by Simon Fraser.

        Lightened the border side colors when drawing borders with styles as
        Outset/Inset/Groove/Ridge.

        Tests: fast/borders/border-groove.html
               fast/borders/border-inset.html
               fast/borders/border-outset.html
               fast/borders/border-ridge.html

        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::drawLineForBoxSide):

2011-09-26  Abhishek Arya  <inferno@chromium.org>

        Delete retired custom font data only on document
        destruction, and not on recalc style.
        https://bugs.webkit.org/show_bug.cgi?id=68805

        Reviewed by Dave Hyatt.

        Test: fast/text/custom-font-data-crash.html

        * dom/Document.cpp:
        (WebCore::Document::recalcStyle):

2011-09-23  Adrienne Walker  <enne@google.com>

        [chromium] Update VideoLayerChromium textures after texture resources are reclaimed
        https://bugs.webkit.org/show_bug.cgi?id=68742

        Reviewed by James Robinson.

        If video textures are reclaimed (such as during a visibility change on
        a tab), the dirty rect for the layer is empty and it skips out of
        updating compositor resources, leaving the video textures invalid.
        Instead, check the textures here to make sure they're still valid
        first before early out so that they can get reupdated if necessary.

        Additionally, fix a small bug in pushPropertiesTo where 1 plane RGB
        videos would not get drawn because all 3 planes didn't have valid
        textures.

        Test: compositing/video-page-visibility.html

        * platform/graphics/chromium/VideoLayerChromium.cpp:
        (WebCore::VideoLayerChromium::VideoLayerChromium):
        (WebCore::VideoLayerChromium::cleanupResources):
        (WebCore::VideoLayerChromium::updateCompositorResources):
        (WebCore::VideoLayerChromium::pushPropertiesTo):
        (WebCore::VideoLayerChromium::setLayerTreeHost):
        (WebCore::VideoLayerChromium::texturesValid):
        * platform/graphics/chromium/VideoLayerChromium.h:

2011-09-26  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: introduce protocol backwards compatibility validator.
        https://bugs.webkit.org/show_bug.cgi?id=68800

        Reviewed by Yury Semikhatsky.

        * inspector/Inspector.json:
        * inspector/Inspector.draft-01.json: Copied from Source/WebCore/inspector/Inspector.json.
        * inspector/validate-protocol-compatibility: Added.

2011-09-26  Andreas Kling  <kling@webkit.org>

        [Qt] Unused variable in QNetworkReplyHandler::sendNetworkRequest.
        https://bugs.webkit.org/show_bug.cgi?id=68798

        Reviewed by Noam Rosenthal.

        * platform/network/qt/QNetworkReplyHandler.cpp:
        (WebCore::QNetworkReplyHandler::sendNetworkRequest):

2011-09-26  Ilya Tikhonovsky  <loislo@chromium.org>

        Second unreviewed build fix for r95941

        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::willCallFunctionImpl):

2011-09-26  Ilya Tikhonovsky  <loislo@chromium.org>

        Unreviewed build fix for webkit builds after r95941.

        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::willCallFunctionImpl):

2011-09-26  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: [Extensions API] allow resources to hook on click on resource links
        https://bugs.webkit.org/show_bug.cgi?id=68528

        Reviewed by Yury Semikhatsky.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/front-end/ExtensionAPI.js:
        (injectedExtensionAPI.Console.prototype.get Severity):
        (injectedExtensionAPI.Panels.prototype.create):
        (injectedExtensionAPI.Panels.prototype.setOpenResourceHandler.else.callbackWrapper):
        (injectedExtensionAPI.Panels.prototype.setOpenResourceHandler):
        (injectedExtensionAPI.ExtensionServerClient.prototype.hasHandler):
        (injectedExtensionAPI.ExtensionServerClient.prototype.deregisterHandler):
        * inspector/front-end/ExtensionServer.js:
        (WebInspector.ExtensionServer):
        (WebInspector.ExtensionServer.prototype._onSetOpenResourceHandler):
        (WebInspector.ExtensionServer.prototype._handleAnchorClicked):
        (WebInspector.ExtensionServer.prototype._addExtensions):
        (WebInspector.ExtensionServer.prototype._addExtension):
        (WebInspector.ExtensionServer.prototype._registerExtension):
        * inspector/front-end/SettingsScreen.js:
        (WebInspector.SettingsScreen):
        (WebInspector.SettingsScreen.prototype._createCustomSetting):
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/helpScreen.css:
        (.help-content select):
        (.help-content select:disabled):
        (.help-content option):
        * inspector/front-end/inspector.html:
        * inspector/front-end/inspector.js:
        (WebInspector.set attached):
        (WebInspector._showAnchorLocation):

2011-09-23  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: Timeline: record root event for the function calls enforced by console eval.
        https://bugs.webkit.org/show_bug.cgi?id=68695

        In a complex web application developer might want to timeline a specific piece of code.

        In this case he can do the next steps:
        1) start timeline;
        2) eval a command in console;
        3) stop timeline.

        I think it'd be nice to have a root event for the all the events that happened as the result of such eval.

        Reviewed by Yury Semikhatsky.

        Test: inspector/timeline/timeline-injected-script-eval.html

        * bindings/v8/ScriptFunctionCall.cpp:
        * inspector/InjectedScript.cpp:
        (WebCore::InjectedScript::makeCall):
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::willCallFunctionImpl):

2011-09-26  No'am Rosenthal  <noam.rosenthal@nokia.com>

        [Texmap][Qt] Enable TextureMapperGL in platforms where BGRA is not present
        https://bugs.webkit.org/show_bug.cgi?id=65473

        Reviewed by Andreas Kling.

        For now, swap RGBA->BGRA in software if we're in OpenGL ES 2.
        We do that by iterating on the pixels and manually swapping each pixel's red and blue
        values. This can be done faster with shaders, but for now this is a working solution
        for platforms without BGRA support.

        No new tests. Existing layout tests cover this.

        * platform/graphics/opengl/TextureMapperGL.cpp:
        (WebCore::BitmapTextureGL::endPaint):
        * platform/graphics/opengl/TextureMapperGL.h:
        * platform/graphics/qt/TextureMapperQt.cpp:
        (WebCore::RGBA32PremultimpliedBufferQt::swapRGB):

2011-09-26  Sergio Villar Senin  <svillar@igalia.com>

        [GTK] Fix coding style bits in ResourceHandleSoup.cpp
        https://bugs.webkit.org/show_bug.cgi?id=68634

        Reviewed by Martin Robinson.

        No new tests needed.

        * platform/network/soup/ResourceHandleSoup.cpp:
        (WebCore::ResourceHandle::defaultSession):

2011-09-26  James Robinson  <jamesr@chromium.org>

        [mac] Timestamp parameter to requestAnimationFrame is busted in USE(REQUEST_ANIMATION_FRAME_TIMER) path
        https://bugs.webkit.org/show_bug.cgi?id=68769

        Reviewed by Simon Fraser.

        Convert the time parameter from double to DOMTimeStamp using convertSecondsToDOMTimeStamp rather than relying on
        implicit double->long conversion, which ignores the units of the value.

        Test: fast/animation/request-animation-frame-timestamps-advance.html

        * dom/ScriptedAnimationController.cpp:
        (WebCore::ScriptedAnimationController::animationTimerFired):

2011-09-25  Mark Hahnenberg  <mhahnenberg@apple.com>

        Add custom vtable struct to ClassInfo struct
        https://bugs.webkit.org/show_bug.cgi?id=68567

        Reviewed by Oliver Hunt.

        No new tests.

        Added CREATE_METHOD_TABLE macro to generate the custom vtable for the 
        specified class in its ClassInfo.  Also added to it the first function to use 
        this macro, visitChildren.  This is part of the process of getting rid of all 
        C++ virtual methods in JSCell.  Eventually all virtual functions in JSCell 
        that can't easily be converted to non-virtual functions will be put into 
        this custom vtable structure.

        * bindings/js/JSAudioConstructor.cpp:
        * bindings/js/JSDOMGlobalObject.cpp:
        * bindings/js/JSDOMWindowBase.cpp:
        * bindings/js/JSDOMWindowShell.cpp:
        * bindings/js/JSImageConstructor.cpp:
        * bindings/js/JSImageDataCustom.cpp:
        (WebCore::toJS):
        * bindings/js/JSOptionConstructor.cpp:
        * bindings/js/JSWorkerContextBase.cpp:

        Changed the bindings generator to add the call to the CREATE_METHOD_TABLE macro where
        necessary.
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateImplementation):
        (GenerateConstructorDefinition):
        * bindings/scripts/test/JS/JSTestInterface.cpp:
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        * bindings/scripts/test/JS/JSTestObj.cpp:
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        * bridge/c/CRuntimeObject.cpp:
        * bridge/c/c_instance.cpp:
        * bridge/jni/jsc/JavaInstanceJSC.cpp:
        * bridge/jni/jsc/JavaRuntimeObject.cpp:
        * bridge/objc/ObjCRuntimeObject.mm:
        * bridge/objc/objc_instance.mm:
        * bridge/objc/objc_runtime.mm:
        * bridge/qt/qt_instance.cpp:
        * bridge/qt/qt_pixmapruntime.cpp:
        * bridge/qt/qt_runtime.cpp:
        * bridge/runtime_array.cpp:
        * bridge/runtime_method.cpp:
        * bridge/runtime_object.cpp:

2011-09-25  Eunmi Lee  <eunmi15.lee@samsung.com>

        [EFL] Move GtkWidgetBackingStoreCairo to the cairo directory and modify to use in the EFL.
        https://bugs.webkit.org/show_bug.cgi?id=63502

        Reviewed by Martin Robinson.

        The gtk/GtkWidgetBackingStoreCairo.cpp is moved to the cairo/WidgetBackingStoreCairo.cpp and
        some codes for EFL are added.
        WidgetBackingStoreCairo creates cairo_image_surface and has a role to copy reusable area
        when scrolling. So, it will be used in the WebKit2 EFL port's BackingStore.

        * CMakeListsEfl.txt:
        * GNUmakefile.list.am:
        * platform/cairo/WidgetBackingStore.h:
        * platform/cairo/WidgetBackingStoreCairo.cpp: Renamed from Source/WebCore/platform/gtk/GtkWidgetBackingStoreCairo.cpp.
        (WebCore::createSurfaceForBackingStore):
        (WebCore::WidgetBackingStorePrivate::create):
        (WebCore::WidgetBackingStorePrivate::WidgetBackingStorePrivate):
        (WebCore::WidgetBackingStore::create):
        (WebCore::WidgetBackingStore::WidgetBackingStore):
        (WebCore::WidgetBackingStore::~WidgetBackingStore):
        (WebCore::WidgetBackingStore::cairoSurface):
        (WebCore::WidgetBackingStore::scroll):
        * platform/gtk/GtkWidgetBackingStoreX11.cpp:

2011-09-25  Adam Barth  <abarth@webkit.org>

        Finish removing PLATFORM(BREWMP) by removing associated code
        https://bugs.webkit.org/show_bug.cgi?id=68779

        Reviewed by Sam Weinig.

        When Geoffrey Garen removed PLATFORM(BREWMP) in
        http://trac.webkit.org/changeset/95555, he did not remove all the
        associated code.  This completes the work started in r95555 by removing
        all the code assoicated with PLATFORM(BREWMP).

        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * bindings/js/ScriptControllerBrew.cpp: Removed.
        * editing/brew: Removed.
        * editing/brew/EditorBrew.cpp: Removed.
        * gyp/WebCore.gyp:
        * page/brew: Removed.
        * page/brew/ChromeClientBrew.h: Removed.
        * page/brew/DragControllerBrew.cpp: Removed.
        * page/brew/EventHandlerBrew.cpp: Removed.
        * page/brew/FrameBrew.cpp: Removed.
        * platform/brew: Removed.
        * platform/brew/ClipboardBrew.cpp: Removed.
        * platform/brew/ClipboardBrew.h: Removed.
        * platform/brew/ContextMenuBrew.cpp: Removed.
        * platform/brew/ContextMenuItemBrew.cpp: Removed.
        * platform/brew/CursorBrew.cpp: Removed.
        * platform/brew/DragDataBrew.cpp: Removed.
        * platform/brew/EventLoopBrew.cpp: Removed.
        * platform/brew/FileSystemBrew.cpp: Removed.
        * platform/brew/KURLBrew.cpp: Removed.
        * platform/brew/LanguageBrew.cpp: Removed.
        * platform/brew/LocalizedStringsBrew.cpp: Removed.
        * platform/brew/LoggingBrew.cpp: Removed.
        * platform/brew/MIMETypeRegistryBrew.cpp: Removed.
        * platform/brew/PasteboardBrew.cpp: Removed.
        * platform/brew/PlatformKeyboardEventBrew.cpp: Removed.
        * platform/brew/PlatformMouseEventBrew.cpp: Removed.
        * platform/brew/PlatformTouchEventBrew.cpp: Removed.
        * platform/brew/PlatformTouchPointBrew.cpp: Removed.
        * platform/brew/PopupMenuBrew.cpp: Removed.
        * platform/brew/PopupMenuBrew.h: Removed.
        * platform/brew/SSLKeyGeneratorBrew.cpp: Removed.
        * platform/brew/ScreenBrew.cpp: Removed.
        * platform/brew/ScrollbarThemeBrew.cpp: Removed.
        * platform/brew/ScrollbarThemeBrew.h: Removed.
        * platform/brew/SearchPopupMenuBrew.cpp: Removed.
        * platform/brew/SearchPopupMenuBrew.h: Removed.
        * platform/brew/SharedBufferBrew.cpp: Removed.
        * platform/brew/SharedTimerBrew.cpp: Removed.
        * platform/brew/SoundBrew.cpp: Removed.
        * platform/brew/SystemTimeBrew.cpp: Removed.
        * platform/brew/TemporaryLinkStubs.cpp: Removed.
        * platform/brew/WidgetBrew.cpp: Removed.
        * platform/graphics/brew: Removed.
        * platform/graphics/brew/IconBrew.cpp: Removed.
        * platform/graphics/brew/ImageBrew.cpp: Removed.
        * platform/graphics/brew/IntPointBrew.cpp: Removed.
        * platform/graphics/brew/IntSizeBrew.cpp: Removed.
        * platform/network/brew: Removed.
        * platform/network/brew/DNSBrew.cpp: Removed.
        * platform/network/brew/SocketStreamError.h: Removed.
        * platform/network/brew/SocketStreamHandle.h: Removed.
        * platform/network/brew/SocketStreamHandleBrew.cpp: Removed.
        * platform/network/brew/SocketStreamHandlePrivate.h: Removed.
        * platform/text/brew: Removed.
        * platform/text/brew/TextBoundariesBrew.cpp: Removed.
        * platform/text/brew/TextBreakIteratorBrew.cpp: Removed.
        * platform/text/brew/TextCodecBrew.cpp: Removed.
        * platform/text/brew/TextCodecBrew.h: Removed.

2011-09-25  Kentaro Hara  <haraken@chromium.org>

        Implement a CloseEvent constructor for JSC
        https://bugs.webkit.org/show_bug.cgi?id=68340

        Reviewed by Oliver Hunt.

        The spec of the CloseEvent constructor is here:
        http://dev.w3.org/html5/websockets/#closeevent

        Test: fast/events/constructors/close-event-constructor.html

        * bindings/generic/EventConstructors.h: Added a definition for the CloseEvent constructor.
        * bindings/js/JSEventConstructors.cpp: Added #includes for CloseEvent.
        * websockets/CloseEvent.h: Added a definition for CloseEventInit.
        (WebCore::CloseEventInit::CloseEventInit):
        (WebCore::CloseEvent::create):
        (WebCore::CloseEvent::CloseEvent):
        * websockets/CloseEvent.idl: Makes CloseEvent constructible.

2011-09-25  Mark Rowe  <mrowe@apple.com>

        <rdar://problem/10177824> IconDatabase’s use of ThreadCondition leads to assertion failures in the face of spurious wakeups

        It's possible for ThreadCondition::wait to return spuriously without the condition having been signaled.
        When that happens we should immediately return to waiting rather than doing our normal work, as some of that
        work relies on wakeSyncThread having been called to signal the condition.

        Reviewed by Sam Weinig.

        * loader/icon/IconDatabase.cpp:
        (WebCore::IconDatabase::IconDatabase):
        (WebCore::IconDatabase::wakeSyncThread): Note that we have work for the sync thread to do.
        (WebCore::IconDatabase::syncThreadMainLoop): If we were woken with no work to do, immediately
        go back to waiting on the condition variable. Otherwise, reset m_syncThreadHasWorkToDo and then
        do that work. We also switch to moving m_disabledSuddenTerminationForSyncThread immediately in to
        our local shouldReenableSuddenTermination variable since it can be updated by other threads while
        we don't hold the lock. This makes it inappropriate to make assumptions about its value after dropping
        and reacquiring the lock.
        * loader/icon/IconDatabase.h:

2011-09-25  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/10156263> ASSERT in WebCore::FrameView::scheduleRelayoutOfSubtree

        Reviewed by Sam Weinig.

        Test: fast/dynamic/subtree-unrooted.html

        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::scheduleRelayout): Replaced the check that the renderer is parented,
        which was added in r21162, with a check that it is “rooted”.

2011-09-24  Abhishek Arya  <inferno@chromium.org>

        Issues with merging block children of a ruby
        base with another ruby base having inline children. 
        https://bugs.webkit.org/show_bug.cgi?id=66124

        Reviewed by Dan Bernstein.

        Test: fast/ruby/ruby-base-merge-block-children-crash.html

        * rendering/RenderRubyBase.cpp:
        (WebCore::RenderRubyBase::moveInlineChildren): add a firstChild()
        check to prevent empty anonymous block addition, just like
        moveBlockChildren method.
        * rendering/RenderRubyBase.cpp:
        (WebCore::RenderRubyBase::moveBlockChildren): This was incorrectly
        doing optimizations to see if current ruby base has only inline
        children before beforeChild and then trying to take out them from 
        their parent anonymous blocks. The problem is those inlines could
        be split and have continuations because of encountering a block
        inside inline flow. In those cases, we cannot take the inline out.
        So, we should just make children non-inline in the destination
        block and transfer the children as it-is.
        * rendering/RenderRubyBase.h: remove unncessary functions.

2011-09-25  Adam Barth  <abarth@webkit.org>

        Remove PLATFORM(HAIKU) and associated code
        https://bugs.webkit.org/show_bug.cgi?id=68774

        Reviewed by Sam Weinig.

        As discussed on webkit-dev, the Haiku port has been inactive for over a
        year.  A year and a half ago, we discussed removing the port, but folks
        said they planned to work on it more.  That work does not appear to
        have happened in the intervening time.

        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * bindings/js/ScriptControllerHaiku.cpp: Removed.
        * editing/haiku: Removed.
        * editing/haiku/EditorHaiku.cpp: Removed.
        * gyp/WebCore.gyp:
        * loader/cache/CachedFont.cpp:
        * page/EventHandler.cpp:
        (WebCore::EventHandler::eventInvertsTabsToLinksClientCallResult):
        * page/haiku: Removed.
        * page/haiku/DragControllerHaiku.cpp: Removed.
        * page/haiku/EventHandlerHaiku.cpp: Removed.
        * page/haiku/FrameHaiku.cpp: Removed.
        * platform/ContextMenuItem.h:
        * platform/Cursor.h:
        * platform/DragData.h:
        * platform/DragImage.h:
        * platform/PlatformKeyboardEvent.h:
        * platform/PlatformMenuDescription.h:
        * platform/PlatformMouseEvent.h:
        * platform/Widget.h:
        * platform/graphics/BitmapImage.h:
        * platform/graphics/Color.h:
        * platform/graphics/FloatPoint.h:
        * platform/graphics/FloatRect.h:
        * platform/graphics/Gradient.h:
        * platform/graphics/GraphicsContext.cpp:
        * platform/graphics/GraphicsContext.h:
        * platform/graphics/ImageBufferData.h:
        * platform/graphics/ImageSource.h:
        * platform/graphics/IntPoint.h:
        * platform/graphics/IntRect.h:
        * platform/graphics/IntSize.h:
        * platform/graphics/Path.h:
        * platform/graphics/Pattern.h:
        * platform/graphics/SimpleFontData.h:
        * platform/graphics/haiku: Removed.
        * platform/graphics/haiku/ColorHaiku.cpp: Removed.
        * platform/graphics/haiku/FloatPointHaiku.cpp: Removed.
        * platform/graphics/haiku/FloatRectHaiku.cpp: Removed.
        * platform/graphics/haiku/FontCacheHaiku.cpp: Removed.
        * platform/graphics/haiku/FontCustomPlatformData.cpp: Removed.
        * platform/graphics/haiku/FontCustomPlatformData.h: Removed.
        * platform/graphics/haiku/FontHaiku.cpp: Removed.
        * platform/graphics/haiku/FontPlatformData.h: Removed.
        * platform/graphics/haiku/GlyphPageTreeNodeHaiku.cpp: Removed.
        * platform/graphics/haiku/GradientHaiku.cpp: Removed.
        * platform/graphics/haiku/GraphicsContextHaiku.cpp: Removed.
        * platform/graphics/haiku/IconHaiku.cpp: Removed.
        * platform/graphics/haiku/ImageBufferDataHaiku.h: Removed.
        * platform/graphics/haiku/ImageBufferHaiku.cpp: Removed.
        * platform/graphics/haiku/ImageHaiku.cpp: Removed.
        * platform/graphics/haiku/IntPointHaiku.cpp: Removed.
        * platform/graphics/haiku/IntRectHaiku.cpp: Removed.
        * platform/graphics/haiku/IntSizeHaiku.cpp: Removed.
        * platform/graphics/haiku/PathHaiku.cpp: Removed.
        * platform/graphics/haiku/SimpleFontDataHaiku.cpp: Removed.
        * platform/graphics/haiku/StillImageHaiku.cpp: Removed.
        * platform/graphics/haiku/StillImageHaiku.h: Removed.
        * platform/haiku: Removed.
        * platform/haiku/ClipboardHaiku.cpp: Removed.
        * platform/haiku/ClipboardHaiku.h: Removed.
        * platform/haiku/ContextMenuHaiku.cpp: Removed.
        * platform/haiku/ContextMenuItemHaiku.cpp: Removed.
        * platform/haiku/CookieJarHaiku.cpp: Removed.
        * platform/haiku/CursorHaiku.cpp: Removed.
        * platform/haiku/DragDataHaiku.cpp: Removed.
        * platform/haiku/DragImageHaiku.cpp: Removed.
        * platform/haiku/EventLoopHaiku.cpp: Removed.
        * platform/haiku/FileSystemHaiku.cpp: Removed.
        * platform/haiku/LocalizedStringsHaiku.cpp: Removed.
        * platform/haiku/LoggingHaiku.cpp: Removed.
        * platform/haiku/MIMETypeRegistryHaiku.cpp: Removed.
        * platform/haiku/PasteboardHaiku.cpp: Removed.
        * platform/haiku/PlatformKeyboardEventHaiku.cpp: Removed.
        * platform/haiku/PlatformMouseEventHaiku.cpp: Removed.
        * platform/haiku/PlatformWheelEventHaiku.cpp: Removed.
        * platform/haiku/PopupMenuHaiku.cpp: Removed.
        * platform/haiku/PopupMenuHaiku.h: Removed.
        * platform/haiku/RenderThemeHaiku.cpp: Removed.
        * platform/haiku/RenderThemeHaiku.h: Removed.
        * platform/haiku/ScreenHaiku.cpp: Removed.
        * platform/haiku/ScrollbarThemeHaiku.cpp: Removed.
        * platform/haiku/ScrollbarThemeHaiku.h: Removed.
        * platform/haiku/SearchPopupMenuHaiku.cpp: Removed.
        * platform/haiku/SearchPopupMenuHaiku.h: Removed.
        * platform/haiku/SharedBufferHaiku.cpp: Removed.
        * platform/haiku/SharedTimerHaiku.cpp: Removed.
        * platform/haiku/SoundHaiku.cpp: Removed.
        * platform/haiku/TemporaryLinkStubs.cpp: Removed.
        * platform/haiku/WidgetHaiku.cpp: Removed.
        * platform/image-decoders/haiku: Removed.
        * platform/image-decoders/haiku/ImageDecoderHaiku.cpp: Removed.
        * platform/text/UnicodeRange.h:
        * platform/text/haiku: Removed.
        * platform/text/haiku/TextBreakIteratorInternalICUHaiku.cpp: Removed.

2011-09-25  Adam Barth  <abarth@webkit.org>

        Attempted build fixes for GTK and Qt.

        * GNUmakefile.list.am:
        * WebCore.pro:

2011-09-24  Adam Barth  <abarth@webkit.org>

        Always enable ENABLE(OFFLINE_WEB_APPLICATIONS)
        https://bugs.webkit.org/show_bug.cgi?id=68767

        Reviewed by Eric Seidel.

        As discussed on webkit-dev, almost everyone has this enable turned on
        and this feature is unlikely to be removed from the web platform given
        its popularity.

        * CMakeLists.txt:
        * Configurations/FeatureDefines.xcconfig:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * WebCore.exp.in:
        * WebCore.pro:
        * bindings/cpp/WebDOMEventTarget.cpp:
        (toWebKit):
        * bindings/js/JSEventTarget.cpp:
        (WebCore::toJS):
        (WebCore::toEventTarget):
        * bindings/v8/V8DOMWrapper.cpp:
        (WebCore::V8DOMWrapper::convertEventTargetToV8Object):
        * dom/EventTarget.cpp:
        (WebCore::EventTarget::toDOMApplicationCache):
        * dom/EventTarget.h:
        * features.pri:
        * history/PageCache.cpp:
        (WebCore::logCanCacheFrameDecision):
        (WebCore::PageCache::canCachePageContainingThisFrame):
        * html/HTMLHtmlElement.cpp:
        (WebCore::HTMLHtmlElement::insertedByParser):
        * html/HTMLHtmlElement.h:
        * html/HTMLMediaElement.cpp:
        (WebCore::createFileURLForApplicationCacheResource):
        (WebCore::HTMLMediaElement::loadResource):
        * html/ImageDocument.cpp:
        (WebCore::ImageDocument::createDocumentStructure):
        * html/MediaDocument.cpp:
        (WebCore::MediaDocumentParser::createDocumentStructure):
        * html/PluginDocument.cpp:
        (WebCore::PluginDocumentParser::createDocumentStructure):
        * html/parser/HTMLConstructionSite.cpp:
        (WebCore::HTMLConstructionSite::insertHTMLHtmlStartTagBeforeHTML):
        * inspector/InspectorApplicationCacheAgent.cpp:
        * inspector/InspectorApplicationCacheAgent.h:
        * inspector/InspectorController.cpp:
        (WebCore::InspectorController::InspectorController):
        (WebCore::InspectorController::connectFrontend):
        (WebCore::InspectorController::disconnectFrontend):
        * inspector/InspectorController.h:
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::updateApplicationCacheStatusImpl):
        * inspector/InspectorInstrumentation.h:
        (WebCore::InspectorInstrumentation::networkStateChanged):
        (WebCore::InspectorInstrumentation::updateApplicationCacheStatus):
        * inspector/InstrumentingAgents.h:
        (WebCore::InstrumentingAgents::InstrumentingAgents):
        (WebCore::InstrumentingAgents::setInspectorApplicationCacheAgent):
        * inspector/WorkerInspectorController.cpp:
        (WebCore::WorkerInspectorController::connectFrontend):
        * inspector/generate-inspector-idl:
        * loader/DocumentLoader.cpp:
        (WebCore::DocumentLoader::DocumentLoader):
        (WebCore::DocumentLoader::mainReceivedError):
        (WebCore::DocumentLoader::stopLoading):
        (WebCore::DocumentLoader::detachFromFrame):
        (WebCore::DocumentLoader::handledOnloadEvents):
        * loader/DocumentLoader.h:
        (WebCore::DocumentLoader::applicationCacheHost):
        * loader/EmptyClients.h:
        (WebCore::EmptyChromeClient::reachedApplicationCacheOriginQuota):
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::loadResourceSynchronously):
        * loader/MainResourceLoader.cpp:
        (WebCore::MainResourceLoader::willSendRequest):
        (WebCore::MainResourceLoader::didReceiveResponse):
        (WebCore::MainResourceLoader::didReceiveData):
        (WebCore::MainResourceLoader::didFinishLoading):
        (WebCore::MainResourceLoader::didFail):
        (WebCore::MainResourceLoader::load):
        * loader/ResourceLoader.cpp:
        (WebCore::ResourceLoader::start):
        (WebCore::ResourceLoader::willSendRequest):
        (WebCore::ResourceLoader::didSendData):
        (WebCore::ResourceLoader::didReceiveResponse):
        (WebCore::ResourceLoader::didReceiveData):
        (WebCore::ResourceLoader::didFinishLoading):
        (WebCore::ResourceLoader::didFail):
        (WebCore::ResourceLoader::wasBlocked):
        (WebCore::ResourceLoader::cannotShowURL):
        (WebCore::ResourceLoader::shouldUseCredentialStorage):
        (WebCore::ResourceLoader::willCacheResponse):
        * loader/ResourceLoader.h:
        * loader/appcache/ApplicationCache.cpp:
        * loader/appcache/ApplicationCache.h:
        * loader/appcache/ApplicationCacheGroup.cpp:
        * loader/appcache/ApplicationCacheGroup.h:
        * loader/appcache/ApplicationCacheHost.cpp:
        * loader/appcache/ApplicationCacheHost.h:
        * loader/appcache/ApplicationCacheResource.cpp:
        * loader/appcache/ApplicationCacheResource.h:
        * loader/appcache/ApplicationCacheStorage.cpp:
        * loader/appcache/ApplicationCacheStorage.h:
        * loader/appcache/DOMApplicationCache.cpp:
        * loader/appcache/DOMApplicationCache.h:
        * loader/appcache/DOMApplicationCache.idl:
        * loader/appcache/ManifestParser.cpp:
        (WebCore::parseManifest):
        * loader/appcache/ManifestParser.h:
        * loader/chromium/ResourceLoaderChromium.cpp:
        (WebCore::ResourceLoader::didDownloadData):
        * page/ChromeClient.h:
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::clear):
        (WebCore::DOMWindow::applicationCache):
        * page/DOMWindow.h:
        (WebCore::DOMWindow::optionalApplicationCache):
        * page/DOMWindow.idl:
        * xml/parser/XMLDocumentParserLibxml2.cpp:
        (WebCore::XMLDocumentParser::startElementNs):
        * xml/parser/XMLDocumentParserQt.cpp:
        (WebCore::XMLDocumentParser::parseStartElement):

2011-09-24  Adam Barth  <abarth@webkit.org>

        Remove ENABLE(WCSS) and associated code
        https://bugs.webkit.org/show_bug.cgi?id=68759

        Reviewed by Darin Adler.

        As discussed on webkit-dev, we are removing this feature from trunk to
        reduce the number of different configurations.

        * CodeGenerators.pri:
        * GNUmakefile.am:
        * WebCore.pro:
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * css/CSSParser.h:
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        * css/WCSSPropertyNames.in: Removed.
        * css/WCSSValueKeywords.in: Removed.
        * features.pri:
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::HTMLInputElement):
        * html/HTMLInputElement.h:
        * html/TextFieldInputType.cpp:
        (WebCore::TextFieldInputType::sanitizeValue):
        (WebCore::TextFieldInputType::handleBeforeTextInsertedEvent):
        * rendering/RenderMarquee.cpp:
        (WebCore::RenderMarquee::start):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::createObject):
        * rendering/style/RenderStyleConstants.h:

2011-09-24  Young Han Lee  <joybro@company100.net>

        SVGAnimation does not support 'values' for from-to animations
        https://bugs.webkit.org/show_bug.cgi?id=64859

        Reviewed by Dirk Schulze.

        If from-to animation have discrete calc-mode and have a 'keyTimes' list, values of
        the keyTimes indicate the begin and the end of the animation respectively.[1][2]

        When keyTimes is given, calculate the progress percentage of the animation with it
        even for from-to animation.

        [1] http://www.w3.org/TR/SVG/animate.html#ValueAttributes
        [2] http://www.w3.org/TR/2001/REC-smil-animation-20010904/#AnimFuncValues

        Test: svg/animations/animate-from-to-keyTimes.html

        * svg/SVGAnimationElement.cpp:
        (WebCore::SVGAnimationElement::calculatePercentForFromTo):
        (WebCore::SVGAnimationElement::updateAnimation):
        * svg/SVGAnimationElement.h:

2011-09-23  Chris Fleizach  <cfleizach@apple.com>

        WebKit does not expose AXPlaceholder value on password fields
        https://bugs.webkit.org/show_bug.cgi?id=68745

        Reviewed by Oliver Hunt.

        * accessibility/mac/WebAccessibilityObjectWrapper.mm:
        (-[WebAccessibilityObjectWrapper accessibilityAttributeNames]):

2011-09-23  Mark Rowe  <mrowe@apple.com>

        Fix the build.

        * loader/CrossOriginAccessControl.cpp:
        (WebCore::passesAccessControlCheck): Get rid of the exit-time destructor.

2011-09-23  Adam Barth  <abarth@webkit.org>

        Canvas security checks show up on HTML5GamingTest benchmark
        https://bugs.webkit.org/show_bug.cgi?id=68743

        Reviewed by Oliver Hunt.

        Prior to this patch, the canvas security checks took as much as 4% of
        the time on the HTML5GamingTest benchmark:

        http://craftymind.com/factory/guimark2/HTML5GamingTest.html

        This patch uses a couple of AtomicStrings and shuffles around the order
        of the security check to take this down to around 0.1% (which is near
        the noise floor of what I can measure with my profiler).

        * html/canvas/CanvasRenderingContext.cpp:
        (WebCore::CanvasRenderingContext::wouldTaintOrigin):
        * loader/CrossOriginAccessControl.cpp:
        (WebCore::passesAccessControlCheck):

2011-09-23  Justin Novosad  <junov@chromium.org>

        Unwarranted DOM Exception when canvas2D drawImage is called with src
        rect out of bounds
        https://bugs.webkit.org/show_bug.cgi?id=65709

        Reviewed by Oliver Hunt.

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::drawImage):
        Return early without throwing an exception if source rectangle is out of 
        bounds to match the spec.

2011-09-23  Lukasz Slachciak  <l.slachciak@samsung.com>

        Printing of notImplemented() when logging enabled.
        https://bugs.webkit.org/show_bug.cgi?id=64590

        Printing of notImplemented() method was enabled on Debug builds only.
        Now it is enabled when logging is enabled.

        Reviewed by Oliver Hunt.

        No new tests because there is no new functionality.

        * platform/NotImplemented.h: Non-debug mode replaced with non-logging mode.

2011-09-23  Mihai Parparita  <mihaip@chromium.org>

        [Chromium] REGRESSION (r95725): Resizing a window doesn't resize the contents
        https://bugs.webkit.org/show_bug.cgi?id=68730

        Reviewed by James Robinson.

        Adds a missing contentsResized() call in ScrollView::setFrameRect.

        Test: fast/dom/Window/window-resize-contents.html

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::setFrameRect):

2011-09-23  Adam Klein  <adamk@chromium.org>

        Add ENABLE_MUTATION_OBSERVERS feature flag
        https://bugs.webkit.org/show_bug.cgi?id=68732

        Reviewed by Ojan Vafai.

        This flag will guard an implementation of the "Mutation Observers" proposed in
        http://lists.w3.org/Archives/Public/public-webapps/2011JulSep/1622.html

        * Configurations/FeatureDefines.xcconfig:
        * GNUmakefile.am:

2011-09-23  Varun Jain  <varunjain@google.com>

        Refactor WebViewImpl::scrollFocusedNodeIntoRect to a better place and add tests 
        https://bugs.webkit.org/show_bug.cgi?id=68198

        Reviewed by Dimitri Glazkov.

        Tests: fast/dom/scroll-element-to-rect-centered.html
               fast/dom/scroll-element-to-rect.html

        * WebCore.exp.in:
        * page/FrameView.cpp:
        (WebCore::FrameView::scrollElementToRect):
        * page/FrameView.h:
        * testing/Internals.cpp:
        (WebCore::Internals::scrollElementToRect):
        * testing/Internals.h:
        * testing/Internals.idl:

2011-09-23  Mihai Parparita  <mihaip@chromium.org>

        Unreviewed, rolling out r95860.
        http://trac.webkit.org/changeset/95860
        https://bugs.webkit.org/show_bug.cgi?id=68648

        Breaks overhang rendering on Chromium Mac

        * platform/chromium/ScrollbarThemeChromium.cpp:
        * platform/chromium/ScrollbarThemeChromium.h:
        * platform/chromium/ScrollbarThemeChromiumMac.h:
        * platform/chromium/ScrollbarThemeChromiumMac.mm:
        (WebCore::ScrollbarThemeChromiumMac::ScrollbarThemeChromiumMac):
        (WebCore::ScrollbarThemeChromiumMac::paintOverhangAreas):

2011-09-23  Dean Jackson  <dino@apple.com>

        Add -webkit-filter to CSSPropertyNames
        https://bugs.webkit.org/show_bug.cgi?id=68675

        Reviewed by Simon Fraser.

        Add property and rudimentary parsing for -webkit-filter. The
        property value isn't preserved anywhere yet. Add
        stub definition for computed style.

        Test: css3/filters/filter-property.html

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::CSSParser::parseFilter):
        * css/CSSParser.h:
        * css/CSSPropertyNames.in:
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):

2011-09-23  Antoine Labour  <piman@chromium.org>

        Remove preserves3D() from CCLayerDelegate, replacing it by setting the
        value explicitly after creating a layer, or setting its delegate.
        https://bugs.webkit.org/show_bug.cgi?id=68295

        Reviewed by James Robinson.

        Covered by compositing/ layeout tests.

        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
        (WebCore::GraphicsLayerChromium::setContentsToCanvas):
        (WebCore::GraphicsLayerChromium::setContentsToMedia):
        (WebCore::GraphicsLayerChromium::updateLayerPreserves3D):
        (WebCore::GraphicsLayerChromium::setupContentsLayer):
        * platform/graphics/chromium/GraphicsLayerChromium.h:
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::LayerChromium):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::setPreserves3D):
        (WebCore::LayerChromium::preserves3D):

2011-09-23  Julien Chaffraix  <jchaffraix@webkit.org>

        Implicit conversion double to float in ShadowBlur::adjustBlurRadius
        https://bugs.webkit.org/show_bug.cgi?id=68722

        Reviewed by Simon Fraser.

        * platform/graphics/ShadowBlur.cpp:
        (WebCore::ShadowBlur::adjustBlurRadius): Added 2 explicit
        conversions.

2011-09-23  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/10178576> REGRESSION (r95391): Crash in -[WebCascadeList objectAtIndex:] when a font-family list contains missing fonts
        https://bugs.webkit.org/show_bug.cgi?id=68737

        Reviewed by Darin Adler.

        Test: fast/text/combining-character-sequence-fallback-crash.html

        * platform/graphics/mac/ComplexTextControllerCoreText.mm:
        (-[WebCascadeList initWithFont:WebCore::character:]): Changed to intialize _count to the exact
        number of FontData instances in the fallback list rather than the number of font families in the
        font description.

2011-09-23  David Reveman  <reveman@chromium.org>

        [Chromium] Fix CSS 3D corner anti-aliasing.
        https://bugs.webkit.org/show_bug.cgi?id=68087

        Reviewed by James Robinson.

        Render sharp corners more correctly by adding bounding box
        edges to anti-aliasing shaders.

        Test: platform/chromium/compositing/3d-corners.html

        * platform/graphics/chromium/ShaderChromium.cpp:
        (WebCore::FragmentShaderRGBATexAlphaAA::getShaderString):
        (WebCore::FragmentShaderRGBATexClampAlphaAA::getShaderString):
        (WebCore::FragmentShaderRGBATexClampSwizzleAlphaAA::getShaderString):
        (WebCore::FragmentShaderRGBATexAlphaMaskAA::getShaderString):
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::drawLayer):
        (WebCore::CCRenderSurface::drawSurface):
        * platform/graphics/chromium/cc/CCRenderSurface.h:
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::draw):
        (WebCore::CCTiledLayerImpl::drawTiles):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:

2011-09-23  Oliver Hunt  <oliver@apple.com>

        Make write barriers actually do something when enabled
        https://bugs.webkit.org/show_bug.cgi?id=68717

        Reviewed by Geoffrey Garen.

        Add a forwarding header, and fix an evaluation ordering
        issue that shows up if you try to use write barriers.

        * ForwardingHeaders/heap/CardSet.h: Added.
        * bindings/js/JSEventListener.h:
        (WebCore::JSEventListener::jsFunction):

2011-09-23  James Robinson  <jamesr@chromium.org>

        Avoid updating compositing state during paint
        https://bugs.webkit.org/show_bug.cgi?id=68727

        Reviewed by Simon Fraser.

        We shouldn't update our compositing state in the middle of a paint. The call to
        updateCompositingAndLayerListsIfNeeded() was added to RenderLayer::paintLayer in r45715, which was intended to
        fix this exact issue. Based off the ChangeLog entries, I think that this was just a typo.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::paintLayer):
        (WebCore::RenderLayer::updateCompositingAndLayerListsIfNeeded):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::updateCompositingLayers):
        * rendering/RenderLayerCompositor.h:

2011-09-23  Fady Samuel  <fsamuel@chromium.org>

        Refactor paintOverhangAreas to allow non-Mac Chromium platforms to reuse code
        https://bugs.webkit.org/show_bug.cgi?id=68648

        Reviewed by Dimitri Glazkov.

        No new tests because there's no change in functionality (yet).

        * platform/chromium/ScrollbarThemeChromium.cpp:
        (WebCore::ScrollbarThemeChromium::ScrollbarThemeChromium):
        (WebCore::ScrollbarThemeChromium::~ScrollbarThemeChromium):
        (WebCore::ScrollbarThemeChromium::paintOverhangAreas):
        * platform/chromium/ScrollbarThemeChromium.h:
        * platform/chromium/ScrollbarThemeChromiumMac.h:
        * platform/chromium/ScrollbarThemeChromiumMac.mm:
        (WebCore::ScrollbarThemeChromiumMac::ScrollbarThemeChromiumMac):

2011-09-23  Ojan Vafai  <ojan@chromium.org>

        remove physical flex-flow values to match the updated spec
        https://bugs.webkit.org/show_bug.cgi?id=68728

        Reviewed by Tony Chang.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        (WebCore::CSSPrimitiveValue::operator EFlexFlow):
        * css/CSSValueKeywords.in:
        * rendering/style/RenderStyleConstants.h:

2011-09-23  Abhishek Arya  <inferno@chromium.org>

        Style not updated for :before, :after content
        in ruby text.
        https://bugs.webkit.org/show_bug.cgi?id=68625

        Reviewed by Dave Hyatt.

        Test: fast/ruby/ruby-text-before-after-content.html

        * rendering/RenderRubyText.cpp:
        (WebCore::RenderRubyText::updateBeforeAfterContent):
        * rendering/RenderRubyText.h:

2011-09-22  Ojan Vafai  <ojan@chromium.org>

        refactor RenderFlexibleBox to use flex-flow aware methods
        https://bugs.webkit.org/show_bug.cgi?id=68665

        Reviewed by Tony Chang.

        This is just a refactor. Just move the all the code that needs to
        be flow aware into helper functions. Actually making them flow-aware
        can be done in a followup patch.

        * rendering/RenderBlock.cpp:
        * rendering/RenderBlock.h:
        Moved setLogicalLocationForChild into RenderFlexibleBox since that was the only caller.
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::hasOrthogonalFlow):
        (WebCore::RenderFlexibleBox::isHorizontalFlow):
        (WebCore::RenderFlexibleBox::isLeftToRightFlow):
        (WebCore::RenderFlexibleBox::setFlowAwareLogicalHeight):
        (WebCore::RenderFlexibleBox::flowAwareLogicalHeightForChild):
        (WebCore::RenderFlexibleBox::flowAwareLogicalWidthForChild):
        (WebCore::RenderFlexibleBox::flowAwareLogicalHeight):
        (WebCore::RenderFlexibleBox::flowAwareContentLogicalWidth):
        (WebCore::RenderFlexibleBox::flowAwareAvailableLogicalWidth):
        (WebCore::RenderFlexibleBox::flowAwareBorderStart):
        (WebCore::RenderFlexibleBox::flowAwareBorderBefore):
        (WebCore::RenderFlexibleBox::flowAwareBorderAfter):
        (WebCore::RenderFlexibleBox::flowAwarePaddingStart):
        (WebCore::RenderFlexibleBox::flowAwarePaddingBefore):
        (WebCore::RenderFlexibleBox::flowAwarePaddingAfter):
        (WebCore::RenderFlexibleBox::flowAwareMarginStartForChild):
        (WebCore::RenderFlexibleBox::flowAwareMarginBeforeForChild):
        (WebCore::RenderFlexibleBox::flowAwareMarginAfterForChild):
        (WebCore::RenderFlexibleBox::setFlowAwareMarginStartForChild):
        (WebCore::RenderFlexibleBox::setFlowAwareMarginEndForChild):
        (WebCore::RenderFlexibleBox::setFlowAwareLogicalLocationForChild):
        (WebCore::RenderFlexibleBox::logicalBorderAndPaddingWidthForChild):
        (WebCore::RenderFlexibleBox::logicalScrollbarHeightForChild):
        (WebCore::RenderFlexibleBox::marginStartStyleForChild):
        (WebCore::RenderFlexibleBox::marginEndStyleForChild):
        (WebCore::RenderFlexibleBox::preferredLogicalContentWidthForFlexItem):
        (WebCore::RenderFlexibleBox::layoutInlineDirection):
        (WebCore::RenderFlexibleBox::logicalPositiveFlexForChild):
        (WebCore::RenderFlexibleBox::logicalNegativeFlexForChild):
        (WebCore::RenderFlexibleBox::computePreferredLogicalWidth):
        (WebCore::RenderFlexibleBox::runFreeSpaceAllocationAlgorithmInlineDirection):
        (WebCore::RenderFlexibleBox::setLogicalOverrideSize):
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildrenInlineDirection):
        * rendering/RenderFlexibleBox.h:

2011-09-23  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68719
        
        Push through multiple regions when an object doesn't fit in any of them. Unlike with pages and
        columns, when regions have a non-uniform height, we may need to push through multiple regions
        in order to find one that fits.
        
        Added an optimization for quickly noticing if regions do have a uniform height so that we can
        treat them like columns and pages if so.

        Also fixed the end line matchup to properly null out endLine when no next line box exists. The new
        layout tests I wrote to cover this feature exposed this crasher, so fixing it in order to land
        the new tests.

        Reviewed by Anders Carlsson.

        Added new tests in fast/regions.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::adjustForUnsplittableChild):
        (WebCore::RenderBlock::pushToNextPageWithMinimumLogicalHeight):
        (WebCore::RenderBlock::adjustLinePositionForPagination):
        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::matchedEndLine):
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::RenderFlowThread):
        (WebCore::RenderFlowThread::layout):
        * rendering/RenderFlowThread.h:

2011-09-23  Konstantin Scheglov  <scheglov@google.com>

        Redrawing dirty parts of a large table is very slow
        https://bugs.webkit.org/show_bug.cgi?id=64546

        Reviewed by David Hyatt.

        Move CollapsedBorderValues into RenderTable.h.
        Calculate collapsed borders only once and re-use during paintObject().
        Invalidate cache when cell, row, row group, col, col group or table border is changed.

        Tests: fast/table/border-collapsing/cached-cell-append.html
               fast/table/border-collapsing/cached-cell-remove.html
               fast/table/border-collapsing/cached-change-cell-border-color.html
               fast/table/border-collapsing/cached-change-cell-border-width.html
               fast/table/border-collapsing/cached-change-col-border-color.html
               fast/table/border-collapsing/cached-change-col-border-width.html
               fast/table/border-collapsing/cached-change-colgroup-border-color.html
               fast/table/border-collapsing/cached-change-colgroup-border-width.html
               fast/table/border-collapsing/cached-change-row-border-color.html
               fast/table/border-collapsing/cached-change-row-border-width.html
               fast/table/border-collapsing/cached-change-table-border-color.html
               fast/table/border-collapsing/cached-change-table-border-width.html
               fast/table/border-collapsing/cached-change-tbody-border-color.html
               fast/table/border-collapsing/cached-change-tbody-border-width.html

        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::RenderTable):
        (WebCore::RenderTable::styleDidChange): Invalidate cache on border change.
        (WebCore::RenderTable::layout): Invalidate cache if layout changed.
        (WebCore::RenderTable::recalcCollapsedBorders): Ensures that cache is valid.
        (WebCore::RenderTable::paintObject): Use cached collapsed borders.
        * rendering/RenderTable.h:
        (WebCore::RenderTable::invalidateCollapsedBorders): Accessor to mark cache invalid.
        (WebCore::RenderTable::currentBorderValue): Rename to use word "value".
        * rendering/RenderTableCell.cpp:
        (WebCore::RenderTableCell::styleDidChange): If border changed, invalidate cache.

        Rename to use word "value".
        (WebCore::addBorderStyle):
        (WebCore::RenderTableCell::collectBorderValues):
        (WebCore::compareBorderValuesForQSort):
        (WebCore::RenderTableCell::sortBorderValues):
        (WebCore::RenderTableCell::paintCollapsedBorder):
        * rendering/RenderTableCell.h:
        
        If border changed, invalidate cache.
        * rendering/RenderTableCol.cpp:
        (WebCore::RenderTableCol::styleDidChange):
        * rendering/RenderTableCol.h:
        * rendering/RenderTableRow.cpp:
        (WebCore::RenderTableRow::styleDidChange):
        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::styleDidChange):

2011-09-23  Mark Hahnenberg  <mhahnenberg@apple.com>

        Add static version of JSCell::visitChildren
        https://bugs.webkit.org/show_bug.cgi?id=68404

        Reviewed by Darin Adler.

        No new tests.

        In this patch we just extract the bodies of the virtual visitChildren methods
        throughout the JSCell inheritance hierarchy out into static methods, which are 
        now called from the virtual methods.  This is an intermediate step in trying to 
        move the virtual-ness of visitChildren into our own custom vtable stored in 
        ClassInfo.  We need to convert the methods to static methods in order to be 
        able to more easily store and refer to them in our custom vtable since normal 
        member methods store some implicit information in their types, making it 
        impossible to store them generically in ClassInfo.

        * WebCore.exp.in:
        * bindings/js/JSAttrCustom.cpp:
        (WebCore::JSAttr::visitChildrenVirtual):
        (WebCore::JSAttr::visitChildren):
        * bindings/js/JSAudioContextCustom.cpp:
        (WebCore::JSAudioContext::visitChildrenVirtual):
        (WebCore::JSAudioContext::visitChildren):
        * bindings/js/JSCSSRuleCustom.cpp:
        (WebCore::JSCSSRule::visitChildrenVirtual):
        (WebCore::JSCSSRule::visitChildren):
        * bindings/js/JSCSSStyleDeclarationCustom.cpp:
        (WebCore::JSCSSStyleDeclaration::visitChildrenVirtual):
        (WebCore::JSCSSStyleDeclaration::visitChildren):
        * bindings/js/JSCanvasRenderingContextCustom.cpp:
        (WebCore::JSCanvasRenderingContext::visitChildrenVirtual):
        (WebCore::JSCanvasRenderingContext::visitChildren):
        * bindings/js/JSDOMGlobalObject.cpp:
        (WebCore::JSDOMGlobalObject::visitChildrenVirtual):
        (WebCore::JSDOMGlobalObject::visitChildren):
        * bindings/js/JSDOMGlobalObject.h:
        * bindings/js/JSDOMWindowCustom.cpp:
        (WebCore::JSDOMWindow::visitChildrenVirtual):
        (WebCore::JSDOMWindow::visitChildren):
        * bindings/js/JSDOMWindowShell.cpp:
        (WebCore::JSDOMWindowShell::visitChildrenVirtual):
        (WebCore::JSDOMWindowShell::visitChildren):
        * bindings/js/JSDOMWindowShell.h:
        * bindings/js/JSJavaScriptAudioNodeCustom.cpp:
        (WebCore::JSJavaScriptAudioNode::visitChildrenVirtual):
        (WebCore::JSJavaScriptAudioNode::visitChildren):
        * bindings/js/JSMessageChannelCustom.cpp:
        (WebCore::JSMessageChannel::visitChildrenVirtual):
        (WebCore::JSMessageChannel::visitChildren):
        * bindings/js/JSMessagePortCustom.cpp:
        (WebCore::JSMessagePort::visitChildrenVirtual):
        (WebCore::JSMessagePort::visitChildren):
        * bindings/js/JSNamedNodeMapCustom.cpp:
        (WebCore::JSNamedNodeMap::visitChildrenVirtual):
        (WebCore::JSNamedNodeMap::visitChildren):
        * bindings/js/JSNodeCustom.cpp:
        (WebCore::JSNode::visitChildrenVirtual):
        (WebCore::JSNode::visitChildren):
        * bindings/js/JSNodeFilterCustom.cpp:
        (WebCore::JSNodeFilter::visitChildrenVirtual):
        (WebCore::JSNodeFilter::visitChildren):
        * bindings/js/JSNodeIteratorCustom.cpp:
        (WebCore::JSNodeIterator::visitChildrenVirtual):
        (WebCore::JSNodeIterator::visitChildren):
        * bindings/js/JSSVGElementInstanceCustom.cpp:
        (WebCore::JSSVGElementInstance::visitChildrenVirtual):
        (WebCore::JSSVGElementInstance::visitChildren):
        * bindings/js/JSSharedWorkerCustom.cpp:
        (WebCore::JSSharedWorker::visitChildrenVirtual):
        (WebCore::JSSharedWorker::visitChildren):
        * bindings/js/JSStyleSheetCustom.cpp:
        (WebCore::JSStyleSheet::visitChildrenVirtual):
        (WebCore::JSStyleSheet::visitChildren):
        * bindings/js/JSTreeWalkerCustom.cpp:
        (WebCore::JSTreeWalker::visitChildrenVirtual):
        (WebCore::JSTreeWalker::visitChildren):
        * bindings/js/JSWebGLRenderingContextCustom.cpp:
        (WebCore::JSWebGLRenderingContext::visitChildrenVirtual):
        (WebCore::JSWebGLRenderingContext::visitChildren):
        * bindings/js/JSWorkerContextCustom.cpp:
        (WebCore::JSWorkerContext::visitChildrenVirtual):
        (WebCore::JSWorkerContext::visitChildren):
        * bindings/js/JSXMLHttpRequestCustom.cpp:
        (WebCore::JSXMLHttpRequest::visitChildrenVirtual):
        (WebCore::JSXMLHttpRequest::visitChildren):
        * bindings/js/JSXPathResultCustom.cpp:
        (WebCore::JSXPathResult::visitChildrenVirtual):
        (WebCore::JSXPathResult::visitChildren):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        (GenerateImplementation):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::JSTestObj::visitChildrenVirtual):
        (WebCore::JSTestObj::visitChildren):
        * bindings/scripts/test/JS/JSTestObj.h:
        * bridge/qt/qt_instance.cpp:
        (JSC::Bindings::QtRuntimeObject::visitChildrenVirtual):
        (JSC::Bindings::QtRuntimeObject::visitChildren):
        * bridge/qt/qt_runtime.cpp:
        (JSC::Bindings::QtRuntimeMetaMethod::visitChildrenVirtual):
        (JSC::Bindings::QtRuntimeMetaMethod::visitChildren):
        * bridge/qt/qt_runtime.h:
        * workers/WorkerContext.h:

2011-09-23  Mario Sanchez Prada  <msanchez@igalia.com>

        [GTK] Remove extra space at the beginning of the last line.
        https://bugs.webkit.org/show_bug.cgi?id=68710

        Reviewed by Gustavo Noronha Silva.

        * platform/network/soup/SocketStreamHandleSoup.cpp:

2011-09-23  Mario Sanchez Prada  <msanchez@igalia.com>

        [GTK] Fix coding style issues in ResourceRequestSoup.cpp
        https://bugs.webkit.org/show_bug.cgi?id=68707

        Reviewed by Xan Lopez.

        This patch fixes some issues as reported by check-webkit-style.

        * platform/network/soup/ResourceRequestSoup.cpp:
        (WebCore::ResourceRequest::updateFromSoupMessage):

2011-09-22  Ademar de Souza Reis Jr.  <ademar.reis@openbossa.org>

        Unreviewed: [Qt] Workaround MSVC2010 problems when linking QtWebKit

        Include MSVC2010 in the list of compilers where incremental
        build is disabled (INCREMENTAL:NO).

        Change suggested by Simo Falt <simo.falt@nokia.com>, already present
        in the Qt-4.8 repository where the problem was identified.

        * WebCore.pri:

2011-09-23  Darin Adler  <darin@apple.com>

        Try to fix warning seen in some 32-bit builds.

        * rendering/RenderBoxModelObject.cpp:
        (WebCore::backgroundRectAdjustedForBleedAvoidance):
        Use an explicit cast for the conversion from a double to a LayoutUnit.

2011-09-23  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Clicking on error doesn't point on the correct line if user searched something
        https://bugs.webkit.org/show_bug.cgi?id=68627

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/SearchController.js:
        (WebInspector.SearchController.prototype.disableSearchUntilExplicitAction):
        * inspector/front-end/inspector.js:
        (WebInspector._showAnchorLocationInPanel):

2011-09-23  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: InspectorStyleSheet should use stylesheet's original url, not final one.
        https://bugs.webkit.org/show_bug.cgi?id=68631

        Reviewed by Yury Semikhatsky.

        Test: http/tests/inspector/styles/styles-redirected-css.html

        * inspector/InspectorStyleSheet.cpp:
        (WebCore::InspectorStyleSheet::resourceStyleSheetText):

2011-09-23  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: XHRs requests with the same url as main resource should have correct category.
        https://bugs.webkit.org/show_bug.cgi?id=68646

        Reviewed by Yury Semikhatsky.

        Test: http/tests/inspector/network/network-xhr-same-url-as-main-resource.html

        * inspector/InspectorResourceAgent.cpp:
        (WebCore::InspectorResourceAgent::didReceiveResponse):

2011-09-23  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Add context menu action to navigate from resources panel resource to network panel.
        https://bugs.webkit.org/show_bug.cgi?id=68657

        Reviewed by Yury Semikhatsky.

        * English.lproj/localizedStrings.js:
        * inspector/front-end/NetworkPanel.js:
        (WebInspector.NetworkPanel.prototype.showAnchorLocation):
        (WebInspector.NetworkPanel.prototype.revealAndHighlightResource):
        * inspector/front-end/ResourcesPanel.js:
        (WebInspector.FrameResourceTreeElement.prototype._handleContextMenuEvent):
        (WebInspector.FrameResourceTreeElement.prototype._appendOpenInNetworkPanelAction):
        * inspector/front-end/inspector.js:
        (WebInspector.openInNetworkPanelLabel):
        (WebInspector.openRequestInNetworkPanel):

2011-09-23  Deepak Sherveghar  <bpwv64@motorola.com>

        [Gtk] Title attribute is not respected on option elements.
        https://bugs.webkit.org/show_bug.cgi?id=68615

        Reviewed by Martin Robinson.

        Set tooltip on PopupMenuGtk items created from GtkActions.

        * platform/gtk/GtkPopupMenu.cpp:
        (WebCore::GtkPopupMenu::appendItem): Added a call to gtk_widget_set_tooltip_text()
            to set the tooltip on menuitem. Tooltip text is retrieved from GtkAction.
        * platform/gtk/PopupMenuGtk.cpp:
        (WebCore::PopupMenuGtk::createGtkActionForMenuItem): Pass the tooltip text
            from client when creating a GtkAction.

2011-09-23  Yael Aharon  <yael.aharon@nokia.com>

        [Qt][Gtk] Wrong state when pausing a video in the "playing" event handler
        https://bugs.webkit.org/show_bug.cgi?id=68589

        Reviewed by Philippe Normand.

        Test: media/video-playing-and-pause.html

        As suggested by Alexis Menard on IRC, query gstreamer's state instead of using a cached value
        in MediaPlayerGstreamerPrivate::paused(). 

        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        (WebCore::MediaPlayerPrivateGStreamer::paused):

2011-09-15  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: skip overlapping scripts when displaying concatenated content.
        https://bugs.webkit.org/show_bug.cgi?id=68144

        Dynamically appended script tags have wrong offsets and cause troubles building concatenated content.

        Reviewed by Pavel Feldman.

        * inspector/front-end/SourceFile.js:
        (WebInspector.ConcatenatedScriptsContentProvider.prototype._concatenateScriptsContent.appendChunk):
        (WebInspector.ConcatenatedScriptsContentProvider.prototype._concatenateScriptsContent):

2011-09-23  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: file open dialog appears when user clicks on the timeline bar in timeline panel.
        https://bugs.webkit.org/show_bug.cgi?id=68312

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel.prototype._createFileSelector):

2011-09-23  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95383.
        http://trac.webkit.org/changeset/95383
        https://bugs.webkit.org/show_bug.cgi?id=68690

        It broke WebInspector.Timeline.LoadFromFile feature.
        (Requested by loislo on #webkit).

        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel.prototype._createFileSelector):

2011-09-23  Rob Buis  <rbuis@rim.com>

        use after free in WebCore::SVGTRefElement::updateReferencedText
        https://bugs.webkit.org/show_bug.cgi?id=67555

        Reviewed by Nikolas Zimmermann.

        Event listeners can outlive the tref element that created them when
        the tref is cloned and then garbage collected, causing a dangling pointer to the
        tref. To fix this do not install event listener until the tref is inserted into the document.

        Test: svg/custom/tref-clone-crash.html

        * svg/SVGTRefElement.cpp:
        (WebCore::SVGTRefElement::svgAttributeChanged):
        (WebCore::SVGTRefElement::insertedIntoDocument):
        * svg/SVGTRefElement.h:

2011-09-23  Vsevolod Vlasov  <vsevik@chromium.org>

        ASSERTION FAILED: documentLoader in WebKit/Source/WebCore/inspector/InspectorInstrumentation.cpp(597)
        https://bugs.webkit.org/show_bug.cgi?id=68291

        Reviewed by Tony Chang.

        * dom/Document.cpp:
        (WebCore::Document::finishedParsing):
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::domContentLoadedEventFiredImpl):
        (WebCore::InspectorInstrumentation::loadEventFiredImpl):
        * inspector/InspectorInstrumentation.h:
        (WebCore::InspectorInstrumentation::domContentLoadedEventFired):
        (WebCore::InspectorInstrumentation::loadEventFired):
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::dispatchLoadEvent):

2011-09-22  Tony Chang  <tony@chromium.org>

        implement -webkit-flex-order
        https://bugs.webkit.org/show_bug.cgi?id=67432

        Reviewed by Ojan Vafai.

        flex-order can be an int (including negative), but we disallow the two
        smallest values so we can put the numbers into a hash set.

        Also, create two iterators: one that goes in render tree order (we use
        this for the first pass and to collect the possible flex order values)
        and one that goes in flex order.

        Test: css3/flexbox/flex-order.html

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::FlexOrderHashTraits::emptyValue):
        (WebCore::FlexOrderHashTraits::constructDeletedValue):
        (WebCore::FlexOrderHashTraits::isDeletedValue):
        (WebCore::RenderFlexibleBox::TreeOrderIterator::TreeOrderIterator): A simple iterator
            that goes in render tree order.
        (WebCore::RenderFlexibleBox::TreeOrderIterator::next):
        (WebCore::RenderFlexibleBox::TreeOrderIterator::reset):
        (WebCore::RenderFlexibleBox::TreeOrderIterator::flexOrderValues):
        (WebCore::RenderFlexibleBox::FlexOrderIterator::FlexOrderIterator): An iterator that
            goes in flex-order order.  Creating this involves sorting, so only create it once
            and pass it around.
        (WebCore::RenderFlexibleBox::FlexOrderIterator::first):
        (WebCore::RenderFlexibleBox::FlexOrderIterator::next):
        (WebCore::RenderFlexibleBox::FlexOrderIterator::reset):
        (WebCore::RenderFlexibleBox::layoutHorizontalBlock):
        (WebCore::RenderFlexibleBox::computePreferredLogicalWidth):
        (WebCore::RenderFlexibleBox::runFreeSpaceAllocationAlgorithmInlineDirection):
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildrenInlineDirection):
        * rendering/RenderFlexibleBox.h:

2011-09-22  Darin Adler  <darin@apple.com>

        Use AffineTransform scale functions in ShadowBlur::adjustBlurRadius
        https://bugs.webkit.org/show_bug.cgi?id=68667

        Reviewed by Simon Fraser.

        * platform/graphics/ShadowBlur.cpp:
        (WebCore::ShadowBlur::adjustBlurRadius): Use AffineTransform::xScale and
        AffineTransform::yScale instead of the custom code here that seems to do
        the same thing.

2011-09-22  Darin Adler  <darin@apple.com>

        Remove unneeded type conversion from background bleed code
        https://bugs.webkit.org/show_bug.cgi?id=68669

        Reviewed by Geoffrey Garen.

        * rendering/RenderBoxModelObject.cpp:
        (WebCore::backgroundRectAdjustedForBleedAvoidance): Use ceil instead of ceilf
        and eliminate superflous conversion to float and use of FloatSize. Also added
        a "why" comment.

2011-09-22  Darin Adler  <darin@apple.com>

        Refactor checks for antialiasing lines to share a single function
        https://bugs.webkit.org/show_bug.cgi?id=68666

        Reviewed by Dan Bernstein.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::paintColumnRules): Call shouldAntialiasLines.
        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::paintBorder): Ditto.
        (WebCore::RenderBoxModelObject::shouldAntialiasLines): Added.
        * rendering/RenderBoxModelObject.h: Added shouldAntialiasLines function.
        * rendering/RenderInline.cpp:
        (WebCore::RenderInline::paintOutlineForLine): Call shouldAntialiasLines.
        * rendering/RenderTableCell.cpp:
        (WebCore::RenderTableCell::paintCollapsedBorder): Ditto.

2011-09-22  Antoine Labour  <piman@chromium.org>

        Remove unused members from LayerChromium.
        These members are never set, and never used.
        Other members that are set but not used have been left (we may use them
        later, e.g. m_opaque).
        https://bugs.webkit.org/show_bug.cgi?id=68297

        Reviewed by James Robinson.

        No functional change, no new test needed.

        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::LayerChromium):
        * platform/graphics/chromium/LayerChromium.h:

2011-09-22  Tom Sepez  <tsepez@chromium.org>

        Make XSSAuditor extract meaningful snippet from script blocks for comparison
        against the URL when checking for reflection.  Avoids getting caugh up in
        trailing comments.
        https://bugs.webkit.org/show_bug.cgi?id=68094

        Reviewed by Adam Barth.

        Tests: http/tests/security/xssAuditor/script-tag-with-trailing-comment.html
               http/tests/security/xssAuditor/script-tag-with-trailing-comment2.html
               http/tests/security/xssAuditor/script-tag-with-trailing-comment3.html

        * html/parser/XSSAuditor.cpp:
        (WebCore::XSSAuditor::filterTokenAfterScriptStartTag):
        (WebCore::XSSAuditor::extractCodeFragment):
        * html/parser/XSSAuditor.h:

2011-09-22  Nate Chapin  <japhet@chromium.org>

        Remove didReceiveAuthenticationChallenge() from SubresourceLoaderClient.
        Instead, add a load-specific policy for showing the user authentication
        challenge down to ResourceLoaderOptions and enforce it in ResourceLoader.
        https://bugs.webkit.org/show_bug.cgi?id=65330

        Reviewed by Alexey Proskuryakov.

        No new tests, refactor only.

        * loader/DocumentThreadableLoader.cpp:
        * loader/DocumentThreadableLoader.h:
        * loader/MainResourceLoader.cpp:
        * loader/NetscapePlugInStreamLoader.cpp:
        * loader/ResourceLoadScheduler.h:
        * loader/ResourceLoader.cpp:
        (WebCore::ResourceLoader::didReceiveAuthenticationChallenge):
           For resource types that always send a challenge to the embedder,
           this patch doesn't change anything. For those that don't, we will
           always try to continue without credentials when they are forbidden
           and the platform supports it.
           When continuing without credentials was initially implemented in
           DocumentThreadableLoader, we sent the ThreadableLoaderClient a didFail(),
           then canceled the SubresourceLoader. This was necessary because of the
           quirks of ThreadableLoader cancellation (we sever the client/loader connections
           before the load actually cancels), but a simple didFail() should suffice at
           the ResourceLoader layer.
        * loader/ResourceLoaderOptions.h:
        * loader/SubresourceLoader.cpp:
        * loader/SubresourceLoader.h:
        * loader/SubresourceLoaderClient.h:
        * loader/cache/CachedResource.cpp:
        * loader/cache/CachedResourceLoader.cpp:
        * loader/cache/CachedResourceLoader.h:
        * loader/icon/IconLoader.cpp: The ResourceLoader implementation of
            didReceiveAuthenticationChallege means that IconLoader will now
            try to continue with credentials on platforms that support it,
            rather than just canceling outright. We still will never prompt
            for authentication for icons.
        * loader/icon/IconLoader.h:

2011-09-22  Dean Jackson  <dino@apple.com>

        Add ENABLE_CSS_FILTERS
        https://bugs.webkit.org/show_bug.cgi?id=68652

        Reviewed by Simon Fraser.

        * Configurations/FeatureDefines.xcconfig:

2011-09-22  Anders Carlsson  <andersca@apple.com>

        Make sure to update scrollbars in ScrollView::setFrameRect
        https://bugs.webkit.org/show_bug.cgi?id=68663

        Reviewed by Sam Weinig.

        Call updateScrollbars after setting the frame rect. This was previously done by the
        call to setBoundsSize from RenderWidget::setWidgetGeometry but setBoundsSize was removed
        completely in http://trac.webkit.org/changeset/95725.

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::setFrameRect):

2011-09-22  Jon Lee  <jonlee@apple.com>

        Progress control gets cropped on the bottom
        https://bugs.webkit.org/show_bug.cgi?id=68302
        <rdar://problem/10069915>

        Reviewed by Kent Tamura.

        As it turns out the smaller control type does not get rendered either, so this patch
        fixes both.

        * manual-tests/dom/progressbar.html: Altered to show both sizes of controls
        * rendering/RenderThemeMac.h:
        * rendering/RenderThemeMac.mm: Added methods to inflate the drawing rect
        (WebCore::RenderThemeMac::progressBarSizes):
        (WebCore::RenderThemeMac::progressBarMargins):
        (WebCore::RenderThemeMac::minimumProgressBarHeight):
        (WebCore::RenderThemeMac::paintProgressBar): Inflate the rect based on minimum desired
        control height and glow margin.

2011-09-22  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68658

        Make matchedEndLine smart enough to not match lines that have moved to new
        regions with different available content logical widths. When this happens, we go ahead and treat
        the line as failing to match.

        Reviewed by Anders Carlsson.

        Added new tests in fast/regions.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::lineWidthForPaginatedLineChanged):
        * rendering/RenderBlock.h:
        Enhanced to take an optional delta, so that you can check a new position without having to move
        the line box.

        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::checkPaginationAndFloatsAtEndLine):
        New function that refactors checking for line width changes from region movement as well as the
        float checks. Since the float checks were duplicated twice, this is a nice refactoring.

        (WebCore::RenderBlock::matchedEndLine):
        Changed to call the new helper function that will check both floats and pagination.

2011-09-22  Gavin Barraclough  <barraclough@apple.com>

        Implement Function.prototype.bind
        https://bugs.webkit.org/show_bug.cgi?id=26382

        Reviewed by Sam Weinig.

        Test: fast/js/function-bind.html

        * bindings/js/JSDOMBinding.cpp:
        (WebCore::objectToStringFunctionGetter):
        * bindings/js/JSDOMWindowCustom.cpp:
        (WebCore::nonCachingStaticFunctionGetter):
        * bindings/js/JSHistoryCustom.cpp:
        (WebCore::nonCachingStaticBackFunctionGetter):
        (WebCore::nonCachingStaticForwardFunctionGetter):
        (WebCore::nonCachingStaticGoFunctionGetter):
        * bindings/js/JSLocationCustom.cpp:
        (WebCore::nonCachingStaticReplaceFunctionGetter):
        (WebCore::nonCachingStaticReloadFunctionGetter):
        (WebCore::nonCachingStaticAssignFunctionGetter):
            - Function::create no longer requires functionStructure() to be passed.
2011-09-22  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68650
        
        Make determineStartPosition smart enough to not skip over clean lines that have moved to a new
        region with a different available content logical width. When this happens, we go ahead and treat
        the line as dirty.

        Reviewed by Sam Weinig.

        Covered by existing fast/regions tests.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutBlock):
        Disable region fitting if we detect that the regions all have uniform widths. In this case we know
        the content width can't vary, so there's no reason to waste time worrying about it.

        (WebCore::RenderBlock::computeLogicalLocationForFloat):
        Pull the content width checking code into computeLogicalLocationForFloat, since we've incorporated
        region fitting into the fixed offsets now rather than the line functions.

        (WebCore::RenderBlock::positionNewFloats):
        Changed because more code moved from here into computeLogicalLocationForFloat.
        
        (WebCore::RenderBlock::adjustForRegionFittingIfNeeded):
        No changes. Just moved the function above the left offset function.

        (WebCore::RenderBlock::logicalLeftOffsetForContent):
        (WebCore::RenderBlock::logicalRightOffsetForContent):
        Added. These new functions give the fixed left and right offsets for lines in a particular region.
        When no regions are present or when all the regions have a uniform width, they are identical
        to the versions of the functions that take no arguments.

        (WebCore::RenderBlock::logicalRightOffsetForLine):
        Changed to no longer do region fitting, since that's built into logicalRightOffsetForContent now.

        (WebCore::RenderBlock::lineWidthForPaginatedLineChanged):
        New function that takes a root line box and compares its cached old content width with the width
        available at the line's new location.
    
        * rendering/RenderBlock.h:
        (WebCore::RenderBlock::logicalRightOffsetForLine):
        (WebCore::RenderBlock::logicalLeftOffsetForLine):
        Modified to call the logicalXXXOffsetForContent functions that take a block direction position.

        (WebCore::RenderBlock::logicalRightOffsetForContent):
        (WebCore::RenderBlock::logicalLeftOffsetForContent):
        Added the new functions that take a position so that they can fit to the correct region.

        (WebCore::RenderBlock::availableLogicalWidthForContent):
        New helper function that calls right - left (similar to the corresponding line function that includes
        floats).

        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::determineStartPosition):
        Patched to check if a line has moved to a place with a different available content width. If so, the line
        is dirtied so that line layout can re-run.

        * rendering/RootInlineBox.cpp:
        (WebCore::RootInlineBox::RootInlineBox):
        (WebCore::RootInlineBox::alignBoxesInBlockDirection):
        Sets the paginated line width from the current block logical height.

        * rendering/RootInlineBox.h:
        (WebCore::RootInlineBox::paginationStrut):
        (WebCore::RootInlineBox::setPaginationStrut):
        Fixed paginationStrut to be LayoutUnit instead of int.

        (WebCore::RootInlineBox::paginatedLineWidth):
        (WebCore::RootInlineBox::setPaginatedLineWidth):
        Added paginatedLineWidth getter/setter for caching the content width for a given root line.

2011-09-21  Anders Carlsson  <andersca@apple.com>

        Remove Widget::beforeMouseDown and Widget::afterMouseDown
        https://bugs.webkit.org/show_bug.cgi?id=68570

        Reviewed by Darin Adler.

        These two member functions were originally added to avoid crashes due to removing NSViews while they were
        being tracked by AppKit. Since they were added, we've moved away from NSViews for form controls, and the bugs in
        AppKit that lead to crashes have been fixed.

        This patch was rolled out in r95743 because it broke a bunch of tests. The patch accidentally removed setting back
        m_sendingEventToSubview to false.

        * page/mac/EventHandlerMac.mm:
        (WebCore::EventHandler::passMouseDownEventToWidget):
        * platform/Widget.h:
        * platform/mac/WidgetMac.mm:
        (WebCore::Widget::Widget):
        (WebCore::Widget::removeFromSuperview):

        * rendering/RenderWidget.cpp:
        Change widgetHierarchyUpdateSuspendCount to be an unsigned integer instead of a size_t.

2011-09-22  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95335 and r95645.
        http://trac.webkit.org/changeset/95335
        http://trac.webkit.org/changeset/95645
        https://bugs.webkit.org/show_bug.cgi?id=68649

        Wrong fix (Requested by rniwa on #webkit).

        * editing/DeleteSelectionCommand.cpp:
        (WebCore::DeleteSelectionCommand::saveTypingStyleState):
        * editing/EditingStyle.cpp:
        (WebCore::EditingStyle::removeStyleAddedByNode):
        * editing/EditingStyle.h:
        * editing/ReplaceSelectionCommand.cpp:
        (WebCore::ReplaceSelectionCommand::removeRedundantStylesAndKeepStyleSpanInline):
        * editing/markup.cpp:
        (WebCore::StyledMarkupAccumulator::serializeNodes):
        (WebCore::ancestorToRetainStructureAndAppearance):
        * editing/markup.h:

2011-09-22  Ryosuke Niwa  <rniwa@webkit.org>

        Revert r95673 since it caused hundreds of tests to fail on Leopard / Snow Leopard.

        * page/mac/EventHandlerMac.mm:
        (WebCore::EventHandler::passMouseDownEventToWidget):
        * platform/Widget.h:
        * platform/mac/WidgetMac.mm:
        (WebCore::Widget::Widget):
        (WebCore::Widget::removeFromSuperview):
        (WebCore::Widget::beforeMouseDown):
        (WebCore::Widget::afterMouseDown):
        * rendering/RenderWidget.cpp:

2011-09-22  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68638
        
        Make RenderFlowThread cache whether or not it has regions of varying widths. This will
        be relevant for performance as we begin adding code to do custom block painting and
        layout based off regions not having the same width.

        Reviewed by Dan Bernstein and Adam Roben.

        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::RenderFlowThread):
        (WebCore::RenderFlowThread::layout):
        * rendering/RenderFlowThread.h:

2011-09-22  Anders Carlsson  <andersca@apple.com>

        FrameView::invalidateRect and FrameView::setFrameRect shouldn't take LayoutRects
        https://bugs.webkit.org/show_bug.cgi?id=68639

        Reviewed by David Hyatt.

        FrameView::invalidateRect and FrameView::setFrameRect override Widget and ScrollView
        member functions that take IntRects, and Widget coordinates are currently defined in terms of
        IntRects (and probably always should since we want them to be pixel-aligned).

        * page/FrameView.cpp:
        (WebCore::FrameView::invalidateRect):
        (WebCore::FrameView::setFrameRect):
        * page/FrameView.h:

2011-09-22  Tim Horton  <timothy_horton@apple.com>

        Unreviewed build fix (fixes warning about too many parens).

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::computePositionedLogicalWidthReplaced):

2011-09-22  Anders Carlsson  <andersca@apple.com>

        Widget::frameRect shouldn't be virtual
        https://bugs.webkit.org/show_bug.cgi?id=68637

        Reviewed by Sam Weinig.

        Nobody overrides Widget::frameRect and nobody should.

        * platform/Widget.h:

2011-09-22  Sergey Glazunov  <serg.glazunov@gmail.com>

        Ref protect shaders in V8WebGLRenderingContext::getAttachedShadersCallback
        https://bugs.webkit.org/show_bug.cgi?id=68630

        Reviewed by Adam Barth.

        Test: fast/canvas/webgl/shader-deleted-by-accessor.html

        * bindings/js/JSWebGLRenderingContextCustom.cpp:
        (WebCore::JSWebGLRenderingContext::getAttachedShaders):
        * bindings/v8/custom/V8WebGLRenderingContextCustom.cpp:
        (WebCore::V8WebGLRenderingContext::getAttachedShadersCallback):
        * html/canvas/WebGLRenderingContext.cpp:
        (WebCore::WebGLRenderingContext::getAttachedShaders):
        * html/canvas/WebGLRenderingContext.h:

2011-09-05  Robert Hogan  <robert@webkit.org>

        CSS 2.1 failure: abspos-non-replaced-width-margin-000, abspos-replaced-width-margin-000
        https://bugs.webkit.org/show_bug.cgi?id=47148

        Reviewed by David Hyatt.

        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::startOffsetForLine): Return offset from right, rather than offset from left + logicalwidth
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::startAlignedOffsetForLine): 
              Return the correct alignment for RTL blocks too. Looks like neither FF or Opera do this correctly.
              Covered by new test left-right-center-inline-alignment-in-ltr-and-rtl-blocks.html
        * rendering/RenderBox.cpp:
        (WebCore::computeInlineStaticDistance):
            - The CSS 2.1 tests now require UAs to use the parent block's direction (rather than the
              containing block's direction) when computing static distance. The container block's direction
              is still used in the other width and offset related calculations.
            - In the context of this function, the logicalRight value is just an element that will be used later to calculate 
              the correct logicalLeft position for the RTL block. So whereas an LTR block can substract containerBlock->borderLogicalLeft() 
              in this function directly, an RTL block has to add it here so that will be later subtracted from availableSpace to get 
              logicalLeft in computePositionedLogicalWidthUsing().

        (WebCore::RenderBox::computePositionedLogicalWidth):
           - Update comments and use the container block's direction except when calculating the static distance.
           - Remove the notion of a quirks mode in this function and for calculating the position of replaced and non-replaced
             blocks generally. This is in line with both FF4 and Opera - neither of which have a quirks mode for them.
        (WebCore::RenderBox::computePositionedLogicalWidthUsing):
           - Update comments and use the container block's direction except when calculating the static distance.
        (WebCore::RenderBox::computePositionedLogicalHeight):
           - Update comments.
        (WebCore::RenderBox::computePositionedLogicalWidthReplaced):
           - Update comments and use the container block's direction except when calculating the static distance.
           - If the containing block is RTL, always assume that values are over-constrained.
        (WebCore::RenderBox::computePositionedLogicalHeightReplaced):
           - Update comments.

2011-09-22  Anders Carlsson  <andersca@apple.com>

        Get rid of Widget::setBoundsSize
        https://bugs.webkit.org/show_bug.cgi?id=68491

        Reviewed by Sam Weinig.

        This basically reverts http://trac.webkit.org/changeset/79167 and http://trac.webkit.org/changeset/75897
        which were added to make zoom gestures work with WebKit1, but since we don't support zoom gestures in WebKit1
        anymore, it's better for code cleanliness to get rid of Widget::setBoundsSize and the associated code. While this
        will unfortunately break transformed iframes in WebKit1, but Simon says that it's an acceptable tradeoff.

        * WebCore.exp.in:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::open):
        * page/FrameView.cpp:
        (WebCore::FrameView::create):
        * platform/ScrollView.cpp:
        (WebCore::ScrollView::visibleContentRect):
        (WebCore::ScrollView::updateScrollbars):
        (WebCore::ScrollView::wheelEvent):
        * platform/ScrollView.h:
        * platform/Widget.cpp:
        * platform/Widget.h:
        (WebCore::Widget::resize):
        * platform/chromium/PopupContainer.cpp:
        (WebCore::PopupContainer::refresh):
        * platform/gtk/ScrollViewGtk.cpp:
        (WebCore::ScrollView::visibleContentRect):
        * platform/mac/WidgetMac.mm:
        (WebCore::Widget::paint):
        * rendering/RenderWidget.cpp:
        (WebCore::RenderWidget::setWidgetGeometry):
        (WebCore::RenderWidget::setWidget):
        (WebCore::RenderWidget::updateWidgetPosition):
        * rendering/RenderWidget.h:

2011-09-21  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68590
        
        Floats pushed to next page, column or region don't reposition properly if the amount of
        available logical width at the new position changes. Refactor the code so that we can
        run the float placement algorithm again when this happens.

        Covered by an existing regions test that exposes the issue.

        Reviewed by Adam Roben.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::computeLogicalLocationForFloat):
        (WebCore::RenderBlock::positionNewFloats):
        * rendering/RenderBlock.h:

2011-09-22  Leandro Gracia Gil  <leandrogracia@chromium.org>

        Fire TextInput events on speech input, but not set/add any inputMethod attribute.
        https://bugs.webkit.org/show_bug.cgi?id=60451

        Reviewed by Ryosuke Niwa.

        Introduce code to dispatch TextInput events when text is introduced via
        the speech input feature. Handle also the cases where speech input is
        started programmatically from the LayoutTestController.

        Test: fast/speech/input-ontextinput-event.html

        * dom/TextEventInputType.h:
        * html/shadow/TextControlInnerElements.cpp:
        (WebCore::InputFieldSpeechButtonElement::setRecognitionResult):

2011-09-20  Jason Liu  <jason.liu@torchmobile.com.cn>

        Reviewed by Simon Fraser.

        CSS outline property on a narrow element has rabbit ear artifacts
        https://bugs.webkit.org/show_bug.cgi?id=36793

        Patch by Jason Liu  <jason.liu@torchmobile.com.cn>
        Patch updated by Robert Hogan <robert@webkit.org>

        Test: fast/css/outline-narrowLine.html

        * rendering/RenderInline.cpp:
        (WebCore::RenderInline::paintOutlineForLine):

2011-09-22  Wajahat Siddiqui  <mdwajahatali.siddiqui@motorola.com>

        [GTK]Popup drop-down menu contains extra empty spaces at beginning and 
        occupies whole screen when items in popup reaches the height of display device.
        https://bugs.webkit.org/show_bug.cgi?id=68533

        When implementing the GTK+ menu position function, set pushIn to false, which tell
        GTK+ not create a menu that is as big as the entire screen.

        Reviewed by Martin Robinson.

        * platform/gtk/GtkPopupMenu.cpp:
        (WebCore::GtkPopupMenu::menuPositionFunction): Set pushIn to false in the menu position function.

2011-09-22  Alpha Lam  <hclam@chromium.org>

        Define export symbol correctly due to rename of pageScaleFactor to
        frameScaleFactor.

        Not reviewed. Build fix.

        * WebCore.exp.in:

2011-09-22  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Console is always scrolled to the top
        https://bugs.webkit.org/show_bug.cgi?id=67483

        Reviewed by Pavel Feldman.

        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView.prototype.wasShown):
        (WebInspector.ConsoleView.prototype.storeScrollPositions):
        (WebInspector.ConsoleView.prototype.restoreScrollPositions):
        (WebInspector.ConsoleView.prototype.onResize):
        (WebInspector.ConsoleView.prototype._immediatelyScrollIntoView):
        (WebInspector.ConsoleView.prototype._cancelScheduledScrollIntoView):
        (WebInspector.ConsoleView.prototype._consoleCleared):
        * inspector/front-end/Drawer.js:
        (WebInspector.Drawer.prototype.hide):
        (WebInspector.Drawer.prototype.resize):
        (WebInspector.Drawer.prototype._startStatusBarDragging):
        (WebInspector.Drawer.prototype._statusBarDragging):
        * inspector/front-end/inspector.js:
        (WebInspector.animateStyle):
        (WebInspector.animateStyle.forceComplete):

2011-09-22  Alpha Lam  <hclam@chromium.org>

        https://bugs.webkit.org/show_bug.cgi?id=68081
        Fix scroll in page scaling mode.

        Reviewed by Simon Fraser.

        The following things are done in this patch:
        1. Rename Frame::pageScaleFactor() to Frame::frameScaleFactor() to better
           reflect its purpose.
        2. Frame::frameScaleFactor() returns the scale factor of this frame with
           respect to the container. So for the main frame it'll return the scale
           factor of the page, inner frames will return 1.0
        3. scrollBy(), scrollX() and scrollY() to take into account of the frame
           scale factor, causing incorrect coordinates reported to Javascript.

        Tests: fast/events/scale-and-scroll-body.html
               fast/events/scale-and-scroll-iframe-body.html
               fast/events/scale-and-scroll-iframe-window.html
               fast/events/scale-and-scroll-window.html

        * html/HTMLBodyElement.cpp:
        (WebCore::adjustForZoom):
        (WebCore::HTMLBodyElement::setScrollLeft):
        (WebCore::HTMLBodyElement::setScrollTop):
        * loader/HistoryController.cpp:
        (WebCore::HistoryController::saveScrollPositionAndViewStateToItem):
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::scrollX):
        (WebCore::DOMWindow::scrollY):
        (WebCore::DOMWindow::scrollTo):
        * page/Frame.cpp:
        (WebCore::Frame::frameScaleFactor): Return page's scale factor if this is
                                            main frame, otherwise 1.0
        * page/Frame.h:
        * page/FrameView.cpp:
        (WebCore::FrameView::applyOverflowToViewport):
        (WebCore::FrameView::scrollXForFixedPosition):
        (WebCore::FrameView::scrollYForFixedPosition):

2011-09-22  Andreas Kling  <kling@webkit.org>

        CSS: Implement 'font' property in CSSComputedStyle.
        https://bugs.webkit.org/show_bug.cgi?id=66666

        Reviewed by Antti Koivisto.

        Test: fast/css/getComputedStyle/computed-style-font.html

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::fontFamilyFromStyle): Factored out of getPropertyCSSValue().
        This function will always return a CSSValueList, as opposed to the previous
        implementation which would return a CSSPrimitiveValue if there was only one family.
        getCSSPropertyValue() will return the first element of the list for 1-element lists
        to preserve the current behavior of getPropertyCSSValue('font-family').

        (WebCore::lineHeightFromStyle): Factored out of getPropertyCSSValue().
        (WebCore::fontSizeFromStyle): Ditto.
        (WebCore::fontStyleFromStyle): Ditto.
        (WebCore::fontVariantFromStyle): Ditto.
        (WebCore::fontWeightFromStyle): Ditto.

        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue): Added
        implementation of the computed 'font' property (CSSPropertyFont.)

2011-09-22  Jesus Sanchez-Palencia  <jesus.palencia@openbossa.org>

        [Qt] Redirection overflow errors have wrong error domain
        https://bugs.webkit.org/show_bug.cgi?id=68612

        Reviewed by Andreas Kling.

        Redirection overflow currently puts the URL hostname in the errorDomain field.
        Now redirection overflow errors will be classified as "HTTP" errors.

        * platform/network/qt/QNetworkReplyHandler.cpp:
        (WebCore::QNetworkReplyHandler::redirect):

2011-09-22  James Robinson  <jamesr@chromium.org>

        Unreviewed, rolling out r95699.
        http://trac.webkit.org/changeset/95699
        https://bugs.webkit.org/show_bug.cgi?id=67417

        Makes many chromium compositor tests crash

        * platform/CrossThreadCopier.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::~LayerRendererChromium):
        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
        (WebCore::CCHeadsUpDisplay::enabled):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::CCLayerImpl):
        (WebCore::CCLayerImpl::~CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::setNeedsRedraw):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        (WebCore::CCSettings::CCSettings):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::CCLayerTreeHostImpl):
        (WebCore::CCLayerTreeHostImpl::~CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCProxy.h:
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::finishAllRendering):
        (WebCore::CCSingleThreadProxy::setNeedsCommit):
        (WebCore::CCSingleThreadProxy::commitIfNeeded):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::CCThreadProxy):
        (WebCore::CCThreadProxy::~CCThreadProxy):
        (WebCore::CCThreadProxy::compositeAndReadback):
        (WebCore::CCThreadProxy::finishAllRendering):
        (WebCore::CCThreadProxy::isStarted):
        (WebCore::CCThreadProxy::initializeLayerRenderer):
        (WebCore::CCThreadProxy::setNeedsCommit):
        (WebCore::CCThreadProxy::setNeedsCommitAndRedraw):
        (WebCore::CCThreadProxy::setNeedsRedraw):
        (WebCore::CCThreadProxy::start):
        (WebCore::CCThreadProxy::stop):
        (WebCore::CCThreadProxy::beginFrameAndCommitOnCCThread):
        (WebCore::CCThreadProxy::beginFrameAndCommit):
        (WebCore::CCThreadProxy::commitOnCCThread):
        (WebCore::CCThreadProxy::drawLayersOnCCThread):
        (WebCore::CCThreadProxy::setNeedsCommitOnCCThread):
        (WebCore::CCThreadProxy::setNeedsCommitAndRedrawOnCCThread):
        (WebCore::CCThreadProxy::setNeedsRedrawOnCCThread):
        * platform/graphics/chromium/cc/CCThreadProxy.h:

2011-09-22  Nat Duca  <nduca@chromium.org>

        [chromium] Make CCThreadProxy draw
        https://bugs.webkit.org/show_bug.cgi?id=67417

        Update the CCThreadProxy to correctly implement the CCProxy
        interface, do all the right committing and updating steps, and
        draw a picture on the screen.

        Reviewed by James Robinson.

        * platform/graphics/IntRect.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::~LayerRendererChromium):
        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
        (WebCore::CCHeadsUpDisplay::enabled):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::CCLayerImpl):
        (WebCore::CCLayerImpl::~CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::commitComplete):
        (WebCore::CCLayerTreeHost::setNeedsRedraw):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::CCLayerTreeHostImpl):
        (WebCore::CCLayerTreeHostImpl::~CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::finishAllRendering):
        (WebCore::CCSingleThreadProxy::setNeedsCommit):
        (WebCore::CCSingleThreadProxy::commitIfNeeded):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::CCThreadProxy):
        (WebCore::CCThreadProxy::~CCThreadProxy):
        (WebCore::CCThreadProxy::compositeAndReadback):
        (WebCore::CCThreadProxy::drawLayersAndReadbackOnCCThread):
        (WebCore::CCThreadProxy::finishAllRendering):
        (WebCore::CCThreadProxy::isStarted):
        (WebCore::CCThreadProxy::setNeedsCommit):
        (WebCore::CCThreadProxy::setNeedsCommitAndRedraw):
        (WebCore::CCThreadProxy::setNeedsRedraw):
        (WebCore::CCThreadProxy::start):
        (WebCore::CCThreadProxy::stop):
        (WebCore::CCThreadProxy::finishAllRenderingOnCCThread):
        (WebCore::CCThreadProxy::createBeginFrameAndCommitTaskOnCCThread):
        (WebCore::CCThreadProxy::beginFrameAndCommit):
        (WebCore::CCThreadProxy::commitOnCCThread):
        (WebCore::CCThreadProxy::scheduleDrawTaskOnCCThread):
        (WebCore::CCThreadProxy::drawLayersAndPresentOnCCThread):
        (WebCore::CCThreadProxy::drawLayersOnCCThread):
        (WebCore::CCThreadProxy::updateSchedulerStateOnCCThread):
        * platform/graphics/chromium/cc/CCThreadProxy.h:

2011-09-21  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67415
        Text drawn via -webkit-background-clip:text is blurry at device scale factors >1.0
        -and corresponding-
        <rdar://problem/10060379>

        Reviewed by Darin Adler.

        New helper function RenderBoxModelObject scales the mask image by the 
        deviceScaleFactor to get an image of the appropriate resolution. It also scales 
        the image's GraphicsContext so that the clip is set up on the same scale. Back in 
        paintFillLayerExtended() we still clip the image to the original maskRect to get 
        everything scaled back to the appropriate size.
        * rendering/RenderBoxModelObject.cpp:
        (WebCore::createDeviceScaledImageBuffer):
        (WebCore::RenderBoxModelObject::paintFillLayerExtended):

        Make the deviceScaleFactor convenience function just a namespace-level function in 
        Page rather than a static member or Page.
        * page/Page.cpp:
        (WebCore::deviceScaleFactor):
        * page/Page.h:
        
        Pre-existing callers of Page::deviceScaleFactor(Frame*) must now use 
        WebCore::deviceScaleFactor(Frame*)
        * editing/DeleteButtonController.cpp:
        (WebCore::DeleteButtonController::createDeletionUI):
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::imageSizeForError):
        (WebCore::RenderImage::paintReplaced):
        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::drawPlatformResizerImage):

2011-09-21  Tim Horton  <timothy_horton@apple.com>

        [CG] ImageBufferData::getData has an invariant comparison in the inner part of a loop which doesn't get optimized out
        https://bugs.webkit.org/show_bug.cgi?id=68588
        <rdar://problem/10164955>

        Reviewed by Simon Fraser.

        Factor the unmultiplied check out of the inner loop, resulting in a
        speed bump in ImageBufferData::getData.

        No new tests, performance improvement.

        * platform/graphics/cg/ImageBufferDataCG.cpp:
        (WebCore::ImageBufferData::getData):

2011-09-21  Sameer Patil  <mkrp87@motorola.com>

        :hover selector fails when hovering over a child select element with size attribute
        https://bugs.webkit.org/show_bug.cgi?id=67594

        Reviewed by Darin Adler.

        Test: fast/css/hover-affects-ancestor.html

        This patch addresses the problem of deactivation of the ancestor element :hover rules
        when hovered its contained elements.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::updateHoverActiveState):

2011-09-21  Sergey Glazunov  <serg.glazunov@gmail.com>

        [Chromium] Protect message ports from being deleted in V8MessageEvent::portsAccessorGetter
        https://bugs.webkit.org/show_bug.cgi?id=68584

        Reviewed by Adam Barth.

        Test: fast/dom/message-port-deleted-by-accessor.html

        * bindings/v8/custom/V8MessageEventCustom.cpp:
        (WebCore::V8MessageEvent::portsAccessorGetter):

2011-09-21  Anders Carlsson  <andersca@apple.com>

        Add back protection against the NSView going away while handling mouseDown
        https://bugs.webkit.org/show_bug.cgi?id=68585

        Reviewed by Darin Adler.

        Add calls to RenderWidget::suspendWidgetHierarchyUpdates() and RenderWidget::resumeWidgetHierarchyUpdates(),
        as a followup fix to https://bugs.webkit.org/show_bug.cgi?id=68570.

        * page/mac/EventHandlerMac.mm:
        (WebCore::EventHandler::passMouseDownEventToWidget):

2011-09-21  Julien Chaffraix  <jchaffraix@webkit.org>

        Crash in RenderBox::paintMaskImages when GraphicsContext's painting is disabled
        https://bugs.webkit.org/show_bug.cgi?id=68133

        Reviewed by Darin Adler.

        Tests: fast/css/webkit-mask-crash-fieldset-legend.html
               fast/css/webkit-mask-crash-figure.html
               fast/css/webkit-mask-crash-table.html
               fast/css/webkit-mask-crash-td-2.html
               fast/css/webkit-mask-crash-td.html

        GraphicsContext::getCTM crashes if called with a GraphicsContext that has painting
        disabled. RenderBox::paintMaskImages would thus crash if called in this condition.

        This change just modifies the different GraphicsContext::getCTM method to bail early
        if painting is disabled on the GraphicsContext. The rest of the change is exposing
        paintControlTints that exposes this.

        * WebCore.exp.in: Added symbols of the newly export window.internals function.

        * page/FrameView.cpp:
        (WebCore::FrameView::updateControlTints): Split this function in 2 so that
        I can expose the internal paintControlTints.

        (WebCore::FrameView::paintControlTints):
        This is the one exposed to Internals as we want to be testable regardless of
        whether the platform supports control tints.

        * page/FrameView.h: Added paintControlTints.

        * testing/Internals.cpp:
        (WebCore::Internals::paintControlTints):
        * testing/Internals.h:
        * testing/Internals.idl:
        Added a way to force a fake painting so that we can easily reproduce the bugs.

        * platform/graphics/cairo/GraphicsContextCairo.cpp:
        (WebCore::GraphicsContext::getCTM):
        * platform/graphics/cg/GraphicsContextCG.cpp:
        (WebCore::GraphicsContext::getCTM):
        * platform/graphics/qt/GraphicsContextQt.cpp:
        (WebCore::GraphicsContext::getCTM):
        * platform/graphics/skia/GraphicsContextSkia.cpp:
        (WebCore::GraphicsContext::getCTM):
        * platform/graphics/wince/GraphicsContextWinCE.cpp:
        (WebCore::GraphicsContext::getCTM):
        * platform/graphics/wx/GraphicsContextWx.cpp:
        (WebCore::GraphicsContext::getCTM):
        Fixed all our back-end to exit early if painting is disabled.

2011-09-19  Jer Noble  <jer.noble@apple.com>

        Add settings to control the availability of the Web Audio API to WebKit and WebKit2.
        https://bugs.webkit.org/show_bug.cgi?id=68382

        Reviewed by Darin Adler.

        Only create a AudioContext object if the Web Audio feature is runtime-enabled in Settings.

        No new tests, as this feature is not yet enabled by default.

        * bindings/js/JSDOMWindowCustom.cpp:
        (WebCore::JSDOMWindow::webkitAudioContext):

2011-09-21  Anders Carlsson  <andersca@apple.com>

        Remove checks for Leopard-only Objective-C APIs
        https://bugs.webkit.org/show_bug.cgi?id=68579

        Reviewed by Sam Weinig.

        We can always assume that OBJC_API_VERSION is at least 2, it's been 2 since Leopard.

        * bridge/objc/objc_class.mm:
        (JSC::Bindings::ObjcClass::methodsNamed):
        (JSC::Bindings::ObjcClass::fieldNamed):
        * bridge/objc/objc_instance.mm:
        (allocateAutoReleasePool):
        * bridge/objc/objc_runtime.mm:
        (JSC::Bindings::ObjcField::ObjcField):
        * page/mac/EventHandlerMac.mm:

2011-09-21  Anders Carlsson  <andersca@apple.com>

        Remove Widget::beforeMouseDown and Widget::afterMouseDown
        https://bugs.webkit.org/show_bug.cgi?id=68570

        Reviewed by Sam Weinig.

        These two member functions were originally added to avoid crashes due to removing NSViews while they were
        being tracked by AppKit. Since they were added, we've moved away from NSViews for form controls, and the bugs in
        AppKit that lead to crashes have been fixed.

        * page/mac/EventHandlerMac.mm:
        (WebCore::EventHandler::passMouseDownEventToWidget):
        * platform/Widget.h:
        * platform/mac/WidgetMac.mm:
        (WebCore::Widget::Widget):
        (WebCore::Widget::removeFromSuperview):

        * rendering/RenderWidget.cpp:
        Change widgetHierarchyUpdateSuspendCount to be an unsigned integer instead of a size_t.

2011-09-21  Abhishek Arya  <inferno@chromium.org>

        Not use anonymousContainer on beforeChild calculation
        and let later code handle it. Fix style update on block-level
        anonymous objects.
        https://bugs.webkit.org/show_bug.cgi?id=67656

        Reviewed by David Hyatt.

        Test: fast/table/quote-text-around-iframe.html

        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::addChild):
        * rendering/RenderTableCell.cpp:
        (WebCore::RenderTableCell::styleDidChange):
        * rendering/RenderTableRow.cpp:
        (WebCore::RenderTableRow::addChild):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::propagateStyleToAnonymousChildren):

2011-09-21  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68562
        
        Pagination struts don't update properly when collapsing margin estimates are wrong.
        
        Refactor the pagination adjustments that happen during block layout to allow for
        a 3-pass layout system instead of just a 2-pass layout system. The basic idea is
        to come up with an estimate that includes collapsing, clearance and pagination.
        
        If the estimate only with collapsing and clearance was wrong, then we lay out again
        using the correct collapsing margin values and clearance before applying pagination breaks.
        
        After this second layout, the normal code that runs when unpaginated compares estimates
        and lays out a third time to account for adjustments as a result of pagination movement.

        Reviewed by Sam Weinig.

        Added fast/regions/text-regions-split-small-pagination.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::estimateLogicalTopPosition):
        (WebCore::RenderBlock::layoutBlockChild):
        (WebCore::RenderBlock::adjustBlockChildForPagination):
        * rendering/RenderBlock.h:

2011-09-21  James Robinson  <jamesr@chromium.org>

        [chromium] SharedGraphicsContext3D's context should not be destroyed during atexit
        https://bugs.webkit.org/show_bug.cgi?id=68558

        Reviewed by Stephen White.

        The SharedGraphicsContext3D's internal context is lazily created and then leaked intentionally, but since the
        last ref is in a function-static RefPtr<> it ends up being destroyed at process exit time.  This is bad, since
        by the time we get this far in process shutdown we can't actually cleanly run the destruction logic and we
        crash.  Since we are explicitly leaking this for the lifetime of the process there's no point in keeping it in a
        RefPtr<>

        * platform/graphics/gpu/SharedGraphicsContext3D.cpp:
        (WebCore::SharedGraphicsContext3D::get):

2011-09-21  Sergey Glazunov  <serg.glazunov@gmail.com>

        [Chromium] Protect the Frame in V8HTMLDocument::openCallback
        https://bugs.webkit.org/show_bug.cgi?id=68555

        Reviewed by Nate Chapin.

        Test: fast/dom/frame-deleted-in-document-open.html

        * bindings/v8/custom/V8HTMLDocumentCustom.cpp:
        (WebCore::V8HTMLDocument::openCallback):

2011-09-21  Adam Klein  <adamk@chromium.org>

        Clean up CSS Counter code
        https://bugs.webkit.org/show_bug.cgi?id=68492

        Reviewed by Tony Chang.

        Several cleanups/fixes:
        - Make Counter::listStyle() return the actual list style string,
          rather than empty string.
        - Handle a specified list style of "none" correctly when generating
          cssText and in Counter::listStyle().
        - Use StringBuilder when generating cssText.

        Test: fast/css/counters/getCounterValue.html

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseCounterContent):
        Simplify processing (moving conversion to CSSStyleSelector),
        pass a CSS_IDENT as the listStyle to Counter::create.
        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::cssText):
        Use StringBuilder.
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        Convert from a CSS_IDENT to an EListStyleType.
        * css/Counter.h:
        (WebCore::Counter::listStyleIdent):
        Renamed from listStyleNumber to match its new functionality.

2011-09-21  Chris Marrin  <cmarrin@apple.com>

        Check in WebCore.vcproj file unchanged but written like MSDev likes it

        Unreviewed.

        * WebCode.vcproj/WebCore.vcproj:

2011-09-21  Stephen White  <senorblanco@chromium.org>

        [chromium] Optimize ImageBuffer constructor when accelerated
        https://bugs.webkit.org/show_bug.cgi?id=68501

        If the accelerated rendering mode is passed in to ImageBuffer, instead
        of creating a bitmap PlatformCanvas and subsequently replacing its
        device with an SkGpuDevice, create an SkCanvas and SkGpuDevice first,
        and fall back to raster creation only failure.  This saves on system
        RAM for the backing store (and possibly GDI resources).

        Reviewed by James Robinson.

        Covered by existing tests.

        * platform/graphics/gpu/SharedGraphicsContext3D.cpp:
        (WebCore::SharedGraphicsContext3D::get):
        * platform/graphics/gpu/SharedGraphicsContext3D.h:
        Rename "SharedGraphicsContext3D::create()" to "get()" to more
        accurately reflect its function.
        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::createAcceleratedCanvas):
        Refactor creation of accelerated ImageBuffer.
        (WebCore::ImageBuffer::ImageBuffer):
        Attempt creation of accelerated ImageBuffer first, and only fall back
        to bitmap-backed canvas creation if it fails.

2011-09-21  Dan Bernstein  <mitz@apple.com>

        WebCore part of: Prevent the WebKit frameworks from defining inappropriately-named Objective-C classes
        https://bugs.webkit.org/show_bug.cgi?id=68451

        Reviewed by Darin Adler.

        * WebCore.xcodeproj/project.pbxproj: Added a script build phase that invokes
        check-for-inappropriate-objc-class-names, allowing only class names prefixed with "DOM" or "Web".

2011-09-21  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/9768483> REGRESSION: Crash in RenderBlock::removeFloatingObjectsBelow()
        https://bugs.webkit.org/show_bug.cgi?id=68550

        Reviewed by Darin Adler.

        Test: fast/multicol/null-lastFloat-in-removeFloatingObjectsBelow.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::removeFloatingObjectsBelow): Break out of the while() loop when the
        floating object set is empty, which can happen if there were no floats on previous lines
        (in which case, lastFloat is 0).

2011-09-21  ChangSeok Oh  <shivamidow@gmail.com>

        [GTK] Fix build break when enabling webgl on r95593
        https://bugs.webkit.org/show_bug.cgi?id=68502

        Reviewed by Martin Robinson.

        Add PassOwnPtr.h to GC3DPrivate.h and remove useless one from GC3DGtk.cpp & GC3DPrivate.cpp

        No tests required.

        * platform/graphics/gtk/GraphicsContext3DGtk.cpp:
        * platform/graphics/gtk/GraphicsContext3DPrivate.cpp:
        * platform/graphics/gtk/GraphicsContext3DPrivate.h:

2011-09-21  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: clear resource agent resource cache upon resource agent's disable.
        https://bugs.webkit.org/show_bug.cgi?id=67995

        Reviewed by Pavel Feldman.

        Test: http/tests/inspector/network/network-disabling-check-no-memory-leak.html

        * inspector/InspectorResourceAgent.cpp:
        (WebCore::InspectorResourceAgent::disable):

2011-09-21  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68543
        
        Make sure that when regions change dimensions we recompute pagination slices.

        Reviewed by Simon Fraser.

        Added new tests in fast/regions.

        * rendering/LayoutState.cpp:
        (WebCore::LayoutState::LayoutState):
        * rendering/LayoutState.h:
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::layout):
        (WebCore::RenderFlowThread::renderRegionForLine):
        (WebCore::RenderFlowThread::regionLogicalWidthForLine):
        * rendering/RenderRegion.cpp:
        (WebCore::RenderRegion::layout):
        * rendering/RenderView.cpp:
        (WebCore::RenderView::pushLayoutState):
        * rendering/RenderView.h:
        (WebCore::LayoutStateMaintainer::LayoutStateMaintainer):
        (WebCore::LayoutStateMaintainer::push):

2011-09-21  Xianzhu Wang  <wangxianzhu@chromium.org>

        Ensure TestWebKitAPI works on mac, win, chromium-mac and chromium-linux
        https://bugs.webkit.org/show_bug.cgi?id=68206

        Reviewed by Tony Chang.

        Added two new wtf headers into ForwardingHeaders/wtf to make
        #include <wtf/...h> cross-platform.
        No new tests needed.

        * ForwardingHeaders/wtf/MetaAllocator.h: Added.
        * ForwardingHeaders/wtf/RedBlackTree.h: Added.

2011-09-21  David Delaune  <david.delaune@googlemail.com>

        [WinCairo] IconDatabase::defaultIcon always fails for non-CAN_THEME_URL_ICON builds.
        https://bugs.webkit.org/show_bug.cgi?id=67469

        Reviewed by Brent Fulgham.

        No new functionality added in this change.

        * loader/icon/IconDatabase.cpp: defining CAN_THEME_URL_ICON for the WIN_CAIRO

2011-09-20  Ryosuke Niwa  <rniwa@webkit.org>

        Span element gets produced using backspace/delete to merge header with paragraph
        https://bugs.webkit.org/show_bug.cgi?id=68413

        Reviewed by Darin Adler.

        Add p element to the list of elements to retain appearance. Also modified removeStyleFromNode
        (and renamed to removeStyleFromRules) not to remove inline style declarations because
        inline styles need to stay on copy.

        Test: editing/deleting/merge-paragraph-from-p-with-style.html

        * editing/DeleteSelectionCommand.cpp:
        (WebCore::DeleteSelectionCommand::saveTypingStyleState):
        * editing/EditingStyle.cpp:
        (WebCore::EditingStyle::removeStyleFromRules): Renamed from removeStyleFromNode.
        * editing/EditingStyle.h:
        * editing/markup.cpp:
        (WebCore::isBlockNodeToRetainAppearance):
        (WebCore::StyledMarkupAccumulator::serializeNodes):

2011-09-21  Alice Boxhall  <aboxhall@chromium.org>

        Report AXValueChanged when value changes in element with role=textbox.
        https://bugs.webkit.org/show_bug.cgi?id=68201

        Reviewed by Chris Fleizach.

        Test: platform/mac/accessibility/textbox-role-reports-notifications.html

        * accessibility/AccessibilityObject.cpp:
        (WebCore::AccessibilityObject::isARIATextControl):
        * accessibility/AccessibilityObject.h:
        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::contentChanged):
        (WebCore::AccessibilityRenderObject::childrenChanged):

2011-09-21  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: introduce Page.enable and Page.disable
        https://bugs.webkit.org/show_bug.cgi?id=68530

        Otherwise protocol is violating the contract of not sending
        notifications by default.

        Reviewed by Yury Semikhatsky.

        * inspector/Inspector.json:

2011-09-21  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: add minimal error handling to the DOM breakpoints.
        https://bugs.webkit.org/show_bug.cgi?id=68537

        Reviewed by Yury Semikhatsky.

        * inspector/InspectorDOMAgent.h:
        * inspector/InspectorDOMDebuggerAgent.cpp:
        (WebCore::domTypeForName):
        (WebCore::InspectorDOMDebuggerAgent::setDOMBreakpoint):
        (WebCore::InspectorDOMDebuggerAgent::removeDOMBreakpoint):

2011-09-21  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: make WebInspector a bit more timeline friendly.
        https://bugs.webkit.org/show_bug.cgi?id=68534

        I found that the maximum captured stack frame depth tracked by timeline is not
        very convenient because the average depth of call stack considerably more than five.
        Another useful trick is console.timeStamp for all backend calls.

        Reviewed by Yury Semikhatsky.

        * inspector/CodeGeneratorInspector.pm:
        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel.prototype._toggleTimelineButtonClicked):

2011-09-21  Jesus Sanchez-Palencia  <jesus.palencia@openbossa.org>

        [Qt][WK2] Implement Download support in WebProcess
        https://bugs.webkit.org/show_bug.cgi?id=68153

        Reviewed by Andreas Kling.

        Refactored QNetworkReplyHandler::finish() in order to add
        and use the static function QNetworkReplyHandler::errorForReply().
        This will be used by our Download implementation in WebKit2 (WebProcess)
        when handling ResourceError.

        * platform/network/qt/QNetworkReplyHandler.cpp:
        (WebCore::QNetworkReplyHandler::finish):
        (WebCore::QNetworkReplyHandler::errorForReply):
        * platform/network/qt/QNetworkReplyHandler.h:
        * platform/network/qt/ResourceRequest.h:

2011-09-21  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: paint box model colors in Metrics sidebar at all times, do not draw box outlines.
        https://bugs.webkit.org/show_bug.cgi?id=68240

        Today we paint backgrounds in Metrics box model on hover only - should be painted at all
        times for the reference. Outlining boxes is highlight is wrong since outlines are outside
        the corresponding box regions. We've seen few reports on that + Firebug does not do borders
        for that reason.

        Reviewed by Yury Semikhatsky.

        * inspector/DOMNodeHighlighter.cpp:
        * inspector/DOMNodeHighlighter.h:
        * inspector/Inspector.json:
        * inspector/InspectorDOMAgent.cpp:
        (WebCore::InspectorDOMAgent::setHighlightDataFromConfig):
        * inspector/front-end/Color.js:
        * inspector/front-end/MetricsSidebarPane.js:
        (WebInspector.MetricsSidebarPane.prototype._highlightDOMNode):
        (WebInspector.MetricsSidebarPane.prototype._updateMetrics):
        * inspector/front-end/inspector.css:
        (.metrics .label):
        * inspector/front-end/inspector.js:
        (WebInspector.buildHighlightConfig):

2011-09-21  Andreas Kling  <kling@webkit.org>

        Protect against misuse of EventListenerIterator.
        https://bugs.webkit.org/show_bug.cgi?id=68364

        Reviewed by Darin Adler.

        In debug mode, keep track of the number of active EventListenerIterators
        on an EventListenerMap, and assert that there are no iterators when the
        map is being modified.

        * dom/EventListenerMap.cpp:
        (WebCore::EventListenerMap::EventListenerMap):
        (WebCore::EventListenerMap::clear):
        (WebCore::EventListenerMap::add):
        (WebCore::EventListenerMap::remove):
        (WebCore::EventListenerMap::find):
        (WebCore::EventListenerMap::removeFirstEventListenerCreatedFromMarkup):
        (WebCore::EventListenerMap::copyEventListenersNotCreatedFromMarkupToTarget):
        (WebCore::EventListenerIterator::EventListenerIterator):
        (WebCore::EventListenerIterator::~EventListenerIterator):
        * dom/EventListenerMap.h:

2011-09-21  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: minor fixes in the DOM domain of the protocol.
        https://bugs.webkit.org/show_bug.cgi?id=68517

        Reviewed by Yury Semikhatsky.

        * inspector/Inspector.json:
        * inspector/InspectorDOMAgent.cpp:
        (WebCore::InspectorDOMAgent::setAttributesAsText):
        * inspector/InspectorDOMAgent.h:
        * inspector/front-end/DOMAgent.js:
        (WebInspector.DOMNode.prototype.setAttribute):

2011-09-16  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: limit the use of "Resource" term in the protocol.
        https://bugs.webkit.org/show_bug.cgi?id=68250

        Reviewed by Yury Semikhatsky.

        * inspector/Inspector.json:
        * inspector/InspectorResourceAgent.cpp:
        (WebCore::InspectorResourceAgent::markResourceAsCached):
        (WebCore::InspectorResourceAgent::didLoadResourceFromMemoryCache):
        (WebCore::InspectorResourceAgent::setExtraHTTPHeaders):
        (WebCore::InspectorResourceAgent::getResponseBody):
        * inspector/InspectorResourceAgent.h:
        * inspector/front-end/ExtensionServer.js:
        (WebInspector.ExtensionServer.prototype._onAddRequestHeaders):
        * inspector/front-end/NetworkManager.js:
        (WebInspector.NetworkManager.prototype.requestContent):
        (WebInspector.NetworkDispatcher.prototype.requestServedFromCache):
        (WebInspector.NetworkDispatcher.prototype.requestServedFromMemoryCache):

2011-09-21  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95608.
        http://trac.webkit.org/changeset/95608
        https://bugs.webkit.org/show_bug.cgi?id=68521

        breaks GTK and Windows builds. Please check EWS next time.
        (Requested by philn-tp on #webkit).

        * html/HTMLBodyElement.cpp:
        (WebCore::adjustForZoom):
        (WebCore::HTMLBodyElement::setScrollLeft):
        (WebCore::HTMLBodyElement::setScrollTop):
        * loader/HistoryController.cpp:
        (WebCore::HistoryController::saveScrollPositionAndViewStateToItem):
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::scrollX):
        (WebCore::DOMWindow::scrollY):
        (WebCore::DOMWindow::scrollTo):
        * page/Frame.cpp:
        (WebCore::Frame::pageScaleFactor):
        * page/Frame.h:
        * page/FrameView.cpp:
        (WebCore::FrameView::applyOverflowToViewport):
        (WebCore::FrameView::scrollXForFixedPosition):
        (WebCore::FrameView::scrollYForFixedPosition):

2011-09-21  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: console panel's scroller is not properly aligned.
        https://bugs.webkit.org/show_bug.cgi?id=68448

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/inspector.css:
        (#console-view):
        (#console-messages):
        (#drawer #console-messages):

2011-09-20  Alpha Lam  <hclam@chromium.org>

        https://bugs.webkit.org/show_bug.cgi?id=68081
        Fix scroll in page scaling mode.

        Reviewed by Simon Fraser.

        The following things are done in this patch:
        1. Rename Frame::pageScaleFactor() to Frame::frameScaleFactor() to better
           reflect its purpose.
        2. Frame::frameScaleFactor() returns the scale factor of this frame with
           respect to the container. So for the main frame it'll return the scale
           factor of the page, inner frames will return 1.0
        3. scrollBy(), scrollX() and scrollY() to take into account of the frame
           scale factor, causing incorrect coordinates reported to Javascript.

        Tests: fast/events/scale-and-scroll-body.html
               fast/events/scale-and-scroll-iframe-body.html
               fast/events/scale-and-scroll-iframe-window.html
               fast/events/scale-and-scroll-window.html

        * html/HTMLBodyElement.cpp:
        (WebCore::adjustForZoom):
        (WebCore::HTMLBodyElement::setScrollLeft):
        (WebCore::HTMLBodyElement::setScrollTop):
        * loader/HistoryController.cpp:
        (WebCore::HistoryController::saveScrollPositionAndViewStateToItem):
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::scrollX):
        (WebCore::DOMWindow::scrollY):
        (WebCore::DOMWindow::scrollTo):
        * page/Frame.cpp:
        (WebCore::Frame::frameScaleFactor): Return page's scale factor if this is
                                            main frame, otherwise 1.0
        * page/Frame.h:
        * page/FrameView.cpp:
        (WebCore::FrameView::applyOverflowToViewport):
        (WebCore::FrameView::scrollXForFixedPosition):
        (WebCore::FrameView::scrollYForFixedPosition):

2011-09-21  Andras Becsi  <andras.becsi@nokia.com>

        [Qt] Remove Qt specific code from css/SelectorChecker.cpp
        https://bugs.webkit.org/show_bug.cgi?id=67702

        Reviewed by Csaba Osztrogonác.

        No new tests needed.

        * css/SelectorChecker.cpp: Move Qt-specific code to the Qt-specific WebPlatformStrategies.
        (WebCore::SelectorChecker::determineLinkStateSlowCase):
        * platform/VisitedLinkStrategy.h:

2011-09-16  MORITA Hajime  <morrita@google.com>

        Style changes on forwarded shadow children should trigger shadow renderer reconstruction.
        https://bugs.webkit.org/show_bug.cgi?id=68228

        Reviewed by Dimitri Glazkov.

        Currently style changes on forwarded shadow child triggers
        Node::reattach() only for the forwarded node. But it should
        invalidate whole renderers on the shadow tree because
        ShadowContentElement expects its inclusions to be attached and to
        create renderers in the inclusion order. But single node
        reattach() violates the expectation and possibly creates
        inconsistent render tree.

        This change makes NodeRenderingContext to go
        AttachContentForwarded, where the ShadowContentElement::attach()
        happens, only during ShadowRoot::attach(), not for style-change
        triggered Node::attach() on the forwarded nodes.

        Note that the altering phase AttachContentLight doesn't create
        renderers for the forwarded nodes. Instead of that, it possibly
        triggers shadow subtree reconstruction on
        NodeRenderingContext::hostChildrenChanged().

        No new tests. This is a defensive change. There is no visible
        difference at this time.

        * dom/NodeRenderingContext.cpp:
        (WebCore::NodeRenderingContext::NodeRenderingContext):
        * dom/ShadowRoot.cpp:
        (WebCore::ShadowRoot::isInclusionSelectorActive):
        * dom/ShadowRoot.h:

2011-09-20  MORITA Hajime  <morrita@google.com>

        <meter> doesn't update rendering when its value is changed.
        https://bugs.webkit.org/show_bug.cgi?id=67614

        Reviewed by Dimitri Glazkov.

        It lacks repaint() when the value is changed. 
        
        For non-native appearance it works because the indicator is
        implemented in shadow DOM, for native appearance, repainting should be
        handled explicitly.
        
        Test: fast/dom/HTMLMeterElement/meter-element-repaint-on-update-value.html

        * html/HTMLMeterElement.cpp:
        (WebCore::HTMLMeterElement::didElementStateChange):
        * rendering/RenderMeter.cpp:
        (WebCore::RenderMeter::updateFromElement):
        * rendering/RenderMeter.h:
        * rendering/RenderProgress.cpp:
        (WebCore::RenderProgress::updateAnimationState):

2011-09-20  Kent Tamura  <tkent@chromium.org>

        Move RenderObject::markContainingBlocksForLayout() to RenderObject.cpp.
        https://bugs.webkit.org/show_bug.cgi?id=67989

        Reviewed by Ryosuke Niwa.

        No new tests because of no behavior change.

        * rendering/RenderObject.cpp:
        (WebCore::objectIsRelayoutBoundary): Moved from RenderObject.h.
        (WebCore::RenderObject::markContainingBlocksForLayout): Moved from RenderObject.h
        * rendering/RenderObject.h:

2011-09-20  Rachel Blum  <groby@chromium.org>

        Support for multiple <link rel="icon"> favicon elements.
        https://bugs.webkit.org/show_bug.cgi?id=65564

        Reviewed by Darin Fisher.

        No tests - purely an API change. (And API is not exposed to LayoutTests)

        * dom/Document.cpp:
        (WebCore::Document::iconURLs):
        (WebCore::Document::addIconURL):
        * dom/Document.h:
        * dom/IconURL.cpp:
        (WebCore::toIconIndex):
        * dom/IconURL.h:
        (WebCore::IconURL::IconURL):
        * html/HTMLLinkElement.cpp:
        (WebCore::HTMLLinkElement::process):
        * loader/LinkLoader.cpp:
        (WebCore::LinkLoader::loadLink):
        * loader/LinkLoader.h:
        * loader/icon/IconController.cpp:
        (WebCore::IconController::urlsForTypes):
        (WebCore::IconController::appendToIconURLs):
        (WebCore::IconController::defaultURL):

2011-09-20  Ojan Vafai  <ojan@chromium.org>

        [css3-flexbox] cleanup padding width calculations
        https://bugs.webkit.org/show_bug.cgi?id=68490

        Reviewed by Tony Chang.

        No new tests. Existing tests cover the refactor.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::logicalBorderAndPaddingWidthForChild):
        (WebCore::RenderFlexibleBox::logicalScrollbarHeightForChild):
        (WebCore::RenderFlexibleBox::preferredLogicalContentWidthForFlexItem):
        (WebCore::RenderFlexibleBox::computePreferredLogicalWidth):
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildrenInlineDirection):
        * rendering/RenderFlexibleBox.h:

2011-09-19  Jer Noble  <jer.noble@apple.com>

        Fix clang compile errors in Web Audio
        https://bugs.webkit.org/show_bug.cgi?id=68384

        Reviewed by David Levin.

        No new tests; no net change in functionality.

        * platform/graphics/MediaPlayer.h: Forward declare (instead of including directly)
            AudioSourceProvider.
        * webaudio/AudioChannelMerger.cpp:
        (WebCore::AudioChannelMerger::checkNumberOfChannelsForInput): Remove unused parameter name.

2011-09-20  John Gregg  <johnnyg@google.com>

        Directory Upload: parent path can truncate first char of the correct path
        https://bugs.webkit.org/show_bug.cgi?id=66695

        In some cases, if the parent path we compute ends with a separator
        character like '/' or 'C:\', by adding one in an attempt to grab the
        subsequent separator we actually grab a character of the real path,
        which is incorrect.

        Reviewed by Darin Fisher.

        * html/FileInputType.cpp:
        (WebCore::FileInputType::setFileList):

2011-09-20  Jochen Eisinger  <jochen@chromium.org>

        Invoke CachedResourceLoader::canRequest for all URLs in a redirect chain
        https://bugs.webkit.org/show_bug.cgi?id=68279

        Reviewed by Adam Barth.

        * loader/cache/CachedResourceLoader.h:
        * loader/cache/CachedResourceRequest.cpp:
        (WebCore::CachedResourceRequest::willSendRequest):

2011-09-18  Ojan Vafai  <ojan@chromium.org>

        change RenderFlexibleBox to act on logical coordinates
        https://bugs.webkit.org/show_bug.cgi?id=68129

        Reviewed by David Hyatt.

        This makes RenderFlexibleBox respect direction and writing-mode.
        We now properly support the default flex-flow value of "row".

        Test: css3/flexbox/writing-modes.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::setLogicalLocationForChild):
        * rendering/RenderBlock.h:
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutBlock):
        (WebCore::RenderFlexibleBox::logicalBorderWidthForChild):
        (WebCore::RenderFlexibleBox::logicalPaddingWidthForChild):
        (WebCore::RenderFlexibleBox::logicalScrollbarHeightForChild):
        (WebCore::RenderFlexibleBox::marginStartStyleForChild):
        (WebCore::RenderFlexibleBox::marginEndStyleForChild):
        (WebCore::RenderFlexibleBox::preferredLogicalContentWidthForFlexItem):
        (WebCore::RenderFlexibleBox::layoutInlineDirection):
        (WebCore::RenderFlexibleBox::logicalPositiveFlexForChild):
        (WebCore::RenderFlexibleBox::logicalNegativeFlexForChild):
        (WebCore::RenderFlexibleBox::computePreferredLogicalWidth):
        (WebCore::RenderFlexibleBox::runFreeSpaceAllocationAlgorithmInlineDirection):
        (WebCore::RenderFlexibleBox::setLogicalOverrideSize):
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildrenInlineDirection):
        * rendering/RenderFlexibleBox.h:

2011-09-20  Marshall Greenblatt  <marshall@chromium.org>

        Use DEFINE_STATIC_LOCAL to intentionally leak the static RefCountedHFONT object returned from
        FontPlatformData::hashTableDeletedFontValue() to avoid global destructor ordering problems.
        https://bugs.webkit.org/show_bug.cgi?id=67906

        Reviewed by Adam Barth.

        * platform/graphics/chromium/FontPlatformDataChromiumWin.cpp:

2011-09-20  Ryosuke Niwa  <rniwa@webkit.org>

        Hit testing on margins of body and head elements doesn't recur
        https://bugs.webkit.org/show_bug.cgi?id=40753

        Reviewed by Darin Adler.

        The bug was caused by positionForPointRespectingEditingBoundaries's comparing the editability
        of head/body and html elements when hit testing was done inside margins of head and body elements.

        Fixed the bug by special-casing html element since margins of head and body elements are special.

        Tests: editing/selection/click-on-body-margin.html
               editing/selection/click-on-head-margin.html

        * rendering/RenderBlock.cpp:
        (WebCore::positionForPointRespectingEditingBoundaries):

2011-09-20  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68480
        
        De-virtualize containingBlock() and make RenderView return 0 instead
        of itself to make the construction of normal loops that terminate via
        a null-check possible.

        Fix the only two places in the tree that needed null checks.

        Eliminating RenderTableCell::containingBlock() is fine since the base class
        does the same thing anyway.

        Reviewed by Simon Fraser.

        * editing/VisiblePosition.cpp:
        (WebCore::VisiblePosition::lineDirectionPointForBlockDirectionNavigation):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::containingBlock):
        * rendering/RenderObject.h:
        * rendering/RenderTableCell.cpp:
        * rendering/RenderTableCell.h:
        * rendering/RenderTreeAsText.cpp:
        (WebCore::RenderTreeAsText::writeRenderObject):
        * rendering/RenderView.cpp:
        * rendering/RenderView.h:

2011-09-20  Anders Carlsson  <andersca@apple.com>

        Remove ScrollView::platformContentsSize
        https://bugs.webkit.org/show_bug.cgi?id=68188

        Reviewed by Darin Adler.

        Since ScrollView keeps track of the contents size in ScrollView::m_contentsSize, we never
        have to ask the underlying platform scroll view for contents size since it should always just
        be equal to m_contentsSize.

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::contentsSize):
        (WebCore::ScrollView::wheelEvent):
        * platform/ScrollView.h:
        * platform/mac/ScrollViewMac.mm:
        * platform/wx/ScrollViewWx.cpp:

2011-09-20  Alexis Menard  <alexis.menard@openbossa.org>

        [Qt] [WK2] Implement a persistent cookie storage.
        https://bugs.webkit.org/show_bug.cgi?id=65309

        Reviewed by Chang Shu.

        Implement a cookie storage for the Qt port on WebKit2.
        The implementation is using a SQLite database to store the cookies
        and restore them. It uses a static object as CookieJar is not an
        object but a set of global functions. The actual saving/restoring is on
        the WebProcess side where our network stack lives.

        Existing tests cover the new implementation. Unfortunately there is one
        case that we can't easily simulate : login in a website, make sure that the webprocess
        is not running and then going back to this website and see that we are logged.

        * WebCore.pri:
        * WebCore.pro:
        * platform/qt/CookieJarQt.cpp:
        (WebCore::getHostnamesWithCookies):
        (WebCore::deleteCookiesForHostname):
        (WebCore::deleteAllCookies):
        (WebCore::SharedCookieJarQt::shared):
        (WebCore::SharedCookieJarQt::create):
        (WebCore::SharedCookieJarQt::destroy):
        (WebCore::SharedCookieJarQt::getHostnamesWithCookies):
        (WebCore::SharedCookieJarQt::deleteCookiesForHostname):
        (WebCore::SharedCookieJarQt::deleteAllCookies):
        (WebCore::SharedCookieJarQt::SharedCookieJarQt):
        (WebCore::SharedCookieJarQt::~SharedCookieJarQt):
        (WebCore::SharedCookieJarQt::setCookiesFromUrl):
        (WebCore::SharedCookieJarQt::ensureDatabaseTable):
        (WebCore::SharedCookieJarQt::loadCookies):
        * platform/qt/CookieJarQt.h: Added.

2011-09-20  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68314

        Make sure that the containing block loop when clipping to border-radius
        terminates by checking if you hit the RenderView. Null checking isn't sufficient
        for stupid historical reasons that should be fixed (i.e., the RenderView returns itself
        as its own containing block, even though this should just be changed).

        Reviewed by Simon Fraser and Darin Adler.

        Added new test in fast/clip.

        * rendering/RenderLayer.cpp:
        (WebCore::inContainingBlockChain):

2011-09-20  Dan Bernstein  <mitz@apple.com>

        MathML renderers do not override RenderObject::renderName()
        https://bugs.webkit.org/show_bug.cgi?id=68461

        Reviewed by Darin Adler.

        Added implementations of renderName() in MathML RenderObject subclasses.

        * rendering/mathml/RenderMathMLBlock.h:
        (WebCore::RenderMathMLBlock::renderName):
        * rendering/mathml/RenderMathMLFenced.h:
        (WebCore::RenderMathMLFenced::renderName):
        * rendering/mathml/RenderMathMLFraction.h:
        (WebCore::RenderMathMLFraction::renderName):
        * rendering/mathml/RenderMathMLMath.h:
        (WebCore::RenderMathMLMath::renderName):
        * rendering/mathml/RenderMathMLOperator.h:
        (WebCore::RenderMathMLOperator::renderName):
        * rendering/mathml/RenderMathMLRoot.h:
        (WebCore::RenderMathMLRoot::renderName):
        * rendering/mathml/RenderMathMLRow.h:
        (WebCore::RenderMathMLRow::renderName):
        * rendering/mathml/RenderMathMLSquareRoot.h:
        (WebCore::RenderMathMLSquareRoot::renderName):
        * rendering/mathml/RenderMathMLSubSup.h:
        (WebCore::RenderMathMLSubSup::renderName):
        * rendering/mathml/RenderMathMLUnderOver.h:
        (WebCore::RenderMathMLUnderOver::renderName):

2011-09-20  ChangSeok Oh  <shivamidow@gmail.com>

        [GTK] requestAnimationFrame support for gtk port
        https://bugs.webkit.org/show_bug.cgi?id=66280

        Reviewed by Martin Robinson.

        Add some files to build-target & activate ENABLE_REQUEST_ANIMATION_FRAME flag
        when enabling requestAnimationFrame option.

        fast/animation/request-animation-frame-cancel.html
        fast/animation/request-animation-frame-cancel2.html
        fast/animation/request-animation-frame-display.html
        fast/animation/request-animation-frame-during-modal.html
        fast/animation/request-animation-frame-timestamps.html
        fast/animation/request-animation-frame-within-callback.html
        fast/animation/request-animation-frame.html

        * GNUmakefile.am:
        * GNUmakefile.list.am:

2011-09-20  Aaron Boodman  <aa@chromium.org>

        Rework script context creation/release notifications
        https://bugs.webkit.org/show_bug.cgi?id=67828

        Reviewed by Adam Barth.

        * bindings/v8/V8DOMWindowShell.cpp:
        (WebCore::V8DOMWindowShell::disposeContextHandles):
        (WebCore::V8DOMWindowShell::initContextIfNeeded):
        * bindings/v8/V8IsolatedContext.cpp:
        (WebCore::V8IsolatedContext::V8IsolatedContext):
        (WebCore::V8IsolatedContext::destroy):
        * bindings/v8/V8IsolatedContext.h:
        * loader/EmptyClients.h:
        (WebCore::EmptyFrameLoaderClient::didCreateScriptContext):
        (WebCore::EmptyFrameLoaderClient::willReleaseScriptContext):
        * loader/FrameLoaderClient.h:

2011-09-19  Oliver Hunt  <oliver@apple.com>

        Refactor Heap allocation logic into separate AllocationSpace class
        https://bugs.webkit.org/show_bug.cgi?id=68409

        Reviewed by Gavin Barraclough.

        Adding a forwarding header.

        * ForwardingHeaders/heap/AllocationSpace.h: Added.

2011-09-20  Geoffrey Garen  <ggaren@apple.com>

        Build fix.

        * WebCorePrefix.h: Removed stray text from accidental paste.

2011-09-19  Geoffrey Garen  <ggaren@apple.com>

        Removed BREWMP* platform #ifdefs
        https://bugs.webkit.org/show_bug.cgi?id=68425
        
        BREWMP* has no maintainer, and this is dead code.

        Reviewed by Darin Adler.

        * WebCorePrefix.h:
        * loader/cache/CachedFont.cpp:
        * platform/DragData.h:
        * platform/DragImage.h:
        * platform/FileSystem.h:
        * platform/PlatformKeyboardEvent.h:
        * platform/PlatformMouseEvent.h:
        * platform/PlatformTouchEvent.h:
        * platform/PlatformTouchPoint.h:
        (WebCore::PlatformTouchPoint::PlatformTouchPoint):
        * platform/Widget.h:
        * platform/graphics/IntPoint.h:
        * platform/graphics/IntSize.h:
        * platform/graphics/WOFFFileFormat.cpp:
        * platform/graphics/skia/FontCustomPlatformData.cpp:
        (WebCore::FontCustomPlatformData::~FontCustomPlatformData):
        (WebCore::FontCustomPlatformData::fontPlatformData):
        (WebCore::createFontCustomPlatformData):
        * platform/graphics/skia/FontCustomPlatformData.h:
        * platform/image-decoders/jpeg/JPEGImageDecoder.cpp:
        * platform/text/TextBoundaries.cpp:
        * platform/text/TextEncoding.cpp:
        (WebCore::TextEncoding::encode):
        * platform/text/TextEncodingRegistry.cpp:
        * plugins/PluginViewNone.cpp:

2011-09-20  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: Copy Stack Trace lacks newlines on Windows
        https://bugs.webkit.org/show_bug.cgi?id=68447

        Reviewed by Joseph Pecoraro.

        * inspector/front-end/CallStackSidebarPane.js:
        (WebInspector.CallStackSidebarPane.prototype._copyStackTrace):

2011-09-20  Pavel Feldman  <pfeldman@google.com>

        Not reviewed: inspector sanity test fix.

        * inspector/front-end/inspector.js:
        (WebInspector.showConsole):

2011-09-20  Alexis Menard  <alexis.menard@openbossa.org>

        [Qt][WK2] Add stubs for FULLSCREEN_API on Qt.
        https://bugs.webkit.org/show_bug.cgi?id=68444

        Reviewed by Andreas Kling.

        Create all the stubs necessary for enabling FULLSCREEN_API on the Qt port.

        No new tests : just stubs.

        * CodeGenerators.pri:
        * WebCore.pro:
        * features.pri:

2011-09-20  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95509.
        http://trac.webkit.org/changeset/95509
        https://bugs.webkit.org/show_bug.cgi?id=68446

        crashes chromium fast/repaint/japanese-rl-selection-repaint-
        in-regions.html on Win and Linux (Requested by dslomov on
        #webkit).

        * rendering/RenderBlock.cpp:
        (WebCore::positionForPointRespectingEditingBoundaries):

2011-09-20  Jarred Nicholls  <jarred@sencha.com>

        [Qt] Permit qrc resources to load in QWebSettings::setUserStyleSheetUrl()
        https://bugs.webkit.org/show_bug.cgi?id=51159
        
        Permit any URL with a local scheme to set a user style sheet. Allow qrc
        resource URLs as arguments to QWebSettings::setUserStyleSheetUrl().

        Reviewed by Kenneth Rohde Christiansen.

        * page/Page.cpp:
        (WebCore::Page::userStyleSheetLocationChanged):
        * platform/qt/KURLQt.cpp:
        (WebCore::KURL::fileSystemPath):

2011-09-20  Csaba Osztrogonác  <ossy@webkit.org>

        [Qt][Mac] Buildfix after r95513.
        Forwarding headers for WebCore should be generated based on WebCore sources instead of WebKit2.

        Rubber-stamped by Andras Becsi.

        * DerivedSources.pro:
        * WebCore.pro: Add platform/mac/DisplaySleepDisabler.cpp to SOURCES.

2011-09-19  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: document Debugger.paused, introduce types for ids in Debugger domain.
        https://bugs.webkit.org/show_bug.cgi?id=68363

        Migrates from poorly documented "details" object to explicit parameters
        containing break type and data.

        Reviewed by Tony Gentilcore.

        * inspector/InjectedScriptSource.js:
        ():
        * inspector/Inspector.json:
        * inspector/InspectorDOMDebuggerAgent.cpp:
        (WebCore::InspectorDOMDebuggerAgent::didInvalidateStyleAttr):
        (WebCore::InspectorDOMDebuggerAgent::willInsertDOMNode):
        (WebCore::InspectorDOMDebuggerAgent::willRemoveDOMNode):
        (WebCore::InspectorDOMDebuggerAgent::willModifyDOMAttr):
        (WebCore::InspectorDOMDebuggerAgent::pauseOnNativeEventIfNeeded):
        (WebCore::InspectorDOMDebuggerAgent::willSendXMLHttpRequest):
        * inspector/InspectorDebuggerAgent.cpp:
        (WebCore::InspectorDebuggerAgent::InspectorDebuggerAgent):
        (WebCore::InspectorDebuggerAgent::schedulePauseOnNextStatement):
        (WebCore::InspectorDebuggerAgent::cancelPauseOnNextStatement):
        (WebCore::InspectorDebuggerAgent::pause):
        (WebCore::InspectorDebuggerAgent::didPause):
        (WebCore::InspectorDebuggerAgent::didContinue):
        (WebCore::InspectorDebuggerAgent::breakProgram):
        (WebCore::InspectorDebuggerAgent::clear):
        (WebCore::InspectorDebuggerAgent::clearBreakDetails):
        * inspector/InspectorDebuggerAgent.h:
        * inspector/front-end/DOMBreakpointsSidebarPane.js:
        (WebInspector.DOMBreakpointsSidebarPane.prototype.createBreakpointHitStatusMessage.didPushNodeToFrontend):
        (WebInspector.DOMBreakpointsSidebarPane.prototype.createBreakpointHitStatusMessage):
        (WebInspector.DOMBreakpointsSidebarPane.prototype.highlightBreakpoint):
        * inspector/front-end/DebuggerModel.js:
        (WebInspector.DebuggerModel.prototype._pausedScript):
        (WebInspector.DebuggerDispatcher.prototype.paused):
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.PresentationCallFrame.prototype.evaluate):
        * inspector/front-end/ScopeChainSidebarPane.js:
        (WebInspector.ScopeChainSidebarPane.prototype.update):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._debuggerPaused.didCreateBreakpointHitStatusMessage):
        (WebInspector.ScriptsPanel.prototype._debuggerPaused.else.didGetSourceLocation):
        (WebInspector.ScriptsPanel.prototype._debuggerPaused):

2011-09-19  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: use strict types for Breakpoint and CallFrame ids in the protocol definition.
        https://bugs.webkit.org/show_bug.cgi?id=68172

        Reviewed by Tony Gentilcore.

        * inspector/Inspector.json:

2011-09-15  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: refactor ConsoleView, Drawer, ConsolePanel trio. Remove animation
        from drawer -> panel transition.
        https://bugs.webkit.org/show_bug.cgi?id=68155

        ConsoleView, ConsolePanel and Drawer are all Views with custom show/hide implementations
        and weird DOM element containment. As a result, we have a number of cases when switching
        console from full panel to drawer mode and back result in UI glitches.
        For the sake of code clarity and no glitches, I'd like to sacrifice the "grow into full
        screen" console animation.

        Reviewed by Tony Gentilcore.

        * inspector/front-end/ConsoleModel.js:
        (WebInspector.ConsoleModel):
        * inspector/front-end/ConsolePanel.js:
        (WebInspector.ConsolePanel):
        (WebInspector.ConsolePanel.prototype.get statusBarItems):
        (WebInspector.ConsolePanel.prototype.show):
        (WebInspector.ConsolePanel.prototype.hide):
        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView):
        (WebInspector.ConsoleView.createFilterElement):
        (WebInspector.ConsoleView.get this):
        (WebInspector.ConsoleView.prototype.get statusBarItems):
        (WebInspector.ConsoleView.prototype.wasShown):
        * inspector/front-end/Drawer.js:
        (WebInspector.Drawer):
        (WebInspector.Drawer.prototype.get visible):
        (WebInspector.Drawer.prototype._constrainHeight):
        (WebInspector.Drawer.prototype.show.animationFinished):
        (WebInspector.Drawer.prototype.show):
        (WebInspector.Drawer.prototype.hide):
        (WebInspector.Drawer.prototype.resize):
        (WebInspector.Drawer.prototype._animationDuration):
        * inspector/front-end/inspector.html:
        * inspector/front-end/inspector.js:
        (WebInspector._createGlobalStatusBarItems):
        (WebInspector._toggleConsoleButtonClicked):
        (WebInspector.set attached):
        (WebInspector.windowResize):
        (WebInspector.documentKeyDown):

2011-09-19  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: streamline Console's MessageType and MessageSource semantics.
        https://bugs.webkit.org/show_bug.cgi?id=68342

        This change fixes semantics of the MessageSource and MessageType:
        MessageSource is now the source of the message (be it Network, HTML
        parser or Console API). MessageType is only defined for the Console API
        messages and contains the name of the API call (log, dir, dirxml, etc.).
        Subsequent https://bugs.webkit.org/show_bug.cgi?id=66371 will make MessageType
        private to the inspector.

        Reviewed by Tony Gentilcore.

        * dom/Document.cpp:
        (WebCore::Document::logExceptionToConsole):
        * inspector/ConsoleMessage.cpp:
        (WebCore::messageSourceValue):
        (WebCore::messageTypeValue):
        (WebCore::ConsoleMessage::addToFrontend):
        * inspector/Inspector.json:
        * inspector/InspectorConsoleAgent.cpp:
        (WebCore::InspectorConsoleAgent::didReceiveResponse):
        (WebCore::InspectorConsoleAgent::didFailLoading):
        * inspector/front-end/ConsoleMessage.js:
        (WebInspector.ConsoleMessage.createTextMessage):
        (WebInspector.ConsoleMessage.prototype._formatMessage):
        (WebInspector.ConsoleMessage.prototype.toString):
        * page/Console.cpp:
        (WebCore::printMessageSourceAndLevelPrefix):
        (WebCore::Console::addMessage):
        (WebCore::Console::dir):
        (WebCore::Console::dirxml):
        (WebCore::Console::group):
        (WebCore::Console::groupCollapsed):
        (WebCore::Console::groupEnd):
        * page/ConsoleTypes.h:
        * websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::didFailSocketStream):

2011-09-20  Adenilson Cavalcanti  <adenilson.silva@openbossa.org>

        [Qt] resizeToContent seems to trigger infinite resize on some pages
        https://bugs.webkit.org/show_bug.cgi?id=43852

        Reviewed by Kenneth Rohde Christiansen.

        InnerHeight and InnerWidth are now calculated using ScrollView::visibleContentRect
        including the scrollbars (if any) instead of using ScrollView::frameRect as before.

        This makes no behavior change while not using the tiled backing
        store and is compliant with the W3C definition stated in the CSSOM
        View Module.

        Plus it will return the correct values for tiled backing store,
        thus fixing the original bug report by avoiding infinite resize
        events caused by wrong innerHeight and innerWidth values.

        Test: innerWidth/Height are covered by existing tests. The
        non-infinite resizing is covered by a new Qt autotest at
        test_qgraphicswebview::windowResizeEvent()

        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::innerHeight): using ScrollView::visibleContentRect.
        (WebCore::DOMWindow::innerWidth): using ScrollView::visibleContentRect.

2011-09-09  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: implement reverse mapping for compiler source maps.
        https://bugs.webkit.org/show_bug.cgi?id=67850

        Implement the mapping from source code to compiled code. It will be used for
        setting breakpoints on source code.

        Reviewed by Pavel Feldman.

        * inspector/front-end/CompilerSourceMapping.js:
        (WebInspector.ClosureCompilerSourceMapping):
        (WebInspector.ClosureCompilerSourceMapping.prototype.compiledLocationToSourceLocation):
        (WebInspector.ClosureCompilerSourceMapping.prototype.sourceLocationToCompiledLocation):
        (WebInspector.ClosureCompilerSourceMapping.prototype._parseMappings):

2011-09-08  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: extract RawSourceCode source mapping logic to helper classes.
        https://bugs.webkit.org/show_bug.cgi?id=67789

        Reviewed by Pavel Feldman.

        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode.prototype.get uiSourceCode):
        (WebInspector.RawSourceCode.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.prototype.uiLocationToRawLocation):
        (WebInspector.RawSourceCode.prototype._createSourceMapping.didRequestContent.didFormatContent):
        (WebInspector.RawSourceCode.prototype._createSourceMapping.didRequestContent):
        (WebInspector.RawSourceCode.prototype._createSourceMapping):
        (WebInspector.RawSourceCode.prototype._saveSourceMapping):
        (WebInspector.RawSourceCode.PlainSourceMapping):
        (WebInspector.RawSourceCode.PlainSourceMapping.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.PlainSourceMapping.prototype.uiLocationToRawLocation):
        (WebInspector.RawSourceCode.PlainSourceMapping.prototype.get uiSourceCode):
        (WebInspector.RawSourceCode.FormattedSourceMapping):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.uiLocationToRawLocation):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.get uiSourceCode):

2011-09-20  Carlos Garcia Campos  <cgarcia@igalia.com>

        [GTK] WebProcess shouldn't use the GTK+ API
        https://bugs.webkit.org/show_bug.cgi?id=68062

        Reviewed by Martin Robinson.

        Move errors code that is common between webki1 and webkit2 to
        WebCore so that it can be shared.

        * GNUmakefile.list.am: Add new files to compilation.
        * platform/gtk/ErrorsGtk.cpp: Added.
        (WebCore::cancelledError):
        (WebCore::blockedError):
        (WebCore::cannotShowURLError):
        (WebCore::interruptedForPolicyChangeError):
        (WebCore::cannotShowMIMETypeError):
        (WebCore::fileDoesNotExistError):
        (WebCore::pluginWillHandleLoadError):
        * platform/gtk/ErrorsGtk.h: Added.

2011-09-19  Mark Rowe  <mrowe@apple.com>

        Attempt to fix the Leopard build.
        
        * platform/mac/DisplaySleepDisabler.cpp:
        (WebCore::DisplaySleepDisabler::DisplaySleepDisabler):
        * platform/mac/DisplaySleepDisabler.h:

2011-09-19  Mark Rowe  <mrowe@apple.com>

        <http://webkit.org/b/68421> Stop calling UpdateSystemActivity in places where we hold power assertions that achieve the same effect

        On SnowLeopard and newer it's not necessary to call UpdateSystemActivity to prevent the screensaver from kicking
        in as the NoDisplaySleep assertion now has that effect. It's also not necessary to hold both a NoDisplaySleep and
        a NoIdleSleep assertion as the latter is implied by the former.

        Since there were multiple copies of the same code to disable display sleep spread across WebCore, WebKit and WebKit2
        this patch takes the approach of moving this functionality to a new DisplaySleepDisabler class that lives in WebCore.
        A class is used as it makes it easier to reason about the lifetime of the assertions and to ensure that the assertions will
        always be released when their owning objects go away.

        Reviewed by Dan Bernstein.

        * WebCore.exp.in:
        * WebCore.xcodeproj/project.pbxproj:
        * platform/mac/DisplaySleepDisabler.cpp:
        (WebCore::DisplaySleepDisabler::DisplaySleepDisabler): Register for the NoDisplaySleep assertion, and start our
        system activity timer when on Leopard.
        (WebCore::DisplaySleepDisabler::~DisplaySleepDisabler): Unregister for the assertion.
        (WebCore::DisplaySleepDisabler::systemActivityTimerFired): Call UpdateSystemActivity to prevent the screensaver from
        triggering on Leopard.
        * platform/mac/DisplaySleepDisabler.h:
        (WebCore::DisplaySleepDisabler::create):
        * platform/mac/WebVideoFullscreenController.h:
        * platform/mac/WebVideoFullscreenController.mm:
        (-[WebVideoFullscreenController dealloc]):
        (-[WebVideoFullscreenController setupVideoOverlay:]): Remove the now-unnecessary explicit use of the WebCore namespace.
        (-[WebVideoFullscreenController mediaElement]): Ditto.
        (-[WebVideoFullscreenController setMediaElement:]): Ditto.
        (-[WebVideoFullscreenController windowDidExitFullscreen]): Ditto.
        (-[WebVideoFullscreenController updatePowerAssertions]): Create a DisplaySleepDisabler instance when transitioning from permitting
        display sleep to disabling display sleep. Clear out our reference when sleep should be permitted, destroying any
        disabler that we own.

2011-09-19  Ryosuke Niwa  <rniwa@webkit.org>

        Hit testing on margins of body and head elements doesn't recur
        https://bugs.webkit.org/show_bug.cgi?id=40753

        Reviewed by Darin Adler.

        The bug was caused by positionForPointRespectingEditingBoundaries's comparing the editability
        of head/body and html elements when hit testing was done inside margins of head and body elements.

        Fixed the bug by special-casing html element (any immediate child of render view with a render layer)
        since margins of head and body elements are special.

        Tests: editing/selection/click-on-body-margin.html
               editing/selection/click-on-head-margin.html

        * rendering/RenderBlock.cpp:
        (WebCore::positionForPointRespectingEditingBoundaries):

2011-09-19  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95493 and r95496.
        http://trac.webkit.org/changeset/95493
        http://trac.webkit.org/changeset/95496
        https://bugs.webkit.org/show_bug.cgi?id=68418

        Broke Windows build (Requested by rniwa on #webkit).

        * ForwardingHeaders/heap/AllocationSpace.h: Removed.

2011-09-19  James Robinson  <jamesr@chromium.org>

        [chromium] ContentLayer's texture updater deleted during paint when compositing turns off in the middle of paint
        https://bugs.webkit.org/show_bug.cgi?id=68405

        Reviewed by Kenneth Russell.

        Make TiledLayerChromium's textureUpdater refcounted and hold an explicit reference during paint in case
        compositing is turned off halfway through a paint.

        * platform/graphics/chromium/ContentLayerChromium.h:
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerTextureUpdater::create):
        * platform/graphics/chromium/ImageLayerChromium.h:
        * platform/graphics/chromium/LayerTextureUpdater.h:
        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
        (WebCore::LayerTextureUpdaterBitmap::create):
        (WebCore::LayerTextureUpdaterSkPicture::create):
        * platform/graphics/chromium/LayerTextureUpdaterCanvas.h:
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::prepareToUpdate):

2011-09-19  Luke Macpherson   <macpherson@chromium.org>

        Eliminate Length::undefinedLength = -1 and replace with Undefined LengthType.
        https://bugs.webkit.org/show_bug.cgi?id=68057

        Reviewed by Darin Adler.

        There appear to be many cases where -1 is actually a valid Length.
        Encoding the validity of Length separately to the value is a natural solution.

        No new tests / no behavioral changes.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyLength::applyValue):
        * platform/Length.h:
        (WebCore::Length::Length):
        (WebCore::Length::value):
        (WebCore::Length::calcValue):
        (WebCore::Length::calcMinValue):
        (WebCore::Length::calcFloatValue):
        (WebCore::Length::isUndefined):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::computePreferredLogicalWidths):
        * rendering/RenderDeprecatedFlexibleBox.cpp:
        (WebCore::RenderDeprecatedFlexibleBox::computePreferredLogicalWidths):
        * rendering/RenderFileUploadControl.cpp:
        (WebCore::RenderFileUploadControl::computePreferredLogicalWidths):
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::isLogicalWidthSpecified):
        (WebCore::RenderImage::isLogicalHeightSpecified):
        * rendering/RenderListBox.cpp:
        (WebCore::RenderListBox::computePreferredLogicalWidths):
        * rendering/RenderMenuList.cpp:
        (WebCore::RenderMenuList::computePreferredLogicalWidths):
        * rendering/RenderReplaced.cpp:
        (WebCore::RenderReplaced::computePreferredLogicalWidths):
        * rendering/RenderSlider.cpp:
        (WebCore::RenderSlider::computePreferredLogicalWidths):
        * rendering/RenderTextControl.cpp:
        (WebCore::RenderTextControl::computePreferredLogicalWidths):
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::initialMaxSize):
        * rendering/svg/RenderSVGRoot.cpp:
        (WebCore::RenderSVGRoot::computePreferredLogicalWidths):

2011-09-19  Adam Barth  <abarth@webkit.org>

        Always enable ENABLE(EVENTSOURCE)
        https://bugs.webkit.org/show_bug.cgi?id=68414

        Reviewed by Eric Seidel.

        EventSource seems to be here to stay.  This patch makes WebKit more
        hackable by removing this ENABLE macro, as discussed on webkit-dev.

        * Configurations/FeatureDefines.xcconfig:
        * GNUmakefile.am:
        * bindings/cpp/WebDOMEventTarget.cpp:
        (toWebKit):
        * bindings/js/JSDOMWindowCustom.cpp:
        (WebCore::JSDOMWindow::eventSource):
        * bindings/js/JSEventSourceCustom.cpp:
        * bindings/js/JSEventTarget.cpp:
        (WebCore::toJS):
        (WebCore::toEventTarget):
        * bindings/js/JSWorkerContextCustom.cpp:
        (WebCore::JSWorkerContext::eventSource):
        * bindings/v8/V8DOMWrapper.cpp:
        (WebCore::V8DOMWrapper::convertEventTargetToV8Object):
        * features.pri:
        * page/DOMWindow.idl:
        * page/EventSource.cpp:
        * page/EventSource.h:
        * page/EventSource.idl:
        * workers/WorkerContext.idl:

2011-09-19  Jeremy Apthorp  <jeremya@chromium.org>

        Fix a use-after-free: clear the fullscreen change event target queue at
        detach time, rather than at destruction time. If this isn't done, it's
        possible for the event target queue to be the only thing that
        references the document. Then when the document is popped off the queue
        and dereferenced in Document::fullScreenChangeDelayTimerFired, the
        document is destroyed and the subsequent access to
        m_fullScreenChangeEventTargetQueue.isEmpty() accesses free'd memory.
        https://bugs.webkit.org/show_bug.cgi?id=67960

        Reviewed by Adam Barth.

        * dom/Document.cpp:
        (WebCore::Document::~Document):
        (WebCore::Document::detach):

2011-09-19  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95482.
        http://trac.webkit.org/changeset/95482
        https://bugs.webkit.org/show_bug.cgi?id=68410

        Broke chromium webkit-tests (Requested by dslomov on #webkit).

        * platform/image-encoders/skia/JPEGImageEncoder.cpp:
        (WebCore::RGBAtoRGB):

2011-09-19  Oliver Hunt  <oliver@apple.com>

        Refactor Heap allocation logic into separate AllocationSpace class
        https://bugs.webkit.org/show_bug.cgi?id=68409

        Reviewed by Gavin Barraclough.

        Adding a forwarding header.

        * ForwardingHeaders/heap/AllocationSpace.h: Added.

2011-09-19  Adam Barth  <abarth@webkit.org>

        [V8] document.all gets confused about its prototype chain
        https://bugs.webkit.org/show_bug.cgi?id=68393

        Reviewed by Eric Seidel.

        GetRealNamedPropertyInPrototypeChain doesn't call interceptors, so it's
        not a good idea to use its return value.  It turns out that all the
        callers of the API only cared about whether it returns a null handle.

        Test: http/tests/security/document-all.html

        * bindings/v8/V8Collection.h:
        (WebCore::collectionNamedPropertyGetter):
        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        (WebCore::V8DOMStringMap::namedPropertyDeleter):
        (WebCore::V8DOMStringMap::namedPropertySetter):
        * bindings/v8/custom/V8HTMLAllCollectionCustom.cpp:
        (WebCore::V8HTMLAllCollection::namedPropertyGetter):
        * bindings/v8/custom/V8HTMLCollectionCustom.cpp:
        (WebCore::V8HTMLCollection::namedPropertyGetter):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        (WebCore::V8NamedNodeMap::namedPropertyGetter):
        * bindings/v8/custom/V8StorageCustom.cpp:
        (WebCore::storageSetter):

2011-09-19  Adam Barth  <abarth@webkit.org>

        Named property confusion with __proto__
        https://bugs.webkit.org/show_bug.cgi?id=68221

        Reviewed by Eric Seidel.

        The __proto__ property is super magical because it's not a real named
        property and it has higher precedence than even interceptors.  This
        confuses this check, which is meant to detech which names will get
        handled by our interceptor.

        Test: http/tests/security/window-named-proto.html

        * bindings/v8/custom/V8DOMWindowCustom.cpp:
        (WebCore::V8DOMWindow::namedSecurityCheck):

2011-09-19  Adam Barth  <abarth@webkit.org>

        Rename ENABLE(OPENTYPE_SANITIZER) to USE(OPENTYPE_SANITIZER)
        https://bugs.webkit.org/show_bug.cgi?id=68292

        Reviewed by Eric Seidel.

        OpenType Sanitizer is a library for sanitizing type and not a feature.
        Therefore this macro should say that we USE the library.

        * platform/graphics/WOFFFileFormat.cpp:
        * platform/graphics/WOFFFileFormat.h:
        * platform/graphics/mac/FontCustomPlatformData.cpp:
        (WebCore::createFontCustomPlatformData):
        * platform/graphics/opentype/OpenTypeSanitizer.cpp:
        * platform/graphics/opentype/OpenTypeSanitizer.h:
        * platform/graphics/skia/FontCustomPlatformData.cpp:
        (WebCore::createFontCustomPlatformData):
        (WebCore::FontCustomPlatformData::supportsFormat):

2011-09-19  Adam Barth  <abarth@webkit.org>

        Remove APPLICATION_CACHE_DYNAMIC_ENTRIES and associated code
        https://bugs.webkit.org/show_bug.cgi?id=68407

        Reviewed by Eric Seidel.

        As discussed on webkit-dev, no one appears to be using this code.

        * GNUmakefile.list.am:
        * UseJSC.cmake:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/js/JSBindingsAllInOne.cpp:
        * bindings/js/JSDOMApplicationCacheCustom.cpp: Removed.

2011-09-19  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95385 and r95457.
        http://trac.webkit.org/changeset/95385
        http://trac.webkit.org/changeset/95457
        https://bugs.webkit.org/show_bug.cgi?id=68395

        Broke chromium browser_tests (Requested by dslomov on
        #webkit).

        * bindings/v8/V8DOMWindowShell.cpp:
        (WebCore::V8DOMWindowShell::disposeContextHandles):
        (WebCore::V8DOMWindowShell::initContextIfNeeded):
        * bindings/v8/V8IsolatedContext.cpp:
        (WebCore::V8IsolatedContext::V8IsolatedContext):
        (WebCore::V8IsolatedContext::destroy):
        * bindings/v8/V8IsolatedContext.h:
        * loader/EmptyClients.h:
        (WebCore::EmptyFrameLoaderClient::didCreateScriptContextForFrame):
        (WebCore::EmptyFrameLoaderClient::didDestroyScriptContextForFrame):
        (WebCore::EmptyFrameLoaderClient::didCreateIsolatedScriptContext):
        * loader/FrameLoaderClient.h:

2011-09-19  John Bauman  <jbauman@chromium.org>

        Fix nonpremultiplied webgl toDataURL to jpeg
        https://bugs.webkit.org/show_bug.cgi?id=68366

        The canvas spec says that toDataURL to formats without an alpha must
        be "composited onto a solid black background using the source-over
        operator." Do that.

        Reviewed by Kenneth Russell.

        * platform/image-encoders/skia/JPEGImageEncoder.cpp:
        (WebCore::RGBAtoRGB):

2011-09-19  Chris Marrin  <cmarrin@apple.com>

        Crash can occur when doing a PlatformCAAnimation::copy() with no valueFunction
        https://bugs.webkit.org/show_bug.cgi?id=67510

        Reviewed by Adam Roben.
        
        Another fix to take care of one last crash when running pause-crash.html. 
        CACF can't deal with null valueFunctions, so avoid setting it when it doesn't 
        exist.
        
        This also adds logic to the Windows Hook in LayerChangesFlusher to prevent it 
        from catching the null pointer exception generated by the pause-crash.html test 
        before this bug was fixed. Windows was ignoring the exception, so the testcase 
        would appear to succeed, even though it should have crashed.

        This is a resubmission of http://trac.webkit.org/changeset/95243 with a build fix.

        * WebCore.vcproj/WebCore.vcproj:
        * platform/graphics/ca/win/LayerChangesFlusher.cpp:
        (WebCore::LayerChangesFlusher::hookCallback):
        * platform/graphics/ca/win/PlatformCAAnimationWin.cpp:
        (PlatformCAAnimation::copy):
        * platform/win/StructuredExceptionHandlerSupressor.h: Added.
        (WebCore::StructuredExceptionHandlerSupressor::StructuredExceptionHandlerSupressor):
        (WebCore::StructuredExceptionHandlerSupressor::~StructuredExceptionHandlerSupressor):

2011-09-19  Ryosuke Niwa  <rniwa@webkit.org>

        Incorrect selection with absolutely positioned div
        https://bugs.webkit.org/show_bug.cgi?id=39503

        Reviewed by Kenneth Rohde Christiansen.

        The bug was caused by a false assumption in RenderBlock::positionForPoint. Because the last child box
        can be positioned, floated, invisible, etc..., we can't always trust last child's logicalTop to tell us
        whether a given point is inside or below the last child box.

        Fixed the bug by using the last hit-test candidate instead.

        Test: editing/selection/block-with-positioned-lastchild.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::positionForPoint):

2011-09-19  Dmitry Titov  <dimich@chromium.org>

        [Chromium] Crash after magic iframe transfer for Pepper/NaCl plugins.
        https://bugs.webkit.org/show_bug.cgi?id=68267
        Make adoptNode() to not enable live iframe transfer when the iframe's subtree contains plugins.

        Reviewed by Adam Barth.

        Test: fast/frames/iframe-reparenting-embed-elements.html

        * dom/Document.cpp:
        (WebCore::Document::adoptNode):
        * html/HTMLFrameElementBase.cpp:
        (WebCore::hasPluginElements):
        (WebCore::HTMLFrameElementBase::canRemainAliveOnRemovalFromTree):
        * html/HTMLFrameElementBase.h:

2011-09-19  Abhishek Arya  <inferno@chromium.org>

        Issues with merging ruby bases.
        https://bugs.webkit.org/show_bug.cgi?id=67240

        Reviewed by James Robinson.

        1) Change fromBeforeChild to beforeChild to match
        webkit rendering naming conventions.
        2) Add assert to verify ruby base is indeed emptied
        after collecting all children in a single base.
        3) Fix condition in mergeBlockChildren to bail out only
        when we have no children and there is no work to merge
        children to toBase.

        Test: fast/ruby/ruby-overhang-crash.html

        * rendering/RenderRubyBase.cpp:
        (WebCore::RenderRubyBase::moveChildren):
        (WebCore::RenderRubyBase::moveInlineChildren):
        (WebCore::RenderRubyBase::moveBlockChildren):
        (WebCore::RenderRubyBase::mergeBlockChildren):
        * rendering/RenderRubyBase.h:
        * rendering/RenderRubyRun.cpp:
        (WebCore::RenderRubyRun::removeChild):

2011-09-16  Abhishek Arya  <inferno@chromium.org>

        Child not placed correctly when beforeChild (table part)
        has both :before, :after content.
        https://bugs.webkit.org/show_bug.cgi?id=67656

        Reviewed by James Robinson.

        Tests: fast/table/table-cell-before-after-content-around-table-block.html
               fast/table/table-cell-before-after-content-around-table-row.html
               fast/table/table-cell-before-after-content-around-table.html
               fast/table/table-row-before-after-content-around-block.html
               fast/table/table-row-before-after-content-around-table.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::addChildIgnoringAnonymousColumnBlocks):
        1. Use the new helper functions findAfterContentRenderer,
           anonymousContainer.
        2. Rename anonymousChild to better name - beforeChildAnonymousContainer.
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::addChild):
        When adding a new child, if beforeChild is a table part(
        Table/TableSection/TableRow), we need to check if both
        :before, :after content are shoved in one of the anonymous child.
        If yes, we need to split the :before, :after content before adding
        newChild. Easiest approach is to destroy the :before content, then add
        the newChild and then call updateBeforeAfterContent to recreate the
        :before content.   
        * rendering/RenderObject.h:
        (WebCore::RenderObject::findBeforeContentRenderer): same as
        beforePseudoElementRenderer, but ignores text childs since they are
        sequentially added.
        (WebCore::RenderObject::findAfterContentRenderer): same.
        (WebCore::RenderObject::anonymousContainer):
        (WebCore::objectIsRelayoutBoundary):
        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::addChild): use the new helpers and functionally
        correct functions - findAfterContentRenderer, anonymousContainer. previous
        implementation was wrong since it would not go inside, if :after content
        is embedded deeper than one level.
        * rendering/RenderTableRow.cpp:
        (WebCore::RenderTableRow::addChild): same.
        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::addChild): same.

2011-09-19  Robert Kroeger  <rjkroege@chromium.org>

        [chromium] Gesture recognizer fires taptype only every other touch
        down/up sequence https://bugs.webkit.org/show_bug.cgi?id=68368
 
        Reviewed by Adam Barth.

        The addition of doubletap detection to the gesture recognizer missed some of the
        outgoing edges in the recognizer state machine. This change simplifies the logic
        and handles all outgoing edges.

        * platform/chromium/GestureRecognizerChromium.cpp:
        (WebCore::GestureRecognizerChromium::GestureRecognizerChromium):
        (WebCore::GestureRecognizerChromium::isInSecondClickTimeWindow):
        (WebCore::GestureRecognizerChromium::updateValues):
        (WebCore::GestureRecognizerChromium::touchDown):
        (WebCore::GestureRecognizerChromium::click):
        * platform/chromium/GestureRecognizerChromium.h:

2011-09-19  Tom Sepez  <tsepez@chromium.org>

        Fix xssauditor bypass with unterminated closing tag by making the HTMLSourceTracker
        and the HTMLParser interact more closely with each other.  HTMLParser should be
        setting the end range for the token itself to account for buffering that the
        HTMLSourceTracker can't know about, but there are a lot of paths that would need
        updating. First step is to cover this one path.
        https://bugs.webkit.org/show_bug.cgi?id=68281

        Reviewed by Adam Barth.

        Test: http/tests/security/xssAuditor/script-tag-with-invalid-closing-tag.html

        * html/parser/HTMLSourceTracker.cpp:
        (WebCore::HTMLSourceTracker::end):
        * html/parser/HTMLTokenizer.cpp:
        (WebCore::HTMLTokenizer::nextToken):

2011-09-19  Peter Rybin  <peter.rybin@gmail.com>

        TextPosition refactoring: Merge ZeroBasedNumber and OneBasedNumber classes
        https://bugs.webkit.org/show_bug.cgi?id=63541

        Reviewed by Adam Barth.

        No new tests because this patch is not changing behavior.

        * bindings/js/JavaScriptCallFrame.cpp:
        (WebCore::JavaScriptCallFrame::JavaScriptCallFrame):
        * bindings/js/JavaScriptCallFrame.h:
        (WebCore::JavaScriptCallFrame::create):
        (WebCore::JavaScriptCallFrame::position):
        (WebCore::JavaScriptCallFrame::update):
        * bindings/js/ScriptController.cpp:
        (WebCore::ScriptController::eventHandlerLineNumber):
        * bindings/js/ScriptDebugServer.cpp:
        (WebCore::ScriptDebugServer::hasBreakpoint):
        (WebCore::ScriptDebugServer::dispatchDidParseSource):
        (WebCore::ScriptDebugServer::createCallFrameAndPauseIfNeeded):
        (WebCore::ScriptDebugServer::updateCallFrameAndPauseIfNeeded):
        * bindings/js/ScriptDebugServer.h:
        * bindings/js/ScriptSourceCode.h:
        (WebCore::ScriptSourceCode::ScriptSourceCode):
        * bindings/js/StringSourceProvider.h:
        (WebCore::StringSourceProvider::create):
        (WebCore::StringSourceProvider::startPosition):
        (WebCore::StringSourceProvider::StringSourceProvider):
        * bindings/v8/ScheduledAction.cpp:
        (WebCore::ScheduledAction::ScheduledAction):
        * bindings/v8/ScriptController.cpp:
        (WebCore::ScriptController::eventHandlerPosition):
        * bindings/v8/ScriptController.h:
        * bindings/v8/ScriptEventListener.cpp:
        (WebCore::createAttributeEventListener):
        * bindings/v8/ScriptSourceCode.h:
        (WebCore::ScriptSourceCode::ScriptSourceCode):
        (WebCore::ScriptSourceCode::startPosition):
        * bindings/v8/V8LazyEventListener.cpp:
        (WebCore::V8LazyEventListener::V8LazyEventListener):
        * bindings/v8/V8LazyEventListener.h:
        (WebCore::V8LazyEventListener::create):
        * bindings/v8/V8Proxy.cpp:
        (WebCore::V8Proxy::compileScript):
        (WebCore::V8Proxy::evaluate):
        (WebCore::V8Proxy::runScript):
        * bindings/v8/V8Proxy.h:
        * bindings/v8/WorkerContextExecutionProxy.cpp:
        (WebCore::WorkerContextExecutionProxy::evaluate):
        (WebCore::WorkerContextExecutionProxy::runScript):
        * bindings/v8/WorkerContextExecutionProxy.h:
        * bindings/v8/WorkerScriptController.cpp:
        (WebCore::WorkerScriptController::evaluate):
        * dom/PendingScript.cpp:
        (WebCore::PendingScript::releaseElementAndClear):
        * dom/PendingScript.h:
        (WebCore::PendingScript::PendingScript):
        (WebCore::PendingScript::startingPosition):
        (WebCore::PendingScript::setStartingPosition):
        * dom/ScriptElement.cpp:
        (WebCore::ScriptElement::prepareScript):
        * dom/ScriptElement.h:
        * dom/ScriptableDocumentParser.h:
        * dom/ViewportArguments.cpp:
        (WebCore::parserLineNumber):
        * html/parser/HTMLDocumentParser.cpp:
        (WebCore::HTMLDocumentParser::runScriptsForPausedTreeBuilder):
        (WebCore::HTMLDocumentParser::pumpTokenizer):
        (WebCore::HTMLDocumentParser::lineNumber):
        (WebCore::HTMLDocumentParser::textPosition):
        * html/parser/HTMLDocumentParser.h:
        * html/parser/HTMLInputStream.h:
        * html/parser/HTMLScriptRunner.cpp:
        (WebCore::HTMLScriptRunner::execute):
        (WebCore::HTMLScriptRunner::runScript):
        * html/parser/HTMLScriptRunner.h:
        * html/parser/HTMLTreeBuilder.cpp:
        (WebCore::uninitializedPositionValue1):
        (WebCore::HTMLTreeBuilder::HTMLTreeBuilder):
        (WebCore::HTMLTreeBuilder::takeScriptToProcess):
        (WebCore::HTMLTreeBuilder::processEndTag):
        (WebCore::HTMLTreeBuilder::processScriptStartTag):
        * html/parser/HTMLTreeBuilder.h:
        * inspector/InspectorResourceAgent.cpp:
        (WebCore::InspectorResourceAgent::buildInitiatorObject):
        * platform/text/SegmentedString.cpp:
        (WebCore::SegmentedString::currentLine):
        (WebCore::SegmentedString::currentColumn):
        (WebCore::SegmentedString::setCurrentPosition):
        * platform/text/SegmentedString.h:
        * svg/SVGDocumentExtensions.cpp:
        (WebCore::parserLineNumber):
        * xml/XMLErrors.cpp:
        (WebCore::XMLErrors::XMLErrors):
        (WebCore::XMLErrors::handleError):
        (WebCore::XMLErrors::appendErrorMessage):
        * xml/XMLErrors.h:
        * xml/parser/MarkupTokenizerBase.h:
        (WebCore::MarkupTokenizerBase::lineNumber):
        * xml/parser/NewXMLDocumentParser.cpp:
        (WebCore::NewXMLDocumentParser::processScript):
        (WebCore::NewXMLDocumentParser::textPosition):
        (WebCore::NewXMLDocumentParser::lineNumber):
        * xml/parser/NewXMLDocumentParser.h:
        * xml/parser/XMLDocumentParser.cpp:
        (WebCore::XMLDocumentParser::pushCurrentNode):
        (WebCore::XMLDocumentParser::handleError):
        * xml/parser/XMLDocumentParser.h:
        * xml/parser/XMLDocumentParserLibxml2.cpp:
        (WebCore::PendingCallbacks::appendErrorCallback):
        (WebCore::XMLDocumentParser::XMLDocumentParser):
        (WebCore::XMLDocumentParser::doWrite):
        (WebCore::XMLDocumentParser::startElementNs):
        (WebCore::XMLDocumentParser::error):
        (WebCore::XMLDocumentParser::lineNumber):
        (WebCore::XMLDocumentParser::columnNumber):
        (WebCore::XMLDocumentParser::textPosition):
        * xml/parser/XMLDocumentParserQt.cpp:
        (WebCore::XMLDocumentParser::XMLDocumentParser):
        (WebCore::XMLDocumentParser::doWrite):
        (WebCore::XMLDocumentParser::doEnd):
        (WebCore::XMLDocumentParser::lineNumber):
        (WebCore::XMLDocumentParser::columnNumber):
        (WebCore::XMLDocumentParser::textPosition):
        (WebCore::XMLDocumentParser::parse):
        (WebCore::XMLDocumentParser::parseStartElement):

2011-09-19  Dan Bernstein  <mitz@apple.com>

        WebCore part of [mac] WebKit contains Objective-C classes that are not prefixed with its standard prefixes
        https://bugs.webkit.org/show_bug.cgi?id=68323

        Reviewed by Sam Weinig.

        Renamed AccessibilityObjectWrapper to WebAccessibilityObjectWrapper.
        Renamed CascadeList to WebCascadeList.
        Renamed CookieStorageObjCAdapter to WebCookieStorageObjCAdapter.
        Renamed LanguageChangeObserver to WebLanguageChangeObserver.
        Renamed ScrollAnimationHelperDelegate to WebScrollAnimationHelperDelegate.
        Renamed ScrollbarPainterControllerDelegate to WebScrollbarPainterControllerDelegate.
        Renamed ScrollbarPainterDelegate to WebScrollbarPainterDelegate.
        Renamed ScrollbarPartAnimation to WebScrollbarPartAnimation.
        Renamed ScrollbarPrefsObserver to WebScrollbarPrefsObserver.

        * WebCore.gyp/WebCore.gyp: Updated for the renaming of CascadeList to WebCascadeList.
        * WebCore.xcodeproj/project.pbxproj:
        * accessibility/AccessibilityObject.h:
        * accessibility/mac/AXObjectCacheMac.mm:
        (WebCore::AXObjectCache::attachWrapper):
        * accessibility/mac/AccessibilityObjectMac.mm:
        * accessibility/mac/AccessibilityObjectWrapper.h: Removed.
        * accessibility/mac/AccessibilityObjectWrapper.mm: Removed.
        * accessibility/mac/WebAccessibilityObjectWrapper.h: Copied from Source/WebCore/accessibility/mac/AccessibilityObjectWrapper.h.
        * accessibility/mac/WebAccessibilityObjectWrapper.mm: Copied from Source/WebCore/accessibility/mac/AccessibilityObjectWrapper.mm.
        (convertToNSArray):
        (-[WebAccessibilityObjectWrapper accessibilityAttributeValue:forParameter:]):
        (-[WebAccessibilityObjectWrapper accessibilityIndexOfChild:]):
        (-[WebAccessibilityObjectWrapper accessibilityArrayAttributeValues:index:maxCount:]):
        * platform/graphics/mac/ComplexTextControllerCoreText.mm:
        (WebCore::ComplexTextController::collectComplexTextRunsForCharactersCoreText):
        * platform/mac/Language.mm:
        (WebCore::platformDefaultLanguage):
        * platform/mac/ScrollAnimatorMac.h:
        * platform/mac/ScrollAnimatorMac.mm:
        (-[WebScrollbarPainterDelegate setUpAnimation:scrollerPainter:part:WebCore::animateAlphaTo:duration:]):
        (WebCore::ScrollAnimatorMac::ScrollAnimatorMac):
        * platform/mac/ScrollbarThemeMac.mm:
        (WebCore::ScrollbarThemeMac::ScrollbarThemeMac):
        * platform/network/mac/CookieStorageMac.mm:
        (WebCore::startObservingCookieChanges):

2011-09-19  Cary Clark  <caryclark@google.com>

        Move fontDataForCombiningCharacterSequence to fix Skia on Mac build
        https://bugs.webkit.org/show_bug.cgi?id=68358

        Reviewed by Dan Bernstein.

        No new tests.

        * platform/graphics/mac/FontMac.mm:
        * platform/graphics/mac/FontComplexTextMac.cpp:
        (WebCore::Font::fontDataForCombiningCharacterSequence):
        This moves the implementation from FontMac.mm to
        FontComplexTextMac.cpp, so it is visible to the Skia on Mac
        platform as well.

2011-09-19  Jessie Berlin  <jberlin@apple.com>

        Sites that use history pushState or replaceState are recorded in history in Private Browsing
        mode.
        https://bugs.webkit.org/show_bug.cgi?id=68208

        Reviewed by Brady Eidson.

        Test: TestWebKitAPI/Tests/WebKit2/PrivateBrowsingPushStateNoHistoryCallback.

        Add the privateBrowsingEnabled check that is used in other places in HistoryController
        before calling addVisitedLink and FrameLoaderClient::updateGlobalHistory.

        * loader/HistoryController.cpp:
        (WebCore::HistoryController::pushState):
        (WebCore::HistoryController::replaceState):

2011-09-19  Leandro Pereira  <leandro@profusion.mobi>

        Unreviewed: ScrollbarThemeMock.cpp is already referenced in the
        global CMakeLists.txt.

        * CMakeListsEfl.txt: Remove reference to platform/mock/ScrollbarThemeMock.cpp.
        * CMakeListsWinCE.txt: Ditto.

2011-09-19  Ademar de Souza Reis Jr.  <ademar.reis@openbossa.org>

        Unreviewed: dos2unix on bindings/js/JSExceptionBase.h

        Visual Studio is choking on this file when generating packages for
        Qt-4.8 on Windows:

        """
        Source\WebCore\Bindings\js\JSExceptionBase.h:
        error C4335: Mac file format detected: please convert the source file
        to either DOS or UNIX format
        """

        Since from all .cpp or .h files shared by all ports this is the only
        one with CRLF line terminations, I'm assuming this was a mistake.

        * bindings/js/JSExceptionBase.h:

2011-09-19  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: didMarkDOMContentEvent() should send event of MarkDOMContent type.
        https://bugs.webkit.org/show_bug.cgi?id=67528

        Reviewed by Pavel Feldman.

        Tests: inspector/timeline/timeline-dom-content-loaded-event.html
               inspector/timeline/timeline-load-event.html

        * inspector/InspectorTimelineAgent.cpp:
        (WebCore::InspectorTimelineAgent::didMarkDOMContentEvent):

2011-09-19  Shawn Singh  <shawnsingh@chromium.org>

        Re-name LayerChromium border functions to reflect that
        they are only for debug use.
        https://bugs.webkit.org/show_bug.cgi?id=68212

        Reviewed by James Robinson.

        Code cleanup towards unit testing.

        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
        (WebCore::GraphicsLayerChromium::clearBackgroundColor):
        (WebCore::GraphicsLayerChromium::setDebugBackgroundColor):
        (WebCore::GraphicsLayerChromium::setDebugBorder):
        (WebCore::GraphicsLayerChromium::updateLayerBackgroundColor):
        (WebCore::GraphicsLayerChromium::setupContentsLayer):
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::setDebugBorderColor):
        (WebCore::LayerChromium::setDebugBorderWidth):
        * platform/graphics/chromium/LayerChromium.h:

2011-09-18  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: requestAnimationFrame callbacks don't show up in the timeline panel.
        https://bugs.webkit.org/show_bug.cgi?id=67986

        Reviewed by Pavel Feldman.

        Test: inspector/timeline/timeline-animation-frame.html

        * English.lproj/localizedStrings.js:
        * bindings/v8/V8Proxy.cpp:
        (WebCore::V8Proxy::callFunction):
        (WebCore::V8Proxy::callFunctionWithoutFrame):
        (WebCore::V8Proxy::instrumentedCallFunction):
        * bindings/v8/V8Proxy.h:
        * bindings/v8/custom/V8CustomVoidCallback.cpp:
        (WebCore::invokeCallback):
        * dom/ScriptedAnimationController.cpp:
        (WebCore::ScriptedAnimationController::registerCallback):
        (WebCore::ScriptedAnimationController::cancelCallback):
        (WebCore::ScriptedAnimationController::serviceScriptedAnimations):
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::didRegisterAnimationFrameCallbackImpl):
        (WebCore::InspectorInstrumentation::didCancelAnimationFrameCallbackImpl):
        (WebCore::InspectorInstrumentation::willFireAnimationFrameEventImpl):
        (WebCore::InspectorInstrumentation::didFireAnimationFrameEventImpl):
        * inspector/InspectorInstrumentation.h:
        (WebCore::InspectorInstrumentation::willCallFunction):
        (WebCore::InspectorInstrumentation::didRegisterAnimationFrameCallback):
        (WebCore::InspectorInstrumentation::didCancelAnimationFrameCallback):
        (WebCore::InspectorInstrumentation::willFireAnimationFrameEvent):
        (WebCore::InspectorInstrumentation::didFireAnimationFrameEvent):
        * inspector/InspectorTimelineAgent.cpp:
        (WebCore::InspectorTimelineAgent::didRegisterAnimationFrameCallback):
        (WebCore::InspectorTimelineAgent::didCancelAnimationFrameCallback):
        (WebCore::InspectorTimelineAgent::willFireAnimationFrameEvent):
        (WebCore::InspectorTimelineAgent::didFireAnimationFrameEvent):
        * inspector/InspectorTimelineAgent.h:
        * inspector/TimelineRecordFactory.cpp:
        (WebCore::TimelineRecordFactory::createAnimationFrameCallbackData):
        * inspector/TimelineRecordFactory.h:
        * inspector/front-end/TimelineAgent.js:
        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel):
        (WebInspector.TimelinePanel.prototype.get _recordStyles):
        (WebInspector.TimelinePanel.prototype._innerAddRecordToTimeline):
        (WebInspector.TimelinePanel.prototype._clearPanel):
        (WebInspector.TimelinePanel.FormattedRecord):
        (WebInspector.TimelinePanel.FormattedRecord.prototype._generatePopupContent):
        (WebInspector.TimelinePanel.FormattedRecord.prototype._getRecordDetails):

2011-09-19  Carlos Garcia Campos  <cgarcia@igalia.com>

        [GTK] Fix distcheck build
        https://bugs.webkit.org/show_bug.cgi?id=68241

        Reviewed by Martin Robinson.

        * GNUmakefile.list.am:

2011-09-18  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: chromium-win: "Save timeline data" does nothing.
        https://bugs.webkit.org/show_bug.cgi?id=68313

        windows shell API function GetSaveFileName doesn't accept file names with ':' symbol.

        Reviewed by Pavel Feldman.

        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelineModel.prototype._saveToFile):

2011-09-18  Dan Bernstein  <mitz@apple.com>

        Try to fix the Chromium Mac build after r95391.

        * WebCore.gyp/WebCore.gyp:

2011-09-18  Dan Bernstein  <mitz@apple.com>

        Try to fix the Chromium Mac build after r95391.

        * WebCore.gyp/WebCore.gyp:

2011-09-18  Dan Bernstein  <mitz@apple.com>

        Try to fix the Chromium Mac build after r95391.

        * WebCore.gypi: Updated for the renaming of ComplexTextController.cpp.
        * WebCore.xcodeproj/project.pbxproj: Ditto.
        * platform/graphics/Font.h: Changed #if directives to include the Chromium Mac port.
        * platform/graphics/SimpleFontData.h: Ditto.
        * platform/graphics/mac/ComplexTextControllerCoreText.cpp: Changed the filename extension of this
        Objective-C++ file to .mm.
        * platform/graphics/mac/ComplexTextControllerCoreText.mm: Copied from Source/WebCore/platform/graphics/mac/ComplexTextControllerCoreText.cpp.

2011-09-18  Dan Bernstein  <mitz@apple.com>

        Snow Leopard build fix after r95391.

        * platform/graphics/mac/ComplexTextControllerCoreText.cpp:
        (WebCore::ComplexTextController::collectComplexTextRunsForCharactersCoreText):

2011-09-18  Dan Bernstein  <mitz@apple.com>

        Leopard build fix after r95391.

        * platform/graphics/mac/ComplexTextControllerATSUI.cpp:
        (WebCore::ComplexTextController::collectComplexTextRunsForCharactersATSUI):

2011-09-18  Dan Bernstein  <mitz@apple.com>

        Allow Core Text to choose the fallback font for rendering a combining character sequence

        Fixes <rdar://problem/7860281> Decomposed text is displayed incorrectly when Verdana is specified
        https://bugs.webkit.org/show_bug.cgi?id=68287

        Reviewed by Dave Hyatt.

        Test: platform/mac/fast/text/combining-character-sequence-fallback.html

        * WebCore.xcodeproj/project.pbxproj: Compile ComplexTextControllerCoreText.cpp as Objective-C++.
        I am going to rename this file in a followup patch.

        * platform/graphics/Font.h: Declared fontDataForCombiningCharacterSequence().

        * platform/graphics/SimpleFontData.h: Declared canRenderCombiningCharacterSequence() and added
        a member variable to cache the results of calling this function.

        * platform/graphics/mac/ComplexTextController.cpp:
        (WebCore::ComplexTextController::offsetForPosition): Fixed a typo in a comment.
        (WebCore::advanceByCombiningCharacterSequence): Added this helper function, which iterates over
        characters until the end of a sequence of combining characters, zero-width joiners and zero-width
        non-joiners. A single base characater followed by such a (possibly-empty) sequence is known as
        a combining character sequence. This stretches the definition a little because the base character
        may be a combining character as well. Returns false if an invalid UTF-16 sequence is encountered,
        true otherwise.
        (WebCore::ComplexTextController::collectComplexTextRuns): - Replaced the glyphData and nextGlyphData
        variables each with a pair of variables, a SimpleFontData* and a boolean indicating whether a
        character mapped to the missing glyph. This clarifies that this function does not use glyph IDs.
        - Renamed the local variable newC to uppercaseCharacter.
        - Changed to use advanceByCombiningCharacterSequence().
        - Changed to use Font::fontDataForCombiningCharacterSequence() instead of Font::glyphDataForCharacter().
          If there are combining marks and none of the fonts in the fallback list can render the sequence alone,
          use the systemFallbackFontData() constant to indicate to collectComplexTextRunsForCharactersCoreText()
          to allow Core Text to perform its own fallback.
        - Stopped checking isSmallCaps against nextIsSmallCaps. It was redundant, since the small caps FontData
          differs from the normal variant.
        (WebCore::ComplexTextController::collectComplexTextRunsForCharacters): Moved the common logic to
        handle the 0 fontData case from the ATSUI and Core Text continuations of this function into this function.

        * platform/graphics/mac/ComplexTextController.h:
        (WebCore::ComplexTextController::systemFallbackFontData): Added. This constant is used to indicate to
        collectComplexTextRunsForCharactersCoreText() that it should allow Core Text to perform its own font
        fallback.

        * platform/graphics/mac/ComplexTextControllerATSUI.cpp:
        (WebCore::ComplexTextController::collectComplexTextRunsForCharactersATSUI): Handle systemFallbackFontData()
        by using the primary font data.

        * platform/graphics/mac/ComplexTextControllerCoreText.cpp:
        (-[CascadeList initWithFont:WebCore::character:]): Added.
        (-[CascadeList count]): Added.
        (-[CascadeList objectAtIndex:]): Added. Returns an entry from a cascade list of CTFontDescriptorRef
        objects based on the font’s fallback list for the character. The list is initialized lazily.
        (WebCore::ComplexTextController::collectComplexTextRunsForCharactersCoreText): Handle systemFallbackFontData()
        by allowing Core Text to perform font fallback, starting with a cascade list based on the font’s fallback
        list and possibly continuing with system fallback.

        * platform/graphics/mac/FontMac.mm:
        (WebCore::Font::fontDataForCombiningCharacterSequence): Added. If the sequence is only a base character,
        calls through to glyphDataForCharacter(). Otherwise, iterates over the font’s fallback list for the
        base character (and the system fallback font for that character), returning the first font that can
        render the sequence, or 0 if there is none.

        * platform/graphics/mac/SimpleFontDataMac.mm:
        (WebCore::provideStringAndAttributes): Added this Core Text callback.
        (WebCore::SimpleFontData::canRenderCombiningCharacterSequence): Added. Checks if Core Text can render
        the sequence using only this font. Caches the result.

2011-09-17  Mihai Parparita  <mihaip@chromium.org>

        FrameLoaderClient BackForwardList-related methods are unsued
        https://bugs.webkit.org/show_bug.cgi?id=68293

        Reviewed by Darin Adler.

        Remove FrameLoaderClient methods that were added by r51629, since only
        the old (since-deleted) Android port needed them.

        * history/BackForwardListImpl.cpp:
        (WebCore::BackForwardListImpl::addItem):
        (WebCore::BackForwardListImpl::goBack):
        (WebCore::BackForwardListImpl::goForward):
        (WebCore::BackForwardListImpl::goToItem):
        (WebCore::BackForwardListImpl::setCapacity):
        * loader/EmptyClients.h:
        * loader/FrameLoaderClient.h:

2011-09-17  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68307
        
        Crash in border image cssText. Make sure to null check all the components, since they're all
        optional now.

        Reviewed by Sam Weinig.

        Added fast/borders/border-image-slice-omission.html

        * css/CSSBorderImageValue.cpp:
        (WebCore::CSSBorderImageValue::cssText):

2011-09-17  Aaron Boodman  <aa@chromium.org>

        Rework script context creation/release notifications
        https://bugs.webkit.org/show_bug.cgi?id=67828

        Reviewed by Adam Barth.

        * bindings/v8/V8DOMWindowShell.cpp:
        (WebCore::V8DOMWindowShell::disposeContextHandles):
        (WebCore::V8DOMWindowShell::initContextIfNeeded):
        * bindings/v8/V8IsolatedContext.cpp:
        (WebCore::V8IsolatedContext::V8IsolatedContext):
        (WebCore::V8IsolatedContext::destroy):
        * bindings/v8/V8IsolatedContext.h:
        * loader/EmptyClients.h:
        (WebCore::EmptyFrameLoaderClient::didCreateScriptContext):
        (WebCore::EmptyFrameLoaderClient::willReleaseScriptContext):
        * loader/FrameLoaderClient.h:

2011-09-17  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: file open dialog appears when user clicks on the timeline bar in timeline panel.
        https://bugs.webkit.org/show_bug.cgi?id=68312

        Reviewed by Pavel Feldman.

       * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel.prototype._createFileSelector):

2011-09-17  Jeff Miller  <jeffm@apple.com>

        Build fix after r95372.

        * dom/DOMAllInOne.cpp: #include "EventListenerMap.cpp"

2011-09-17  Deepak Sherveghar  <bpwv64@motorola.com>

        Override supportsFocus() for HTMLMediaElement.
        https://bugs.webkit.org/show_bug.cgi?id=67190

        Reviewed by Antonio Gomes.

        Tests: fast/events/media-element-focus-tab.html
               fast/spatial-navigation/snav-media-elements.html

        Return true from supportsFocus() if control's attribute is present or a tabindex is specified.

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::supportsFocus):
        * html/HTMLMediaElement.h:

2011-09-16  Adam Barth  <abarth@webkit.org>

        Rename ENABLE(LEVELDB) to USE(LEVELDB)
        https://bugs.webkit.org/show_bug.cgi?id=68290

        Reviewed by Darin Adler.

        LEVELDB is a library that can be used to implemented INDEXED_DATABASE,
        which means it should be a USE not an ENABLE.

        * CMakeLists.txt:
        * WebCore.gyp/WebCore.gyp:
        * platform/leveldb/LevelDBComparator.h:
        * platform/leveldb/LevelDBDatabase.cpp:
        * platform/leveldb/LevelDBDatabase.h:
        * platform/leveldb/LevelDBIterator.h:
        * platform/leveldb/LevelDBSlice.h:
        * platform/leveldb/LevelDBTransaction.cpp:
        * platform/leveldb/LevelDBTransaction.h:
        * platform/leveldb/LevelDBWriteBatch.cpp:
        * platform/leveldb/LevelDBWriteBatch.h:
        * storage/IDBFactoryBackendImpl.cpp:
        (WebCore::IDBFactoryBackendImpl::open):
        (WebCore::IDBFactoryBackendImpl::migrateFromSQLiteToLevelDB):
        * storage/IDBLevelDBBackingStore.cpp:
        * storage/IDBLevelDBBackingStore.h:
        * storage/IDBLevelDBCoding.cpp:
        * storage/IDBLevelDBCoding.h:

2011-09-16  Andreas Kling  <kling@webkit.org>

        Reduce EventTarget memory usage by deferring hash map allocation
        until there are listeners for more than 1 event type.

        http://webkit.org/b/68105

        Reviewed by Darin Adler.

        Introduce an EventListenerMap class which manages a map of event types that have
        one or more listeners connected.

        When there is only one event type, it's stored directly on the EventListenerMap
        internally, and when more are added it moves to a hash map. It only goes back
        from the hash map if all the listeners are removed at once (i.e clear() is called.)

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:

            Adding files.

        * WebCore.exp.in:

            Export EventListenerMap::contains() for WebKit/mac.

        * dom/EventListenerMap.cpp: Added.
        (WebCore::EventListenerMap::EventListenerMap):
        (WebCore::EventListenerMap::~EventListenerMap):
        (WebCore::EventListenerMap::isEmpty):
        (WebCore::EventListenerMap::contains):
        (WebCore::EventListenerMap::clear):
        (WebCore::EventListenerMap::eventTypes):
        (WebCore::addListenerToVector):
        (WebCore::EventListenerMap::add):
        (WebCore::removeListenerFromVector):
        (WebCore::EventListenerMap::remove):
        (WebCore::EventListenerMap::find):
        (WebCore::removeFirstListenerCreatedFromMarkup):
        (WebCore::EventListenerMap::removeFirstEventListenerCreatedFromMarkup):
        (WebCore::copyListenersNotCreatedFromMarkupToTarget):
        (WebCore::EventListenerMap::copyEventListenersNotCreatedFromMarkupToTarget):
        (WebCore::EventListenerIterator::EventListenerIterator):
        (WebCore::EventListenerIterator::nextListener):
        * dom/EventListenerMap.h: Added.

        * dom/EventTarget.cpp:
        (WebCore::EventTargetData::~EventTargetData):
        (WebCore::EventTarget::addEventListener):
        (WebCore::EventTarget::removeEventListener):
        (WebCore::EventTarget::fireEventListeners):
        (WebCore::EventTarget::getEventListeners):
        (WebCore::EventTarget::removeAllEventListeners):

        * dom/EventTarget.h:
        (WebCore::EventTarget::visitJSEventListeners):

            Use EventListenerIterator to visit listeners. (JSC specific.)

        * inspector/InspectorDOMAgent.cpp:
        (WebCore::InspectorDOMAgent::getEventListenersForNode):

            Call EventListenerMap::eventTypes() go get the list of event types
            currently listened for.

        * dom/Node.cpp:
        (WebCore::Node::removeEventListener):
        * svg/SVGUseElement.cpp:
        (WebCore::SVGUseElement::transferEventListenersToShadowTree):

            Move implementations of SVG-specific hacks into EventListenerMap and
            call them from here.

2011-09-16  Jeremy Apthorp <jeremya@chromium.org> and James Kozianski  <koz@chromium.org>

        Don't detach elements from the render tree when entering fullscreen mode
        https://bugs.webkit.org/show_bug.cgi?id=66531

        This prevents plugin instances from being destroyed and reinstantiated
        when entering fullscreen mode.

        Reviewed by James Robinson.

        Test: plugins/fullscreen-plugins-dont-reload.html

        * dom/Document.cpp:
        (WebCore::Document::webkitWillEnterFullScreenForElement):
        (WebCore::Document::webkitDidExitFullScreenForElement):
        * dom/NodeRenderingContext.cpp:
        (WebCore::NodeRendererFactory::createRendererIfNeeded):
        * rendering/RenderFullScreen.cpp:
        (createFullScreenStyle):
        (RenderFullScreen::wrapRenderer):
        (RenderFullScreen::unwrapRenderer):
        * rendering/RenderFullScreen.h:

2011-09-16  Jochen Eisinger  <jochen@chromium.org>

        Rename FrameLoaderClient::allowImages to FrameLoaderClient::allowImage and include the image URL as parameter
        https://bugs.webkit.org/show_bug.cgi?id=68071

        This will allow embedders to block images based on where the image is loaded from, instead of just blocking all images in a given frame.

        Reviewed by Adam Barth.

        * html/ImageDocument.cpp:
        (WebCore::ImageDocumentParser::appendBytes):
        * loader/FrameLoaderClient.h:
        (WebCore::FrameLoaderClient::allowImage):
        * loader/cache/CachedResourceLoader.cpp:
        (WebCore::CachedResourceLoader::requestImage):

2011-09-16  Tom Sepez  <tsepez@chromium.org>

        Make XSSAuditor truncate inline snippets at a reasonable length before comparison
        respecting boundaries of multiply urlencoded sequences.
        https://bugs.webkit.org/show_bug.cgi?id=68092
        
        Reviewed by Adam Barth.

        Test: http/tests/security/xssAuditor/property-escape-long.html

        * html/parser/XSSAuditor.cpp:
        (WebCore::XSSAuditor::filterTokenAfterScriptStartTag):
        (WebCore::XSSAuditor::eraseDangerousAttributesIfInjected):
        (WebCore::XSSAuditor::eraseAttributeIfInjected):
        (WebCore::XSSAuditor::decodedSnippetForAttribute):
        (WebCore::XSSAuditor::isContainedInRequest):
        * html/parser/XSSAuditor.h:

2011-09-16  Shawn Singh  <shawnsingh@chromium.org>

        Remove m_contentsDirty from LayerChromium because it
        is redundant with m_dirtyRect.
        https://bugs.webkit.org/show_bug.cgi?id=68213

        Reviewed by James Robinson.

        Code cleanup towards unit testing.

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::updateCompositorResources):
        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::LayerChromium):
        (WebCore::LayerChromium::setNeedsDisplay):
        (WebCore::LayerChromium::resetNeedsDisplay):
        * platform/graphics/chromium/LayerChromium.h:
        * platform/graphics/chromium/VideoLayerChromium.cpp:
        (WebCore::VideoLayerChromium::updateCompositorResources):
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::updateCompositorResources):

2011-09-16  Dmitry Lomov  <dslomov@google.com>

        https://bugs.webkit.org/show_bug.cgi?id=66714
        Add webkitPostMessage to allow for adding transferable support.
        This adds webkitPostMessage, currently identical to postMessage, which 
        would later be a vehicle for adding transferable support for messaging.
        
        Based on patch by Luke Zarko.

        Reviewed by David Levin.

        * bindings/js/JSDOMWindowCustom.cpp:
        (WebCore::JSDOMWindow::webkitPostMessage):
        * bindings/js/JSDedicatedWorkerContextCustom.cpp:
        (WebCore::JSDedicatedWorkerContext::webkitPostMessage):
        * bindings/js/JSMessageEventCustom.cpp:
        (WebCore::JSMessageEvent::webkitInitMessageEvent):
        * bindings/js/JSMessagePortCustom.cpp:
        (WebCore::JSMessagePort::webkitPostMessage):
        * bindings/js/JSWorkerCustom.cpp:
        (WebCore::JSWorker::postMessage):
        (WebCore::JSWorker::webkitPostMessage):
        * bindings/v8/custom/V8DOMWindowCustom.cpp:
        (WebCore::handlePostMessageCallback):
        (WebCore::V8DOMWindow::postMessageCallback):
        (WebCore::V8DOMWindow::webkitPostMessageCallback):
        * bindings/v8/custom/V8DedicatedWorkerContextCustom.cpp:
        (WebCore::handlePostMessageCallback):
        (WebCore::V8DedicatedWorkerContext::postMessageCallback):
        (WebCore::V8DedicatedWorkerContext::webkitPostMessageCallback):
        * bindings/v8/custom/V8MessageEventCustom.cpp:
        (WebCore::V8MessageEvent::initMessageEventCallback):
        (WebCore::V8MessageEvent::webkitInitMessageEventCallback):
        * bindings/v8/custom/V8MessagePortCustom.cpp:
        (WebCore::handlePostMessageCallback):
        (WebCore::V8MessagePort::postMessageCallback):
        (WebCore::V8MessagePort::webkitPostMessageCallback):
        * bindings/v8/custom/V8WorkerCustom.cpp:
        (WebCore::handlePostMessageCallback):
        (WebCore::V8Worker::postMessageCallback):
        (WebCore::V8Worker::webkitPostMessageCallback):
        * dom/MessageEvent.idl:
        * dom/MessagePort.idl:
        * page/DOMWindow.idl:
        * workers/DedicatedWorkerContext.idl:
        * workers/Worker.idl:

2011-09-16  Alexei Svitkine  <asvitkine@chromium.org>

        Chromium: Fix repaint of rubber-band overhang area under composited path
        https://bugs.webkit.org/show_bug.cgi?id=68246

        I accidently removed these two lines from the last patch on: https://bugs.webkit.org/show_bug.cgi?id=66969

        Reviewed by James Robinson.

        Test: platform/chromium-gpu/compositing/rubberbanding/transform-overhang-size-change.html

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::scrollContents):

2011-09-16  Peter Beverloo  <peter@chromium.org>

        Depend on harfbuzz for OS=Android as well
        https://bugs.webkit.org/show_bug.cgi?id=68239

        Like GTK, Android depends on harfbuzz as well, so reflect that in
        the project file. Furthermore, fix a compile error in PopupListBox.cpp
        by explicitly including ctype.h, as isspace otherwise won't be declared.

        Reviewed by Steve Block.

        * WebCore.gyp/WebCore.gyp:
        * platform/chromium/PopupListBox.cpp:

2011-09-16  Tony Chang  <tony@chromium.org>

        Rename flex-align values to match the spec
        https://bugs.webkit.org/show_bug.cgi?id=67741

        Reviewed by Ojan Vafai.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        (WebCore::CSSPrimitiveValue::operator EFlexAlign):
        * css/CSSValueKeywords.in:
        * rendering/style/RenderStyleConstants.h:

2011-09-16  Kentaro Hara  <haraken@chromium.org>

        Implement an ErrorEvent constructor for JSC
        https://bugs.webkit.org/show_bug.cgi?id=68148

        Reviewed by Sam Weinig.

        The spec for the ErrorEvent constructor is here:
        http://dev.w3.org/html5/workers/#errorevent

        Test: fast/events/constructors/error-event-constructor.html

        * bindings/generic/EventConstructors.h: Added a definition for the ErrorEvent constructor.
        * bindings/js/JSEventConstructors.cpp: Added #includes for ErrorEvent.
        * dom/ErrorEvent.cpp:
        (WebCore::ErrorEventInit::ErrorEventInit):
        (WebCore::ErrorEvent::ErrorEvent):
        (WebCore::ErrorEvent::initErrorEvent):
        (WebCore::ErrorEvent::isErrorEvent):
        * dom/ErrorEvent.h: Added a definition for ErrorEventInit.
        (WebCore::ErrorEvent::create):
        (WebCore::ErrorEvent::message):
        (WebCore::ErrorEvent::filename):
        (WebCore::ErrorEvent::lineno):
        * dom/ErrorEvent.idl: Makes ErrorEvent constructible.

2011-09-16  Kentaro Hara  <haraken@google.com>

        Overhangs a ruby by no more than half the width of the neighboring text.
        https://bugs.webkit.org/show_bug.cgi?id=62684

        Reviewed by Dan Bernstein.

        Assume two rubies between which a narrow text exists, like
        "<ruby>x<rt>xxxxxx</rt></ruby>l<ruby>y<rt>yyyyyy</rt></ruby>".
        In order to avoid the two rubies overlapping with each other,
        this patch overhangs the ruby by no more than half the ruby font
        size and no more than half the width of the neighboring text.

        Tests: fast/ruby/overhang-horizontal-no-overlap1.html
               fast/ruby/overhang-horizontal-no-overlap2.html
               fast/ruby/overhang-vertical-no-overlap1.html
               fast/ruby/overhang-vertical-no-overlap2.html

        * rendering/RenderRubyRun.cpp:
        (WebCore::RenderRubyRun::getOverhang): Calculates the width of ruby overhanging.

2011-09-16  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95304.
        http://trac.webkit.org/changeset/95304
        https://bugs.webkit.org/show_bug.cgi?id=68299

        Broke GTK+ builds. It pulls derived headers into main.c
        (Requested by rniwa on #webkit).

        * bindings/scripts/CodeGeneratorGObject.pm:
        ():
        * bindings/scripts/test/GObject/WebKitDOMTestCallback.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestCallback.h:
        * bindings/scripts/test/GObject/WebKitDOMTestCallbackPrivate.h:
        * bindings/scripts/test/GObject/WebKitDOMTestInterface.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestInterface.h:
        * bindings/scripts/test/GObject/WebKitDOMTestInterfacePrivate.h:
        * bindings/scripts/test/GObject/WebKitDOMTestMediaQueryListListener.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestMediaQueryListListener.h:
        * bindings/scripts/test/GObject/WebKitDOMTestMediaQueryListListenerPrivate.h:
        * bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
        (webkit_dom_test_obj_conditional_method1):
        (webkit_dom_test_obj_conditional_method2):
        (webkit_dom_test_obj_conditional_method3):
        (webkit_dom_test_obj_get_conditional_attr1):
        (webkit_dom_test_obj_set_conditional_attr1):
        (webkit_dom_test_obj_get_conditional_attr2):
        (webkit_dom_test_obj_set_conditional_attr2):
        (webkit_dom_test_obj_get_conditional_attr3):
        (webkit_dom_test_obj_set_conditional_attr3):
        (webkit_dom_test_obj_set_property):
        (webkit_dom_test_obj_get_property):
        (webkit_dom_test_obj_class_init):
        * bindings/scripts/test/GObject/WebKitDOMTestObj.h:
        * bindings/scripts/test/GObject/WebKitDOMTestObjPrivate.h:
        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterface.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterface.h:
        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterfacePrivate.h:

2011-09-16  Shawn Singh  <shawnsingh@chromium.org>

        Re-named isRootLayer to isNonCompositedContent because
        that is what the flag actually means.
        https://bugs.webkit.org/show_bug.cgi?id=68214

        Reviewed by James Robinson.

        Code cleanup towards unit testing.

        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::LayerChromium):
        (WebCore::LayerChromium::pushPropertiesTo):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::setIsNonCompositedContent):
        (WebCore::LayerChromium::isNonCompositedContent):
        * platform/graphics/chromium/NonCompositedContentHost.cpp:
        (WebCore::NonCompositedContentHost::NonCompositedContentHost):
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::setLayerTreeHost):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (WebCore::CCLayerImpl::setIsNonCompositedContent):
        (WebCore::CCLayerImpl::isNonCompositedContent):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::draw):

2011-09-16  Simon Fraser  <simon.fraser@apple.com>

        Make custom scrollbar theme for use in DRT, to reduce pixel diffs between platforms
        https://bugs.webkit.org/show_bug.cgi?id=68134

        Reviewed by Sam Weinig.

        Add a new setting to control whether the mock scrollbar theme is used.
        This is a global setting, so that it can be set without having to
        access a specific Settings object.

        * page/Settings.h:
        (WebCore::Settings::setMockScrollbarsEnabled):
        (WebCore::Settings::mockScrollbarsEnabled):

2011-09-16  Ben Wells  <benwells@chromium.org>

        Large canvas fills should not crash or create unnecessarily large image buffers
        https://bugs.webkit.org/show_bug.cgi?id=67988

        When using source-in, destination-in, source-out, or destination-atop a temporary
        buffer is created. This buffer only needs to be big enough to cover the intersection
        of the path and the canvas. If the area of intersection between the fill and the
        canvas is empty the canvas is completely cleared and a temporary buffer is not used.

        This change also adds some null checks for failures to create contexts or buffers.

        Reviewed by Darin Adler.

        Test: fast/canvas/canvas-large-fills.html

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::clearCanvas):
        (WebCore::CanvasRenderingContext2D::fillAndDisplayTransparencyElsewhere):

2011-09-16  Shawn Singh  <shawnsingh@chromium.org>

        Remove default NULL argument in LayerChromium::create().
        https://bugs.webkit.org/show_bug.cgi?id=68211

        Reviewed by James Robinson.

        Code cleanup related to creating unit testing.

        * platform/graphics/chromium/LayerChromium.h:

2011-09-16  Adrienne Walker  <enne@google.com>

        [chromium] Move quad drawing code from LayerChromium to LayerRendererChromium
        https://bugs.webkit.org/show_bug.cgi?id=68272

        Reviewed by James Robinson.

        All the OpenGL code is in LayerRendererChromium and the CCLayerImpl
        tree, so move the static drawTexturedQuad/toGLMatrix functions to
        LayerRendererChromium, where they really belong.

        Just moving code around. Tested by existing compositor tests.

        * platform/graphics/chromium/LayerChromium.cpp:
        * platform/graphics/chromium/LayerChromium.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::toGLMatrix):
        (WebCore::LayerRendererChromium::drawTexturedQuad):
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
        (WebCore::CCCanvasLayerImpl::draw):
        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
        (WebCore::CCHeadsUpDisplay::draw):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::drawDebugBorder):
        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
        (WebCore::CCPluginLayerImpl::draw):
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::drawSurface):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::drawTiles):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::drawYUV):
        (WebCore::CCVideoLayerImpl::drawRGBA):

2011-09-16  Shawn Singh  <shawnsingh@chromium.org>

        Fixed const correctness on accessors in LayerChromium
        https://bugs.webkit.org/show_bug.cgi?id=68210

        Reviewed by James Robinson.

        Code cleanup related to creating unit testing.

        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::preserves3D):
        (WebCore::LayerChromium::replicaLayer):

2011-09-14  Ryosuke Niwa  <rniwa@webkit.org>

        Deleting line break before h1 converts h1 to span
        https://bugs.webkit.org/show_bug.cgi?id=45784

        Reviewed by Kenneth Rohde Christiansen.

        Fixed the bug by treating h1 and other elements that retain structure like Mail blockquote.

        We already had a logic to overriding styles of merged paragraphs by Mail blockquote so
        just extend this logic for h1-h6, pre, etc...

        Tests: editing/deleting/merge-paragraph-from-address.html
               editing/deleting/merge-paragraph-from-h6-with-style.html
               editing/deleting/merge-paragraph-from-h6.html
               editing/deleting/merge-paragraph-from-listing.html
               editing/deleting/merge-paragraph-into-h1-with-style.html
               editing/deleting/merge-paragraph-into-h1.html
               editing/deleting/merge-paragraph-into-pre.html

        * editing/ReplaceSelectionCommand.cpp:
        (WebCore::ReplaceSelectionCommand::removeRedundantStylesAndKeepStyleSpanInline):
        * editing/markup.cpp:
        (WebCore::isBlockNodeToRetainAppearance): Extracted from ancestorToRetainStructureAndAppearance.
        (WebCore::StyledMarkupAccumulator::serializeNodes):
        (WebCore::ancestorToRetainStructureAndAppearance):
        * editing/markup.h:

2011-09-16  Max Perepelitsyn  <pph34r@gmail.com>

        Set but not used variables cleanup (gcc 4.6)
        https://bugs.webkit.org/show_bug.cgi?id=68157

        Reviewed by Darin Adler.

        * platform/audio/ReverbConvolverStage.cpp:
        (WebCore::ReverbConvolverStage::process):
        * rendering/RenderMediaControlsChromium.cpp:
        (WebCore::paintMediaButton):

2011-09-16  Geoffrey Garen  <ggaren@apple.com>

        Removed undetectable style.filter.

        Reviewed by Sam Weinig.
        
        This feature was added in http://trac.webkit.org/changeset/15557 to
        support housingmaps.com. But housingmaps.com no longer needs this hack,
        we don't know of other websites that need it, and we don't know of
        any other browsers that have implemented this feature.

        * ForwardingHeaders/runtime/StringObjectThatMasqueradesAsUndefined.h: Removed.
        * WebCore.order:
        * bindings/js/JSCSSStyleDeclarationCustom.cpp:
        (WebCore::JSCSSStyleDeclaration::nameGetter):

2011-09-16  Adam Barth  <abarth@webkit.org>

        Update JSC results to account for intrinsics change.

        * bindings/scripts/test/JS/JSTestInterface.cpp:
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        * bindings/scripts/test/JS/JSTestObj.cpp:
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:

2011-09-16  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95312.
        http://trac.webkit.org/changeset/95312
        https://bugs.webkit.org/show_bug.cgi?id=68277

        It's innocent, innocent I tell you! (Requested by jamesr_ on
        #webkit).

        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::createTextureUpdater):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::context):
        (WebCore::CCThreadProxy::beginFrameAndCommitOnCCThread):
        (WebCore::CCThreadProxy::setNeedsCommitAndRedrawOnCCThread):
        (WebCore::CCThreadProxy::setNeedsRedrawOnCCThread):

2011-09-16  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95309.
        http://trac.webkit.org/changeset/95309
        https://bugs.webkit.org/show_bug.cgi?id=68271

        Broke many chromium gpu tests. (Requested by dave_levin on
        #webkit).

        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::createTextureUpdater):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::context):
        (WebCore::CCThreadProxy::beginFrameAndCommitOnCCThread):
        (WebCore::CCThreadProxy::setNeedsCommitAndRedrawOnCCThread):
        (WebCore::CCThreadProxy::setNeedsRedrawOnCCThread):

2011-09-16  Filip Pizlo  <fpizlo@apple.com>

        DFG JIT should inline Math.abs
        https://bugs.webkit.org/show_bug.cgi?id=68227

        Reviewed by Oliver Hunt.

        Added JavaScriptCore/dfg to include path path. Changed the bindings
        scripts to handle the presence of intrinsics.

        * CMakeLists.txt:
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHashTable):

2011-09-16  Iain Merrick  <husky@google.com>

        [chromium] Fix CCLayerTreeHostTest
        https://bugs.webkit.org/show_bug.cgi?id=67418

        This is a minimal set of changes to get CCLayerTreeHostTest
        compiling, running and passing with USE_THREADED_COMPOSITING
        enabled.

        Reviewed by James Robinson.

        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::createTextureUpdater):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::createLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::context):
        (WebCore::CCThreadProxy::beginFrameAndCommitOnCCThread):
        (WebCore::CCThreadProxy::setNeedsCommitAndRedrawOnCCThread):
        (WebCore::CCThreadProxy::setNeedsRedrawOnCCThread):

2011-09-16  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95227.
        http://trac.webkit.org/changeset/95227
        https://bugs.webkit.org/show_bug.cgi?id=68262

        Broke a bunch of SVG tests (Requested by andersca on #webkit).

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::contentsSize):
        (WebCore::ScrollView::wheelEvent):
        * platform/ScrollView.h:
        * platform/mac/ScrollViewMac.mm:
        (WebCore::ScrollView::platformContentsSize):
        * platform/wx/ScrollViewWx.cpp:
        (WebCore::ScrollView::platformContentsSize):

2011-09-16  James Simonsen  <simonjam@chromium.org>

        Fix HTML5 parser's adoption agency algorithm to reparent correctly
        https://bugs.webkit.org/show_bug.cgi?id=68147

        Reviewed by Eric Seidel.

        * html/parser/HTMLTreeBuilder.cpp:
        (WebCore::HTMLTreeBuilder::callTheAdoptionAgency):

2011-09-16  Adam Barth  <abarth@webkit.org>

        CodeGeneratorGObject should use C++ style comments for ENABLE guards
        https://bugs.webkit.org/show_bug.cgi?id=68256

        Reviewed by Darin Adler.

        This patch should have not behavioral effect.  It just cleans up the
        GObject code generator to use C++-style comments for ENABLE guards and
        to use the usual comment style for license blocks.

        * bindings/scripts/CodeGeneratorGObject.pm:
        * bindings/scripts/test/GObject/WebKitDOMTestCallback.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestCallback.h:
        * bindings/scripts/test/GObject/WebKitDOMTestCallbackPrivate.h:
        * bindings/scripts/test/GObject/WebKitDOMTestInterface.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestInterface.h:
        * bindings/scripts/test/GObject/WebKitDOMTestInterfacePrivate.h:
        * bindings/scripts/test/GObject/WebKitDOMTestMediaQueryListListener.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestMediaQueryListListener.h:
        * bindings/scripts/test/GObject/WebKitDOMTestMediaQueryListListenerPrivate.h:
        * bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
        (webkit_dom_test_obj_conditional_method1):
        (webkit_dom_test_obj_conditional_method2):
        (webkit_dom_test_obj_conditional_method3):
        (webkit_dom_test_obj_get_conditional_attr1):
        (webkit_dom_test_obj_set_conditional_attr1):
        (webkit_dom_test_obj_get_conditional_attr2):
        (webkit_dom_test_obj_set_conditional_attr2):
        (webkit_dom_test_obj_get_conditional_attr3):
        (webkit_dom_test_obj_set_conditional_attr3):
        (webkit_dom_test_obj_set_property):
        (webkit_dom_test_obj_get_property):
        (webkit_dom_test_obj_class_init):
        * bindings/scripts/test/GObject/WebKitDOMTestObj.h:
        * bindings/scripts/test/GObject/WebKitDOMTestObjPrivate.h:
        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterface.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterface.h:
        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterfacePrivate.h:

2011-09-16  Csaba Osztrogonác  <ossy@webkit.org>

        [Qt] REGRESSION(r95091) It made many tests flakey
        https://bugs.webkit.org/show_bug.cgi?id=68232

        Unreviewed rolling out r95091 and followup patches.

        * English.lproj/localizedStrings.js:
        * bindings/v8/V8Proxy.cpp:
        (WebCore::V8Proxy::callFunction):
        * bindings/v8/V8Proxy.h:
        * bindings/v8/custom/V8CustomVoidCallback.cpp:
        (WebCore::invokeCallback):
        * dom/ScriptedAnimationController.cpp:
        (WebCore::ScriptedAnimationController::registerCallback):
        (WebCore::ScriptedAnimationController::cancelCallback):
        (WebCore::ScriptedAnimationController::serviceScriptedAnimations):
        * inspector/InspectorInstrumentation.cpp:
        * inspector/InspectorInstrumentation.h:
        (WebCore::InspectorInstrumentation::willCallFunction):
        * inspector/InspectorTimelineAgent.cpp:
        * inspector/InspectorTimelineAgent.h:
        * inspector/TimelineRecordFactory.cpp:
        * inspector/TimelineRecordFactory.h:
        * inspector/front-end/TimelineAgent.js:
        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel):
        (WebInspector.TimelinePanel.prototype.get _recordStyles):
        (WebInspector.TimelinePanel.prototype._innerAddRecordToTimeline):
        (WebInspector.TimelinePanel.prototype._clearPanel):
        (WebInspector.TimelinePanel.FormattedRecord):
        (WebInspector.TimelinePanel.FormattedRecord.prototype._generatePopupContent):
        (WebInspector.TimelinePanel.FormattedRecord.prototype._getRecordDetails):

2011-09-16  Abhishek Arya  <inferno@chromium.org>

        cachedFont not getting updated for inline SVG text.
        https://bugs.webkit.org/show_bug.cgi?id=68060

        Reviewed by Nikolas Zimmermann.

        The cached scaledFont needs to be updated on every style set call. It
        is not similar to m_style which can get derived from parent's style and
        hence will get automatically updated on ancestor's style change. This is
        required, otherwise we will maintain stale font list in cached scaledFont
        when custom fonts are retired on Document::recalcStyle.

        Test: svg/text/text-style-recalc-crash.html

        * rendering/svg/RenderSVGInlineText.cpp:
        (WebCore::RenderSVGInlineText::styleDidChange):
        (WebCore::RenderSVGInlineText::setStyle):
        * rendering/svg/RenderSVGInlineText.h:

2011-09-16  Antti Koivisto  <antti@apple.com>

        REGRESSION (r95052): SelectorChecker identifier filter not working
        https://bugs.webkit.org/show_bug.cgi?id=68244

        Reviewed by Dan Bernstein.

        Missing &.

        * css/SelectorChecker.cpp:
        (WebCore::collectDescendantSelectorIdentifierHashes):

2011-09-16  Csaba Osztrogonác  <ossy@webkit.org>

        Unreviewed typo fix after r95271.

        * bindings/scripts/test/GObject/WebKitDOMTestCallback.cpp:

2011-09-16  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: [Extensions API] support extensions for remote inspector front-end
        https://bugs.webkit.org/show_bug.cgi?id=67840

        Reviewed by Pavel Feldman.

        - Merge ExtensionCommon.js into ExtensionAPI.js
        - refactor building of extension API for better reuse
        - expose interface for extension registration

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/front-end/ExtensionAPI.js:
        (defineCommonExtensionSymbols):
        (buildExtensionAPIInjectedScript):
        * inspector/front-end/ExtensionCommon.js:
        * inspector/front-end/ExtensionServer.js:
        (WebInspector.ExtensionServer.prototype._addExtensions):
        (WebInspector.ExtensionServer.prototype._addExtension):
        (WebInspector.ExtensionServer.prototype._buildExtensionAPIScript):
        (WebInspector.ExtensionServer.prototype._onWindowMessage):
        (WebInspector.ExtensionServer.prototype._registerExtension):
        (WebInspector.ExtensionServer.prototype._expandResourcePath):
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/inspector.html:

2011-09-16  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: change WebInspector.currentPanel getter/setter to functions.
        https://bugs.webkit.org/show_bug.cgi?id=68242

        This is necessary for the panel switching performance tests.

        Reviewed by Pavel Feldman.

        * inspector/front-end/Drawer.js:
        (WebInspector.Drawer.prototype.show.animationFinished):
        (WebInspector.Drawer.prototype.show):
        (WebInspector.Drawer.prototype.hide):
        (WebInspector.Drawer.prototype._animateDrawerHeight.animationFinished):
        (WebInspector.Drawer.prototype._animateDrawerHeight):
        (WebInspector.Drawer.prototype._statusBarDragging):
        * inspector/front-end/ElementsPanel.js:
        (WebInspector.ElementsPanel.prototype.switchToAndFocus):
        * inspector/front-end/ResourcesPanel.js:
        (WebInspector.ResourcesPanel.prototype.showAnchorLocation):
        * inspector/front-end/ScriptsPanel.js:
        * inspector/front-end/SearchController.js:
        (WebInspector.SearchController.prototype.updateSearchMatchesCount):
        (WebInspector.SearchController.prototype.updateCurrentMatchIndex):
        (WebInspector.SearchController.prototype.updateSearchLabel):
        (WebInspector.SearchController.prototype.handleShortcut):
        (WebInspector.SearchController.prototype._performSearch):
        * inspector/front-end/Toolbar.js:
        (WebInspector.Toolbar.createPanelToolbarItem.onToolbarItemClicked):
        (WebInspector.Toolbar.createPanelToolbarItem):
        * inspector/front-end/inspector.js:
        (WebInspector.currentPanel):
        (WebInspector._updateFocusedNode):
        (WebInspector.windowResize):
        (WebInspector.documentKeyDown):
        (WebInspector.documentCanCopy):
        (WebInspector.documentCopy):
        (WebInspector.showPanel):
        (WebInspector.startUserInitiatedDebugging):
        (WebInspector.inspect):
        (WebInspector._showAnchorLocationInPanel):
        (WebInspector._toolbarItemClicked):
        (WebInspector.PanelHistory.prototype.goBack):
        (WebInspector.PanelHistory.prototype.goForward):

2011-09-15  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: rename Console.clearConsoleMessages to Console.clearMessages, brush up console domain doc.
        https://bugs.webkit.org/show_bug.cgi?id=68165

        Reviewed by Yury Semikhatsky.

        * inspector/InjectedScriptHost.cpp:
        (WebCore::InjectedScriptHost::clearConsoleMessages):
        * inspector/Inspector.json:
        * inspector/InspectorConsoleAgent.cpp:
        (WebCore::InspectorConsoleAgent::clearMessages):
        * inspector/InspectorConsoleAgent.h:
        * inspector/front-end/ConsoleModel.js:
        (WebInspector.ConsoleModel.prototype.requestClearMessages):

2011-09-16  Alejandro G. Castro  <alex@igalia.com>

        Fix GTK build after r95245.

        * GNUmakefile.list.am:

2011-09-16  Leo Yang  <leo.yang@torchmobile.com.cn>

        [Qt] Crash when dragging google maps.
        https://bugs.webkit.org/show_bug.cgi?id=68223

        The custom image for a cursor might not be ready when WebKit trying
        to use it to construct the cursor in Qt porting. This patch is using
        arrow image to substitute the unready custom image.

        Reviewed by Adam Barth.

        Test: fast/css/crash-on-custom-cursor-when-loading.html

        * platform/qt/CursorQt.cpp:
        (WebCore::createCustomCursor):
        (WebCore::Cursor::ensurePlatformCursor):

2011-09-15  Adam Barth  <abarth@webkit.org>

        Rename ENABLE(DATABASE) to ENABLE(SQL_DATABASE)
        https://bugs.webkit.org/show_bug.cgi?id=68205

        Reviewed by Eric Seidel.

        As discussed on webkit-dev.

        * CMakeLists.txt:
        * Configurations/FeatureDefines.xcconfig:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * UseJSC.cmake:
        * bindings/generic/RuntimeEnabledFeatures.cpp:
        * bindings/generic/RuntimeEnabledFeatures.h:
        * bindings/js/JSCustomSQLStatementErrorCallback.cpp:
        * bindings/js/JSDOMBinding.cpp:
        (WebCore::setDOMException):
        * bindings/js/JSExceptionBase.cpp:
        (WebCore::toExceptionBase):
        * bindings/js/JSInjectedScriptHostCustom.cpp:
        (WebCore::JSInjectedScriptHost::databaseId):
        * bindings/js/JSSQLResultSetRowListCustom.cpp:
        * bindings/js/JSSQLTransactionCustom.cpp:
        * bindings/js/JSSQLTransactionSyncCustom.cpp:
        * bindings/scripts/test/CPP/WebDOMTestCallback.cpp:
        * bindings/scripts/test/CPP/WebDOMTestCallback.h:
        * bindings/scripts/test/GObject/WebKitDOMTestCallback.cpp:
        * bindings/scripts/test/JS/JSTestCallback.cpp:
        * bindings/scripts/test/JS/JSTestCallback.h:
        * bindings/scripts/test/ObjC/DOMTestCallback.mm:
        * bindings/scripts/test/TestCallback.idl:
        * bindings/scripts/test/V8/V8TestCallback.cpp:
        * bindings/scripts/test/V8/V8TestCallback.h:
        * bindings/v8/V8Proxy.cpp:
        (WebCore::V8Proxy::setDOMException):
        * bindings/v8/V8Proxy.h:
        * bindings/v8/custom/V8CustomSQLStatementErrorCallback.cpp:
        * bindings/v8/custom/V8InjectedScriptHostCustom.cpp:
        (WebCore::V8InjectedScriptHost::databaseIdCallback):
        * bindings/v8/custom/V8SQLResultSetRowListCustom.cpp:
        * bindings/v8/custom/V8SQLTransactionCustom.cpp:
        * bindings/v8/custom/V8SQLTransactionSyncCustom.cpp:
        * dom/Document.cpp:
        * dom/Document.h:
        * dom/ExceptionCode.cpp:
        (WebCore::getExceptionCodeDescription):
        * dom/ExceptionCode.h:
        * dom/ScriptExecutionContext.cpp:
        (WebCore::ScriptExecutionContext::ScriptExecutionContext):
        (WebCore::ScriptExecutionContext::~ScriptExecutionContext):
        * dom/ScriptExecutionContext.h:
        * features.pri:
        * history/PageCache.cpp:
        (WebCore::logCanCacheFrameDecision):
        (WebCore::PageCache::canCachePageContainingThisFrame):
        * inspector/InjectedScriptHost.cpp:
        (WebCore::InjectedScriptHost::InjectedScriptHost):
        (WebCore::InjectedScriptHost::disconnect):
        * inspector/InjectedScriptHost.h:
        (WebCore::InjectedScriptHost::init):
        * inspector/InspectorController.cpp:
        (WebCore::InspectorController::InspectorController):
        (WebCore::InspectorController::connectFrontend):
        (WebCore::InspectorController::disconnectFrontend):
        (WebCore::InspectorController::restoreInspectorStateFromCookie):
        * inspector/InspectorController.h:
        * inspector/InspectorDatabaseAgent.cpp:
        * inspector/InspectorDatabaseInstrumentation.h:
        * inspector/InspectorDatabaseResource.cpp:
        * inspector/InspectorDatabaseResource.h:
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::didCommitLoadImpl):
        * inspector/InspectorInstrumentation.h:
        * inspector/InstrumentingAgents.h:
        (WebCore::InstrumentingAgents::InstrumentingAgents):
        * inspector/WorkerInspectorController.cpp:
        (WebCore::WorkerInspectorController::WorkerInspectorController):
        (WebCore::WorkerInspectorController::connectFrontend):
        * loader/EmptyClients.h:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::stopLoading):
        * page/ChromeClient.h:
        * page/DOMWindow.cpp:
        * page/DOMWindow.h:
        * page/DOMWindow.idl:
        * platform/sql/SQLiteAuthorizer.cpp:
        * platform/sql/SQLiteDatabase.cpp:
        * platform/sql/SQLiteFileSystem.cpp:
        * platform/sql/SQLiteStatement.cpp:
        * platform/sql/SQLiteTransaction.cpp:
        * storage/AbstractDatabase.cpp:
        * storage/AbstractDatabase.h:
        * storage/ChangeVersionWrapper.cpp:
        * storage/ChangeVersionWrapper.h:
        * storage/Database.cpp:
        * storage/Database.h:
        * storage/Database.idl:
        * storage/DatabaseAuthorizer.cpp:
        * storage/DatabaseCallback.h:
        * storage/DatabaseCallback.idl:
        * storage/DatabaseDetails.h:
        * storage/DatabaseSync.cpp:
        * storage/DatabaseSync.h:
        * storage/DatabaseSync.idl:
        * storage/DatabaseTask.cpp:
        * storage/DatabaseTask.h:
        * storage/DatabaseThread.cpp:
        * storage/DatabaseThread.h:
        * storage/DatabaseTracker.cpp:
        * storage/DatabaseTracker.h:
        * storage/DatabaseTrackerClient.h:
        * storage/OriginQuotaManager.cpp:
        * storage/OriginQuotaManager.h:
        * storage/OriginUsageRecord.cpp:
        * storage/OriginUsageRecord.h:
        * storage/SQLCallbackWrapper.h:
        * storage/SQLError.h:
        * storage/SQLError.idl:
        * storage/SQLException.h:
        * storage/SQLException.idl:
        * storage/SQLResultSet.cpp:
        * storage/SQLResultSet.h:
        * storage/SQLResultSet.idl:
        * storage/SQLResultSetRowList.cpp:
        * storage/SQLResultSetRowList.h:
        * storage/SQLResultSetRowList.idl:
        * storage/SQLStatement.cpp:
        * storage/SQLStatement.h:
        * storage/SQLStatementCallback.h:
        * storage/SQLStatementCallback.idl:
        * storage/SQLStatementErrorCallback.h:
        * storage/SQLStatementErrorCallback.idl:
        * storage/SQLStatementSync.cpp:
        * storage/SQLStatementSync.h:
        * storage/SQLTransaction.cpp:
        * storage/SQLTransaction.h:
        * storage/SQLTransaction.idl:
        * storage/SQLTransactionCallback.h:
        * storage/SQLTransactionCallback.idl:
        * storage/SQLTransactionClient.cpp:
        * storage/SQLTransactionClient.h:
        * storage/SQLTransactionCoordinator.cpp:
        * storage/SQLTransactionCoordinator.h:
        * storage/SQLTransactionErrorCallback.h:
        * storage/SQLTransactionErrorCallback.idl:
        * storage/SQLTransactionSync.cpp:
        * storage/SQLTransactionSync.h:
        * storage/SQLTransactionSync.idl:
        * storage/SQLTransactionSyncCallback.h:
        * storage/SQLTransactionSyncCallback.idl:
        * storage/chromium/DatabaseObserver.h:
        * storage/chromium/DatabaseTrackerChromium.cpp:
        * storage/chromium/QuotaTracker.cpp:
        * storage/chromium/QuotaTracker.h:
        * storage/chromium/SQLTransactionClientChromium.cpp:
        * workers/WorkerContext.cpp:
        * workers/WorkerContext.h:
        * workers/WorkerContext.idl:
        * workers/WorkerThread.cpp:
        (WebCore::WorkerThreadShutdownStartTask::performTask):
        (WebCore::WorkerThread::stop):

2011-09-15  Alexandru Chiculita  <achicu@adobe.com>

        [CSSRegions] Regions should not slice line box rendering
        https://bugs.webkit.org/show_bug.cgi?id=66198

        Created a new LayoutState constructor for the RenderFlowThread. It will
        set m_isPaginated to true and force a pageHeight if 1. The actual pageHeight is
        not used, because pageLogicalHeightForOffset will actually redirect the call
        to RenderFlowThread.

        Removed some of the duplicate code that calculated the page logical offset.
        Added new methods like logicalPageOffset, pageLogicalHeightForOffset,
        pageRemainingLogicalHeightForOffset.

        There are still some issues related to incremental layout and different region widths.
        Those issues will be addressed in different patches.

        Reviewed by David Hyatt.

        Tests: fast/regions/text-region-breaks.html
               fast/regions/text-region-split-horizontal-bt.html
               fast/regions/text-region-split-vertical-rl.html
               fast/regions/text-region-split-vertical.html
               fast/regions/text-region-split.html

        * rendering/LayoutState.cpp:
        (WebCore::LayoutState::LayoutState):
        * rendering/LayoutState.h:
        (WebCore::LayoutState::LayoutState):
        (WebCore::LayoutState::isPaginated):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::positionNewFloats):
        (WebCore::RenderBlock::adjustForRegionFittingIfNeeded):
        (WebCore::RenderBlock::nextPageLogicalTopExcludingBoundaryPoint):
        (WebCore::RenderBlock::nextPageLogicalTopIncludingBoundaryPoint):
        (WebCore::inNormalFlow):
        (WebCore::RenderBlock::applyBeforeBreak):
        (WebCore::RenderBlock::applyAfterBreak):
        (WebCore::RenderBlock::logicalPageOffset):
        (WebCore::RenderBlock::pageLogicalHeightForOffset):
        (WebCore::RenderBlock::pageRemainingLogicalHeightForOffset):
        (WebCore::RenderBlock::adjustForUnsplittableChild):
        (WebCore::RenderBlock::adjustLinePositionForPagination):
        * rendering/RenderBlock.h:
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::layout):
        (WebCore::RenderFlowThread::regionLogicalHeightForLine):
        (WebCore::RenderFlowThread::regionRemainingLogicalHeightForLine):
        * rendering/RenderFlowThread.h:
        * rendering/RenderView.cpp:
        (WebCore::RenderView::pushLayoutState):
        * rendering/RenderView.h:
        (WebCore::LayoutStateMaintainer::LayoutStateMaintainer):
        (WebCore::LayoutStateMaintainer::push):

2011-09-15  Kentaro Hara  <haraken@google.com>

        Implement a PopStateEvent constructor for JSC
        https://bugs.webkit.org/show_bug.cgi?id=67977

        Reviewed by Sam Weinig.

        Test: fast/events/constructors/pop-state-event-constructor.html

        * bindings/generic/EventConstructors.h: Added a definition for the PopStateEvent constructor.
        * bindings/js/JSEventConstructors.cpp: Added #includes for PopStateEvent.
        * dom/PopStateEvent.cpp:
        (WebCore::PopStateEventInit::PopStateEventInit):
        (WebCore::PopStateEvent::PopStateEvent):
        (WebCore::PopStateEvent::create):
        * dom/PopStateEvent.h: Added a definition for PopStateEventInit.
        * dom/PopStateEvent.idl: Makes PopStateEvent constructible.

2011-09-15  Mihai Parparita  <mihaip@chromium.org>

        Fragment navigations should interrupt a provisional load of a different document
        https://bugs.webkit.org/show_bug.cgi?id=64556

        Reviewed by Adam Barth.
        
        Tests: http/tests/history/back-with-fragment-change.php
               http/tests/navigation/navigation-interrupted-by-fragment.html

        * loader/FrameLoader.cpp: Stop provisional load if a fragment commits.
        * loader/HistoryController.cpp: Don't commit the wrong provisional item.

2011-09-15  Adrienne Walker  <enne@google.com>

        [chromium] Add temporary diagnostics for LayerTreeHost::commitTo crash
        https://bugs.webkit.org/show_bug.cgi?id=68204

        Reviewed by James Robinson.

        Add CRASH calls to determine which assumptions are being violated.

        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::commitTo):

2011-09-15  Mark Hahnenberg  <mhahnenberg@apple.com>

        Unzip initialization lists and constructors in JSCell hierarchy (7/7)
        https://bugs.webkit.org/show_bug.cgi?id=68122

        Reviewed by Geoffrey Garen.

        No new tests.

        Completed the seventh and final level of the refactoring to add finishCreation() 
        methods to all classes within the JSCell hierarchy with non-trivial 
        constructor bodies.

        This consists of moving the finishCreation() method call into the create methods
        of the sixth level of the hierarchy as was done in previous patches.  

        The special cases for JSAudioConstructor, JSOptionConstructor, and JSImageConstructor 
        were also lumped in and given finishCreation() methods that are called in their 
        create methods because we are at the end and want to avoid a trivial patch just 
        for moving their finishCreation() methods from their constructor to their create method.

        * bindings/js/JSAudioConstructor.cpp:
        (WebCore::JSAudioConstructor::JSAudioConstructor):
        (WebCore::JSAudioConstructor::finishCreation):
        * bindings/js/JSAudioConstructor.h:
        (WebCore::JSAudioConstructor::create):
        * bindings/js/JSDOMBinding.h:
        (WebCore::DOMConstructorWithDocument::DOMConstructorWithDocument):
        * bindings/js/JSDOMWindowBase.cpp:
        (WebCore::JSDOMWindowBase::JSDOMWindowBase):
        * bindings/js/JSImageConstructor.cpp:
        (WebCore::JSImageConstructor::JSImageConstructor):
        (WebCore::JSImageConstructor::finishCreation):
        * bindings/js/JSImageConstructor.h:
        (WebCore::JSImageConstructor::create):
        * bindings/js/JSOptionConstructor.cpp:
        (WebCore::JSOptionConstructor::JSOptionConstructor):
        (WebCore::JSOptionConstructor::finishCreation):
        * bindings/js/JSOptionConstructor.h:
        (WebCore::JSOptionConstructor::create):
        * bindings/js/JSWorkerContextBase.cpp:
        (WebCore::JSWorkerContextBase::JSWorkerContextBase):

        The bindings generation script was also changed to move the finishCreation() call into the 
        create methods for descendants of JSWorkerContextBase and JSDOMWindowBase because those base
        classes had it removed from their constructors.  

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        * bridge/c/c_instance.cpp:
        (JSC::Bindings::CRuntimeMethod::create):
        (JSC::Bindings::CRuntimeMethod::CRuntimeMethod):
        * bridge/jni/jsc/JavaInstanceJSC.cpp:
        (JavaRuntimeMethod::create):
        (JavaRuntimeMethod::JavaRuntimeMethod):
        * bridge/objc/objc_instance.mm:
        (ObjCRuntimeMethod::create):
        (ObjCRuntimeMethod::ObjCRuntimeMethod):
        * bridge/qt/qt_runtime.cpp:
        (JSC::Bindings::QtRuntimeMetaMethod::QtRuntimeMetaMethod):
        (JSC::Bindings::QtRuntimeConnectionMethod::QtRuntimeConnectionMethod):
        * bridge/qt/qt_runtime.h:
        (JSC::Bindings::QtRuntimeMetaMethod::create):
        (JSC::Bindings::QtRuntimeConnectionMethod::create):

2011-09-15  Kentaro Hara  <haraken@google.com>

        A single line must not be split into two pages.
        https://bugs.webkit.org/show_bug.cgi?id=65005

        Reviewed by David Hyatt.

        When the document width of a page is overflowed, the last line of the page can be
        split into the next page. This is the regression caused by r88737. r88737 tried to
        fix rounding errors in rendering calculations by expanding and shrinking a page
        using one common method, resizePageRectsKeepingRatio(), but overlooked the case where
        a document width gets overflowed.

        This patch fixes the problem by also using resizePageRectsKeepingRatio() for the case
        where the document width gets overflowed.

        Test: printing/single-line-must-not-be-split-into-two-pages.html

        * WebCore.exp.in: Updated the signature of forceLayoutForPagination().
        * page/Frame.cpp:
        (WebCore::Frame::setPrinting): Added a new argument |originalPageSize|, which is an original page size before being expanded or shrunk.
        * page/Frame.h:
        * page/FrameView.cpp:
        (WebCore::FrameView::forceLayoutForPagination): Uses resizePageRectsKeepingRatio() in the case where the document width gets overflowed.
        * page/FrameView.h:
        * page/PrintContext.cpp:
        (WebCore::PrintContext::begin): Passes an original page size to setPrinting().
        (WebCore::PrintContext::end): Ditto.

2011-09-15  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95243 and r95246.
        http://trac.webkit.org/changeset/95243
        http://trac.webkit.org/changeset/95246
        https://bugs.webkit.org/show_bug.cgi?id=68202

        Broke the Windows build (Requested by smfr on #webkit).

        * WebCore.vcproj/WebCore.vcproj:
        * platform/graphics/ca/win/LayerChangesFlusher.cpp:
        (WebCore::LayerChangesFlusher::hookCallback):
        * platform/graphics/ca/win/PlatformCAAnimationWin.cpp:
        (PlatformCAAnimation::copy):
        * platform/win/StructuredExceptionHandlerSupressor.h: Removed.

2011-09-15  Simon Fraser  <simon.fraser@apple.com>

        Attempt to fix Windows build after r95243.

        * WebCore.vcproj/WebCore.vcproj:

2011-09-15  Simon Fraser  <simon.fraser@apple.com>

        Make custom scrollbar theme for use in DRT, to reduce pixel differences between platforms
        https://bugs.webkit.org/show_bug.cgi?id=68134

        Reviewed by James Robinson.

        Add new scrollbar theme, called ScrollbarThemeMock, for use in layout
        tests. The mock scrollbar simply draws a light gray box in the track,
        with a dark gray box for the thumb.
        
        Add ScrollbarThemeMock files to the build on all platforms. It isn't hooked up yet.

        * CMakeLists.txt:
        * CMakeListsEfl.txt:
        * CMakeListsWinCE.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * platform/mac/ScrollbarThemeMac.mm:
        (WebCore::ScrollbarTheme::nativeTheme):
        * platform/mock/ScrollbarThemeMock.cpp: Added.
        (WebCore::ScrollbarThemeMock::trackRect):
        (WebCore::ScrollbarThemeMock::scrollbarThickness):
        (WebCore::ScrollbarThemeMock::paintTrackBackground):
        (WebCore::ScrollbarThemeMock::paintThumb):
        * platform/mock/ScrollbarThemeMock.h: Added.
        (WebCore::ScrollbarThemeMock::hasButtons):
        (WebCore::ScrollbarThemeMock::hasThumb):
        (WebCore::ScrollbarThemeMock::backButtonRect):
        (WebCore::ScrollbarThemeMock::forwardButtonRect):

2011-09-15  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67884
        Delete button icon does not properly update when the device resolution changes 
        dynamically
        -and corresponding-
        <rdar://problem/10104632>

        Reviewed by Darin Adler.

        In DeleteButtonController::deviceScaleFactorChanged(), if the delete button is 
        currently showing, hide it and re-show it, forcing it to re-create the deletion 
        UI.
        * editing/DeleteButtonController.cpp:
        (WebCore::DeleteButtonController::deviceScaleFactorChanged):
        * editing/DeleteButtonController.h:
        * editing/Editor.cpp:
        (WebCore::Editor::deviceScaleFactorChanged):
        * editing/Editor.h:

        Iterate through all of the frames and propagate the deviceScaleFactorChange() 
        message to Editor.
        * page/Page.cpp:
        (WebCore::Page::setDeviceScaleFactor):

2011-09-15  Chris Marrin  <cmarrin@apple.com>

        Crash can occur when doing a PlatformCAAnimation::copy() with no valueFunction
        https://bugs.webkit.org/show_bug.cgi?id=67510

        Reviewed by Adam Roben.
        
        Another fix to take care of one last crash when running pause-crash.html.
        CACF can't deal with null valueFunctions, so avoid setting it when it doesn't 
        exist.
        
        This also adds logic to the Windows Hook in LayerChangesFlusher to prevent it
        from catching the null pointer exception generated by the pause-crash.html test
        before this bug was fixed. Windows was ignoring the exception, so the testcase
        would appear to succeed, even though it should have crashed.

        * WebCore.vcproj/WebCore.vcproj:
        * platform/graphics/ca/win/LayerChangesFlusher.cpp:
        (WebCore::LayerChangesFlusher::hookCallback):
        * platform/graphics/ca/win/PlatformCAAnimationWin.cpp:
        (PlatformCAAnimation::copy):
        * platform\win\StructuredExceptionHandlerSupressor.h: New file to encapsulate the exception handling supression.

2011-09-15  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=27579
        
        Make sure that the border shorthand also resets border-image.

        Reviewed by Beth Dakin.

        Added fast/borders/border-image-reset-by-border-shorthand.html.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):

2011-09-15  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=50072
        
        Make overflow clipping to border-radius work across layers. This patch makes painting
        work but does not attempt to fix hit testing. It also doesn't work when a composited
        layer is clipped by a non-composited ancestor.

        Add a new ClipRect class (used by ClipRects and RenderLayer) that is basically just tracking
        a rect and a border radius taint. At the time we set a clip, if the rectangle is listed
        as also being clipped by a radius, then we walk up the layer tree and push those inner border
        rounded rect clips for any overflow areas in the containing block chain.

        Reviewed by Beth Dakin.

        Added new tests in fast/clip.

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::pushContentsClip):
        * rendering/RenderLayer.cpp:
        (WebCore::inContainingBlockChain):
        (WebCore::RenderLayer::clipToRect):
        (WebCore::RenderLayer::restoreClip):
        (WebCore::RenderLayer::paintLayer):
        (WebCore::RenderLayer::hitTestLayer):
        (WebCore::RenderLayer::calculateClipRects):
        (WebCore::RenderLayer::backgroundClipRect):
        (WebCore::RenderLayer::calculateRects):
        (WebCore::RenderLayer::childrenClipRect):
        (WebCore::RenderLayer::selfClipRect):
        * rendering/RenderLayer.h:
        (WebCore::ClipRect::ClipRect):
        (WebCore::ClipRect::rect):
        (WebCore::ClipRect::setRect):
        (WebCore::ClipRect::hasRadius):
        (WebCore::ClipRect::setHasRadius):
        (WebCore::ClipRect::operator==):
        (WebCore::ClipRect::intersect):
        (WebCore::ClipRect::move):
        (WebCore::ClipRect::isEmpty):
        (WebCore::ClipRect::intersects):
        (WebCore::intersection):
        (WebCore::ClipRects::overflowClipRect):
        (WebCore::ClipRects::setOverflowClipRect):
        (WebCore::ClipRects::fixedClipRect):
        (WebCore::ClipRects::setFixedClipRect):
        (WebCore::ClipRects::posClipRect):
        (WebCore::ClipRects::setPosClipRect):
        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::updateCompositedBounds):
        (WebCore::RenderLayerBacking::updateGraphicsLayerGeometry):
        (WebCore::RenderLayerBacking::paintIntoLayer):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::addToOverlapMap):
        (WebCore::RenderLayerCompositor::clippedByAncestor):
        * rendering/RenderTreeAsText.cpp:
        (WebCore::writeLayers):

2011-09-15  Julien Chaffraix  <jchaffraix@webkit.org>

        Crash in RenderBox::paintMaskImages due to a mask without an associated image
        https://bugs.webkit.org/show_bug.cgi?id=50151

        Reviewed by Simon Fraser.

        Test: fast/css/empty-webkit-mask-crash.html

        The crash stems from the fact that FillLayer::hasImage would walk over the linked list
        of FillLayers and return true if one had an image. This means that hasImage() is true
        does not mean that image() is non-NULL on all FillLayers.

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::paintMaskImages): Simplify the logic by doing the hasImage() check up-front
        and properly check image() for each FillLayers. This has the nice benefit of changing the complexity
        from O(n^2) to O(n), which was what the code expected anyway.

2011-09-15  Eric Seidel  <eric@webkit.org>

        Remove ENABLE(SVG_AS_IMAGE) since all major ports have it on by default
        https://bugs.webkit.org/show_bug.cgi?id=68182

        Reviewed by Adam Barth.

        * Configurations/FeatureDefines.xcconfig:
        * DerivedSources.make:
        * GNUmakefile.am:
        * features.pri:
        * loader/cache/CachedImage.cpp:
        (WebCore::CachedImage::createImage):

2011-09-15  Andy Estes  <aestes@apple.com>

        Having an empty listener to beforeload events changes the behavior of other scripts
        https://bugs.webkit.org/show_bug.cgi?id=45586

        Reviewed by Darin Adler.

        Test: fast/dom/beforeload/cached-image-before-load.html
        
        When loading a cached image after a beforeload handler has been
        installed on the document, ImageLoader would dispatch both the
        beforeload and load events asynchronously in such a way that caused
        load to fire first. Since a side effect of firing the beforeload event
        is to wire up the CachedImage to its associated RenderImage object,
        this work was not done by the time load fired, and scripts that queried
        renderer-dependent attributes of the image in an onload handler would
        get bogus values in return.

        Fix this by ensuring load fires after beforeload in the cached image case.

        * loader/ImageLoader.cpp:
        (WebCore::ImageLoader::updateFromElement): Call setClient() after
        dispatching beforeload, since setClient() will dispatch the load event
        if the image is cached.

2011-09-15  Anders Carlsson  <andersca@apple.com>

        Remove ScrollView::platformContentsSize
        https://bugs.webkit.org/show_bug.cgi?id=68188

        Reviewed by Darin Adler.

        Since ScrollView keeps track of the contents size in ScrollView::m_contentsSize, we never
        have to ask the underlying platform scroll view for contents size since it should always just
        be equal to m_contentsSize.

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::contentsSize):
        (WebCore::ScrollView::wheelEvent):
        * platform/ScrollView.h:
        * platform/mac/ScrollViewMac.mm:
        * platform/wx/ScrollViewWx.cpp:

2011-09-15  Jon Lee  <jonlee@apple.com>

        Submitting a form with target=_blank works only once
        https://bugs.webkit.org/show_bug.cgi?id=28633
        <rdar://problem/7357787>

        Reviewed by Andy Estes.

        Test: fast/forms/submit-to-blank-multiple-times.html

        The call to reset the multiple form submission bool is pushed down from the mouseDown handler to
        handleMousePressEvent(), to include WK2 coverage, similar to keyEvent.

        * page/EventHandler.cpp:
        (WebCore::EventHandler::handleMousePressEvent):
        (WebCore::EventHandler::keyEvent): clarified old FIXME comment. Both key events and mouse events
        may submit a form multiple times, but the call to reset the handler should probably be in another
        abstraction layer.
        * page/mac/EventHandlerMac.mm:
        (WebCore::EventHandler::mouseDown):

2011-09-15  Peter Rybin  <peter.rybin@gmail.com>

        XMLDocumentParserQt.cpp incorrectly converts 0-based number into 1-based number
        https://bugs.webkit.org/show_bug.cgi?id=63540

        ZeroBasedNumber/OneBasedNumber are used in more places, inconsistency
        in xml parser is fixed.

        Reviewed by Adam Barth.

        * bindings/js/ScriptController.cpp:
        (WebCore::ScriptController::eventHandlerLineNumber):
        * dom/ScriptableDocumentParser.h:
        * dom/StyleElement.cpp:
        (WebCore::StyleElement::StyleElement):
        * dom/ViewportArguments.cpp:
        (WebCore::parserLineNumber):
        * html/parser/HTMLDocumentParser.cpp:
        (WebCore::HTMLDocumentParser::lineNumber):
        * html/parser/HTMLDocumentParser.h:
        * inspector/InspectorResourceAgent.cpp:
        (WebCore::InspectorResourceAgent::buildInitiatorObject):
        * svg/SVGDocumentExtensions.cpp:
        (WebCore::parserLineNumber):
        * xml/parser/NewXMLDocumentParser.cpp:
        (WebCore::NewXMLDocumentParser::lineNumber):
        * xml/parser/NewXMLDocumentParser.h:
        * xml/parser/XMLDocumentParser.cpp:
        (WebCore::XMLDocumentParser::pushCurrentNode):
        * xml/parser/XMLDocumentParser.h:
        * xml/parser/XMLDocumentParserLibxml2.cpp:
        (WebCore::PendingCallbacks::appendErrorCallback):
        (WebCore::XMLDocumentParser::doWrite):
        (WebCore::XMLDocumentParser::startElementNs):
        (WebCore::XMLDocumentParser::error):
        (WebCore::XMLDocumentParser::lineNumber):
        (WebCore::XMLDocumentParser::columnNumber):
        (WebCore::XMLDocumentParser::textPosition):
        * xml/parser/XMLDocumentParserQt.cpp:
        (WebCore::XMLDocumentParser::doWrite):
        (WebCore::XMLDocumentParser::doEnd):
        (WebCore::XMLDocumentParser::lineNumber):
        (WebCore::XMLDocumentParser::columnNumber):
        (WebCore::XMLDocumentParser::textPosition):
        (WebCore::XMLDocumentParser::parse):
        (WebCore::XMLDocumentParser::parseStartElement):

2011-09-15  Peter Kasting  <pkasting@google.com>

        Fix WebCore.gypi after r95130.

        Unreviewed, build fix.

        * WebCore.gypi:

2011-09-15  Eric Seidel  <eric@webkit.org>

        Remove ENABLE_SVG_ANIMATION as all major ports have it on by default
        https://bugs.webkit.org/show_bug.cgi?id=68022

        Reviewed by Ryosuke Niwa.

        * Configurations/FeatureDefines.xcconfig:
        * DerivedSources.make:
        * GNUmakefile.am:
        * features.pri:
        * page/DOMWindow.idl:
        * svg/svgtags.in:

2011-09-15  Matthew Delaney  <mdelaney@apple.com>

        REGRESSION (Safari 5.1-r95043): Incorrect box-shadow offset
        https://bugs.webkit.org/show_bug.cgi?id=68041

        Reviewed by Dan Bernstein.

        Test: fast/box-shadow/no-blur-multiple-offsets.html

        * platform/graphics/cg/GraphicsContextCG.cpp:
        (WebCore::GraphicsContext::setPlatformShadow): Add hack back in for Lion if
        context is not accelerated.

2011-09-15  James Simonsen  <simonjam@chromium.org>

        Ref protect HTMLObjectElement and HTMLEmbedElement while requesting plugins
        https://bugs.webkit.org/show_bug.cgi?id=68014

        Reviewed by Adam Barth.

        Test: plugins/destroy-during-npp-new.html under valgrind
              plugins/destroy-during-npp-new-object-with-fallback-content.html under valgrind

        * html/HTMLEmbedElement.cpp:
        (WebCore::HTMLEmbedElement::updateWidget):
        * html/HTMLObjectElement.cpp:
        (WebCore::HTMLObjectElement::updateWidget):

2011-09-15  Sam Weinig  <sam@webkit.org>

        Experiment with removing ability to call a collection (except document.all)
        https://bugs.webkit.org/show_bug.cgi?id=67579

        Reviewed by Anders Carlsson.

        At the request of the public-script-coord mailing list (specifically Brendan Eich, see
        http://lists.w3.org/Archives/Public/public-script-coord/2011JulSep/0360.html), this
        patch removes the ability to call a collection (either a NodeList or HTMLCollection,
        but not an HTMLAllCollection) as function, a syntax that we adopted to emulate IE.
        It is being landed to find out if there are any sites relying on this behavior of WebKit,
        or, if it is only used in IE only paths.  If we find sites are breaking, it should be rolled
        out and we should inform the public-script-coord mailing list.

        * bindings/js/JSHTMLAllCollectionCustom.cpp:
        Update comment.

        * bindings/js/JSHTMLCollectionCustom.cpp:
        * bindings/js/JSNodeListCustom.cpp:
        Remove custom call code.

        * bindings/scripts/CodeGeneratorV8.pm:
        Add support for V8CustomCall.

        * dom/NodeList.idl:
        * html/HTMLCollection.idl:
        Remove CustomCall.

2011-09-15  Andreas Kling  <kling@webkit.org>

        CanvasRenderingContext2D::State copy ctor should use initializer list.
        https://bugs.webkit.org/show_bug.cgi?id=68152

        Reviewed by Darin Adler.

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::State::State):

2011-09-15  Andreas Kling  <kling@webkit.org>

        Don't bother calculating dirty rect for accelerated 2D canvases.
        https://bugs.webkit.org/show_bug.cgi?id=68158

        Reviewed by Kenneth Rohde Christiansen.

        For accelerated CanvasRenderingContext2D, didDraw() simply calls out
        to RenderLayer::contentChanged(). Move this to the top of didDraw()
        so we don't waste time calculating a precise dirty rect.

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::didDraw):

2011-09-15  Brian Salomon  <bsalomon@google.com>

        [Skia/Chrome] Cleanup unneeded code now that GrGLInterface is used to set GL ctx per GL call.
        https://bugs.webkit.org/show_bug.cgi?id=68096

        Reviewed by Stephen White.

        This change removes PlatformContextSkia::makeGrContextCurrent now that
        GrGLInterface is used to set the context on every Skia GL call.

        Tested by every canvas layout test.

        * platform/graphics/chromium/FontLinux.cpp:
        (WebCore::Font::drawGlyphs):
        * platform/graphics/skia/FontSkia.cpp:
        (WebCore::Font::drawGlyphs):
        * platform/graphics/skia/GraphicsContextSkia.cpp:
        (WebCore::GraphicsContext::clearRect):
        (WebCore::GraphicsContext::clip):
        (WebCore::GraphicsContext::drawConvexPolygon):
        (WebCore::GraphicsContext::drawEllipse):
        (WebCore::GraphicsContext::drawFocusRing):
        (WebCore::GraphicsContext::drawLine):
        (WebCore::GraphicsContext::drawLineForTextChecking):
        (WebCore::GraphicsContext::drawLineForText):
        (WebCore::GraphicsContext::drawRect):
        (WebCore::GraphicsContext::fillPath):
        (WebCore::GraphicsContext::fillRect):
        (WebCore::GraphicsContext::fillRoundedRect):
        (WebCore::GraphicsContext::strokeArc):
        (WebCore::GraphicsContext::strokePath):
        (WebCore::GraphicsContext::strokeRect):
        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::ImageBuffer::ImageBuffer):
        (WebCore::ImageBuffer::~ImageBuffer):
        (WebCore::ImageBuffer::copyImage):
        (WebCore::ImageBuffer::draw):
        (WebCore::ImageBuffer::drawPattern):
        (WebCore::ImageBuffer::getUnmultipliedImageData):
        (WebCore::ImageBuffer::getPremultipliedImageData):
        (WebCore::ImageBuffer::putUnmultipliedImageData):
        (WebCore::ImageBuffer::putPremultipliedImageData):
        (WebCore::ImageBuffer::toDataURL):
        * platform/graphics/skia/ImageSkia.cpp:
        (WebCore::BitmapImage::draw):
        (WebCore::BitmapImageSingleFrameSkia::draw):
        * platform/graphics/skia/PlatformContextSkia.cpp:
        (WebCore::PlatformContextSkia::clipPathAntiAliased):
        (WebCore::PlatformContextSkia::setGraphicsContext3D):
        * platform/graphics/skia/PlatformContextSkia.h:
        * platform/graphics/skia/SkiaFontWin.cpp:
        (WebCore::paintSkiaText):

2011-09-15  Peter Beverloo  <peter@chromium.org>

        [Chromium] Make sure that the ARM NEON files build with -marm
        https://bugs.webkit.org/show_bug.cgi?id=68088

        Simply adding the -marm cflag for OS=Android compiles results in it
        being overridden by an -mthumb cflag later in the project generating
        process. Therefore we should explicitly exclude -mthumb.

        Reviewed by Tony Gentilcore.

        * WebCore.gyp/WebCore.gyp:

2011-09-15  Keishi Hattori  <keishi@webkit.org>

        [chromium] Build fix: Remove use of GraphicsContext::setIsAcceleratedContext

        r95174 introduced GraphicsContext::setIsAcceleratedContext into Skia code and caused chromium builds to fail.

        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::ImageBuffer::ImageBuffer):

2011-09-15  Yuta Kitamura  <yutak@chromium.org>

        ThreadableWebSocketChannelClientWrapper shouldn't have a String in it.
        https://bugs.webkit.org/show_bug.cgi?id=67908

        Reviewed by David Levin.

        Replace a String member variable in ThreadableWebSocketChannelClientWrapper with Vector<UChar>.

        ThreadableWebSocketChannelClientWrapper is derived from ThreadSafeRefCounted. It may be
        destroyed on different threads, which will affect String's refcounting. Therefore, classes
        derived from ThreadSafeRefCounted must not have a String member variable.

        No change in functionality, thus no new tests. WebSocket worker tests
        (tests under http/tests/websocket/tests/{hixie76,hybi}/workers/) should keep passing.

        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
        Create a String from Vector<UChar>. Note that String constructor taking an empty vector returns
        a null string, not an empty string. We want an empty string in that case, so I had to add
        special-case handling for an empty vector.
        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
        Copy the content of the given String into Vector.
        * websockets/ThreadableWebSocketChannelClientWrapper.h:

2011-09-14  Matthew Delaney  <mdelaney@apple.com>

        Use isAcceleratedContext() on the GraphicsContext instead of flags in ImageBuffer
        https://bugs.webkit.org/show_bug.cgi?id=68137

        Reviewed by Simon Fraser.

        No new tests. No change in behavior.

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::isAccelerated): Have all just query the context directly.
        (WebCore::CanvasRenderingContext2D::fillAndDisplayTransparencyElsewhere): just use isAccelerated directly
        * platform/graphics/ImageBuffer.h:
        * platform/graphics/cg/ImageBufferCG.cpp:
        (WebCore::ImageBuffer::ImageBuffer): Set isAcceleratedContext on the GraphicsContext instead of carrying the
            bit around on the ImageBuffer itself.
        (WebCore::ImageBuffer::copyNativeImage): Update the check. Same for all below...
        (WebCore::ImageBuffer::drawPattern):
        (WebCore::ImageBuffer::getUnmultipliedImageData):
        (WebCore::ImageBuffer::getPremultipliedImageData):
        (WebCore::ImageBuffer::putUnmultipliedImageData):
        (WebCore::ImageBuffer::putPremultipliedImageData):
        * platform/graphics/skia/ImageBufferSkia.cpp: Set isAcceleratedContext on the GraphicsContext instead of carrying the
            bit around on the ImageBuffer itself.
        (WebCore::ImageBuffer::ImageBuffer): Remove m_acceleratesRendering flag and getter.

2011-09-14  Jeffrey Pfau  <jeffrey@endrift.com>

        libxml2 fragment parser loses prefix namespaces
        https://bugs.webkit.org/show_bug.cgi?id=66423

        This makes the loop over the elements outside of the context actually update the element it's processing.

        Reviewed by Eric Seidel.

        Test: fast/parser/innerhtml-with-prefixed-elements.xhtml

        * xml/parser/XMLDocumentParserLibxml2.cpp:
        (WebCore::XMLDocumentParser::XMLDocumentParser):

2011-09-14  Nate Chapin  <japhet@chromium.org>

        [V8] Null-check the v8::Context in 
        V8DOMWindowShell:namedItemAdded() before using it.
        Also, add some logging to figure out how we're getting
        into this bad state.
        https://bugs.webkit.org/show_bug.cgi?id=68099

        Reviewed by Adam Barth.

        No new tests, no known repro.

        * bindings/v8/V8DOMWindowShell.cpp:
        (WebCore::V8DOMWindowShell::namedItemAdded):

2011-09-14  Patrick Gansterer  <paroga@webkit.org>

        Replace ENABLE_XHR_RESPONSE_BLOB preprocessor statements in IDL files with Conditional attribute
        https://bugs.webkit.org/show_bug.cgi?id=64960

        Reviewed by Ryosuke Niwa.

        * xml/XMLHttpRequest.idl:

2011-09-14  Alexei Svitkine  <asvitkine@chromium.org>

        Chromium: Add a layer for rubber-band overhang painting to the hardware path.
        https://bugs.webkit.org/show_bug.cgi?id=66969

        Also, add layout tests for rubber-band overhang drawing for compositing path.

        Reviewed by James Robinson.

        * page/FrameView.cpp:
        (WebCore::FrameView::layerForOverhangAreas):
        * page/FrameView.h:
        * platform/ScrollView.cpp:
        (WebCore::ScrollView::scrollContents):
        (WebCore::ScrollView::wheelEvent):
        * platform/ScrollView.h:
        * platform/ScrollableArea.h:
        (WebCore::ScrollableArea::layerForOverhangAreas):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::frameViewDidChangeSize):
        (WebCore::RenderLayerCompositor::paintContents):
        (WebCore::RenderLayerCompositor::updateOverflowControlsLayers):
        (WebCore::RenderLayerCompositor::destroyRootLayer):
        * rendering/RenderLayerCompositor.h:
        (WebCore::RenderLayerCompositor::layerForOverhangAreas):

2011-09-14  Antoine Labour  <piman@chromium.org>

        Remove the dependency on GraphicsLayer from CCLayerTreeHost.
        Move root layer management into the NonCompositedContentHost.
        Have WebViewImpl create a NonCompositedContentHost explicitly.
        https://bugs.webkit.org/show_bug.cgi?id=67883

        Reviewed by James Robinson.

        Covered by compositing/ layout tests.

        * platform/graphics/chromium/NonCompositedContentHost.cpp:
        (WebCore::NonCompositedContentHost::setRootLayer):
        (WebCore::NonCompositedContentHost::setViewport):
        (WebCore::NonCompositedContentHost::setVisible):
        (WebCore::NonCompositedContentHost::clearRenderSurfacesRecursive):
        (WebCore::NonCompositedContentHost::invalidateRect):
        * platform/graphics/chromium/NonCompositedContentHost.h:
        (WebCore::NonCompositedContentHost::topLevelRootLayer):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::create):
        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::initialize):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::didRecreateGraphicsContext):
        (WebCore::CCLayerTreeHost::setViewport):
        (WebCore::CCLayerTreeHost::setVisible):
        (WebCore::CCLayerTreeHost::updateLayers):
        (WebCore::CCLayerTreeHost::paintLayerContents):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        (WebCore::CCLayerTreeHost::rootLayer):

2011-09-14  Henrik Grunell  <grunell@google.com>

        MediaStream API: Change PeerConnection constructor name to webkitPeerConnection
        https://bugs.webkit.org/show_bug.cgi?id=67843

        Reviewed by Tony Gentilcore.

        Tests for the MediaStream API will be provided by the bug 56587, pending enough landed code.

        * bindings/generic/RuntimeEnabledFeatures.h:
        (WebCore::RuntimeEnabledFeatures::webkitPeerConnectionEnabled):
        * page/DOMWindow.idl:

2011-09-14  John Bauman  <jbauman@chromium.org>

        Make sure to GC decoded images that are only used with WebGL
        https://bugs.webkit.org/show_bug.cgi?id=67899

        Reviewed by James Robinson.

        Tell CachedImage that the WebGL image was drawn so WebGL-only
        content will have decoded images collected.

        * platform/graphics/GraphicsContext3D.cpp:
        (WebCore::GraphicsContext3D::extractImageData):

2011-09-14  Antoine Labour  <piman@chromium.org>

        Added a pure virtual class CCLayerDelegate which helps to isolate
        the chromium compositor from the rest of WebCore, and aids unit
        testing by being easily mockable.  The compositor layers no longer
        directly see instances of GraphicsLayerChromium, instead they use
        this interface.
        https://bugs.webkit.org/show_bug.cgi?id=67750

        Reviewed by James Robinson.

        No new tests: changes already covered by existing compositing layout
        tests.

        * platform/graphics/chromium/CanvasLayerChromium.cpp:
        (WebCore::CanvasLayerChromium::CanvasLayerChromium):
        * platform/graphics/chromium/CanvasLayerChromium.h:
        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerPainter::create):
        (WebCore::ContentLayerPainter::paint):
        (WebCore::ContentLayerPainter::ContentLayerPainter):
        (WebCore::ContentLayerChromium::create):
        (WebCore::ContentLayerChromium::ContentLayerChromium):
        (WebCore::ContentLayerChromium::drawsContent):
        * platform/graphics/chromium/ContentLayerChromium.h:
        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
        (WebCore::GraphicsLayerChromium::getDrawsContent):
        (WebCore::GraphicsLayerChromium::getPreserves3D):
        (WebCore::GraphicsLayerChromium::paintingGoesToWindow):
        (WebCore::GraphicsLayerChromium::doPaintGraphicsLayerContents):
        (WebCore::GraphicsLayerChromium::notifySyncRequired):
        * platform/graphics/chromium/GraphicsLayerChromium.h:
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerChromium::create):
        (WebCore::ImageLayerChromium::ImageLayerChromium):
        * platform/graphics/chromium/ImageLayerChromium.h:
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::create):
        (WebCore::LayerChromium::LayerChromium):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::CCLayerDelegate::~CCLayerDelegate):
        (WebCore::LayerChromium::preserves3D):
        (WebCore::LayerChromium::setOwner):
        * platform/graphics/chromium/PluginLayerChromium.cpp:
        (WebCore::PluginLayerChromium::create):
        (WebCore::PluginLayerChromium::PluginLayerChromium):
        * platform/graphics/chromium/PluginLayerChromium.h:
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::TiledLayerChromium):
        * platform/graphics/chromium/TiledLayerChromium.h:
        * platform/graphics/chromium/VideoLayerChromium.cpp:
        (WebCore::VideoLayerChromium::create):
        (WebCore::VideoLayerChromium::VideoLayerChromium):
        (WebCore::VideoLayerChromium::updateCompositorResources):
        * platform/graphics/chromium/VideoLayerChromium.h:
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::create):
        (WebCore::WebGLLayerChromium::WebGLLayerChromium):
        * platform/graphics/chromium/WebGLLayerChromium.h:

2011-09-14  Anders Carlsson  <andersca@apple.com>

        Try to fix GTK+ build.
        
        * GNUmakefile.list.am:

2011-09-14  James Robinson  <jamesr@chromium.org>

        [chromium] LayerRendererChromium shouldn't be RefCounted
        https://bugs.webkit.org/show_bug.cgi?id=68121

        Reviewed by Kenneth Russell.

        LayerRendererChromium is owned exclusively by CCLayerTreeHostImpl, so there's no reason to have it be
        refcounted. Making it an OwnPtr<> makes the lifecycle for these objects much cleaner and reduces the chance of
        introducing accidental reference cycles.  This also removes the LayerRendererChromium pointers from CCLayerImpls
        since it only needed at draw time.

        Covered by compositing/ tests.

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::create):
        (WebCore::LayerRendererChromium::drawLayers):
        (WebCore::LayerRendererChromium::copyOffscreenTextureToDisplay):
        (WebCore::LayerRendererChromium::useRenderSurface):
        (WebCore::LayerRendererChromium::drawLayer):
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
        (WebCore::CCCanvasLayerImpl::draw):
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::CCLayerImpl):
        (WebCore::CCLayerImpl::draw):
        (WebCore::CCLayerImpl::bindContentsTexture):
        (WebCore::CCLayerImpl::drawDebugBorder):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
        (WebCore::CCPluginLayerImpl::draw):
        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::cleanupResources):
        (WebCore::CCRenderSurface::prepareContentsTexture):
        (WebCore::CCRenderSurface::draw):
        (WebCore::CCRenderSurface::drawLayer):
        (WebCore::CCRenderSurface::drawSurface):
        * platform/graphics/chromium/cc/CCRenderSurface.h:
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::bindContentsTexture):
        (WebCore::CCTiledLayerImpl::draw):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::draw):
        (WebCore::CCVideoLayerImpl::drawYUV):
        (WebCore::CCVideoLayerImpl::drawRGBA):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:

2011-09-14  Anders Carlsson  <andersca@apple.com>

        Get rid of WebCoreViewFactory and its WebViewFactory subclass
        https://bugs.webkit.org/show_bug.cgi?id=68124

        Reviewed by Sam Weinig.

        * WebCore.exp.in:
        * WebCore.xcodeproj/project.pbxproj:
        * editing/mac/FrameSelectionMac.mm:
        * page/mac/FrameMac.mm:
        * page/mac/WebCoreViewFactory.h: Removed.
        * page/mac/WebCoreViewFactory.m: Removed.

2011-09-14  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=52736

        Tiles were not being properly centered within border image sides for the "repeat"
        keyword. This patch fixes the buggy math behind the pattern tiling to actually get
        the initial phases correct.

        Reviewed by Sam Weinig.
        
        Added new tests in fast/borders and updated broken existing tests.

        * platform/graphics/Image.cpp:
        (WebCore::Image::drawTiled):

2011-09-14  Anders Carlsson  <andersca@apple.com>

        Remove DocTypeStrings.gperf
        https://bugs.webkit.org/show_bug.cgi?id=68119

        Reviewed by Sam Weinig.

        * CMakeLists.txt:
        * CodeGenerators.pri:
        * DerivedSources.make:
        * GNUmakefile.am:
        * WebCore.gyp/WebCore.gyp:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * html/DocTypeStrings.gperf: Removed.
        * make-hash-tools.pl:
        * platform/HashTools.h:

2011-09-14  Chris Rogers  <crogers@google.com>

        Address lifetime issues in OfflineAudioDestinationNode (take 2)
        https://bugs.webkit.org/show_bug.cgi?id=68111

        Reviewed by Kenneth Russell.

        No new tests.  This fixes existing layout tests.

        * webaudio/OfflineAudioDestinationNode.cpp:
        (WebCore::OfflineAudioDestinationNode::OfflineAudioDestinationNode):
        (WebCore::OfflineAudioDestinationNode::~OfflineAudioDestinationNode):
        (WebCore::OfflineAudioDestinationNode::startRendering):
        (WebCore::OfflineAudioDestinationNode::render):

2011-09-14  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68103
        
        Centered portions of border images don't render correctly. Make the tile scale factor have to be
        explicitly passed in and modify paintNinePieceImage to compute it for all sides. The attempts to
        implicitly compute the scale for the pattern based off the source and destination rects just don't
        work, since the center image rects don't provide the right information to be able to infer the
        scale factor.

        Reviewed by Sam Weinig.

        Reset all the existing fast/borders pixel results to Lion for these changes.

        * platform/graphics/GraphicsContext.cpp:
        (WebCore::GraphicsContext::drawTiledImage):
        * platform/graphics/GraphicsContext.h:
        * platform/graphics/Image.cpp:
        (WebCore::Image::drawTiled):
        * platform/graphics/Image.h:
        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::paintNinePieceImage):

2011-09-14  Anders Carlsson  <andersca@apple.com>

        Get rid of ResourceHandle::bufferedData()
        https://bugs.webkit.org/show_bug.cgi?id=68112

        Reviewed by David Hyatt.

        ResourceHandle::bufferedData() was only implemented on Mac, and the support in the underlying
        NSURLConnection class hasn't been there for several OS releases.

        * loader/ResourceLoader.cpp:
        (WebCore::ResourceLoader::resourceData):
        (WebCore::ResourceLoader::addData):
        * platform/network/ResourceHandle.h:
        * platform/network/cf/ResourceHandleCFNet.cpp:
        * platform/network/curl/ResourceHandleCurl.cpp:
        * platform/network/mac/ResourceHandleMac.mm:
        * platform/network/qt/ResourceHandleQt.cpp:
        * platform/network/soup/ResourceHandleSoup.cpp:
        * platform/network/win/ResourceHandleWin.cpp:

2011-09-14  Mark Hahnenberg  <mhahnenberg@apple.com>

        REGRESSION: r95108 broke Qt Linux tests
        https://bugs.webkit.org/show_bug.cgi?id=68104

        Reviewed by Csaba Osztrogonác.

        No new tests.

        Build fix for Qt tests broken in r95108.

        * bridge/qt/qt_runtime.cpp:
        (JSC::Bindings::QtRuntimeMethod::QtRuntimeMethod):
        (JSC::Bindings::QtRuntimeMetaMethod::QtRuntimeMetaMethod):
        (JSC::Bindings::QtRuntimeConnectionMethod::QtRuntimeConnectionMethod):
        * bridge/qt/qt_runtime.h:

2011-09-14  James Robinson  <jamesr@chromium.org>

        [skia] fast/canvas/setWidthResetAfterForcedRender is flaky
        https://bugs.webkit.org/show_bug.cgi?id=67955

        Reviewed by Stephen White.

        When destroying an ImageBuffer due to a canvas resize, we weren't clearing the texture ID on the layer,
        resulting in future compositor draw calls binding an invalid texture.  This results in the test failing and
        possibly drawing from a bad texture.

        Covered by fast/canvas/setWidthResetAfterForcedRender.html in the GPU configuration.

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::drawsContent)
        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::ImageBuffer::~ImageBuffer):

2011-09-14  Eric Seidel  <eric@webkit.org>

        Remove ENABLE_SVG_USE as <use> is required by HTML5
        https://bugs.webkit.org/show_bug.cgi?id=68019

        Reviewed by Ryosuke Niwa.

        I missed a couple uses of SVG_USE in my previous patch.

        * dom/DOMImplementation.cpp:
        (WebCore::isSVG10Feature):
        (WebCore::isSVG11Feature):
        * svg/SVGUseElement.cpp:
        (WebCore::SVGUseElement::associateInstancesWithShadowTreeElements):
        * svg/SVGUseElement.h:

2011-09-14  Mark Hahnenberg  <mhahnenberg@apple.com>

        Unzip initialization lists and constructors in JSCell hierarchy (6/7)
        https://bugs.webkit.org/show_bug.cgi?id=67692

        Reviewed by Geoffrey Garen.

        No new tests.

        Completed the sixth level of the refactoring to add finishCreation() 
        methods to all classes within the JSCell hierarchy with non-trivial 
        constructor bodies.

        This primarily consists of pushing the calls to finishCreation() down 
        into the constructors of the subclasses of the fifth level of the hierarchy 
        as well as pulling the finishCreation() calls out into the class's corresponding
        create() method if it has one.  Doing both simultaneously allows us to 
        maintain the invariant that the finishCreation() method chain is called exactly 
        once during the creation of an object, since calling it any other number of 
        times (0, 2, or more) will cause an assertion failure.

        * WebCore.exp.in:
        * bindings/js/JSDOMBinding.h:
        (WebCore::DOMConstructorObject::DOMConstructorObject):
        (WebCore::DOMConstructorWithDocument::DOMConstructorWithDocument):
        (WebCore::DOMConstructorWithDocument::finishCreation):
        * bindings/js/JSDOMGlobalObject.cpp:
        (WebCore::JSDOMGlobalObject::JSDOMGlobalObject):
        * bindings/js/JSDOMGlobalObject.h:
        * bindings/js/JSDOMWindowBase.cpp:
        (WebCore::JSDOMWindowBase::JSDOMWindowBase):
        (WebCore::JSDOMWindowBase::finishCreation):
        * bindings/js/JSDOMWindowBase.h:
        * bindings/js/JSWorkerContextBase.cpp:
        (WebCore::JSWorkerContextBase::JSWorkerContextBase):
        (WebCore::JSWorkerContextBase::finishCreation):
        * bindings/js/JSWorkerContextBase.h:
        * bindings/scripts/CodeGeneratorJS.pm:

        Added a finishCreation declaration and Moved the finishCreation call into the 
        create method for all classes except for subclasses of JSWorkerContextBase and 
        JSDOMWindowBase because those classes are on the next level, and it's easier 
        to do all of these classes in one fell swoop rather than level by level.
        (GenerateHeader):
        Added the implementation of the finishCreation method for the classes described above.
        (GenerateImplementation):
        Also added the finishCreation calls to the autogenerated DOM constructor classes.
        (GenerateConstructorDeclaration):
        (GenerateConstructorDefinition):

        * bindings/scripts/test/JS/JSTestInterface.cpp:
        (WebCore::JSTestInterfaceConstructor::create):
        (WebCore::JSTestInterfaceConstructor::JSTestInterfaceConstructor):
        (WebCore::JSTestInterfaceConstructor::finishCreation):
        (WebCore::JSTestInterface::JSTestInterface):
        (WebCore::JSTestInterface::finishCreation):
        * bindings/scripts/test/JS/JSTestInterface.h:
        (WebCore::JSTestInterface::create):
        (WebCore::JSTestInterfacePrototype::create):
        (WebCore::JSTestInterfacePrototype::JSTestInterfacePrototype):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        (WebCore::JSTestMediaQueryListListenerConstructor::create):
        (WebCore::JSTestMediaQueryListListenerConstructor::JSTestMediaQueryListListenerConstructor):
        (WebCore::JSTestMediaQueryListListenerConstructor::finishCreation):
        (WebCore::JSTestMediaQueryListListener::JSTestMediaQueryListListener):
        (WebCore::JSTestMediaQueryListListener::finishCreation):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
        (WebCore::JSTestMediaQueryListListener::create):
        (WebCore::JSTestMediaQueryListListenerPrototype::create):
        (WebCore::JSTestMediaQueryListListenerPrototype::JSTestMediaQueryListListenerPrototype):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::JSTestObjConstructor::create):
        (WebCore::JSTestObjConstructor::JSTestObjConstructor):
        (WebCore::JSTestObjConstructor::finishCreation):
        (WebCore::JSTestObj::JSTestObj):
        (WebCore::JSTestObj::finishCreation):
        * bindings/scripts/test/JS/JSTestObj.h:
        (WebCore::JSTestObj::create):
        (WebCore::JSTestObjPrototype::create):
        (WebCore::JSTestObjPrototype::JSTestObjPrototype):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::create):
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::JSTestSerializedScriptValueInterfaceConstructor):
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::finishCreation):
        (WebCore::JSTestSerializedScriptValueInterface::JSTestSerializedScriptValueInterface):
        (WebCore::JSTestSerializedScriptValueInterface::finishCreation):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
        (WebCore::JSTestSerializedScriptValueInterface::create):
        (WebCore::JSTestSerializedScriptValueInterfacePrototype::create):
        (WebCore::JSTestSerializedScriptValueInterfacePrototype::JSTestSerializedScriptValueInterfacePrototype):
        * bridge/c/CRuntimeObject.cpp:
        (JSC::Bindings::CRuntimeObject::CRuntimeObject):
        * bridge/c/CRuntimeObject.h:
        (JSC::Bindings::CRuntimeObject::create):
        * bridge/c/c_instance.cpp:
        (JSC::Bindings::CRuntimeMethod::CRuntimeMethod):
        (JSC::Bindings::CRuntimeMethod::finishCreation):
        * bridge/jni/jsc/JavaInstanceJSC.cpp:
        (JavaRuntimeMethod::JavaRuntimeMethod):
        (JavaRuntimeMethod::finishCreation):
        * bridge/jni/jsc/JavaRuntimeObject.cpp:
        (JSC::Bindings::JavaRuntimeObject::JavaRuntimeObject):
        * bridge/jni/jsc/JavaRuntimeObject.h:
        (JSC::Bindings::JavaRuntimeObject::create):
        * bridge/objc/ObjCRuntimeObject.h:
        (JSC::Bindings::ObjCRuntimeObject::create):
        * bridge/objc/ObjCRuntimeObject.mm:
        (JSC::Bindings::ObjCRuntimeObject::ObjCRuntimeObject):
        * bridge/objc/objc_instance.mm:
        (ObjCRuntimeMethod::ObjCRuntimeMethod):
        (ObjCRuntimeMethod::finishCreation):
        * bridge/qt/qt_instance.cpp:
        (JSC::Bindings::QtRuntimeObject::create):
        (JSC::Bindings::QtRuntimeObject::QtRuntimeObject):
        * bridge/qt/qt_pixmapruntime.cpp:
        (JSC::Bindings::QtPixmapRuntimeObject::create):
        (JSC::Bindings::QtPixmapRuntimeObject::QtPixmapRuntimeObject):
        * bridge/qt/qt_runtime.cpp:
        (JSC::Bindings::QtRuntimeMethod::QtRuntimeMethod):
        (JSC::Bindings::QtRuntimeMetaMethod::QtRuntimeMetaMethod):
        (JSC::Bindings::QtRuntimeMetaMethod::finishCreation):
        (JSC::Bindings::QtRuntimeConnectionMethod::QtRuntimeConnectionMethod):
        (JSC::Bindings::QtRuntimeConnectionMethod::finishCreation):
        * bridge/qt/qt_runtime.h:
        (JSC::Bindings::QtRuntimeMetaMethod::create):
        * bridge/runtime_method.cpp:
        (JSC::RuntimeMethod::RuntimeMethod):
        * bridge/runtime_method.h:
        (JSC::RuntimeMethod::create):

2011-09-13  Eric Seidel  <eric@webkit.org>

        Remove ENABLE_SVG_USE as <use> is required by HTML5
        https://bugs.webkit.org/show_bug.cgi?id=68019

        Reviewed by Ryosuke Niwa.

        * Configurations/FeatureDefines.xcconfig:
        * DerivedSources.make:
        * GNUmakefile.am:
        * features.pri:

2011-09-14  Eric Carlson  <eric.carlson@apple.com>

        MediaPlayerPrivateAVFoundationObjC's "periodic time observer" is unnecessary
        https://bugs.webkit.org/show_bug.cgi?id=68056

        MediaPlayerPrivateAVFoundationObjC creates a "periodic time observer" not because it wants
        periodic callbacks, but because a time observer also fires whenever a seek completes. This is 
        no longer necessary because it now uses but AVPlayerItem's 
        -seekToTime:toleranceBefore:toleranceAfter:completionHandler to seek, so seek completions are
        always notified.

        Reviewed by Darin Adler.

        No new tests, code removed is tested by existing tests.

        * platform/graphics/avfoundation/objc/MediaPlayerPrivateAVFoundationObjC.mm:
        (WebCore::MediaPlayerPrivateAVFoundationObjC::createAVPlayer):

2011-09-14  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68054
        Return an image scale factor as well as an Image* from CachedImage::brokenImage()

        Reviewed by Darin Adler.

        CachedImage::brokenImage() now returns a pair<Image*, float> where the float 
        represents the image's scale factor. This is important because currently, the 
        broken image will either be only 1x or 2x, but a deviceScaleFactor could 
        theoretically be something different (1.5, 3, etc). So it is not safe to assume 
        that the image's scale factor is equivalent to the deviceScaleFactor, and 
        hardcoding 2 for now is lame.
        * loader/cache/CachedImage.cpp:
        (WebCore::CachedImage::brokenImage):
        (WebCore::CachedImage::image):
        * loader/cache/CachedImage.h:
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::imageSizeForError):
        (WebCore::RenderImage::paintReplaced):

2011-09-14  James Robinson  <jamesr@chromium.org>

        [chromium] Move contents texture manager from LayerRendererChromium to CCLayerTreeHost
        https://bugs.webkit.org/show_bug.cgi?id=67440

        Reviewed by Kenneth Russell.

        This moves the contents TextureManager over to the CCLayerTreeHost, where it belongs, and adds in a commit path
        to make sure that textures are deleted even if the page is not visible.  This move also removed the need for
        LayerRendererChromium's CCLayerTreeHost pointer, so I removed that as well.  That meant moving the
        layerTreeAsText() logic over to the CCLayerImpl side, which is where it really belonged anyway.

        Covered by existing compositing/ tests and
        platform/chromium/compositor/lost-compositor-context-with-rendersurface.html

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::releaseRenderSurfaceTextures):
        (WebCore::LayerRendererChromium::drawLayers):
        (WebCore::LayerRendererChromium::initializeSharedObjects):
        (WebCore::LayerRendererChromium::cleanupSharedObjects):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore::LayerRendererChromium::setContentsTextureMemoryUseBytes):
        * platform/graphics/chromium/TextureManager.cpp:
        (WebCore::TextureManager::highLimitBytes):
        (WebCore::TextureManager::reclaimLimitBytes):
        (WebCore::TextureManager::lowLimitBytes):
        * platform/graphics/chromium/TextureManager.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::initialize):
        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::deleteContentsTextures):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::setVisible):
        (WebCore::CCLayerTreeHost::contentsTextureManager):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::setVisible):
        * platform/graphics/chromium/cc/CCProxy.h:
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::setNeedsCommit):
        (WebCore::CCSingleThreadProxy::stop):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::setNeedsCommit):
        (WebCore::CCThreadProxy::setNeedsCommitOnCCThread):
        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
        * platform/graphics/chromium/cc/CCThreadProxy.h:

2011-09-14  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68040
        
        Make sure border image sub-properties can be specified in any order.

        Reviewed by Beth Dakin.

        New tests in fast/borders.

        * css/CSSParser.cpp:
        (WebCore::BorderImageParseContext::BorderImageParseContext):
        (WebCore::BorderImageParseContext::canAdvance):
        (WebCore::BorderImageParseContext::setCanAdvance):
        (WebCore::BorderImageParseContext::allowCommit):
        (WebCore::BorderImageParseContext::allowImage):
        (WebCore::BorderImageParseContext::allowImageSlice):
        (WebCore::BorderImageParseContext::allowSlash):
        (WebCore::BorderImageParseContext::requireWidth):
        (WebCore::BorderImageParseContext::requireOutset):
        (WebCore::BorderImageParseContext::commitImage):
        (WebCore::BorderImageParseContext::commitImageSlice):
        (WebCore::BorderImageParseContext::commitSlash):
        (WebCore::BorderImageParseContext::commitBorderWidth):
        (WebCore::BorderImageParseContext::commitBorderOutset):
        (WebCore::BorderImageParseContext::commitRepeat):
        (WebCore::CSSParser::parseBorderImage):
        (WebCore::CSSParser::parseBorderImageRepeat):
        (WebCore::CSSParser::parseBorderImageSlice):
        (WebCore::CSSParser::parseBorderImageQuad):
        * css/CSSParserValues.h:
        (WebCore::CSSParserValueList::previous):

2011-09-14  Mike Reed  <reed@google.com>

        query SystemParametersInfo for GDI font smoothing settings
        https://bugs.webkit.org/show_bug.cgi?id=68080

        Reviewed by Stephen White.

        No new tests. fixes antialiasing issues based on User settings

        * platform/graphics/skia/SkiaFontWin.cpp:
        (WebCore::getDefaultGDITextFlags):
        (WebCore::setupPaintForFont):

2011-09-13  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68050
        
        Regressions in some layout tests from making border/mask/reflection nine-piece-image
        parsing match the spec, which allows any of the pieces to be omitted and to also be
        specifiable in any order.
        
        When the higher level code suddenly allowed the image slices to be omitted, the fixup
        for legacy compatibility for reflections and masks in the parseBorderImageSlice function
        no longer happened because that function no longer got called.
        
        The fix is to properly set the defaults to include the "fill" keyword, so the fixup is
        applied to the NinePieceImages you create before you ever map anything in from the rules.
        
        This also has the side effect of fixing -webkit-max-box-image-slice to actually dump as
        "0 fill" instead of just "0", which is the correct initial value for this property.

        Reviewed by Adam Roben.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseBorderImageSlice):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        * rendering/style/StyleRareNonInheritedData.cpp:
        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
        * rendering/style/StyleReflection.h:
        (WebCore::StyleReflection::StyleReflection):

2011-09-13  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: InspectorInstrumentation::frameDestroyed is called after m_page has been reset.
        https://bugs.webkit.org/show_bug.cgi?id=67997

        We should not instrument frameDestroyed event from within Frame's destructor
        since frame's m_page pointer is likely to be 0 by that time and appropriate
        instrumenting agent won't be found. As a result, stale frame with its id
        end up in the inspector.

        This change wipes out frame binding from the inspector upon detach rather
        than destroy.

        Reviewed by Tony Gentilcore.

        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::frameDetachedImpl):
        * inspector/InspectorInstrumentation.h:
        * inspector/InspectorPageAgent.cpp:
        (WebCore::InspectorPageAgent::frameDetached):
        * inspector/InspectorPageAgent.h:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::detachFromParent):
        * page/Frame.cpp:
        (WebCore::Frame::~Frame):
        (WebCore::Frame::detachFromPage):
        * page/Frame.h:

2011-09-14  Pavel Feldman  <pfeldman@google.com>

        Not reviewed: rolling out r95089.

        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::frameDestroyedImpl):
        (WebCore::InspectorInstrumentation::instrumentingAgentsForPage):
        * inspector/InspectorInstrumentation.h:
        (WebCore::InspectorInstrumentation::frameWindowDiscarded):
        (WebCore::InspectorInstrumentation::domContentLoadedEventFired):
        (WebCore::InspectorInstrumentation::loadEventFired):
        (WebCore::InspectorInstrumentation::didCommitLoad):
        (WebCore::InspectorInstrumentation::frameDestroyed):
        * inspector/InspectorPageAgent.cpp:
        (WebCore::InspectorPageAgent::frameDetached):
        (WebCore::InspectorPageAgent::frameDestroyed):
        * inspector/InspectorPageAgent.h:
        * page/Frame.cpp:
        (WebCore::Frame::~Frame):

2011-09-14  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: requestAnimationFrame callbacks don't show up in the timeline panel.
        https://bugs.webkit.org/show_bug.cgi?id=67986

        Reviewed by Pavel Feldman.

        Test: inspector/timeline/timeline-animation-frame.html

        * English.lproj/localizedStrings.js:
        * bindings/v8/V8Proxy.cpp:
        (WebCore::V8Proxy::callFunction):
        (WebCore::V8Proxy::callFunctionWithoutFrame):
        (WebCore::V8Proxy::instrumentedCallFunction):
        * bindings/v8/V8Proxy.h:
        * bindings/v8/custom/V8CustomVoidCallback.cpp:
        (WebCore::invokeCallback):
        * dom/ScriptedAnimationController.cpp:
        (WebCore::ScriptedAnimationController::registerCallback):
        (WebCore::ScriptedAnimationController::cancelCallback):
        (WebCore::ScriptedAnimationController::serviceScriptedAnimations):
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::didRegisterAnimationFrameCallbackImpl):
        (WebCore::InspectorInstrumentation::didCancelAnimationFrameCallbackImpl):
        (WebCore::InspectorInstrumentation::willFireAnimationFrameEventImpl):
        (WebCore::InspectorInstrumentation::didFireAnimationFrameEventImpl):
        * inspector/InspectorInstrumentation.h:
        (WebCore::InspectorInstrumentation::willCallFunction):
        (WebCore::InspectorInstrumentation::didRegisterAnimationFrameCallback):
        (WebCore::InspectorInstrumentation::didCancelAnimationFrameCallback):
        (WebCore::InspectorInstrumentation::willFireAnimationFrameEvent):
        (WebCore::InspectorInstrumentation::didFireAnimationFrameEvent):
        * inspector/InspectorTimelineAgent.cpp:
        (WebCore::InspectorTimelineAgent::didRegisterAnimationFrameCallback):
        (WebCore::InspectorTimelineAgent::didCancelAnimationFrameCallback):
        (WebCore::InspectorTimelineAgent::willFireAnimationFrameEvent):
        (WebCore::InspectorTimelineAgent::didFireAnimationFrameEvent):
        * inspector/InspectorTimelineAgent.h:
        * inspector/TimelineRecordFactory.cpp:
        (WebCore::TimelineRecordFactory::createAnimationFrameCallbackData):
        * inspector/TimelineRecordFactory.h:
        * inspector/front-end/TimelineAgent.js:
        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel):
        (WebInspector.TimelinePanel.prototype.get _recordStyles):
        (WebInspector.TimelinePanel.prototype._innerAddRecordToTimeline):
        (WebInspector.TimelinePanel.prototype._clearPanel):
        (WebInspector.TimelinePanel.FormattedRecord):
        (WebInspector.TimelinePanel.FormattedRecord.prototype._generatePopupContent):
        (WebInspector.TimelinePanel.FormattedRecord.prototype._getRecordDetails):

2011-09-13  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: InspectorInstrumentation::frameDestroyed is called after m_page has been reset.
        https://bugs.webkit.org/show_bug.cgi?id=67997

        We should not instrument frameDestroyed event from within Frame's destructor
        since frame's m_page pointer is likely to be 0 by that time and appropriate
        instrumenting agent won't be found. As a result, stale frame with its id
        end up in the inspector.

        This change wipes out frame binding from the inspector upon detach rather
        than destroy + adds an assertion into the inspector agents lookup with 0 page.

        Reviewed by Tony Gentilcore.

        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::frameDetachedImpl):
        (WebCore::InspectorInstrumentation::instrumentingAgentsForPage):
        * inspector/InspectorInstrumentation.h:
        (WebCore::InspectorInstrumentation::frameWindowDiscarded):
        (WebCore::InspectorInstrumentation::domContentLoadedEventFired):
        (WebCore::InspectorInstrumentation::loadEventFired):
        (WebCore::InspectorInstrumentation::frameDetached):
        (WebCore::InspectorInstrumentation::didCommitLoad):
        * inspector/InspectorPageAgent.cpp:
        (WebCore::InspectorPageAgent::frameDetached):
        * inspector/InspectorPageAgent.h:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::detachFromParent):
        * page/Frame.cpp:
        (WebCore::Frame::~Frame):
        (WebCore::Frame::detachFromPage):
        (WebCore::Frame::transferChildFrameToNewDocument):
        * page/Frame.h:

2011-09-14  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95080.
        http://trac.webkit.org/changeset/95080
        https://bugs.webkit.org/show_bug.cgi?id=68070

        It caused some 2d.composite.uncovered tests fail (Requested by
        rgabor on #webkit).

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::clearCanvas):
        (WebCore::CanvasRenderingContext2D::fillAndDisplayTransparencyElsewhere):

2011-09-13  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: [v8] building call frame info for location-less internal script function crashes.
        https://bugs.webkit.org/show_bug.cgi?id=67991

        Reviewed by Yury Semikhatsky.

        Test: inspector/debugger/debugger-pause-in-internal.html

        * bindings/v8/DebuggerScript.js:
        ():
        * bindings/v8/ScriptDebugServer.cpp:
        (WebCore::ScriptDebugServer::currentCallFrame):

2011-09-14  Ben Wells  <benwells@chromium.org>

        Large canvas fills should not crash or create unnecessarily large image buffers
        https://bugs.webkit.org/show_bug.cgi?id=67988

        When using source-in, destination-in, source-out, or destination-atop a temporary
        buffer is created. This buffer only needs to be big enough to cover the intersection
        of the path and the canvas.

        This change also adds some null checks for failures to create contexts or buffers.

        Reviewed by Stephen White.

        Test: fast/canvas/canvas-large-fills.html

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::clearCanvas):
        (WebCore::CanvasRenderingContext2D::fillAndDisplayTransparencyElsewhere):

2011-09-14  Kentaro Hara  <haraken@google.com>

        Implement a PageTransitionEvent constructor for JSC
        https://bugs.webkit.org/show_bug.cgi?id=68048

        Reviewed by Sam Weinig.

        The spec for the PageTransitionEvent constructor is here:
        http://www.whatwg.org/specs/web-apps/current-work/#pagetransitionevent

        Test: fast/events/constructors/page-transition-event-constructor.html

        * bindings/generic/EventConstructors.h: Added a definition for the PageTransitionEvent constructor.
        * bindings/js/JSEventConstructors.cpp: Added #includes for PageTransitionEvent.
        * dom/PageTransitionEvent.cpp:
        (WebCore::PageTransitionEventInit::PageTransitionEventInit):
        (WebCore::PageTransitionEvent::PageTransitionEvent):
        (WebCore::PageTransitionEvent::initPageTransitionEvent):
        * dom/PageTransitionEvent.h: Added a definition for PageTransitionEventInit.
        (WebCore::PageTransitionEvent::create):
        (WebCore::PageTransitionEvent::isPageTransitionEvent):
        (WebCore::PageTransitionEvent::persisted):
        * dom/PageTransitionEvent.idl: Makes PageTransitionEvent constructible.

2011-09-13  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95058.
        http://trac.webkit.org/changeset/95058
        https://bugs.webkit.org/show_bug.cgi?id=68058

        It made css3/calc/regression-62276.html crash (Requested by
        Ossy on #webkit).

        * css/CSSParser.cpp:
        (WebCore::BorderImageParseContext::BorderImageParseContext):
        (WebCore::BorderImageParseContext::allowBreak):
        (WebCore::BorderImageParseContext::allowWidth):
        (WebCore::BorderImageParseContext::allowOutset):
        (WebCore::BorderImageParseContext::allowRepeat):
        (WebCore::BorderImageParseContext::commitImage):
        (WebCore::BorderImageParseContext::commitImageSlice):
        (WebCore::BorderImageParseContext::commitSlash):
        (WebCore::BorderImageParseContext::commitBorderWidth):
        (WebCore::BorderImageParseContext::commitBorderOutset):
        (WebCore::BorderImageParseContext::commitRepeat):
        (WebCore::CSSParser::parseBorderImage):
        (WebCore::CSSParser::parseBorderImageRepeat):
        (WebCore::CSSParser::parseBorderImageSlice):
        (WebCore::CSSParser::parseBorderImageQuad):
        * css/CSSParserValues.h:

2011-09-13  Abhishek Arya  <inferno@chromium.org>

        Crash in RenderScrollbarPart::imageChanged.
        https://bugs.webkit.org/show_bug.cgi?id=68009

        Reviewed by Simon Fraser.

        When a custom scrollbar is removed from its FrameView, its destruction
        can be delayed because of RefPtr maintained in EventHandler class
        (m_lastScrollbarUnderMouse). Upon removal, we delete all the scrollbar
        parts so that they don't link back to scrollbar. However, because of the
        delay, we can have a call to updateScrollbarPart which recreates it.
        When scrollbar is getting destroyed, we just check to see if there are
        remaining scrollbar parts and if yes, we destroy them.

        Test: scrollbars/scrollbar-part-created-with-no-parent-crash.html

        * rendering/RenderScrollbar.cpp:
        (WebCore::RenderScrollbar::~RenderScrollbar):

2011-09-13  Adam Klein  <adamk@chromium.org>

        Fix cssText property of counter-valued CSSPrimitiveValue and avoid uninitialized read
        https://bugs.webkit.org/show_bug.cgi?id=68021

        Reviewed by Tony Chang.

        Reported by valgrind in http://crbug.com/60653.

        Besides fixing the uninitialized read, add support for outputting the
        list separator for counters() calls and the list-style name.

        Test: fast/css/counters/counter-cssText.html

        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::cssText):

2011-09-13  Kenichi Ishibashi  <bashi@chromium.org>

        WebFont followed tiny monospace text displays weird
        https://bugs.webkit.org/show_bug.cgi?id=67996

        Reviewed by Darin Adler.

        Always call wkSetCGFontRenderingMode() in Font::drawGlyphs() so that the rendering mode is set correctly.

        Test: platform/mac/fast/text/webfont-after-tiny-monospace-text.html

        * platform/graphics/mac/FontMac.mm:
        (WebCore::Font::drawGlyphs):

2011-09-13  Tom Sepez  <tsepez@chromium.org>

        Fix XSS auditor bypass when inline handlers contain comments.
        https://bugs.webkit.org/show_bug.cgi?id=27895

        Reviewed by Adam Barth.

        Tests: http/tests/security/xssAuditor/property-escape-comment.html
               http/tests/security/xssAuditor/property-escape-entity.html
               http/tests/security/xssAuditor/property-escape-quote.html

        * html/parser/XSSAuditor.cpp:
        (WebCore::XSSAuditor::snippetForAttribute):

2011-09-13  Kentaro Hara  <haraken@google.com>

        Implement a HashChangeEvent constructor for V8
        https://bugs.webkit.org/show_bug.cgi?id=67969

        Reviewed by Nate Chapin.

        Test: fast/events/constructors/hash-change-event-constructor.html

        * bindings/v8/custom/V8EventConstructors.cpp: Added the HashChangeEvent constructor.
        * dom/HashChangeEvent.idl: Added a 'V8CustomConstructor' attribute.

2011-09-13  Jeremy Apthorp  <jeremya@google.com>

        Fix crash when an iframe element is removed during a transition to
        fullscreen.
        https://bugs.webkit.org/show_bug.cgi?id=67960

        Reviewed by Adam Barth.

        Test: fullscreen/full-screen-remove-ancestor-during-transition.html

        * dom/Document.cpp:
        (WebCore::Document::~Document):
        Clear the list of elements to which we need to send a fullscreenchange
        event.

2011-09-13  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=68040
        
        Make sure border image sub-properties can be specified in any order.

        Reviewed by Beth Dakin.

        New tests in fast/borders.

        * css/CSSParser.cpp:
        (WebCore::BorderImageParseContext::BorderImageParseContext):
        (WebCore::BorderImageParseContext::canAdvance):
        (WebCore::BorderImageParseContext::setCanAdvance):
        (WebCore::BorderImageParseContext::allowCommit):
        (WebCore::BorderImageParseContext::allowImage):
        (WebCore::BorderImageParseContext::allowImageSlice):
        (WebCore::BorderImageParseContext::allowSlash):
        (WebCore::BorderImageParseContext::requireWidth):
        (WebCore::BorderImageParseContext::requireOutset):
        (WebCore::BorderImageParseContext::commitImage):
        (WebCore::BorderImageParseContext::commitImageSlice):
        (WebCore::BorderImageParseContext::commitSlash):
        (WebCore::BorderImageParseContext::commitBorderWidth):
        (WebCore::BorderImageParseContext::commitBorderOutset):
        (WebCore::BorderImageParseContext::commitRepeat):
        (WebCore::CSSParser::parseBorderImage):
        (WebCore::CSSParser::parseBorderImageRepeat):
        (WebCore::CSSParser::parseBorderImageSlice):
        (WebCore::CSSParser::parseBorderImageQuad):
        * css/CSSParserValues.h:
        (WebCore::CSSParserValueList::previous):

2011-09-13  Jeff Miller  <jeffm@apple.com>

        WebCore::Cursor::ensurePlatformCursor() should always set a valid platform cursor on Windows
        https://bugs.webkit.org/show_bug.cgi?id=68043
        
        Make sure we set a valid platform cursor in the Cursor::NoDrop case, and add a default
        clause that uses the arrow cursor in case another cursor type is added in the future
        and we forget to update ensurePlatformCursor().

        Reviewed by Anders Carlsson.

        * platform/win/CursorWin.cpp:
        (WebCore::Cursor::ensurePlatformCursor): Always set a valid platform cursor.

2011-09-12  Jon Honeycutt  <jhoneycutt@apple.com>

        MSAA: WebKit reports the document state as disabled
        https://bugs.webkit.org/show_bug.cgi?id=67974
        <rdar://problem/10095898>

        Reviewed by Brian Weinstein.

        Test: platform/win/accessibility/document-enabled-state.html

        * accessibility/AccessibilityScrollView.h:
        (WebCore::AccessibilityScrollView::isEnabled):
        This object backs the AccessibleDocument on Windows - always return
        true for its enabled state.

2011-08-11  Cris Neckar  <cdn@chromium.org>

        Fixes several bugs when adding CounterNodes to a tree which can cause asymetrical relationships.
        https://bugs.webkit.org/show_bug.cgi?id=65996

        Reviewed by Eric Seidel.

        Test: fast/css/counters/counter-reparent-table-children-crash.html

        * rendering/CounterNode.cpp:
        (WebCore::CounterNode::insertAfter):
        * rendering/RenderCounter.cpp:
        (WebCore::findPlaceForCounter):
        (WebCore::makeCounterNode):

2011-09-13  Beth Dakin  <bdakin@apple.com>

        Adding a comment I forgot to add before.

        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::imageSizeForError):

2011-09-13  Antti Koivisto  <antti@apple.com>

        Move identifier filter from CSSStyleSelector to SelectorChecker
        https://bugs.webkit.org/show_bug.cgi?id=68025

        Reviewed by Sam Weinig.

        This is a more logical place for this code. It also makes CSSStyleSelector slightly less bloated. 
        It will make it possible to use fastRejectSelector for querySelectorAll in the future.

        * css/CSSStyleSelector.cpp:
        (WebCore::loadViewSourceStyle):
        (WebCore::CSSStyleSelector::matchRulesForList):
        (WebCore::RuleData::RuleData):
        * css/CSSStyleSelector.h:
        (WebCore::CSSStyleSelector::pushParent):
        (WebCore::CSSStyleSelector::popParent):
        * css/SelectorChecker.cpp:
        (WebCore::collectElementIdentifierHashes):
        (WebCore::SelectorChecker::pushParentStackFrame):
        (WebCore::SelectorChecker::popParentStackFrame):
        (WebCore::SelectorChecker::pushParent):
        (WebCore::SelectorChecker::popParent):
        (WebCore::collectDescendantSelectorIdentifierHashes):
        (WebCore::SelectorChecker::collectIdentifierHashes):
        * css/SelectorChecker.h:
        (WebCore::SelectorChecker::parentStackIsConsistent):
        (WebCore::SelectorChecker::ParentStackFrame::ParentStackFrame):
        (WebCore::SelectorChecker::fastRejectSelector):

2011-09-13  Kiyoto Tamura  <owenestea@gmail.com>

        For compatibility, execCommand should support deprecated 'useCSS' alias for 'styleWithCSS'
        https://bugs.webkit.org/show_bug.cgi?id=36683

        Reviewed by Ryosuke Niwa.

        In addition to supporting the deprecated 'useCSS', 'styleWithCSS' now accepts any argument other than
        the boolean false or the case-insensitive string "false". This is per
        http://aryeh.name/spec/editing/editing.html#the-stylewithcss-command

        Tests: editing/execCommand/style-with-css.html
               editing/execCommand/use-css.html

        * editing/EditorCommand.cpp:
        (WebCore::executeStyleWithCSS):
        (WebCore::executeUseCSS):
        (WebCore::createCommandMap):

2011-09-13  Anders Carlsson  <andersca@apple.com>

        Disable C++ exceptions when building with clang
        https://bugs.webkit.org/show_bug.cgi?id=68031
        <rdar://problem/9556880>

        Reviewed by Mark Rowe.

        * Configurations/Base.xcconfig:

2011-09-13  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67885
        Outline for the high-resolution broken image icon draws at 2x
        -and corresponding-
        <rdar://problem/10104637>

        Reviewed by Dan Bernstein.

        Scaled the image size to account for the deviceScaleFactor. 
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::imageSizeForError):

2011-09-13  Tim Horton  <timothy_horton@apple.com>

        REGRESSION (64275): Shape pattern-image fill turns black
        https://bugs.webkit.org/show_bug.cgi?id=51061
        <rdar://problem/8504705>

        Reviewed by Simon Fraser.

        When destroying a resource, register clients who are losing their
        resource as having pending resources, so they can be resolved in the case a
        resource with that id is re-registered.

        Test: svg/custom/pending-resource-after-removal.xhtml

        * rendering/svg/SVGResourcesCache.cpp:
        (WebCore::SVGResourcesCache::resourceDestroyed):
        * svg/SVGStyledElement.h:
        (WebCore::toSVGStyledElement): Added.

2011-09-13  Eric Seidel  <eric@webkit.org>

        Remove ENABLE_SVG_FOREIGN_OBJECT as it is a required part of HTML5
        https://bugs.webkit.org/show_bug.cgi?id=68018

        Reviewed by Ryosuke Niwa.

        * Configurations/FeatureDefines.xcconfig:
        * DerivedSources.make:
        * GNUmakefile.am:
        * WebCore.exp.in:
        * dom/DOMImplementation.cpp:
        (WebCore::isSVG10Feature):
        (WebCore::isSVG11Feature):
        * dom/Text.cpp:
        (WebCore::Text::createRenderer):
        * features.pri:
        * page/DOMWindow.idl:
        * rendering/svg/RenderSVGForeignObject.cpp:
        * rendering/svg/RenderSVGForeignObject.h:
        * svg/SVGAnimateMotionElement.cpp:
        (WebCore::SVGAnimateMotionElement::hasValidAttributeType):
        * svg/SVGForeignObjectElement.cpp:
        * svg/SVGForeignObjectElement.h:
        * svg/SVGForeignObjectElement.idl:
        * svg/SVGLocatable.cpp:
        (WebCore::isViewportElement):
        * svg/SVGSVGElement.cpp:
        (WebCore::SVGSVGElement::isOutermostSVG):
        * svg/SVGUseElement.cpp:
        (WebCore::isDisallowedElement):
        (WebCore::SVGUseElement::associateInstancesWithShadowTreeElements):
        * svg/svgtags.in:

2011-09-13  Joseph Pecoraro  <joepeck@webkit.org>

        CRASH under WebCore::ArchiveResourceCollection::addAllResources loading WebArchive
        https://bugs.webkit.org/show_bug.cgi?id=67983

        Reviewed by Darin Adler.

        Null mimetypes are okay for subresources, but as previously discovered
        in bug 41082 they were required for main resources. Here we ensure
        that they are required for main resources, but we allow null mimetypes
        for subresources.

        To fix a crash for bad input we never add a null ArchiveResource to the
        Archive's subresource collection. It is useless and causes crashes whenever
        someone iterates the Archive's subresource collection.

        Test: webarchive/loading/test-loading-archive-subresource-null-mimetype.html

        * loader/archive/cf/LegacyWebArchive.cpp:
        (WebCore::LegacyWebArchive::createResource):
        Allow a null mimetype, just type check from the dictionary.

        (WebCore::LegacyWebArchive::extract):
        Require a mimetype for the main resource. Do not add null
        subresources to the subresource list.

2011-09-13  Mihai Parparita  <mihaip@chromium.org>

        [Chromium] Remove javascript_engine from WebCore.gyp
        https://bugs.webkit.org/show_bug.cgi?id=68001

        Reviewed by Tony Chang.

        Remove javascript_engine GYP variable (similar to the removal done on
        the Chromium side with http://crrev.com/100692)

        * WebCore.gyp/WebCore.gyp:

2011-09-12  Ryosuke Niwa  <rniwa@webkit.org>

        [CSS3 Backgrounds and Borders] Add unprefixed border-image shorthand.
        https://bugs.webkit.org/show_bug.cgi?id=67970

        Reviewed by David Hyatt.

        Also update CSSStyleSelector.cpp to support border-image to suppress assertion in
        fast/borders/border-image-omit-right-slice.html

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        (WebCore::CSSStyleSelector::mapNinePieceImage):

2011-09-13  Xianzhu Wang  <wangxianzhu@chromium.org>

        Reviewed by Darin Adler.

        Webkit wraps between hyphen-minus and numeric characters 
        https://bugs.webkit.org/show_bug.cgi?id=20677

        Disallow wrapping between a hyphen-minus and a digit if the hyphen-minus
        is not directly after a digit or a letter.

        Test: fast/text/line-breaks-after-hyphen-before-number.html

        * rendering/break_lines.cpp:
        (WebCore::asciiLineBreakTable): Disabled line-breaking after '-' and before '.', '0'-'9'. Note: the change for '0'-'9' doesn't really matter because the case is handled hard-coded in shouldBreakAfter().
        (WebCore::shouldBreakAfter): Changed line-breaking behavior after '-'.
        (WebCore::nextBreakablePosition): Passes lastLastCh to shouldBreakAfter. 

2011-09-13  Erik Wright  <erikwright@chromium.org>

        platform/graphics/gtk/FontGtk.cpp was renamed to platform/graphics/pango/FontPango.cpp . Reflect this change in WebCore.gypi to fix a Chromium build breakage.
        https://bugs.webkit.org/show_bug.cgi?id=68000

        Reviewed by Tony Gentilcore.

        No change in functionality, thus no new tests.

        * WebCore.gypi:

2011-09-10  Mikhail Naganov  <mnaganov@chromium.org>

        Web Inspector: Profiler: Fix overlapping data in function names column.
        https://bugs.webkit.org/show_bug.cgi?id=67896

        Reviewed by Pavel Feldman.

        * inspector/front-end/ProfileDataGridTree.js:
        (WebInspector.ProfileDataGridNode.prototype.createCell):
        * inspector/front-end/dataGrid.css:
        (.data-grid table.data):
        (.data-grid td):

2011-09-13  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r95025.
        http://trac.webkit.org/changeset/95025
        https://bugs.webkit.org/show_bug.cgi?id=68005

        Test failed on Snow Leopard bots. (Requested by yutak_home on
        #webkit).

        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
        * websockets/ThreadableWebSocketChannelClientWrapper.h:

2011-09-13  Yuta Kitamura  <yutak@chromium.org>

        ThreadableWebSocketChannelClientWrapper shouldn't have a String in it.
        https://bugs.webkit.org/show_bug.cgi?id=67908

        Reviewed by David Levin.

        Replace a String member variable in ThreadableWebSocketChannelClientWrapper with Vector<UChar>.

        No change in functionality, thus no new tests. WebSocket worker tests
        (tests under http/tests/websocket/tests/{hixie76,hybi}/workers/) should keep passing.

        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
        Create a String from Vector<UChar>.
        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
        Copy the content of the given String into Vector.
        * websockets/ThreadableWebSocketChannelClientWrapper.h:

2011-09-13  Fumitoshi Ukai  <ukai@chromium.org>

        Unreviewed, build fix.

        CSSPropertyBorderImage was added in r94989, but not yet added in
        WebCore::CSSStyleSelector::applyProperty

        CSSStyleSelector.cpp:2481: warning: enumeration value 'CSSPropertyBorderImage' not handled in switch

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):

2011-09-12  Shinya Kawanaka  <shinyak@google.com>

        Crashes in WebCore::InsertListCommand::unlistifyParagraph.
        https://bugs.webkit.org/show_bug.cgi?id=67918

        Reviewed by Ryosuke Niwa.

        execCommand("InsertUnorderedList") was crashing if the parent node of the target is
        a kind of list element and it is not contenteditable.
        This patch checks the parent node is contenteditable.

        Test: editing/execCommand/insert-list-in-noneditable-list-parent.html

        * editing/htmlediting.cpp:
        (WebCore::enclosingListChild): Checks the parent node is contenteditable.

2011-09-12  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94975.
        http://trac.webkit.org/changeset/94975
        https://bugs.webkit.org/show_bug.cgi?id=67984

        crash in PrerenderBrowserTest.PrerenderHTML5VideoJs (Requested
        by ukai on #webkit).

        * platform/graphics/chromium/CanvasLayerChromium.h:
        (WebCore::CanvasLayerChromium::layerTypeAsString):
        * platform/graphics/chromium/ContentLayerChromium.h:
        (WebCore::ContentLayerChromium::layerTypeAsString):
        * platform/graphics/chromium/ImageLayerChromium.h:
        (WebCore::ImageLayerChromium::layerTypeAsString):
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::layerTreeAsText):
        (WebCore::writeIndent):
        (WebCore::LayerChromium::dumpLayer):
        (WebCore::LayerChromium::dumpLayerProperties):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::layerTypeAsString):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::textureMemoryReclaimLimit):
        (WebCore::LayerRendererChromium::create):
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        (WebCore::LayerRendererChromium::close):
        (WebCore::LayerRendererChromium::releaseTextures):
        (WebCore::LayerRendererChromium::drawLayers):
        (WebCore::LayerRendererChromium::drawLayersInternal):
        (WebCore::LayerRendererChromium::getOffscreenLayerTexture):
        (WebCore::LayerRendererChromium::initializeSharedObjects):
        (WebCore::LayerRendererChromium::cleanupSharedObjects):
        (WebCore::LayerRendererChromium::layerTreeAsText):
        (WebCore::LayerRendererChromium::dumpRenderSurfaces):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore::LayerRendererChromium::owner):
        (WebCore::LayerRendererChromium::rootLayer):
        (WebCore::LayerRendererChromium::rootLayerImpl):
        (WebCore::LayerRendererChromium::viewportSize):
        (WebCore::LayerRendererChromium::contentsTextureManager):
        * platform/graphics/chromium/ManagedTexture.cpp:
        (WebCore::ManagedTexture::bindTexture):
        (WebCore::ManagedTexture::framebufferTexture2D):
        * platform/graphics/chromium/PluginLayerChromium.h:
        (WebCore::PluginLayerChromium::layerTypeAsString):
        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
        (WebCore::RenderSurfaceChromium::name):
        (WebCore::writeIndent):
        (WebCore::RenderSurfaceChromium::dumpSurface):
        * platform/graphics/chromium/RenderSurfaceChromium.h:
        * platform/graphics/chromium/TextureManager.cpp:
        (WebCore::TextureManager::deleteEvictedTextures):
        (WebCore::TextureManager::removeTexture):
        (WebCore::TextureManager::allocateTexture):
        (WebCore::TextureManager::requestTexture):
        * platform/graphics/chromium/TextureManager.h:
        (WebCore::TextureManager::setAssociatedContextDebugOnly):
        (WebCore::TextureManager::associatedContextDebugOnly):
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::writeIndent):
        (WebCore::TiledLayerChromium::dumpLayerProperties):
        * platform/graphics/chromium/TiledLayerChromium.h:
        * platform/graphics/chromium/VideoLayerChromium.h:
        (WebCore::VideoLayerChromium::layerTypeAsString):
        * platform/graphics/chromium/WebGLLayerChromium.h:
        (WebCore::WebGLLayerChromium::layerTypeAsString):
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::initialize):
        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::didRecreateGraphicsContext):
        (WebCore::CCLayerTreeHost::setVisible):
        (WebCore::CCLayerTreeHost::contentsTextureManager):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::drawLayers):
        (WebCore::CCLayerTreeHostImpl::setVisible):
        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
        * platform/graphics/chromium/cc/CCProxy.h:
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::initializeLayerRenderer):
        (WebCore::CCSingleThreadProxy::stop):
        (WebCore::CCSingleThreadProxy::contentsTextureManager):
        (WebCore::CCSingleThreadProxy::recreateContextIfNeeded):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::initializeLayerRenderer):
        (WebCore::CCThreadProxy::contentsTextureManager):
        (WebCore::CCThreadProxy::initializeLayerRendererOnCCThread):
        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
        * platform/graphics/chromium/cc/CCThreadProxy.h:
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::dumpLayerProperties):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:

2011-09-12  Joseph Pecoraro  <joepeck@webkit.org>

        Possible ASSERT(!storageTracker) in Lazily Initialized StorageTracker
        https://bugs.webkit.org/show_bug.cgi?id=67957

        Reviewed by Darin Adler.

        The storageTracker singleton may already have been created
        through StorageTracker::tracker before initializeTracker
        gets called. Update the ASSERT in this case to check that
        there is no client for the tracker.

        No test, this depends on how the port initializes the tracker.

        * storage/StorageTracker.cpp:
        (WebCore::StorageTracker::initializeTracker):

2011-09-12  Adam Klein  <adamk@chromium.org>

        Fix out-of-bounds access in Gradient::sortStopsIfNecessary
        https://bugs.webkit.org/show_bug.cgi?id=67958

        Reviewed by Darin Adler.

        Reported by Valgrind in http://crbug.com/77049.

        The errant code was added as an optimization in r67804.
        This patch reverts that one, as all parties agree that the optimization
        doesn't seem worthwhile, and there clearly aren't any tests covering
        the special case.

        No new tests, as existing tests should cover the remaining call to
        |std::stable_sort|.

        * platform/graphics/Gradient.cpp:
        (WebCore::Gradient::sortStopsIfNecessary):

2011-09-12  Jacky Jiang  <zhajiang@rim.com>

        Setting document.title doesn't affect contents of title tag of XHTML documents
        https://bugs.webkit.org/show_bug.cgi?id=57537

        Reviewed by Alexey Proskuryakov.

        Update the contents of the <title> tag of XHTML documents when setting
        document.title.

        Test: fast/dom/title-content-set-innerText-get.xhtml

        * dom/Document.cpp:
        (WebCore::Document::setTitle):

2011-09-12  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [EFL] Initialize m_unmodifiedText in PlatformKeyboardEventEfl.
        https://bugs.webkit.org/show_bug.cgi?id=67038

        Reviewed by Kenneth Rohde Christiansen.

        Since most of the time it will return the same thing as text(), we
        initialize it the same way we initialize m_text. The other case (what
        would have been generated if no modifiers were pressed) should be
        covered by this as well.

        As this method is used when handling access keys, tests such as
        fast/events/access-key-self-destruct.html should now pass.

        No new tests, as this fixes a problem uncovered by the existing ones.

        * platform/efl/PlatformKeyboardEventEfl.cpp:
        (WebCore::PlatformKeyboardEvent::PlatformKeyboardEvent):

2011-09-12  Hyowon Kim  <hw1008.kim@samsung.com>

        Reviewed by Eric Seidel.

        [EFL] Add GraphicsContext3DEfl for WebGL and accelerated compositing
        https://bugs.webkit.org/show_bug.cgi?id=62709

        Add GraphicsContext3D implementation for EFL port.
        GraphicsContext3D delegates to GraphicsContext3DInternal.

        * platform/graphics/efl/GraphicsContext3DEfl.cpp: Added.
        (WebCore::GraphicsContext3D::create):
        (WebCore::GraphicsContext3D::GraphicsContext3D):
        (WebCore::GraphicsContext3D::~GraphicsContext3D):
        (WebCore::GraphicsContext3D::platformGraphicsContext3D):
        (WebCore::GraphicsContext3D::platformLayer):
        (WebCore::GraphicsContext3D::makeContextCurrent):
        (WebCore::GraphicsContext3D::isGLES2Compliant):
        (WebCore::GraphicsContext3D::activeTexture):
        (WebCore::GraphicsContext3D::attachShader):
        (WebCore::GraphicsContext3D::bindAttribLocation):
        (WebCore::GraphicsContext3D::bindBuffer):
        (WebCore::GraphicsContext3D::bindFramebuffer):
        (WebCore::GraphicsContext3D::bindRenderbuffer):
        (WebCore::GraphicsContext3D::bindTexture):
        (WebCore::GraphicsContext3D::blendColor):
        (WebCore::GraphicsContext3D::blendEquation):
        (WebCore::GraphicsContext3D::blendEquationSeparate):
        (WebCore::GraphicsContext3D::blendFunc):
        (WebCore::GraphicsContext3D::blendFuncSeparate):
        (WebCore::GraphicsContext3D::bufferData):
        (WebCore::GraphicsContext3D::bufferSubData):
        (WebCore::GraphicsContext3D::checkFramebufferStatus):
        (WebCore::GraphicsContext3D::clear):
        (WebCore::GraphicsContext3D::clearColor):
        (WebCore::GraphicsContext3D::clearDepth):
        (WebCore::GraphicsContext3D::clearStencil):
        (WebCore::GraphicsContext3D::colorMask):
        (WebCore::GraphicsContext3D::compileShader):
        (WebCore::GraphicsContext3D::copyTexImage2D):
        (WebCore::GraphicsContext3D::copyTexSubImage2D):
        (WebCore::GraphicsContext3D::cullFace):
        (WebCore::GraphicsContext3D::depthFunc):
        (WebCore::GraphicsContext3D::depthMask):
        (WebCore::GraphicsContext3D::depthRange):
        (WebCore::GraphicsContext3D::detachShader):
        (WebCore::GraphicsContext3D::disable):
        (WebCore::GraphicsContext3D::disableVertexAttribArray):
        (WebCore::GraphicsContext3D::drawArrays):
        (WebCore::GraphicsContext3D::drawElements):
        (WebCore::GraphicsContext3D::enable):
        (WebCore::GraphicsContext3D::enableVertexAttribArray):
        (WebCore::GraphicsContext3D::finish):
        (WebCore::GraphicsContext3D::flush):
        (WebCore::GraphicsContext3D::framebufferRenderbuffer):
        (WebCore::GraphicsContext3D::framebufferTexture2D):
        (WebCore::GraphicsContext3D::frontFace):
        (WebCore::GraphicsContext3D::generateMipmap):
        (WebCore::GraphicsContext3D::getActiveAttrib):
        (WebCore::GraphicsContext3D::getActiveUniform):
        (WebCore::GraphicsContext3D::getAttachedShaders):
        (WebCore::GraphicsContext3D::getAttribLocation):
        (WebCore::GraphicsContext3D::getBooleanv):
        (WebCore::GraphicsContext3D::getBufferParameteriv):
        (WebCore::GraphicsContext3D::getContextAttributes):
        (WebCore::GraphicsContext3D::getError):
        (WebCore::GraphicsContext3D::getFloatv):
        (WebCore::GraphicsContext3D::getFramebufferAttachmentParameteriv):
        (WebCore::GraphicsContext3D::getIntegerv):
        (WebCore::GraphicsContext3D::getProgramiv):
        (WebCore::GraphicsContext3D::getProgramInfoLog):
        (WebCore::GraphicsContext3D::getRenderbufferParameteriv):
        (WebCore::GraphicsContext3D::getShaderiv):
        (WebCore::GraphicsContext3D::getShaderInfoLog):
        (WebCore::GraphicsContext3D::getShaderSource):
        (WebCore::GraphicsContext3D::getString):
        (WebCore::GraphicsContext3D::getTexParameterfv):
        (WebCore::GraphicsContext3D::getTexParameteriv):
        (WebCore::GraphicsContext3D::getUniformfv):
        (WebCore::GraphicsContext3D::getUniformiv):
        (WebCore::GraphicsContext3D::getUniformLocation):
        (WebCore::GraphicsContext3D::getVertexAttribfv):
        (WebCore::GraphicsContext3D::getVertexAttribiv):
        (WebCore::GraphicsContext3D::getVertexAttribOffset):
        (WebCore::GraphicsContext3D::hint):
        (WebCore::GraphicsContext3D::isBuffer):
        (WebCore::GraphicsContext3D::isEnabled):
        (WebCore::GraphicsContext3D::isFramebuffer):
        (WebCore::GraphicsContext3D::isProgram):
        (WebCore::GraphicsContext3D::isRenderbuffer):
        (WebCore::GraphicsContext3D::isShader):
        (WebCore::GraphicsContext3D::isTexture):
        (WebCore::GraphicsContext3D::lineWidth):
        (WebCore::GraphicsContext3D::linkProgram):
        (WebCore::GraphicsContext3D::pixelStorei):
        (WebCore::GraphicsContext3D::polygonOffset):
        (WebCore::GraphicsContext3D::readPixels):
        (WebCore::GraphicsContext3D::releaseShaderCompiler):
        (WebCore::GraphicsContext3D::renderbufferStorage):
        (WebCore::GraphicsContext3D::sampleCoverage):
        (WebCore::GraphicsContext3D::scissor):
        (WebCore::GraphicsContext3D::shaderSource):
        (WebCore::GraphicsContext3D::stencilFunc):
        (WebCore::GraphicsContext3D::stencilFuncSeparate):
        (WebCore::GraphicsContext3D::stencilMask):
        (WebCore::GraphicsContext3D::stencilMaskSeparate):
        (WebCore::GraphicsContext3D::stencilOp):
        (WebCore::GraphicsContext3D::stencilOpSeparate):
        (WebCore::GraphicsContext3D::texImage2D):
        (WebCore::GraphicsContext3D::texParameterf):
        (WebCore::GraphicsContext3D::texParameteri):
        (WebCore::GraphicsContext3D::texSubImage2D):
        (WebCore::GraphicsContext3D::uniform1f):
        (WebCore::GraphicsContext3D::uniform1fv):
        (WebCore::GraphicsContext3D::uniform1i):
        (WebCore::GraphicsContext3D::uniform1iv):
        (WebCore::GraphicsContext3D::uniform2f):
        (WebCore::GraphicsContext3D::uniform2fv):
        (WebCore::GraphicsContext3D::uniform2i):
        (WebCore::GraphicsContext3D::uniform2iv):
        (WebCore::GraphicsContext3D::uniform3f):
        (WebCore::GraphicsContext3D::uniform3fv):
        (WebCore::GraphicsContext3D::uniform3i):
        (WebCore::GraphicsContext3D::uniform3iv):
        (WebCore::GraphicsContext3D::uniform4f):
        (WebCore::GraphicsContext3D::uniform4fv):
        (WebCore::GraphicsContext3D::uniform4i):
        (WebCore::GraphicsContext3D::uniform4iv):
        (WebCore::GraphicsContext3D::uniformMatrix2fv):
        (WebCore::GraphicsContext3D::uniformMatrix3fv):
        (WebCore::GraphicsContext3D::uniformMatrix4fv):
        (WebCore::GraphicsContext3D::useProgram):
        (WebCore::GraphicsContext3D::validateProgram):
        (WebCore::GraphicsContext3D::vertexAttrib1f):
        (WebCore::GraphicsContext3D::vertexAttrib1fv):
        (WebCore::GraphicsContext3D::vertexAttrib2f):
        (WebCore::GraphicsContext3D::vertexAttrib2fv):
        (WebCore::GraphicsContext3D::vertexAttrib3f):
        (WebCore::GraphicsContext3D::vertexAttrib3fv):
        (WebCore::GraphicsContext3D::vertexAttrib4f):
        (WebCore::GraphicsContext3D::vertexAttrib4fv):
        (WebCore::GraphicsContext3D::vertexAttribPointer):
        (WebCore::GraphicsContext3D::viewport):
        (WebCore::GraphicsContext3D::reshape):
        (WebCore::GraphicsContext3D::markContextChanged):
        (WebCore::GraphicsContext3D::markLayerComposited):
        (WebCore::GraphicsContext3D::layerComposited):
        (WebCore::GraphicsContext3D::paintRenderingResultsToCanvas):
        (WebCore::GraphicsContext3D::paintRenderingResultsToImageData):
        (WebCore::GraphicsContext3D::createBuffer):
        (WebCore::GraphicsContext3D::createFramebuffer):
        (WebCore::GraphicsContext3D::createProgram):
        (WebCore::GraphicsContext3D::createRenderbuffer):
        (WebCore::GraphicsContext3D::createShader):
        (WebCore::GraphicsContext3D::createTexture):
        (WebCore::GraphicsContext3D::deleteBuffer):
        (WebCore::GraphicsContext3D::deleteFramebuffer):
        (WebCore::GraphicsContext3D::deleteProgram):
        (WebCore::GraphicsContext3D::deleteRenderbuffer):
        (WebCore::GraphicsContext3D::deleteShader):
        (WebCore::GraphicsContext3D::deleteTexture):
        (WebCore::GraphicsContext3D::synthesizeGLError):
        (WebCore::GraphicsContext3D::getExtensions):
        (WebCore::GraphicsContext3D::getInternalFramebufferSize):
        (WebCore::GraphicsContext3D::setContextLostCallback):
        (WebCore::GraphicsContext3D::getImageData):

2011-09-12  Hyowon Kim  <hw1008.kim@samsung.com>

        Reviewed by Eric Seidel.

        [CMAKE] Remove platform/graphics/opengl/*OpenGL.cpp files in CMakeLists.txt
        https://bugs.webkit.org/show_bug.cgi?id=62707

        No change in fuctionality so no new tests.

        Bug 62376 makes all ports use GraphicsContext3DOpenGL and
        Extensions3DOpenGL when enabling WebGL.
        However, some ports already have their own GC3D implementation.
        In QT and chromium, for example, GC3D delegates to GC3DInternal.
        So, it would be better to allow each port to decide whether or not
        to include files in platform/graphics/opengl. 

        * CMakeLists.txt:

2011-09-12  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/10054615> Floats in ruby text intrude into the base

        Reviewed by Darin Adler.

        Test: fast/ruby/float-overhang-from-ruby-text.html

        * rendering/RenderRubyText.cpp:
        (WebCore::RenderRubyText::avoidsFloats): Added. Returns true. This ensures that
        RenderBlock::clearFloats() will not consider ruby text as having intruding floats.
        * rendering/RenderRubyText.h:

2011-09-12  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67970

        Add unprefixed border-image property.

        Reviewed by Beth Dakin.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * css/CSSPropertyNames.in:

2011-09-12  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION: Moving up doesn't work in some cases
        https://bugs.webkit.org/show_bug.cgi?id=67522

        Reviewed by Eric Seidel.

        The bug was caused by previousLinePosition's attempting to obtain the last root line box using
        a position at minCaretOffset (which is, in practice, located at the beginning of wrapped lines).

        Fix the bug by calling maxCaretOffset instead. Because isCandidate returns false at (br, 1),
        use the positionBeforeNode for br elements.

        Test: editing/selection/move-up-into-wrapped-line.html

        * editing/visible_units.cpp:
        (WebCore::previousLinePosition):

2011-09-12  David Levin  <levin@chromium.org>

        Make the ThreadSafeRefCounted support in CrossThreadCopier work for T*.
        https://bugs.webkit.org/show_bug.cgi?id=67947

        Reviewed by Adam Barth.

        The changes are tested by compiling and added compile asserts to do some verification as well.

        * platform/CrossThreadCopier.cpp:
        Added some compile asserts to verify various match and non-matches for CrossThreadCopier.
        * platform/CrossThreadCopier.h:
        Added a typedef to convert T* to T, just like the typedef's to remove RefPtr and PassRefPtr.
        Added a compile assert to verify that only one of the typedef did anything.
        (CrossThreadCopierBase<false, true, T>::copy): Remove "get" as it is unnecessary.
        It shouldn't have been here (PassRefPtr and RefPtr easily and sometimes more efficiently
        convert to PassRefPtr without get). Also, a raw pointer doesn't have a get() method.

2011-09-12  Chris Rogers  <crogers@google.com>

        Address lifetime issues in OfflineAudioDestinationNode
        https://bugs.webkit.org/show_bug.cgi?id=67949

        Reviewed by Kenneth Russell.

        No new tests.  This does not change JavaScript API.

        * webaudio/OfflineAudioDestinationNode.cpp:
        (WebCore::OfflineAudioDestinationNode::~OfflineAudioDestinationNode):
        (WebCore::OfflineAudioDestinationNode::render):
        (WebCore::OfflineAudioDestinationNode::notifyCompleteDispatch):

2011-09-12  Jeff Timanus  <twiz@chromium.org>

        [chromium]  Prevent a crash when tearing down an ImageBuffer that was not successfully initialized.
        https://bugs.webkit.org/show_bug.cgi?id=67944

        Reviewed by Stephen White.
        
        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::ImageBuffer::~ImageBuffer):

2011-09-12  Michael Saboff  <msaboff@apple.com>

        Update RegExp and related classes to use 8 bit strings when available
        https://bugs.webkit.org/show_bug.cgi?id=67337

        Updated call to match to use UString& instead of UChar*.

        Reviewed by Gavin Barraclough.

        No new tests, Covered by existing tests.

        * platform/text/RegularExpression.cpp:
        (WebCore::RegularExpression::match):

2011-09-12  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67898
        REGRESSION(r94900): fast/images/support-broken-image-delegate.html fails on Mac

        Reviewed by Simon Fraser.

        New function willPaintBrokenImage() returns true when there has been an error 
        loading the image and the broken image icon will be used in its place. This is 
        necessary since it is possible to have an error loading an image and to NOT use 
        the broken image icon. 
        * loader/cache/CachedImage.cpp:
        (WebCore::CachedImage::willPaintBrokenImage):
        * loader/cache/CachedImage.h:
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::imageSizeForError):

2011-09-12  James Robinson  <jamesr@chromium.org>

        [chromium] Move contents texture manager from LayerRendererChromium to CCLayerTreeHost
        https://bugs.webkit.org/show_bug.cgi?id=67440

        Reviewed by Kenneth Russell.

        This moves the contents TextureManager over to the CCLayerTreeHost, where it belongs, and adds in a commit path
        to make sure that textures are deleted even if the page is not visible.  This move also removed the need for
        LayerRendererChromium's CCLayerTreeHost pointer, so I removed that as well.  That meant moving the
        layerTreeAsText() logic over to the CCLayerImpl side, which is where it really belonged anyway.

        Covered by existing compositing/ tests and
        platform/chromium/compositor/lost-compositor-context-with-rendersurface.html

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::releaseRenderSurfaceTextures):
        (WebCore::LayerRendererChromium::drawLayers):
        (WebCore::LayerRendererChromium::initializeSharedObjects):
        (WebCore::LayerRendererChromium::cleanupSharedObjects):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore::LayerRendererChromium::setContentsTextureMemoryUseBytes):
        * platform/graphics/chromium/TextureManager.cpp:
        (WebCore::TextureManager::highLimitBytes):
        (WebCore::TextureManager::reclaimLimitBytes):
        (WebCore::TextureManager::lowLimitBytes):
        * platform/graphics/chromium/TextureManager.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::initialize):
        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::deleteContentsTextures):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::setVisible):
        (WebCore::CCLayerTreeHost::contentsTextureManager):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::setVisible):
        * platform/graphics/chromium/cc/CCProxy.h:
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::setNeedsCommit):
        (WebCore::CCSingleThreadProxy::stop):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::setNeedsCommit):
        (WebCore::CCThreadProxy::setNeedsCommitOnCCThread):
        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
        * platform/graphics/chromium/cc/CCThreadProxy.h:

2011-09-12  Chris Rogers  <crogers@google.com>

        DelayNode delay buffer is not correctly wrapping around
        https://bugs.webkit.org/show_bug.cgi?id=67872

        Reviewed by Kenneth Russell.

        Test: webaudio/delaynode.html

        * webaudio/DelayDSPKernel.cpp:
        (WebCore::DelayDSPKernel::process):

2011-09-12  Arko Saha  <arko@motorola.com>

        Selectstart is not fired when selection was created by arrow keys.
        https://bugs.webkit.org/show_bug.cgi?id=60430

        Reviewed by Ryosuke Niwa.

        Fire selectstart when a user starts extending the selection using arrow key.
        Fixed by Arko Saha  <arko@motorola.com> and Kaustubh Atrawalkar  <kaustubh@motorola.com>

        Tests: fast/events/selectstart-by-arrow-keys-prevent-default.html
               fast/events/selectstart-by-arrow-keys.html

        * editing/FrameSelection.cpp:
        (WebCore::FrameSelection::modify):
        (WebCore::FrameSelection::shouldChangeSelection):
        (WebCore::FrameSelection::dispatchSelectStart):
        * editing/FrameSelection.h:

2011-09-12  James Robinson  <jamesr@chromium.org>

        [chromium] REGRESSION(94353): Compositor textures and resources leaked when tab closed that is not last tab in the process
        https://bugs.webkit.org/show_bug.cgi?id=67816

        Reviewed by Kenneth Russell.

        We lack infrastructure to construct an automated test for this today. To test manually, open up a composited
        page (like the poster circle), duplicate the tab many times, close all the duplicates, and verify that the
        memory use returns to the single tab level.

        * platform/graphics/chromium/LayerChromium.h:
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::setLayerTreeHost):
        * platform/graphics/chromium/VideoLayerChromium.cpp:
        (WebCore::VideoLayerChromium::setLayerTreeHost):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::clearRenderSurfacesRecursive):
        (WebCore::CCLayerTreeHost::setRootLayer):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:

2011-09-12  Kentaro Hara  <haraken@google.com>

        Implement a HashChangeEvent constructor for JSC
        https://bugs.webkit.org/show_bug.cgi?id=67924

        Reviewed by Sam Weinig.

        The spec for the HashChangeEvent constructor is here:
        http://www.whatwg.org/specs/web-apps/current-work/#hashchangeevent

        Test: fast/events/constructors/hash-change-event-constructor.html

        * bindings/generic/EventConstructors.h: Added a definition for the HashChangeEvent constructor.
        * bindings/js/JSEventConstructors.cpp: Added #includes for HashChangeEvent.
        * dom/HashChangeEvent.h: Added a definition for HashChangeEventInit.
        (WebCore::HashChangeEventInit::HashChangeEventInit):
        (WebCore::HashChangeEvent::create):
        (WebCore::HashChangeEvent::HashChangeEvent):
        * dom/HashChangeEvent.idl: Makes HashChangeEvent constructible.

2011-09-12  Mike Reed  <reed@google.com>

        [skia] remove dead code, no functionality change
        https://bugs.webkit.org/show_bug.cgi?id=67844

        Reviewed by Kenneth Russell.

        No new tests. just removing dead-code, existing tests apply

        * platform/graphics/chromium/FontChromiumWin.cpp:
        (WebCore::Font::drawGlyphs):

2011-09-12  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: Runtime.callFunctionOn does not accept arguments that evaluate to false.
        https://bugs.webkit.org/show_bug.cgi?id=67934

        Reviewed by Tony Gentilcore.

        * inspector/InjectedScriptSource.js:

2011-09-12  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: event dividers do not update timeline boundaries.
        https://bugs.webkit.org/show_bug.cgi?id=67932

        * inspector/front-end/NetworkPanel.js:
        (WebInspector.NetworkLogView.prototype._onLoadEventFired):
        (WebInspector.NetworkLogView.prototype._domContentLoadedEventFired):
        (WebInspector.NetworkLogView.prototype.refresh):
        (WebInspector.NetworkTimeCalculator.prototype.updateBoundariesForEventTime):

2011-09-12  Kentaro Hara  <haraken@google.com>

        Implement a WebKitAnimationEvent constructor for V8
        https://bugs.webkit.org/show_bug.cgi?id=67922

        Reviewed by Adam Barth.

        Test: fast/events/constructors/webkit-animation-event-constructor.html

        * bindings/v8/custom/V8EventConstructors.cpp: Added the WebKitAnimationEvent constructor.
        * dom/WebKitAnimationEvent.idl: Added a 'V8CustomConstructor' attribute.

2011-09-12  Andreas Kling  <kling@webkit.org>

        Shrink CanvasGradient for builds without ENABLE(DASHBOARD_SUPPORT).
        https://bugs.webkit.org/show_bug.cgi?id=67916

        Reviewed by Kenneth Rohde Christiansen.

        * html/canvas/CanvasGradient.cpp:
        (WebCore::CanvasGradient::CanvasGradient):
        (WebCore::CanvasGradient::addColorStop):
        * html/canvas/CanvasGradient.h:

2011-09-12  Shinya Kawanaka  <shinyak@google.com>

        Characters beyond U+10000 should be deleted by one pressing delete key.
        https://bugs.webkit.org/show_bug.cgi?id=40351

        Reviewed by Kent Tamura.

        If a character is the trail part of unicode surrogate pair, the lead part of it
        should also be deleted. Also, If in MacOSX, the deletion should honor Mac's behavior.

        Test: editing/deleting/delete-surrogatepair.html

        * rendering/RenderText.cpp:
        (WebCore::RenderText::previousOffsetForBackwardDeletion):
          Added if-macro to support chromium on mac, and added trail part check for unicode character.

2011-09-11  Kentaro Hara  <haraken@google.com>

        Implement a ProgressEvent constructor for V8
        https://bugs.webkit.org/show_bug.cgi?id=67800

        Reviewed by Sam Weinig.

        Test: fast/events/constructors/progress-event-constructor.html

        * bindings/js/JSDictionary.cpp:
        (WebCore::JSDictionary::convertValue): Replaced UnsignedLongLongMax with std::numeric_limits<unsigned long long>::max().
        * bindings/v8/OptionsObject.cpp:
        (WebCore::OptionsObject::getKeyValue): Returns an unsigned long long value corresponding to a given key. Spec: http://www.w3.org/TR/WebIDL/#es-unsigned-long-long
        * bindings/v8/OptionsObject.h:
        * bindings/v8/custom/V8EventConstructors.cpp: Added the ProgressEvent constructor.
        * dom/ProgressEvent.idl: Added a 'V8CustomConstructor' attribute.

2011-09-11  Dimitri Glazkov  <dglazkov@chromium.org>

        REGRESSION (r87351): toggling display of lots (thousands) of elements with display:none is very slow
        https://bugs.webkit.org/show_bug.cgi?id=67581

        Reviewed by Darin Adler.

        Test: perf/show-hide-table-rows.html

        * dom/NodeRenderingContext.cpp:
        (WebCore::NodeRendererFactory::createRendererAndStyle): Moved style-creating code into createRendererIfNeeded, renamed
            to createRenderer.
        (WebCore::NodeRendererFactory::createRendererIfNeeded): Re-arrange code to avoid unnecessary creation of renderers.

2011-09-11  Jeremy Moskovich  <jeremy@chromium.org>

        [Chromium] Change OOP Font loading code to use CGFont*() APIs.
        https://bugs.webkit.org/show_bug.cgi?id=66935

        This change is necessary due a bug in ATSFontDeactivate() on 10.7.
        See crbug.com/93191 for details.

        Reviewed by Eric Seidel.

        No new tests - covered by existing tests.

        * platform/chromium/PlatformBridge.h:
        * platform/graphics/chromium/CrossProcessFontLoading.h:
        * platform/graphics/chromium/CrossProcessFontLoading.mm:
        (WebCore::MemoryActivatedFont::create):
        (WebCore::MemoryActivatedFont::MemoryActivatedFont):
        (WebCore::MemoryActivatedFont::~MemoryActivatedFont):

2011-09-09  Oliver Hunt  <oliver@apple.com>

        Remove support for anonymous storage from jsobjects
        https://bugs.webkit.org/show_bug.cgi?id=67881

        Reviewed by Sam Weinig.

        Remove all use of anonymous slots, this required modifying
        bindings generation to add member variables for cached attributes,
        and override visitChildren with the necessary logic to mark those
        new members.

        I added bindings generation tests for these values.

        * bindings/js/JSAudioConstructor.h:
        (WebCore::JSAudioConstructor::createStructure):
        * bindings/js/JSDOMBinding.h:
        (WebCore::DOMConstructorObject::createStructure):
        * bindings/js/JSDOMGlobalObject.h:
        (WebCore::JSDOMGlobalObject::createStructure):
        * bindings/js/JSDOMWindowBase.h:
        (WebCore::JSDOMWindowBase::createStructure):
        * bindings/js/JSDOMWindowShell.h:
        (WebCore::JSDOMWindowShell::createStructure):
        * bindings/js/JSDOMWrapper.h:
        (WebCore::JSDOMWrapper::createStructure):
        * bindings/js/JSImageConstructor.h:
        (WebCore::JSImageConstructor::createStructure):
        * bindings/js/JSMessageEventCustom.cpp:
        (WebCore::JSMessageEvent::data):
        (WebCore::JSMessageEvent::initMessageEvent):
        * bindings/js/JSOptionConstructor.h:
        (WebCore::JSOptionConstructor::createStructure):
        * bindings/js/JSWorkerContextBase.h:
        (WebCore::JSWorkerContextBase::createStructure):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        (GenerateImplementation):
        (GenerateConstructorDeclaration):
        * bindings/scripts/test/JS/JSTestInterface.cpp:
        (WebCore::JSTestInterfaceConstructor::createStructure):
        * bindings/scripts/test/JS/JSTestInterface.h:
        (WebCore::JSTestInterface::createStructure):
        (WebCore::JSTestInterfacePrototype::createStructure):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        (WebCore::JSTestMediaQueryListListenerConstructor::createStructure):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
        (WebCore::JSTestMediaQueryListListener::createStructure):
        (WebCore::JSTestMediaQueryListListenerPrototype::createStructure):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::JSTestObjConstructor::createStructure):
        (WebCore::jsTestObjCachedAttribute1):
        (WebCore::jsTestObjCachedAttribute2):
        (WebCore::JSTestObj::visitChildren):
        * bindings/scripts/test/JS/JSTestObj.h:
        (WebCore::JSTestObj::createStructure):
        (WebCore::JSTestObjPrototype::createStructure):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::createStructure):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
        (WebCore::JSTestSerializedScriptValueInterface::createStructure):
        (WebCore::JSTestSerializedScriptValueInterfacePrototype::createStructure):
        * bindings/scripts/test/TestObj.idl:
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::TestObjInternal::cachedAttribute1AttrGetter):
        (WebCore::TestObjInternal::cachedAttribute2AttrGetter):
        * bridge/c/CRuntimeObject.h:
        (JSC::Bindings::CRuntimeObject::createStructure):
        * bridge/c/c_instance.cpp:
        (JSC::Bindings::CRuntimeMethod::createStructure):
        * bridge/jni/jsc/JavaInstanceJSC.cpp:
        (JavaRuntimeMethod::createStructure):
        * bridge/jni/jsc/JavaRuntimeObject.h:
        (JSC::Bindings::JavaRuntimeObject::createStructure):
        * bridge/objc/ObjCRuntimeObject.h:
        (JSC::Bindings::ObjCRuntimeObject::createStructure):
        * bridge/objc/objc_instance.mm:
        (ObjCRuntimeMethod::createStructure):
        * bridge/objc/objc_runtime.h:
        (JSC::Bindings::ObjcFallbackObjectImp::createStructure):
        * bridge/runtime_array.h:
        (JSC::RuntimeArray::createStructure):
        * bridge/runtime_method.h:
        (JSC::RuntimeMethod::createStructure):
        * bridge/runtime_object.h:
        (JSC::Bindings::RuntimeObject::createStructure):

2011-09-01  Filip Pizlo  <fpizlo@apple.com>

        The executable allocator makes it difficult to free individual
        chunks of executable memory
        https://bugs.webkit.org/show_bug.cgi?id=66363

        Reviewed by Oliver Hunt.
        
        Introduced a best-fit, balanced-tree based allocator. The allocator
        required a balanced tree that does not allocate memory and that
        permits the removal of individual nodes directly (as opposed to by
        key); neither AVLTree nor WebCore's PODRedBlackTree supported this.
        Changed all references to executable code to use a reference counted
        handle.

        No new layout tests because behavior is not changed.  New API unit
        tests:
        Tests/WTF/RedBlackTree.cpp
        Tests/WTF/MetaAllocator.cpp

        * ForwardingHeaders/wtf/MetaAllocatorHandle.h: Added.

2011-09-10  Sam Weinig  <sam@webkit.org>

        Add isInterruptedExecutionException and isTerminatedExecutionException predicates
        https://bugs.webkit.org/show_bug.cgi?id=67892

        Reviewed by Andy "First Time Reviewer" Estes.

        * bindings/js/JSDOMBinding.cpp:
        (WebCore::reportException):
        * bindings/js/JSEventListener.cpp:
        (WebCore::JSEventListener::handleEvent):
        * bindings/js/WorkerScriptController.cpp:
        (WebCore::WorkerScriptController::evaluate):
        Use the new predicates instead of probing the ClassInfo directly.

2011-09-10  Kevin Ollivier  <kevino@theolliviers.com>

        [wx] Unreviewed build fix. MSW build fixes.

        * config.h:

2011-09-09  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67861
        
        Implement border-image-outset (and the mask equivalents).

        Reviewed by Beth Dakin.

        Added new tests in fast/borders and fast/reflections.

        * css/CSSBorderImageValue.cpp:
        (WebCore::CSSBorderImageValue::CSSBorderImageValue):
        (WebCore::CSSBorderImageValue::cssText):
        * css/CSSBorderImageValue.h:
        (WebCore::CSSBorderImageValue::create):
        Add m_outset field to CSSBorderImageValue and teach it how to dump the field as
        part of cssText().

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::valueForNinePieceImageQuad):
        (WebCore::valueForNinePieceImage):
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        Add support for border-image-outset and -webkit-mask-box-image-outset. Refactor
        the code so that border-image-width and border-image-outset use a common
        function.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::BorderImageParseContext::BorderImageParseContext):
        (WebCore::BorderImageParseContext::allowOutset):
        (WebCore::BorderImageParseContext::commitSlash):
        (WebCore::BorderImageParseContext::commitBorderWidth):
        (WebCore::BorderImageParseContext::commitBorderOutset):
        (WebCore::BorderImageParseContext::commitRepeat):
        (WebCore::BorderImageParseContext::commitBorderImage):
        (WebCore::CSSParser::parseBorderImage):
        Teach the border image parsing code about outsets. This code will soon be
        replaced by true shorthand parsing code, but for now keep it working and add
        outset support to it.

        (WebCore::BorderImageQuadParseContext::BorderImageQuadParseContext):
        (WebCore::BorderImageQuadParseContext::commitBorderImageQuad):
        (WebCore::CSSParser::parseBorderImageQuad):
        (WebCore::CSSParser::parseBorderImageWidth):
        (WebCore::CSSParser::parseBorderImageOutset):
        * css/CSSParser.h:
        Refactor the border-image-width code so that it can be shared by border-image-outset, since
        they are extremely similar.

        * css/CSSPropertyNames.in:
        Add the new properties.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        (WebCore::CSSStyleSelector::mapNinePieceImage):
        (WebCore::CSSStyleSelector::mapNinePieceImageQuad):
        (WebCore::CSSStyleSelector::loadPendingImages):
        * css/CSSStyleSelector.h:
        Refactor the code so that width/outset share common mapping functions. Add support for outset.

        * rendering/InlineFlowBox.cpp:
        (WebCore::InlineFlowBox::addToLine):
        (WebCore::InlineFlowBox::addBoxShadowVisualOverflow):
        (WebCore::InlineFlowBox::addBorderOutsetVisualOverflow):
        (WebCore::InlineFlowBox::computeOverflow):
        Add new functions for computing the visual overflow caused by border outsets. Fix bugs in
        the shadow overflow code as well.

        (WebCore::clipRectForNinePieceImageStrip):
        (WebCore::InlineFlowBox::paintBoxDecorations):
        (WebCore::InlineFlowBox::paintMask):
        * rendering/InlineFlowBox.h:
        Make sure the clip rect pushed when painting one piece of a split inline strip is expanded to
        include the border and mask outsets. Always include the block direction expansion, and conditionally
        include the inline direction expansion based off includeLogicalLeftEdge()/includeLogicalRightEdge().
        clipRectForNinePieceImageStrip is a common function shared by masks and border images that does this
        work.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::computeOverflow):
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::maskClipRect):
        (WebCore::RenderBox::addBoxShadowAndBorderOverflow):
        * rendering/RenderBox.h:
        Rename addShadowOverflow to addBoxShadowAndBorderOverflow. Have it compute both shadow and border image
        outset overflow. Fix bugs with shadow overflow computation.

        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::paintNinePieceImage):
        Change painting to apply the outsets to inflate the border image drawing area.

        * rendering/RenderEmbeddedObject.cpp:
        (WebCore::RenderEmbeddedObject::layout):
        * rendering/RenderIFrame.cpp:
        (WebCore::RenderIFrame::layout):
        Patched to call the renamed addBoxShadowAndBorderOverflow function instead of addShadowOverflow.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::calculateRects):
        Patched to no longer apply box-shadow to overflow clip areas when inflating the intersection area for the
        layer bounds. Instead we generically apply all visual overflow so that border image outsets will also be
        included. This fixes https://bugs.webkit.org/show_bug.cgi?id=37467.

        * rendering/RenderReplaced.cpp:
        (WebCore::RenderReplaced::layout):
        Patched to call the renamed addBoxShadowAndBorderOverflow function instead of addShadowOverflow.

        * rendering/style/NinePieceImage.cpp:
        (WebCore::NinePieceImage::operator==):
        * rendering/style/NinePieceImage.h:
        (WebCore::NinePieceImage::NinePieceImage):
        (WebCore::NinePieceImage::outset):
        (WebCore::NinePieceImage::setOutset):
        (WebCore::NinePieceImage::computeOutset):
        (WebCore::NinePieceImage::copyOutsetFrom):
        Add the outset field to NinePieceImage along with some helpers for manipulating outsets.

        * rendering/style/RenderStyle.cpp:
        (WebCore::RenderStyle::getImageOutsets):
        (WebCore::RenderStyle::getImageHorizontalOutsets):
        (WebCore::RenderStyle::getImageVerticalOutsets):
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::hasBorderImageOutsets):
        (WebCore::InheritedFlags::getBorderImageOutsets):
        (WebCore::InheritedFlags::getBorderImageHorizontalOutsets):
        (WebCore::InheritedFlags::getBorderImageVerticalOutsets):
        (WebCore::InheritedFlags::getBorderImageInlineDirectionOutsets):
        (WebCore::InheritedFlags::getBorderImageBlockDirectionOutsets):
        (WebCore::InheritedFlags::getImageInlineDirectionOutsets):
        (WebCore::InheritedFlags::getImageBlockDirectionOutsets):
        Helpers for outset computation used by painting and overflow functions.

2011-09-10  Dan Bernstein  <mitz@apple.com>

        Actually prevent unnecessary casts to MediaControls*.

        Reviewed by Oliver Hunt.

        * html/shadow/MediaControls.h:

2011-09-10  Ryosuke Niwa  <rniwa@webkit.org>

        Remove printf added by r94900.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::drawPlatformResizerImage):

2011-09-09  Chris Marrin  <cmarrin@apple.com>

        requestAnimationFrame doesn't throttle on Mac
        https://bugs.webkit.org/show_bug.cgi?id=67171

        Reviewed by Simon Fraser.

        Changed requestAnimationFrame to use a Timer in ScriptedAnimationController
        on Mac, rather than runLoopObservers. The Timer is throttled to fire no
        faster than every 15ms. It is behind a WTF_USE_REQUEST_ANIMATION_FRAME_TIMER
        flag and can be used by any implementation, but currently it is only enabled
        by PLATFORM(MAC).

        * dom/ScriptedAnimationController.cpp:
        (WebCore::ScriptedAnimationController::ScriptedAnimationController):
        (WebCore::ScriptedAnimationController::resume):
        (WebCore::ScriptedAnimationController::registerCallback):
        (WebCore::ScriptedAnimationController::serviceScriptedAnimations):
        (WebCore::ScriptedAnimationController::scheduleAnimation):
        (WebCore::ScriptedAnimationController::animationTimerFired):
        * dom/ScriptedAnimationController.h:
        * loader/EmptyClients.h:
        * page/Chrome.cpp:
        (WebCore::Chrome::scheduleAnimation):
        * page/ChromeClient.h:

2011-09-10  Jarred Nicholls  <jarred@sencha.com>

        [Qt] QWebSettings::setUserStyleSheetUrl() does not work with windows paths that contain drive letters
        https://bugs.webkit.org/show_bug.cgi?id=34884
        
        KURL::path() alone does not handle removing the leading slash from a windows file path.
        Using QUrl::toLocalFile() will turn file:///C:/path into C:/path appropriately.

        Reviewed by Andreas Kling.

        * platform/qt/KURLQt.cpp:
        (WebCore::KURL::fileSystemPath):

2011-09-10  Ken Buchanan <kenrb@chromium.org>

        Crash due to bad data in SVGDocumentExtensions m_pendingResources
        https://bugs.webkit.org/show_bug.cgi?id=67488

        Reviewed by Nikolas Zimmermann.

        Resolving a crash condition caused by the deletion of
        elements while pending resource entries for those elements are still
        recorded.

        * rendering/svg/RenderSVGResourceContainer.cpp:
        (WebCore::RenderSVGResourceContainer::registerResource)
        * svg/SVGDocumentExtensions.h:
        (WebCore::SVGDocumentExtensions::isElementInPendingResources)
        * svg/SVGDocumentExtensions.cpp:
        (WebCore::SVGDocumentExtensions::addPendingResource)
        (WebCore::SVGDocumentExtensions::isElementInPendingResources)
        (WebCore::SVGDocumentExtensions::removeElementFromPendingResources)
        * svg/SVGStyledElement.h:
        (WebCore::SVGStyledElement::clearHasPendingResourcesIfPossible)
        * svg/SVGStyledElement.cpp:
        (WebCore::SVGStyledElement::buildPendingResourcesIfNeeded)
        (WebCore::SVGStyledElement::clearHasPendingResourcesIfPossible)
        * svg/SVGUseElement.cpp:
        (WebCore::SVGUseElement::svgAttributeChanged)

2011-09-10  Adam Barth  <abarth@webkit.org>

        Remove DocumentWriter::deprecatedFrameEncoding()
        https://bugs.webkit.org/show_bug.cgi?id=67882

        Reviewed by Eric Seidel.

        Three years ago, in http://trac.webkit.org/changeset/39026, Alexey
        Proskuryakov added ContentDispositionEncodingFallbackArray to work
        around a web site compatibility issue with a non-ASCII file name
        becoming garbled when received in the Content-Disposition header.

        Since that time, there has been copious discussion of this topic among
        browser vendors, in the IETF, and in the broader web community.  For
        example, here is a Stack Overflow thread about this topic:

        http://stackoverflow.com/questions/93551/how-to-encode-the-filename-parameter-of-content-disposition-header-in-http

        Eric Lawrence has written a blog post that summarizes IE's perspective
        on this issue:

        http://blogs.msdn.com/b/ieinternals/archive/2010/06/07/content-disposition-attachment-and-international-unicode-characters.aspx

        The current consensus is that browsers should implement RFC 6266,
        which is a new RFC that updates the definition of the
        Content-Disposition header.  Chrome and Firefox have both implemented
        RFC 6266 and have encountered only one issue, which was then fixed by
        the web site operator.  IE has also implemented RFC 6266, but I don't
        have detailed information about their compatibility experience.

        This patch add explicit PLATFORM #ifdefs around the quirky
        implementation previously used in Apple's Mac and Windows ports.  This
        code is already only used on Apple's ports, so this patch introduces no
        functional changes.  It does, however, discourage other ports from
        adopting this quirk.  IMHO, Apple should remove this quirk as soon as
        compatibility allows and converge behavior with the other major browser
        vendors.

        See bug for manual test (the bug manifests in Safari download UI).

        * loader/DocumentWriter.cpp:
        * loader/DocumentWriter.h:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::addExtraFieldsToRequest):
        * platform/network/ResourceRequestBase.cpp:
        (WebCore::ResourceRequestBase::adopt):
        (WebCore::ResourceRequestBase::copyData):
        * platform/network/ResourceRequestBase.h:

2011-09-09  Beth Dakin  <bdakin@apple.com>

        Attempted Leopard build fix.

        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::paintReplaced):
        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::drawPlatformResizerImage):

2011-09-09  Beth Dakin  <bdakin@apple.com>

        Fix for https://bugs.webkit.org/show_bug.cgi?id=67819
        Use high resolution platform images when the deviceScaleFactor > 1
        -and corresponding-
        <rdar://problem/10003098>

        Reviewed by Darin Adler.

        Add all of the new high resolution images. I also removed some tiffs from the 
        project and replaced them with png equivalents (that are already checked into 
        WebCore anyway). Since the high resolution images are pngs, it makes sense to use 
        pngs for all of the images that load through Image::loadPlatformResource()
        * WebCore.xcodeproj/project.pbxproj:
        * platform/graphics/mac/ImageMac.mm:
        (WebCore::Image::loadPlatformResource):

        Load the @2x resource for deviceScaleFactors >= 2.
        * editing/DeleteButtonController.cpp:
        (WebCore::DeleteButtonController::createDeletionUI):

        CachedImage::brokenImage() is no longer a static helper function, but a real 
        member function. It also now loads the @2x resource for deviceScaleFactors >= 2 
        and takes a parameter for the deviceScaleFactor. When CachedImage::image() returns 
        the brokenImage(), it just returns the 1x version. brokenImage() has to be called 
        directly to reliably return the deviceScaleFactor-appropriate resource.
        * loader/cache/CachedImage.cpp:
        (WebCore::CachedImage::brokenImage):
        (WebCore::CachedImage::image):
        * loader/cache/CachedImage.h:
        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::drawPlatformResizerImage):
        (WebCore::RenderLayer::paintResizer):
        * rendering/RenderLayer.h:

        New static function to retrieve the deviceScaleFactor for callers that do not have 
        direct access to a Page.
        * page/Page.cpp:
        (WebCore::Page::deviceScaleFactor):
        * page/Page.h:

        Call CachedImage::brokenImage() for the broken-image image at an accurate 
        resolution.
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::imageSizeForError):
        (WebCore::RenderImage::paintReplaced):

2011-09-09  Erik Arvidsson  <arv@chromium.org>

        Move Element.contains to Node
        https://bugs.webkit.org/show_bug.cgi?id=67651

        Reviewed by Darin Adler.

        This moves the contains method from Element to Node as in the DOM4 working draft: 
        http://dvcs.w3.org/hg/domcore/raw-file/tip/Overview.html#dom-node-contains

        This also special cases Document contains to make it O(1) instead of O(depth).

        Tests: fast/dom/Node/contains-method.html
               perf/document-contains.html

        * bindings/objc/PublicDOMInterfaces.h: Move contains from DOMElement to DOMNode.
        * dom/Element.idl:
        * dom/Node.cpp:
        (WebCore::Node::contains): Added document special case.
        * dom/Node.idl:
        * editing/DeleteSelectionCommand.cpp:
        (WebCore::DeleteSelectionCommand::mergeParagraphs): Added a null check.

2011-09-09  Tim Horton  <timothy_horton@apple.com>

        Text rendered with a simple (i.e. 0px blur) shadow inside a transparency layer has a double shadow
        https://bugs.webkit.org/show_bug.cgi?id=67543
        <rdar://problem/10070536>

        Reviewed by Darin Adler.

        Generalize (begin|end)TransparencyLayer, which now forward
        through to (begin|end)PlatformTransparencyLayer, so that
        isInTransparencyLayer can exist on every platform.

        Make use of isInTransparencyLayer in FontMac to disable
        "simple" shadow drawing when the text is being rendered
        into a transparency layer.

        Test: svg/custom/simple-text-double-shadow.svg

        * platform/graphics/GraphicsContext.cpp:
        (WebCore::GraphicsContext::GraphicsContext):
        (WebCore::GraphicsContext::~GraphicsContext):
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        (WebCore::GraphicsContext::isInTransparencyLayer):
        * platform/graphics/GraphicsContext.h:
        * platform/graphics/cairo/GraphicsContextCairo.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/cairo/GraphicsContextPlatformPrivateCairo.h:
        * platform/graphics/cg/GraphicsContextCG.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/cg/GraphicsContextPlatformPrivateCG.h:
        (WebCore::GraphicsContextPlatformPrivate::GraphicsContextPlatformPrivate):
        * platform/graphics/haiku/GraphicsContextHaiku.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/mac/FontMac.mm:
        (WebCore::Font::drawGlyphs):
        * platform/graphics/openvg/GraphicsContextOpenVG.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/qt/GraphicsContextQt.cpp:
        (WebCore::GraphicsContext::isInTransparencyLayer):
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/skia/GraphicsContextSkia.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/win/FontCGWin.cpp:
        (WebCore::drawGDIGlyphs):
        * platform/graphics/win/GraphicsContextCGWin.cpp:
        (WebCore::GraphicsContext::releaseWindowsContext):
        * platform/graphics/win/GraphicsContextCairoWin.cpp:
        (WebCore::GraphicsContext::releaseWindowsContext):
        * platform/graphics/win/GraphicsContextWin.cpp:
        (WebCore::GraphicsContext::getWindowsContext):
        * platform/graphics/wince/GraphicsContextWinCE.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/wx/GraphicsContextWx.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/win/ScrollbarThemeWin.cpp:
        * plugins/win/PluginViewWin.cpp:
        * rendering/RenderThemeWin.cpp:

2011-09-09  Julien Chaffraix  <jchaffraix@webkit.org>

        [V8] V8WebKitPoint::constructorCallback leaks
        https://bugs.webkit.org/show_bug.cgi?id=67865

        Reviewed by Adam Barth.

        Covered by fast/js/instanceof-XMLHttpRequest.html under Valgrind.

        * bindings/v8/custom/V8WebKitPointConstructor.cpp:
        (WebCore::V8WebKitPoint::constructorCallback): Changed the code
        to use a RefPtr (per our usual style). Also use toV8 that will
        take care of properly wrapping the object.

2011-09-09  Chris Rogers  <crogers@google.com>

        HRTFDatabaseLoader should not call WTF::waitForThreadCompletion() more than once
        https://bugs.webkit.org/show_bug.cgi?id=67866

        Reviewed by David Levin.

        No new tests since this is difficult to test.
        This is designed to fix existing webaudio layout test failures.

        * platform/audio/HRTFDatabaseLoader.cpp:
        (WebCore::HRTFDatabaseLoader::HRTFDatabaseLoader):
        (WebCore::HRTFDatabaseLoader::~HRTFDatabaseLoader):
        (WebCore::HRTFDatabaseLoader::loadAsynchronously):
        (WebCore::HRTFDatabaseLoader::waitForLoaderThreadCompletion):
        * platform/audio/HRTFDatabaseLoader.h:

2011-09-09  Jessie Berlin  <jberlin@apple.com>

        Cookies are not available after turning off Private Browsing after the last window has been
        closed.
        https://bugs.webkit.org/show_bug.cgi?id=67874

        Reviewed by Darin Adler.

        The private browsing storage session is a global setting that is being incorrectly set on a
        per-page basis (see http://webkit.org/b/67870).

        In this case, the global value was getting out of sync with the per-page setting:
        1. The global value was getting set to true when setPrivateBrowsingEnabled(true) was called.
        2. All Pages were then closed, destroying their Settings objects.
        3. When a new Page was created, a new Settings object was created and its
           m_privateBrowsingEnabled value was getting set to false.
        4. The WebPage settings were then applied to the new Settings object, resulting in
           setPrivateBrowsingEnabled(false) to be called.
        5. An if (m_privateBrowsingEnabled == privateBrowsingEnabled) early return prevented the
           global value for the storage session from being destroyed.

        * page/Settings.cpp:
        (WebCore::Settings::setPrivateBrowsingEnabled):
        Move the early return to be after setting the global private browsing values, and add a
        clearer comment + FIXME.

2011-09-09  Kentaro Hara  <haraken@google.com>

        Generate a WebKitCSSMatrix constructor of V8 using the IDL 'Constructor' extended attribute
        https://bugs.webkit.org/show_bug.cgi?id=67458

        Reviewed by Adam Barth.

        Added a 'CallWithNullValue' extended attribute.
        If a parameter is optional and missing, 'CallWithDefaultValue'
        handles it as a string "undefined". On the other hand,
        'CallWithNullValue' handles it as a null string
        (Note: not a string "null", but a null string).

        Tests: fast/dom/Window/custom-constructors.html
               transforms/svg-vs-css.xhtml
               transforms/cssmatrix-2d-interface.xhtml
               transforms/cssmatrix-3d-interface.xhtmlGenerate a WebKitCSSMatrix constructor

        * WebCore.gypi: Removed V8WebKitCSSMatrixConstructor.cpp.
        * WebCore.pro: Removed V8WebKitCSSMatrixConstructor.cpp.
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateParametersCheck): If the 'CallWithNullValue' extended attribute is set, we call MAYBE_MISSING_PARAMETER() with MissingIsEmpty mode to obtain a maybe missing parameter. Otherwise, we call MAYBE_MISSING_PARAMETER() with MissingIsUndefined mode.
        (RequiresCustomSignature):
        * bindings/scripts/test/V8/V8TestInterface.cpp: Updated test results.
        (WebCore::V8TestInterface::constructorCallback):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp: Ditto.
        (WebCore::TestMediaQueryListListenerInternal::methodCallback):
        * bindings/scripts/test/V8/V8TestObj.cpp: Ditto.
        (WebCore::TestObjInternal::voidMethodWithArgsCallback):
        (WebCore::TestObjInternal::intMethodWithArgsCallback):
        (WebCore::TestObjInternal::objMethodWithArgsCallback):
        (WebCore::TestObjInternal::methodThatRequiresAllArgsCallback):
        (WebCore::TestObjInternal::methodThatRequiresAllArgsAndThrowsCallback):
        (WebCore::TestObjInternal::optionsObjectCallback):
        (WebCore::TestObjInternal::customArgsAndExceptionCallback):
        (WebCore::TestObjInternal::withDynamicFrameAndArgCallback):
        (WebCore::TestObjInternal::withDynamicFrameAndOptionalArgCallback):
        (WebCore::TestObjInternal::withDynamicFrameAndUserGestureCallback):
        (WebCore::TestObjInternal::withDynamicFrameAndUserGestureASADCallback):
        (WebCore::TestObjInternal::methodWithOptionalArgCallback):
        (WebCore::TestObjInternal::methodWithNonOptionalArgAndOptionalArgCallback):
        (WebCore::TestObjInternal::methodWithNonOptionalArgAndTwoOptionalArgsCallback):
        (WebCore::TestObjInternal::methodWithNonCallbackArgAndCallbackArgCallback):
        (WebCore::TestObjInternal::overloadedMethod1Callback):
        (WebCore::TestObjInternal::overloadedMethod2Callback):
        (WebCore::TestObjInternal::overloadedMethod3Callback):
        (WebCore::TestObjInternal::overloadedMethod4Callback):
        (WebCore::TestObjInternal::classMethodWithOptionalCallback):
        (WebCore::TestObjInternal::enabledAtRuntimeMethod1Callback):
        (WebCore::TestObjInternal::enabledAtRuntimeMethod2Callback):
        * bindings/v8/V8Binding.h:
        (WebCore::V8ParameterBase::prepareBase): The fact that V8ParameterBase does not have any object means that we do not need to prepare anything, i.e. we should just return true in this case.
        (WebCore::::prepare): If V8ParameterBase does not have any object, then we set a null string.
        * bindings/v8/custom/V8BindingMacros.h: MAYBE_MISSING_PARAMETER() returns the parameter of a given index if the parameter exists. If the parameter does not exist and MissingIsUndefined is set, this macro returns an object that represents undefined. If the parameter does not exist and MissingIsEmpty is set, this macro returns an empty object.
        * bindings/v8/custom/V8WebKitCSSMatrixConstructor.cpp: Removed.
        * css/WebKitCSSMatrix.idl: Added the 'Constructor' extended attribute.

2011-09-09  Geoffrey Garen  <ggaren@apple.com>

        Reviewed by Dan Bernstein.

        Removed ENABLE(SINGLE_THREADED) support, since it is always false
        https://bugs.webkit.org/show_bug.cgi?id=67862

        Next step toward making the baseline platform assumption that threads exist.

        * WebCore.pri:
        * features.pri: 
        * platform/sql/SQLiteDatabase.cpp:
        (WebCore::SQLiteDatabase::interrupt): Removed now-dead code.

2011-09-09  Fady Samuel  <fsamuel@chromium.org>

        Move pageScaleFactor code from Frame.{h|cpp} to Page.{h|cpp}
        https://bugs.webkit.org/show_bug.cgi?id=67250

        Reviewed by Simon Fraser.

        No new tests because there's no change in functionality.

        * WebCore.exp.in:
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::styleForDocument):
        * dom/Element.cpp:
        (WebCore::Element::getClientRects):
        (WebCore::Element::getBoundingClientRect):
        * dom/Range.cpp:
        (WebCore::adjustFloatQuadsForScrollAndAbsoluteZoomAndPageScale):
        * loader/HistoryController.cpp:
        (WebCore::HistoryController::restoreScrollPositionAndViewState):
        * page/Frame.cpp:
        (WebCore::Frame::Frame):
        (WebCore::Frame::pageScaleFactor):
        * page/Frame.h:
        * page/Page.cpp:
        (WebCore::Page::Page):
        (WebCore::Page::setPageScaleFactor):
        * page/Page.h:
        (WebCore::Page::pageScaleFactor):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::shouldPropagateCompositingToEnclosingFrame):
        (WebCore::RenderLayerCompositor::pageScaleFactor):
        * rendering/RenderView.cpp:
        (WebCore::RenderView::paintBoxDecorations):

2011-09-09  Dominic Mazzoni  <dmazzoni@google.com>

        AX: Images within anchors causes crash
        https://bugs.webkit.org/show_bug.cgi?id=44149

        Reviewed by Chris Fleizach.

        Fixes the way parent RenderObject of an AccessibilityRenderObject
        is computed in the presence of adjacent continuations.

        Test: accessibility/div-within-anchors-causes-crash.html

        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::renderParentObject):

2011-09-09  Kulanthaivel Palanichamy  <kulanthaivel@codeaurora.org>

        CSS rules not being applied when a hidden field is inserted between an input[type=checkbox] and a label
        https://bugs.webkit.org/show_bug.cgi?id=66887

        Reviewed by David Hyatt.

        Test: fast/css/adjacent-sibling-selector.html

        This patch addresses the problem of elements not getting their style recomputed
        when they are affected by direct adjacent sibling rules and one of their sibling in
        their corresponding rules is modified dynamically.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::canShareStyleWithElement):
        (WebCore::parentStylePreventsSharing):
        * css/SelectorChecker.cpp:
        (WebCore::SelectorChecker::checkSelector):
        * dom/Element.cpp:
        (WebCore::Element::recalcStyle):
        (WebCore::checkForSiblingStyleChanges):
        * rendering/style/RenderStyle.cpp:
        (WebCore::RenderStyle::RenderStyle):
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::affectedByDirectAdjacentRules):
        (WebCore::InheritedFlags::setAffectedByDirectAdjacentRules):

2011-09-09  Rafael Antognolli  <antognolli@profusion.mobi>

        Make the EFL port use the correct rendering file.
        https://bugs.webkit.org/show_bug.cgi?id=66323

        Reviewed by Martin Robinson.

        When compiling with Pango support, the EFL port should use
        FontPango.cpp instead of FontEfl.cpp (which is just full of stubs).

        No new functionality so no new tests.

        * CMakeListsEfl.txt:

2011-09-09  Chris Rogers  <crogers@google.com>

        AudioBufferSourceNode must validate AudioBuffer in .buffer attribute setter
        https://bugs.webkit.org/show_bug.cgi?id=67749

        Reviewed by Kenneth Russell.

        Test: webaudio/audiobuffersource-channels.html

        * WebCore.gypi:
        * bindings/js/JSAudioBufferSourceNodeCustom.cpp:
        (WebCore::JSAudioBufferSourceNode::setBuffer):
        * bindings/v8/custom/V8AudioBufferSourceNodeCustom.cpp: Copied from Source/WebCore/bindings/js/JSAudioBufferSourceNodeCustom.cpp.
        (WebCore::V8AudioBufferSourceNode::bufferAccessorSetter):
        * webaudio/AudioBufferSourceNode.cpp:
        (WebCore::AudioBufferSourceNode::setBuffer):
        * webaudio/AudioBufferSourceNode.h:
        * webaudio/AudioBufferSourceNode.idl:

2011-09-09  Dan Bernstein  <mitz@apple.com>

        RenderBlock::addOverhangingFloats() takes superfluous parameters
        https://bugs.webkit.org/show_bug.cgi?id=67863

        Reviewed by Dave Hyatt.

        No new tests, because behavior is unchanged.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutBlock):
        (WebCore::RenderBlock::layoutBlockChild):
        (WebCore::RenderBlock::addOverhangingFloats): Removed the logical{Left, Top}Offset parameters,
        since they were always the inverse of the logical{Left, Top}() of the child parameter.
        * rendering/RenderBlock.h:

2011-09-09  Rafael Antognolli  <antognolli@profusion.mobi>

        Add replacement functions for gdk ones.
        https://bugs.webkit.org/show_bug.cgi?id=66323

        Reviewed by Martin Robinson.

        This will allow the EFL port to don't depend on gdk anymore.

        No new functionality so no new tests.

        * CMakeListsEfl.txt:
        * platform/graphics/cairo/CairoUtilities.cpp:
        (WebCore::appendRegionToCairoContext):
        * platform/graphics/cairo/CairoUtilities.h:
        * platform/graphics/pango/FontPango.cpp:
        (WebCore::drawGlyphsShadow):
        (WebCore::Font::drawComplexText):
        * platform/graphics/pango/PangoUtilities.cpp: Added.
        (WebCore::getLineClipRegionFromLayoutIter):
        (WebCore::getClipRegionFromPangoLayoutLine):
        * platform/graphics/pango/PangoUtilities.h: Added.

2011-09-09  Mark Hahnenberg  <mhahnenberg@apple.com>

        Unzip initialization lists and constructors in JSCell hierarchy (5/7)
        https://bugs.webkit.org/show_bug.cgi?id=67420

        Reviewed by Geoffrey Garen.

        No new tests.

        Completed the fifth level of the refactoring to add finishCreation() 
        methods to all classes within the JSCell hierarchy with non-trivial 
        constructor bodies.

        This primarily consists of pushing the calls to finishCreation() down 
        into the constructors of the subclasses of the second level of the hierarchy 
        as well as pulling the finishCreation() calls out into the class's corresponding
        create() method if it has one.  Doing both simultaneously allows us to 
        maintain the invariant that the finishCreation() method chain is called exactly 
        once during the creation of an object, since calling it any other number of 
        times (0, 2, or more) will cause an assertion failure.

        * WebCore.exp.in:
        * bindings/js/JSDOMBinding.h:
        (WebCore::DOMConstructorObject::DOMConstructorObject):
        * bindings/js/JSDOMGlobalObject.cpp:
        (WebCore::JSDOMGlobalObject::JSDOMGlobalObject):
        (WebCore::JSDOMGlobalObject::finishCreation):
        * bindings/js/JSDOMGlobalObject.h:
        * bindings/js/JSDOMWindowShell.cpp:
        * bindings/js/JSDOMWindowShell.h:
        (WebCore::JSDOMWindowShell::create):
        * bindings/js/JSDOMWrapper.h:
        (WebCore::JSDOMWrapper::JSDOMWrapper):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateImplementation):
        * bindings/scripts/test/JS/JSTestInterface.cpp:
        (WebCore::JSTestInterface::JSTestInterface):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        (WebCore::JSTestMediaQueryListListener::JSTestMediaQueryListListener):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::JSTestObj::JSTestObj):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterface::JSTestSerializedScriptValueInterface):
        * bridge/c/CRuntimeObject.cpp:
        (JSC::Bindings::CRuntimeObject::CRuntimeObject):
        (JSC::Bindings::CRuntimeObject::finishCreation):
        * bridge/c/CRuntimeObject.h:
        * bridge/jni/jsc/JavaRuntimeObject.cpp:
        (JSC::Bindings::JavaRuntimeObject::JavaRuntimeObject):
        (JSC::Bindings::JavaRuntimeObject::finishCreation):
        * bridge/jni/jsc/JavaRuntimeObject.h:
        * bridge/objc/ObjCRuntimeObject.h:
        * bridge/objc/ObjCRuntimeObject.mm:
        (JSC::Bindings::ObjCRuntimeObject::ObjCRuntimeObject):
        (JSC::Bindings::ObjCRuntimeObject::finishCreation):
        * bridge/objc/objc_runtime.h:
        (JSC::Bindings::ObjcFallbackObjectImp::create):
        * bridge/objc/objc_runtime.mm:
        (JSC::Bindings::ObjcFallbackObjectImp::ObjcFallbackObjectImp):
        * bridge/qt/qt_instance.cpp:
        (JSC::Bindings::QtRuntimeObject::QtRuntimeObject):
        * bridge/qt/qt_pixmapruntime.cpp:
        (JSC::Bindings::QtPixmapRuntimeObject::QtPixmapRuntimeObject):
        * bridge/qt/qt_runtime.cpp:
        (JSC::Bindings::QtRuntimeMethod::QtRuntimeMethod):
        (JSC::Bindings::QtRuntimeMethod::finishCreation):
        * bridge/qt/qt_runtime.h:
        * bridge/runtime_array.cpp:
        (JSC::RuntimeArray::RuntimeArray):
        * bridge/runtime_array.h:
        (JSC::RuntimeArray::create):
        * bridge/runtime_method.cpp:
        (JSC::RuntimeMethod::RuntimeMethod):
        (JSC::RuntimeMethod::finishCreation):
        * bridge/runtime_method.h:
        * bridge/runtime_object.cpp:
        (JSC::Bindings::RuntimeObject::RuntimeObject):
        * bridge/runtime_object.h:
        (JSC::Bindings::RuntimeObject::create):

2011-09-09  Rafael Antognolli  <antognolli@profusion.mobi>

        Rename FontGtk.cpp to FontPango.cpp
        https://bugs.webkit.org/show_bug.cgi?id=66323

        Reviewed by Martin Robinson.

        This file will be used by the EFL port too, and since it's not GTK
        specific anymore, rename it to something better.

        No new functionality so no new tests.

        * GNUmakefile.list.am:
        * platform/graphics/pango/FontPango.cpp: Renamed from Source/WebCore/platform/graphics/gtk/FontGtk.cpp.

2011-09-09  Adam Klein  <adamk@chromium.org>

        Initialize ExceptionCode in Element::removeAttribute
        https://bugs.webkit.org/show_bug.cgi?id=67820

        Reviewed by Darin Adler.

        Silences valgrind warning reported in http://crbug.com/76490.

        No new tests since this would only very occasionally be flaky,
        and in the codepath in the valgrind report, the ec is ignored anyway.

        * dom/Element.cpp:
        (WebCore::Element::removeAttribute): Initialize ec to 0.

2011-09-09  Laszlo Gombos  <laszlo.1.gombos@nokia.com>

        [Qt] Remove common.pri
        https://bugs.webkit.org/show_bug.cgi?id=67814

        Reviewed by Andreas Kling.

        No new tests, no change in functionality.

        * CodeGenerators.pri:
        * WebCore.pri:

2011-09-09  Dominic Mazzoni  <dmazzoni@google.com>

        Assert being hit in AccessibilityRenderObject::addChildren()
        https://bugs.webkit.org/show_bug.cgi?id=61805

        Reviewed by Chris Fleizach.

        Fix nextSibling and previousSibling to handle adjacent continuations
        properly, otherwise nodes end up appearing in the accessibility
        tree twice (or a debug assertion could be raised).

        Test: accessibility/adjacent-continuations-cause-assertion-failure.html

        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::previousSibling):
        (WebCore::AccessibilityRenderObject::nextSibling):

2011-09-08  Kentaro Hara  <haraken@google.com>

        Implement a WebKitAnimationEvent constructor.
        https://bugs.webkit.org/show_bug.cgi?id=67825

        Reviewed by Sam Weinig.

        There is no spec for the WebKitAnimationEvent constructor
        since it is WebKit-specific. However, based on the current
        IDL of initWebKitAnimationEvent(), the constructor IDL
        should be as follows.

        [Constructor(DOMString type, optional WebKitAnimationEventInit eventInitDict)]
        interface WebKitAnimationEvent : Event {
            ...;
        }

        dictionary WebKitAnimationEventInit : EventInit {
            DOMString animationName;
            double elapsedTime;
        }

        Test: fast/events/constructors/webkit-animation-event-constructor.html

        * bindings/generic/EventConstructors.h: Added a definition for the WebKitAnimationEvent constructor.
        * bindings/js/JSEventConstructors.cpp: Added #includes for WebKitAnimationEvent.
        * dom/WebKitAnimationEvent.cpp:
        (WebCore::WebKitAnimationEventInit::WebKitAnimationEventInit):
        (WebCore::WebKitAnimationEvent::WebKitAnimationEvent):
        * dom/WebKitAnimationEvent.h: Added a definition for WebKitAnimationEventInit.
        (WebCore::WebKitAnimationEvent::create):
        * dom/WebKitAnimationEvent.idl: Makes WebKitAnimationEvent constructible.

2011-09-08  Abhishek Arya  <inferno@chromium.org>

        :before content rendering issues with list markers and run-ins.
        https://bugs.webkit.org/show_bug.cgi?id=67735

        1) Remove the isAnonymous checks for run-in detection since the
        run-in can belong to a node.
        2) When the parent has block children, then the list marker will
        be enclosed in an anonymous block. In that case, for going to the
        next list marker, we need to traverse one level up. We don't need
        this check when searching for generated run-in (loop 2), since we
        know parent will have inline children, so the list marker wont be
        enclosed in an anonymous block.

        Reviewed by Dave Hyatt.

        Tests: fast/lists/list-marker-before-content-table.html
               fast/runin/runin-generated-before-content.html

        * rendering/RenderObjectChildList.cpp:
        (WebCore::RenderObjectChildList::beforePseudoElementRenderer):

2011-09-09  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: introduce JavaScriptSourceFrame class.
        https://bugs.webkit.org/show_bug.cgi?id=67838

        SourceFrame should not deal with JavaScript debugging since it is a base class for all source frame implementations.

        Reviewed by Pavel Feldman.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/front-end/JavaScriptSourceFrame.js: Added.
        (WebInspector.JavaScriptSourceFrame):
        (WebInspector.SourceFrameDelegateForScriptsPanel): moved from ScriptsPanel.js
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.requestContent):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.debuggingSupported):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.setBreakpoint):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.updateBreakpoint):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.removeBreakpoint):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.findBreakpoint):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.continueToLine):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.canEditScriptSource):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.setScriptSource):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.setScriptSourceIsBeingEdited):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.debuggerPaused):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.evaluateInSelectedCallFrame):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.releaseEvaluationResult):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.suggestedFileName):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._createSourceFrame):
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/inspector.html:

2011-09-09  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94845.
        http://trac.webkit.org/changeset/94845
        https://bugs.webkit.org/show_bug.cgi?id=67839

        This patch kicked Qt-SL bots, but we don't need this
        modification. (Requested by ossy_ on #webkit).

        * platform/graphics/mac/MediaPlayerPrivateQTKit.mm:
        * platform/mac/WebVideoFullscreenController.mm:
        * platform/mac/WebVideoFullscreenHUDWindowController.mm:

2011-09-09  Csaba Osztrogonác  <ossy@webkit.org>

        [Qt][Mac]REGRESSION(r94774): Build is broken
        https://bugs.webkit.org/show_bug.cgi?id=67799

        It seems these files didn't rebuilt because of a
        dependency bug. Touch them to trigger a rebuild.

        * platform/graphics/mac/MediaPlayerPrivateQTKit.mm:
        * platform/mac/WebVideoFullscreenController.mm:
        * platform/mac/WebVideoFullscreenHUDWindowController.mm:

2011-09-09  Alexander Pavlov  <apavlov@chromium.org>

        Unreviewed, Chromium valgrind build fix.

        Web Inspector: [Chromium] Valgrind signals use of uninitialized field in InspectorStyleSheetForInlineStyle
        https://bugs.webkit.org/show_bug.cgi?id=67837

        * inspector/InspectorStyleSheet.cpp:
        (WebCore::InspectorStyleSheetForInlineStyle::InspectorStyleSheetForInlineStyle):

2011-09-09  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94536.
        http://trac.webkit.org/changeset/94536
        https://bugs.webkit.org/show_bug.cgi?id=67836

        breaks absoluteLocation() of RelatedMouseEvent (Requested by
        jknotten on #webkit).

        * dom/MouseRelatedEvent.cpp:
        (WebCore::MouseRelatedEvent::MouseRelatedEvent):

2011-09-08  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: live edit both for JS and CSS is not discoverable.
        https://bugs.webkit.org/show_bug.cgi?id=65962

        Add the "Edit" button to SourceFrame, so that resources/scripts can be edited both in the
        Resources and the Scripts panels. The button is grayed out if the resource/script is not editable.

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/Images/statusbarButtonGlyphs.png:
        * inspector/front-end/ResourceView.js:
        (WebInspector.EditableResourceSourceFrame.prototype.canEditSource):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype.get statusBarItems):
        (WebInspector.ScriptsPanel.prototype.set visibleView):
        * inspector/front-end/SourceFrame.js:
        (WebInspector.SourceFrame):
        (WebInspector.SourceFrame.prototype.get statusBarItems):
        (WebInspector.SourceFrame.prototype._initializeTextViewer):
        (WebInspector.SourceFrame.prototype._editButtonClicked):
        (WebInspector.SourceFrame.prototype.canEditSource):
        (WebInspector.SourceFrame.prototype.startEditing):
        (WebInspector.SourceFrame.prototype.commitEditing):
        (WebInspector.SourceFrame.prototype._setReadOnly):
        (WebInspector.TextViewerDelegateForSourceFrame.prototype.doubleClick):
        * inspector/front-end/TextViewer.js:
        (WebInspector.TextEditorMainPanel.prototype.set readOnly):
        (WebInspector.TextEditorMainPanel.prototype._updateSelectionOnStartEditing):
        * inspector/front-end/inspector.css:
        (button.edit-source-status-bar-item .glyph):
        (button.edit-source-status-bar-item.toggled-on .glyph):

2011-09-09  Shinya Kawanaka  <shinyak@google.com>

        Crashes in WebCore::AppendNodeCommand::create().
        https://bugs.webkit.org/show_bug.cgi?id=67767

        Reviewed by Darin Adler.

        In CompositeEditCommand::closeParagraphUnderNewElement(), lastNode could be a non Element node.
        The current code assumes lastNode is an Element node. This patch checks it.

        Test: editing/execCommand/ident-crashes-topnode-is-text.html

        * editing/CompositeEditCommand.cpp:
        (WebCore::CompositeEditCommand::cloneParagraphUnderNewElement): Added an element node check.

2011-09-09  Shinya Kawanaka  <shinyak@google.com>

        Crashes in WebCore::ApplyStyleCommand.doApply()
        https://bugs.webkit.org/show_bug.cgi?id=67765

        Reviewed by Ryosuke Niwa.

        WebCore::enclosingBlock may return null, but ApplyStyleCommand::applyBlockStyle did not check it. This patch make it to be checked.

        Test: editing/style/remove-format-without-enclosing-block.html

        * editing/ApplyStyleCommand.cpp:
        (WebCore::ApplyStyleCommand::applyBlockStyle): Added null check.

2011-09-09  James Simonsen  <simonjam@chromium.org>

        [Chromium] Fix leak of Skia stream with custom CSS fonts
        https://bugs.webkit.org/show_bug.cgi?id=67815

        Reviewed by Adam Barth.

        Test: fast/css/font-face-opentype.html under valgrind

        * platform/graphics/mac/FontCustomPlatformData.cpp:
        (WebCore::createFontCustomPlatformData):
        * platform/graphics/skia/FontCustomPlatformData.cpp:
        (WebCore::createFontCustomPlatformData):

2011-09-07  Ryosuke Niwa  <rniwa@webkit.org>

        Push more code from HTMLInputElement::setValue to TextFieldInputType::setValue
        https://bugs.webkit.org/show_bug.cgi?id=67742

        Reviewed by Darin Adler.

        Moved more code in HTMLInputElement::setValue to TextFieldInputType::setValue, and merged
        InputType::valueChanged into InputType::setValue. Also introduced
        InputType::dispatchChangeEventInResponseToSetValue to be overridden by TextFieldInputType.

        * html/BaseButtonInputType.cpp:
        (WebCore::BaseButtonInputType::setValue):
        * html/BaseButtonInputType.h:
        * html/BaseCheckableInputType.cpp:
        (WebCore::BaseCheckableInputType::setValue):
        * html/BaseCheckableInputType.h:
        * html/ColorInputType.cpp:
        * html/ColorInputType.h:
        * html/FileInputType.cpp:
        (WebCore::FileInputType::setValue):
        * html/FileInputType.h:
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::setValue):
        * html/HTMLInputElement.h:
        (WebCore::HTMLInputElement::cacheSelectionInResponseToSetValue):
        * html/HiddenInputType.cpp:
        (WebCore::HiddenInputType::setValue):
        * html/HiddenInputType.h:
        * html/InputType.cpp:
        (WebCore::InputType::setValue):
        (WebCore::InputType::dispatchChangeEventInResponseToSetValue):
        * html/InputType.h:
        * html/RangeInputType.cpp:
        (WebCore::RangeInputType::setValue):
        * html/RangeInputType.h:
        * html/TextFieldInputType.cpp:
        (WebCore::TextFieldInputType::setValue):
        (WebCore::TextFieldInputType::dispatchChangeEventInResponseToSetValue):
        * html/TextFieldInputType.h:

2011-09-08  Annie Sullivan  <sullivan@chromium.org>

        Crashes in WebCore::InsertNodeBeforeCommand constructor.
        https://bugs.webkit.org/show_bug.cgi?id=67763

        Reviewed by Ryosuke Niwa.

        Changes editableRootForPosition() to use the position's containerNode instead of deprecatedNode so that
        positions which are before or after a given node cannot return that node as the editable root.

        Test: editing/inserting/insert-paragraph-selection-outside-contenteditable.html

        * editing/htmlediting.cpp:
        (WebCore::editableRootForPosition): use containerNode instead of deprecatedNode.

2011-09-08  James Weatherall  <wez@chromium.org>

        Release the reference to the HTMLPlugInElement's script object, when the element is removed from the document.  This breaks a cyclical reference that would otherwise cause the element to be retained until the document is torn down.
        https://bugs.webkit.org/show_bug.cgi?id=66181

        Reviewed by Anders Carlsson.

        No new tests - no functional change.

        * html/HTMLPlugInElement.cpp:
        (WebCore::HTMLPlugInElement::removedFromDocument):
        * html/HTMLPlugInElement.h:

2011-09-08  Daniel Bates  <dbates@webkit.org>

        XSS filter bypass via non-standard URL encoding
        https://bugs.webkit.org/show_bug.cgi?id=66588

        Reviewed by Adam Barth.

        Tests: http/tests/security/xssAuditor/script-tag-with-16bit-unicode-surrogate-pair.html
               http/tests/security/xssAuditor/script-tag-with-16bit-unicode.html
               http/tests/security/xssAuditor/script-tag-with-16bit-unicode2.html
               http/tests/security/xssAuditor/script-tag-with-16bit-unicode3.html
               http/tests/security/xssAuditor/script-tag-with-16bit-unicode4.html
               http/tests/security/xssAuditor/script-tag-with-16bit-unicode5.html
               http/tests/security/xssAuditor/script-tag-with-three-times-url-encoded-16bit-unicode.html
               http/tests/security/xssAuditor/window-open-without-url-should-not-assert.html

        Implement support for decoding non-standard 16-bit Unicode escape sequences of
        the form %u26C4 as described in <http://www.w3.org/International/iri-edit/draft-duerst-iri.html#anchor29>.

        See also <http://en.wikipedia.org/wiki/Percent-encoding#Non-standard_implementations>.

        * GNUmakefile.list.am: Added DecodeEscapeSequences.h.
        * WebCore.gypi: Ditto.
        * WebCore.pro: Ditto.
        * WebCore.vcproj/WebCore.vcproj: Ditto.
        * WebCore.xcodeproj/project.pbxproj: Ditto.
        * html/parser/XSSAuditor.cpp:
        (WebCore::decode16BitUnicodeEscapeSequences): Added.
        (WebCore::decodeStandardURLEscapeSequences): Added.
        (WebCore::fullyDecodeString): Modified to call decode16BitUnicodeEscapeSequences().
        (WebCore::XSSAuditor::init): Modified to return early when the URL of the document
        is the empty string. This can happen when opening a new browser window or calling
        window.open("").
        * platform/KURL.cpp:
        (WebCore::decodeURLEscapeSequences): Abstracted code into template-function decodeEscapeSequences().
        This function just calls decodeEscapeSequences<URLEscapeSequence>().
        * platform/text/DecodeEscapeSequences.h: Added.
        (WebCore::Unicode16BitEscapeSequence::findInString):
        (WebCore::Unicode16BitEscapeSequence::matchStringPrefix):
        (WebCore::Unicode16BitEscapeSequence::decodeRun):
        (WebCore::URLEscapeSequence::findInString):
        (WebCore::URLEscapeSequence::matchStringPrefix):
        (WebCore::URLEscapeSequence::decodeRun):
        (WebCore::decodeEscapeSequences):

2011-09-08  Adam Barth  <abarth@webkit.org>

        DocumentWriter::deprecatedFrameEncoding doesn't need to refert to Settings
        https://bugs.webkit.org/show_bug.cgi?id=67812

        Reviewed by Eric Seidel.

        The one caller of this function does this work already.

        * loader/DocumentWriter.cpp:
        (WebCore::DocumentWriter::deprecatedFrameEncoding):

2011-09-08  Adam Klein  <adamk@chromium.org>

        Always zero-out m_sortedTextBoxesPosition to avoid uninitialized read in TextIterator
        https://bugs.webkit.org/show_bug.cgi?id=67810

        Reviewed by Tony Chang.

        Reported as a valgrind failure in http://crbug.com/84777.

        No possible change in behavior, so no tests. The unitialized read
        could never have an impact:

           if (m_sortedTextBoxesPosition + 1 < m_sortedTextBoxes.size()) ...

        Since m_sortedTextBoxes.size() will be zero here if
        m_sortedTextBoxesPosition is uninitialized, and they're both unsigned,
        so no possible value of m_sortedTextBoxesPosition could be < 0.

        * editing/TextIterator.cpp:
        (WebCore::TextIterator::TextIterator):

2011-09-08  Tony Chang  <tony@chromium.org>

        Cleanup of switch statements with default cases
        https://bugs.webkit.org/show_bug.cgi?id=67808

        Reviewed by Adam Barth.

        No new tests, just a small refactoring.

        * page/WebKitAnimation.cpp:
        (WebCore::WebKitAnimation::fillMode):
        * platform/audio/Distance.cpp:
        (WebCore::DistanceEffect::gain):

2011-09-08  Eric Seidel  <eric@webkit.org>

        [BiDi] Add support for the BDI element
        https://bugs.webkit.org/show_bug.cgi?id=50913

        Reviewed by Ryosuke Niwa.

        This patch is ridiculously trivial now that we have unicode-bidi: isolate support in WebKit.

        Test: css3/bdi-element.html

        * css/html.css:
        (bdi):

2011-09-08  David Levin  <levin@chromium.org>

        [chromium] KURL::copy doesn't produce something usable on another thread.
        https://bugs.webkit.org/show_bug.cgi?id=67809

        Reviewed by Adam Barth.

        No new functionality exposed so no new test. This was caught by testing code: the thread
        sanitizer run in Chromium (http://code.google.com/p/chromium/issues/detail?id=93708).

        * platform/KURLGoogle.cpp:
        (WebCore::KURLGooglePrivate::copyTo): Clear out the invalid String so that it will
        not be used on another thread.

2011-09-08  Alexey Proskuryakov  <ap@apple.com>

        REGRESSION (r66874): Missing RefPtr in ScriptController
        https://bugs.webkit.org/show_bug.cgi?id=67748

        Reviewed by Adam Barth.

        * bindings/ScriptControllerBase.cpp: (WebCore::ScriptController::executeScript):

2011-09-08  Adam Barth  <abarth@webkit.org>

        Second attempt to fix Chromium build.

        * dom/Document.h:

2011-09-08  Oliver Hunt  <oliver@apple.com>

        Use bump allocator for initial property storage
        https://bugs.webkit.org/show_bug.cgi?id=67494

        Reviewed by Geoffrey Garen.

        Add a forwarding header.

        * ForwardingHeaders/runtime/StorageBarrier.h: Added.

2011-09-08  Roland Steiner  <rolandsteiner@chromium.org>

        Unreviewed, rolling out r94809.
        http://trac.webkit.org/changeset/94809
        https://bugs.webkit.org/show_bug.cgi?id=67718

        commit _still_ premature, despite CQ eagerness

        * html/HTMLAttributeNames.in:
        * html/HTMLStyleElement.cpp:
        * html/HTMLStyleElement.h:
        * html/HTMLStyleElement.idl:

2011-09-08  Sam Weinig  <sam@webkit.org>

        Remove the Completion object from JSC, I have never liked it
        https://bugs.webkit.org/show_bug.cgi?id=67755

        Reviewed by Gavin Barraclough.

        * bindings/js/JSDOMBinding.cpp:
        (WebCore::reportException):
        * bindings/js/JSEventListener.cpp:
        (WebCore::JSEventListener::handleEvent):
        * bindings/js/JSInjectedScriptManager.cpp:
        (WebCore::InjectedScriptManager::createInjectedScript):
        * bindings/js/JSMainThreadExecState.h:
        (WebCore::JSMainThreadExecState::evaluate):
        * bindings/js/ScriptController.cpp:
        (WebCore::ScriptController::evaluateInWorld):
        * bindings/js/WorkerScriptController.cpp:
        (WebCore::WorkerScriptController::evaluate):
        * bindings/objc/WebScriptObject.mm:
        (-[WebScriptObject evaluateWebScript:]):
        * bridge/NP_jsobject.cpp:
        (_NPN_Evaluate):
        * bridge/jni/jni_jsobject.mm:
        (JavaJSObject::eval):

2011-09-08  Adam Barth  <abarth@webkit.org>

        Inline DocumentWriter::encoding() into it's only caller: deprecatedFrameEncoding()
        https://bugs.webkit.org/show_bug.cgi?id=67807

        Reviewed by Eric Seidel.

        This function is super nutty.  We don't want any more folks to call it
        thinking that it does something sane.

        * loader/DocumentWriter.cpp:
        (WebCore::DocumentWriter::deprecatedFrameEncoding):
        * loader/DocumentWriter.h:

2011-09-08  Roland Steiner  <rolandsteiner@chromium.org>

        <style scoped>: Add 'scoped' attribute
        https://bugs.webkit.org/show_bug.cgi?id=67718

        Add 'scoped' attribute to IDL and attribute list,
        implement and test setting/resetting of the attribute.

        Reviewed by Dimitri Glazkov.

        Test: fast/css/style-scoped/basic-attribute.html

        * html/HTMLAttributeNames.in:
        * html/HTMLStyleElement.cpp:
        (WebCore::HTMLStyleElement::scoped):
        (WebCore::HTMLStyleElement::setScoped):
        (WebCore::HTMLStyleElement::scopingElement):
        * html/HTMLStyleElement.h:
        * html/HTMLStyleElement.idl:

2011-09-08  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94781.
        http://trac.webkit.org/changeset/94781
        https://bugs.webkit.org/show_bug.cgi?id=67806

        Broke Objective-C binding on Mac (Requested by rniwa on
        #webkit).

        * dom/Element.idl:
        * dom/Node.cpp:
        (WebCore::Node::contains):
        * dom/Node.idl:
        * editing/DeleteSelectionCommand.cpp:
        (WebCore::DeleteSelectionCommand::mergeParagraphs):

2011-09-08  Eric Seidel  <eric@webkit.org>

        Remove DocumentWriter::setDecoder as a grep of WebKit shows no callers
        https://bugs.webkit.org/show_bug.cgi?id=67803

        Reviewed by Adam Barth.

        Smells like dead code.

        * loader/DocumentWriter.cpp:
        * loader/DocumentWriter.h:

2011-09-08  Shinya Kawanaka  <shinyak@google.com>

        Crashes in WebCore::ReplaceSelectionCommand::doApply
        https://bugs.webkit.org/show_bug.cgi?id=67762

        Reviewed by Ryosuke Niwa.

        WebCore::enclosingBlock may return null, but its return value was not checked. This patch checks it.

        Tests: editing/inserting/insert-without-enclosing-block.html

        * editing/ReplaceSelectionCommand.cpp:
        (WebCore::ReplaceSelectionCommand::doApply): Added null check.

2011-09-08  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94784.
        http://trac.webkit.org/changeset/94784
        https://bugs.webkit.org/show_bug.cgi?id=67796

        Commit was premature (Requested by rolandsteiner on #webkit).

        * html/HTMLAttributeNames.in:
        * html/HTMLStyleElement.cpp:
        * html/HTMLStyleElement.h:
        * html/HTMLStyleElement.idl:

2011-09-08  W. James MacLean  <wjmaclean@chromium.org>

        [chromium] Add backend compositor support for rescaling (zooming) textures during zoom animation.
        https://bugs.webkit.org/show_bug.cgi?id=66472

        This patch contains plumbing from Internals to WebViewImpl that can be removed
        at a later time when the zoom animator code is complete.

        Reviewed by James Robinson.

        Test: platform/chromium/compositing/zoom-animator-scale-test.html

        * page/Settings.cpp:
        (WebCore::Settings::Settings):
        * page/Settings.h:
        (WebCore::Settings::setZoomAnimatorScale):
        (WebCore::Settings::zoomAnimatorScale):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        (WebCore::LayerRendererChromium::drawLayersInternal):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore::LayerRendererChromium::setZoomAnimatorScale):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::setZoomAnimatorScale):
        (WebCore::CCLayerTreeHost::updateLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::setZoomAnimatorScale):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        * testing/Internals.cpp:
        (WebCore::Internals::setZoomAnimatorScale):
        * testing/Internals.h:
        * testing/Internals.idl:

2011-09-08  Eric Carlson  <eric.carlson@apple.com>

        HTMLMediaElement is missing initialTime attribute
        https://bugs.webkit.org/show_bug.cgi?id=67791

        Reviewed by Darin Adler.

        Test: media/media-initialTime.html

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::initialTime):
        * html/HTMLMediaElement.h:
        * html/HTMLMediaElement.idl:
        * platform/graphics/MediaPlayer.cpp:
        (WebCore::MediaPlayer::initialTime):
        * platform/graphics/MediaPlayer.h:
        * platform/graphics/MediaPlayerPrivate.h:
        (WebCore::MediaPlayerPrivateInterface::initialTime):

2011-09-03  Robert Hogan  <robert@webkit.org>

        Elements with position:absolute don't move to correct position after images load
        https://bugs.webkit.org/show_bug.cgi?id=54611

        Reviewed by Simon Fraser.

        Test: fast/block/positioning/absolute-layout-after-image-load.html

        In the test the 'label' block is an absolutely positioned child of an inline flow. So during layout, 
        this RenderBlock::layoutPositionedObjects fails to dirty it for rendering because it requires 
        the parent to be a BlockFlow. The code to do this was introduced in http://trac.webkit.org/changeset/8284. 
        There doesn't seem to be a good reason for requiring a BlockFlow, so remove the check. 

        Note: Although the issue is encountered only on first load without a fragment identifier, it 
        happens reliably when you include the fragment identifier in the url (#Footnote_1). This is so 
        because scrolling to the fragment always happens before the image has loaded, rendering the page 
        and clearing the initial dirty bits in the positioned element's renderer. When the image finally 
        loads in this scenario, the positioned element is otherwise clean and relies on the above code to get 
        re-rendered.

        Note: This was originally landed in r94755 but positioned-float-layout-after-image-load.html exposed
              an ASSERT bug, unrelated to this change, and was rolled out. That issue is tracked separately
              in bug 67759.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutPositionedObjects): remove the check for r->parent()->isBlockFlow() when 
                                                         deciding whether to mark children for layout

2011-09-08  Roland Steiner  <rolandsteiner@chromium.org>

        <style scoped>: Add 'scoped' attribute
        https://bugs.webkit.org/show_bug.cgi?id=67718

        Add 'scoped' attribute to IDL and attribute list,
        implement and test setting/resetting of the attribute.

        Reviewed by Dimitri Glazkov.

        Test: fast/css/style-scoped/basic-attribute.html

        * html/HTMLAttributeNames.in:
        * html/HTMLStyleElement.cpp:
        (WebCore::HTMLStyleElement::scoped):
        (WebCore::HTMLStyleElement::setScoped):
        (WebCore::HTMLStyleElement::scopingElement):
        * html/HTMLStyleElement.h:
        * html/HTMLStyleElement.idl:

2011-09-08  Erik Arvidsson  <arv@chromium.org>

        Move Element.contains to Node
        https://bugs.webkit.org/show_bug.cgi?id=67651

        Reviewed by Darin Adler.

        This moves the contains method from Element to Node as in the DOM4 working draft: 
        http://dvcs.w3.org/hg/domcore/raw-file/tip/Overview.html#dom-node-contains

        This also special cases Document contains to make it O(1) instead of O(depth).

        Tests: fast/dom/Node/contains-method.html
               perf/document-contains.html

        * dom/Element.idl:
        * dom/Node.cpp:
        (WebCore::Node::contains): Added document special case.
        * dom/Node.idl:
        * editing/DeleteSelectionCommand.cpp:
        (WebCore::DeleteSelectionCommand::mergeParagraphs): Added a null check.

2011-09-08  Chris Rogers  <crogers@google.com>

        Check AudioContext createChannelMerger() for thread safety
        https://bugs.webkit.org/show_bug.cgi?id=67247

        Reviewed by Kenneth Russell.

        Test: webaudio/audiochannelmerger-stereo.html

        * webaudio/AudioChannelMerger.cpp:
        (WebCore::AudioChannelMerger::process):
        (WebCore::AudioChannelMerger::checkNumberOfChannelsForInput):
        * webaudio/AudioChannelMerger.h:

2011-09-08  Ned Holbrook  <nholbrook@apple.com>

        Refactor hyphen measurement
        https://bugs.webkit.org/show_bug.cgi?id=67728

        Reviewed by Darin Adler.

        No new tests, purely refactoring.

        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::measureHyphenWidth): Added.
        (WebCore::setLogicalWidthForTextRun): Use measureHyphenWidth().
        (WebCore::tryHyphenating): Ditto.
        (WebCore::RenderBlock::LineBreaker::nextLineBreak): Ditto.

2011-09-08  Julien Chaffraix  <jchaffraix@webkit.org>

        Remove LayoutStateDisabler instances from RenderLayer
        https://bugs.webkit.org/show_bug.cgi?id=66896

        Reviewed by Simon Fraser.

        As part of r93614, scrollTo does not call updateLayerPositions anymore.
        This means that we don't need to disable LayoutState from the scrolling code
        in RenderLayer.

        This change is covered by the existing tests.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::updateLayerPositions): Updated the comment
        that was not accurate anymore. Also explained what is wrong with
        LayoutState vs RenderLayer now. Note that the ASSERT is still
        valid and will not trigger as the remaining calls to updateLayerPositions
        are done *outside* layout() where LayoutState is not set (thus disabled).

        (WebCore::RenderLayer::updateScrollInfoAfterLayout): Removed
        2 LayoutStateDisabler surrounding scrollToOffset.

2011-09-08  Julien Chaffraix  <jchaffraix@webkit.org>

        Factor out the code to get the first non-null RenderTableSection in RenderTable
        https://bugs.webkit.org/show_bug.cgi?id=66972

        Reviewed by Darin Adler.

        Refactoring only, covered by existing tests.

        * accessibility/AccessibilityTable.cpp:
        (WebCore::AccessibilityTable::addChildren):
        (WebCore::AccessibilityTable::cellForColumnAndRow):
        * accessibility/AccessibilityTableCell.cpp:
        (WebCore::AccessibilityTableCell::rowIndexRange):
        Updated those for the signature change in sectionBelow. Also added
        a FIXME where topSection should be used instead of iterating
        over the section (and likely missing some corner cases).

        * rendering/FixedTableLayout.cpp:
        (WebCore::FixedTableLayout::calcWidthArray):
        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::calcBorderStart):
        (WebCore::RenderTable::calcBorderEnd):
        (WebCore::RenderTable::outerBorderBefore):
        (WebCore::RenderTable::sectionAbove):
        (WebCore::RenderTable::sectionBelow):
        (WebCore::RenderTable::firstLineBoxBaseline):
        Updated all those functions to use the newly added functions. Also changed
        the variable names to match the functions.

        (WebCore::RenderTable::layout):
        (WebCore::RenderTable::topNonEmptySection): Newly added function
        that returns the top non null section of the table that has at least a
        row.

        (WebCore::RenderTable::cellAbove):
        (WebCore::RenderTable::cellBelow):
        Update the signature of those 2 functions to take an enum as it makes the
        rest of the code more readable.

        * rendering/RenderTable.h:
        (WebCore::RenderTable::topSection): Newly added function to return
        the top non null section in the table.

2011-04-19  Eric Seidel  <eric@webkit.org>

        Reviewed by Ryosuke Niwa.

        [BiDi] [CSS3] MASTER: Add support for the unicode-bidi:isolate CSS property
        https://bugs.webkit.org/show_bug.cgi?id=50912

        This patch adds support for CSS3 unicode-bidi: isolate property, under the -webkit- vendor prefix.
        Parsing support was added in a previous patch, this wires up the RenderStyle values
        to code changes in the BidiResolver.

        The effect of this patch is that it makes it possible to "isolate" runs of text
        so that their RTL-ness or LTR-ness does not bleed out into the rest of your text
        and effect layout.  This is important because many unicode characters (like parenthesis, ':', '-', etc.)
        do not have intrinsic directionality and are affected by whatever characters come before/after.
        If you have usernames which include RTL text, if you inject those usernames in your page
        you might end up with nearby characters moving!
        (like 'RTL USERNAME - my awesome site' as a title, could end up as
        'my awesome site - USERNAME RTL' when correct would be 'USERNAME RTL - my awesome site'.)
        This patch makes it possible to wrap sections of text in isolated spans, so that
        they correctly order all their RTL/LTR contents, but also correctly participate in the
        larger RTL/LTR ordering without affecting nearby characters.

        Because much of this code is old and rarely touched, I've included extra background
        information in hopes of expanding my set of potential reviewers:

        WebKit uses the standard "Unicode Bidi Algorithm" henceforth known as the UBA.
        The UBA is defined at http://unicode.org/reports/tr9/ for those not faint of heart.

        Text layout is done per-block (<div>, <p>, etc), and begins with a string of text
        (which in our case comes from the rendering tree) and a specified width.
        First:  Text is measured and wrapped into lines.
        Second: The UBA is run over the lines of text.
        Third:  WebKit builds InlineBoxes (its linebox tree) and eventually render the text.

        This patch modifies our UBA to ignore all text content inside "isolated" inlines (treating them as neutral characters)
        and then adds another step after running the UBA, where we run the UBA recursively on any
        previously identified "isolated" content.

        The result of the UBA is an ordered list of "runs" of text with the RTL runs
        correctly RTL and the LTR runs LTR.

        The UBA does three things:
        1.  It assigns a "class" to each character in a text stream (like neutral, strongly-RTL, strongly-LTR, etc.)
        2.  Divides the text stream up into "runs" of characters of the same directionality (all RTL, all LTR).
        3.  Re-orders those runs.

        The UBA in WebKit is implemented by BidiResolver<T> in BidiResolver.h

        The InlineBidiResolver (BidiResolver specialization which knows about the rendering tree)
        walks along its InlineIterators, looking at each character and running the
        Unicode Bidi Algorithm (UBA).  It walks through the rendering tree subtree under
        a block, using a (poorly named) bidiNext function which returns the next inline object.
        Each inline object (or text character there-in) has a corresponding meaning in the UBA
        such as a "strong RTL" character or a "neutral" character.  The UBA reads these sequence
        of characters, and figures out what direction (RTL or LTR) to assign to any neutral
        characters it encounters, based on surrounding characters.

        As the InlineBidiResolver is walking the rendering tree, the InlineIterator::advance()
        function calls bidiNext(), which in turn can call notifyObserverEnteredObject/notifyObserverWillExitObject
        notifying InlineBidiResolver that it is entering or exiting an "isolated"
        span, at which point it will either start or stop ignoring the stream of characters
        from the InlineIterator.  When the InlineBidiResolver is ignoring the stream of
        characters, instead of creating separate BidiRuns at each RTL/LTR boundary
        as it normally would, it instead creates one "fake" run for the entire
        isolated span.  These fake runs participate in the normal UBA run ordering process,
        but after the main UBA, a second pass is made where we examine
        the list of isolatedRuns() and run the UBA on each of them, replacing the fake
        run we previously inserted, with the resulting list of runs from that inner UBA run.
        The way it "ignores" characters is by treating them all as neutral when inside an isolate.
        Thus all the characters end up grouped in a single run, but their directionality (as a group)
        is correctly affected by any surrounding strong characters.

        If you understood that last paragraph, than the rest of the change is just plumbing.

        I added a huge number of FIXMEs to this code, because this code has a variety of
        design choices (or lack there of) which make some of this very difficult.

        For example the bidiNext iterator function has two sets of mutually exclusive
        parameters and can be used optionally with or without an observer.  Prior to this
        change there was only ever one object which cared about observing a walk over inlines
        and that was InlineBidiResolver.  This patch (regretfully) templatizes bidiNext
        to support a new Observer type.  The correct fix would be to rip bidiNext into
        multiple functions and rip need for observation out of InlineBidiResolver.
        Unfortunately I've tried both in separate bugs and failed.  This code is very very
        old and very poorly understood.  We're slowly moving forward, this is another tiny step.

        This is my fourth iteration of this patch (I'm happy to do more!), but I believe
        it's a good compromise between fixing all of the design gotcha's of our bidi
        system and doing the minimum amount to add this killer CSS feature.

        I ran the PLT.  (It averaged 0.2% faster with this change, but I attribute that to noise).

        Test: css3/unicode-bidi-isolate-basic.html and css3/unicode-bidi-isolate-aharon.html

        * platform/text/BidiResolver.h:
        (WebCore::BidiCharacterRun::setNext):
         - Needed by the new replaceRunWithRuns function.
        (WebCore::BidiResolver::BidiResolver):
        (WebCore::BidiResolver::~BidiResolver):
        (WebCore::BidiResolver::enterIsolate):
        (WebCore::BidiResolver::exitIsolate):
        (WebCore::BidiResolver::inIsolate):
        (WebCore::BidiResolver::isolatedRuns):
         - Used to track isolated spans of text as they're encoutered.
           They're stuffed away here to be processed recursively
           after the main UBA has done its thang.
        (WebCore::::appendRun):
        (WebCore::::embed):
        (WebCore::::commitExplicitEmbedding):
        (WebCore::::createBidiRunsForLine):
        * platform/text/BidiRunList.h:
        (WebCore::::replaceRunWithRuns):
         - This effectively takes all the runs from one runlist and adds them to
           this one, replacing the fake run we inserted during a previous pass of the UBA.
         - This RunList now owns the runs, so we call clear() on the other RunList
           so that we don't end up double-freeing the runs.
        (WebCore::::clear):
         - This allows us to "take" runs from another run list and then clear it.
        * rendering/BidiRun.h:
        (WebCore::BidiRun::object):
        * rendering/InlineIterator.h:
        (WebCore::InlineIterator::object):
        (WebCore::InlineIterator::offset):
        (WebCore::notifyObserverEnteredObject): Mostly just renaming and adding a FIXME about plaintext.
        (WebCore::notifyObserverWillExitObject): Mostly just renaming.
        (WebCore::addPlaceholderRunForIsolatedInline):
        (WebCore::isIsolatedInline):
        (WebCore::InlineBidiResolver::appendRun):
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::statusWithDirection):
        (WebCore::constructBidiRuns):
         - This is the heavy-lifting of this change.  This function
           runs the UBA recursively on all the previously identified isolated spans.
         - If we encounter more isolated spans in our run, we just add them to the
           main list an keep going.  Because the runs are linked lists and we have
           direct pointers to our placeholder objects, we don't care what order
           we process the placeholders in, so long as when we're done, they're all processed.
        (WebCore::RenderBlock::layoutInlineChildren):

2011-09-08  Kentaro Hara  <haraken@google.com>

        Implement a ProgressEvent constructor for JSC
        https://bugs.webkit.org/show_bug.cgi?id=67537

        Reviewed by Sam Weinig.

        The spec for the ProgressEvent constructor is here:
        http://www.w3.org/TR/progress-events/#interface-progressevent

        Test: fast/events/constructors/progress-event-constructor.html

        * bindings/generic/EventConstructors.h: Added a definition for the ProgressEvent constructor.
        * bindings/js/JSDictionary.cpp:
        (WebCore::JSDictionary::convertValue): Converts an ECMA-262 Number into an IDL unsigned long long value. Spec: http://www.w3.org/TR/WebIDL/#es-unsigned-long-long
        * bindings/js/JSEventConstructors.cpp: Added #includes for ProgressEvent.
        * dom/ProgressEvent.cpp:
        (WebCore::ProgressEventInit::ProgressEventInit):
        (WebCore::ProgressEvent::ProgressEvent):
        * dom/ProgressEvent.h: Added a definition for ProgressEventInit.
        (WebCore::ProgressEvent::create):
        * dom/ProgressEvent.idl: Makes ProgressEvent constructible.

2011-09-08  Ryosuke Niwa  <rniwa@webkit.org>

        Make bindings tests quiet after r94701.

        * bindings/scripts/test/JS/JSTestInterface.cpp:
        * bindings/scripts/test/JS/JSTestInterface.h:
        (WebCore::JSTestInterfacePrototype::JSTestInterfacePrototype):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
        (WebCore::JSTestMediaQueryListListenerPrototype::JSTestMediaQueryListListenerPrototype):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        * bindings/scripts/test/JS/JSTestObj.h:
        (WebCore::JSTestObjPrototype::JSTestObjPrototype):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
        (WebCore::JSTestSerializedScriptValueInterfacePrototype::JSTestSerializedScriptValueInterfacePrototype):

2011-09-07  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: get rid of RawSourceCode.createSourceMappingIfNeeded.
        https://bugs.webkit.org/show_bug.cgi?id=67717

        Listen to SourceMappingUpdated event instead of using createSourceMappingIfNeeded.

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation.updateAnchor):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
        (WebInspector.DebuggerPresentationModel.prototype._updateSourceMapping):
        (WebInspector.DebuggerPresentationModel.prototype._restoreBreakpoints):
        (WebInspector.DebuggerPresentationModel.prototype._restoreConsoleMessages):
        (WebInspector.DebuggerPresentationModel.prototype.setFormatSource):
        (WebInspector.DebuggerPresentationModel.prototype._consoleMessageAdded):
        (WebInspector.DebuggerPresentationModel.prototype._createPresentationMessage):
        (WebInspector.DebuggerPresentationModel.prototype._consoleCleared):
        (WebInspector.DebuggerPresentationModel.prototype.continueToLine):
        (WebInspector.DebuggerPresentationModel.prototype.messagesForUISourceCode):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerReset):
        (WebInspector.PresentationCallFrame.prototype.sourceLine.sourceMappingUpdated):
        (WebInspector.PresentationCallFrame.prototype.sourceLine):
        * inspector/front-end/SourceFile.js:

2011-09-06  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: do not re-create RawSourceCode when toggling pretty-print mode.
        https://bugs.webkit.org/show_bug.cgi?id=67647

        1) Implement RawSourceCode.setFormatted that allows toggling pretty-print mode on the fly without resetting everything.
        2) Add RawSourceCode unit tests.
        3) Remove source mapping listeners and console messages from presentation model (they live in RawSourceCode now).

        Reviewed by Yury Semikhatsky.

        Test: inspector/debugger/raw-source-code.html

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype._sourceMappingUpdated):
        (WebInspector.DebuggerPresentationModel.prototype.setFormatSource):
        (WebInspector.DebuggerPresentationModel.prototype._createRawSourceCodeId):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerReset):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._toggleFormatSource):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):
        (WebInspector.RawSourceCode.prototype.get uiSourceCode):
        (WebInspector.RawSourceCode.prototype.setFormatted):
        (WebInspector.RawSourceCode.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.prototype._saveSourceMapping):

2011-09-08  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: [REGRESSION] Clear console shortcut Ctrl + L broken
        https://bugs.webkit.org/show_bug.cgi?id=67711

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView.prototype._consoleCleared):
        (WebInspector.ConsoleView.prototype._registerShortcuts):
        (WebInspector.ConsoleView.prototype._promptKeyDown):

2011-09-08  Andras Becsi  <andras.becsi@nokia.com>

        [Qt] Build fails with strict compiler
        https://bugs.webkit.org/show_bug.cgi?id=67778

        Reviewed by Csaba Osztrogonác.

        No new tests needed.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::resizeEdgeTiles): Remove unused contentsRect variable
        which's usage was removed in r94681 to fix the build with [-Werror=unused-but-set-variable].

2011-09-08  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94695.
        http://trac.webkit.org/changeset/94695
        https://bugs.webkit.org/show_bug.cgi?id=67776

        Hitting an assertion on Snow Leopard, Qt, GTK (Requested by
        Zoltan on #webkit).

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::positionedFloatsNeedRelayout):
        (WebCore::RenderBlock::layoutPositionedObjects):

2011-09-08  Alexander Pavlov  <apavlov@chromium.org>

        Unreviewed, strip trailing whitespace in the Web Inspector frontend (*.js and *.css).

        * inspector/front-end/ApplicationCacheItemsView.js:
        * inspector/front-end/AuditResultView.js:
        * inspector/front-end/BinarySearch.js:
        * inspector/front-end/CSSStyleModel.js:
        * inspector/front-end/ConsoleMessage.js:
        * inspector/front-end/ConsoleModel.js:
        * inspector/front-end/ConsoleView.js:
        * inspector/front-end/CookieItemsView.js:
        * inspector/front-end/CookieParser.js:
        * inspector/front-end/DOMAgent.js:
        * inspector/front-end/DOMStorage.js:
        * inspector/front-end/DOMStorageItemsView.js:
        * inspector/front-end/DataGrid.js:
        * inspector/front-end/Database.js:
        * inspector/front-end/DatabaseQueryView.js:
        * inspector/front-end/DetailedHeapshotGridNodes.js:
        * inspector/front-end/DetailedHeapshotView.js:
        * inspector/front-end/ElementsTreeOutline.js:
        * inspector/front-end/EmptyView.js:
        * inspector/front-end/EventListenersSidebarPane.js:
        * inspector/front-end/ExtensionCommon.js:
        * inspector/front-end/GoToLineDialog.js:
        * inspector/front-end/HeapSnapshot.js:
        * inspector/front-end/HeapSnapshotProxy.js:
        * inspector/front-end/HeapSnapshotWorkerDispatcher.js:
        * inspector/front-end/ImageView.js:
        * inspector/front-end/InjectedFakeWorker.js:
        * inspector/front-end/InspectorFrontendHostStub.js:
        * inspector/front-end/MetricsSidebarPane.js:
        * inspector/front-end/NetworkManager.js:
        * inspector/front-end/NetworkPanel.js:
        * inspector/front-end/ObjectPropertiesSection.js:
        * inspector/front-end/PartialQuickSort.js:
        * inspector/front-end/ProfileView.js:
        * inspector/front-end/ProfilesPanel.js:
        * inspector/front-end/RemoteObject.js:
        * inspector/front-end/Resource.js:
        * inspector/front-end/ResourceCategory.js:
        * inspector/front-end/ResourceHTMLView.js:
        * inspector/front-end/ResourceHeadersView.js:
        * inspector/front-end/ResourceJSONView.js:
        * inspector/front-end/ResourceTimingView.js:
        * inspector/front-end/ResourceTreeModel.js:
        * inspector/front-end/ResourceView.js:
        * inspector/front-end/ResourcesPanel.js:
        * inspector/front-end/SearchController.js:
        * inspector/front-end/SettingsScreen.js:
        * inspector/front-end/ShortcutsScreen.js:
        * inspector/front-end/SourceCSSTokenizer.js:
        * inspector/front-end/SourceHTMLTokenizer.js:
        * inspector/front-end/SourceJavaScriptTokenizer.js:
        * inspector/front-end/StatusBarButton.js:
        * inspector/front-end/TextEditorModel.js:
        * inspector/front-end/TimelineGrid.js:
        * inspector/front-end/View.js:
        * inspector/front-end/heapProfiler.css:
        * inspector/front-end/inspector.css:
        * inspector/front-end/inspector.js:
        * inspector/front-end/inspectorSyntaxHighlight.css:
        * inspector/front-end/networkPanel.css:
        * inspector/front-end/treeoutline.js:
        * inspector/front-end/utilities.js:

2011-09-07  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: trying to scroll mouse wheel when in TextViewer's gutter pane causes EventException::DISPATCH_REQUEST_ERR
        https://bugs.webkit.org/show_bug.cgi?id=67715

        Reviewed by Yury Semikhatsky.

        - avoid exception on attempt to dispatch an event that is being dispatched by cloning the event.

        * inspector/front-end/TextViewer.js:
        (WebInspector.TextViewer.forwardWheelEvent):
        (WebInspector.TextViewer):

2011-09-07  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94674 and r94689.
        http://trac.webkit.org/changeset/94674
        http://trac.webkit.org/changeset/94689
        https://bugs.webkit.org/show_bug.cgi?id=67754

        Broke inspector/debugger/script-formatter.html (Requested by
        rniwa on #webkit).

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype.addSourceMappingListener):
        (WebInspector.DebuggerPresentationModel.prototype.removeSourceMappingListener):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype._sourceMappingUpdated):
        (WebInspector.DebuggerPresentationModel.prototype._restoreBreakpoints):
        (WebInspector.DebuggerPresentationModel.prototype.setFormatSource):
        (WebInspector.DebuggerPresentationModel.prototype._createRawSourceCodeId):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerReset):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._toggleFormatSource):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):
        (WebInspector.RawSourceCode.prototype.get uiSourceCode):
        (WebInspector.RawSourceCode.prototype.get rawSourceCode):
        (WebInspector.RawSourceCode.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.prototype.requestContent):
        (WebInspector.RawSourceCode.prototype._saveSourceMapping):

2011-09-07  Julien Chaffraix  <jchaffraix@webkit.org>

        offsetFromRoot optimization is disabled after r93837
        https://bugs.webkit.org/show_bug.cgi?id=67677

        Reviewed by Simon Fraser.

        Unfortunately not covered by any test as it does not change updateLayerPosition complexity (it is still O(n^2)
        because of clippedOverflowRectForRepaint). However it is a noticeable slowdown on some use cases but we don't
        have a good test harness to cover such slowdown.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::updateLayerPositions): Pass offsetFromRoot as not doing so means that we miss
        the optimization altogether.

        (WebCore::RenderLayer::computeRepaintRects):
        (WebCore::RenderLayer::updateLayerPositionsAfterScroll):
        * rendering/RenderLayer.h:
        Renamed |cachedOffset| to |offsetFromRoot| to be consistent with our latest renaming.

2011-09-07  Ryosuke Niwa  <rniwa@webkit.org>

        Windows build fix after r94737.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::adjustRectForColumns):

2011-09-07  Dan Bernstein  <mitz@apple.com>

        Removed hyphenation function implementations for an usupported build configuration.

        Reviewed by Sam Weinig.

        * platform/text/cf/HyphenationCF.cpp:

2011-09-07  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67739

        adjustRectForColumns is O(# of columns) when it can be O(1). Fix the slow performance of this
        function by removing the loop and just computing the start and end column for a repaint rect
        and uniting everything in between.

        Reviewed by Dan Bernstein.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::adjustRectForColumns):

2011-09-07  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94714 and r94723.
        http://trac.webkit.org/changeset/94714
        http://trac.webkit.org/changeset/94723
        https://bugs.webkit.org/show_bug.cgi?id=67746

        breaks gtk-linux tests with assertion failure (Requested by
        thorton on #webkit).

        * platform/graphics/GraphicsContext.cpp:
        (WebCore::GraphicsContext::GraphicsContext):
        (WebCore::GraphicsContext::~GraphicsContext):
        * platform/graphics/GraphicsContext.h:
        (WebCore::GraphicsContext::inTransparencyLayer):
        * platform/graphics/cairo/GraphicsContextCairo.cpp:
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        * platform/graphics/cairo/GraphicsContextPlatformPrivateCairo.h:
        (WebCore::GraphicsContextPlatformPrivate::beginTransparencyLayer):
        (WebCore::GraphicsContextPlatformPrivate::endTransparencyLayer):
        * platform/graphics/cg/GraphicsContextCG.cpp:
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        * platform/graphics/cg/GraphicsContextPlatformPrivateCG.h:
        (WebCore::GraphicsContextPlatformPrivate::GraphicsContextPlatformPrivate):
        (WebCore::GraphicsContextPlatformPrivate::~GraphicsContextPlatformPrivate):
        (WebCore::GraphicsContextPlatformPrivate::beginTransparencyLayer):
        (WebCore::GraphicsContextPlatformPrivate::endTransparencyLayer):
        * platform/graphics/haiku/GraphicsContextHaiku.cpp:
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        * platform/graphics/mac/FontMac.mm:
        (WebCore::Font::drawGlyphs):
        * platform/graphics/openvg/GraphicsContextOpenVG.cpp:
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        * platform/graphics/qt/GraphicsContextQt.cpp:
        (WebCore::GraphicsContext::inTransparencyLayer):
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        * platform/graphics/skia/GraphicsContextSkia.cpp:
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        * platform/graphics/win/FontCGWin.cpp:
        (WebCore::drawGDIGlyphs):
        * platform/graphics/win/GraphicsContextCGWin.cpp:
        (WebCore::GraphicsContext::releaseWindowsContext):
        * platform/graphics/win/GraphicsContextCairoWin.cpp:
        (WebCore::GraphicsContext::releaseWindowsContext):
        * platform/graphics/win/GraphicsContextWin.cpp:
        (WebCore::GraphicsContext::inTransparencyLayer):
        (WebCore::GraphicsContext::getWindowsContext):
        * platform/graphics/wince/GraphicsContextWinCE.cpp:
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        * platform/graphics/wx/GraphicsContextWx.cpp:
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        * platform/win/ScrollbarThemeWin.cpp:
        (WebCore::ScrollbarThemeWin::paintTrackPiece):
        (WebCore::ScrollbarThemeWin::paintButton):
        (WebCore::ScrollbarThemeWin::paintThumb):
        * plugins/win/PluginViewWin.cpp:
        (WebCore::PluginView::paint):
        * rendering/RenderThemeWin.cpp:
        (WebCore::drawControl):

2011-09-07  Chris Fleizach  <cfleizach@apple.com>

        Changes to aria-hidden don't change VO navigation
        https://bugs.webkit.org/show_bug.cgi?id=67722

        Reviewed by Darin Adler.

        When altering aria-hidden, WebCore needs to update the children caches of 
        affected elements. However, for elements that were children, but ignored, their
        caches did not get updated, and stale information would be propagated.

        The fix is to always clearChildren() when a parent is asking for children. This 
        ensures information is always up to date when the parent itself is asking for new data.

        Test: accessibility/aria-hidden-updates-alldescendants.html

        * accessibility/AccessibilityObject.h:
        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::ariaIsHidden):
        (WebCore::AccessibilityRenderObject::childrenChanged):
        (WebCore::AccessibilityRenderObject::addChildren):

2011-09-07  Tim Horton  <timothy_horton@apple.com>

        Text rendered with a simple (i.e. 0px blur) shadow inside a transparency layer has a double shadow
        https://bugs.webkit.org/show_bug.cgi?id=67543
        <rdar://problem/10070536>

        Reviewed by Simon Fraser.

        Generalize (begin|end)TransparencyLayer, which now forward
        through to (begin|end)PlatformTransparencyLayer, so that
        isInTransparencyLayer can exist on every platform.

        Make use of isInTransparencyLayer in FontMac to disable
        "simple" shadow drawing when the text is being rendered
        into a transparency layer.

        Test: svg/custom/simple-text-double-shadow.svg

        * platform/graphics/GraphicsContext.cpp:
        (WebCore::GraphicsContext::GraphicsContext):
        (WebCore::GraphicsContext::~GraphicsContext):
        (WebCore::GraphicsContext::beginTransparencyLayer):
        (WebCore::GraphicsContext::endTransparencyLayer):
        (WebCore::GraphicsContext::isInTransparencyLayer):
        * platform/graphics/GraphicsContext.h:
        * platform/graphics/cairo/GraphicsContextCairo.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/cairo/GraphicsContextPlatformPrivateCairo.h:
        * platform/graphics/cg/GraphicsContextCG.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/cg/GraphicsContextPlatformPrivateCG.h:
        (WebCore::GraphicsContextPlatformPrivate::GraphicsContextPlatformPrivate):
        * platform/graphics/haiku/GraphicsContextHaiku.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/mac/FontMac.mm:
        (WebCore::Font::drawGlyphs):
        * platform/graphics/openvg/GraphicsContextOpenVG.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/qt/GraphicsContextQt.cpp:
        (WebCore::GraphicsContext::isInTransparencyLayer):
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/skia/GraphicsContextSkia.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/win/FontCGWin.cpp:
        (WebCore::drawGDIGlyphs):
        * platform/graphics/win/GraphicsContextCGWin.cpp:
        (WebCore::GraphicsContext::releaseWindowsContext):
        * platform/graphics/win/GraphicsContextCairoWin.cpp:
        (WebCore::GraphicsContext::releaseWindowsContext):
        * platform/graphics/win/GraphicsContextWin.cpp:
        (WebCore::GraphicsContext::getWindowsContext):
        * platform/graphics/wince/GraphicsContextWinCE.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/graphics/wx/GraphicsContextWx.cpp:
        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
        (WebCore::GraphicsContext::supportsTransparencyLayers):
        * platform/win/ScrollbarThemeWin.cpp:
        * plugins/win/PluginViewWin.cpp:
        * rendering/RenderThemeWin.cpp:

2011-09-07  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/8881922> Support the hyphenate-limit-lines property
        https://bugs.webkit.org/show_bug.cgi?id=67730

        Reviewed by Dave Hyatt.

        Tests: fast/css/parsing-hyphenate-limit-lines.html
               fast/text/hyphenate-limit-lines.html

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue): Added hyphenate-limit-lines.
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue): Ditto. Valid values are non-negative integers and the keyword
        "no-limit".
        * css/CSSPropertyNames.in: Added -webkit-hyphenate-limit-lines.
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty): Added hyphenate-limit-lines.
        * css/CSSValueKeywords.in: Added the "no-limit" value keyword.
        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::layoutRunsAndFloats): Count the number of consecutive hyphenated lines
        before the start line and pass it to layoutRunsAndFloatsInRange().
        (WebCore::RenderBlock::layoutRunsAndFloatsInRange): Keep track of the number of consecutive
        hyphenated lines before the current line and pass it to LineBreaker::nextLineBreak().
        (WebCore::tryHyphenating): Added parameters for the number of consecutive hyphenated lines before
        the current line and the limit on consecutive hyphenated lines, and an early return if the limit
        has been reached.
        (WebCore::RenderBlock::LineBreaker::nextLineBreak): Added a parameter for the number of consecutive
        hyphenated lines before the current line, which is passed through to tryHyphenating, along with
        the value of hyphenate-limit-lines.
        * rendering/RootInlineBox.cpp:
        (WebCore::RootInlineBox::isHyphenated): Added. Returns true if the line was hyphenated.
        * rendering/RootInlineBox.h:
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::hyphenationLimitLines): Added this getter.
        (WebCore::InheritedFlags::setHyphenationLimitLines): Added this setter.
        (WebCore::InheritedFlags::initialHyphenationLimitLines): Added. The initial value is -1,
        corresponding to "no-limit".
        * rendering/style/StyleRareInheritedData.cpp:
        (WebCore::StyleRareInheritedData::StyleRareInheritedData): Initialize new member variable.
        (WebCore::StyleRareInheritedData::operator==): Compare new member variable.
        * rendering/style/StyleRareInheritedData.h:

2011-09-02  Ojan Vafai  <ojan@chromium.org>

        split overrideSize into overrideHeight and overrideWidth
        https://bugs.webkit.org/show_bug.cgi?id=67550

        Reviewed by Sam Weinig.

        All uses of overrideSize only set one of the width or the height.
        This change removes a bool from RenderObject and removes some
        flexbox specific logic from RenderBox.

        The only downside is that we have two global maps where we used
        to have one.

        No functional changes so existing tests are sufficient.

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::hasOverrideHeight):
        (WebCore::RenderBox::hasOverrideWidth):
        (WebCore::RenderBox::setOverrideHeight):
        (WebCore::RenderBox::setOverrideWidth):
        (WebCore::RenderBox::clearOverrideSize):
        (WebCore::RenderBox::overrideWidth):
        (WebCore::RenderBox::overrideHeight):
        (WebCore::RenderBox::computeLogicalWidth):
        (WebCore::RenderBox::computeLogicalHeight):
        (WebCore::RenderBox::computePercentageLogicalHeight):
        * rendering/RenderBox.h:
        * rendering/RenderDeprecatedFlexibleBox.cpp:
        (WebCore::RenderDeprecatedFlexibleBox::layoutHorizontalBox):
        (WebCore::RenderDeprecatedFlexibleBox::layoutVerticalBox):
        (WebCore::RenderDeprecatedFlexibleBox::applyLineClamp):
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildrenHorizontal):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::RenderObject):
        * rendering/RenderObject.h:
        * rendering/RenderTableCell.cpp:
        (WebCore::RenderTableCell::setOverrideHeightFromRowHeight):
        * rendering/RenderTableCell.h:
        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::calcRowLogicalHeight):
        (WebCore::RenderTableSection::layoutRows):

2011-09-07  Alexei Svitkine  <asvitkine@chromium.org>

        Add test infrastructure to test rubber-banding overhang drawing along with layout tests for existing Chromium Mac overhang drawing in the non-gpu path.
        https://bugs.webkit.org/show_bug.cgi?id=67511

        Reviewed by Dimitri Glazkov.

        Tests: platform/chromium-mac/rubberbanding/overhang-e.html
               platform/chromium-mac/rubberbanding/overhang-n.html
               platform/chromium-mac/rubberbanding/overhang-ne.html
               platform/chromium-mac/rubberbanding/overhang-nw.html
               platform/chromium-mac/rubberbanding/overhang-s.html
               platform/chromium-mac/rubberbanding/overhang-se.html
               platform/chromium-mac/rubberbanding/overhang-sw.html
               platform/chromium-mac/rubberbanding/overhang-w.html

        * WebCore.exp.in:
        * platform/ScrollableArea.h:
        * testing/Internals.cpp:
        (WebCore::Internals::setScrollViewPosition):
        * testing/Internals.h:
        * testing/Internals.idl:

2011-09-07  David Reveman  <reveman@chromium.org>

        [Chromium] Render surface anti-aliasing.
        https://bugs.webkit.org/show_bug.cgi?id=66437

        Reviewed by James Robinson.

        Add CCLayerQuad class and CCLayerQuad::Edge subclass to allow
        edge computations to be shared between tiled layers and render
        surfaces. Move isCCW utility function to FloatQuad class and
        add to2dTransform method to TransformationMatrix class. Add
        necessary anti-aliasing shaders for render surfaces and use them
        to avoid aliased edges.

        Tests: compositing/reflections/nested-reflection-transformed.html (existing)

        * WebCore.gypi:
        * platform/graphics/FloatQuad.cpp:
        (WebCore::FloatQuad::isCounterclockwise):
        * platform/graphics/FloatQuad.h:
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::drawTexturedQuad):
        * platform/graphics/chromium/LayerChromium.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        (WebCore::LayerRendererChromium::headsUpDisplayProgram):
        (WebCore::LayerRendererChromium::renderSurfaceProgram):
        (WebCore::LayerRendererChromium::renderSurfaceProgramAA):
        (WebCore::LayerRendererChromium::renderSurfaceMaskProgram):
        (WebCore::LayerRendererChromium::renderSurfaceMaskProgramAA):
        (WebCore::LayerRendererChromium::tilerProgramSwizzle):
        (WebCore::LayerRendererChromium::canvasLayerProgram):
        (WebCore::LayerRendererChromium::pluginLayerProgram):
        (WebCore::LayerRendererChromium::videoLayerRGBAProgram):
        (WebCore::LayerRendererChromium::videoLayerYUVProgram):
        (WebCore::LayerRendererChromium::cleanupSharedObjects):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore::LayerRendererChromium::sharedGeometryQuad):
        * platform/graphics/chromium/ShaderChromium.cpp:
        (WebCore::VertexShaderQuad::VertexShaderQuad):
        (WebCore::VertexShaderQuad::init):
        (WebCore::VertexShaderQuad::getShaderString):
        (WebCore::FragmentShaderRGBATexAlphaAA::FragmentShaderRGBATexAlphaAA):
        (WebCore::FragmentShaderRGBATexAlphaAA::init):
        (WebCore::FragmentShaderRGBATexAlphaAA::getShaderString):
        (WebCore::FragmentTexClampAlphaAABinding::FragmentTexClampAlphaAABinding):
        (WebCore::FragmentTexClampAlphaAABinding::init):
        (WebCore::FragmentShaderRGBATexClampAlphaAA::getShaderString):
        (WebCore::FragmentShaderRGBATexClampSwizzleAlphaAA::getShaderString):
        (WebCore::FragmentShaderRGBATexAlphaMaskAA::FragmentShaderRGBATexAlphaMaskAA):
        (WebCore::FragmentShaderRGBATexAlphaMaskAA::init):
        (WebCore::FragmentShaderRGBATexAlphaMaskAA::getShaderString):
        * platform/graphics/chromium/ShaderChromium.h:
        (WebCore::VertexShaderQuad::matrixLocation):
        (WebCore::VertexShaderQuad::pointLocation):
        (WebCore::FragmentShaderRGBATexAlphaAA::alphaLocation):
        (WebCore::FragmentShaderRGBATexAlphaAA::samplerLocation):
        (WebCore::FragmentShaderRGBATexAlphaAA::edgeLocation):
        (WebCore::FragmentShaderRGBATexAlphaMaskAA::alphaLocation):
        (WebCore::FragmentShaderRGBATexAlphaMaskAA::samplerLocation):
        (WebCore::FragmentShaderRGBATexAlphaMaskAA::maskSamplerLocation):
        (WebCore::FragmentShaderRGBATexAlphaMaskAA::edgeLocation):
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
        (WebCore::CCCanvasLayerImpl::draw):
        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
        (WebCore::CCHeadsUpDisplay::draw):
        * platform/graphics/chromium/cc/CCLayerQuad.cpp: Added.
        (WebCore::CCLayerQuad::Edge::Edge):
        (WebCore::CCLayerQuad::CCLayerQuad):
        (WebCore::CCLayerQuad::floatQuad):
        (WebCore::CCLayerQuad::toFloatArray):
        * platform/graphics/chromium/cc/CCLayerQuad.h: Added.
        (WebCore::CCLayerQuad::Edge::Edge):
        (WebCore::CCLayerQuad::Edge::x):
        (WebCore::CCLayerQuad::Edge::y):
        (WebCore::CCLayerQuad::Edge::z):
        (WebCore::CCLayerQuad::Edge::setX):
        (WebCore::CCLayerQuad::Edge::setY):
        (WebCore::CCLayerQuad::Edge::setZ):
        (WebCore::CCLayerQuad::Edge::set):
        (WebCore::CCLayerQuad::Edge::moveX):
        (WebCore::CCLayerQuad::Edge::moveY):
        (WebCore::CCLayerQuad::Edge::moveZ):
        (WebCore::CCLayerQuad::Edge::move):
        (WebCore::CCLayerQuad::Edge::scaleX):
        (WebCore::CCLayerQuad::Edge::scaleY):
        (WebCore::CCLayerQuad::Edge::scaleZ):
        (WebCore::CCLayerQuad::Edge::scale):
        (WebCore::CCLayerQuad::Edge::intersect):
        (WebCore::CCLayerQuad::CCLayerQuad):
        (WebCore::CCLayerQuad::left):
        (WebCore::CCLayerQuad::top):
        (WebCore::CCLayerQuad::right):
        (WebCore::CCLayerQuad::bottom):
        (WebCore::CCLayerQuad::inflateX):
        (WebCore::CCLayerQuad::inflateY):
        (WebCore::CCLayerQuad::inflate):
        (WebCore::CCLayerQuad::inflateAntiAliasingDistance):
        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
        (WebCore::CCPluginLayerImpl::draw):
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::draw):
        (WebCore::CCRenderSurface::drawLayer):
        (WebCore::CCRenderSurface::drawSurface):
        * platform/graphics/chromium/cc/CCRenderSurface.h:
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::draw):
        (WebCore::CCTiledLayerImpl::drawTiles):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::drawYUV):
        (WebCore::CCVideoLayerImpl::drawRGBA):
        * platform/graphics/transforms/TransformationMatrix.cpp:
        (WebCore::TransformationMatrix::to2dTransform):
        * platform/graphics/transforms/TransformationMatrix.h:

2011-09-06  Oliver Hunt  <oliver@apple.com>

        Remove JSObjectWithGlobalObject
        https://bugs.webkit.org/show_bug.cgi?id=67689

        Reviewed by Geoff Garen.

        Remove use of anonymous storage and JSObjectWithGlobalObject for
        accessing a JSObject's global object now that they're available
        on the object's structure.

        * bindings/js/JSDOMWindowShell.cpp:
        (WebCore::JSDOMWindowShell::setWindow):
        * bindings/js/JSDOMWrapper.h:
        (WebCore::JSDOMWrapper::globalObject):
        (WebCore::JSDOMWrapper::JSDOMWrapper):
        * bindings/js/WorkerScriptController.cpp:
        (WebCore::WorkerScriptController::initScript):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        (GenerateImplementation):
        * bridge/objc/objc_runtime.h:
        * bridge/objc/objc_runtime.mm:
        (JSC::Bindings::ObjcFallbackObjectImp::ObjcFallbackObjectImp):
        (JSC::Bindings::ObjcFallbackObjectImp::finishCreation):
        * bridge/runtime_object.cpp:
        (JSC::Bindings::RuntimeObject::RuntimeObject):
        (JSC::Bindings::RuntimeObject::finishCreation):
        * bridge/runtime_object.h:

2011-09-07  Ryosuke Niwa  <rniwa@webkit.org>

        Mac build fix after r94694.

        * WebCore.xcodeproj/project.pbxproj:

2011-09-07  Tim Horton  <timothy_horton@apple.com>

        FELighting is using width instead of height to determine skip for parallel(n>2) case
        https://bugs.webkit.org/show_bug.cgi?id=67719
        <rdar://problem/10086178>

        Reviewed by Dirk Schulze.

        No new tests, because the bug only exhibits under conditions which are currently
        impossible by default (using more than 2 cores) on some platforms.

        * platform/graphics/filters/FELighting.cpp:
        (WebCore::FELighting::platformApplyGeneric):

2011-09-07  W. James MacLean  <wjmaclean@chromium.org>

        Eliminate motion jitter in animated, blurred SVG image
        https://bugs.webkit.org/show_bug.cgi?id=67503

        Fixes filter shear-free transform applied to SVG images.

        In applyResource() the shearFreeAbsoluteTransform is applied to the drawing region,
        which is based on the object bounding box (which doesn't move). For a rotation
        around the centre of the box, this should really just be the identity matrix,
        since the BB should neither change size nor location. So really, we're just interested
        in the scale change of the BB here, and not in moving it.

        This impacts how slices are extracted, and affects the {x|y}Mid and {x|y}Max extractions
        for vertical and horizontal slices, so the test verifies these.

        Reviewed by Dirk Schulze.

        Test: svg/W3C-SVG-1.1-SE/filters-image-05-f.svg

        * rendering/svg/RenderSVGResourceFilter.cpp:
        (WebCore::RenderSVGResourceFilter::applyResource):

2011-09-03  Robert Hogan  <robert@webkit.org>

        Elements with position:absolute don't move to correct position after images load
        https://bugs.webkit.org/show_bug.cgi?id=54611

        Reviewed by Simon Fraser.

        Test: fast/block/positioning/absolute-layout-after-image-load.html
              fast/block/positioning/positioned-float-layout-after-image-load.html

        In the test the 'label' block is an absolutely positioned child of an inline flow. So during layout, 
        this RenderBlock::layoutPositionedObjects fails to dirty it for rendering because it requires 
        the parent to be a BlockFlow. The code to do this was introduced in http://trac.webkit.org/changeset/8284. 
        There doesn't seem to be a good reason for requiring a BlockFlow, so remove the check. Do the same
        for positioned floats in RenderBlock::positionedFloatsNeedRelayout(), although currently layoutPositionedObjects()
        takes care of it this at least ensures no regression in future.

        Note: Although the issue is encountered only on first load without a fragment identifier, it 
        happens reliably when you include the fragment identifier in the url (#Footnote_1). This is so 
        because scrolling to the fragment always happens before the image has loaded, rendering the page 
        and clearing the initial dirty bits in the positioned element's renderer. When the image finally 
        loads in this scenario, the positioned element is otherwise clean and relies on the above code to get 
        re-rendered.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutPositionedObjects): remove the check for r->parent()->isBlockFlow() when 
                                                         deciding whether to mark children for layout
        (WebCore::RenderBlock::positionedFloatsNeedRelayout): ditto

2011-09-07  Anna Cavender  <annacc@chromium.org>

        Moving platform/track to html/track to avoid layering violation.
        https://bugs.webkit.org/show_bug.cgi?id=67680

        Reviewed by Adam Barth.

        No new tests. No new functionality.

        * CMakeLists.txt:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * WebCore.pri:
        * WebCore.pro:
        * html/track/CueParser.cpp: Renamed from Source/WebCore/platform/track/CueParser.cpp.
        * html/track/CueParser.h: Renamed from Source/WebCore/platform/track/CueParser.h.
        * html/track/CueParserPrivate.h: Renamed from Source/WebCore/platform/track/CueParserPrivate.h.
        * html/track/WebVTTParser.cpp: Renamed from Source/WebCore/platform/track/WebVTTParser.cpp.
        * html/track/WebVTTParser.h: Renamed from Source/WebCore/platform/track/WebVTTParser.h.
        * html/track/WebVTTToken.h: Renamed from Source/WebCore/platform/track/WebVTTToken.h.
        * html/track/WebVTTTokenizer.cpp: Renamed from Source/WebCore/platform/track/WebVTTTokenizer.cpp.
        * html/track/WebVTTTokenizer.h: Renamed from Source/WebCore/platform/track/WebVTTTokenizer.h.

2011-09-07  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67286

        REGRESSION: css2.1/t090204-display-change-01-b-ao.html fails after r94084.

        Make sure that the trailing floats line box explicitly sets the line top with leading and line bottom with
        leading to just be the block height.

        Reviewed by Dan Bernstein.

        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::linkToEndLineIfNeeded):

2011-09-06  Abhishek Arya  <inferno@chromium.org>

        Null owningRenderer crash in RenderScrollbar::updateScrollbarParts.
        https://bugs.webkit.org/show_bug.cgi?id=67669

        Reviewed by James Robinson.

        Owning renderer can be cleared for custom scrollbars in clearOwningRenderer()
        call. We need a null check in updateScrollbarParts, so that we do not crash.

        No tests since issue seen in crash reports only and I donot know a way to
        reproduce.

        * rendering/RenderScrollbar.cpp:
        (WebCore::RenderScrollbar::updateScrollbarParts):

2011-09-05  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        [Qt][WK2] Make TiledDrawingArea request tiles only in the direction the viewport is panned to.
        https://bugs.webkit.org/show_bug.cgi?id=67606

        Reviewed by Noam Rosenthal.

        TiledBackingStore previously used different values for horizontal and vertial multiplication
        to calculate the cover area.
        This patch replaces this mechanism, used to give a bigger panning range to vertical panning,
        with the possibility to use the motion vector of the viewport to request tiles ahead instead.
        This allows economies on rendering resources as tiles won't be rendered beside the trajectory
        of the viewport.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::TiledBackingStore):
        (WebCore::TiledBackingStore::setKeepAndCoverAreaMultipliers):
        (WebCore::TiledBackingStore::setCoverAreaFocusVector):
        (WebCore::TiledBackingStore::createTiles):
        (WebCore::TiledBackingStore::calculateKeepRect):
        (WebCore::TiledBackingStore::calculateCoverRect):
        * platform/graphics/TiledBackingStore.h:
        (WebCore::TiledBackingStore::getKeepAndCoverAreaMultipliers):

2011-09-01  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        [Qt] TiledBackingStore: Import the resizeEdgeTiles logic from TiledDrawindAreaProxy.
        https://bugs.webkit.org/show_bug.cgi?id=67416

        Reviewed by Kenneth Rohde Christiansen.

        Original code by Antti Koivisto.
        With the current code, when the page is layouted during load, edge tiles will
        get removed instead of continuing to show their front buffer while the tile
        is being rendered for the new size.

        * platform/graphics/Tile.h:
        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::createTiles):
        (WebCore::TiledBackingStore::resizeEdgeTiles):
        * platform/graphics/TiledBackingStore.h:
        * platform/graphics/qt/TileQt.cpp:
        (WebCore::TileQt::resize):
        * platform/graphics/qt/TileQt.h:

2011-09-07  Tim Horton  <timothy_horton@apple.com>

        Don't round-trip through TransformationMatrix in SVGImageBufferTools::clearAffineTransform2DRotation
        https://bugs.webkit.org/show_bug.cgi?id=67242
        <rdar://problem/10069770>

        Reviewed by Dirk Schulze.

        No new tests, minor performance improvement.

        * platform/graphics/transforms/AffineTransform.cpp:
        (WebCore::AffineTransform::blend):
        (WebCore::AffineTransform::decompose):
        (WebCore::AffineTransform::recompose):
        * platform/graphics/transforms/AffineTransform.h:
        * rendering/svg/SVGImageBufferTools.cpp:
        (WebCore::SVGImageBufferTools::clear2DRotation):

2011-09-06  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: do not re-create RawSourceCode when toggling pretty-print mode.
        https://bugs.webkit.org/show_bug.cgi?id=67647

        1) Implement RawSourceCode.setFormatted that allows toggling pretty-print mode on the fly without resetting everything.
        2) Add RawSourceCode unit tests.
        3) Remove source mapping listeners and console messages from presentation model (they live in RawSourceCode now).

        Reviewed by Yury Semikhatsky.

        Test: inspector/debugger/raw-source-code.html

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype._sourceMappingUpdated):
        (WebInspector.DebuggerPresentationModel.prototype.setFormatSource):
        (WebInspector.DebuggerPresentationModel.prototype._createRawSourceCodeId):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerReset):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._toggleFormatSource):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):
        (WebInspector.RawSourceCode.prototype.get uiSourceCode):
        (WebInspector.RawSourceCode.prototype.setFormatted):
        (WebInspector.RawSourceCode.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.prototype._saveSourceMapping):

2011-09-07  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: Implement circular tabbing through the Styles sidebar pane contents
        https://bugs.webkit.org/show_bug.cgi?id=67127

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/Section.js:
        (WebInspector.Section.prototype.get firstSibling):
        (WebInspector.Section.prototype.get lastSibling):
        * inspector/front-end/StylesSidebarPane.js:
        (WebInspector.StylePropertiesSection.prototype.nextEditableSibling):
        (WebInspector.StylePropertiesSection.prototype.previousEditableSibling):
        (WebInspector.StylePropertiesSection.prototype.startEditingSelector):
        (WebInspector.StylePropertiesSection.prototype._moveEditorFromSelector):
        (WebInspector.StylePropertiesSection.prototype.editingSelectorCommitted.successCallback):
        (WebInspector.StylePropertiesSection.prototype.editingSelectorCommitted):
        (WebInspector.StylePropertyTreeElement.prototype):
        (WebInspector.StylePropertyTreeElement.prototype.element.userInput.previousContent.context.moveDirection):

2011-09-02  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: [Extensions API] expose console API
        https://bugs.webkit.org/show_bug.cgi?id=67506

        Reviewed by Pavel Feldman.

        Test: inspector/extensions/extensions-console.html

        * inspector/front-end/ConsoleMessage.js:
        (WebInspector.ConsoleMessage.prototype.get text):
        (WebInspector.ConsoleMessage.prototype.get parameters):
        * inspector/front-end/ExtensionAPI.js:
        (WebInspector.injectedExtensionAPI.InspectorExtensionAPI):
        (WebInspector.injectedExtensionAPI):
        (WebInspector.injectedExtensionAPI.Console.prototype.getMessages):
        (WebInspector.injectedExtensionAPI.Console.prototype.addMessage):
        (WebInspector.injectedExtensionAPI.Console.prototype.get MessageLevel):
        (WebInspector.injectedExtensionAPI.Network.dispatchRequestEvent):
        (WebInspector.injectedExtensionAPI.Network):
        (WebInspector.injectedExtensionAPI.AuditCategoryImpl.dispatchAuditEvent):
        (WebInspector.injectedExtensionAPI.AuditCategoryImpl):
        (WebInspector.injectedExtensionAPI.InspectedWindow.dispatchResourceEvent):
        (WebInspector.injectedExtensionAPI.InspectedWindow.dispatchResourceContentEvent):
        (WebInspector.injectedExtensionAPI.InspectedWindow):
        * inspector/front-end/ExtensionCommon.js:
        (WebInspector.commonExtensionSymbols):
        * inspector/front-end/ExtensionServer.js:
        (WebInspector.ExtensionServer):
        (WebInspector.ExtensionServer.prototype._notifyConsoleMessageAdded):
        (WebInspector.ExtensionServer.prototype._onGetConsoleMessages):
        (WebInspector.ExtensionServer.prototype._onAddConsoleMessage):
        (WebInspector.ExtensionServer.prototype._makeConsoleMessage):
        (WebInspector.ExtensionServer.prototype._makeConsoleMessage.convertParameter):
        (WebInspector.ExtensionServer.prototype._dispatchCallback):
        (WebInspector.ExtensionServer.prototype.initExtensions):

2011-09-05  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: disable popover when a mouse button is pressed
        https://bugs.webkit.org/show_bug.cgi?id=67610

        Reviewed by Pavel Feldman.

        - disable popover when a mouse button is pressed
        - disable popover in a SourceFrame when the source is being edited

        * inspector/front-end/Popover.js:
        (WebInspector.PopoverHelper):
        (WebInspector.PopoverHelper.prototype._mouseUp):
        (WebInspector.PopoverHelper.prototype._mouseDown):
        (WebInspector.PopoverHelper.prototype._handleMouseAction):
        * inspector/front-end/SourceFrame.js:
        (WebInspector.SourceFrame.prototype._onHidePopover):
        (WebInspector.SourceFrame.prototype.doubleClick):

2011-09-07  Antti Koivisto  <antti@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67634
        De-virtualize styleForRenderer()

        Reviewed by Sam Weinig.
        
        This has performance and code clarity benefits.

        - move styleForRenderer from Node to Element
        - get rid of the now unnecessary NodeRenderingContext parameter
        - de-virtualize, add virtual customStyleForRenderer()

        * dom/Element.cpp:
        (WebCore::Element::customStyleForRenderer):
        (WebCore::Element::styleForRenderer):
        (WebCore::Element::recalcStyle):
        * dom/Element.h:
        * dom/Node.cpp:
        * dom/Node.h:
        (WebCore::Node::hasCustomWillOrDidRecalcStyle):
        (WebCore::Node::setHasCustomWillOrDidRecalcStyle):
        (WebCore::Node::hasCustomStyleForRenderer):
        (WebCore::Node::setHasCustomStyleForRenderer):
        
            Move styleForRenderer, add customStyleForRenderer, add a bit.
        
        * dom/NodeRenderingContext.cpp:
        (WebCore::NodeRendererFactory::createRendererAndStyle): 
        
            Handle non-element case separately since styleForRenderer was moved from Node to Element.

        * html/HTMLNoScriptElement.cpp:
        (WebCore::HTMLNoScriptElement::HTMLNoScriptElement):
        (WebCore::HTMLNoScriptElement::customStyleForRenderer):
        * html/HTMLNoScriptElement.h:
        
            Move a strange XHTMLMP special case to where it belongs.

        * html/HTMLOptGroupElement.cpp:
        (WebCore::HTMLOptGroupElement::attach):
        * html/HTMLOptionElement.cpp:
        (WebCore::HTMLOptionElement::attach):
        * html/HTMLTitleElement.cpp:
        (WebCore::HTMLTitleElement::textWithDirection):
        * html/shadow/TextControlInnerElements.cpp:
        (WebCore::TextControlInnerElement::TextControlInnerElement):
        (WebCore::TextControlInnerElement::customStyleForRenderer):
        (WebCore::TextControlInnerTextElement::TextControlInnerTextElement):
        (WebCore::TextControlInnerTextElement::customStyleForRenderer):
        * html/shadow/TextControlInnerElements.h:
        * rendering/svg/SVGShadowTreeElements.cpp:
        (WebCore::SVGShadowTreeContainerElement::customStyleForRenderer):
        * rendering/svg/SVGShadowTreeElements.h:
        * svg/SVGElement.cpp:
        (WebCore::SVGElement::SVGElement):
        (WebCore::SVGElement::customStyleForRenderer):
        * svg/SVGElement.h:
        
            Adopt customStyleForRenderer().

2011-09-07  Ryosuke Niwa  <rniwa@webkit.org>

        Change event is not fired for input[type=number] when the user reverts a change made by script
        https://bugs.webkit.org/show_bug.cgi?id=67697

        Reviewed by Kent Tamura.

        The bug was caused by HTMLInputElement::setValue not calling setTextAsOfLastFormControlChangeEvent
        for text fields other than type=text.

        Also fixed a that stepUpFromRenderer does not call setTextAsOfLastFormControlChangeEvent at appropriate
        timing due to setValueAsNumber always passing sendChangeEvent=false to setValue by propagating values
        through setValueAsNumber and applyStep. This refactoring allows us to remove calls to dispatch* in
        stepUpFromRenderer because they're now called in setValueAsNumber or applyStep.

        Test: fast/forms/number-input-changeevent.html

        * html/BaseDateAndTimeInputType.cpp:
        (WebCore::BaseDateAndTimeInputType::setValueAsNumber):
        * html/BaseDateAndTimeInputType.h:
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::applyStep):
        (WebCore::HTMLInputElement::stepUp):
        (WebCore::HTMLInputElement::stepDown):
        (WebCore::HTMLInputElement::setValue):
        (WebCore::HTMLInputElement::setValueAsNumber):
        (WebCore::HTMLInputElement::stepUpFromRenderer):
        * html/HTMLInputElement.h:
        * html/InputType.cpp:
        (WebCore::InputType::setValueAsNumber):
        * html/InputType.h:
        * html/NumberInputType.cpp:
        (WebCore::NumberInputType::setValueAsNumber):
        * html/NumberInputType.h:
        * html/RangeInputType.cpp:
        (WebCore::RangeInputType::setValueAsNumber):
        (WebCore::RangeInputType::handleKeydownEvent):
        * html/RangeInputType.h:

2011-09-07  Antti Koivisto  <antti@apple.com>

        Try to fix Qt build by moving the Qt specific include (which is not really allowed here!).

        Not reviewed.

        * css/CSSStyleSelector.cpp:
        * css/SelectorChecker.cpp:
        (WebCore::SelectorChecker::determineLinkStateSlowCase):

2011-09-07  Antti Koivisto  <antti@apple.com>

        Move SelectorChecker out from CSSStyleSelector scope
        https://bugs.webkit.org/show_bug.cgi?id=67648

        Reviewed by Sam Weinig.

        - Move SelectorChecker to SelectorChecker.h/cpp
        - Make private functions private
        - Make members private, add accessors
        - Move m_sameOriginOnly to CSSStyleSelector as it is not used by SelectorChecker

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::CSSStyleSelector):
        (WebCore::CSSStyleSelector::matchRules):
        (WebCore::CSSStyleSelector::matchRulesForList):
        (WebCore::CSSStyleSelector::sortMatchedRules):
        (WebCore::CSSStyleSelector::initForStyleResolve):
        (WebCore::CSSStyleSelector::matchUARules):
        (WebCore::CSSStyleSelector::styleForElement):
        (WebCore::CSSStyleSelector::pseudoStyleForElement):
        (WebCore::CSSStyleSelector::styleForPage):
        (WebCore::CSSStyleSelector::adjustRenderStyle):
        (WebCore::CSSStyleSelector::pseudoStyleRulesForElement):
        (WebCore::CSSStyleSelector::checkSelector):
        (WebCore::RuleData::RuleData):
        (WebCore::CSSStyleSelector::applyProperty):
        (WebCore::CSSStyleSelector::checkForGenericFamilyChange):
        (WebCore::CSSStyleSelector::setFontSize):
        (WebCore::CSSStyleSelector::getColorFromPrimitiveValue):
        * css/CSSStyleSelector.h:
        (WebCore::CSSStyleSelector::style):
        (WebCore::CSSStyleSelector::parentStyle):
        (WebCore::CSSStyleSelector::rootElementStyle):
        (WebCore::CSSStyleSelector::element):
        (WebCore::CSSStyleSelector::fontDescription):
        (WebCore::CSSStyleSelector::parentFontDescription):
        (WebCore::CSSStyleSelector::setFontDescription):
        (WebCore::CSSStyleSelector::setZoom):
        (WebCore::CSSStyleSelector::setEffectiveZoom):
        (WebCore::CSSStyleSelector::setTextSizeAdjust):
        (WebCore::CSSStyleSelector::setStyle):
        (WebCore::CSSStyleSelector::fontSelector):
        (WebCore::CSSStyleSelector::allVisitedStateChanged):
        (WebCore::CSSStyleSelector::visitedStateChanged):
        (WebCore::CSSStyleSelector::usesSiblingRules):
        (WebCore::CSSStyleSelector::usesFirstLineRules):
        (WebCore::CSSStyleSelector::usesBeforeAfterRules):
        (WebCore::CSSStyleSelector::usesLinkRules):
        (WebCore::CSSStyleSelector::addMatchedRule):
        (WebCore::CSSStyleSelector::isRightPage):
        (WebCore::CSSStyleSelector::ParentStackFrame::ParentStackFrame):
        (WebCore::CSSStyleSelector::styleNotYetAvailable):
        * css/SelectorChecker.cpp: Added.
        (WebCore::SelectorChecker::SelectorChecker):
        (WebCore::linkAttribute):
        (WebCore::SelectorChecker::determineLinkStateSlowCase):
        (WebCore::SelectorChecker::checkSelector):
        (WebCore::SelectorChecker::fastCheckSelector):
        (WebCore::SelectorChecker::isFastCheckableSelector):
        (WebCore::addLocalNameToSet):
        (WebCore::createHtmlCaseInsensitiveAttributesSet):
        (WebCore::htmlAttributeHasCaseInsensitiveValue):
        (WebCore::attributeQualifiedNameMatches):
        (WebCore::attributeValueMatches):
        (WebCore::anyAttributeMatches):
        (WebCore::SelectorChecker::checkOneSelector):
        (WebCore::SelectorChecker::checkScrollbarPseudoClass):
        (WebCore::SelectorChecker::allVisitedStateChanged):
        (WebCore::SelectorChecker::visitedStateChanged):
        * css/SelectorChecker.h: Added.
        (WebCore::SelectorChecker::document):
        (WebCore::SelectorChecker::strictParsing):
        (WebCore::SelectorChecker::isCollectingRulesOnly):
        (WebCore::SelectorChecker::setCollectingRulesOnly):
        (WebCore::SelectorChecker::isMatchingVisitedPseudoClass):
        (WebCore::SelectorChecker::setMatchingVisitedPseudoClass):
        (WebCore::SelectorChecker::pseudoStyle):
        (WebCore::SelectorChecker::setPseudoStyle):
        (WebCore::SelectorChecker::hasUnknownPseudoElements):
        (WebCore::SelectorChecker::clearHasUnknownPseudoElements):
        (WebCore::SelectorChecker::determineLinkState):
        * dom/Element.cpp:
        (WebCore::Element::webkitMatchesSelector):
        * dom/SelectorQuery.cpp:
        (WebCore::SelectorQuery::SelectorQuery):
        * dom/SelectorQuery.h:

2011-09-07  Dmitry Lomov  <dslomov@google.com>

        https://bugs.webkit.org/show_bug.cgi?id=67413 
        [Chromium]Web Inspector: inspected page with dedicated worker crashes on refresh.
        This patch enforces lifetime ordering between WorkerInspectorController and WorkerScriptController.

        Reviewed by Yury Semikhatsky.

        * workers/WorkerContext.cpp:
        (WebCore::WorkerContext::clearInspector):
        * workers/WorkerContext.h:
        * workers/WorkerThread.cpp:
        (WebCore::WorkerThreadShutdownFinishTask::performTask):

2011-09-07  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94627 and r94632.
        http://trac.webkit.org/changeset/94627
        http://trac.webkit.org/changeset/94632
        https://bugs.webkit.org/show_bug.cgi?id=67698

        It broke tests on GTK and Qt (Requested by Ossy on #webkit).

        * WebCore.exp.in:
        * bindings/js/JSDOMBinding.h:
        (WebCore::DOMConstructorObject::DOMConstructorObject):
        * bindings/js/JSDOMGlobalObject.cpp:
        (WebCore::JSDOMGlobalObject::JSDOMGlobalObject):
        * bindings/js/JSDOMGlobalObject.h:
        * bindings/js/JSDOMWindowShell.cpp:
        (WebCore::JSDOMWindowShell::create):
        * bindings/js/JSDOMWindowShell.h:
        * bindings/js/JSDOMWrapper.h:
        (WebCore::JSDOMWrapper::JSDOMWrapper):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateImplementation):
        * bindings/scripts/test/JS/JSTestInterface.cpp:
        (WebCore::JSTestInterface::JSTestInterface):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        (WebCore::JSTestMediaQueryListListener::JSTestMediaQueryListListener):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::JSTestObj::JSTestObj):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterface::JSTestSerializedScriptValueInterface):
        * bridge/c/CRuntimeObject.cpp:
        (JSC::Bindings::CRuntimeObject::CRuntimeObject):
        * bridge/c/CRuntimeObject.h:
        * bridge/jni/jsc/JavaRuntimeObject.cpp:
        (JSC::Bindings::JavaRuntimeObject::JavaRuntimeObject):
        * bridge/jni/jsc/JavaRuntimeObject.h:
        * bridge/objc/ObjCRuntimeObject.h:
        * bridge/objc/ObjCRuntimeObject.mm:
        (JSC::Bindings::ObjCRuntimeObject::ObjCRuntimeObject):
        * bridge/objc/objc_runtime.h:
        (JSC::Bindings::ObjcFallbackObjectImp::create):
        * bridge/objc/objc_runtime.mm:
        (JSC::Bindings::ObjcFallbackObjectImp::ObjcFallbackObjectImp):
        * bridge/qt/qt_instance.cpp:
        (JSC::Bindings::QtRuntimeObject::QtRuntimeObject):
        * bridge/qt/qt_pixmapruntime.cpp:
        (JSC::Bindings::QtPixmapRuntimeObject::QtPixmapRuntimeObject):
        * bridge/qt/qt_runtime.cpp:
        (JSC::Bindings::QtRuntimeMethod::QtRuntimeMethod):
        * bridge/qt/qt_runtime.h:
        * bridge/runtime_array.cpp:
        (JSC::RuntimeArray::RuntimeArray):
        * bridge/runtime_array.h:
        (JSC::RuntimeArray::create):
        * bridge/runtime_method.cpp:
        (JSC::RuntimeMethod::RuntimeMethod):
        * bridge/runtime_method.h:
        * bridge/runtime_object.cpp:
        (JSC::Bindings::RuntimeObject::RuntimeObject):
        * bridge/runtime_object.h:
        (JSC::Bindings::RuntimeObject::create):

2011-08-31  Yury Semikhatsky  <yurys@chromium.org>

        fast/workers/worker-script-error.html fails on Chromium after r94061
        https://bugs.webkit.org/show_bug.cgi?id=67206

        Default action should be prevented if window.onerror returned true and stay
        not prevented otherwise.

        Reviewed by Dmitry Titov.

        Tests: fast/events/window-onerror14.html
               fast/events/window-onerror15.html
               fast/events/window-onerror16.html

        * bindings/v8/V8AbstractEventListener.cpp:
        (WebCore::V8AbstractEventListener::invokeEventHandler):
        (WebCore::V8AbstractEventListener::shouldPreventDefault): allow specific
        event listeners to decide when to prevent default action based on the handler
        return value.
        * bindings/v8/V8AbstractEventListener.h:
        * bindings/v8/V8WindowErrorHandler.cpp:
        (WebCore::V8WindowErrorHandler::callListenerFunction):
        (WebCore::V8WindowErrorHandler::shouldPreventDefault):
        * bindings/v8/V8WindowErrorHandler.h:
        * bindings/v8/V8WorkerContextErrorHandler.cpp:
        (WebCore::V8WorkerContextErrorHandler::callListenerFunction):
        (WebCore::V8WorkerContextErrorHandler::shouldPreventDefault):
        * bindings/v8/V8WorkerContextErrorHandler.h:

2011-09-06  Xianzhu Wang  <wangxianzhu@chromium.org>

        Replace usages of Vector<UChar> with existing StringBuilder
        https://bugs.webkit.org/show_bug.cgi?id=67079

        Reviewed by Gavin Barraclough.

        No new tests. All existing unit tests and layout tests should run
        as before.

        * css/CSSOMUtils.cpp:
        (WebCore::appendCharacter):
        (WebCore::serializeCharacter):
        (WebCore::serializeCharacterAsCodePoint):
        (WebCore::serializeIdentifier):
        (WebCore::serializeString):
        * css/CSSOMUtils.h:
        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::cssText):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::SelectorChecker::determineLinkStateSlowCase):
        * css/CSSWrapShapes.cpp:
        (WebCore::CSSWrapShapeRect::cssText):
        (WebCore::CSSWrapShapeCircle::cssText):
        (WebCore::CSSWrapShapeEllipse::cssText):
        (WebCore::CSSWrapShapePolygon::cssText):
        * editing/HTMLInterchange.cpp:
        (WebCore::convertHTMLTextToInterchangeFormat):
        * editing/MarkupAccumulator.cpp:
        (WebCore::appendCharactersReplacingEntities):
        (WebCore::MarkupAccumulator::serializeNodes):
        (WebCore::MarkupAccumulator::appendStartTag):
        (WebCore::MarkupAccumulator::appendEndTag):
        (WebCore::MarkupAccumulator::concatenateMarkup):
        (WebCore::MarkupAccumulator::appendAttributeValue):
        (WebCore::MarkupAccumulator::appendCustomAttributes):
        (WebCore::MarkupAccumulator::appendQuotedURLAttributeValue):
        (WebCore::MarkupAccumulator::appendNodeValue):
        (WebCore::MarkupAccumulator::appendNamespace):
        (WebCore::MarkupAccumulator::appendText):
        (WebCore::MarkupAccumulator::appendComment):
        (WebCore::MarkupAccumulator::appendDocumentType):
        (WebCore::MarkupAccumulator::appendProcessingInstruction):
        (WebCore::MarkupAccumulator::appendElement):
        (WebCore::MarkupAccumulator::appendOpenTag):
        (WebCore::MarkupAccumulator::appendCloseTag):
        (WebCore::MarkupAccumulator::appendAttribute):
        (WebCore::MarkupAccumulator::appendCDATASection):
        (WebCore::MarkupAccumulator::appendStartMarkup):
        (WebCore::MarkupAccumulator::appendEndMarkup):
        * editing/MarkupAccumulator.h:
        * editing/markup.cpp:
        (WebCore::StyledMarkupAccumulator::appendElement):
        (WebCore::StyledMarkupAccumulator::wrapWithNode):
        (WebCore::StyledMarkupAccumulator::wrapWithStyleNode):
        (WebCore::StyledMarkupAccumulator::appendStyleNodeOpenTag):
        (WebCore::StyledMarkupAccumulator::takeResults):
        (WebCore::StyledMarkupAccumulator::appendText):
        (WebCore::urlToMarkup):
        * html/DOMTokenList.cpp:
        (WebCore::DOMTokenList::removeToken):
        * html/HTMLFontElement.cpp:
        (WebCore::parseFontSize):
        * html/HTMLTextFormControlElement.cpp:
        (WebCore::HTMLTextFormControlElement::strippedPlaceholder):
        * html/parser/CSSPreloadScanner.cpp:
        (WebCore::CSSPreloadScanner::emitRule):
        * html/parser/CSSPreloadScanner.h:
        * html/parser/HTMLEntityParser.cpp:
        (WebCore::consumeHTMLEntity):
        * html/parser/HTMLEntityParser.h:
        * html/parser/HTMLParserIdioms.cpp:
        (WebCore::parseHTMLInteger):
        (WebCore::parseHTMLNonNegativeInteger):
        * html/parser/HTMLTokenizer.cpp:
        (WebCore::HTMLTokenizer::processEntity):
        (WebCore::HTMLTokenizer::nextToken):
        * html/parser/HTMLTreeBuilder.cpp:
        (WebCore::HTMLTreeBuilder::ExternalCharacterTokenBuffer::giveRemainingTo):
        (WebCore::HTMLTreeBuilder::defaultForInTableText):
        * html/parser/HTMLTreeBuilder.h:
        * inspector/InspectorValues.cpp:
        (WebCore::InspectorValue::toJSONString):
        (WebCore::InspectorValue::writeJSON):
        (WebCore::InspectorBasicValue::writeJSON):
        (WebCore::InspectorString::writeJSON):
        (WebCore::InspectorObject::writeJSON):
        (WebCore::InspectorArray::writeJSON):
        * inspector/InspectorValues.h:
        * loader/CrossOriginAccessControl.cpp:
        (WebCore::createAccessControlPreflightRequest):
        * loader/appcache/ApplicationCacheStorage.cpp:
        (WebCore::ApplicationCacheStorage::store):
        * page/Chrome.cpp:
        (WebCore::Chrome::setToolTip):
        * page/PageSerializer.cpp:
        (WebCore::SerializerMarkupAccumulator::appendText):
        (WebCore::SerializerMarkupAccumulator::appendElement):
        (WebCore::SerializerMarkupAccumulator::appendCustomAttributes):
        * page/SecurityOrigin.cpp:
        (WebCore::SecurityOrigin::toString):
        * platform/KURL.cpp:
        (WebCore::KURL::deprecatedString):
        (WebCore::decodeURLEscapeSequences):
        * platform/LinkHash.cpp:
        (WebCore::squeezeOutNullCharacters):
        (WebCore::cleanSlashDotDotSlashes):
        (WebCore::mergeDoubleSlashes):
        (WebCore::cleanSlashDotSlashes):
        (WebCore::cleanPath):
        (WebCore::visitedURLInline):
        (WebCore::visitedURL):
        (WebCore::visitedLinkHash):
        * platform/LinkHash.h:
        * platform/gtk/DataObjectGtk.cpp:
        (WebCore::DataObjectGtk::setURL):
        * platform/network/HTTPParsers.cpp:
        (WebCore::extractMIMETypeFromMediaType):
        * platform/text/TextCodecICU.cpp:
        (WebCore::TextCodecICU::decode):
        * platform/text/TextStream.cpp:
        (WebCore::TextStream::operator<<):
        (WebCore::TextStream::release):
        * platform/text/TextStream.h:
        * plugins/PluginStream.cpp:
        (WebCore::PluginStream::startStream):
        * rendering/InlineTextBox.cpp:
        (WebCore::adjustCharactersAndLengthForHyphen):
        * rendering/InlineTextBox.h:
        (WebCore::BufferForAppendingHyphen::BufferForAppendingHyphen):
        * rendering/RenderListItem.cpp:
        (WebCore::RenderListItem::markerTextWithSuffix):
        * rendering/RenderListMarker.cpp:
        (WebCore::toSymbolic):
        (WebCore::RenderListMarker::paint):
        (WebCore::RenderListMarker::suffix):
        * rendering/RenderTreeAsText.cpp:
        (WebCore::quoteAndEscapeNonPrintables):
        * rendering/mathml/RenderMathMLFenced.cpp:
        (WebCore::RenderMathMLFenced::updateFromElement):
        * storage/IDBLevelDBCoding.cpp:
        (WebCore::IDBLevelDBCoding::decodeString):
        * xml/XMLHttpRequest.cpp:
        (WebCore::XMLHttpRequest::getAllResponseHeaders):
        * xml/XPathFunctions.cpp:
        (WebCore::XPath::FunId::evaluate):
        (WebCore::XPath::FunConcat::evaluate):
        * xml/XPathUtil.cpp:
        (WebCore::XPath::stringValue):
        * xml/XSLTProcessorLibxslt.cpp:
        (WebCore::writeToStringBuilder):
        (WebCore::saveResultToString):
        * xml/parser/CharacterReferenceParserInlineMethods.h:
        (WebCore::unconsumeCharacters):
        (WebCore::consumeCharacterReference):
        * xml/parser/XMLCharacterReferenceParser.cpp:
        (WebCore::consumeXMLCharacterReference):
        * xml/parser/XMLCharacterReferenceParser.h:
        * xml/parser/XMLTokenizer.cpp:
        (WebCore::XMLTokenizer::nextToken):

2011-09-05  Kent Tamura  <tkent@chromium.org>

        REGRESSION (Safari 5.1 - ToT): File input retains its file icon when the value is reset
        https://bugs.webkit.org/show_bug.cgi?id=67567

        Reviewed by Dimitri Glazkov.

        - Introduce InputType::setValue(), which is called by HTMLInputElement::setValue().
        - Clear m_icon in FileInputType::setValue().

        Tests: fast/forms/file/file-reset-in-change-expected.html
               fast/forms/file/file-reset-in-change.html

        * html/BaseButtonInputType.cpp:
        (WebCore::BaseButtonInputType::setValue):
        Implemenation for the "default" mode.
        http://www.whatwg.org/specs/web-apps/current-work/multipage/common-input-element-attributes.html#dom-input-value-default
        * html/BaseButtonInputType.h:
        * html/BaseCheckableInputType.cpp:
        (WebCore::BaseCheckableInputType::setValue):
        Implemenation for the "default/on" mode.
        http://www.whatwg.org/specs/web-apps/current-work/multipage/common-input-element-attributes.html#dom-input-value-default-on
        * html/BaseCheckableInputType.h:
        * html/FileInputType.cpp:
        (WebCore::FileInputType::setValue):
        Implemenation for the "filename" mode, and clearing m_icon.
        http://www.whatwg.org/specs/web-apps/current-work/multipage/common-input-element-attributes.html#dom-input-value-filename
        * html/FileInputType.h:
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::setValue):
        Move some code to InputType::setValue().
        (WebCore::HTMLInputElement::setValueInternal): A helper for InputType::setValue().
        * html/HTMLInputElement.h:
        * html/HiddenInputType.cpp:
        (WebCore::HiddenInputType::setValue):
        Implementation for the "default" mode.
        * html/HiddenInputType.h:
        * html/InputType.cpp:
        (WebCore::InputType::setValue):
        Implementation for the "value" mode.
        http://www.whatwg.org/specs/web-apps/current-work/multipage/common-input-element-attributes.html#dom-input-value-value
        * html/InputType.h:
        * html/TextFieldInputType.cpp:
        (WebCore::TextFieldInputType::setValue):
        In addition to the "value" mode processing, updates placeholder visibililty.
        * html/TextFieldInputType.h:

2011-09-06  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION(r94274): The inner text value of an input element is not updated when input.value is set
        https://bugs.webkit.org/show_bug.cgi?id=67681

        Reviewed by Kent Tamura.

        The bug was caused by HTMLInputElement::setValue's not clearing m_suggestedValue before updateInnerTextValue is called.
        Since updateInnerTextValue uses the suggested value when one is present, we need to clear m_suggestedValue in advance.

        Test: fast/forms/suggested-value-after-setvalue.html

        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::setValue):

2011-09-06  Adam Barth  <abarth@webkit.org>

        Attempt to fix GTK build.

        * bindings/gobject/WebKitHTMLElementWrapperFactory.cpp:
        (WebKit::createHTMLElementWrapper):

2011-09-06  Ryosuke Niwa  <rniwa@webkit.org>

        fast/forms/suggested-value-crash.html crashes on Windows
        https://bugs.webkit.org/show_bug.cgi?id=67688

        Reviewed by Adam Barth.

        The crash was caused because functions in internals were accessing uninitialized QualifiedNames.
        Fixed the bug by avoiding to link to inputTag and textareaTag. Instead, we resort to toInputElement
        and string comparison.

        * testing/Internals.cpp:
        (WebCore::Internals::wasLastChangeUserEdit):
        (WebCore::Internals::suggestedValue):
        (WebCore::Internals::setSuggestedValue):

2011-09-06  Mark Hahnenberg  <mhahnenberg@apple.com>

        Unzip initialization lists and constructors in JSCell hierarchy (5/7)
        https://bugs.webkit.org/show_bug.cgi?id=67420

        Reviewed by Geoffrey Garen.

        No new tests.

        Completed the fifth level of the refactoring to add finishCreation() 
        methods to all classes within the JSCell hierarchy with non-trivial 
        constructor bodies.

        This primarily consists of pushing the calls to finishCreation() down 
        into the constructors of the subclasses of the second level of the hierarchy 
        as well as pulling the finishCreation() calls out into the class's corresponding
        create() method if it has one.  Doing both simultaneously allows us to 
        maintain the invariant that the finishCreation() method chain is called exactly 
        once during the creation of an object, since calling it any other number of 
        times (0, 2, or more) will cause an assertion failure.

        * WebCore.exp.in:
        * bindings/js/JSDOMBinding.h:
        (WebCore::DOMConstructorObject::DOMConstructorObject):
        * bindings/js/JSDOMGlobalObject.cpp:
        (WebCore::JSDOMGlobalObject::JSDOMGlobalObject):
        (WebCore::JSDOMGlobalObject::finishCreation):
        * bindings/js/JSDOMGlobalObject.h:
        * bindings/js/JSDOMWindowShell.cpp:
        * bindings/js/JSDOMWindowShell.h:
        (WebCore::JSDOMWindowShell::create):
        * bindings/js/JSDOMWrapper.h:
        (WebCore::JSDOMWrapper::JSDOMWrapper):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateImplementation):
        * bindings/scripts/test/JS/JSTestInterface.cpp:
        (WebCore::JSTestInterface::JSTestInterface):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        (WebCore::JSTestMediaQueryListListener::JSTestMediaQueryListListener):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::JSTestObj::JSTestObj):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterface::JSTestSerializedScriptValueInterface):
        * bridge/c/CRuntimeObject.cpp:
        (JSC::Bindings::CRuntimeObject::CRuntimeObject):
        (JSC::Bindings::CRuntimeObject::finishCreation):
        * bridge/c/CRuntimeObject.h:
        * bridge/jni/jsc/JavaRuntimeObject.cpp:
        (JSC::Bindings::JavaRuntimeObject::JavaRuntimeObject):
        (JSC::Bindings::JavaRuntimeObject::finishCreation):
        * bridge/jni/jsc/JavaRuntimeObject.h:
        * bridge/objc/ObjCRuntimeObject.h:
        * bridge/objc/ObjCRuntimeObject.mm:
        (JSC::Bindings::ObjCRuntimeObject::ObjCRuntimeObject):
        (JSC::Bindings::ObjCRuntimeObject::finishCreation):
        * bridge/objc/objc_runtime.h:
        (JSC::Bindings::ObjcFallbackObjectImp::create):
        * bridge/objc/objc_runtime.mm:
        (JSC::Bindings::ObjcFallbackObjectImp::ObjcFallbackObjectImp):
        * bridge/qt/qt_instance.cpp:
        (JSC::Bindings::QtRuntimeObject::QtRuntimeObject):
        * bridge/qt/qt_pixmapruntime.cpp:
        (JSC::Bindings::QtPixmapRuntimeObject::QtPixmapRuntimeObject):
        * bridge/qt/qt_runtime.cpp:
        (JSC::Bindings::QtRuntimeMethod::QtRuntimeMethod):
        (JSC::Bindings::QtRuntimeMethod::finishCreation):
        * bridge/qt/qt_runtime.h:
        * bridge/runtime_array.cpp:
        (JSC::RuntimeArray::RuntimeArray):
        * bridge/runtime_array.h:
        (JSC::RuntimeArray::create):
        * bridge/runtime_method.cpp:
        (JSC::RuntimeMethod::RuntimeMethod):
        (JSC::RuntimeMethod::finishCreation):
        * bridge/runtime_method.h:
        * bridge/runtime_object.cpp:
        (JSC::Bindings::RuntimeObject::RuntimeObject):
        * bridge/runtime_object.h:
        (JSC::Bindings::RuntimeObject::create):

2011-09-06  Luke Macpherson   <macpherson@chromium.org>

        Implement list style properties in CSSStyleApplyProperty.
        https://bugs.webkit.org/show_bug.cgi?id=67103

        Reviewed by Eric Seidel.

        No new tests / no behavioral changes.

        * css/CSSStyleApplyProperty.cpp:
        Add class to wrap call to CSSStyleSelector::styleImage().
        (WebCore::ApplyPropertyStyleImage::ApplyPropertyStyleImage):
        (WebCore::ApplyPropertyStyleImage::applyValue):
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        Initialize handlers for list style properties.
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        Remove existing property implementations.

2011-09-06  Alexis Menard  <alexis.menard@openbossa.org>

        [Qt] Move away from QPointer as it is slow and it has a replacement QWeakPointer.
        https://bugs.webkit.org/show_bug.cgi?id=67673

        Reviewed by Ariya Hidayat.

        Move away from QPointer to QWeakPointer, it is faster.

        No new tests, the existing ones should cover.

        * bridge/qt/qt_instance.cpp:
        (JSC::Bindings::QtInstance::~QtInstance):
        (JSC::Bindings::QtInstance::getClass):
        (JSC::Bindings::QtField::name):
        (JSC::Bindings::QtField::valueFromInstance):
        * bridge/qt/qt_instance.h:
        (JSC::Bindings::QtInstance::getObject):
        * bridge/qt/qt_runtime.h:
        * platform/qt/SharedTimerQt.cpp:
        (WebCore::SharedTimerQt::inst):

2011-09-06  Oliver Hunt  <oliver@apple.com>

        Update expected results of bindings tests.

        * bindings/scripts/test/JS/JSTestInterface.cpp:
        (WebCore::JSTestInterfaceConstructor::createStructure):
        (WebCore::JSTestInterface::createPrototype):
        * bindings/scripts/test/JS/JSTestInterface.h:
        (WebCore::JSTestInterface::createStructure):
        (WebCore::JSTestInterfacePrototype::createStructure):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
        (WebCore::JSTestMediaQueryListListenerConstructor::createStructure):
        (WebCore::JSTestMediaQueryListListener::createPrototype):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
        (WebCore::JSTestMediaQueryListListener::createStructure):
        (WebCore::JSTestMediaQueryListListenerPrototype::createStructure):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::JSTestObjConstructor::createStructure):
        (WebCore::JSTestObj::createPrototype):
        * bindings/scripts/test/JS/JSTestObj.h:
        (WebCore::JSTestObj::createStructure):
        (WebCore::JSTestObjPrototype::createStructure):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::createStructure):
        (WebCore::JSTestSerializedScriptValueInterface::createPrototype):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
        (WebCore::JSTestSerializedScriptValueInterface::createStructure):
        (WebCore::JSTestSerializedScriptValueInterfacePrototype::createStructure):

2011-09-06  Eric Seidel  <eric@webkit.org>

        Remove window.HTMLBlockquoteElement per HTML5 (and DOM Core 1)
        https://bugs.webkit.org/show_bug.cgi?id=67678

        Reviewed by Darin Adler.

        This is why we can't have nice things.

        There was some confusion in the original DOM HTML 1 spec about
        the existence of HTMlBlockquoteElement which was clarified by
        a later errata, removing HTMLBlockquoteElement:
        http://www.w3.org/DOM/updates/REC-DOM-Level-1-19981001-errata.html
        "This interface is an error and must be ignored. The Interface HTMLQuoteElement is used for both the Q and BLOCKQUOTE elements"

        Le sigh.  Personally I think having a separate HTMLBlockquoteElement
        is clearer, but thats not how the web works.  Removed it and updated test results.

        * CMakeLists.txt:
        * CodeGenerators.pri:
        * DerivedSources.cpp:
        * DerivedSources.make:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/gobject/GNUmakefile.am:
        * editing/IndentOutdentCommand.cpp:
        * html/HTMLBlockquoteElement.cpp: Removed.
        * html/HTMLBlockquoteElement.h: Removed.
        * html/HTMLBlockquoteElement.idl: Removed.
        * html/HTMLElementsAllInOne.cpp:
        * html/HTMLQuoteElement.cpp:
        (WebCore::HTMLQuoteElement::HTMLQuoteElement):
        (WebCore::HTMLQuoteElement::insertedIntoDocument):
        * html/HTMLTagNames.in:
        * page/DOMWindow.idl:

2011-09-06  Ryosuke Niwa  <rniwa@webkit.org>

        Rename confirmCompositionWithoutDisturbingSelection to cancelComposition
        https://bugs.webkit.org/show_bug.cgi?id=67569

        Reviewed by Antonio Gomes.

        Renamed Editor::confirmCompositionWithoutDisturbingSelection to Editor::cancelComposition.
        Also renamed the shared function from confirmComposition to setComposition.

        * WebCore.exp.in:
        * editing/Editor.cpp:
        (WebCore::Editor::confirmComposition):
        (WebCore::Editor::cancelComposition):
        (WebCore::Editor::setComposition):
        * editing/Editor.h:

2011-09-06  Sam Weinig  <sam@webkit.org>

        WebVTTTokenizer files in the wrong place in the Xcode project.

        * WebCore.xcodeproj/project.pbxproj:
        Move WebVTTTokenizer files so they are in the right place in the project.

2011-09-06  Chris Rogers  <crogers@google.com>

        MediaElementAudioSourceNode destruction triggers ASSERTS
        https://bugs.webkit.org/show_bug.cgi?id=67665

        Reviewed by Nate Chapin.

        Test: webaudio/mediaelementaudiosourcenode-gc.html

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::setAudioSourceNode):
        * webaudio/AudioContext.cpp:
        (WebCore::AudioContext::uninitializeDispatch):
        (WebCore::AudioContext::stop):
        * webaudio/AudioContext.h:

2011-09-05  Oliver Hunt  <oliver@apple.com>

        An object's structure should reference the global object responsible for its creation
        https://bugs.webkit.org/show_bug.cgi?id=67624

        Reviewed by Gavin Barraclough.

        Update calls to Structure::create() to pass the globalObject in,
        and update the CodeGenerator to generate appropriate createStructure
        methods.

        * bindings/js/JSAudioConstructor.h:
        (WebCore::JSAudioConstructor::createStructure):
        * bindings/js/JSDOMBinding.h:
        (WebCore::DOMConstructorObject::createStructure):
        (WebCore::getDOMStructure):
        * bindings/js/JSDOMGlobalObject.h:
        (WebCore::JSDOMGlobalObject::createStructure):
        (WebCore::getDOMConstructor):
        * bindings/js/JSDOMWindowBase.h:
        (WebCore::JSDOMWindowBase::createStructure):
        * bindings/js/JSDOMWindowShell.cpp:
        (WebCore::JSDOMWindowShell::setWindow):
        * bindings/js/JSDOMWindowShell.h:
        (WebCore::JSDOMWindowShell::createStructure):
        * bindings/js/JSDOMWrapper.h:
        (WebCore::JSDOMWrapper::createStructure):
        * bindings/js/JSImageConstructor.h:
        (WebCore::JSImageConstructor::createStructure):
        * bindings/js/JSImageDataCustom.cpp:
        (WebCore::toJS):
        * bindings/js/JSOptionConstructor.h:
        (WebCore::JSOptionConstructor::createStructure):
        * bindings/js/JSWorkerContextBase.h:
        (WebCore::JSWorkerContextBase::createStructure):
        * bindings/js/WorkerScriptController.cpp:
        (WebCore::WorkerScriptController::initScript):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        (GenerateImplementation):
        (GenerateConstructorDeclaration):
        * bridge/c/CRuntimeObject.h:
        (JSC::Bindings::CRuntimeObject::createStructure):
        * bridge/c/c_instance.cpp:
        (JSC::Bindings::CRuntimeMethod::createStructure):
        * bridge/jni/jsc/JavaInstanceJSC.cpp:
        (JavaRuntimeMethod::createStructure):
        * bridge/jni/jsc/JavaRuntimeObject.h:
        (JSC::Bindings::JavaRuntimeObject::createStructure):
        * bridge/objc/ObjCRuntimeObject.h:
        (JSC::Bindings::ObjCRuntimeObject::createStructure):
        * bridge/objc/objc_instance.mm:
        (ObjCRuntimeMethod::createStructure):
        * bridge/objc/objc_runtime.h:
        (JSC::Bindings::ObjcFallbackObjectImp::createStructure):
        * bridge/runtime_array.h:
        (JSC::RuntimeArray::createStructure):
        * bridge/runtime_method.h:
        (JSC::RuntimeMethod::createStructure):
        * bridge/runtime_object.h:
        (JSC::Bindings::RuntimeObject::createStructure):

2011-09-06  Anders Carlsson  <andersca@apple.com>

        Move NPAPI headers in bridge to plugins
        https://bugs.webkit.org/show_bug.cgi?id=67661

        Reviewed by Darin Adler.

        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        Update build systems.

        * bridge/npapi.h: Removed.
        * bridge/npruntime.h: Removed.
        * bridge/nptypes.h: Removed.
        * plugins/npapi.h: Copied from Source/WebCore/bridge/npapi.h.
        * plugins/npruntime.h: Copied from Source/WebCore/bridge/npruntime.h.
        * plugins/nptypes.h: Copied from Source/WebCore/bridge/nptypes.h.

2011-09-06  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67672
        
        Improve background-size parsing. Make it actually dump auto values properly, and also make it omit
        auto if it is the second value. Fix the parsing to not create a value list when only a singleton value
        is specified.

        Reviewed by Beth Dakin.

        Covered well by existing tests.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::fillSizeToCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseFillSize):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::mapFillSize):

2011-09-06  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67657
        
        Implement border-image-width. This patch stops short of converting -webkit-border-image to a shorthand.
        I'll do that in the next patch.

        Note that unlike the -webkit-border-image syntax, border-image-width does not actually set the border
        width values. It simply makes cuts into the border image drawing area (which for now is just the border
        box, but that will change once border-image-outset is implemented).
        
        This means we need additional storage for the slices, since they are now separate from the border widths.
        
        For backwards compatibility, -webkit-border-image will continue to set the border widths when
        border-image-width is specified in the -webkit-border-image shorthand.

        Reviewed by Beth Dakin.

        Added new tests in fast/borders.

        * css/CSSBorderImageSliceValue.cpp:
        (WebCore::CSSBorderImageSliceValue::CSSBorderImageSliceValue):
        (WebCore::CSSBorderImageSliceValue::cssText):
        * css/CSSBorderImageSliceValue.h:
        (WebCore::CSSBorderImageSliceValue::create):
        (WebCore::CSSBorderImageSliceValue::slices):
        Rename slices() to imageSlices() and add borderSlices() and m_borderSlices to hold the desired cuts
        for the border image drawing area. Converted the slices over to the new Quad primitive value (a RectBase
        subclass that is identical to Rect but dumps as a quad instead of a rect primitive).

        * css/CSSBorderImageValue.cpp:
        (WebCore::CSSBorderImageValue::CSSBorderImageValue):
        (WebCore::CSSBorderImageValue::cssText):
        * css/CSSBorderImageValue.h:
        (WebCore::CSSBorderImageValue::create):
        Make CSSBorderImageValue take the border slices during construction now.
    
        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::valueForNinePieceImageSlice):
        (WebCore::valueForNinePieceImageWidth):
        (WebCore::valueForNinePieceImageRepeat):
        (WebCore::valueForNinePieceImage):
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        Add support for computed style via valueForNinePieceImageWidth. Patch all of the border image properties
        to dump the most compact form possible for the property values, e.g., "stretch stretch" becomes "stretch."

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::CSSParser::parseReflect):
        (WebCore::BorderImageParseContext::BorderImageParseContext):
        (WebCore::BorderImageParseContext::commitImageSlice):
        (WebCore::BorderImageParseContext::commitBorderWidth):
        (WebCore::BorderImageParseContext::commitBorderImage):
        (WebCore::CSSParser::parseBorderImage):
        (WebCore::isBorderImageRepeatKeyword):
        (WebCore::CSSParser::parseBorderImageRepeat):
        (WebCore::BorderImageSliceParseContext::commitBorderImageSlice):
        (WebCore::CSSParser::parseBorderImageSlice):
        (WebCore::BorderImageWidthParseContext::BorderImageWidthParseContext):
        (WebCore::BorderImageWidthParseContext::allowNumber):
        (WebCore::BorderImageWidthParseContext::allowFinalCommit):
        (WebCore::BorderImageWidthParseContext::top):
        (WebCore::BorderImageWidthParseContext::commitNumber):
        (WebCore::BorderImageWidthParseContext::setAllowFinalCommit):
        (WebCore::BorderImageWidthParseContext::setTop):
        (WebCore::BorderImageWidthParseContext::commitBorderImageWidth):
        (WebCore::CSSParser::parseBorderImageWidth):
        * css/CSSParser.h:
        Modify the border-image code to pass off border-image-width parsing to parseBorderImageWidth.

        * css/CSSPrimitiveValue.cpp:
        (WebCore::isValidCSSUnitTypeForDoubleConversion):
        (WebCore::CSSPrimitiveValue::init):
        (WebCore::CSSPrimitiveValue::cleanup):
        (WebCore::CSSPrimitiveValue::getQuadValue):
        (WebCore::CSSPrimitiveValue::cssText):
        * css/CSSPrimitiveValue.h:
        (WebCore::CSSPrimitiveValue::getQuadValue):
        Add the new Quad value to CSSPrimitiveValue.
    
        * css/CSSPropertyNames.in:
        Add the new properties for border-image-width and -webkit-mask-box-image-width.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        (WebCore::CSSStyleSelector::mapNinePieceImage):
        (WebCore::CSSStyleSelector::mapNinePieceImageSlice):
        (WebCore::CSSStyleSelector::mapNinePieceImageWidth):
        (WebCore::CSSStyleSelector::loadPendingImages):
        * css/CSSStyleSelector.h:
        Add the code to map the image width into border slices.
    
        * css/Rect.h:
        (WebCore::RectBase::top):
        (WebCore::RectBase::right):
        (WebCore::RectBase::bottom):
        (WebCore::RectBase::left):
        (WebCore::RectBase::setTop):
        (WebCore::RectBase::setRight):
        (WebCore::RectBase::setBottom):
        (WebCore::RectBase::setLeft):
        (WebCore::RectBase::RectBase):
        (WebCore::RectBase::~RectBase):
        (WebCore::Rect::create):
        (WebCore::Rect::Rect):
        (WebCore::Quad::create):
        (WebCore::Quad::Quad):
        Adding the new Quad value.

        * rendering/RenderBoxModelObject.cpp:
        (WebCore::computeBorderImageSide):
        (WebCore::RenderBoxModelObject::paintNinePieceImage):
        Modify painting to treat the border slices as separate from the border widths.
        
        * rendering/style/NinePieceImage.cpp:
        (WebCore::NinePieceImage::operator==):
        * rendering/style/NinePieceImage.h:
        (WebCore::NinePieceImage::NinePieceImage):
        (WebCore::NinePieceImage::imageSlices):
        (WebCore::NinePieceImage::setImageSlices):
        (WebCore::NinePieceImage::borderSlices):
        (WebCore::NinePieceImage::setBorderSlices):
        (WebCore::NinePieceImage::copyImageSlicesFrom):
        (WebCore::NinePieceImage::copyBorderSlicesFrom):
        * rendering/style/StyleRareNonInheritedData.cpp:
        Add the border slices.
        
        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
        * rendering/style/StyleReflection.h:
        (WebCore::StyleReflection::StyleReflection):
        Make sure masks and reflections default border-image-width to auto instead of 1, since that matches
        old behavior.

2011-09-06  Noel Gordon  <noel.gordon@gmail.com>

        [chromium skia] JPEGImageEncoder: hoist constants out of the encoding loop
        https://bugs.webkit.org/show_bug.cgi?id=67589

        Reviewed by Kenneth Russell.

        Change the row converter function signatures to be the same.  Call them via a function
        pointer during the encoding loop.  Minor webkit style cleanup, remove unused include.

        No new tests.  Covered by existing canvas 2d and 3d tests.
        canvas/philip/tests/toDataURL.jpeg.alpha.html
        fast/canvas/webgl/premultiplyalpha-test.html

        * platform/image-encoders/skia/JPEGImageEncoder.cpp:  Remove SkUnPreMultiply.h (not used).
        (WebCore::preMultipliedBGRAtoRGB):  Use unsigned char* instead of void* for pixels.
        (WebCore::RGBAtoRGB):  pixels & pixelCount to match the preMultipliedBGRAtoRGB() signature.
        (WebCore::encodePixels):  Move constants out of the encoding loop: use a function pointer
        to call preMultipliedBGRAtoRGB or RGBAtoRGB (now they have identical signatures), define
        and use pixelRowStride constant.
        (WebCore::JPEGImageEncoder::encode):

2011-09-06  Aaron Colwell  <acolwell@chromium.org>

        Allow MediaSource API to be enabled at runtime.
        https://bugs.webkit.org/show_bug.cgi?id=67306

        Reviewed by Eric Carlson.

        * bindings/generic/RuntimeEnabledFeatures.cpp:
        * bindings/generic/RuntimeEnabledFeatures.h:
        (WebCore::RuntimeEnabledFeatures::webkitMediaSourceEnabled):
        (WebCore::RuntimeEnabledFeatures::setWebkitMediaSourceEnabled):
        * html/HTMLMediaElement.idl:

2011-09-06  Mike Reed  <reed@google.com>

        [skia] never draw with GDI, so that all text can be gpu-accelerated
        https://bugs.webkit.org/show_bug.cgi?id=65203

        Reviewed by Kenneth Russell.

        * platform/graphics/chromium/FontChromiumWin.cpp:
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
        (WebCore::drawGlyphsWin):
        (WebCore::Font::drawComplexText):
        * platform/graphics/chromium/UniscribeHelper.cpp:
        (WebCore::UniscribeHelper::draw):
        * platform/graphics/skia/PlatformContextSkia.cpp:
        * platform/graphics/skia/PlatformContextSkia.h:
        * platform/graphics/skia/SkiaFontWin.cpp:
        (WebCore::skiaDrawText):
        * platform/graphics/skia/SkiaFontWin.h:

2011-09-06  Nat Duca  <nduca@chromium.org>

        [chromium] REGRESSION(94353): requestAnimationFrame not throttled in compositing path
        https://bugs.webkit.org/show_bug.cgi?id=67621

        CCSingleThreadProxy should not perform layout when called
        via the compositeImmediately path. Doing so makes it look
        like frame rate is unbounded.

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::compositeAndReadback):
        (WebCore::CCSingleThreadProxy::compositeImmediately):
        (WebCore::CCSingleThreadProxy::commitIfNeeded):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:

2011-09-06  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION(r94274): FormManagerTest.PreviewForm and FillFormNonEmptyField fail on chromium
        https://bugs.webkit.org/show_bug.cgi?id=67453

        Reviewed by Kent Tamura.

        Fixed the bug by updating inner text value in setSuggestedValue.

        Also added a suggestedValue and setSuggestedValue on window.internals for testing purposes.

        Test: fast/forms/suggested-value.html

        * WebCore.exp.in:
        * testing/Internals.cpp:
        (WebCore::Internals::suggestedValue):
        (WebCore::Internals::setSuggestedValue):
        * testing/Internals.h:
        * testing/Internals.idl:

2011-09-06  Eric Carlson  <eric.carlson@apple.com>

        load() does not reset the resource selection algorithm
        https://bugs.webkit.org/show_bug.cgi?id=64917

        Reviewed by Darin Adler.

        Test: media/video-source-load.html

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::selectMediaResource): Reset m_nextChildNodeToConsider, update
            comments and rearrange logic to more closely match logic in spec.
        (WebCore::HTMLMediaElement::noneSupported): Update comments.

2011-09-06  Abhishek Arya  <inferno@chromium.org>

        Style not propagated to anonymous boxes and anonymous
        inline-blocks.
        https://bugs.webkit.org/show_bug.cgi?id=67364

        Reviewed by James Robinson.

        Share propagateStyleToAnonymousChildren with RenderBlock::styleDidChange.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::styleDidChange):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::propagateStyleToAnonymousChildren):
        * rendering/RenderObject.h:

2011-09-06  Robin Cao  <robin.cao@torchmobile.com.cn>

        [skia] States of GraphicsContext may never be restored after clipToImageBuffer
        https://bugs.webkit.org/show_bug.cgi?id=67358

        beginLayerClippedToImage/applyClipFromImage are mismatched when clipping to
        an empty ImageBuffer, which will make states of GraphicsContext incorrect.

        Reviewed by James Robinson.

        Test: fast/repaint/background-clip-text.html

        * platform/graphics/skia/PlatformContextSkia.cpp:
        (WebCore::PlatformContextSkia::beginLayerClippedToImage):

2011-09-06  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [EFL] Do not allocate memory for extremely large surfaces.
        https://bugs.webkit.org/show_bug.cgi?id=65192

        Reviewed by Martin Robinson.

        So far, RenderThemeEfl tried to allocate a buffer and a cairo surface
        the size of the whole form element passed to it.

        In the case of
        fast/overflow/overflow-height-float-not-removed-crash.html and others,
        this meant extremely large widgets, which crashed the code.

        We now only render the widgets if they are smaller than some hardcoded
        and sufficiently large values which should work in most cases.

        No new tests, as this was uncovered by existing ones.

        * platform/efl/RenderThemeEfl.cpp:
        (WebCore::RenderThemeEfl::isFormElementTooLargeToDisplay):
        (WebCore::RenderThemeEfl::cacheThemePartNew):
        (WebCore::RenderThemeEfl::paintThemePart):
        * platform/efl/RenderThemeEfl.h:

2011-08-30  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: implement source map v3 consumer.
        https://bugs.webkit.org/show_bug.cgi?id=67205

        Reviewed by Yury Semikhatsky.

        Test: inspector/debugger/compiler-source-mapping.html

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/front-end/CompilerSourceMapping.js: Added.
        (WebInspector.CompilerSourceMapping):
        (WebInspector.CompilerSourceMapping.prototype.compiledLocationToSourceLocation):
        (WebInspector.CompilerSourceMapping.prototype.sourceLocationToCompiledLocation):
        (WebInspector.CompilerSourceMapping.prototype.get sources):
        (WebInspector.ClosureCompilerSourceMapping):
        (WebInspector.ClosureCompilerSourceMapping.prototype.compiledLocationToSourceLocation):
        (WebInspector.ClosureCompilerSourceMapping.prototype.sourceLocationToCompiledLocation):
        (WebInspector.ClosureCompilerSourceMapping.prototype.get sources):
        (WebInspector.ClosureCompilerSourceMapping.prototype._findMapping):
        (WebInspector.ClosureCompilerSourceMapping.prototype._parsePayload):
        (WebInspector.ClosureCompilerSourceMapping.prototype._isSeparator):
        (WebInspector.ClosureCompilerSourceMapping.prototype._decodeVLQ):
        (WebInspector.ClosureCompilerSourceMapping.StringCharIterator):
        (WebInspector.ClosureCompilerSourceMapping.StringCharIterator.prototype.next):
        (WebInspector.ClosureCompilerSourceMapping.StringCharIterator.prototype.peek):
        (WebInspector.ClosureCompilerSourceMapping.StringCharIterator.prototype.hasNext):
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/inspector.html:

2011-09-05  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: re-implement RawSourceCode.
        https://bugs.webkit.org/show_bug.cgi?id=67609

        RawSourceCode content and source mapping loading logic is too complex, re-implement it using simpler semantics:
        1) Initially, RawSourceCode doesn't have any content or mapping because content loading and
        formatting operations are asynchronous, it only has scripts metadata. We don't update UI right
        after RawSourceCode creation until full RawSourceCode representation is ready (content + mapping).
        2) When RawSourceCode representation is ready (e.g. resource is finished, or content is formatted
        if in pretty-print mode) we dispatch SourceMappingUpdated event to notify the listeners that
        source code should be shown to user and raw locations should be converted to ui locations
        (to show breakpoins, messages, call frames etc in UI). At this moment, all source file's content
        is ready for loading and source mapping is available.
        3) Later, RawSourceCode representation may change again, e.g. if pretty-print mode is toggled, or
        blocked resource is finished etc., in that case SourceMappingUpdated is dispatched again to update
        source code, links and decorations in UI.

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype._sourceMappingUpdated):
        (WebInspector.DebuggerPresentationModel.prototype._restoreBreakpoints):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage.didGetUILocation):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage):
        (WebInspector.DebuggerPresentationModel.prototype.messagesForUISourceCode):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._uiSourceCodeReplaced):
        (WebInspector.ScriptsPanel.prototype._sourceFrameLoaded):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):
        (WebInspector.RawSourceCode.prototype.addScript):
        (WebInspector.RawSourceCode.prototype.contentEdited):
        (WebInspector.RawSourceCode.prototype._resourceFinished):
        (WebInspector.RawSourceCode.prototype.requestContent):
        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded.sourceMappingUpdated):
        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded):
        (WebInspector.RawSourceCode.prototype.forceLoadContent):
        (WebInspector.RawSourceCode.prototype._updateSourceMapping.didCreateSourceMapping):
        (WebInspector.RawSourceCode.prototype._updateSourceMapping):
        (WebInspector.RawSourceCode.prototype._createContentProvider):
        (WebInspector.RawSourceCode.prototype._createSourceMapping.didRequestContent.didFormatContent):
        (WebInspector.RawSourceCode.prototype._createSourceMapping.didRequestContent):
        (WebInspector.RawSourceCode.prototype._createSourceMapping):
        (WebInspector.RawSourceCode.prototype._saveSourceMapping):
        (WebInspector.StaticContentProvider):
        (WebInspector.StaticContentProvider.prototype.requestContent):

2011-09-06  Csaba Osztrogonác  <ossy@webkit.org>

        Unreviewed, rolling out r94564.
        http://trac.webkit.org/changeset/94564
        https://bugs.webkit.org/show_bug.cgi?id=67555

        It broke many tests

        * svg/SVGTRefElement.cpp:
        (WebCore::SVGTRefElement::svgAttributeChanged):

2011-09-06  Rob Buis  <rbuis@rim.com>

        use after free in WebCore::SVGTRefElement::updateReferencedText
        https://bugs.webkit.org/show_bug.cgi?id=67555

        Reviewed by Nikolas Zimmermann.

        Do not install event listener if tref is not part of any document.

        Test: svg/custom/tref-clone-crash.html

        * svg/SVGTRefElement.cpp:
        (WebCore::SVGTRefElement::svgAttributeChanged):

2011-09-06  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94560.
        http://trac.webkit.org/changeset/94560
        https://bugs.webkit.org/show_bug.cgi?id=67636

        It made inspector/debugger/script-formatter.html flakey
        (Requested by Ossy on #webkit).

        * inspector/front-end/BreakpointManager.js:
        (WebInspector.BreakpointManager.prototype.set reset):
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype._addScript.didCreateSourceMapping):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype._uiSourceCodeReplaced):
        (WebInspector.DebuggerPresentationModel.prototype.setFormatSource):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage.didGetUILocation):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage):
        (WebInspector.PresenationCallFrame.prototype.select):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._uiSourceCodeReplaced):
        (WebInspector.ScriptsPanel.prototype._sourceFrameLoaded):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):
        (WebInspector.RawSourceCode.prototype.addScript):
        (WebInspector.RawSourceCode.prototype.contentEdited):
        (WebInspector.RawSourceCode.prototype.requestContent):
        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded.didRequestContent):
        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded):
        (WebInspector.RawSourceCode.prototype._setContentProvider):
        (WebInspector.RawSourceCode.prototype.forceLoadContent):
        (WebInspector.RawSourceCode.prototype._reload):
        (WebInspector.RawSourceCode.prototype._requestContent):
        (WebInspector.RawSourceCode.prototype._loadResourceContent):
        (WebInspector.RawSourceCode.prototype._loadScriptContent):
        (WebInspector.RawSourceCode.prototype._loadAndConcatenateScriptsContent):
        (WebInspector.RawSourceCode.prototype._didRequestContent):
        (WebInspector.RawSourceCode.prototype._hasPendingResource):
        (WebInspector.FormattedContentProvider):
        (WebInspector.FormattedContentProvider.prototype.requestContent.didRequestContent.didFormatContent):
        (WebInspector.FormattedContentProvider.prototype.requestContent):

2011-09-06  Antti Koivisto  <antti@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67480
        [Chromium] [REGRESSION] Layout Test svg/batik/text/textStyles.svg is failing

        Reviewed by Dimitri Glazkov.

        The text node needs willRecalcStyle mechanism too.

        * dom/Text.cpp:
        (WebCore::Text::recalcTextStyle):
        * dom/Text.h:
        (WebCore::Text::willRecalcTextStyle):
        * svg/SVGTRefElement.cpp:
        (WebCore::SVGTRefElement::SVGTRefElement):
        (WebCore::SVGShadowText::SVGShadowText):
        (WebCore::SVGShadowText::willRecalcTextStyle):

2011-09-05  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: re-implement RawSourceCode.
        https://bugs.webkit.org/show_bug.cgi?id=67609

        RawSourceCode content and source mapping loading logic is too complex, re-implement it using simpler semantics:
        1) Initially, RawSourceCode doesn't have any content or mapping because content loading and
        formatting operations are asynchronous, it only has scripts metadata. We don't update UI right
        after RawSourceCode creation until full RawSourceCode representation is ready (content + mapping).
        2) When RawSourceCode representation is ready (e.g. resource is finished, or content is formatted
        if in pretty-print mode) we dispatch SourceMappingUpdated event to notify the listeners that
        source code should be shown to user and raw locations should be converted to ui locations
        (to show breakpoins, messages, call frames etc in UI). At this moment, all source file's content
        is ready for loading and source mapping is available.
        3) Later, RawSourceCode representation may change again, e.g. if pretty-print mode is toggled, or
        blocked resource is finished etc., in that case SourceMappingUpdated is dispatched again to update
        source code, links and decorations in UI.

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype._sourceMappingUpdated):
        (WebInspector.DebuggerPresentationModel.prototype._restoreBreakpoints):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage.didGetUILocation):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage):
        (WebInspector.DebuggerPresentationModel.prototype.messagesForUISourceCode):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._uiSourceCodeReplaced):
        (WebInspector.ScriptsPanel.prototype._sourceFrameLoaded):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):
        (WebInspector.RawSourceCode.prototype.addScript):
        (WebInspector.RawSourceCode.prototype.contentEdited):
        (WebInspector.RawSourceCode.prototype._resourceFinished):
        (WebInspector.RawSourceCode.prototype.requestContent):
        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded.sourceMappingUpdated):
        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded):
        (WebInspector.RawSourceCode.prototype.forceLoadContent):
        (WebInspector.RawSourceCode.prototype._updateSourceMapping.didCreateSourceMapping):
        (WebInspector.RawSourceCode.prototype._updateSourceMapping):
        (WebInspector.RawSourceCode.prototype._createContentProvider):
        (WebInspector.RawSourceCode.prototype._createSourceMapping.didRequestContent.didFormatContent):
        (WebInspector.RawSourceCode.prototype._createSourceMapping.didRequestContent):
        (WebInspector.RawSourceCode.prototype._createSourceMapping):
        (WebInspector.RawSourceCode.prototype._saveSourceMapping):
        (WebInspector.StaticContentProvider):
        (WebInspector.StaticContentProvider.prototype.requestContent):

2011-09-06  Dirk Schulze  <krit@webkit.org>

        Return to transform multiplication: motion transform * other transforms
        https://bugs.webkit.org/show_bug.cgi?id=67601

        Reviewed by Nikolas Zimmermann.
        
        Right now we take the current transform of a transformable SVG element, post multiply the animation transform
        and post multiply the motion transform to the other both:

          transform * animation transform * motion transform

        We switched to this behavior with the clean up of AffineTransform.
        While the specification of SVG demands us to do so, no other SVG viewer is doing it that way. Now switching back to:

          motion transform * transform * animation transform

        This is done by other SVG viewers as well. While their is no consense about how to multiply the different transforms
        on the SVG WG, their is a consense that the current specified behavior is unwanted. See
        http://lists.w3.org/Archives/Public/www-svg/2011Jan/0055.html for more details.

        We pass the following tests of the official W3C SVG test suite again now:

        - animate-elem-24-t.svg
        - animate-elem-30-t.svg

        * svg/SVGStyledTransformableElement.cpp:
        (WebCore::SVGStyledTransformableElement::animatedLocalTransform):
        * svg/SVGTextElement.cpp:
        (WebCore::SVGTextElement::animatedLocalTransform):

2011-09-05  Adam Barth  <abarth@webkit.org>

        window.HTMLSpanElement does not exist
        https://bugs.webkit.org/show_bug.cgi?id=67571

        Reviewed by Sam Weinig.

        We have these objects for most other elements and HTMLSpanElement
        exists in Firefox and in the HTML5 spec.  This patch adds it.

        Test: fast/dom/wrapper-classes.html

        * CMakeLists.txt:
        * CodeGenerators.pri:
        * DerivedSources.cpp:
        * DerivedSources.make:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * html/HTMLElementsAllInOne.cpp:
        * html/HTMLSpanElement.cpp: Added.
        (WebCore::HTMLSpanElement::HTMLSpanElement):
        (WebCore::HTMLSpanElement::create):
        * html/HTMLSpanElement.h: Added.
        * html/HTMLSpanElement.idl: Added.
        * html/HTMLTagNames.in:
        * page/DOMWindow.idl:

2011-09-04  Abhishek Arya  <inferno@chromium.org>

        Style not propagated to anonymous boxes and anonymous
        inline-blocks.
        https://bugs.webkit.org/show_bug.cgi?id=67364

        Reviewed by James Robinson.

        Tests: fast/ruby/ruby-block-style-not-updated-with-before-after-content.html
               fast/ruby/ruby-block-style-not-updated.html
               fast/ruby/ruby-inline-style-not-updated-with-before-after-content.html
               fast/ruby/ruby-inline-style-not-updated.html
               fast/table/table-row-style-not-updated-with-after-content.html
               fast/table/table-row-style-not-updated-with-before-content.html
               fast/table/table-row-style-not-updated.html
               fast/table/table-style-not-updated.html

        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::propagateStyleToAnonymousChildren):
        * rendering/RenderObject.h:
        (WebCore::RenderObject::isBeforeAfterContent):
        * rendering/RenderRuby.cpp:
        (WebCore::RenderRubyAsInline::styleDidChange):
        (WebCore::RenderRubyAsBlock::styleDidChange):
        * rendering/RenderRuby.h:
        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::styleDidChange):
        * rendering/RenderTableRow.cpp:
        (WebCore::RenderTableRow::styleDidChange):
        (WebCore::RenderTableRow::addChild):
        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::styleDidChange):
        (WebCore::RenderTableSection::addChild):
        * rendering/RenderTableSection.h:

2011-09-05  Abhishek Arya  <inferno@chromium.org>

        Crash in RenderObjectChildList::destroyLeftOverChildren()
        https://bugs.webkit.org/show_bug.cgi?id=64753

        Reviewed by James Robinson.

        If any of the ancestors between column span element and containing
        column's block is a continuation, then don't attempt to render the
        column span by splitting the block into continuations.

        Test: fast/multicol/column-span-parent-continuation-crash.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::columnsBlockForSpanningElement):

2011-09-05  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94537.
        http://trac.webkit.org/changeset/94537
        https://bugs.webkit.org/show_bug.cgi?id=67618

        Does not compile on Chromium Mac (Requested by abarth_ on
        #webkit).

        * platform/image-encoders/skia/JPEGImageEncoder.cpp:
        (WebCore::preMultipliedBGRAtoRGB):
        (WebCore::RGBAtoRGB):
        (WebCore::encodePixels):
        (WebCore::JPEGImageEncoder::encode):

2011-09-05  Noel Gordon  <noel.gordon@gmail.com>

        [chromium skia] JPEGImageEncoder: hoist contants out of the encoding loop
        https://bugs.webkit.org/show_bug.cgi?id=67589

        Reviewed by Adam Barth.

        Change the row converter function signatures to be the same.  Call them via a function
        pointer during the encoding loop.  Minor webkit stlye cleanup, remove unused include.

        No new tests.  Covered by existing canvas 2d and 3d tests.
        canvas/philip/tests/toDataURL.jpeg.alpha.html
        fast/canvas/webgl/premultiplyalpha-test.html

        * platform/image-encoders/skia/JPEGImageEncoder.cpp:  Remove SkUnPreMultiply.h (not used).
        (WebCore::preMultipliedBGRAtoRGB):  Use unsigned char* instead of void* for pixels.
        (WebCore::RGBAtoRGB):  pixels & pixelCount to match the preMultipliedBGRAtoRGB() signature.
        (WebCore::encodePixels):  Move contants out of the encoding loop: use a function pointer to
        call preMultipliedBGRAtoRGB or RGBAtoRGB (now they have identical signatures) during the
        image row encoding loop.  Add/use pixelRowStride constant.
        (WebCore::JPEGImageEncoder::encode):  webkit style: no need to split lines.

2011-09-05  John Knottenbelt  <jknotten@chromium.org>

        Take pageScaleFactor into account for MouseRelatedEvents.
        https://bugs.webkit.org/show_bug.cgi?id=67592

        Reviewed by Dimitri Glazkov.

        Test: fast/events/page-scaled-mouse-click.html

        * dom/MouseRelatedEvent.cpp:
        (WebCore::MouseRelatedEvent::MouseRelatedEvent):

2011-09-02  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: rename RawSourceCode.reload to contentEdited.
        https://bugs.webkit.org/show_bug.cgi?id=67504

        Make RawSourceCode.reload private and remove RawSourceCode.content getter and setter
        (RawSourceCode isn't supposed to have any content).

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource.didEditScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype.canSetContent):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype.setContent):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype._setContentWithInitialContent):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):
        (WebInspector.RawSourceCode.prototype.contentEdited):
        (WebInspector.RawSourceCode.prototype.forceLoadContent):
        (WebInspector.RawSourceCode.prototype._reload):
        (WebInspector.RawSourceCode.prototype._didRequestContent):

2011-09-05  Leandro Gracia Gil  <leandrogracia@chromium.org>

        Fix the regression of bug 65333 introduced by 60170.
        This caused the speech input bubble to appear in the wrong side for RTL text inputs.
        https://bugs.webkit.org/show_bug.cgi?id=67597

        Reviewed by Tony Gentilcore.

        No new tests. Fixing regression.

        * html/shadow/TextControlInnerElements.cpp:
        (WebCore::InputFieldSpeechButtonElement::startSpeechInput):

2011-09-05  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: F5 results in a Web Inspector frontend reload on non-Macs
        https://bugs.webkit.org/show_bug.cgi?id=67602

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/inspector.js:
        (WebInspector.documentKeyDown):

2011-09-05  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94525.
        http://trac.webkit.org/changeset/94525
        https://bugs.webkit.org/show_bug.cgi?id=67599

        WinCE compilation failed. (Requested by loislo on #webkit).

        * platform/text/TextBoundaries.cpp:
        * platform/text/TextBreakIteratorICU.cpp:
        * platform/text/qt/TextBoundariesQt.cpp:
        * platform/text/qt/TextBreakIteratorQt.cpp:

2011-09-05  Alexander Færøy  <alexander.faeroy@nokia.com>

        [Qt] Compiling using system ICU uses QTextBreakIterator in some cases.
        https://bugs.webkit.org/show_bug.cgi?id=67391

        Reviewed by Kenneth Rohde Christiansen.

        * platform/text/TextBoundaries.cpp:
        * platform/text/TextBreakIteratorICU.cpp:
        * platform/text/qt/TextBoundariesQt.cpp:
        * platform/text/qt/TextBreakIteratorQt.cpp:

2011-09-05  Kaustubh Atrawalkar  <kaustubh@motorola.com>

        Logic from HTMLElement::deprecatedCreateContextualFragment moved into
        Range::createContextualFragment function.
        https://bugs.webkit.org/show_bug.cgi?id=67056

        Reviewed by Ryosuke Niwa.

        Code Refactoring for deprecatedCreateContextualFragment.

        No new tests. Code Re-factoring.

        * dom/Element.cpp:
        * dom/Element.h:
        * dom/Range.cpp:
        (WebCore::insertIntoFragment):
        (WebCore::Range::createDocumentFragmentForElement):
        (WebCore::Range::createContextualFragment):
        * dom/Range.h:
        * editing/markup.cpp:
        (WebCore::createFragmentFromMarkup):
        * html/HTMLElement.cpp:
        * html/HTMLElement.h:

2011-09-04  James Kozianski  <koz@chromium.org>

        Unreviewed, rolling out r94510.
        http://trac.webkit.org/changeset/94510
        https://bugs.webkit.org/show_bug.cgi?id=66531

        Causes layout test crashes.

        * dom/Document.cpp:
        (WebCore::Document::webkitWillEnterFullScreenForElement):
        (WebCore::Document::webkitDidExitFullScreenForElement):
        * dom/NodeRenderingContext.cpp:
        (WebCore::wrapWithRenderFullScreen):
        (WebCore::NodeRendererFactory::createRendererIfNeeded):
        * rendering/RenderFullScreen.cpp:
        (RenderFullScreen::createFullScreenStyle):
        * rendering/RenderFullScreen.h:

2011-09-04  Abhishek Arya  <inferno@chromium.org>

        Unreviewed. Compile fix for r94511.

        * dom/Range.cpp:
        (WebCore::Range::processContents):
        (WebCore::Range::processAncestorsAndTheirSiblings):

2011-09-04  Abhishek Arya  <inferno@chromium.org>

        Crash in Range::processAncestorsAndTheirSiblings.
        https://bugs.webkit.org/show_bug.cgi?id=67556

        Reviewed by Ryosuke Niwa.

        Create a temporary RefPtr Node vector to keep all the ancestor's
        childs so that we don't access removed child nodes.

        Test: fast/dom/Range/range-delete-contents-event-fire-crash.html

        * dom/Range.cpp:
        (WebCore::Range::processContents):
        (WebCore::Range::processAncestorsAndTheirSiblings):

2011-09-04  Jeremy Apthorp  <jeremya@google.com>

        Don't detach elements from the render tree when entering fullscreen mode
        https://bugs.webkit.org/show_bug.cgi?id=66531

        This prevents plugin instances from being destroyed and reinstantiated
        when entering fullscreen mode.

        Reviewed by Darin Fisher.

        Test: plugins/fullscreen-plugins-dont-reload.html

        * dom/Document.cpp:
        (WebCore::Document::webkitWillEnterFullScreenForElement):
        (WebCore::Document::webkitDidExitFullScreenForElement):
        * dom/NodeRenderingContext.cpp:
        (WebCore::NodeRendererFactory::createRendererIfNeeded):
        * rendering/RenderFullScreen.cpp:
        (createFullScreenStyle):
        (RenderFullScreen::wrapRenderer):
        (RenderFullScreen::unwrapRenderer):
        * rendering/RenderFullScreen.h:

2011-09-04  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/10071256> Retain retired custom fonts until the next style recalc

        Reviewed by Darin Adler.

        Test: fast/css/font-face-used-after-retired.html

        During style recalc, existing renderers may reference their old style, including font data.
        Allow them to do so safely by keeping retired custom font data around until after style recalc.

        * css/CSSFontFace.cpp:
        (WebCore::CSSFontFace::retireCustomFont): Added. Calls through to CSSFontSelector, if the font
        face is still part of any segmented font face. Otherwise, deletes the custom font data.
        * css/CSSFontFace.h:
        * css/CSSFontFaceSource.cpp:
        (WebCore::CSSFontFaceSource::pruneTable): Changed to call retireCustomFont() instead of deleting
        retired font data.
        * css/CSSFontSelector.cpp:
        (WebCore::CSSFontSelector::retireCustomFont): Added. Calls through to the Document, if this is
        still the active font selector for a document. Otherwise, deletes the custom font data.
        * css/CSSFontSelector.h:
        * css/CSSSegmentedFontFace.cpp:
        (WebCore::CSSSegmentedFontFace::pruneTable): Changed to call retireCustomFont() instead of
        deleting retired font data.
        * dom/Document.cpp:
        (WebCore::Document::~Document): Added a call to deleteRetiredCustomFonts(), in case the Document
        is destroyed before getting a chance to recalc style after custom fonts have been retired.
        (WebCore::Document::recalcStyle): Added a call to deleteRetiredCustomFonts() after style recalc.
        (WebCore::Document::deleteRetiredCustomFonts): Added. Deletes all previously-retired custom font
        data.
        * dom/Document.h:
        (WebCore::Document::retireCustomFont): Added.

2011-09-04  Sam Weinig  <sam@webkit.org>

        Document.createEvent should support all the interfaces of Event we got
        https://bugs.webkit.org/show_bug.cgi?id=67568

        Reviewed by Anders Carlsson.

        Updated fast/events/event-creation.html

        * dom/BeforeLoadEvent.h:
        (WebCore::BeforeLoadEvent::create):
        (WebCore::BeforeLoadEvent::BeforeLoadEvent):
        Added empty create.
        
        * dom/Document.cpp:
        (WebCore::Document::createEvent):
        Add missing interfaces.

        * dom/HashChangeEvent.h:
        (WebCore::HashChangeEvent::create):
        (WebCore::HashChangeEvent::HashChangeEvent):
        Added empty create.

        * page/SpeechInputEvent.cpp:
        (WebCore::SpeechInputEvent::create):
        (WebCore::SpeechInputEvent::SpeechInputEvent):
        (WebCore::SpeechInputEvent::~SpeechInputEvent):
        * page/SpeechInputEvent.h:
        Added empty create.

2011-09-04  Adam Barth  <abarth@webkit.org>

        [Chromium] Add memory threshold values to WebKitPlatformSupport.h
        https://bugs.webkit.org/show_bug.cgi?id=67575

        Reviewed by Darin Fisher.

        Grab these memory thresholds from PlatformSupport rather than hard-coding them.

        * bindings/v8/V8GCController.cpp:
        (WebCore::V8GCController::checkMemoryUsage):
        * platform/chromium/PlatformSupport.h:
        * platform/qt/PlatformSupport.h:
        (WebCore::PlatformSupport::lowMemoryUsageMB):
        (WebCore::PlatformSupport::highMemoryUsageMB):
        (WebCore::PlatformSupport::highUsageDeltaMB):

2011-09-04  Kevin Ollivier  <kevino@theolliviers.com>

        [wx] Unreviewed build fix. Add new / moved files missing from last commit.

        * platform/wx/LocalDC.h: Added.
        (WebCore::LocalDC::LocalDC):
        (WebCore::LocalDC::context):
        (WebCore::LocalDC::~LocalDC):
        * platform/wx/wxcode/cairo: Added.
        * platform/wx/wxcode/cairo/non-kerned-drawing.cpp: Added.
        (WebCore::pangoFontMap):
        (WebCore::createPangoFontForFont):
        (WebCore::createScaledFontForFont):
        (WebCore::pango_font_get_glyph):
        (WebCore::drawTextWithSpacing):
        * platform/wx/wxcode/gdiplus: Added.
        * platform/wx/wxcode/gdiplus/non-kerned-drawing.cpp: Added.
        (dmin):
        (dmax):
        (DegToRad):
        (RadToDeg):
        (WebCore::drawTextWithSpacing):

2011-09-04  Robin Dunn  <robin@alldunn.com>

        [wx] Enable wxWebKit to run using the wxGC Cairo backend on platforms other than GTK.
        https://bugs.webkit.org/show_bug.cgi?id=67577

        Reviewed by Kevin Ollivier.

        * platform/graphics/GlyphBuffer.h:
        (WebCore::GlyphBuffer::glyphAt):
        (WebCore::GlyphBuffer::add):
        * platform/graphics/wx/GraphicsContextWx.cpp:
        (WebCore::GraphicsContext::clipOut):
        (WebCore::GraphicsContext::clipPath):
        * platform/graphics/wx/PathWx.cpp:
        (WebCore::Path::Path):
        (WebCore::Path::clear):
        * platform/graphics/wx/TransformationMatrixWx.cpp:
        (WebCore::TransformationMatrix::operator wxGraphicsMatrix):
        (WebCore::AffineTransform::operator wxGraphicsMatrix):
        * platform/image-decoders/wx/ImageDecoderWx.cpp:
        (WebCore::ImageFrame::asNewNativeImage):
        * platform/wx/ContextMenuWx.cpp:
        (ContextMenu::ContextMenu):
        * platform/wx/LocalDC.h: Added.
        (WebCore::LocalDC::LocalDC):
        (WebCore::LocalDC::context):
        (WebCore::LocalDC::~LocalDC):
        * platform/wx/RenderThemeWx.cpp:
        (WebCore::RenderThemeWx::paintButton):
        (WebCore::RenderThemeWx::paintTextField):
        (WebCore::RenderThemeWx::paintMenuList):
        (WebCore::RenderThemeWx::paintMenuListButton):
        * platform/wx/ScrollbarThemeWx.cpp:
        (WebCore::ScrollbarThemeWx::paint):
        * platform/wx/wxcode/cairo: Added.
        * platform/wx/wxcode/cairo/non-kerned-drawing.cpp: Added.
        (WebCore::pangoFontMap):
        (WebCore::createPangoFontForFont):
        (WebCore::createScaledFontForFont):
        (WebCore::pango_font_get_glyph):
        (WebCore::drawTextWithSpacing):
        * platform/wx/wxcode/gdiplus: Added.
        * platform/wx/wxcode/gdiplus/non-kerned-drawing.cpp: Added.
        (dmin):
        (dmax):
        (DegToRad):
        (RadToDeg):
        (WebCore::drawTextWithSpacing):
        * platform/wx/wxcode/gtk/non-kerned-drawing.cpp: Removed.
        * platform/wx/wxcode/win/non-kerned-drawing.cpp: Removed.
        * platform/wx/wxcode/win/scrollbar_render.cpp:
        (GraphicsHDC::GraphicsHDC):
        (GraphicsHDC::~GraphicsHDC):
        (wxRenderer_DrawScrollbar):

2011-09-03  Laszlo Gombos  <laszlo.1.gombos@nokia.com>

        REGRESSION (r86268): Fix for qt_networkAccessAllowed()
        https://bugs.webkit.org/show_bug.cgi?id=67570

        Reviewed by Noam Rosenthal.

        No new tests as this change only removes dead code.
        Support for Qt 4.6 has  been removed a while back.

        * WebCore.pri:
        * WebCore.pro:
        * features.pri:
        * platform/network/NetworkStateNotifier.h:
        * platform/network/qt/NetworkStateNotifierQt.cpp:

2011-09-03  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION(r94274): selection-change-closes-typing.html fails
        https://bugs.webkit.org/show_bug.cgi?id=67377

        Reviewed by Kent Tamura.

        The problem was that when the shadow DOM is updated by setInnerTextValue, WebKit layer detects the selection
        change and calls confirmCompositionWithoutDisturbingSelection, which in turn modifies the shadow DOM by
        inserting text.

        Fixed the bug by not inserting text in confirmCompositionWithoutDisturbingSelection. It turned out that this
        function is only used to cancel composition but never to confirming composition and restoring selection.

        Test: platform/mac/editing/input/selection-change-closes-typing-2.html

        * editing/Editor.cpp:
        (WebCore::Editor::confirmCompositionWithoutDisturbingSelection):
        (WebCore::Editor::confirmComposition):

2011-09-03  Sam Weinig  <sam@webkit.org>

        Add missing Event constructors to DOMWindow.idl
        https://bugs.webkit.org/show_bug.cgi?id=67449

        Reviewed by Anders Carlsson.

        Covered by existing tests.

        * page/DOMWindow.idl:

2011-08-27  Robert Hogan  <robert@webkit.org>

        div align="center" rendering problem
        https://bugs.webkit.org/show_bug.cgi?id=4860

        Reviewed by David Hyatt.

        When an inline element with absolute position was the sole or first child of a render block with
        centred alignment, it wasn't obeying its parent's alignment. However it would obey the
        alignment if it was preceded by some text. The problem was that the element's render object
        was getting skipped as leading white space, so it was not included in a normal line block in
        a bidi run. Instead, its position was getting set by RenderBlockLineLayout::setStaticPositions()
        which does not pay attention to alignment. Preceding the element with some text allowed the object
        to get included in a Bidi run and so get a linebox which would get properly aligned.

        The fix is to get RenderBlockLineLayout::setStaticPositions() to obey the alignment specified by
        the object's container. This allows WebKit to get the same result on the test as Firefox and IE.
        Opera has the same bug as unpatched WebKit.

        Tests: fast/css/bug4860-absolute-block-child-does-not-inherit-alignment.html
               - Ensure positioned block elements inherit alignment.
               fast/css/bug4860-absolute-inline-child-inherits-alignment.html
               - Ensure positioned inline elements inherit alignment.
               fast/inline/absolute-positioned-inline-in-centred-block.html
               - Ensure positioned inline element that's the sole or first child of a rendered block
                 obeys parents alignment.
               fast/inline/absolute-positioned-block-in-centred-block.html
               - As above, but a positioned block should not inherit alignment.

        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::updateLogicalWidthForAlignment):
        (WebCore::RenderBlock::computeInlineDirectionPositionsForLine): Move the alignment check to updateLogicalWidthForAlignment.
        (WebCore::setStaticPositions): use startAlignedOffsetForLine and use startAlignedOffsetForBlock
        (WebCore::RenderBlock::startAlignedOffsetForLine): New function, find the aligned offset using updateLogicalWidthForAlignment

2011-09-03  Andreas Kling  <kling@webkit.org>

        Remove two unused functions from Element.
        https://bugs.webkit.org/show_bug.cgi?id=67492

        Reviewed by Benjamin Poulain.

        Removed openTagStartToString() and setCStringAttribute() as they are
        not called from anywhere.

        * dom/Element.cpp:
        * dom/Element.h:

2011-09-03  Andrew Wason  <rectalogic@rectalogic.com>

        [Qt] Enable support for WebGL OES_standard_derivatives for Qt
        https://bugs.webkit.org/show_bug.cgi?id=67430

        Reviewed by Noam Rosenthal.

        Tested using https://cvs.khronos.org/svn/repos/registry/trunk/public/webgl/sdk/tests/conformance/extensions/oes-standard-derivatives.html

        Enable existing support for OES_standard_derivatives for Qt.

        * platform/graphics/opengl/Extensions3DOpenGL.cpp:
        (WebCore::Extensions3DOpenGL::ensureEnabled):
        (WebCore::Extensions3DOpenGL::isEnabled):

2011-09-03  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Send ArrayBuffer as WebSocket binary message
        https://bugs.webkit.org/show_bug.cgi?id=67477

        Reviewed by Kent Tamura.

        Tests: http/tests/websocket/tests/hybi/send-arraybuffer.html
               http/tests/websocket/tests/hybi/workers/send-arraybuffer.html
               http/tests/websocket/tests/hybi/bufferedAmount-after-close.html (updated)

        * bindings/js/JSWebSocketCustom.cpp:
        (WebCore::JSWebSocket::send):
        * bindings/v8/custom/V8WebSocketCustom.cpp:
        (WebCore::V8WebSocket::sendCallback):
        * websockets/ThreadableWebSocketChannel.h:
        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
        (WebCore::ThreadableWebSocketChannelClientWrapper::sendRequestResult):
        (WebCore::ThreadableWebSocketChannelClientWrapper::setSendRequestResult):
        * websockets/ThreadableWebSocketChannelClientWrapper.h:
        Rename "sent" to "sendRequestResult" to clarify the meaning. Messages from the script may not
        be sent immediately, thus the return value of WebSocketChannel::send() indicates whether the
        message has been queued successfully, rather than whether the message has been sent or not.
        * websockets/WebSocket.cpp:
        (WebCore::WebSocket::send):
        Case of sending "[object ArrayBuffer]" is covered by an existing test
        http/tests/websocket/tests/{hybi,hixie76}/send-object.html.
        * websockets/WebSocket.h:
        * websockets/WebSocket.idl:
        * websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send):
        * websockets/WebSocketChannel.h:
        * websockets/WorkerThreadableWebSocketChannel.cpp:
        (WebCore::WorkerThreadableWebSocketChannel::send):
        (WebCore::workerContextDidSend):
        (WebCore::WorkerThreadableWebSocketChannel::Peer::send):
        (WebCore::WorkerThreadableWebSocketChannel::mainThreadSendArrayBuffer):
        Construct an ArrayBuffer from the data on Vector<char>.
        (WebCore::WorkerThreadableWebSocketChannel::Bridge::send):
        Copy the content into temporary buffer of Vector<char>, and send it to the main thread.
        * websockets/WorkerThreadableWebSocketChannel.h:

2011-09-02  Kentaro Hara  <haraken@google.com>

        Implement a CustomEvent constructor for V8
        https://bugs.webkit.org/show_bug.cgi?id=67527

        Reviewed by Sam Weinig.

        Test: fast/events/constructors/custom-event-constructor.html

        * bindings/v8/OptionsObject.h:
        (WebCore::OptionsObject::getKeyValue): Returns ScriptValue corresponding to a given key.
        * bindings/v8/custom/V8EventConstructors.cpp: Added the CustomEvent constructor.
        * dom/CustomEvent.idl: Added a 'V8CustomConstructor' attribute.

2011-09-02  Adrienne Walker  <enne@google.com>

        [chromium] Move updateLayers from LayerRendererChromium to CCLayerTreeHost
        https://bugs.webkit.org/show_bug.cgi?id=67438

        Reviewed by James Robinson.

        Covered by existing tests.

        Move functionality used by both CCLayerTreeHost and
        LayerRendererChromium into CCLayerTreeHostCommon. Move update, paint,
        and updateCompositorResource functions into CClayerTreeHost.

        * WebCore.gypi:
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::sortLayers):
        * platform/graphics/chromium/LayerChromium.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::textureMemoryReclaimLimit):
        (WebCore::LayerRendererChromium::drawLayers):
        (WebCore::LayerRendererChromium::drawLayersInternal):
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::sortLayers):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::updateLayers):
        (WebCore::paintContentsIfDirty):
        (WebCore::CCLayerTreeHost::paintLayerContents):
        (WebCore::CCLayerTreeHost::updateCompositorResources):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostCommon.cpp: Added.
        (WebCore::CCLayerTreeHostCommon::isScaleOrTranslation):
        (WebCore::CCLayerTreeHostCommon::calculateVisibleRect):
        (WebCore::CCLayerTreeHostCommon::calculateVisibleLayerRect):
        * platform/graphics/chromium/cc/CCLayerTreeHostCommon.h: Added.
        (WebCore::CCLayerTreeHostCommon::calculateDrawTransformsAndVisibility):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::commitIfNeeded):

2011-09-02  Chris Marrin  <cmarrin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67510
        Crash can occur when doing a PlatformCAAnimation::copy() with no valueFunction

        Reviewed by Simon Fraser.
        
        Do a null check in two places to avoid sending nulls to CACF ValueFunction API.

        Test: animations/pause-crash.html

        * platform/graphics/ca/win/PlatformCAAnimationWin.cpp:
        (PlatformCAAnimation::valueFunction):
        (PlatformCAAnimation::setValueFunction):

2011-09-02  Bill Budge  <bbudge@chromium.org>

        Add a 'didDownloadData' method to ResourceLoader, SubresourceLoader,
        SubresourceLoaderClient, DocumentThreadableLoader, ResourceHandleClient,
        and ThreadableLoaderClient for the Chromium port only, so we can pass
        these notifications from our ResourceHandle implementation through the
        WebCore loader framework.
        https://bugs.webkit.org/show_bug.cgi?id=67229

        Reviewed by Darin Fisher.

        No new tests. Exposes no new functionality.

        * WebCore.gypi:
        * loader/DocumentThreadableLoader.h:
        * loader/ResourceLoader.h:
        * loader/SubresourceLoader.h:
        * loader/SubresourceLoaderClient.h:
        (WebCore::SubresourceLoaderClient::didDownloadData):
        * loader/ThreadableLoaderClient.h:
        (WebCore::ThreadableLoaderClient::didDownloadData):
        * loader/ThreadableLoaderClientWrapper.h:
        (WebCore::ThreadableLoaderClientWrapper::didDownloadData):
        * loader/chromium: Added.
        * loader/chromium/DocumentThreadableLoaderChromium.cpp: Added.
        (WebCore::DocumentThreadableLoader::didDownloadData):
        * loader/chromium/ResourceLoaderChromium.cpp: Added.
        (WebCore::ResourceLoader::didDownloadData):
        * loader/chromium/SubresourceLoaderChromium.cpp: Added.
        (WebCore::SubresourceLoader::didDownloadData):
        * platform/network/ResourceHandleClient.h:
        (WebCore::ResourceHandleClient::didDownloadData):

2011-09-02  Jeff Miller  <jeffm@apple.com>

        Assert that PlatformCALayerWinInternal::displayCallback() is only called on the main thread
        https://bugs.webkit.org/show_bug.cgi?id=67541

        Reviewed by Simon Fraser.

        No new tests, covered by existing media tests.

        * platform/graphics/ca/win/PlatformCALayerWinInternal.cpp:
        (PlatformCALayerWinInternal::displayCallback): Assert that is function is only called on the main thread.

2011-09-02  Julien Chaffraix  <jchaffraix@webkit.org>

        Enable RenderLayer::updateLayerPosition's cachedOffset optimization for more cases
        https://bugs.webkit.org/show_bug.cgi?id=66901

        Reviewed by Simon Fraser.

        Test: fast/layers/assert-RenderLayer-update-positions.html
              Also covered by existing tests under the new ASSERT.

        This change extends the range of callers making use of the cachedOffset optimization.

        Most callers did not make use of cachedOffset as it did not work when called on a subtree.
        This limitation is now gone thus we can enable it more widely.

        The semantics of the optimization are changed a bit as we now return if it is enabled whereas
        the old code would check if it was *disabled*. Also there were some renames done to match more
        closely what was going on (s/cachedOffset/offsetFromRoot/ and s/cachedOffsetDisabled/hasLayerOffset/).

        Note that this is an optimistic optimization: if cachedOffset is not used, then we have
        done at least an extra traversal up to the root. I have found it to be a wash on file
        cycler (alexa) but to be a nice improvement (~20%) on some table benchmarks (modifying
        a cell, scrolling).

        * page/FrameView.cpp:
        (WebCore::FrameView::layout): Extended the use of cachedOffset to subtree layouts.
        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::styleDidChange): Forbid the use cachedOffset in this
        case as we have only a single layer to update.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::computeOffsetFromRoot): Added this function to get the offset from the root
        layer at a certain point in the RenderLayer's tree. It gets the root layer's checking if no layer
        in between would prevent convertToLayerCoords to work and return the position relative to
        this layer.

        (WebCore::RenderLayer::updateLayerPositions): Added a new ASSERT to make sure our cachedOffset
        is always fine. Also added a comment about calling convertToLayerCoords.

        (WebCore::RenderLayer::removeOnlyThisLayer): Added cachedOffset here too as we may have to
        update several layers. We save the offset prior to being removed from the hierarchy for
        correctness.

        (WebCore::RenderLayer::paintChildLayerIntoColumns): Added a comment here about calling convertToLayerCoords.

        * rendering/RenderLayer.h: Swapped the argument in updateLayerPositions to make
        cachedOffset a mandatory field. Patched all the callers.

        (WebCore::RenderLayer::canUseConvertToLayerCoords): Added this helper method to know when a
        renderer prevents convertToLayerCoords from working. Added some FIXME around suspicious use
        of convertToLayerCoords.

2011-08-30  Matthew Delaney  <mdelaney@apple.com>

        Read out of bounds in sUnpremultiplyData_RGBA8888 / ImageBufferData::getData
        https://bugs.webkit.org/show_bug.cgi?id=65352

        Reviewed by Simon Fraser.

        New test: fast/canvas/canvas-getImageData-large-crash.html

        This patch prevents overflows from happening in getImageData, createImageData, and canvas creation
        calls that specify widths and heights that end up overflowing the ints that we store those values in
        as well as derived values such as area and maxX / maxY of the bounding rects involved. Overflow of integer
        arithmetic is detected via the use of the new Checked type that was introduced in r94207.

        * html/HTMLCanvasElement.cpp:
        (WebCore::HTMLCanvasElement::convertLogicalToDevice): Removed dependency on ints, using FloatRects/Sizes instead.
        (WebCore::HTMLCanvasElement::createImageBuffer): Moved the check for max canvas area and dimensions here.
          Added in check that prevents us from having canvases of sizes that will cause overflows.
        (WebCore::HTMLCanvasElement::baseTransform): Updated use of convertLogicalToDevice.
        * html/HTMLCanvasElement.h: Updated method signatures.
        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::createEmptyImageData): Added in check to prevent creating ImageData objects that will cause overflow when computing their size.
        (WebCore::CanvasRenderingContext2D::createImageData): Avoid creating ImageData objects of size that will overflow later.
        (WebCore::CanvasRenderingContext2D::getImageData): Added in check to prevent trying to get ImageData objects that will cause overflow when computing their size.
        * platform/graphics/FloatRect.cpp:
        (WebCore::FloatRect::isExpressibleAsIntRect): New method that tests whether a FloatRect can become an IntRect without overflow or having to be clamped.
        * platform/graphics/FloatRect.h:
        * platform/graphics/FloatSize.cpp:
        (WebCore::FloatSize::isExpressibleAsIntSize): Same as FloatRect, but for FloatSize->IntSize.
        * platform/graphics/FloatSize.h:
        * platform/graphics/cg/ImageBufferCG.cpp: Added check for overflow.
        (WebCore::ImageBuffer::ImageBuffer):

2011-09-02  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/9755843> anonymous RenderMathMLOperator sets itself as the renderer of its parent mfenced node

        Reviewed by Darin Adler.

        Test: mathml/operator-hijacks-fenced-node.xhtml

        * rendering/mathml/RenderMathMLOperator.cpp:
        (WebCore::RenderMathMLOperator::updateFromElement): Rather than unconditionally setting the
        node’s renderer to this, just restore it to whatever it was before calling destroyLeftoverChildren().

2011-09-02  Mark Hahnenberg  <mhahnenberg@apple.com>

        Incorporate newer, faster dtoa library
        https://bugs.webkit.org/show_bug.cgi?id=66346

        Reviewed by Oliver Hunt.

        No new tests.

        Added new dtoa library at http://code.google.com/p/double-conversion/.
        Replaced old call to dtoa.  The new library is much faster than the old one.
        We still use the old dtoa for some stuff in WebCore as well as the old strtod, 
        but we can phase these out eventually as well.

        * ForwardingHeaders/wtf/dtoa/double-conversion.h: Added.
        * WebCore.vcproj/copyForwardingHeaders.cmd:
        * css/CSSPrimitiveValue.cpp:
        (WebCore::formatNumber):
        * html/parser/HTMLParserIdioms.cpp:
        (WebCore::serializeForNumberType):
        * inspector/InspectorValues.cpp:
        (WebCore::InspectorBasicValue::writeJSON):
        * platform/graphics/Color.cpp:
        (WebCore::Color::serialized):

2011-09-02  Nat Duca  <nduca@chromium.org>

        [chromium] Check for null context when reinitializing compositor
        https://bugs.webkit.org/show_bug.cgi?id=67507

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::recreateContextIfNeeded):

2011-09-02  Sam Weinig  <sam@webkit.org>

        Remove BeforeProcessEvent, it was never meant to be
        https://bugs.webkit.org/show_bug.cgi?id=67493

        Reviewed by Anders Carlsson.

        BeforeProcessEvent was added, never hooked up, and never removed.
        Now it is being removed.

        * CodeGenerators.pri:
        * DerivedSources.make:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * dom/BeforeProcessEvent.cpp: Removed.
        * dom/BeforeProcessEvent.h: Removed.
        * dom/BeforeProcessEvent.idl: Removed.
        * dom/DOMAllInOne.cpp:
        * dom/Document.cpp:
        (WebCore::Document::addListenerTypeIfNeeded):
        * dom/Document.h:
        * dom/EventNames.h:
        * html/HTMLAttributeNames.in:
        * html/HTMLScriptElement.cpp:
        (WebCore::HTMLScriptElement::parseMappedAttribute):
        * html/HTMLStyleElement.cpp:
        (WebCore::HTMLStyleElement::parseMappedAttribute):

2011-09-02  Adrienne Walker  <enne@google.com>

        [chromium] Remove LayerRendererChromium references from the LayerChromium tree
        https://bugs.webkit.org/show_bug.cgi?id=66430

        Reviewed by James Robinson.

        Covered by existing tests.

        Replace references to LayerRendererChromium in the LayerChromium tree
        with references to LayerTreeHost. The LayerRendererChromium property
        is no longer synced and instead is set recursively on the CCLayerImpl
        tree during commit.

        WebGLLayerChromium's paintRenderedResultsToCanvas function is
        temporarily turned off for threaded compositing because it needs
        access to the compositor context.

        Previously, changing the layer renderer on a layer called cleanup
        resources on that layer.  Now, call that explicitly clean up all
        resources explicitly from the proxy when the layer renderer gets
        created. This cleans up all of the ManagedTexture objects which may be
        hanging onto stale GraphicsContext3D pointers.

        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::cleanupResourcesRecursive):
        (WebCore::LayerChromium::setLayerTreeHost):
        (WebCore::LayerChromium::pushPropertiesTo):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::layerTreeHost):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::drawLayers):
        (WebCore::LayerRendererChromium::paintLayerContents):
        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
        * platform/graphics/chromium/RenderSurfaceChromium.h:
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::TiledLayerChromium):
        (WebCore::TiledLayerChromium::updateTileSizeAndTilingOption):
        (WebCore::TiledLayerChromium::setLayerTreeHost):
        (WebCore::TiledLayerChromium::textureManager):
        * platform/graphics/chromium/TiledLayerChromium.h:
        * platform/graphics/chromium/VideoLayerChromium.cpp:
        (WebCore::VideoLayerChromium::VideoLayerChromium):
        (WebCore::VideoLayerChromium::cleanupResources):
        (WebCore::VideoLayerChromium::setLayerTreeHost):
        (WebCore::VideoLayerChromium::reserveTextures):
        * platform/graphics/chromium/VideoLayerChromium.h:
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::paintRenderedResultsToCanvas):
        (WebCore::WebGLLayerChromium::setTextureUpdated):
        (WebCore::WebGLLayerChromium::layerRendererContext):
        * platform/graphics/chromium/WebGLLayerChromium.h:
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::setLayerRendererRecursive):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::didRecreateGraphicsContext):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):

2011-09-02  Alexey Proskuryakov  <ap@apple.com>

        Build fix.

        * platform/network/mac/CookieStorageMac.mm: (WebCore::setCookieStoragePrivateBrowsingEnabled):
        Can't use BUILDING_ON_SNOW_LEOPARD without defined() when not on Snow Leopard.

2011-09-02  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94421.
        http://trac.webkit.org/changeset/94421
        https://bugs.webkit.org/show_bug.cgi?id=67496

        Broke a number of tests on Chromium builders (including the
        "cr-linux" EWS bot) (Requested by apavlov on #webkit).

        * accessibility/AXObjectCache.cpp:
        (WebCore::nodeHasRole):
        * accessibility/gtk/AccessibilityObjectWrapperAtk.cpp:
        (webkit_accessible_get_name):
        * dom/Document.cpp:
        (WebCore::Document::buildAccessKeyMap):
        (WebCore::Document::recalcStyleSelector):
        * dom/Element.cpp:
        (WebCore::Element::baseURI):
        (WebCore::Element::formatForDebugger):
        (WebCore::Element::spellcheckAttributeState):
        * dom/NameNodeList.cpp:
        (WebCore::NameNodeList::nodeMatches):
        * editing/ApplyStyleCommand.cpp:
        (WebCore::ApplyStyleCommand::removeEmbeddingUpToEnclosingBlock):
        * editing/SplitElementCommand.cpp:
        (WebCore::SplitElementCommand::doUnapply):
        * editing/markup.cpp:
        (WebCore::shouldIncludeWrapperForFullySelectedRoot):
        (WebCore::createMarkup):
        * html/HTMLAnchorElement.cpp:
        (WebCore::HTMLAnchorElement::draggable):
        (WebCore::HTMLAnchorElement::href):
        (WebCore::HTMLAnchorElement::name):
        (WebCore::HTMLAnchorElement::target):
        (WebCore::HTMLAnchorElement::sendPings):
        (WebCore::HTMLAnchorElement::handleClick):
        * html/HTMLAppletElement.cpp:
        (WebCore::HTMLAppletElement::createRenderer):
        * html/HTMLAreaElement.cpp:
        (WebCore::HTMLAreaElement::target):
        * html/HTMLBodyElement.cpp:
        (WebCore::HTMLBodyElement::aLink):
        (WebCore::HTMLBodyElement::bgColor):
        (WebCore::HTMLBodyElement::link):
        (WebCore::HTMLBodyElement::text):
        (WebCore::HTMLBodyElement::vLink):
        (WebCore::HTMLBodyElement::addSubresourceAttributeURLs):
        * html/HTMLButtonElement.cpp:
        (WebCore::HTMLButtonElement::value):
        * html/HTMLCanvasElement.cpp:
        (WebCore::HTMLCanvasElement::reset):
        * html/HTMLCollection.cpp:
        (WebCore::HTMLCollection::checkForNameMatch):
        (WebCore::HTMLCollection::updateNameCache):
        * html/HTMLDocument.cpp:
        (WebCore::HTMLDocument::dir):
        * html/HTMLElement.cpp:
        (WebCore::HTMLElement::parseMappedAttribute):
        (WebCore::HTMLElement::draggable):
        (WebCore::HTMLElement::title):
        (WebCore::setHasDirAutoFlagRecursively):
        (WebCore::HTMLElement::directionalityIfhasDirAutoAttribute):
        (WebCore::HTMLElement::adjustDirectionalityIfNeededAfterChildAttributeChanged):
        (WebCore::HTMLElement::adjustDirectionalityIfNeededAfterChildrenChanged):
        * html/HTMLEmbedElement.cpp:
        (WebCore::HTMLEmbedElement::updateWidget):
        (WebCore::HTMLEmbedElement::insertedIntoDocument):
        (WebCore::HTMLEmbedElement::addSubresourceAttributeURLs):
        * html/HTMLFormCollection.cpp:
        (WebCore::HTMLFormCollection::getNamedFormItem):
        (WebCore::HTMLFormCollection::updateNameCache):
        * html/HTMLFormControlElement.cpp:
        (WebCore::HTMLFormControlElement::autofocus):
        (WebCore::HTMLFormControlElement::updateVisibleValidationMessage):
        * html/HTMLFormElement.cpp:
        (WebCore::HTMLFormElement::name):
        (WebCore::HTMLFormElement::action):
        (WebCore::HTMLFormElement::method):
        (WebCore::HTMLFormElement::target):
        * html/HTMLFrameElement.cpp:
        (WebCore::HTMLFrameElement::noResize):
        * html/HTMLFrameElementBase.cpp:
        (WebCore::HTMLFrameElementBase::setNameAndOpenURL):
        (WebCore::HTMLFrameElementBase::location):
        (WebCore::HTMLFrameElementBase::allowFullScreen):
        * html/HTMLHtmlElement.cpp:
        (WebCore::HTMLHtmlElement::insertedByParser):
        * html/HTMLImageElement.cpp:
        (WebCore::HTMLImageElement::altText):
        (WebCore::HTMLImageElement::width):
        (WebCore::HTMLImageElement::height):
        (WebCore::HTMLImageElement::alt):
        (WebCore::HTMLImageElement::draggable):
        (WebCore::HTMLImageElement::src):
        (WebCore::HTMLImageElement::addSubresourceAttributeURLs):
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::finishParsingChildren):
        (WebCore::HTMLInputElement::altText):
        (WebCore::HTMLInputElement::reset):
        (WebCore::HTMLInputElement::searchEventsShouldBeDispatched):
        (WebCore::HTMLInputElement::isSpeechEnabled):
        * html/HTMLLabelElement.cpp:
        (WebCore::HTMLLabelElement::control):
        * html/HTMLLinkElement.cpp:
        (WebCore::HTMLLinkElement::process):
        (WebCore::HTMLLinkElement::href):
        (WebCore::HTMLLinkElement::rel):
        (WebCore::HTMLLinkElement::target):
        (WebCore::HTMLLinkElement::type):
        * html/HTMLMapElement.cpp:
        (WebCore::HTMLMapElement::imageElement):
        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::attributeChanged):
        (WebCore::HTMLMediaElement::insertedIntoDocument):
        * html/HTMLMetaElement.cpp:
        (WebCore::HTMLMetaElement::content):
        (WebCore::HTMLMetaElement::httpEquiv):
        (WebCore::HTMLMetaElement::name):
        * html/HTMLMeterElement.cpp:
        (WebCore::HTMLMeterElement::min):
        (WebCore::HTMLMeterElement::max):
        (WebCore::HTMLMeterElement::value):
        (WebCore::HTMLMeterElement::low):
        (WebCore::HTMLMeterElement::high):
        (WebCore::HTMLMeterElement::optimum):
        * html/HTMLNameCollection.cpp:
        (WebCore::HTMLNameCollection::itemAfter):
        * html/HTMLObjectElement.cpp:
        (WebCore::HTMLObjectElement::updateWidget):
        (WebCore::HTMLObjectElement::containsJavaApplet):
        (WebCore::HTMLObjectElement::addSubresourceAttributeURLs):
        * html/HTMLOptGroupElement.cpp:
        (WebCore::HTMLOptGroupElement::groupLabelText):
        * html/HTMLProgressElement.cpp:
        (WebCore::HTMLProgressElement::max):
        * html/HTMLScriptElement.cpp:
        (WebCore::HTMLScriptElement::sourceAttributeValue):
        (WebCore::HTMLScriptElement::charsetAttributeValue):
        (WebCore::HTMLScriptElement::typeAttributeValue):
        (WebCore::HTMLScriptElement::languageAttributeValue):
        (WebCore::HTMLScriptElement::forAttributeValue):
        (WebCore::HTMLScriptElement::eventAttributeValue):
        * html/HTMLSourceElement.cpp:
        (WebCore::HTMLSourceElement::media):
        (WebCore::HTMLSourceElement::type):
        * html/HTMLStyleElement.cpp:
        (WebCore::HTMLStyleElement::media):
        (WebCore::HTMLStyleElement::type):
        * html/HTMLTableCellElement.cpp:
        (WebCore::HTMLTableCellElement::abbr):
        (WebCore::HTMLTableCellElement::axis):
        (WebCore::HTMLTableCellElement::headers):
        (WebCore::HTMLTableCellElement::scope):
        (WebCore::HTMLTableCellElement::addSubresourceAttributeURLs):
        * html/HTMLTableColElement.cpp:
        (WebCore::HTMLTableColElement::width):
        * html/HTMLTableElement.cpp:
        (WebCore::HTMLTableElement::rules):
        (WebCore::HTMLTableElement::summary):
        (WebCore::HTMLTableElement::addSubresourceAttributeURLs):
        * html/HTMLTableSectionElement.cpp:
        (WebCore::HTMLTableSectionElement::align):
        (WebCore::HTMLTableSectionElement::ch):
        (WebCore::HTMLTableSectionElement::chOff):
        (WebCore::HTMLTableSectionElement::vAlign):
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::maxLength):
        * html/HTMLTextFormControlElement.cpp:
        (WebCore::HTMLTextFormControlElement::strippedPlaceholder):
        (WebCore::HTMLTextFormControlElement::isPlaceholderEmpty):
        * html/HTMLTrackElement.cpp:
        (WebCore::HTMLTrackElement::src):
        (WebCore::HTMLTrackElement::kind):
        (WebCore::HTMLTrackElement::srclang):
        (WebCore::HTMLTrackElement::label):
        (WebCore::HTMLTrackElement::isDefault):
        (WebCore::HTMLTrackElement::load):
        * html/HTMLVideoElement.cpp:
        (WebCore::HTMLVideoElement::width):
        (WebCore::HTMLVideoElement::height):
        * html/StepRange.cpp:
        (WebCore::StepRange::StepRange):
        * html/shadow/TextControlInnerElements.cpp:
        (WebCore::InputFieldSpeechButtonElement::startSpeechInput):
        * inspector/InspectorPageAgent.cpp:
        (WebCore::InspectorPageAgent::buildObjectForFrame):
        * loader/FormSubmission.cpp:
        (WebCore::FormSubmission::create):
        * loader/ImageLoader.cpp:
        (WebCore::ImageLoader::updateFromElement):
        * page/Frame.cpp:
        (WebCore::Frame::matchLabelsAgainstElement):
        * page/PageSerializer.cpp:
        (WebCore::PageSerializer::serializeFrame):
        * page/mac/FrameMac.mm:
        (WebCore::Frame::matchLabelsAgainstElement):
        * platform/chromium/ClipboardChromium.cpp:
        (WebCore::writeImageToDataObject):
        * platform/chromium/PasteboardChromium.cpp:
        (WebCore::Pasteboard::writeImage):
        * platform/gtk/PasteboardGtk.cpp:
        (WebCore::getURLForImageNode):
        * platform/mac/HTMLConverter.mm:
        (fileWrapperForElement):
        * platform/win/ClipboardWin.cpp:
        (WebCore::writeImageToDataObject):
        (WebCore::ClipboardWin::declareAndWriteDragImage):
        * rendering/HitTestResult.cpp:
        (WebCore::HitTestResult::altDisplayString):
        (WebCore::HitTestResult::absoluteImageURL):
        (WebCore::HitTestResult::absoluteLinkURL):
        * rendering/RenderDetails.cpp:
        (WebCore::RenderDetails::isOpen):
        * rendering/RenderMenuList.cpp:
        (WebCore::RenderMenuList::itemAccessibilityText):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::addPDFURLRect):
        * rendering/RenderTableCell.cpp:
        (WebCore::RenderTableCell::computePreferredLogicalWidths):
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::autosaveName):
        * rendering/RenderVideo.cpp:
        (WebCore::RenderVideo::calculateIntrinsicSize):
        * rendering/mathml/RenderMathMLFenced.cpp:
        (WebCore::RenderMathMLFenced::updateFromElement):
        * rendering/mathml/RenderMathMLFraction.cpp:
        (WebCore::RenderMathMLFraction::updateFromElement):
        * rendering/mathml/RenderMathMLOperator.cpp:
        (WebCore::RenderMathMLOperator::updateFromElement):
        * svg/SVGFontData.cpp:
        (WebCore::SVGFontData::applySVGGlyphSelection):

2011-09-02  Alexey Proskuryakov  <ap@apple.com>

        REGRESSION (r94093): Private browsing doesn't start with a clean state on Snow Leopard
        https://bugs.webkit.org/show_bug.cgi?id=67356

        Reviewed by Darin Adler.

        * platform/network/mac/CookieStorageMac.mm: (WebCore::setCookieStoragePrivateBrowsingEnabled):
        Don't enable old-style private browsing when using sessions - it would take precedence over
        session cookie storage on Snow Leopard.

2011-09-02  Mihnea Ovidenie  <mihnea@adobe.com>

        BORDER attribute percent with the input image tag not working.
        https://bugs.webkit.org/show_bug.cgi?id=66467

        Reviewed by Simon Fraser.

        This patch fixes 2 issues regarding the border attribute of an input image element.
        1. The border attribute, if specified, is now taken into account and the border of the input image element is displayed.
        2. If the border attribute contains percent, the border is displayed.
        The value of the border attribute for input image element is now parsed according to the rules for parsing non-negative integers.
        This implies that when percent is specified in the border attribute, parsing takes place and the percent is ignored.
        If after parsing, the value of the border is greater than zero, the border of the input image element is displayed.

        * html/HTMLElement.cpp:
        (WebCore::parseBorderWidthAttribute):
        (WebCore::HTMLElement::applyBorderAttribute):
        * html/HTMLElement.h:
        * html/HTMLImageElement.cpp:
        (WebCore::HTMLImageElement::parseMappedAttribute):
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::parseMappedAttribute):
        * html/HTMLObjectElement.cpp:
        (WebCore::HTMLObjectElement::parseMappedAttribute):

2011-09-02  Kentaro Hara  <haraken@google.com>

        Implement the Event constructor for V8.
        https://bugs.webkit.org/show_bug.cgi?id=66756

        Reviewed by Adam Barth.

        The spec of the Event constructor is here:
        http://dvcs.w3.org/hg/domcore/raw-file/tip/Overview.html#concept-event-constructor
        This patch implements the Event constructor for V8 in V8EventConstructors.cpp,
        similar to the implementation for JSC in JSEventConstructors.cpp.

        * WebCore.gypi: Added V8EventConstructors.cpp.
        * WebCore.pro: Ditto.
        * bindings/scripts/CodeGeneratorV8.pm:
        * bindings/v8/OptionsObject.cpp:
        (WebCore::OptionsObject::getKeyDouble): Returns a value of type double corresponding to a given key.
        * bindings/v8/OptionsObject.h:
        (WebCore::OptionsObject::getKeyValue): Returns a value corresponding to a given key.
        * bindings/v8/custom/V8EventConstructors.cpp: Added.
        (WebCore::constructV8Event): AllowAllocation::current() means that a DOM object created by WebCore is going to be just wrapped into a V8 object. In this case, we skip the code of constructorCallback().
        * dom/Event.idl: Added |V8CustomConstructor|.

2011-09-02  Anton Muhin  <antonm@chromium.org>

        [v8] Use size_t instead of unsigned when iterating over Vector in V8DOMStringMap
        https://bugs.webkit.org/show_bug.cgi?id=67484

        Reviewed by Yury Semikhatsky.

        No new tests, minor cleanup.

        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        (WebCore::V8DOMStringMap::namedPropertyEnumerator):

2011-09-02  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94404.
        http://trac.webkit.org/changeset/94404
        https://bugs.webkit.org/show_bug.cgi?id=67490

        "Patch is wrong, new API needs two reviewers, we are already
        working on how to add notifications elsewhere" (Requested by
        xan_ on #webkit).

        * bindings/gobject/GNUmakefile.am:

2011-09-02  Andreas Kling  <kling@webkit.org>

        Use fastGetAttribute() and fastHasAttribute() where appropriate.
        https://bugs.webkit.org/show_bug.cgi?id=67394

        Reviewed by Darin Adler.

        Change call sites that don't check the "style" or SVG animatable
        attributes to use fastGetAttribute()/fastHasAttribute() instead
        of getAttribute()/hasAttribute().

        No new tests, this is a minor performance optimization.

        * accessibility/AXObjectCache.cpp:
        (WebCore::nodeHasRole):
        * accessibility/gtk/AccessibilityObjectWrapperAtk.cpp:
        (webkit_accessible_get_name):
        * dom/Document.cpp:
        (WebCore::Document::buildAccessKeyMap):
        (WebCore::Document::recalcStyleSelector):
        * dom/Element.cpp:
        (WebCore::Element::baseURI):
        (WebCore::Element::formatForDebugger):
        (WebCore::Element::spellcheckAttributeState):
        * dom/NameNodeList.cpp:
        (WebCore::NameNodeList::nodeMatches):
        * editing/ApplyStyleCommand.cpp:
        (WebCore::ApplyStyleCommand::removeEmbeddingUpToEnclosingBlock):
        * editing/SplitElementCommand.cpp:
        (WebCore::SplitElementCommand::doUnapply):
        * editing/markup.cpp:
        (WebCore::shouldIncludeWrapperForFullySelectedRoot):
        (WebCore::createMarkup):
        * html/HTMLAnchorElement.cpp:
        (WebCore::HTMLAnchorElement::draggable):
        (WebCore::HTMLAnchorElement::href):
        (WebCore::HTMLAnchorElement::name):
        (WebCore::HTMLAnchorElement::target):
        (WebCore::HTMLAnchorElement::sendPings):
        (WebCore::HTMLAnchorElement::handleClick):
        * html/HTMLAppletElement.cpp:
        (WebCore::HTMLAppletElement::createRenderer):
        * html/HTMLAreaElement.cpp:
        (WebCore::HTMLAreaElement::target):
        * html/HTMLBodyElement.cpp:
        (WebCore::HTMLBodyElement::aLink):
        (WebCore::HTMLBodyElement::bgColor):
        (WebCore::HTMLBodyElement::link):
        (WebCore::HTMLBodyElement::text):
        (WebCore::HTMLBodyElement::vLink):
        (WebCore::HTMLBodyElement::addSubresourceAttributeURLs):
        * html/HTMLButtonElement.cpp:
        (WebCore::HTMLButtonElement::value):
        * html/HTMLCanvasElement.cpp:
        (WebCore::HTMLCanvasElement::reset):
        * html/HTMLCollection.cpp:
        (WebCore::HTMLCollection::checkForNameMatch):
        (WebCore::HTMLCollection::updateNameCache):
        * html/HTMLDocument.cpp:
        (WebCore::HTMLDocument::dir):
        * html/HTMLElement.cpp:
        (WebCore::HTMLElement::parseMappedAttribute):
        (WebCore::HTMLElement::draggable):
        (WebCore::HTMLElement::title):
        (WebCore::setHasDirAutoFlagRecursively):
        (WebCore::HTMLElement::directionalityIfhasDirAutoAttribute):
        (WebCore::HTMLElement::adjustDirectionalityIfNeededAfterChildAttributeChanged):
        (WebCore::HTMLElement::adjustDirectionalityIfNeededAfterChildrenChanged):
        * html/HTMLEmbedElement.cpp:
        (WebCore::HTMLEmbedElement::updateWidget):
        (WebCore::HTMLEmbedElement::insertedIntoDocument):
        (WebCore::HTMLEmbedElement::addSubresourceAttributeURLs):
        * html/HTMLFormCollection.cpp:
        (WebCore::HTMLFormCollection::getNamedFormItem):
        (WebCore::HTMLFormCollection::updateNameCache):
        * html/HTMLFormControlElement.cpp:
        (WebCore::HTMLFormControlElement::autofocus):
        (WebCore::HTMLFormControlElement::updateVisibleValidationMessage):
        * html/HTMLFormElement.cpp:
        (WebCore::HTMLFormElement::name):
        (WebCore::HTMLFormElement::action):
        (WebCore::HTMLFormElement::method):
        (WebCore::HTMLFormElement::target):
        * html/HTMLFrameElement.cpp:
        (WebCore::HTMLFrameElement::noResize):
        * html/HTMLFrameElementBase.cpp:
        (WebCore::HTMLFrameElementBase::setNameAndOpenURL):
        (WebCore::HTMLFrameElementBase::location):
        (WebCore::HTMLFrameElementBase::allowFullScreen):
        * html/HTMLHtmlElement.cpp:
        (WebCore::HTMLHtmlElement::insertedByParser):
        * html/HTMLImageElement.cpp:
        (WebCore::HTMLImageElement::altText):
        (WebCore::HTMLImageElement::width):
        (WebCore::HTMLImageElement::height):
        (WebCore::HTMLImageElement::alt):
        (WebCore::HTMLImageElement::draggable):
        (WebCore::HTMLImageElement::src):
        (WebCore::HTMLImageElement::addSubresourceAttributeURLs):
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::finishParsingChildren):
        (WebCore::HTMLInputElement::altText):
        (WebCore::HTMLInputElement::reset):
        (WebCore::HTMLInputElement::searchEventsShouldBeDispatched):
        (WebCore::HTMLInputElement::isSpeechEnabled):
        * html/HTMLLabelElement.cpp:
        (WebCore::HTMLLabelElement::control):
        * html/HTMLLinkElement.cpp:
        (WebCore::HTMLLinkElement::process):
        (WebCore::HTMLLinkElement::href):
        (WebCore::HTMLLinkElement::rel):
        (WebCore::HTMLLinkElement::target):
        (WebCore::HTMLLinkElement::type):
        * html/HTMLMapElement.cpp:
        (WebCore::HTMLMapElement::imageElement):
        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::attributeChanged):
        (WebCore::HTMLMediaElement::insertedIntoDocument):
        * html/HTMLMetaElement.cpp:
        (WebCore::HTMLMetaElement::content):
        (WebCore::HTMLMetaElement::httpEquiv):
        (WebCore::HTMLMetaElement::name):
        * html/HTMLMeterElement.cpp:
        (WebCore::HTMLMeterElement::min):
        (WebCore::HTMLMeterElement::max):
        (WebCore::HTMLMeterElement::value):
        (WebCore::HTMLMeterElement::low):
        (WebCore::HTMLMeterElement::high):
        (WebCore::HTMLMeterElement::optimum):
        * html/HTMLNameCollection.cpp:
        (WebCore::HTMLNameCollection::itemAfter):
        * html/HTMLObjectElement.cpp:
        (WebCore::HTMLObjectElement::updateWidget):
        (WebCore::HTMLObjectElement::containsJavaApplet):
        (WebCore::HTMLObjectElement::addSubresourceAttributeURLs):
        * html/HTMLOptGroupElement.cpp:
        (WebCore::HTMLOptGroupElement::groupLabelText):
        * html/HTMLProgressElement.cpp:
        (WebCore::HTMLProgressElement::max):
        * html/HTMLScriptElement.cpp:
        (WebCore::HTMLScriptElement::sourceAttributeValue):
        (WebCore::HTMLScriptElement::charsetAttributeValue):
        (WebCore::HTMLScriptElement::typeAttributeValue):
        (WebCore::HTMLScriptElement::languageAttributeValue):
        (WebCore::HTMLScriptElement::forAttributeValue):
        (WebCore::HTMLScriptElement::eventAttributeValue):
        * html/HTMLSourceElement.cpp:
        (WebCore::HTMLSourceElement::media):
        (WebCore::HTMLSourceElement::type):
        * html/HTMLStyleElement.cpp:
        (WebCore::HTMLStyleElement::media):
        (WebCore::HTMLStyleElement::type):
        * html/HTMLTableCellElement.cpp:
        (WebCore::HTMLTableCellElement::abbr):
        (WebCore::HTMLTableCellElement::axis):
        (WebCore::HTMLTableCellElement::headers):
        (WebCore::HTMLTableCellElement::scope):
        (WebCore::HTMLTableCellElement::addSubresourceAttributeURLs):
        * html/HTMLTableColElement.cpp:
        (WebCore::HTMLTableColElement::width):
        * html/HTMLTableElement.cpp:
        (WebCore::HTMLTableElement::rules):
        (WebCore::HTMLTableElement::summary):
        (WebCore::HTMLTableElement::addSubresourceAttributeURLs):
        * html/HTMLTableSectionElement.cpp:
        (WebCore::HTMLTableSectionElement::align):
        (WebCore::HTMLTableSectionElement::ch):
        (WebCore::HTMLTableSectionElement::chOff):
        (WebCore::HTMLTableSectionElement::vAlign):
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::maxLength):
        * html/HTMLTextFormControlElement.cpp:
        (WebCore::HTMLTextFormControlElement::strippedPlaceholder):
        (WebCore::HTMLTextFormControlElement::isPlaceholderEmpty):
        * html/HTMLTrackElement.cpp:
        (WebCore::HTMLTrackElement::src):
        (WebCore::HTMLTrackElement::kind):
        (WebCore::HTMLTrackElement::srclang):
        (WebCore::HTMLTrackElement::label):
        (WebCore::HTMLTrackElement::isDefault):
        (WebCore::HTMLTrackElement::load):
        * html/HTMLVideoElement.cpp:
        (WebCore::HTMLVideoElement::width):
        (WebCore::HTMLVideoElement::height):
        * html/StepRange.cpp:
        (WebCore::StepRange::StepRange):
        * html/shadow/TextControlInnerElements.cpp:
        (WebCore::InputFieldSpeechButtonElement::startSpeechInput):
        * inspector/InspectorPageAgent.cpp:
        (WebCore::InspectorPageAgent::buildObjectForFrame):
        * loader/FormSubmission.cpp:
        (WebCore::FormSubmission::create):
        * loader/ImageLoader.cpp:
        (WebCore::ImageLoader::updateFromElement):
        * page/Frame.cpp:
        (WebCore::Frame::matchLabelsAgainstElement):
        * page/PageSerializer.cpp:
        (WebCore::PageSerializer::serializeFrame):
        * page/mac/FrameMac.mm:
        (WebCore::Frame::matchLabelsAgainstElement):
        * platform/chromium/ClipboardChromium.cpp:
        (WebCore::writeImageToDataObject):
        * platform/chromium/PasteboardChromium.cpp:
        (WebCore::Pasteboard::writeImage):
        * platform/gtk/PasteboardGtk.cpp:
        (WebCore::getURLForImageNode):
        * platform/mac/HTMLConverter.mm:
        (fileWrapperForElement):
        * platform/win/ClipboardWin.cpp:
        (WebCore::writeImageToDataObject):
        (WebCore::ClipboardWin::declareAndWriteDragImage):
        * rendering/HitTestResult.cpp:
        (WebCore::HitTestResult::altDisplayString):
        (WebCore::HitTestResult::absoluteImageURL):
        (WebCore::HitTestResult::absoluteLinkURL):
        * rendering/RenderDetails.cpp:
        (WebCore::RenderDetails::isOpen):
        * rendering/RenderMenuList.cpp:
        (WebCore::RenderMenuList::itemAccessibilityText):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::addPDFURLRect):
        * rendering/RenderTableCell.cpp:
        (WebCore::RenderTableCell::computePreferredLogicalWidths):
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::autosaveName):
        * rendering/RenderVideo.cpp:
        (WebCore::RenderVideo::calculateIntrinsicSize):
        * rendering/mathml/RenderMathMLFenced.cpp:
        (WebCore::RenderMathMLFenced::updateFromElement):
        * rendering/mathml/RenderMathMLFraction.cpp:
        (WebCore::RenderMathMLFraction::updateFromElement):
        * rendering/mathml/RenderMathMLOperator.cpp:
        (WebCore::RenderMathMLOperator::updateFromElement):
        * svg/SVGFontData.cpp:
        (WebCore::SVGFontData::applySVGGlyphSelection):

2011-09-01  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67431
        
        Implement border-image-repeat. Similar to how border-image-slice was implemented, the parsing of the two
        repeat values has been moved into separate functions. The value is represented as a Pair (similar to how we
        handle border radius).

        Reviewed by Beth Dakin.

        Added fast/borders/border-image-repeat.html.

        * css/CSSBorderImageValue.cpp:
        (WebCore::CSSBorderImageValue::CSSBorderImageValue):
        (WebCore::CSSBorderImageValue::cssText):
        * css/CSSBorderImageValue.h:
        (WebCore::CSSBorderImageValue::create):
        Modified the CSSBorderImageValue (you're living on borrowed time, my friend!) to have a CSSValue that
        contains a Pair.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::valueForRepeatRule):
        (WebCore::valueForNinePieceImageRepeat):
        (WebCore::valueForNinePieceImage):
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        Add support for the new properties. Break out the value retrieval for the image repeat rules into its
        own function, valueForNinePieceImageRepeat.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::BorderImageParseContext::BorderImageParseContext):
        (WebCore::BorderImageParseContext::allowRepeat):
        (WebCore::BorderImageParseContext::commitSlice):
        (WebCore::BorderImageParseContext::commitSlash):
        (WebCore::BorderImageParseContext::commitWidth):
        (WebCore::BorderImageParseContext::commitRepeat):
        (WebCore::BorderImageParseContext::commitBorderImage):
        (WebCore::CSSParser::parseBorderImage):
        Modified the parsing of border image to call into parseBorderImageRepeat for the repeat values.

        (WebCore::isBorderImageRepeatKeyword):
        (WebCore::CSSParser::parseBorderImageRepeat):
        The new parsing code for border-image-repeat is here. It will build up a CSSValue containing a Pair and
        return the result.

        * css/CSSParser.h:
        * css/CSSPropertyNames.in:
        Add the new properties.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        (WebCore::CSSStyleSelector::mapNinePieceImage):
        (WebCore::CSSStyleSelector::mapNinePieceImageRepeat):
        * css/CSSStyleSelector.h:
        The mapping into the front end is done the same way as border-image-slice. Factor out the image repeat rules
        portion into mapNinePieceImageRepeat.

        * platform/graphics/Image.cpp:
        (WebCore::Image::drawTiled):
        * platform/graphics/Image.h:
        Add the new 'space' value as a valid image tiling rule. It's not yet supported and, like the 'round' value,
        is just mapped to 'repeat' for now.
        
        * rendering/style/NinePieceImage.h:
        (WebCore::NinePieceImage::copyRepeatFrom):
        Helper for copying only the repeat rules from another NinePieceImage.

2011-09-02  Jarred Nicholls  <jarred@sencha.com>

        [Qt] number input not rendering spin buttons properly in RTL direction
        https://bugs.webkit.org/show_bug.cgi?id=67445
        
        Properly render Qt's number input with RTL direction, and fix Plastique styling.

        Reviewed by Andreas Kling.

        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::paintInnerSpinButton):

2011-09-02  Arko Saha  <nghq36@motorola.com>

        Resetting media controls when the src is changed from a valid url to an
        invalid url.
        https://bugs.webkit.org/show_bug.cgi?id=64880

        Reviewed by Eric Carlson.

        Test: media/media-controls-invalid-url.html

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::mediaLoadingFailed):

2011-09-02  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Make it more clear when requests are loaded from cache on network panel.
        https://bugs.webkit.org/show_bug.cgi?id=67396

        Reviewed by Pavel Feldman.

        * inspector/front-end/NetworkPanel.js:
        (WebInspector.NetworkDataGridNode.prototype._refreshStatusCell):
        * inspector/front-end/ResourceHeadersView.js:
        (WebInspector.ResourceHeadersView.prototype._refreshHTTPInformation):
        * inspector/front-end/networkPanel.css:
        (.resource-headers-view .outline-disclosure li .status-from-cache):

2011-09-02  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Should remove resource highlight on sort/filter in network panel.
        https://bugs.webkit.org/show_bug.cgi?id=67411

        Reviewed by Pavel Feldman.

        * inspector/front-end/NetworkPanel.js:
        (WebInspector.NetworkLogView.prototype._sortItems):
        (WebInspector.NetworkLogView.prototype._sortByTimeline):
        (WebInspector.NetworkLogView.prototype._updateFilter):

2011-09-02  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Network: jump to initiator's record in case of redirect
        https://bugs.webkit.org/show_bug.cgi?id=67367

        Reviewed by Pavel Feldman.

        * English.lproj/localizedStrings.js:
        * inspector/front-end/NetworkManager.js:
        (WebInspector.NetworkDispatcher.prototype._appendRedirect):
        * inspector/front-end/NetworkPanel.js:
        (WebInspector.NetworkDataGridNode.prototype._refreshInitiatorCell):
        * inspector/front-end/Resource.js:
        (WebInspector.Resource.prototype.get redirectSource):
        (WebInspector.Resource.prototype.set redirectSource):

2011-09-02  Antti Koivisto  <antti@apple.com>

        De-virtualize recalcStyle()
        https://bugs.webkit.org/show_bug.cgi?id=67378

        Reviewed by Dimitri Glazkov.

        Element::recalcStyle() does not need to be virtual, there are very few legit overrides. This will
        also make it possible to de-recursify it later.
        
        Added willRecalcStyle()/didRecalcStyle() virtual function for subclasses that need custom style recalc.
        These are only invoked if hasCustomWillOrDidRecalcStyle() bit is set.

        * dom/Document.cpp:
        (WebCore::Document::recalcStyle):
        * dom/Document.h:
        * dom/Element.cpp:
        (WebCore::Element::recalcStyle):
        * dom/Element.h:
        (WebCore::Element::willRecalcStyle):
        (WebCore::Element::didRecalcStyle):
        * dom/Node.h:
        (WebCore::Node::hasCustomWillOrDidRecalcStyle):
        (WebCore::Node::setHasCustomWillOrDidRecalcStyle):
        * dom/ShadowRoot.cpp:
        (WebCore::ShadowRoot::recalcShadowTreeStyle):
        * dom/ShadowRoot.h:
        * dom/Text.cpp:
        (WebCore::Text::recalcTextStyle):
        * dom/Text.h:
        * html/HTMLFormControlElement.cpp:
        (WebCore::HTMLFormControlElement::HTMLFormControlElement):
        (WebCore::HTMLFormControlElement::didRecalcStyle):
        * html/HTMLFormControlElement.h:
        * html/HTMLFrameSetElement.cpp:
        (WebCore::HTMLFrameSetElement::HTMLFrameSetElement):
        (WebCore::HTMLFrameSetElement::willRecalcStyle):
        * html/HTMLFrameSetElement.h:
        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::HTMLMediaElement):
        (WebCore::HTMLMediaElement::didRecalcStyle):
        * html/HTMLMediaElement.h:
        * html/HTMLNoScriptElement.cpp:
        (WebCore::HTMLNoScriptElement::HTMLNoScriptElement):
        (WebCore::HTMLNoScriptElement::willRecalcStyle):
        * html/HTMLNoScriptElement.h:
        * html/HTMLPlugInImageElement.cpp:
        (WebCore::HTMLPlugInImageElement::HTMLPlugInImageElement):
        (WebCore::HTMLPlugInImageElement::willRecalcStyle):
        * html/HTMLPlugInImageElement.h:
        * html/HTMLSelectElement.cpp:
        * html/HTMLSelectElement.h:
        * svg/SVGTRefElement.cpp:
        (WebCore::SVGTRefElement::SVGTRefElement):
        (WebCore::SVGShadowText::willRecalcStyle):
        * svg/SVGUseElement.cpp:
        (WebCore::SVGUseElement::SVGUseElement):
        (WebCore::SVGUseElement::willRecalcStyle):
        (WebCore::SVGUseElement::didRecalcStyle):
        * svg/SVGUseElement.h:

2011-09-02  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Send Blob as WebSocket binary message
        https://bugs.webkit.org/show_bug.cgi?id=67465

        Reviewed by Kent Tamura.

        Re-lands r94399 with a fix for Leopard builds.

        * bindings/js/JSWebSocketCustom.cpp:
        (WebCore::JSWebSocket::send):
        * bindings/v8/custom/V8WebSocketCustom.cpp:
        (WebCore::V8WebSocket::sendCallback):
        * websockets/ThreadableWebSocketChannel.h:
        * websockets/WebSocket.cpp:
        (WebCore::WebSocket::send):
        * websockets/WebSocket.h:
        * websockets/WebSocket.idl:
        * websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send):
        * websockets/WebSocketChannel.h:
        * websockets/WorkerThreadableWebSocketChannel.cpp:
        (WebCore::WorkerThreadableWebSocketChannel::send):
        (WebCore::WorkerThreadableWebSocketChannel::Peer::send):
        (WebCore::WorkerThreadableWebSocketChannel::mainThreadSendBlob):
        (WebCore::WorkerThreadableWebSocketChannel::Bridge::send):
        * websockets/WorkerThreadableWebSocketChannel.h:

2011-09-02  Patrick Gansterer  <paroga@webkit.org>

        [GTK] Generate gobject bindings for Notification and NotificationCenter
        https://bugs.webkit.org/show_bug.cgi?id=67380

        Reviewed by Philippe Normand.

        * bindings/gobject/GNUmakefile.am:

2011-09-02  Kenichi Ishibashi  <bashi@chromium.org>

        [chromium] editing/selection/regional-indicators.html timing out on Linux
        https://bugs.webkit.org/show_bug.cgi?id=66510

        Reviewed by Kent Tamura.

        Uses SurrogatePairAwareTextIerator in ComplexTextControllerLinux to handle surrogate pairs correctly.

        No new tests. editing/selection/regional-indicators.html should pass with this patch.

        * platform/graphics/chromium/ComplexTextControllerLinux.cpp:
        (WebCore::ComplexTextController::nextScriptRun): Used SurrogatePairAwareTextIterator to split run.
        (WebCore::surrogatePairAwareFirstCharacter): Added.
        (WebCore::ComplexTextController::setupFontForScriptRun): Used surrogatePairAwareFirstCharacter() to get appropriate FontData.

2011-09-02  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94399.
        http://trac.webkit.org/changeset/94399
        https://bugs.webkit.org/show_bug.cgi?id=67471

        Broke Leopard build (Requested by yutak on #webkit).

        * bindings/js/JSWebSocketCustom.cpp:
        * bindings/v8/custom/V8WebSocketCustom.cpp:
        * websockets/ThreadableWebSocketChannel.h:
        * websockets/WebSocket.cpp:
        * websockets/WebSocket.h:
        * websockets/WebSocket.idl:
        * websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send):
        * websockets/WebSocketChannel.h:
        * websockets/WorkerThreadableWebSocketChannel.cpp:
        * websockets/WorkerThreadableWebSocketChannel.h:

2011-09-02  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94393.
        http://trac.webkit.org/changeset/94393
        https://bugs.webkit.org/show_bug.cgi?id=67470

        It broke Qt-SL build (Requested by ossy on #webkit).

        * WebCore.pro:

2011-09-02  Kenichi Ishibashi  <bashi@chromium.org>

        [Chromium] Webfonts display bold in Windows
        https://bugs.webkit.org/show_bug.cgi?id=67387

        Uses font's default weight for webfonts by setting FW_DONTCARE.

        Reviewed by Kent Tamura.

        No new tests. We don't have fonts to test this change.

        * platform/graphics/skia/FontCustomPlatformData.cpp:
        (WebCore::FontCustomPlatformData::fontPlatformData): Sets FW_DONTCARE to use default font weight.

2011-09-02  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Send Blob as WebSocket binary message
        https://bugs.webkit.org/show_bug.cgi?id=67465

        Reviewed by Kent Tamura.

        Tests: http/tests/websocket/tests/hixie76/send-empty.html
               http/tests/websocket/tests/hixie76/send-object.html
               http/tests/websocket/tests/hybi/send-blob.html
               http/tests/websocket/tests/hybi/send-empty.html
               http/tests/websocket/tests/hybi/send-file-blob-fail.html
               http/tests/websocket/tests/hybi/send-file-blob.html
               http/tests/websocket/tests/hybi/workers/send-blob.html
               http/tests/websocket/tests/hybi/bufferedAmount-after-close.html (updated)

        * bindings/js/JSWebSocketCustom.cpp:
        (WebCore::JSWebSocket::send):
        * bindings/v8/custom/V8WebSocketCustom.cpp:
        (WebCore::V8WebSocket::sendCallback):
        * websockets/ThreadableWebSocketChannel.h:
        * websockets/WebSocket.cpp:
        (WebCore::WebSocket::send):
        * websockets/WebSocket.h:
        * websockets/WebSocket.idl:
        Fixing code generator did not sound easy, because there are some classes depending on
        broken behavior of current code generator (one such example is CanvasRenderingContext2D).
        As a temporary workaround, new custom handlers for send() are added.
        * websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send):
        * websockets/WebSocketChannel.h:
        * websockets/WorkerThreadableWebSocketChannel.cpp:
        (WebCore::WorkerThreadableWebSocketChannel::send):
        (WebCore::WorkerThreadableWebSocketChannel::Peer::send):
        (WebCore::WorkerThreadableWebSocketChannel::mainThreadSendBlob):
        A Blob can be deserialized from url, type and size.
        (WebCore::WorkerThreadableWebSocketChannel::Bridge::send):
        KURL, String and long long (corresponding to url, type and size, respectively) can be passed
        safely across threads.
        * websockets/WorkerThreadableWebSocketChannel.h:

2011-09-02  Philippe Normand  <pnormand@igalia.com>

        [WebAudio] Undeclared dependency to VIDEO
        https://bugs.webkit.org/show_bug.cgi?id=66893

        Reviewed by Kenneth Russell.

        Build MediaAudioSourceNode only if VIDEO is enabled

        * webaudio/AudioContext.cpp:
        * webaudio/AudioContext.h:
        * webaudio/AudioContext.idl:
        * webaudio/MediaElementAudioSourceNode.cpp:
        * webaudio/MediaElementAudioSourceNode.h:
        * webaudio/MediaElementAudioSourceNode.idl:

2011-09-02  Csaba Osztrogonác  <ossy@webkit.org>

        [Qt][WK2] Unreviewed speculative buildfix.

        * WebCore.pro: Add platform/graphics/GlyphPageTreeNode.cpp to SOURCES.

2011-09-02  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94389.
        http://trac.webkit.org/changeset/94389
        https://bugs.webkit.org/show_bug.cgi?id=67468

        breaks mac build (Requested by philn-tp on #webkit).

        * webaudio/AudioContext.cpp:
        (WebCore::AudioContext::createMediaElementSource):
        * webaudio/AudioContext.h:
        * webaudio/AudioContext.idl:
        * webaudio/MediaElementAudioSourceNode.cpp:
        * webaudio/MediaElementAudioSourceNode.h:
        * webaudio/MediaElementAudioSourceNode.idl:

2011-09-02  Kentaro Hara  <haraken@google.com>

        Generate an EventSource constructor of V8 using the IDL 'Constructor' extended attribute
        https://bugs.webkit.org/show_bug.cgi?id=67459

        Reviewed by Adam Barth.

        Tests: fast/eventsource/eventsource-constructor.html
               fast/eventsource/eventsource-attribute-listeners.html

        * WebCore.gypi: Removed V8EventSourceConstructor.cpp.
        * WebCore.pro: Removed V8EventSourceConstructor.cpp.
        * bindings/v8/custom/V8EventSourceConstructor.cpp: Removed.
        * page/EventSource.idl: Added the 'Constructor' extended attribute.

2011-09-02  Philippe Normand  <pnormand@igalia.com>

        [WebAudio] Undeclared dependency to VIDEO
        https://bugs.webkit.org/show_bug.cgi?id=66893

        Reviewed by Kenneth Russell.

        Build MediaAudioSourceNode only if VIDEO is enabled

        * webaudio/AudioContext.cpp:
        * webaudio/AudioContext.h:
        * webaudio/AudioContext.idl:
        * webaudio/MediaElementAudioSourceNode.cpp:
        * webaudio/MediaElementAudioSourceNode.h:
        * webaudio/MediaElementAudioSourceNode.idl:

2011-09-01  Takashi Toyoshima  <toyoshim@chromium.org>

        [WebSocket] Implement WebSocket::close() code and reason handling.
        https://bugs.webkit.org/show_bug.cgi?id=66925

        Reviewed by Kent Tamura.

        Tests: http/tests/websocket/tests/hybi/close.html
               http/tests/websocket/tests/hybi/workers/close.html

        * bindings/js/JSWebSocketCustom.cpp:
        (WebCore::JSWebSocket::close):
        * bindings/v8/custom/V8WebSocketCustom.cpp:
        (WebCore::V8WebSocket::closeCallback):
        Add custom bridge for WebSocket::close().
        * websockets/ThreadableWebSocketChannel.h:
        * websockets/WebSocket.cpp:
        (WebCore::WebSocket::close):
        * websockets/WebSocket.h:
        * websockets/WebSocket.idl:
        * websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::close):
        Add code and reason arguments handling.
        (WebCore::WebSocketChannel::startClosingHandshake):
        Send a close frame without code and reason on server initiated closing handshakes.
        (WebCore::WebSocketChannel::processFrame):
        (WebCore::WebSocketChannel::processFrameHixie76):
        * websockets/WebSocketChannel.h:
        * websockets/WorkerThreadableWebSocketChannel.cpp:
        (WebCore::WorkerThreadableWebSocketChannel::close):
        (WebCore::WorkerThreadableWebSocketChannel::Peer::close):
        (WebCore::WorkerThreadableWebSocketChannel::mainThreadClose):
        (WebCore::WorkerThreadableWebSocketChannel::Bridge::close):
        * websockets/WorkerThreadableWebSocketChannel.h:
        Add code and reason arguments handling.

2011-09-01  Mark Rowe  <mrowe@apple.com>

        Fix the build by adding some more missing return types.

        * page/mac/WebCoreViewFactory.m:
        (-[WebCoreViewFactory init]):

2011-09-01  Michael Nordman  <michaeln@google.com>

        [Chromium] Fix a crashing bug due to raciness around SQL database shutdown.
        https://bugs.webkit.org/show_bug.cgi?id=67457

        The removeOpenDatabase() method can get called multiple times.
        Subsequent calls to it should be harmeless instead of cause a crash.

        Reviewed by David Levin.

        * storage/chromium/DatabaseTrackerChromium.cpp:
        (WebCore::DatabaseTracker::removeOpenDatabase):

2011-09-01  Kent Tamura  <tkent@chromium.org>

        The filename text color of a file upload control should be inherited.
        https://bugs.webkit.org/show_bug.cgi?id=67368

        Reviewed by Darin Adler.

        * css/html.css:
        (input[type="file"]):
        Add 'color: inherit'.
        The declaration for 'input' contains 'color: initial;'. So a file
        upload control has had black foreground color unless it has been
        specified 'color' property explicitly.
        Because a file upload control uses inherited background color, the
        foreground color also should be inherited.

2011-09-01  Kentaro Hara  <haraken@google.com>

        Generate a Worker constructor of V8 using the IDL 'Constructor' extended attribute
        https://bugs.webkit.org/show_bug.cgi?id=67447

        Reviewed by Dimitri Glazkov.

        Test: fast/workers/worker-constructor.html
              fast/workers/worker-event-listener.html

        * bindings/v8/custom/V8WorkerCustom.cpp: Removed constructorCallback().
        * workers/Worker.idl: Added the 'Constructor' extended attribute.

2011-09-01  Kentaro Hara  <haraken@google.com>

        Generate a FileReader constructor of V8 using the IDL 'Constructor' extended attribute
        https://bugs.webkit.org/show_bug.cgi?id=67412

        Reviewed by Adam Barth.

        Test: fast/files/blob-slice-test.html
              fast/files/file-reader-abort.html

        * bindings/v8/custom/V8FileReaderCustom.cpp: Removed constructorCallback().
        * fileapi/FileReader.idl: Added the 'Constructor' extended attribute.

2011-09-01  Robert Kroeger  <rjkroege@chromium.org>

       [chromium] Code cleanup FIXME in Chromium recognizer
        https://bugs.webkit.org/show_bug.cgi?id=67448

        Reviewed by Adam Barth.

        * page/EventHandler.cpp:
        (WebCore::EventHandler::handleGestureEvent):
        Fixed a bug noticed by a benjaminp while reviewing a different
        ndonned patch where global positions were not being set correctly
        on gesture-driven mouse wheel events.
        * platform/chromium/GestureRecognizerChromium.cpp:
        Changed static per-edge functions into methods and improves
        encapsulation. No new functionality is present.
        (WebCore::GestureRecognizerChromium::GestureRecognizerChromium):
        (WebCore::GestureRecognizerChromium::reset):
        (WebCore::GestureRecognizerChromium::~GestureRecognizerChromium):
        (WebCore::GestureRecognizerChromium::addEdgeFunction):
        (WebCore::GestureRecognizerChromium::isInClickTimeWindow):
        (WebCore::GestureRecognizerChromium::isInsideManhattanSquare):
        (WebCore::GestureRecognizerChromium::appendClickGestureEvent):
        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
        (WebCore::GestureRecognizerChromium::appendScrollGestureBegin):
        (WebCore::GestureRecognizerChromium::appendScrollGestureEnd):
        (WebCore::GestureRecognizerChromium::appendScrollGestureUpdate):
        (WebCore::GestureRecognizerChromium::updateValues):
        (WebCore::GestureRecognizerChromium::signature):
        (WebCore::GestureRecognizerChromium::touchDown):
        (WebCore::GestureRecognizerChromium::scrollEnd):
        (WebCore::GestureRecognizerChromium::noGesture):
        (WebCore::GestureRecognizerChromium::click):
        (WebCore::GestureRecognizerChromium::isClickOrScroll):
        (WebCore::GestureRecognizerChromium::inScroll):
        * platform/chromium/GestureRecognizerChromium.h:
        (WebCore::GestureRecognizerChromium::setState):

2011-09-01  Julien Chaffraix  <jchaffraix@webkit.org>

        Move LayoutRepainter to its own class
        https://bugs.webkit.org/show_bug.cgi?id=66255

        Reviewed by Hajime Morita.

        No new tests, code movement only.

        * rendering/RenderObject.h: Moved code from here ...
        * rendering/LayoutRepainter.cpp: Added.
        (WebCore::LayoutRepainter::LayoutRepainter):
        (WebCore::LayoutRepainter::repaintAfterLayout):
        * rendering/LayoutRepainter.h: Added.
        (WebCore::LayoutRepainter::checkForRepaint):
        ... to those 2 files.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        Updated our build systems.

        * rendering/RenderingAllInOne.cpp:
        Needed for the Windows bot.

        * rendering/RenderBlock.cpp:
        * rendering/RenderDeprecatedFlexibleBox.cpp:
        * rendering/RenderReplaced.cpp:
        * rendering/RenderTable.cpp:
        * rendering/svg/RenderSVGContainer.cpp:
        * rendering/svg/RenderSVGForeignObject.cpp:
        * rendering/svg/RenderSVGImage.cpp:
        * rendering/svg/RenderSVGPath.cpp:
        * rendering/svg/RenderSVGRoot.cpp:
        * rendering/svg/RenderSVGText.cpp:
        Added #include "LayoutRepainter".

2011-09-01  Ada Chan  <adachan@apple.com>

        Cleanup refactoring for https://bugs.webkit.org/show_bug.cgi?id=67160

        Don't ifdef out the data member xslStyleSheets in MemoryCache::Statistics to cut down 
        the ifdefs in getWebCoreMemoryCacheStatistics() in WebKit2/WebProcess/WebProcess.cpp.

        Reviewed by Darin Adler.

        No new tests required.  Just small code refactoring.

        * loader/cache/MemoryCache.h:

2011-09-01  Julien Chaffraix  <jchaffraix@webkit.org>

        REGRESSION (r84327-r84329): CSS stylesheets fail to load on www.flagstar.com login page
        https://bugs.webkit.org/show_bug.cgi?id=65140

        Reviewed by Darin Adler.

        Tests: fast/css/stylesheet-enable-first-alternate-link.html
               fast/css/stylesheet-enable-first-alternate-on-load-link.html
               fast/css/stylesheet-enable-first-alternate-on-load-sheet.html
               fast/css/stylesheet-enable-second-alternate-link.html
               fast/css/stylesheet-enable-second-alternate-on-load-link.html
               fast/css/stylesheet-enable-second-alternate-on-load-sheet.html
               http/tests/css/link-css-disabled-value-with-slow-loading-sheet-in-error.html
               http/tests/css/link-css-disabled-value-with-slow-loading-sheet.html

        This patch basically reverts 88479 and 84329 while keeping the tests
        we developped during the implementation.

        Following discussion, it looks like HTML5 will need to be amended.
        In the meantime, we will just revert the changes so that we can come
        up with a better change.

        * dom/Document.cpp:
        (WebCore::Document::recalcStyleSelector):
        * html/HTMLLinkElement.cpp:
        (WebCore::HTMLLinkElement::HTMLLinkElement):
        (WebCore::HTMLLinkElement::setDisabledState):
        (WebCore::HTMLLinkElement::parseMappedAttribute):
        (WebCore::HTMLLinkElement::process):
        Revert those method to their original content.

        * html/HTMLLinkElement.h:
        (WebCore::HTMLLinkElement::isDisabled):
        (WebCore::HTMLLinkElement::isEnabledViaScript):
        (WebCore::HTMLLinkElement::isAlternate):
        Re-introduced the DisabledState enum.

        * html/HTMLLinkElement.idl: |disabled| is Reflect'ed again.

2011-09-01  Dan Bernstein  <mitz@apple.com>

        Fix layout test regressions from r94352.

        Reviewed by Anders Carlsson.

        * platform/graphics/mac/FontCacheMac.mm:
        (WebCore::FontCache::getFontDataForCharacters): In the custom font case (that is, when there is
        not base NSFont) always get and use the best variation.

2011-09-01  Ryosuke Niwa  <rniwa@webkit.org>

        Revert r94355 because it caused bunch of builds to break.

        * page/DOMWindow.idl:

2011-09-01  Mark Rowe  <mrowe@apple.com>

        <rdar://problem/10063411> WebScriptObject.h declares an Objective-C method without a return type.

        Rubber-stamped by Anders Carlsson.

        * bridge/objc/WebScriptObject.h:

2011-09-01  Mark Hahnenberg  <mhahnenberg@apple.com>

        Unzip initialization lists and constructors in JSCell hierarchy (4/7)
        https://bugs.webkit.org/show_bug.cgi?id=67174

        Reviewed by Oliver Hunt.

        No new tests.

        Completed the fourth level of the refactoring to add finishCreation() 
        methods to all classes within the JSCell hierarchy with non-trivial 
        constructor bodies.

        This primarily consists of pushing the calls to finishCreation() down 
        into the constructors of the subclasses of the second level of the hierarchy 
        as well as pulling the finishCreation() calls out into the class's corresponding
        create() method if it has one.  Doing both simultaneously allows us to 
        maintain the invariant that the finishCreation() method chain is called exactly 
        once during the creation of an object, since calling it any other number of 
        times (0, 2, or more) will cause an assertion failure.

        * bindings/js/JSDOMWindowShell.cpp:
        (WebCore::JSDOMWindowShell::JSDOMWindowShell):
        (WebCore::JSDOMWindowShell::create):
        * bindings/js/JSDOMWindowShell.h:
        * bindings/js/JSDOMWrapper.h:
        (WebCore::JSDOMWrapper::JSDOMWrapper):
        * bindings/js/ScriptController.cpp:
        (WebCore::ScriptController::createWindowShell):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        * bindings/scripts/test/JS/JSTestInterface.h:
        (WebCore::JSTestInterfacePrototype::JSTestInterfacePrototype):
        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
        (WebCore::JSTestMediaQueryListListenerPrototype::JSTestMediaQueryListListenerPrototype):
        * bindings/scripts/test/JS/JSTestObj.h:
        (WebCore::JSTestObjPrototype::JSTestObjPrototype):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
        (WebCore::JSTestSerializedScriptValueInterfacePrototype::JSTestSerializedScriptValueInterfacePrototype):
        * bridge/objc/objc_runtime.h:
        * bridge/objc/objc_runtime.mm:
        (JSC::Bindings::ObjcFallbackObjectImp::ObjcFallbackObjectImp):
        (JSC::Bindings::ObjcFallbackObjectImp::finishCreation):
        * bridge/runtime_array.cpp:
        (JSC::RuntimeArray::RuntimeArray):
        (JSC::RuntimeArray::finishCreation):
        * bridge/runtime_array.h:
        * bridge/runtime_object.cpp:
        (JSC::Bindings::RuntimeObject::RuntimeObject):
        (JSC::Bindings::RuntimeObject::finishCreation):
        * bridge/runtime_object.h:

2011-08-31  Adrienne Walker  <enne@google.com>

        [chromium] Remove unsafe raw GraphicsContext3D pointer from ProgramBinding
        https://bugs.webkit.org/show_bug.cgi?id=67003

        Reviewed by James Robinson.

        ProgramBinding now takes an explicit cleanup call to destroy its
        resources. This will assert if it is not called and will leak no
        longer potentially dereference a dead pointer.

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::borderProgram):
        (WebCore::LayerRendererChromium::headsUpDisplayProgram):
        (WebCore::LayerRendererChromium::renderSurfaceProgram):
        (WebCore::LayerRendererChromium::renderSurfaceMaskProgram):
        (WebCore::LayerRendererChromium::tilerProgram):
        (WebCore::LayerRendererChromium::tilerProgramSwizzle):
        (WebCore::LayerRendererChromium::tilerProgramAA):
        (WebCore::LayerRendererChromium::tilerProgramSwizzleAA):
        (WebCore::LayerRendererChromium::canvasLayerProgram):
        (WebCore::LayerRendererChromium::pluginLayerProgram):
        (WebCore::LayerRendererChromium::videoLayerRGBAProgram):
        (WebCore::LayerRendererChromium::videoLayerYUVProgram):
        (WebCore::LayerRendererChromium::cleanupSharedObjects):
        * platform/graphics/chromium/ProgramBinding.cpp:
        (WebCore::ProgramBindingBase::ProgramBindingBase):
        (WebCore::ProgramBindingBase::~ProgramBindingBase):
        (WebCore::ProgramBindingBase::init):
        (WebCore::ProgramBindingBase::cleanup):
        (WebCore::ProgramBindingBase::loadShader):
        (WebCore::ProgramBindingBase::createShaderProgram):
        * platform/graphics/chromium/ProgramBinding.h:
        (WebCore::ProgramBinding::ProgramBinding):
        (WebCore::ProgramBinding::initialize):

2011-09-01  Patrick Gansterer  <paroga@webkit.org>

        Don't include unnecessary headers in V8 bindings
        https://bugs.webkit.org/show_bug.cgi?id=67435

        Reviewed by Darin Adler.

        When an IDL attribue is Conditonal the corresponding headers
        need to be surrounded with the correct #if ENABLE().

        * bindings/scripts/CodeGeneratorV8.pm:
        * bindings/scripts/test/CPP/WebDOMTestObj.cpp:
        * bindings/scripts/test/CPP/WebDOMTestObj.h:
        * bindings/scripts/test/JS/JSTestObj.cpp:
        * bindings/scripts/test/JS/JSTestObj.h:
        * bindings/scripts/test/ObjC/DOMTestObj.h:
        * bindings/scripts/test/ObjC/DOMTestObj.mm:
        * bindings/scripts/test/TestObj.idl:
        * bindings/scripts/test/V8/V8TestObj.cpp:

2011-09-01  Pratik Solanki  <psolanki@apple.com>

        Rename CFNETWORK_DATA_ARRAY_CALLBACK to NETWORK_CFDATA_ARRAY_CALLBACK
        https://bugs.webkit.org/show_bug.cgi?id=67348

        Reviewed by Alexey Proskuryakov.

        * loader/ResourceLoader.h:
        * loader/SubresourceLoader.h:
        * loader/cf/SubresourceLoaderCF.cpp:
        * loader/mac/ResourceLoaderMac.mm:
        * platform/SharedBuffer.cpp:
        (WebCore::SharedBuffer::clear):
        (WebCore::SharedBuffer::buffer):
        * platform/SharedBuffer.h:
        * platform/cf/SharedBufferCF.cpp:
        * platform/network/ResourceHandle.h:
        * platform/network/ResourceHandleClient.h:
        * platform/network/cf/ResourceHandleCFNet.cpp:
        (WebCore::ResourceHandle::createCFURLConnection):
        * platform/network/mac/ResourceHandleMac.mm:

2011-09-01  Kentaro Hara  <haraken@google.com>

        TypeError should be thrown when a constructor is called as a normal function.
        https://bugs.webkit.org/show_bug.cgi?id=67381

        Reviewed by Darin Adler.

        The spec is here: http://www.w3.org/TR/WebIDL/#es-interface-call
        For example, "Image()" or "XMLHttpRequest()" should throw TypeError.

        Test: fast/dom/call-a-constructor-as-a-function.html

        * bindings/v8/custom/V8ArrayBufferCustom.cpp:
        (WebCore::V8ArrayBuffer::constructorCallback): Throws TypeError if args.IsConstructCall() is false.
        * bindings/v8/custom/V8ArrayBufferViewCustom.h:
        (WebCore::constructWebGLArray): Ditto.
        * bindings/v8/custom/V8AudioContextCustom.cpp:
        (WebCore::V8AudioContext::constructorCallback): Ditto.
        * bindings/v8/custom/V8DOMFormDataCustom.cpp:
        (WebCore::V8DOMFormData::constructorCallback): Ditto.
        * bindings/v8/custom/V8HTMLAudioElementConstructor.cpp:
        (WebCore::v8HTMLAudioElementConstructorCallback): Ditto.
        * bindings/v8/custom/V8HTMLImageElementConstructor.cpp:
        (WebCore::v8HTMLImageElementConstructorCallback): Ditto.
        * bindings/v8/custom/V8HTMLOptionElementConstructor.cpp:
        (WebCore::v8HTMLOptionElementConstructorCallback): Ditto.
        * bindings/v8/custom/V8MessageChannelConstructor.cpp:
        (WebCore::V8MessageChannel::constructorCallback): Ditto.
        * bindings/v8/custom/V8SharedWorkerCustom.cpp:
        (WebCore::V8SharedWorker::constructorCallback): Ditto.
        * bindings/v8/custom/V8WebKitCSSMatrixConstructor.cpp:
        (WebCore::V8WebKitCSSMatrix::constructorCallback): Ditto.
        * bindings/v8/custom/V8WebKitPointConstructor.cpp:
        (WebCore::V8WebKitPoint::constructorCallback): Ditto.
        * bindings/v8/custom/V8WebSocketCustom.cpp:
        (WebCore::V8WebSocket::constructorCallback): Ditto.
        * bindings/v8/custom/V8WorkerCustom.cpp:
        (WebCore::V8Worker::constructorCallback): Ditto.

2011-08-31  Adrienne Walker  <enne@google.com>

        [chromium] TextureManager overestimates the size of non-RGBA texture formats
        https://bugs.webkit.org/show_bug.cgi?id=66917

        Reviewed by James Robinson.

        Use GraphicsContext3D to determine the size of a given texture format.
        Also, make TextureManager use more GraphicsContext3D types.

        * platform/graphics/GraphicsContext3D.h:
        * platform/graphics/chromium/TextureManager.cpp:
        (WebCore::memoryUseBytes):
        * platform/graphics/chromium/TextureManager.h:

2011-09-01  Sam Weinig  <sam@webkit.org>

        Add missing Event constructors to DOMWindow.idl
        https://bugs.webkit.org/show_bug.cgi?id=67449

        Reviewed by Anders Carlsson.

        Covered by existing tests.

        * page/DOMWindow.idl:

2011-09-01  Patrick Gansterer  <paroga@webkit.org>

        Consider Conditional attribute in CodeGenerator for methods
        https://bugs.webkit.org/show_bug.cgi?id=67409

        Reviewed by Darin Adler.

        This change adds appropriate #if ENABLE() lines for the preprocessor around the
        generated functions depending on the Conditional attribute in the IDL file.

        * bindings/scripts/CodeGeneratorCPP.pm:
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorObjC.pm:
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateImplementation):
        * bindings/scripts/test/CPP/WebDOMTestObj.cpp:
        * bindings/scripts/test/CPP/WebDOMTestObj.h:
        * bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
        * bindings/scripts/test/GObject/WebKitDOMTestObj.h:
        * bindings/scripts/test/JS/JSTestObj.cpp:
        * bindings/scripts/test/JS/JSTestObj.h:
        * bindings/scripts/test/ObjC/DOMTestObj.h:
        * bindings/scripts/test/ObjC/DOMTestObj.mm:
        * bindings/scripts/test/TestObj.idl:
        * bindings/scripts/test/V8/V8TestObj.cpp:

2011-08-29  Nat Duca  <nduca@chromium.org>

        [chromium] Introduce CCSingleThreadProxy in order to move LayerRenderer to CCLayerTreeHostImpl
        https://bugs.webkit.org/show_bug.cgi?id=66807

        Reviewed by James Robinson.

        * WebCore.gypi:
        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::createTextureUpdater):
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerChromium::createTextureUpdater):
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::setLayerRendererRecursive):
        * platform/graphics/chromium/LayerChromium.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::create):
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        (WebCore::LayerRendererChromium::initialize):
        (WebCore::LayerRendererChromium::close):
        (WebCore::LayerRendererChromium::updateLayers):
        (WebCore::LayerRendererChromium::drawLayers):
        (WebCore::LayerRendererChromium::drawLayersInternal):
        (WebCore::LayerRendererChromium::getOffscreenLayerTexture):
        (WebCore::LayerRendererChromium::isContextLost):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore::LayerRendererChromium::capabilities):
        (WebCore::LayerRendererChromium::rootLayerImpl):
        (WebCore::LayerRendererChromium::contextSupportsMapSub):
        (WebCore::LayerRendererChromium::viewportSize):
        * platform/graphics/chromium/LayerTextureUpdaterCanvas.h:
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::setLayerTreeHost):
        * platform/graphics/chromium/VideoLayerChromium.cpp:
        (WebCore::VideoLayerChromium::reserveTextures):
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
        (WebCore::CCCanvasLayerImpl::draw):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::initialize):
        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::animateAndLayout):
        (WebCore::CCLayerTreeHost::preCommit):
        (WebCore::CCLayerTreeHost::commitTo):
        (WebCore::CCLayerTreeHost::createCompositorThread):
        (WebCore::CCLayerTreeHost::createLayerTreeHostContext3D):
        (WebCore::CCLayerTreeHost::createLayerTreeHostImpl):
        (WebCore::CCLayerTreeHost::didRecreateGraphicsContext):
        (WebCore::CCLayerTreeHost::scheduleComposite):
        (WebCore::CCLayerTreeHost::context):
        (WebCore::CCLayerTreeHost::compositeAndReadback):
        (WebCore::CCLayerTreeHost::finishAllRendering):
        (WebCore::CCLayerTreeHost::layerRendererCapabilities):
        (WebCore::CCLayerTreeHost::setRootLayer):
        (WebCore::CCLayerTreeHost::skiaContext):
        (WebCore::CCLayerTreeHost::setViewport):
        (WebCore::CCLayerTreeHost::setVisible):
        (WebCore::CCLayerTreeHost::loseCompositorContext):
        (WebCore::CCLayerTreeHost::contentsTextureManager):
        (WebCore::CCLayerTreeHost::composite):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        (WebCore::CCSettings::CCSettings):
        (WebCore::LayerRendererCapabilities::LayerRendererCapabilities):
        * platform/graphics/chromium/cc/CCLayerTreeHostCommitter.h: Removed.
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::create):
        (WebCore::CCLayerTreeHostImpl::CCLayerTreeHostImpl):
        (WebCore::CCLayerTreeHostImpl::~CCLayerTreeHostImpl):
        (WebCore::CCLayerTreeHostImpl::commitComplete):
        (WebCore::CCLayerTreeHostImpl::context):
        (WebCore::CCLayerTreeHostImpl::drawLayers):
        (WebCore::CCLayerTreeHostImpl::finishAllRendering):
        (WebCore::CCLayerTreeHostImpl::isContextLost):
        (WebCore::CCLayerTreeHostImpl::layerRendererCapabilities):
        (WebCore::CCLayerTreeHostImpl::present):
        (WebCore::CCLayerTreeHostImpl::readback):
        (WebCore::CCLayerTreeHostImpl::setRootLayer):
        (WebCore::CCLayerTreeHostImpl::setVisible):
        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):
        (WebCore::CCLayerTreeHostImpl::updateLayers):
        (WebCore::CCLayerTreeHostImpl::setViewport):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (WebCore::CCLayerTreeHostImpl::layerRenderer):
        (WebCore::CCLayerTreeHostImpl::rootLayer):
        (WebCore::CCLayerTreeHostImpl::viewportSize):
        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp: Removed.
        * platform/graphics/chromium/cc/CCMainThreadTask.h:
        (WebCore::MainThreadTask4::create):
        (WebCore::MainThreadTask4::MainThreadTask4):
        (WebCore::MainThreadTask4::performTask):
        (WebCore::MainThreadTask5::create):
        (WebCore::MainThreadTask5::MainThreadTask5):
        (WebCore::MainThreadTask5::performTask):
        (WebCore::createMainThreadTask):
        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
        (WebCore::CCPluginLayerImpl::draw):
        * platform/graphics/chromium/cc/CCProxy.cpp: Renamed from Source/WebCore/platform/graphics/chromium/cc/CCLayerTreeHostCommitter.cpp.
        (WebCore::CCProxy::isMainThread):
        (WebCore::CCProxy::isImplThread):
        (WebCore::CCProxy::setImplThread):
        * platform/graphics/chromium/cc/CCProxy.h: Added.
        (WebCore::CCProxy::~CCProxy):
        (WebCore::CCProxy::CCProxy):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp: Added.
        (WebCore::ScopedSetImplThread::ScopedSetImplThread):
        (WebCore::ScopedSetImplThread::~ScopedSetImplThread):
        (WebCore::CCSingleThreadProxy::create):
        (WebCore::CCSingleThreadProxy::CCSingleThreadProxy):
        (WebCore::CCSingleThreadProxy::start):
        (WebCore::CCSingleThreadProxy::~CCSingleThreadProxy):
        (WebCore::CCSingleThreadProxy::compositeAndReadback):
        (WebCore::CCSingleThreadProxy::context):
        (WebCore::CCSingleThreadProxy::finishAllRendering):
        (WebCore::CCSingleThreadProxy::isStarted):
        (WebCore::CCSingleThreadProxy::initializeLayerRenderer):
        (WebCore::CCSingleThreadProxy::layerRendererCapabilities):
        (WebCore::CCSingleThreadProxy::loseCompositorContext):
        (WebCore::CCSingleThreadProxy::setNeedsCommitAndRedraw):
        (WebCore::CCSingleThreadProxy::setNeedsRedraw):
        (WebCore::CCSingleThreadProxy::stop):
        (WebCore::CCSingleThreadProxy::skiaContext):
        (WebCore::CCSingleThreadProxy::contentsTextureManager):
        (WebCore::CCSingleThreadProxy::compositeImmediately):
        (WebCore::CCSingleThreadProxy::compositeIfNeeded):
        (WebCore::CCSingleThreadProxy::doComposite):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.h: Copied from Source/WebCore/platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.h.
        * platform/graphics/chromium/cc/CCThreadProxy.cpp: Added.
        (WebCore::CCThreadProxy::create):
        (WebCore::CCThreadProxy::CCThreadProxy):
        (WebCore::CCThreadProxy::~CCThreadProxy):
        (WebCore::CCThreadProxy::compositeAndReadback):
        (WebCore::CCThreadProxy::context):
        (WebCore::CCThreadProxy::finishAllRendering):
        (WebCore::CCThreadProxy::isStarted):
        (WebCore::CCThreadProxy::initializeLayerRenderer):
        (WebCore::CCThreadProxy::layerRendererCapabilities):
        (WebCore::CCThreadProxy::loseCompositorContext):
        (WebCore::CCThreadProxy::setNeedsCommitAndRedraw):
        (WebCore::CCThreadProxy::setNeedsRedraw):
        (WebCore::CCThreadProxy::start):
        (WebCore::CCThreadProxy::stop):
        (WebCore::CCThreadProxy::skiaContext):
        (WebCore::CCThreadProxy::contentsTextureManager):
        (WebCore::CCThreadProxy::beginFrameAndCommitOnCCThread):
        (WebCore::CCThreadProxy::beginFrameAndCommit):
        (WebCore::CCThreadProxy::commitOnCCThread):
        (WebCore::CCThreadProxy::drawLayersOnCCThread):
        (WebCore::CCThreadProxy::setNeedsCommitAndRedrawOnCCThread):
        (WebCore::CCThreadProxy::setNeedsRedrawOnCCThread):
        (WebCore::CCThreadProxy::initializeImplOnCCThread):
        (WebCore::CCThreadProxy::initializeLayerRendererOnCCThread):
        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
        * platform/graphics/chromium/cc/CCThreadProxy.h: Renamed from Source/WebCore/platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.h.
        * platform/graphics/chromium/cc/CCThreadTask.h:
        (WebCore::CCThreadTask5::create):
        (WebCore::CCThreadTask5::CCThreadTask5):
        (WebCore::CCThreadTask5::performTask):
        (WebCore::createCCThreadTask):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::draw):

2011-09-01  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/9528843> STIX glyphs not rendered on this stackoverflow answer
        https://bugs.webkit.org/show_bug.cgi?id=67444

        Reviewed by Darin Adler.

        Test: fast/text/fallback-traits-fixup.html

        After obtaining STIX Regular as a fallback font for some characters, getFontDataForCharacters()
        proceeded to ask for a font from the same family having the desired traits and weight (because
        wkGetFontInLanguageForRange() does not preserve traits and weight). The returned font was different
        and happened to not contain the desired character.

        * platform/graphics/mac/FontCacheMac.mm:
        (WebCore::FontCache::getFontDataForCharacters): Only ask for a family member with the desired
        traits and weight if the substitute font does not already have them, and only use the returned
        member if it actually contains the desired character.

2011-09-01  Kentaro Hara  <haraken@google.com>

        Generate an XSLTProcessor constructor of V8 using the IDL 'Constructor' extended attribute
        https://bugs.webkit.org/show_bug.cgi?id=67414

        Reviewed by Dimitri Glazkov.

        Test: fast/dom/Window/custom-constructors.html
              fast/xsl/default-html.html

        * bindings/v8/custom/V8XSLTProcessorCustom.cpp: Removed constructorCallback().
        * xml/XSLTProcessor.idl: Added the 'Constructor' extended attribute.

2011-09-01  Eric Carlson  <eric.carlson@apple.com>

        HTMLMediaElement should use fastHasAttribute instead of hasAttribute
        https://bugs.webkit.org/show_bug.cgi?id=67421

        Reviewed by Simon Fraser.

        Use fastHasAttribute instead of hasAttribute because it is faster, and HTMLMediaElement
        doesn't ever need to check style or SVG animated attributes.

        No new tests required, this is just an optimization.

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::selectMediaResource): hasAttribute -> fastHasAttribute.
        (WebCore::HTMLMediaElement::loadResource): Ditto.
        (WebCore::HTMLMediaElement::autoplay): Ditto.
        (WebCore::HTMLMediaElement::loop): Ditto.
        (WebCore::HTMLMediaElement::controls): Ditto.
        (WebCore::HTMLMediaElement::selectNextSourceChild): Ditto.
        (WebCore::HTMLMediaElement::sourceWasAdded): Ditto.

2011-09-01  Dominic Mazzoni  <dmazzoni@google.com>

        Add API functions to enable starting and stopping speech input,
        and checking the current speech input state.
        https://bugs.webkit.org/show_bug.cgi?id=60170

        Reviewed by Dimitri Glazkov.

        Test: fast/speech/input-text-speechstart.html

        * html/shadow/TextControlInnerElements.cpp:
        (WebCore::InputFieldSpeechButtonElement::defaultEventHandler):
        (WebCore::InputFieldSpeechButtonElement::startSpeechInput):
        (WebCore::InputFieldSpeechButtonElement::stopSpeechInput):
        * html/shadow/TextControlInnerElements.h:
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::speechButtonElement):
        * rendering/RenderTextControlSingleLine.h:

2011-09-01  Tim Horton  <timothy_horton@apple.com>

        REGRESSION: Rendering artifacts on a rotated, pattern filled SVG shape
        https://bugs.webkit.org/show_bug.cgi?id=53055
        <rdar://problem/8910917>

        Reviewed by Simon Fraser.

        Make use of wkCGPatternCreateWithImageAndTransform
        when tiling patterns in both directions. This helps to avoid
        pixel-cracking along pattern tiling boundaries.

        Ignore 2D rotation when computing the size of a pattern's tile image,
        as it artificially inflates the size of the tile, which can cause
        pixel-cracking.

        Test: svg/custom/pattern-rotate-gaps.svg

        * platform/graphics/cg/PatternCG.cpp:
        (WebCore::Pattern::createPlatformPattern):
        * rendering/svg/RenderSVGResourcePattern.cpp:
        * rendering/svg/SVGImageBufferTools.cpp:
        (WebCore::SVGImageBufferTools::roundedImageBufferSize):
        * rendering/svg/SVGImageBufferTools.h:

2011-09-01  Patrick Gansterer  <paroga@webkit.org>

        Unreviewed, rolling out r94284.
        http://trac.webkit.org/changeset/94284
        https://bugs.webkit.org/show_bug.cgi?id=65050

        Broke building without SVG enabled on Chromium.

        * page/DOMWindow.idl:

2011-09-01  Alexey Proskuryakov  <ap@apple.com>

        REGRESSION (r93247): 2 http/tests/misc tests failing on SnowLeopard Intel Release (Tests)
        https://bugs.webkit.org/show_bug.cgi?id=67374

        Reviewed by Simon Fraser.

        * platform/network/cf/ResourceHandleCFNet.cpp:
        (WebCore::applyBasicAuthorizationHeader):
        * platform/network/mac/ResourceHandleMac.mm:
        (WebCore::applyBasicAuthorizationHeader):
        Some versions of CFNetwork carry along an Authorization header, some don't. We shouldn't
        repeat its value twice, this is not one of those headers that allow comma separated lists
        of values.

2011-09-01  Noel Gordon  <noel.gordon@gmail.com>

        [chromium] Move ImageBuffer::platformLayer()
        https://bugs.webkit.org/show_bug.cgi?id=67372

        Reviewed by Kenneth Russell.

        No new tests: refactoring only, covered by existting tests.

        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::ImageBuffer::platformLayer):  Move it away from the toDataURL code.

2011-09-01  Kulanthaivel Palanichamy  <kulanthaivel@codeaurora.org>

        Focus ring is rendered incorrectly for a block with -webkit-writing-mode
        https://bugs.webkit.org/show_bug.cgi?id=62915

        Reviewed by Simon Fraser.

        RenderBlock::addFocusRingRects() should consider physical box position and
        dimension instead of logical values for focus ring rects calculation.

        Test: fast/css/focus-ring-multiline-writingmode-vertical.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::addFocusRingRects):

2011-09-01  Philippe Normand  <pnormand@igalia.com>

        Unreviewed, GTK build fix after r94299.

        * GNUmakefile.list.am:

2011-09-01  Brian Salomon  <bsalomon@google.com>

        [Chromium/Skia] Use GraphicsContext3D::grContext() to create GrContext for accelerated drawing
        https://bugs.webkit.org/show_bug.cgi?id=67419

        Reviewed by James Robinson.

        Accelerated drawing is not enabled in layout tests. However, once it is this change will be tested by every test.

        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::createTextureUpdater):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::contextSupportsAcceleratedPainting):
        (WebCore::LayerRendererChromium::initialize):
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
        (WebCore::LayerTextureUpdaterSkPicture::create):
        (WebCore::LayerTextureUpdaterSkPicture::LayerTextureUpdaterSkPicture):
        (WebCore::LayerTextureUpdaterSkPicture::updateTextureRect):
        (WebCore::LayerTextureUpdaterSkPicture::createFrameBuffer):
        * platform/graphics/chromium/LayerTextureUpdaterCanvas.h:

2011-09-01  Dominik Röttsches  <dominik.rottsches@linux.intel.com>

        Rename GraphicsContext3DInternal to GraphicsContext3DPrivate and add a dummy version of this class for Mac
        https://bugs.webkit.org/show_bug.cgi?id=67172

        Build fix, completing rename for GTK file.

        Reviewed by Chris Marrin.

        * platform/graphics/gtk/GraphicsContext3DPrivate.cpp: Renamed from Source/WebCore/platform/graphics/gtk/GraphicsContext3DInternal.cpp.
        (sharedDisplay):
        (WebCore::activeGraphicsContexts):
        (WebCore::GraphicsContext3DPrivate::addActiveGraphicsContext):
        (WebCore::GraphicsContext3DPrivate::removeActiveGraphicsContext):
        (WebCore::GraphicsContext3DPrivate::cleanupActiveContextsAtExit):
        (WebCore::GraphicsContext3DPrivate::create):
        (WebCore::GraphicsContext3DPrivate::createPbufferContext):
        (WebCore::GraphicsContext3DPrivate::createPixmapContext):
        (WebCore::GraphicsContext3DPrivate::GraphicsContext3DPrivate):
        (WebCore::GraphicsContext3DPrivate::~GraphicsContext3DPrivate):
        (WebCore::GraphicsContext3DPrivate::makeContextCurrent):

2011-09-01  Simon Fraser  <simon.fraser@apple.com>

        REGRESSION (r94259): Two tests doing hit testing were broken by this change.
        https://bugs.webkit.org/show_bug.cgi?id=67353

        Reviewed by Chris Marrin.

        Fix a regression from r94259; that change missed a fix in RenderView,
        which affects coordinate transforms in position:fixed elements.
        
        This fixes these tests:
            fast/events/document-elementFromPoint.html
            fast/events/offsetX-offsetY.html
            plugins/mouse-events-fixedpos.html

        * rendering/RenderView.cpp:
        (WebCore::RenderView::mapAbsoluteToLocalPoint):

2011-09-01  Tony Gentilcore  <tonyg@chromium.org>

        [chromium] Fonts returned by FontCache::getFontDataForCharacters() are never released
        https://bugs.webkit.org/show_bug.cgi?id=66673

        Reviewed by James Robinson.

        This was fixed for other ports in http://trac.webkit.org/changeset/88260.
        However, it was missed in FontCacheLinux likely due to similar param in the nested call to getCachedFontPlatformData().

        No new tests because no directly observable change in behavior.

        * platform/graphics/chromium/FontCacheLinux.cpp:
        (WebCore::FontCache::getFontDataForCharacters):

2011-08-31  Mikhail Naganov  <mnaganov@chromium.org>

        Web Inspector: [Chromium] Perform a more effective JS GC
        https://bugs.webkit.org/show_bug.cgi?id=67304

        Reviewed by Pavel Feldman.

        * bindings/v8/ScriptProfiler.cpp:
        (WebCore::ScriptProfiler::collectGarbage):

2011-09-01  Sam Weinig  <sam@webkit.org>

        WebGLContextEvent should have its own JS wrapper
        https://bugs.webkit.org/show_bug.cgi?id=67352

        Reviewed by Anders Carlsson.

        The WebGLContextEvent was missing a proper JS wrapper, and thus
        anyone using one in an EventListener was actually just getting
        a plain old Event. Rectify this by generating the wrapper and 
        wrapping it on creating.

        Test: fast/canvas/webgl/WebGLContextEvent.html

        * CodeGenerators.pri:
        Add WebGLContextEvent.idl

        * DerivedSources.make:
        Add WebGLContextEvent and sort.

        * WebCore.xcodeproj/project.pbxproj:
        Add generated JSWebGLContextEvent.h/cpp.

        * bindings/js/JSEventCustom.cpp:
        (WebCore::toJS):
        Wrap WebGLContextEvents as JSWebGLContextEvents.

        * dom/Event.cpp:
        (WebCore::Event::isWebGLContextEvent):
        * dom/Event.h:
        * html/canvas/WebGLContextEvent.cpp:
        (WebCore::WebGLContextEvent::isWebGLContextEvent):
        * html/canvas/WebGLContextEvent.h:
        Add predicate for WebGLContextEvent.

2011-09-01  Eric Carlson  <eric.carlson@apple.com>

        Add 'muted' content attribute to HTMLMediaElement
        https://bugs.webkit.org/show_bug.cgi?id=58369

        Reviewed by Darin Adler.

        Test: media/video-defaultmuted.html

        * html/HTMLAttributeNames.in: Add muted.
        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::loadResource): Deal with the 'muted' attribute.
        * html/HTMLMediaElement.idl: Add defaultMuted.

2011-09-01  Tim Horton  <timothy_horton@apple.com>

        REGRESSION: Rendering artifacts on a rotated, pattern filled shape
        https://bugs.webkit.org/show_bug.cgi?id=53055
        <rdar://problem/8910917>

        Reviewed by Simon Fraser.

        Introduce wkCGPatternCreateWithImageAndTransform.

        * WebCore.exp.in:
        * platform/mac/WebCoreSystemInterface.h:
        * platform/mac/WebCoreSystemInterface.mm:

2011-08-30  Adrienne Walker  <enne@google.com>

        [chromium] Fix scissor rects on clipped nested iframes
        https://bugs.webkit.org/show_bug.cgi?id=67221

        Reviewed by James Robinson.

        Layers that mask to bounds (like iframes) weren't being properly
        clipped if their parent scissor rect was empty. This case happens
        when a parent iframe is clipped. Fixed by propagating the empty
        scissor rect to child layers rather than ignoring it.

        Test: compositing/iframes/nested-composited-iframe.html

        * platform/graphics/chromium/LayerRendererChromium.cpp:

2011-08-31  Yury Semikhatsky  <yurys@chromium.org>

        Web Inspector: close dedicated worker inspectors when page inspector is closing
        https://bugs.webkit.org/show_bug.cgi?id=67366

        Close all dedicated worker inspector windows when page inspector is closing.

        Reviewed by Pavel Feldman.

        * inspector/front-end/WorkerManager.js:
        (WebInspector.WorkerManager.prototype._openInspectorWindow):
        (WebInspector.WorkerManager.prototype._pageInspectorClosing):
        (WebInspector.WorkerManager.prototype._workerInspectorClosing):
        * inspector/front-end/inspector.js:
        (WebInspector.close):

2011-08-31  Yury Semikhatsky  <yurys@chromium.org>

        [Chromium] Web Inspector: dedicated worker inspection is broken
        https://bugs.webkit.org/show_bug.cgi?id=67279

        Provide transport for inspector messages between Page and DedicatedWorker inspectors
        in case of in-process workers.

        Reviewed by Pavel Feldman.

        * inspector/CodeGeneratorInspector.pm: sendMessageObjectToBackend should accept message
        object which is ready for sending to backend. This method is overriden in WorkerManager
        for dedicated workers and we don't want to replicate request id assignment there.
        * workers/WorkerMessagingProxy.cpp:
        (WebCore::PostMessageToPageInspectorTask::create):
        (WebCore::PostMessageToPageInspectorTask::PostMessageToPageInspectorTask):
        (WebCore::PostMessageToPageInspectorTask::performTask):
        (WebCore::WorkerMessagingProxy::WorkerMessagingProxy):
        (WebCore::connectToWorkerContextInspectorTask):
        (WebCore::WorkerMessagingProxy::connectToInspector):
        (WebCore::disconnectFromWorkerContextInspectorTask):
        (WebCore::WorkerMessagingProxy::disconnectFromInspector):
        (WebCore::dispatchOnInspectorBackendTask):
        (WebCore::WorkerMessagingProxy::sendMessageToInspector):
        (WebCore::WorkerMessagingProxy::postMessageToPageInspector):
        * workers/WorkerMessagingProxy.h:

2011-09-01  Csaba Osztrogonác  <ossy@webkit.org>

        [CSS3 Backgrounds and Borders] Implement border-image-slice
        https://bugs.webkit.org/show_bug.cgi?id=67321

        * WebCore.pro: Unreviewed buildfix after Dave "scattered" Hyatt (r94299).

2011-09-01  Ned Holbrook  <nholbrook@apple.com>

        Typesetting features need not force complex for single-character runs
        https://bugs.webkit.org/show_bug.cgi?id=66498

        Typesetting features have no effect on a solitary character, so they shouldn't enable complex layout
        unless multiple characters are present.

        Reviewed by Dan Bernstein.

        No new tests, this is merely a performance optimization.

        * platform/graphics/Font.cpp:
        (WebCore::Font::codePath): typesettingFeatures() only forces Complex for multiple-character runs.

2011-08-31  Jeff Miller  <jeffm@apple.com>

        Defer creating AVPlayer and AVPlayerItem in MediaPlayerPrivateAVFoundation::setPreload()
        https://bugs.webkit.org/show_bug.cgi?id=66253

        Reviewed by Jon Honeycutt.

        No new tests, should be covered by existing media tests.

        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
        (WebCore::MediaPlayerPrivateAVFoundation::setPreload): Use the same code on Mac and Windows to only create the AVPlayer and AVPlayerItem when needed.

        * platform/graphics/avfoundation/objc/MediaPlayerPrivateAVFoundationObjC.mm:
        (WebCore::MediaPlayerPrivateAVFoundationObjC::createAVPlayer): Assign any existing AVPlayerItem to the new AVPlayer.
        (WebCore::MediaPlayerPrivateAVFoundationObjC::createAVPlayerItem): Allow creation of the AVPlayerItem before the AVPlayer.

2011-08-31  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67321

        Implement border-image-slice. This will eventually be a component of the new border-image shorthand
        property. It holds the cuts that you make into the border image along with a new optional "fill"
        keyword that indicates whether or not the center should be filled with the middle slice of the image.
        
        By default -webkit-border-image has always filled, but this does not match the specification. To preserve
        backwards compatibility, -webkit-border-image will continue to fill by default, but this does slightly affect
        computed style results, since the "fill" keyword will now be included in property dumps.

        Reviewed by Beth Dakin.

        Added fast/borders/border-image-slices.html.

        * CMakeLists.txt:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * css/CSSBorderImageSliceValue.cpp: Added.
        (WebCore::CSSBorderImageSliceValue::CSSBorderImageSliceValue):
        (WebCore::CSSBorderImageSliceValue::~CSSBorderImageSliceValue):
        (WebCore::CSSBorderImageSliceValue::cssText):
        * css/CSSBorderImageSliceValue.h: Added.
        (WebCore::CSSBorderImageSliceValue::create):
        (WebCore::CSSBorderImageSliceValue::isBorderImageSliceValue):
        Add a new CSSBorderImageSliceValue that holds both the four slices (as a CSS rect) and the
        fill keyword (as a boolean). Note that the cssText() dumping of the slices has been refined
        to be smarter, and it will no longer dump repeating values.

        * css/CSSBorderImageValue.cpp:
        (WebCore::CSSBorderImageValue::CSSBorderImageValue):
        (WebCore::CSSBorderImageValue::cssText):
        * css/CSSBorderImageValue.h:
        (WebCore::CSSBorderImageValue::create):
        CSSBorderImageValue now owns a CSSBorderImageSliceValue instead of just a CSS rect.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::valueForNinePieceImageSlice):
        (WebCore::valueForNinePieceImage):
        Add a new method, valueForNinePieceImageSlice, for getting the slices plus the fill value
        from the NinePieceImage and putting it into a CSSBorderImageSliceValue. This method is now used by
        valueForNinePieceImage to get the CSSBorderImageSliceValue that is part of the overall
        CSSBorderImageValue.
    
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        Adding support for the new properties: border-image-slice and -webkit-mask-box-image-slice.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::BorderImageParseContext::BorderImageParseContext):
        (WebCore::BorderImageParseContext::allowBreak):
        (WebCore::BorderImageParseContext::commitImage):
        (WebCore::BorderImageParseContext::commitSlice):
        (WebCore::BorderImageParseContext::commitSlash):
        (WebCore::BorderImageParseContext::commitBorderImage):
        (WebCore::CSSParser::parseBorderImage):
        Modify parseBorderImage to no longer parse the slices itself. Instead it farms out the parsing
        to parseBorderImageSlice.

        (WebCore::BorderImageSliceParseContext::BorderImageSliceParseContext):
        (WebCore::BorderImageSliceParseContext::allowNumber):
        (WebCore::BorderImageSliceParseContext::allowFill):
        (WebCore::BorderImageSliceParseContext::allowFinalCommit):
        (WebCore::BorderImageSliceParseContext::top):
        (WebCore::BorderImageSliceParseContext::commitNumber):
        (WebCore::BorderImageSliceParseContext::commitFill):
        (WebCore::BorderImageSliceParseContext::setAllowFinalCommit):
        (WebCore::BorderImageSliceParseContext::setTop):
        (WebCore::BorderImageSliceParseContext::commitBorderImageSlice):
        (WebCore::CSSParser::parseBorderImageSlice):
        Slice parsing has now been broken out so that it can be parsed as a single property. In addition
        support for the "fill" keyword has been added to control image filling.

        * css/CSSParser.h:
        Modified to add the new parseBorderImageSlice method.

        * css/CSSPropertyNames.in:
        Add the new properties: border-image-slice and -webkit-mask-box-image-slice.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        (WebCore::CSSStyleSelector::mapNinePieceImage):
        Rework mapNinePieceImage to call mapNinePieceImageSlice so that the mapping can be done just for
        the slices.

        (WebCore::CSSStyleSelector::mapNinePieceImageSlice):
        A new method that handles mapping just the slices into the front-end NinePieceImage.

        (WebCore::CSSStyleSelector::loadPendingImages):
        Modified to ensure the fill value is preserved when box-reflect makes a new NinePieceImage.

        * css/CSSStyleSelector.h:
        Added the new mapNinePieceImageSlice method.

        * css/CSSValue.h:
        (WebCore::CSSValue::isBorderImageSliceValue):
        Virtual function for identifying border image slice values.

        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::paintNinePieceImage):
        The painting of the nine piece image has been modified to match the specification. The "fill"
        keyword controls whether or not the middle is painted.

        * rendering/style/NinePieceImage.cpp:
        (WebCore::NinePieceImage::operator==):
        The fill keyword has to be checked now for equality.

        * rendering/style/NinePieceImage.h:
        (WebCore::NinePieceImage::NinePieceImage):
        (WebCore::NinePieceImage::fill):
        (WebCore::NinePieceImage::setFill):
        Added the fill keyword to the front end NinePieceImage.

        (WebCore::NinePieceImage::copySlicesFrom):
        Added a helper to copy only the slices over from another NinePieceImage. Used when inheriting
        the border-image-slice property from a parent style.

2011-09-01  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Decode query/form parameters names as well as values.
        https://bugs.webkit.org/show_bug.cgi?id=67393

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/ResourceHeadersView.js:
        (WebInspector.ResourceHeadersView.prototype._decodeURIComponent):
        (WebInspector.ResourceHeadersView.prototype._refreshParms):

2011-08-31  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: remove PresentationBreakpoint class.
        https://bugs.webkit.org/show_bug.cgi?id=67275

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/BreakpointsSidebarPane.js:
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype.addBreakpoint.didRequestContent):
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype.addBreakpoint):
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointRemoved):

2011-08-31  Steve Block  <steveblock@google.com>

        Clean up all mentions of Android in comments
        https://bugs.webkit.org/show_bug.cgi?id=67303

        Also removes some superfluous guards and methods added for Android.

        Reviewed by Darin Adler.

        No new tests, removing dead code only.

        * WebCorePrefix.h:
          Chromium uses this file only on Mac, so these Android guards are no
          longer required.
        * bindings/v8/NPV8Object.cpp:
        * bindings/v8/NPV8Object.h:
          Including npruntime.h for non-Chromium ports was added in
          http://trac.webkit.org/changeset/53634 for Android. However, this
          file is included in WebCore.pro, so leaving the guard in place.
        * bindings/v8/ScriptCachedFrameData.h:
          This code was added for Android in
          http://trac.webkit.org/changeset/56716 but is now also used by QT. The
          comment should have been removed in
          http://trac.webkit.org/changeset/93573.
        * dom/Document.cpp:
        (WebCore::Document::Document):
        (WebCore::Document::isLayoutTimerActive):
        (WebCore::Document::minimumLayoutDelay):
        * dom/Document.h:
          This method was added for Android in
          http://trac.webkit.org/changeset/52919 and modified in
          http://trac.webkit.org/changeset/79775. It is no longer needed.

2011-09-01  Kristóf Kosztyó  <kkristof@inf.u-szeged.hu>

        [Qt] Build dependency problems
        https://bugs.webkit.org/show_bug.cgi?id=38054

        Make clean build after the defines are changed.

        Reviewed by Csaba Osztrogonác.

        * features.pri:

2011-09-01  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Network error messages in console should link to the respective request in network panel if there is one.
        https://bugs.webkit.org/show_bug.cgi?id=65550

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/ConsoleMessage.js:
        (WebInspector.ConsoleMessage.prototype._formatMessage):
        * inspector/front-end/NetworkPanel.js:
        (WebInspector.NetworkLogView.prototype.refresh):
        (WebInspector.NetworkLogView.prototype.switchToBriefView):
        (WebInspector.NetworkLogView.prototype.searchCanceled):
        (WebInspector.NetworkLogView.prototype.revealAndHighlightResource):
        (WebInspector.NetworkLogView.prototype._removeAllNodeHighlights):
        (WebInspector.NetworkLogView.prototype._highlightNode):
        (WebInspector.NetworkPanel.prototype._resourceByAnchor):
        (WebInspector.NetworkPanel.prototype.canShowAnchorLocation):
        (WebInspector.NetworkPanel.prototype.showAnchorLocation):
        * inspector/front-end/networkLogView.css:
        (.network-log-grid tr.highlighted-row):
        (from):
        (to):

2011-09-01  Patrick Gansterer  <paroga@webkit.org>

        Replace preprocessor statements in DOMWindow.idl with Conditional attribute
        https://bugs.webkit.org/show_bug.cgi?id=65050

        Reviewed by Brent Fulgham.

        Many attributes use the [Conditional=XXX] syntax already.
        Unify the declaration of conditional attributes of DOMWindow
        with the corresponding Conditional attribute.
        This reduces the need of the preprocessor which is the
        the source of much pain on native windows.

        * page/DOMWindow.idl:

2011-09-01  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Fix bufferedAmount after WebSocket is closed
        https://bugs.webkit.org/show_bug.cgi?id=67363

        Reviewed by Kent Tamura.

        Test: http/tests/websocket/tests/hybi/bufferedAmount-after-close.html (updated)

        * websockets/WebSocket.cpp:
        (WebCore::WebSocket::send):
        (WebCore::WebSocket::getFramingOverhead):
        * websockets/WebSocket.h:

2011-09-01  Keishi Hattori  <keishi@webkit.org>

        Rename colorSelected to didChooseColor
        https://bugs.webkit.org/show_bug.cgi?id=67271

        Reviewed by Kent Tamura.

        * WebCore.exp.in:
        * html/ColorInputType.cpp:
        (WebCore::ColorInputType::didChooseColor): Renamed colorSelected to didChooseColor so it follows common naming practice.
        * html/ColorInputType.h:
        * platform/ColorChooser.cpp:
        (WebCore::ColorChooser::didChooseColor): Renamed.
        * platform/ColorChooser.h:

2011-09-01  Adam Barth  <abarth@webkit.org>

        Attempt to fix Windows build.

        * platform/graphics/chromium/FontPlatformDataChromiumWin.cpp:

2011-08-31  Adam Barth  <abarth@webkit.org>

        [Chromium] Rename PlatformBridge to PlatformSupport
        https://bugs.webkit.org/show_bug.cgi?id=67349

        Reviewed by Darin Fisher.

        This matches the WebKitPlatformSupport embedder API.

        * WebCore.gypi:
        * WebCore.pro:
        * bindings/v8/NPV8Object.cpp:
        (_NPN_Evaluate):
        * bindings/v8/ScriptController.cpp:
        (WebCore::ScriptController::createScriptInstanceForWidget):
        * bindings/v8/V8DOMWindowShell.cpp:
        (WebCore::reportFatalErrorInV8):
        * bindings/v8/V8GCController.cpp:
        * bindings/v8/V8Proxy.cpp:
        (WebCore::V8Proxy::handleOutOfMemory):
        (WebCore::V8Proxy::evaluate):
        * bindings/v8/V8Proxy.h:
        * bindings/v8/custom/V8InspectorFrontendHostCustom.cpp:
        (WebCore::histogramEnumeration):
        * page/PageGroup.cpp:
        (WebCore::PageGroup::isLinkVisited):
        * platform/audio/chromium/AudioBusChromium.cpp:
        (WebCore::AudioBus::loadPlatformResource):
        (WebCore::createBusFromInMemoryAudioFile):
        * platform/chromium/ChromiumDataObject.cpp:
        (WebCore::ChromiumDataObject::types):
        (WebCore::ChromiumDataObject::getData):
        (WebCore::ChromiumDataObject::getSequenceNumber):
        (WebCore::ChromiumDataObject::containsFilenames):
        * platform/chromium/DataTransferItemChromium.cpp:
        (WebCore::DataTransferItemChromium::getAsString):
        (WebCore::DataTransferItemChromium::getAsFile):
        * platform/chromium/DragDataChromium.cpp:
        (WebCore::DragData::asURL):
        * platform/chromium/FileSystemChromium.cpp:
        (WebCore::deleteFile):
        (WebCore::deleteEmptyDirectory):
        (WebCore::getFileSize):
        (WebCore::getFileModificationTime):
        (WebCore::revealFolderInOS):
        (WebCore::directoryName):
        (WebCore::pathByAppendingComponent):
        (WebCore::makeAllDirectories):
        (WebCore::fileExists):
        (WebCore::openFile):
        (WebCore::closeFile):
        (WebCore::seekFile):
        (WebCore::truncateFile):
        (WebCore::readFromFile):
        (WebCore::writeToFile):
        * platform/chromium/LanguageChromium.cpp:
        (WebCore::platformDefaultLanguage):
        * platform/chromium/LinkHashChromium.cpp:
        (WebCore::visitedLinkHash):
        * platform/chromium/MIMETypeRegistryChromium.cpp:
        (WebCore::MIMETypeRegistry::getMIMETypeForExtension):
        (WebCore::MIMETypeRegistry::getWellKnownMIMETypeForExtension):
        (WebCore::MIMETypeRegistry::getPreferredExtensionForMIMEType):
        (WebCore::MIMETypeRegistry::isSupportedImageMIMEType):
        (WebCore::MIMETypeRegistry::isSupportedJavaScriptMIMEType):
        (WebCore::MIMETypeRegistry::isSupportedNonImageMIMEType):
        * platform/chromium/PasteboardChromium.cpp:
        (WebCore::Pasteboard::writeSelection):
        (WebCore::Pasteboard::writePlainText):
        (WebCore::Pasteboard::writeURL):
        (WebCore::Pasteboard::writeImage):
        (WebCore::Pasteboard::canSmartReplace):
        (WebCore::Pasteboard::plainText):
        (WebCore::Pasteboard::documentFragment):
        * platform/chromium/PlatformBridge.h: Removed.
        * platform/chromium/PlatformScreenChromium.cpp:
        (WebCore::screenDepth):
        (WebCore::screenDepthPerComponent):
        (WebCore::screenIsMonochrome):
        (WebCore::screenRect):
        (WebCore::screenAvailableRect):
        * platform/chromium/PlatformSupport.h: Copied from Source/WebCore/platform/chromium/PlatformBridge.h.
        * platform/chromium/SSLKeyGeneratorChromium.cpp:
        (WebCore::signedPublicKeyAndChallengeString):
        * platform/chromium/ScrollbarThemeChromium.cpp:
        * platform/chromium/ScrollbarThemeChromiumLinux.cpp:
        (WebCore::ScrollbarThemeChromiumLinux::scrollbarThickness):
        (WebCore::ScrollbarThemeChromiumLinux::paintTrackPiece):
        (WebCore::ScrollbarThemeChromiumLinux::paintButton):
        (WebCore::ScrollbarThemeChromiumLinux::paintThumb):
        (WebCore::ScrollbarThemeChromiumLinux::buttonSize):
        (WebCore::ScrollbarThemeChromiumLinux::minimumThumbLength):
        * platform/chromium/ScrollbarThemeChromiumMac.mm:
        (WebCore::scrollbarStateToThemeState):
        (WebCore::ScrollbarThemeChromiumMac::paint):
        * platform/chromium/ScrollbarThemeChromiumWin.cpp:
        (WebCore::ScrollbarThemeChromiumWin::scrollbarThickness):
        (WebCore::ScrollbarThemeChromiumWin::paintTrackPiece):
        (WebCore::ScrollbarThemeChromiumWin::paintButton):
        (WebCore::ScrollbarThemeChromiumWin::paintThumb):
        (WebCore::ScrollbarThemeChromiumWin::buttonSize):
        * platform/chromium/SharedTimerChromium.cpp:
        (WebCore::setSharedTimerFiredFunction):
        (WebCore::setSharedTimerFireInterval):
        (WebCore::stopSharedTimer):
        * platform/chromium/SuddenTerminationChromium.cpp:
        (WebCore::disableSuddenTermination):
        (WebCore::enableSuddenTermination):
        * platform/chromium/TraceEvent.h:
        (WebCore::internal::ScopeTracer::ScopeTracer):
        (WebCore::internal::ScopeTracer::~ScopeTracer):
        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerPainter::paint):
        * platform/graphics/chromium/CrossProcessFontLoading.mm:
        * platform/graphics/chromium/FontCacheChromiumWin.cpp:
        (WebCore::fontContainsCharacter):
        (WebCore::FillLogFont):
        * platform/graphics/chromium/FontCacheLinux.cpp:
        (WebCore::FontCache::getFontDataForCharacters):
        * platform/graphics/chromium/FontChromiumWin.cpp:
        (WebCore::drawGlyphsWin):
        * platform/graphics/chromium/FontPlatformDataChromiumWin.cpp:
        (WebCore::FontPlatformData::scriptFontProperties):
        * platform/graphics/chromium/FontPlatformDataLinux.cpp:
        (WebCore::FontPlatformData::querySystemForRenderStyle):
        * platform/graphics/chromium/GlyphPageTreeNodeChromiumWin.cpp:
        (WebCore::fillBMPGlyphs):
        * platform/graphics/chromium/ImageChromium.cpp:
        (WebCore::Image::loadPlatformResource):
        * platform/graphics/chromium/ImageChromiumMac.mm:
        (WebCore::Image::loadPlatformResource):
        * platform/graphics/chromium/SimpleFontDataChromiumWin.cpp:
        (WebCore::SimpleFontData::platformInit):
        (WebCore::SimpleFontData::determinePitch):
        (WebCore::SimpleFontData::platformWidthForGlyph):
        * platform/graphics/chromium/UniscribeHelperTextRun.cpp:
        (WebCore::UniscribeHelperTextRun::tryToPreloadFont):
        * platform/graphics/skia/FontCustomPlatformData.cpp:
        (WebCore::FontCustomPlatformData::fontPlatformData):
        * platform/network/chromium/CookieJarChromium.cpp:
        (WebCore::setCookies):
        (WebCore::cookies):
        (WebCore::cookieRequestHeaderFieldValue):
        (WebCore::cookiesEnabled):
        (WebCore::getRawCookies):
        (WebCore::deleteCookie):
        * platform/network/chromium/DNSChromium.cpp:
        (WebCore::prefetchDNS):
        * platform/qt/PlatformBridge.h: Removed.
        * platform/qt/PlatformBridgeQt.cpp: Removed.
        * platform/qt/PlatformSupport.h: Copied from Source/WebCore/platform/qt/PlatformBridge.h.
        * platform/qt/PlatformSupportQt.cpp: Copied from Source/WebCore/platform/qt/PlatformBridgeQt.cpp.
        (WebCore::PlatformSupport::popupsAllowed):
        (WebCore::PlatformSupport::pluginScriptableObject):
        * platform/sql/chromium/SQLiteFileSystemChromium.cpp:
        (WebCore::SQLiteFileSystem::deleteDatabaseFile):
        (WebCore::SQLiteFileSystem::getDatabaseFileSize):
        * platform/sql/chromium/SQLiteFileSystemChromiumPosix.cpp:
        * platform/sql/chromium/SQLiteFileSystemChromiumWin.cpp:
        * plugins/chromium/PluginDataChromium.cpp:
        (WebCore::PluginCache::plugins):
        * rendering/RenderThemeChromiumLinux.cpp:
        (WebCore::getWebThemeState):
        (WebCore::RenderThemeChromiumLinux::adjustSliderThumbSize):
        (WebCore::RenderThemeChromiumLinux::paintCheckbox):
        (WebCore::RenderThemeChromiumLinux::setCheckboxSize):
        (WebCore::RenderThemeChromiumLinux::paintRadio):
        (WebCore::RenderThemeChromiumLinux::setRadioSize):
        (WebCore::RenderThemeChromiumLinux::paintButton):
        (WebCore::RenderThemeChromiumLinux::paintTextField):
        (WebCore::RenderThemeChromiumLinux::paintMenuList):
        (WebCore::RenderThemeChromiumLinux::paintSliderTrack):
        (WebCore::RenderThemeChromiumLinux::paintSliderThumb):
        (WebCore::RenderThemeChromiumLinux::adjustInnerSpinButtonStyle):
        (WebCore::RenderThemeChromiumLinux::paintInnerSpinButton):
        (WebCore::RenderThemeChromiumLinux::paintProgressBar):
        * rendering/RenderThemeChromiumMac.mm:
        (WebCore::RenderThemeChromiumMac::usesTestModeFocusRingColor):
        * rendering/RenderThemeChromiumSkia.cpp:
        (WebCore::RenderThemeChromiumSkia::caretBlinkInterval):
        * rendering/RenderThemeChromiumWin.cpp:
        (WebCore::RenderThemeChromiumWin::platformActiveSelectionBackgroundColor):
        (WebCore::RenderThemeChromiumWin::platformInactiveSelectionBackgroundColor):
        (WebCore::RenderThemeChromiumWin::platformActiveSelectionForegroundColor):
        (WebCore::RenderThemeChromiumWin::systemColor):
        (WebCore::RenderThemeChromiumWin::paintButton):
        (WebCore::RenderThemeChromiumWin::paintSliderTrack):
        (WebCore::menuListButtonWidth):
        (WebCore::RenderThemeChromiumWin::paintMenuList):
        (WebCore::RenderThemeChromiumWin::paintTextFieldInternal):
        (WebCore::RenderThemeChromiumWin::paintInnerSpinButton):
        (WebCore::RenderThemeChromiumWin::paintProgressBar):
        * storage/chromium/IDBFactoryBackendInterface.cpp:
        (WebCore::IDBFactoryBackendInterface::create):
        * storage/chromium/IDBKeyPathBackendImpl.cpp:
        (WebCore::IDBKeyPathBackendImpl::createIDBKeysFromSerializedValuesAndKeyPath):
        (WebCore::IDBKeyPathBackendImpl::injectIDBKeyIntoSerializedValue):
        * storage/chromium/QuotaTracker.cpp:
        (WebCore::QuotaTracker::getDatabaseSizeAndSpaceAvailableToOrigin):

2011-08-31  Ryosuke Niwa  <rniwa@webkit.org>

        Crash when inserting text with a trailing newline into a textarea via JS
        https://bugs.webkit.org/show_bug.cgi?id=66241

        Reviewed by Darin Adler and Kent Tamura.

        The crash was caused by updateFromElement biting on the editing code.

        When there is a style rule that applies on text nodes inside the shadow DOM, DOM modifications made
        by the editing code may trigger style recalculation on input or textarea elements in the midst of editing
        commands. In response to this style recalculation, HTMLInputElement::updateFromElement and
        HTMLTextAreaElement::updateFromElement call setInnerTextValue to re-create the text nodes in the
        shadow DOM. The editing code blows up because setInnerTextValue detaches old text nodes referenced by
        Positions and VisiblePositions held by the editing commands in progress.

        Fixed the crash by stop calling setInnerTextValue in updateFromElement. Instead, WebKit now creates
        the text nodes when attributes, descendent nodes, etc... of input or textarea element changes.

        Tests: fast/forms/update-from-element-during-editing-crash-1.html
               fast/forms/update-from-element-during-editing-crash-2.html

        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::updateType): Force calling setInnerTextValue when input type changes.
        (WebCore::HTMLInputElement::updateInnerTextValue): Extracted from RenderTextControlSingleLine's
        updateElement.
        (WebCore::HTMLInputElement::parseMappedAttribute): Calls updateInnerTextValue; force calling
        setInnerTextValue when -webkit-speech attribute changes. In the theory, we should be able to call it less
        frequently but there are too many cases to consider at the moment.
        (WebCore::HTMLInputElement::setValue): Calls updateInnerTextValue when the value actually changed.
        Note we need to call it before we set or restore selection.
        * html/HTMLInputElement.h:
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::childrenChanged): Calls updateInnerTextValue when textarea's descendants
        nodes are changed by parser or scripts.
        (WebCore::HTMLTextAreaElement::setValueCommon): Calls updateInnerTextValue when the value changes.
        * html/HTMLTextFormControlElement.h:
        * html/NumberInputType.cpp:
        (WebCore::NumberInputType::willBlur): Calls updateInnerTextValue because input[type=number] forces
        the value to be valid on blur.
        * rendering/RenderTextControlMultiLine.cpp: Removed RenderTextControlMultiLine::updateFromElement.
        * rendering/RenderTextControlMultiLine.h: Ditto.
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::updateFromElement):

2011-08-31  Tom Zakrajsek  <tomz@codeaurora.org>

        Fix snow-leopard regression caused by r93982
        https://bugs.webkit.org/show_bug.cgi?id=67301

        Reviewed by Kenneth Russell.

        Test: canvas/philip/tests/2d.path.stroke.prune.arc.html

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::arc):

2011-08-31  Keishi Hattori  <keishi@webkit.org>

        Rename closeColorChooser to cleanupColorChooser
        https://bugs.webkit.org/show_bug.cgi?id=67270

        Reviewed by Kent Tamura.

        * html/ColorInputType.cpp:
        (WebCore::ColorInputType::~ColorInputType):
        (WebCore::ColorInputType::detach):
        (WebCore::ColorInputType::cleanupColorChooserIfCurrentClient): NSColorPanel shouldn't be closed but the color
        chooser listeners need to be taken care of. Therefore closeColorChooser will be renamed to cleanupColorChooser.
        This will close the color chooser on platforms where appropriate.
        * html/ColorInputType.h:
        * loader/EmptyClients.h:
        (WebCore::EmptyChromeClient::cleanupColorChooser): Rename.
        * page/Chrome.cpp:
        (WebCore::Chrome::cleanupColorChooser): Rename.
        * page/Chrome.h:
        * page/ChromeClient.h:

2011-08-31  Kent Tamura  <tkent@chromium.org>

        REGRESSION(r88115): "Choose File" button doesn't respect font-size property for the <input>
        https://bugs.webkit.org/show_bug.cgi?id=67181

        Reviewed by Dimitri Glazkov.

        r88115 removed the code to make inherited style of the owner input
        element, and html.css contains "font: -webkit-small-control" for
        input element. So -webkit-file-upload-button always had
        -webkit-small-control font.

        Test: fast/forms/file/file-style-inheritance.html

        * css/html.css:
        (input[type="file"]::-webkit-file-upload-button):
        Specify font-size:inherit explicitly.

2011-08-31  Chris Rogers  <crogers@google.com>

        Do more rigorous bounds checking in AudioBufferSourceNode::renderFromBuffer()
        https://bugs.webkit.org/show_bug.cgi?id=67351

        Reviewed by Dirk Pranke.

        No new tests since this does not change JavaScript API.

        * webaudio/AudioBufferSourceNode.cpp:
        (WebCore::AudioBufferSourceNode::renderFromBuffer):

2011-08-31  Keishi Hattori  <keishi@webkit.org>

        Remove closeColorChooser call from FrameLoader::transitionToCommitted
        https://bugs.webkit.org/show_bug.cgi?id=67267

        Reviewed by Darin Adler.

        * html/ColorInputType.cpp:
        (WebCore::ColorInputType::closeColorChooserIfCurrentClient): Moved order to match header.
        * html/ColorInputType.h:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::transitionToCommitted): Remove ColorInputType::closeColorChooserIfCurrentClient call.
        It wasn't the right place to directly manipulate the UI.

2011-08-31  Chris Rogers  <crogers@google.com>

        Add defensive bounds checking for AudioNode methods
        https://bugs.webkit.org/show_bug.cgi?id=67346

        Reviewed by Anders Carlsson.

        No new tests since this does not change JavaScript API.

        * webaudio/AudioNode.cpp:
        (WebCore::AudioNode::input):
        (WebCore::AudioNode::output):

2011-08-31  Simon Fraser  <simon.fraser@apple.com>

        TransformState.move() should be negated in the unapply code path
        https://bugs.webkit.org/show_bug.cgi?id=66246

        Reviewed by Chris Marrin.

        Code using TransformState was confused about when to negate the arguments
        to move() in the "UnapplyInverseTransform" direction (used by mapAbsoluteToLocal).
        
        Made the move() path equivalent to the applyTransform() path by not requiring
        the caller to negate, and instead negating inside move().
        
        Fixed the erroneous negation in TransformState::move() when accumulating;
        that negation will happen later via matrix inversion.

        No behavior change.

        * platform/graphics/ca/GraphicsLayerCA.cpp:
        (WebCore::GraphicsLayerCA::recursiveCommitChanges):
        * platform/graphics/transforms/TransformState.cpp:
        (WebCore::TransformState::move):
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::mapAbsoluteToLocalPoint):
        * rendering/RenderInline.cpp:
        (WebCore::RenderInline::mapAbsoluteToLocalPoint):

2011-08-31  Pratik Solanki  <psolanki@apple.com>

        Fix compile issues when enabling HAVE(CFNETWORK_DATA_ARRAY_CALLBACK)
        https://bugs.webkit.org/show_bug.cgi?id=67332

        Reviewed by Darin Adler.

        * loader/mac/ResourceLoaderMac.mm:
        (WebCore::ResourceLoader::didReceiveDataArray):
        * platform/network/cf/ResourceHandleCFNet.cpp:

2011-08-31  Dan Bernstein  <mitz@apple.com>

        Refined the heuristic introduced to fix <rdar://problem/10002140> Text gets clipped in
        multi-column layouts when overflow:auto is used.
        https://bugs.webkit.org/show_bug.cgi?id=67212

        Reviewed by Dave Hyatt.

        Test: fast/multicol/overflow-across-columns-percent-height.html

        * rendering/RenderBox.cpp:
        (WebCore::percentageLogicalHeightIsResolvable): Added. This follows logic similar to the one
        in computePercentageLogicalHeight() to determine whether percentage values for height properties
        are resolved or treated as "auto".
        (WebCore::RenderBox::hasUnsplittableScrollingOverflow): If min-height or max-height are specified
        as a percentage but actually resolve to "auto", don’t let that prevent splitting.

2011-08-31  Ryosuke Niwa  <rniwa@webkit.org>

        Move text() and textWithHardLineBreaks() from RenderTextControl to HTMLTextFormControlElement
        https://bugs.webkit.org/show_bug.cgi?id=67320

        Reviewed by Darin Adler.

        Moved and renamed RenderText::text and RenderText::textWithHardLineBreaks to
        HTMLTextFormControlElement::innerTextValue and HTMLTextFormControlElement::valueWithHardLineBreaks.

        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::text):
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::subtreeHasChanged):
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::appendFormData): Calls valueWithHardLineBreaks. It doesn't have to check
        the existence of renderer anymore because valueWithHardLineBreaks returns value() when renderer do not
        exist unlike RenderText::textWithHardLineBreaks returned emptyString() in such cases. This is the only place
        valueWithHardLineBreaks is ever called; but we can't move valueWithHardLineBreaks because it calls
        finishText.
        (WebCore::HTMLTextAreaElement::handleBeforeTextInsertedEvent):
        (WebCore::HTMLTextAreaElement::updateValue):
        * html/HTMLTextFormControlElement.cpp:
        (WebCore::HTMLTextFormControlElement::selectedText):
        (WebCore::HTMLTextFormControlElement::setInnerTextValue):
        (WebCore::finishText): Moved from RenderText.cpp
        (WebCore::HTMLTextFormControlElement::innerTextValue): Ditto.
        (WebCore::getNextSoftBreak): Ditto.
        (WebCore::HTMLTextFormControlElement::valueWithHardLineBreaks): Ditto; this function returns value()
        when there are no renderers or root inline boxes instead of emptyString().
        * html/HTMLTextFormControlElement.h:
        * html/NumberInputType.cpp:
        (WebCore::NumberInputType::hasUnacceptableValue):
        * html/SearchInputType.cpp:
        (WebCore::SearchInputType::startSearchEventTimer):
        * html/TextFieldInputType.cpp:
        (WebCore::TextFieldInputType::handleBeforeTextInsertedEvent):
        * rendering/RenderTextControl.cpp:
        * rendering/RenderTextControl.h:

2011-08-31  Jeff Miller  <jeffm@apple.com>

        REGRESSION(92210): AVFoundation media engine is disabled on OS X
        https://bugs.webkit.org/show_bug.cgi?id=67316
        
        Move the definition of WTF_USE_AVFOUNDATION on the Mac back to JavaScriptCore/wtf/Platform.h,
        since WebKit2 doesn't have access to WebCore/config.h on this platform. This reverts the
        changes that were made in r92210.

        Reviewed by Darin Adler.

        No new tests, covered by existing media tests.

        * config.h: Removed definition of WTF_USE_AVFOUNDATION on the Mac, add a comment about fixing this on Windows in the future.

2011-08-31  Sailesh Agrawal  <sail@chromium.org>

        [Chromium] Switching between overlay and opaque scrollbars causes glitches
        https://bugs.webkit.org/show_bug.cgi?id=62686

        Reviewed by Beth Dakin.

        When switching from opaque scrollbars to overlay scrollbars the page content size wouldn't change leaving a empty region under the overlay scrollbar.

        The problem was that we were relying on ScrollView::updateScrollbars() to kick off a layout. Unfortunately this doesn't happen because updateScrollbars doesn't distinguish between overlay and opaque scrollbars.

        To fix this I'm explicitly invalidating the layout when ScrollView::scrollbarStyleChanged() is called.

        No tests because there are no Mac 10.7 chromium bots yet. Bug 66504 will track the work to add these tests once the bots are in place.

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::scrollbarStyleChanged):

2011-08-31  Alexey Proskuryakov  <ap@apple.com>

        http/tests/eventsource/workers/eventsource-simple.html is a flaky crash because of
        eventsource-status-error-iframe-crash.html
        https://bugs.webkit.org/show_bug.cgi?id=61523

        Reviewed by Nate Chapin.

        The problem here was that canceling EventSource during frame removal erroneously resulted
        in event dispatch, and event handler re-entered frame destruction code.

        * page/EventSource.h: Renamed endRequest() to networkRequestEnded(), because this method
        doesn't end request. It implements "reestablish the connection" or "fail the connection"
        algotithms from the spec, depending on current state.
        Removed m_failSilently, since we can make this decision with existing data, and want to
        fail silently by default (e.g. when detaching a frame cancels all loads).

        * page/EventSource.cpp:
        (WebCore::EventSource::EventSource): Don't initialize m_failSilently.
        (WebCore::EventSource::~EventSource): Assert taht we are in a correct state.
        (WebCore::EventSource::connect): Ditto.
        (WebCore::EventSource::networkRequestEnded): Moved errorevent dispatch elsewhere.
        (WebCore::EventSource::scheduleReconnect): Error event should always be queued when
        reconnecting; firing it synchronously after starting m_reconnectTimer implements that.
        (WebCore::EventSource::reconnectTimerFired): Assert that state is correct (the timer is
        stopped if EventSource is stopped while waiting on the timer).
        (WebCore::EventSource::close): Don't set m_state before calling cancel() - it will indirectly
        call didFail(), which asserts that EventSource is not stopped yet.
        (WebCore::EventSource::didReceiveResponse): Explicitly dispatch an error event, since it
        is no longer dispatched when canceling, and canceling is the only way to stop a ThreadableLoader.
        Removed a special case for 2xx responses, since it's no longer in the spec.
        (WebCore::EventSource::didReceiveData): Assert that state is correct.
        (WebCore::EventSource::didFinishLoading): Don't set state to CONNECTING after parsing remaining
        response bytes - that may well result in dispatching an event whose handler calls close().
        (WebCore::EventSource::didFail): It's simple now - we always reconnect unless the request
        got canceled.
        (WebCore::EventSource::didFailRedirectCheck): Dispatch error event explicitly, as we are
        not going to attempt reconnecting.

2011-08-31  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94116.
        http://trac.webkit.org/changeset/94116
        https://bugs.webkit.org/show_bug.cgi?id=67323

        caused a lot of tests failures (Requested by thorton on
        #webkit).

        * platform/graphics/cg/PathCG.cpp:
        (WebCore::Path::boundingRect):

2011-08-31  Alexei Svitkine  <asvitkine@chromium.org>

        Chromium Mac: Tweak rubber banding overhang shadows. Add a drop shadow from the browser's toolbar.
        https://bugs.webkit.org/show_bug.cgi?id=67289

        Chromium bug: http://crbug.com/93228

        Reviewed by Dimitri Glazkov.

        No new tests, since this merely tweaks Chromium overhang area appearance.

        * platform/chromium/ScrollbarThemeChromiumMac.mm:
        (WebCore::ScrollbarThemeChromiumMac::paintGivenTickmarks):
        (WebCore::ScrollbarThemeChromiumMac::paintOverhangAreas):

2011-08-31  Tony Chang  <tony@chromium.org>

        Remove webcore_bindings (including DerivedSources##.cpp) from the critical path
        https://bugs.webkit.org/show_bug.cgi?id=67168

        Reviewed by Adam Barth.

        webcore_bindings_sources, debugger_script_source, injected_script_source, and
        inspector_protocol_sources generates various files (e.g., CSSPropertyNames,
        DerivedSources, HTMLNames, etc).  webcore_bindings depends on *_sources and compiles
        these files.  Previously, the other webcore libs (webcore_svg, webcore_html,
        webcore_remaining, etc) depended on webcore_bindings.  This moves the *_sources
        dependencies from webcore_bindings to the other webcore libs so the build can
        parallelize the compile of webcore_bindings and the other webcore_* libs.

        Also copy over the include dirs that we used to get from webcore_bindings'
        direct_dependent_settings.

        No new tests, just changing the build dependencies.

        * WebCore.gyp/WebCore.gyp:

2011-08-31  Tony Gentilcore  <tonyg@chromium.org>

        Minor cleanup: remove inScriptExecution()
        https://bugs.webkit.org/show_bug.cgi?id=67276

        Reviewed by Adam Barth.

        At one point inScriptExecution() existed as a non-virtual duplicate of isExecutingScript()
        to avoid virtual method calls from a tight loop. Now we aren't calling it anywhere perf
        sensitive, so remove the duplication.

        No new tests because no change in functionality.

        * html/parser/HTMLDocumentParser.cpp:
        (WebCore::HTMLDocumentParser::isExecutingScript):
        (WebCore::HTMLDocumentParser::resumeParsingAfterScriptExecution):
        (WebCore::HTMLDocumentParser::notifyFinished):
        * html/parser/HTMLDocumentParser.h:
        (WebCore::HTMLDocumentParser::shouldDelayEnd):

2011-08-31  Tom Sepez  <tsepez@chromium.org>

        Fix XSS filter bypass by multiply decoding both the URL and the body
        snippet until they are in the most minimal form before comparison.
        https://bugs.webkit.org/show_bug.cgi?id=66585

        Reviewed by Adam Barth.

        * html/parser/XSSAuditor.cpp:
        (WebCore::fullyDecodeString):
        (WebCore::XSSAuditor::init):
        (WebCore::XSSAuditor::filterToken):
        (WebCore::XSSAuditor::isContainedInRequest):

2011-08-31  Simon Fraser  <simon.fraser@apple.com>

        Crash with -webkit-radial-gradient(top) gradient
        https://bugs.webkit.org/show_bug.cgi?id=66686

        Reviewed by Darin Adler.
        
        Null-check the current value after calling parseFillPosition(),
        since it may be null for gradients with degenerate arguments.

        Test: fast/gradients/css3-radial-gradient-crash.html

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseRadialGradient):

2011-08-31  Nico Weber  <thakis@chromium.org>

        Make ScrollAnimator(Chromium)?Mac check scrollAnimatorEnabled()
        https://bugs.webkit.org/show_bug.cgi?id=67297

        Reviewed by Tony Chang.

        I need this to disable smooth scrolling in chromium tests. I'm making
        the change to ScrollAnimatorMac to make unforking the file easier. I
        changed scrollAnimatorEnabled() to default to true so that this change
        is a no-op for Safari; in chromium the flag is set explicitly to true
        or false anyway.

        * page/Settings.cpp:
        (WebCore::Settings::Settings):
        * platform/chromium/ScrollAnimatorChromiumMac.mm:
        (WebCore::ScrollAnimatorChromiumMac::scroll):
        * platform/mac/ScrollAnimatorMac.mm:
        (WebCore::ScrollAnimatorMac::scroll):

2011-08-31  Nate Chapin  <japhet@chromium.org>

        Don't load resources with empty urls, since this
        will resolve to the current document.
        https://bugs.webkit.org/show_bug.cgi?id=30303

        Reviewed by Darin Adler.

        Test: http/tests/loading/empty-urls.html

        * dom/ScriptElement.cpp:
        (WebCore::ScriptElement::requestScript): If src="", fail through
            to the error event case.
        * html/HTMLLinkElement.cpp:
        (WebCore::HTMLLinkElement::parseMappedAttribute): Ensure the url
            stays empty if we try to resolve an empty href.
        * loader/ImageLoader.cpp:
        (WebCore::ImageLoader::updateFromElement): Throw an error instead of
            loading if the src is empty in all cases, not just local files.

2011-08-28  Robert Hogan  <robert@webkit.org>

        CSS 2.1 failure: margin-applies-to-015 fails, WebKit does not respect top margin for table captions
        https://bugs.webkit.org/show_bug.cgi?id=34763

        Reviewed by Simon Fraser.

        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::adjustLogicalHeightForCaption): Added the caption's margin to the position calculation.

2011-08-30  Oliver Hunt  <oliver@apple.com>

        Add support for checked arithmetic
        https://bugs.webkit.org/show_bug.cgi?id=67095

        Reviewed by Sam Weinig.

        Add a forwarding header for CheckedArithmetic.h

        * ForwardingHeaders/wtf/CheckedArithmetic.h: Added.

2011-08-31  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=67300
        
        Add the new border-image-source property (and its corresponding analogue for masks, mask-box-image-source).
        Change the border-image parsing code to no longer consider "none" to represent the entire border-image
        expression, but instead to just mean "none" for the image component of the expression.
        
        Change the pending image code for border-image and mask-box-image to use the new *-source properties when
        loading the image so that they're considered the same.
        
        This is the first step towards eliminating the border-image parsing code in favor of just parsing it as
        a shorthand instead, but for now I'm implementing each property one by one, and once they're all there,
        we can cut over to border-image as a true shorthand.

        Reviewed by Beth Dakin.

        Added fast/borders/border-image-source.html.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::CSSParser::parseBorderImage):
        * css/CSSPropertyNames.in:
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        (WebCore::CSSStyleSelector::mapNinePieceImage):
        (WebCore::CSSStyleSelector::loadPendingImages):
        * rendering/style/NinePieceImage.h:
        (WebCore::NinePieceImage::setImage):
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::borderImageSource):
        (WebCore::InheritedFlags::maskBoxImageSource):
        (WebCore::InheritedFlags::setBorderImageSource):
        (WebCore::InheritedFlags::setMaskBoxImageSource):
        (WebCore::InheritedFlags::initialBorderImageSource):
        (WebCore::InheritedFlags::initialMaskBoxImageSource):

2011-08-31  Stephen White  <senorblanco@chromium.org>

        [chromium] Set the GrContext before SkGpuDevice is destroyed.
        https://bugs.webkit.org/show_bug.cgi?id=67296

        When SkGpuDevice is destroyed, it frees the FBO used for accelerated
        rendering.  If the wrong context is set (e.g., compositor context),
        a crash may result.

        Reviewed by Kenneth Russell.

        No new tests.  (Unfortunately, wrong-context bugs are difficult to
        express in a layout test).

        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::ImageBuffer::~ImageBuffer):

2011-08-31  Eric Carlson  <eric.carlson@apple.com>

        Clean up HTMLMediaElement behavior restrictions
        https://bugs.webkit.org/show_bug.cgi?id=67231

        Reviewed by Darin Adler.

        No new tests, cleanup only.

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::HTMLMediaElement): Deal with enum and function renaming.
        (WebCore::HTMLMediaElement::load): Call userGestureRequiredForLoad() instead of testing bits
            directly.
        (WebCore::HTMLMediaElement::loadInternal): Deal with enum and function renaming.
        (WebCore::HTMLMediaElement::play): Call userGestureRequiredForRateChange() instead of testing bits
            directly.
        (WebCore::HTMLMediaElement::pause): Ditto.
        * html/HTMLMediaElement.h:
        (WebCore::HTMLMediaElement::userGestureRequiredForLoad): Renamed.
        (WebCore::HTMLMediaElement::userGestureRequiredForRateChange):
        (WebCore::HTMLMediaElement::userGestureRequiredForFullscreen):
        (WebCore::HTMLMediaElement::pageConsentRequiredForLoad):
        (WebCore::HTMLMediaElement::addBehaviorRestriction):
        (WebCore::HTMLMediaElement::removeBehaviorRestriction):

        * html/HTMLVideoElement.cpp:
        (WebCore::HTMLVideoElement::webkitEnterFullscreen): requireUserGestureForFullScreen renamed to
            userGestureRequiredForFullscreen.

2011-08-31  Andrei Popescu  <andreip@google.com>

        Investigate current uses of OS(ANDROID)
        https://bugs.webkit.org/show_bug.cgi?id=66761

        Reviewed by Darin Adler.

        Remove the last legacy Android code.

        No new tests needed as the code wasn't tested in the first place.

        * bridge/jni/JNIUtility.cpp:
        (JSC::Bindings::getJNIEnv):

2011-08-31  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94082.
        http://trac.webkit.org/changeset/94082
        https://bugs.webkit.org/show_bug.cgi?id=67291

        Breaks trunk (not canary) Chromium Mac builders upon WebKit
        roll (Requested by apavlov on #webkit).

        * WebCore.gyp/WebCore.gyp:

2011-08-31  No'am Rosenthal  <noam.rosenthal@nokia.com>

        [Qt] Add a convenience function to cast a QTransform to TransformationMatrix
        https://bugs.webkit.org/show_bug.cgi?id=67246

        Reviewed by Andreas Kling.

        No new functionality so no new tests.

        * platform/graphics/qt/TransformationMatrixQt.cpp:
        (WebCore::TransformationMatrix::TransformationMatrix):
        * platform/graphics/transforms/TransformationMatrix.h:

2011-08-31  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94176.
        http://trac.webkit.org/changeset/94176
        https://bugs.webkit.org/show_bug.cgi?id=67290

        This does not fix the build failure on Macs (Requested by
        apavlov on #webkit).

        * WebCore.gyp/WebCore.gyp:

2011-08-31  Mike Reed  <reed@google.com>

        [skia] antialias images if we're rotated
        https://bugs.webkit.org/show_bug.cgi?id=67207

        Reviewed by Stephen White.

        * platform/graphics/skia/ImageSkia.cpp:
        (WebCore::hasNon90rotation):
        (WebCore::paintSkBitmap):

2011-08-31  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: Having the "Metrics" pane open affects the node highlight display
        https://bugs.webkit.org/show_bug.cgi?id=67278

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/MetricsSidebarPane.js:
        (WebInspector.MetricsSidebarPane.prototype._updateMetrics):

2011-08-31  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: console view does a style recalculation per each addMessage call.
        https://bugs.webkit.org/show_bug.cgi?id=67198

        It is bad from the performance point of view.

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView.prototype._isScrollIntoViewScheduled):
        (WebInspector.ConsoleView.prototype._appendConsoleMessage):

2011-08-31  Alexander Pavlov  <apavlov@chromium.org>

        [Chromium] Unreviewed build fix. Restore debugger_script_source target dependency
        broken in http://trac.webkit.org/changeset/94082.

        * WebCore.gyp/WebCore.gyp:

2011-08-30  Alexander Pavlov  <apavlov@chromium.org>

        Early return in CSSPrimitiveValue::getDoubleValueInternal() omits additional invalid enums
        https://bugs.webkit.org/show_bug.cgi?id=67139

        Reviewed by Darin Adler.

        * css/CSSPrimitiveValue.cpp:
        (WebCore::isValidCSSUnitTypeForDoubleConversion): Check if a given unit type can be converted to a double.
        (WebCore::CSSPrimitiveValue::getDoubleValueInternal): Make use of the new method that explicitly lists all unit types.

2011-08-30  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: rename sourceFile to uiSourceCode and get rid of sourceFileId where possible.
        https://bugs.webkit.org/show_bug.cgi?id=67136

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/BreakpointManager.js:
        (WebInspector.BreakpointManager.prototype.uiSourceCodeAdded):
        (WebInspector.BreakpointManager.prototype.breakpointsForUISourceCode):
        (WebInspector.BreakpointManager.prototype.setBreakpoint):
        (WebInspector.BreakpointManager.prototype._materializeBreakpoint):
        (WebInspector.BreakpointManager.prototype._breakpointDebuggerLocationChanged):
        (WebInspector.BreakpointManager.prototype._addBreakpointToUI):
        (WebInspector.BreakpointManager.prototype._deleteBreakpointFromUI):
        (WebInspector.BreakpointManager.prototype.set reset):
        (WebInspector.BreakpointManager.prototype.debuggerReset):
        * inspector/front-end/BreakpointsSidebarPane.js:
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype.addBreakpoint):
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype.removeBreakpoint):
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype.highlightBreakpoint):
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype._createBreakpointItemId):
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype._breakpointClicked):
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype._breakpointCheckboxClicked):
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype._contextMenu):
        * inspector/front-end/CallStackSidebarPane.js:
        (WebInspector.CallStackSidebarPane.prototype.update.didGetSourceLine):
        (WebInspector.CallStackSidebarPane.prototype.update):
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation.updateAnchor.didGetLocation):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation.updateAnchor):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
        (WebInspector.DebuggerPresentationModel.prototype._addScript.didCreateSourceMapping):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype._uiSourceCodeReplaced):
        (WebInspector.DebuggerPresentationModel.prototype.canEditScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype._updateBreakpointsAfterLiveEdit):
        (WebInspector.DebuggerPresentationModel.prototype.setFormatSource):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage.didGetUILocation):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage):
        (WebInspector.DebuggerPresentationModel.prototype.continueToLine):
        (WebInspector.DebuggerPresentationModel.prototype.breakpointsForUISourceCode):
        (WebInspector.DebuggerPresentationModel.prototype.setBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.setBreakpointEnabled):
        (WebInspector.DebuggerPresentationModel.prototype.updateBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.removeBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.findBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointRemoved):
        (WebInspector.PresentationBreakpoint):
        (WebInspector.PresentationBreakpoint.prototype.get url):
        (WebInspector.PresentationBreakpoint.prototype.loadSnippet):
        (WebInspector.PresenationCallFrame):
        (WebInspector.PresenationCallFrame.prototype.get url):
        (WebInspector.PresenationCallFrame.prototype.select):
        (WebInspector.PresenationCallFrame.prototype.sourceLine):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype.get statusBarItems):
        (WebInspector.ScriptsPanel.prototype._uiSourceCodeAdded.get if):
        (WebInspector.ScriptsPanel.prototype._showScriptFoldersSettingChanged):
        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect):
        (WebInspector.ScriptsPanel.prototype.setScriptSourceIsBeingEdited):
        (WebInspector.ScriptsPanel.prototype._consoleMessagesCleared):
        (WebInspector.ScriptsPanel.prototype._consoleMessageAdded):
        (WebInspector.ScriptsPanel.prototype._breakpointAdded):
        (WebInspector.ScriptsPanel.prototype._breakpointRemoved):
        (WebInspector.ScriptsPanel.prototype._debuggerPaused.else.didGetSourceLocation):
        (WebInspector.ScriptsPanel.prototype._debuggerPaused):
        (WebInspector.ScriptsPanel.prototype.reset):
        (WebInspector.ScriptsPanel.prototype._resetFilesSelect):
        (WebInspector.ScriptsPanel.prototype.showAnchorLocation):
        (WebInspector.ScriptsPanel.prototype._showSourceLine):
        (WebInspector.ScriptsPanel.prototype._showSourceFrameAndAddToHistory):
        (WebInspector.ScriptsPanel.prototype._createSourceFrame):
        (WebInspector.ScriptsPanel.prototype._removeSourceFrame):
        (WebInspector.ScriptsPanel.prototype._uiSourceCodeReplaced):
        (WebInspector.ScriptsPanel.prototype._sourceFrameLoaded):
        (WebInspector.ScriptsPanel.prototype._callFrameSelected.didGetSourceLocation):
        (WebInspector.ScriptsPanel.prototype._callFrameSelected):
        (WebInspector.ScriptsPanel.prototype._filesSelectChanged):
        (WebInspector.ScriptsPanel.prototype._toggleFormatSource):
        (WebInspector.SourceFrameDelegateForScriptsPanel):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.requestContent):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.setBreakpoint):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.updateBreakpoint):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.removeBreakpoint):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.findBreakpoint):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.continueToLine):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.canEditScriptSource):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.setScriptSource):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.setScriptSourceIsBeingEdited):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.suggestedFileName):

2011-08-31  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Load Blob in WebSocketChannel
        https://bugs.webkit.org/show_bug.cgi?id=67013

        Reviewed by Kent Tamura.

        Add WebSocketChannel::enqueueBlobFrame(). It makes WebSocketChannel start loading a Blob
        and send a WebSocket frame after the Blob is loaded.

        While a Blob is being loaded, subsequent send() requests cannot be processed and are blocked.
        Pending requests are stored in m_outgoingFrameQueue. When we have finished loading a Blob,
        requests in the queue are allowed to get processed.

        No new tests are added, because nobody uses enqueueBlobFrame() yet. New tests will be added
        when WebSocket.send(Blob) is implemented, and they will cover this code change.

        * websockets/WebSocketChannel.cpp:
        ref() is called when m_blobLoader is allocated, and deref() is called in didFinishLoading()
        or didFail(). This is necessary because WebSocketChannel must be able to receive callbacks
        from FileReaderLoader even if the channel is referred from no other objects.
        (WebCore::WebSocketChannel::WebSocketChannel):
        (WebCore::WebSocketChannel::didStartLoading):
        (WebCore::WebSocketChannel::didReceiveData):
        (WebCore::WebSocketChannel::didFinishLoading):
        (WebCore::WebSocketChannel::didFail):
        When we have failed to load a Blob, fail() is called, and eventually didCloseSocketStream()
        will be called. It will clean up the pending requests in the queue.
        (WebCore::WebSocketChannel::enqueueBlobFrame):
        (WebCore::WebSocketChannel::processOutgoingFrameQueue):
        (WebCore::WebSocketChannel::abortOutgoingFrameQueue):
        Cancel the Blob loader when the outgoing request queue is about to be aborted. The loader
        will not invoke didFail() callback once it is canceled, thus we need to call didFail()
        manually so that we can free up the loader and decrement the reference count.

2011-08-31  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Receive binary message as ArrayBuffer
        https://bugs.webkit.org/show_bug.cgi?id=67180

        Reviewed by Kent Tamura.

        Tests: http/tests/websocket/tests/hybi/receive-arraybuffer.html
               http/tests/websocket/tests/hybi/workers/receive-arraybuffer.html

        * bindings/js/JSMessageEventCustom.cpp:
        (WebCore::JSMessageEvent::data): Convert ArrayBuffer to JSValue.
        * bindings/v8/custom/V8MessageEventCustom.cpp:
        (WebCore::V8MessageEvent::dataAccessorGetter): Convert ArrayBuffer to v8::Value.
        * dom/MessageEvent.cpp:
        (WebCore::MessageEvent::MessageEvent):
        * dom/MessageEvent.h:
        Added DataTypeArrayBuffer and ArrayBuffer-related functions.
        (WebCore::MessageEvent::create):
        (WebCore::MessageEvent::dataAsArrayBuffer):
        * websockets/WebSocket.cpp:
        (WebCore::WebSocket::didReceiveBinaryData):
        Construct an ArrayBuffer from binaryData and raise MessageEvent.

2011-08-31  Keishi Hattori  <keishi@webkit.org>

        input color: onchange event is not fired when changing color from color chooser
        https://bugs.webkit.org/show_bug.cgi?id=66848

        Reviewed by Kent Tamura.

        Test: fast/forms/color/input-color-onchange-event.html

        * WebCore.exp.in: Added calls used in Internals.cpp.
        * html/ColorInputType.cpp:
        (WebCore::ColorInputType::colorSelected): Dispatch change event.
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::connectToColorChooser): Added. Called from Internals::connectColorChooserClient.
        * html/HTMLInputElement.h:
        * testing/Internals.cpp:
        (WebCore::Internals::connectColorChooserClient): Added. Connects element as client to color chooser.
        (WebCore::Internals::selectColorInColorChooser): Added. Simulate color selection in color chooser.
        * testing/Internals.h:
        * testing/Internals.idl:

2011-08-31  Kentaro Hara  <haraken@google.com>

        Implement Web IDL Constructor extended attribute in IDLParser.pm and CodeGeneratorV8.pm.
        https://bugs.webkit.org/show_bug.cgi?id=66536

        Reviewed by Adam Barth.

        The spec is here: http://www.w3.org/TR/WebIDL/#Constructor

        [1] Introduced Web IDL 'Constructor' extended attribute.

        [2] Added 'ConstructorWith=ScriptExecutionContext' extended attribute.
        - The constructor passes ScriptExecutionContext to a XXX::create() method,
        like XXX::create(..., context, ...).

        [3] Added 'V8ConstructorSetsActiveDOMWrapper' extended attribute.
        - The constructor calls V8DOMWrapper::setJSWrapperForActiveDOMObject()
        instead of V8DOMWrapper::setJSWrapperForDOMObject().

        [4] Added 'ConstructorRaisesException' extended attribute.
        - A placeholder for ExceptionCode is passed to a XXX::create() method,
        like XXX::create(..., ec).
        - We can use 'ConstructorRaisesException' and 'ConstructorWith=ScriptExecutionContext' together.

        Note:
        - Constructor overloading is not yet implemented.
        - We cannot yet specify [Optional] without CallWithDefaultValue.

        Test: Source/WebCore/bindings/scripts/test/TestInterface.idl
              Source/WebCore/bindings/scripts/test/TestObj.idl

        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateHeader): Generates constructorCallback() header, if 'Constructor' is specified.
        (GenerateFunctionCallback): Uses GenerateArgumentsCountCheck() and GenerateParametersCheck().
        (GenerateArgumentsCountCheck): Splits out of GenerateFunctionCallback() for reuse.
        (GenerateParametersCheck): Ditto.
        (GenerateConstructorCallback): Generates constructorCallback() definition.
        (GenerateImplementation):
        * bindings/scripts/IDLParser.pm:
        (parseExtendedAttributes): Previously, only a string in the "A=B, C, D, E=F" format can be parsed. This patch enables to parse a string in the "A=B, C, D, E=F, G(in DOMString s, in [H, I, J] DOMString t)" format.
        (parseParameters): Splits out of ParseInterface() for reuse.
        (ParseInterface): Uses parseParameters().
        * bindings/scripts/IDLStructure.pm: Added domClass{constructor}. Changed the regular expression to extract the list of extended attributes.
        * bindings/scripts/test/TestInterface.idl: Added all the extended attributes that this patch is going to introduce.
        * bindings/scripts/test/TestObj.idl: Added 'Constructor'.
        * bindings/scripts/test/V8/V8TestInterface.cpp: Updated the test result.
        (WebCore::V8TestInterface::constructorCallback):
        (WebCore::ConfigureV8TestInterfaceTemplate):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp: Ditto.
        * bindings/scripts/test/V8/V8TestObj.cpp: Ditto.
        (WebCore::V8TestObj::constructorCallback):
        * bindings/scripts/test/V8/V8TestObj.h: Ditto.

2011-08-30  Philippe Normand  <pnormand@igalia.com>

        [GTK] gstreamer/ files directly related to the MediaPlayer need VIDEO guards
        https://bugs.webkit.org/show_bug.cgi?id=67196

        Reviewed by Martin Robinson.

        Guard those files with ENABLE(VIDEO) so other features using
        GStreamer can be built even with VIDEO disabled.

        * platform/graphics/gstreamer/GStreamerGWorld.cpp:
        * platform/graphics/gstreamer/GStreamerGWorld.h:
        * platform/graphics/gstreamer/ImageGStreamer.h:
        * platform/graphics/gstreamer/ImageGStreamerCG.mm:
        * platform/graphics/gstreamer/ImageGStreamerCairo.cpp:
        * platform/graphics/gstreamer/ImageGStreamerQt.cpp:
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.h:
        * platform/graphics/gstreamer/PlatformVideoWindow.h:
        * platform/graphics/gstreamer/PlatformVideoWindowGtk.cpp:
        * platform/graphics/gstreamer/VideoSinkGStreamer.cpp:
        * platform/graphics/gstreamer/VideoSinkGStreamer.h:
        * platform/graphics/gstreamer/WebKitWebSourceGStreamer.cpp:
        * platform/graphics/gstreamer/WebKitWebSourceGStreamer.h:

2011-08-30  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r94142, r94144, r94145, and r94148.
        http://trac.webkit.org/changeset/94142
        http://trac.webkit.org/changeset/94144
        http://trac.webkit.org/changeset/94145
        http://trac.webkit.org/changeset/94148
        https://bugs.webkit.org/show_bug.cgi?id=67262

        Broke isindex element (Requested by rniwa on #webkit).

        * WebCore.order:
        * accessibility/AXObjectCache.cpp:
        (WebCore::AXObjectCache::textMarkerDataForVisiblePosition):
        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::isPasswordField):
        (WebCore::AccessibilityRenderObject::isIndeterminate):
        (WebCore::AccessibilityRenderObject::isNativeCheckboxOrRadio):
        (WebCore::AccessibilityRenderObject::isChecked):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::canShareStyleWithControl):
        (WebCore::CSSStyleSelector::adjustRenderStyle):
        (WebCore::CSSStyleSelector::SelectorChecker::checkOneSelector):
        (WebCore::CSSStyleSelector::applyProperty):
        * dom/CheckedRadioButtons.cpp:
        (WebCore::CheckedRadioButtons::addButton):
        (WebCore::CheckedRadioButtons::removeButton):
        * dom/Node.cpp:
        (WebCore::Node::toInputElement):
        * dom/Node.h:
        * editing/FrameSelection.cpp:
        (WebCore::FrameSelection::isInPasswordField):
        * html/HTMLInputElement.h:
        (WebCore::HTMLInputElement::toInputElement):
        * html/shadow/SliderThumbElement.cpp:
        (WebCore::sliderThumbElementOf):
        (WebCore::RenderSliderThumb::layout):
        (WebCore::RenderSliderContainer::layout):
        (WebCore::SliderThumbElement::hostInput):
        (WebCore::trackLimiterElementOf):
        * html/shadow/TextControlInnerElements.cpp:
        (WebCore::SearchFieldResultsButtonElement::shadowPseudoId):
        (WebCore::SearchFieldResultsButtonElement::defaultEventHandler):
        (WebCore::SearchFieldCancelButtonElement::defaultEventHandler):
        (WebCore::SpinButtonElement::defaultEventHandler):
        (WebCore::SpinButtonElement::repeatingTimerFired):
        (WebCore::InputFieldSpeechButtonElement::defaultEventHandler):
        (WebCore::InputFieldSpeechButtonElement::setRecognitionResult):
        * page/DragController.cpp:
        (WebCore::asFileInput):
        * platform/efl/RenderThemeEfl.cpp:
        (WebCore::RenderThemeEfl::paintThemePart):
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::RenderTextControlSingleLine):
        (WebCore::RenderTextControlSingleLine::inputElement):
        * rendering/RenderTheme.cpp:
        (WebCore::RenderTheme::isChecked):
        (WebCore::RenderTheme::isIndeterminate):

2011-08-30  David Levin  <levin@chromium.org>

        Quick fix for crashing tests caused by r94142.

        Tests:
          editing/execCommand/remove-format-elements.html
          fast/block/child-not-removed-from-parent-lineboxes-crash.html
          fast/forms/implicit-submission.html

        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::RenderTextControlSingleLine): Allow
        for isIndex element which is derived from HTMLInputElement.

2011-08-30  Sam Weinig  <sam@webkit.org>

        Add constructor for CustomEvent
        https://bugs.webkit.org/show_bug.cgi?id=67248

        Reviewed by Dan Bernstein.

        Test: fast/events/constructors/custom-event-constructor.html

        * bindings/generic/EventConstructors.h:
        Add definition for CustomEvent constructor.

        * bindings/js/JSEventConstructors.cpp:
        Add CustomEvent #includes.

        * dom/CustomEvent.cpp:
        (WebCore::CustomEventInit::CustomEventInit):
        (WebCore::CustomEvent::CustomEvent):
        * dom/CustomEvent.h:
        (WebCore::CustomEvent::create):
        Add Initializer./

        * dom/CustomEvent.idl:
        Make constructible.

        * page/DOMWindow.idl:
        Add CustomEvent attribute.

2011-08-30  Ryosuke Niwa  <rniwa@webkit.org>

        Get rid of toInputElement()
        https://bugs.webkit.org/show_bug.cgi?id=67175

        Reviewed by Darin Adler.

        Got rid of Node::toInputElement and HTMLInputElement::toInputElement and replaced them by
        a global toHTMLInputElement.

        * WebCore.order:
        * accessibility/AXObjectCache.cpp:
        (WebCore::AXObjectCache::textMarkerDataForVisiblePosition):
        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::isPasswordField):
        (WebCore::AccessibilityRenderObject::isIndeterminate):
        (WebCore::AccessibilityRenderObject::isNativeCheckboxOrRadio):
        (WebCore::AccessibilityRenderObject::isChecked):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::canShareStyleWithControl):
        (WebCore::CSSStyleSelector::adjustRenderStyle):
        (WebCore::CSSStyleSelector::SelectorChecker::checkOneSelector):
        (WebCore::CSSStyleSelector::applyProperty):
        * dom/CheckedRadioButtons.cpp:
        (WebCore::CheckedRadioButtons::addButton):
        (WebCore::CheckedRadioButtons::removeButton):
        * dom/Node.cpp:
        * dom/Node.h:
        * editing/FrameSelection.cpp:
        (WebCore::FrameSelection::isInPasswordField):
        * html/HTMLInputElement.h:
        (WebCore::toHTMLInputElement):
        * html/shadow/SliderThumbElement.cpp:
        (WebCore::sliderThumbElementOf):
        (WebCore::RenderSliderThumb::layout):
        (WebCore::RenderSliderContainer::layout):
        (WebCore::SliderThumbElement::hostInput):
        (WebCore::trackLimiterElementOf):
        * html/shadow/TextControlInnerElements.cpp:
        (WebCore::SearchFieldResultsButtonElement::shadowPseudoId):
        (WebCore::SearchFieldResultsButtonElement::defaultEventHandler):
        (WebCore::SearchFieldCancelButtonElement::defaultEventHandler):
        (WebCore::SpinButtonElement::defaultEventHandler):
        (WebCore::SpinButtonElement::repeatingTimerFired):
        (WebCore::InputFieldSpeechButtonElement::defaultEventHandler):
        (WebCore::InputFieldSpeechButtonElement::setRecognitionResult):
        * page/DragController.cpp:
        (WebCore::asFileInput):
        * platform/efl/RenderThemeEfl.cpp:
        (WebCore::RenderThemeEfl::paintThemePart):
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::RenderTextControlSingleLine):
        (WebCore::RenderTextControlSingleLine::inputElement):
        * rendering/RenderTheme.cpp:
        (WebCore::RenderTheme::isChecked):
        (WebCore::RenderTheme::isIndeterminate):

2011-08-30  Ryosuke Niwa  <rniwa@webkit.org>

        Speculative WinCairo build fix after r94093.

        * platform/network/ResourceHandle.h:

2011-08-30  Ryosuke Niwa  <rniwa@webkit.org>

        Mac build fix after r94128.

        * WebCore.xcodeproj/project.pbxproj:

2011-08-30  Alice Boxhall  <aboxhall@chromium.org>

        Correctly report selected text range for accessibility APIs for role=textbox
        https://bugs.webkit.org/show_bug.cgi?id=65900

        Reviewed by Chris Fleizach.

        Test: accessibility/textbox-role-reports-selection.html

        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::indexForVisiblePosition):
        (WebCore::AccessibilityRenderObject::rootEditableElementForPosition):
        (WebCore::AccessibilityRenderObject::nodeIsTextControl):
        (WebCore::AccessibilityRenderObject::determineAriaRoleAttribute):
        * accessibility/AccessibilityRenderObject.h:

2011-08-30  Rachel Blum  <groby@chromium.org>

        The "port" property of an <a> whose href does not specify a port returns the wrong value
        https://bugs.webkit.org/show_bug.cgi?id=66081

        HTMLAnchorElement now returns "" instead of "0" for unset port
        Fixed KURLGoogle.cpp to have same behavior as KURL.cpp when setting port 0
        Fixed Location.cpp to have same behavior as KURL.cpp when setting port 0
        
        Reviewed by Adam Barth.

        Tests: fast/dom/HTMLAnchorElement/get-href-attribute-port.html
               fast/dom/HTMLAnchorElement/set-href-attribute-port.html
               fast/loader/location-port.html
               fast/url/segments-from-data-url.html
               fast/url/segments.html
               fast/url/trivial-segments.html
               platform/chromium/fast/dom/HTMLAnchorElement/set-href-attribute-port.html
               
        * html/HTMLAnchorElement.cpp:
        (WebCore::HTMLAnchorElement::port):
        * page/Location.cpp:
        (WebCore::Location::host):
        (WebCore::Location::port):
        (WebCore::Location::setPort):
        * platform/KURLGoogle.cpp:
        (WebCore::KURL::setPort):

2011-08-30  Scott Byer  <scottbyer@chromium.org>

        Fix pan scrolling on Windows to be clamped
        https://bugs.webkit.org/show_bug.cgi?id=66910

        With the recent change to support rubberband scrolling on the Mac, pan
        scrolling of overflow divs became unclamped and would scroll infinitely
        and along an axis without a scrollbar.

        Reviewed by Simon Fraser

        Test: platform/win/fast/events/panScroll-correct-direction.html

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::panScrollFromPoint):
        (WebCore::RenderLayer::scrollByRecursively):
        * rendering/RenderLayer.h:

2011-08-30  Bill Budge  <bbudge@chromium.org>

        This patch makes the XMLHttpRequest method/header validation logic available as
        static methods so URL loaders can perform the same checks for untrusted HTTP requests
        coming from plugins. 
        https://bugs.webkit.org/show_bug.cgi?id=66909

        Reviewed by David Levin.

        No new tests. Exposes no new functionality.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * platform/network/HTTPValidation.cpp: Added.
        (WebCore::isValidHTTPToken):
        (WebCore::isValidHTTPHeaderValue):
        * platform/network/HTTPValidation.h: Added.
        * xml/XMLHttpRequest.cpp:
        (WebCore::XMLHttpRequest::isAllowedHTTPMethod):
        (WebCore::XMLHttpRequest::uppercaseKnownHTTPMethod):
        (WebCore::XMLHttpRequest::isAllowedHTTPHeader):
        (WebCore::XMLHttpRequest::open):
        (WebCore::XMLHttpRequest::setRequestHeader):
        * xml/XMLHttpRequest.h:

2011-08-30  Chris Rogers  <crogers@google.com>

        Don't allow nodes of one context to be connected to nodes of another context
        https://bugs.webkit.org/show_bug.cgi?id=67245

        Reviewed by Dimitri Glazkov.
        
        Tests: updated webaudio/audionode.html

        * webaudio/AudioNode.cpp:
        (WebCore::AudioNode::connect):
        
2011-08-30  Dan Bernstein  <mitz@apple.com>

        WebCore part of <rdar://problem/9281695> Add text search API for getting the DOM range of a text match
        https://bugs.webkit.org/show_bug.cgi?id=67230

        Reviewed by Darin Adler.

        Test: TestWebKitAPI/Tests/mac/DOMRangeOfString.

        * WebCore.exp.in: Export Page::rangeOfString().
        * dom/Range.h: Added a default ASSERT_NO_EXCEPTION to a few more member functions.
        * editing/Editor.cpp:
        (WebCore::Editor::findString): Moved most of the logic into rangeOfString(), which this function
        now calls, passing in the current selection as the reference range and setting the selection to
        the returned range.
        (WebCore::Editor::rangeOfString): Added. Contains the find logic from findString().
        * editing/Editor.h:
        * page/Page.cpp:
        (WebCore::Page::rangeOfString): Added. This function is similar to findString(), but it takes an optional
        reference range and returns a Range, rather than using the current selection as the reference range and setting the
        selection to the next match.
        * page/Page.h:

2011-08-30  Sam Weinig  <sam@webkit.org>

        Add additional convertValue overloads to JSDictionary
        https://bugs.webkit.org/show_bug.cgi?id=67244

        Reviewed by Darin Adler.

        Add overloads for convertValue that will be needed for Event
        constructors.

        * bindings/js/JSDictionary.cpp:
        (WebCore::JSDictionary::convertValue):
        * bindings/js/JSDictionary.h:
        Add overloads.  Remove #include of <runtime/Error.h> and just include
        <interpreter/CallFrame.h>

        * bindings/js/JSEventConstructors.cpp:
        Add now necessary #include of <runtime/Error.h>.

2011-08-30  Aaron Colwell  <acolwell@chromium.org>

        Add MediaSource API to HTMLMediaElement
        https://bugs.webkit.org/show_bug.cgi?id=64731

        Reviewed by Eric Carlson.

        Tests: http/tests/media/media-source/webm/video-media-source-errors.html
               http/tests/media/media-source/webm/video-media-source-play.html
               http/tests/media/media-source/webm/video-media-source-seek.html
               http/tests/media/media-source/webm/video-media-source-state-changes.html

        * Configurations/FeatureDefines.xcconfig:
        * GNUmakefile.am:
        * dom/EventNames.h:
        * features.pri:
        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::HTMLMediaElement): Added initializers for new member variables.
        (WebCore::HTMLMediaElement::prepareForLoad): Close the media source before starting a new load.
        (WebCore::HTMLMediaElement::loadResource):
            Fail loading if the media source url from another media element is used.
        (WebCore::HTMLMediaElement::mediaEngineError):
            Make sure the source is in the closed state before firing an emptied event.
        (WebCore::HTMLMediaElement::mediaPlayerSourceOpened):
            New method called by WebCore::MediaPlayer to signal when the source is open.
        (WebCore::HTMLMediaElement::mediaPlayerSourceURL):
            New method called by the WebCore::MediaPlayer to determine what the media source URL is for this
            HTMLMediaElement instance.
        (WebCore::HTMLMediaElement::seek):
            Disabled noSeekRequired optimization if a media source is open and resets the source state to SOURCE_OPEN if
            it was in the SOURCE_ENDED state when seek() was called.
        (WebCore::HTMLMediaElement::webkitSourceAppend):
            New method for passing media data from JavaScript to the WebCore::MediaPlayer.
        (WebCore::HTMLMediaElement::webkitSourceEndOfStream):
            New method that allows JavaScript to signal the end of the stream.
        (WebCore::HTMLMediaElement::webkitSourceState): New method allowing JavaScript to read the current source state.
        (WebCore::HTMLMediaElement::setSourceState): New method for updating the current source state.
        (WebCore::HTMLMediaElement::userCancelledLoad):
            Transitions an open source to the closed state before firing an emptied event.
        * html/HTMLMediaElement.h:
        (WebCore::HTMLMediaElement::webkitMediaSourceURL):
            New method providing the media source URL to JavaScript for this HTMLMediaElement instance.
        * html/HTMLMediaElement.idl: Added new methods, attributes, and constants for the media source api.
        * platform/graphics/MediaPlayer.cpp:
        (WebCore::NullMediaPlayerPrivate::sourceAppend):
            Stub implementation of new WebCore::MediaPlayerPrivateInterface::sourceAppend.
        (WebCore::NullMediaPlayerPrivate::sourceEndOfStream):
            Stub implementation of new WebCore::MediaPlayerPrivateInterface::sourceEndOfStream.
        (WebCore::MediaPlayer::sourceAppend): New method for receiving media data from WebCore::HTMLMediaElement.
        (WebCore::MediaPlayer::sourceEndOfStream): New method for receiving end of stream from WebCore::HTMLMediaElement.
        (WebCore::MediaPlayer::sourceOpened):
            New method called by the MediaPlayerPrivate object to notify the MediaPlayer when the source has opened.
        (WebCore::MediaPlayer::sourceURL):
            New method called by the MediaPlayerPrivate implementation to get the media source URL from the MediaPlayer.
        * platform/graphics/MediaPlayer.h:
        (WebCore::MediaPlayerClient::mediaPlayerSourceOpened):
            Interface method used by the MediaPlayer to tell the HTMLMediaElement when the media source has been opened.
        (WebCore::MediaPlayerClient::mediaPlayerSourceURL):
            Interface method used by the MediaPlayer to get the media source URL from the HTMLMediaElement.
        * platform/graphics/MediaPlayerPrivate.h:
        (WebCore::MediaPlayerPrivateInterface::sourceAppend):
            Interface method used by the MediaPlayer to pass media data to the MediaPlayerPrivate object.
        (WebCore::MediaPlayerPrivateInterface::sourceEndOfStream):
            Interface method used by the MediaPlayer to pass end of stream information to the MediaPlayerPrivate object.

2011-08-30  Sam Weinig  <sam@webkit.org>

        Refactor JS dictionary code into helper class and covert geolocation code to use it
        https://bugs.webkit.org/show_bug.cgi?id=67213

        Reviewed by Darin Adler.

        * GNUmakefile.list.am:
        * UseJSC.cmake:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/js/JSBindingsAllInOne.cpp:
        Add new files.

        * bindings/js/JSDictionary.cpp: Added.
        (WebCore::JSDictionary::convertValue):
        * bindings/js/JSDictionary.h: Added.
        (WebCore::JSDictionary::JSDictionary):
        (WebCore::JSDictionary::tryGetProperty):
        Encapsulate dictionary initialization code into JSDictionary class.

        * bindings/js/JSEventConstructors.cpp:
        (WebCore::constructJSEventWithInitializer):
        Use JSDictionary.

        * bindings/js/JSGeolocationCustom.cpp:
        (WebCore::setEnableHighAccuracy):
        (WebCore::setTimeout):
        (WebCore::setMaximumAge):
        (WebCore::createPositionOptions):
        Use JSDictionary.

2011-08-30  Scott Byer  <scottbyer@chromium.org>

        Switch chromium to use ScrollAnimatorNone on Windows.
        https://bugs.webkit.org/show_bug.cgi?id=67000

        Reviewed by Adam Barth.

        Testing covered by Chromium webkit_unit_tests ScrollAnimatorNoneTest.*

        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:

2011-08-30  Tony Chang  <tony@chromium.org>

        refactor and cleanup RenderFlexibleBox
        https://bugs.webkit.org/show_bug.cgi?id=67165

        Reviewed by Ojan Vafai.

        No new tests, just refactoring code.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutHorizontalBlock):
        (WebCore::RenderFlexibleBox::runFreeSpaceAllocationAlgorithmHorizontal): Make childSizes a param so we can pass the results to layoutAndPlaceChildrenHorizontal.
        (WebCore::hasPackingSpace): Move closer to where it's used.
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildrenHorizontal):
            Pull this code out into its own function because it's not part of running the free space allocation algorithm.
        * rendering/RenderFlexibleBox.h:

2011-08-30  Tim Horton  <timothy_horton@apple.com>

        getBBox() on a SVGPathElement with curves incorrectly includes control points
        https://bugs.webkit.org/show_bug.cgi?id=53512
        <rdar://problem/9861154>

        Reviewed by Dirk Schulze.

        The CoreGraphics implementation of Path::boundingRect() called
        CGPathGetBoundingBox, which includes the path's control points in its
        calculations. Snow Leopard added CGPathGetPathBoundingBox, which
        finds the bounding box of only points within the path, and does not
        include control points. On Snow Leopard and above, we now use the latter.

        Test: svg/custom/getBBox-path.svg

        * platform/graphics/cg/PathCG.cpp:
        (WebCore::Path::boundingRect):

2011-08-30  Tim Horton  <timothy_horton@apple.com>

        SVG panning y-axis is flipped in WebKit2
        https://bugs.webkit.org/show_bug.cgi?id=65800
        <rdar://problem/9908012>

        Reviewed by Darin Adler.

        We previously were not transforming the pointer coordinates passed
        to SVGDocument's panning implementation into the coordinate space of
        the contents, so on different platforms, the drag direction was different.

        Test: svg/custom/pan-direction.svg

        * page/EventHandler.cpp:
        (WebCore::EventHandler::handleMousePressEvent):
        (WebCore::EventHandler::handleMouseMoveEvent):
        (WebCore::EventHandler::handleMouseReleaseEvent):
        * svg/SVGDocument.cpp:
        (WebCore::SVGDocument::startPan):
        (WebCore::SVGDocument::updatePan):

2011-08-30  Adam Barth  <abarth@webkit.org>

        Flaky crash with JavaScript URLs
        https://bugs.webkit.org/show_bug.cgi?id=66360

        Reviewed by Nate Chapin.

        This patch teaches DocumentWriter::begin to make a copy of the URL
        before beginning a new document to avoid a crash.

        Test: fast/loader/javascript-url-iframe-crash.html

        * loader/DocumentWriter.cpp:
        (WebCore::DocumentWriter::begin):

2011-08-30  Tony Gentilcore  <tonyg@chromium.org>

        PreloadScanner shouldn't load images inside noscript via doc.write
        https://bugs.webkit.org/show_bug.cgi?id=67214

        Reviewed by Adam Barth.

        The problem was that the tokenizer state was lost between each call to document.write.
        This works around that bug by making all document.write()s in the same script block share
        the same tokenizer state.

        Test: fast/preloader/document-write-noscript.html

        * html/parser/HTMLDocumentParser.cpp:
        (WebCore::HTMLDocumentParser::~HTMLDocumentParser):
        (WebCore::HTMLDocumentParser::detach):
        (WebCore::HTMLDocumentParser::insert):
        * html/parser/HTMLDocumentParser.h:

2011-08-30  Dmitry Titov  <dimich@chromium.org>

        https://bugs.webkit.org/show_bug.cgi?id=67210
        [Chromium] Use after free in ScheduledAction::execute(WebCore::V8Proxy*)

        Reviewed by David Levin.

        * bindings/v8/ScheduledAction.cpp:
        (WebCore::ScheduledAction::execute):
        Removed usage of V8Proxy instance after it could have been deleted.

        * bindings/v8/V8Proxy.cpp:
        (WebCore::V8Proxy::V8Proxy):
        * bindings/v8/V8Proxy.h:
        Removed unused timerCallback() and setTimerCallback().

2011-08-30  Abhishek Arya  <inferno@chromium.org>

        Style not updated for table parts in :before, :after content.
        https://bugs.webkit.org/show_bug.cgi?id=66141        

        Reviewed by Dave Hyatt.

        Tests: fast/table/table-before-child-style-update.html
               fast/table/table-row-before-child-style-update.html

        * rendering/RenderObjectChildList.cpp:
        (WebCore::RenderObjectChildList::updateBeforeAfterContent):

2011-08-30  Tony Chang  <tony@chromium.org>

        refactor box-ordinal-group handling so we don't timeout on large values
        https://bugs.webkit.org/show_bug.cgi?id=65783

        Reviewed by David Hyatt.

        The old code walked from 1 to the last box-ordinal-group while
        iterating over each flex item.  The new code collects ordinals as
        we do the first walk and sorts them.  Each additional iteration
        through the flex items gets the next oridnal from the sorted list.

        This maintains the single pass for the common case of no
        box-ordinal-groups specified.  If there are ordinal groups,
        the runtime is O(n*m + m lg m) where n is the # of flex items and
        m is the number of unique box-ordinal-group values.  The memory
        usage is O(2m).

        Test: fast/flexbox/box-ordinal-group.html

        * rendering/RenderDeprecatedFlexibleBox.cpp:
        (WebCore::FlexBoxIterator::FlexBoxIterator):
        (WebCore::FlexBoxIterator::reset):
        (WebCore::FlexBoxIterator::next):
        (WebCore::FlexBoxIterator::compareFlexOrder):

2011-08-30  Abhishek Arya  <inferno@chromium.org>

        Removed m_owner accessed in custom scrollbars.
        https://bugs.webkit.org/show_bug.cgi?id=64737

        Reviewed by David Hyatt.

        Problem does not reproduce in DRT, even with Eventhandler tricks
        and gc(). So, adding a manual test.

        * manual-tests/custom-scrollbar-renderer-removed-crash.html: Added.
        * page/FrameView.cpp:
        (WebCore::FrameView::clearOwningRendererForCustomScrollbars):
        * page/FrameView.h:
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::willBeDestroyed): when this renderbox is getting
        destroyed, clear the custom scrollbar in this frameview having this renderbox
        as its owning renderer.
        * rendering/RenderScrollbar.cpp:
        (WebCore::RenderScrollbar::getScrollbarPseudoStyle): fix the null check.

2011-08-30  Caio Marcelo de Oliveira Filho  <caio.oliveira@openbossa.org>

        Emit last progress notification before calling dispatchDidFinishLoad
        https://bugs.webkit.org/show_bug.cgi?id=28851

        Reviewed by Adam Barth.

        Original patch by Xan Lopez. Change FrameLoader to dispatch the notifications in
        a more natural sequence.

        Test: http/tests/loading/progress-finished-callback.html

        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::checkLoadCompleteForThisFrame):

2011-08-30  Ojan Vafai  <ojan@chromium.org>

        CSS parsing for -webkit-flex-flow
        https://bugs.webkit.org/show_bug.cgi?id=67224

        Reviewed by Tony Chang.
        
        Adds support for the first value of -webkit-flex-flow.
        Later we'll need to add support for the second "wrap" value,
        but that can wait until we are ready to implement multiline
        flex and the spec has stabilized a bit.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        (WebCore::CSSPrimitiveValue::operator EFlexFlow):
        * css/CSSPropertyNames.in:
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        * css/CSSValueKeywords.in:
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::flexFlow):
        (WebCore::InheritedFlags::setFlexFlow):
        (WebCore::InheritedFlags::initialFlexFlow):
        * rendering/style/RenderStyleConstants.h:
        * rendering/style/StyleFlexibleBoxData.cpp:
        (WebCore::StyleFlexibleBoxData::StyleFlexibleBoxData):
        (WebCore::StyleFlexibleBoxData::operator==):
        * rendering/style/StyleFlexibleBoxData.h:

2011-08-30  Dawit Alemayehu  <adawit@kde.org>

        [Qt] Replace QLibrary("libgtk-x11-2.0.so.0") with QLibrary("libgtk-x11-2.0", 0)
        https://bugs.webkit.org/show_bug.cgi?id=66627

        Reviewed by Simon Hausmann.

        * plugins/qt/PluginPackageQt.cpp:
        (WebCore::initializeGtk):

2011-08-29  Oliver Hunt  <oliver@apple.com>

        TypedArrays don't ensure that denormalised values are normalised
        https://bugs.webkit.org/show_bug.cgi?id=67178

        Reviewed by Gavin Barraclough.

        Ensure that we convert singaling nans to silent nans when loading
        from a typed array. 

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateImplementation):

2011-08-29  Alexey Proskuryakov  <ap@apple.com>

        DumpRenderTree should begin each test with an empty cookie store
        https://bugs.webkit.org/show_bug.cgi?id=63545
        <rdar://problem/5666907>

        Reviewed by Darin Adler.

        Use a clean CFURLStorageSession when this functionality is available.

        * WebCore.exp.in: Added exports.

        * WebCore.xcodeproj/project.pbxproj: Made CookieStorageCFNet.h private, as currentCFHTTPCookieStorage
        is used in WebKit.

        * platform/mac/CookieJar.mm:
        (WebCore::cookies):
        (WebCore::cookieRequestHeaderFieldValue):
        (WebCore::setCookies):
        (WebCore::cookiesEnabled):
        (WebCore::getRawCookies):
        (WebCore::deleteCookie):
        Updated to use currentCFHTTPCookieStorage().

        * platform/network/CookieStorage.h: Moved CFNetwork specific declarations to CookieStorageCFNet.h.

        * platform/network/ResourceHandle.cpp: Moved CFNetwork specific code to ResourceHandleCFNet.cpp.

        * platform/network/ResourceHandle.h: Exposed default session support on Mac, too. Made
        privateBrowsingStorageSession() private, as callers shouldn't be concerned about where the
        current sssion came from.

        * platform/network/cf/CookieJarCFNet.cpp:
        (WebCore::setCookies):
        (WebCore::cookies):
        (WebCore::cookieRequestHeaderFieldValue):
        (WebCore::cookiesEnabled):
        (WebCore::getRawCookies):
        (WebCore::deleteCookie):
        (WebCore::getHostnamesWithCookies):
        (WebCore::deleteCookiesForHostname):
        (WebCore::deleteAllCookies):
        Updated to use currentCFHTTPCookieStorage().

        * platform/network/cf/CookieStorageCFNet.cpp:
        (WebCore::cookieStorageOverride): Make it clear that this override is only for a Windows API.
        (WebCore::overrideCookieStorage): Ditto.
        (WebCore::currentCFHTTPCookieStorage): We no longer store a cookie storage in a static variable,
        unless it has been overridden on Windows. We can always get it from a session.
        (WebCore::setCookieStoragePrivateBrowsingEnabled): There is nothing to do here - we'll just
        use private session's storage. Note that Mac has a separate code path for OS versions that
        don't support sessions.
        (WebCore::startObservingCookieChanges): Updated to use currentCFHTTPCookieStorage().
        (WebCore::stopObservingCookieChanges): Ditto.

        * platform/network/cf/CookieStorageCFNet.h: Changed exposed methods for more clarity.

        * platform/network/cf/ResourceHandleCFNet.cpp:
        (WebCore::makeFinalRequest): Updated for currentCookieStorage->currentCFHTTPCookieStorage change.
        (WebCore::ResourceHandle::createPrivateBrowsingStorageSession): Moved out of USE(CFNETWORK),
        as this function is also used with NSURLConnection when sessions are enabled.
        (WebCore::ResourceHandle::currentStorageSession): Ditto. Removed an #if since default session
        is now supported on Mac, too.
        (WebCore::defaultCFURLStorageSession): Moved out of USE(CFNETWORK).
        (WebCore::ResourceHandle::setDefaultStorageSession): Moved out of USE(CFNETWORK). No longer
        adopt the session, because nothing in method name says that it will steal a reference from
        the caller.
        (WebCore::ResourceHandle::defaultStorageSession): Moved out of USE(CFNETWORK).
        (WebCore::privateStorageSession): Moved from ResourceHandle.cpp.
        (WebCore::privateBrowsingStorageSessionIdentifierBase): Moved from ResourceHandle.cpp.
        (WebCore::ResourceHandle::setPrivateBrowsingEnabled): Moved from ResourceHandle.cpp.
        (WebCore::ResourceHandle::privateBrowsingStorageSession): Moved from ResourceHandle.cpp.
        (WebCore::ResourceHandle::setPrivateBrowsingStorageSessionIdentifierBase): Moved from ResourceHandle.cpp.
        (WebCore::ResourceHandle::privateBrowsingStorageSessionIdentifierDefaultBase): Moved from ResourceHandle.cpp.

        * platform/network/mac/CookieStorageMac.mm: (WebCore::setCookieStoragePrivateBrowsingEnabled):
        We no longer store a reference to cookie storage in a static variable, so nothing to do here.
        On older OS versiosn, we still need to enable legacy private browsing mode.

        * platform/network/mac/ResourceHandleMac.mm:
        (WebCore::shouldRelaxThirdPartyCookiePolicy): Updated to use the new currentCFHTTPCookieStorage function.
        (WebCore::ResourceHandle::createNSURLConnection): Updated to use currentStorageSession()
        instead of privateBrowsingStorageSession().
        (WebCore::ResourceHandle::willSendRequest): Ditto.

2011-08-30  David Hyatt  <hyatt@apple.com>

        <rdar://problem/10002140> 9A309: Text gets clipped in book because of overflow:auto
        
        https://bugs.webkit.org/show_bug.cgi?id=67212 - Text gets clipped in multi-column layouts when overflow:auto
        is used.
        
        Revise our overflow:auto pagination behavior. If the overflow block doesn't specify any logical height
        information, then we'll just assume the plan is for it to enclose its contents, and we will be willing
        to paginate in those circumstances.

        Reviewed by Dan Bernstein.

        Added overflow-across-columns.html and overflow-unsplittable.html

        * rendering/LayoutState.cpp:
        (WebCore::LayoutState::LayoutState):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::adjustForUnsplittableChild):
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::hasUnsplittableScrollingOverflow):
        * rendering/RenderBox.h:

2011-08-30  Antti Koivisto  <antti@apple.com>

        querySelector/querySelectorAll should use selector checker fast path 
        https://bugs.webkit.org/show_bug.cgi?id=67161

        Reviewed by Sam Weinig.

        Descendant and child selectors can be matches substantially faster using
        SelectorChecker::fastCheckSelector() path. Currently it is used for style matching only.  
        
        Add SelectorQuery class that can do both querySelector and querySelectorAll efficiently using
        fast path. Use inlined loop for DOM traversal.
        
        The patch is ~25% speedup in the overall native score of http://www.webkit.org/perf/slickspeed/.
        Some individual subtests (using child or descendant selectors) execute twice as fast.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::SelectorChecker::checkSelector):
        (WebCore::CSSStyleSelector::SelectorChecker::isFastCheckableSelector):
        (WebCore::RuleData::RuleData):
        * css/CSSStyleSelector.h:
        
            Make fast path checking available outside CSSStyleSelector.
            
        * dom/DOMAllInOne.cpp:
        * dom/Node.cpp:
        (WebCore::Node::querySelector):
        (WebCore::Node::querySelectorAll):
        
            Switch to SelectorQuery.
        
        * dom/SelectorNodeList.cpp: Removed.
        * dom/SelectorNodeList.h: Removed.
        
            SelectorQuery makes these obsolete.

        * dom/SelectorQuery.cpp: Added.
        (WebCore::SelectorQuery::SelectorQuery):
        (WebCore::SelectorQuery::queryAll):
        (WebCore::SelectorQuery::queryFirst):
        (WebCore::SelectorQuery::canUseIdLookup):
        (WebCore::SelectorQuery::execute):
        * dom/SelectorQuery.h: Added.
        
            Class for selector matching in tree.
    
2011-08-30  Dmitry Titov  <dimich@chromium.org>

        REGRESSION (r93913): Failures in fast/replaced/frame-removed-during-resize.html and scrollbars/scrollable-iframe-remove-crash.html
        https://bugs.webkit.org/show_bug.cgi?id=67074

        Reviewed by Darin Adler.

        Added flag m_isClosed to prevent events that cause Frame to be destroyed
        from posting more events into EventQueue of a dying Document.

        The tests mentioned above should now pass.

        * dom/Document.cpp:
        (WebCore::Document::detach):
        * dom/EventQueue.cpp:
        (WebCore::EventQueue::EventQueue):
        (WebCore::EventQueue::enqueueEvent):
        (WebCore::EventQueue::close): Renamed method to reflect better what it does.
        * dom/EventQueue.h:

2011-08-30  Tony Chang  <tony@chromium.org>

        Fix compile warning on clang:
        error: 'WebKit::ChromeClientImpl::scrollRectIntoView' hides overloaded virtual function [-Werror,-Woverloaded-virtual]
            virtual void scrollRectIntoView(
                             ^
        ../../WebCore/page/ChromeClient.h:171:22: note: hidden overloaded virtual function 'WebCore::ChromeClient::scrollRectIntoView' declared here
            virtual void scrollRectIntoView(const IntRect&) { }; // Currently only Mac has a non empty implementation.

        * page/ChromeClient.h:
        (WebCore::ChromeClient::scrollRectIntoView):

2011-08-30  David Hyatt  <hyatt@apple.com>

        <rdar://problem/8832814> With large line-height, column break can happen anywhere in the
        inter-line gap, causing staggered lines.
        
        https://bugs.webkit.org/show_bug.cgi?id=67202 Handle positive leading when paginating lines.
        
        Technically we should paginate lines based solely off their line top and line bottom with
        leading included. However there are two issues with always doing so. The first is that overflow
        can cause lines to overlap, and the second is that negative leading can cause lines to overlap.

        Since we're incapable of dealing with overlap until we stop clipping column boxes and allow them
        to have a form of specialized overflow, we still have to at least factor in overflow and ignore
        negative leading for now. However we can at least honor positive leading when the lines don't
        overlap. This patch provides basic support for paginating when positive leading is involved.

        Reviewed by Dan Bernstein.

        Added fast/multicol/positive-leading.html.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::markLinesDirtyInBlockRange):
        Renamed blockLogicalHeight() to lineBottomWithLeading(). The value is the same.

        (WebCore::RenderBlock::adjustLinePositionForPagination):
        Grow the top and extent of the line to include our leading when deciding how to paginate
        the line.

        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::computeBlockDirectionPositionsForLine):
        (WebCore::RenderBlock::layoutRunsAndFloatsInRange):
        (WebCore::RenderBlock::linkToEndLineIfNeeded):
        (WebCore::RenderBlock::checkFloatsInCleanLine):
        (WebCore::RenderBlock::determineStartPosition):
        (WebCore::RenderBlock::determineEndPosition):
        (WebCore::RenderBlock::matchedEndLine):
        Renamed blockLogicalHeight() to lineBottomWithLeading(). The value is the same.

        * rendering/RootInlineBox.cpp:
        (WebCore::RootInlineBox::RootInlineBox):
        (WebCore::RootInlineBox::adjustPosition):
        (WebCore::RootInlineBox::alignBoxesInBlockDirection):
        * rendering/RootInlineBox.h:
        (WebCore::RootInlineBox::lineTopWithLeading):
        (WebCore::RootInlineBox::lineBottomWithLeading):
        (WebCore::RootInlineBox::setLineTopBottomPositions):
        Instead of one member variable, blockLogicalHeight(), RootInlineBoxes now know both their top and
        bottom including leading. These values are obtainable using lineTopWithLeading() and lineBottomWithLeading().
        Add these two values to the setLineTopBottomPositions setter and remove setBlockLogicalHeight.

        * rendering/svg/SVGRootInlineBox.cpp:
        (WebCore::SVGRootInlineBox::layoutRootBox):
        Renamed blockLogicalHeight() to lineBottomWithLeading(). The value is the same.

2011-08-29  Chris Marrin  <cmarrin@apple.com>

        Rename GraphicsContext3DInternal to GraphicsContext3DPrivate and add a dummy version of this class for Mac
        https://bugs.webkit.org/show_bug.cgi?id=67172

        Reviewed by Kenneth Russell.

        * GNUmakefile.list.am:
        * platform/graphics/GraphicsContext3D.h:
        * platform/graphics/chromium/Extensions3DChromium.h:
        * platform/graphics/gtk/GraphicsContext3DGtk.cpp:
        (WebCore::GraphicsContext3D::create):
        (WebCore::GraphicsContext3D::GraphicsContext3D):
        (WebCore::GraphicsContext3D::~GraphicsContext3D):
        (WebCore::GraphicsContext3D::makeContextCurrent):
        (WebCore::GraphicsContext3D::platformGraphicsContext3D):
        * platform/graphics/gtk/GraphicsContext3DInternal.h: Removed.
        * platform/graphics/gtk/GraphicsContext3DPrivate.h: Copied from Source/WebCore/platform/graphics/gtk/GraphicsContext3DInternal.h.
        * platform/graphics/mac/GraphicsContext3DMac.mm:
        (WebCore::GraphicsContext3DPrivate::GraphicsContext3DPrivate):
        (WebCore::GraphicsContext3DPrivate::~GraphicsContext3DPrivate):
        (WebCore::GraphicsContext3D::GraphicsContext3D):
        * platform/graphics/qt/GraphicsContext3DQt.cpp:
        (WebCore::GraphicsContext3DPrivate::GraphicsContext3DPrivate):
        (WebCore::GraphicsContext3DPrivate::~GraphicsContext3DPrivate):
        (WebCore::GraphicsContext3DPrivate::getViewportGLWidget):
        (WebCore::GraphicsContext3DPrivate::paintToTextureMapper):
        (WebCore::GraphicsContext3DPrivate::boundingRect):
        (WebCore::GraphicsContext3DPrivate::paint):
        (WebCore::GraphicsContext3DPrivate::blitMultisampleFramebuffer):
        (WebCore::GraphicsContext3DPrivate::blitMultisampleFramebufferAndRestoreContext):
        (WebCore::GraphicsContext3D::create):
        (WebCore::GraphicsContext3D::GraphicsContext3D):
        (WebCore::GraphicsContext3D::~GraphicsContext3D):
        (WebCore::GraphicsContext3D::platformGraphicsContext3D):
        (WebCore::GraphicsContext3D::platformLayer):
        (WebCore::GraphicsContext3D::makeContextCurrent):
        (WebCore::GraphicsContext3D::paintRenderingResultsToCanvas):
        (WebCore::GraphicsContext3D::reshape):
        (WebCore::GraphicsContext3D::activeTexture):
        (WebCore::GraphicsContext3D::attachShader):
        (WebCore::GraphicsContext3D::getAttachedShaders):
        (WebCore::GraphicsContext3D::bindAttribLocation):
        (WebCore::GraphicsContext3D::bindBuffer):
        (WebCore::GraphicsContext3D::bindFramebuffer):
        (WebCore::GraphicsContext3D::bindRenderbuffer):
        (WebCore::GraphicsContext3D::bindTexture):
        (WebCore::GraphicsContext3D::blendColor):
        (WebCore::GraphicsContext3D::blendEquation):
        (WebCore::GraphicsContext3D::blendEquationSeparate):
        (WebCore::GraphicsContext3D::blendFunc):
        (WebCore::GraphicsContext3D::blendFuncSeparate):
        (WebCore::GraphicsContext3D::bufferData):
        (WebCore::GraphicsContext3D::bufferSubData):
        (WebCore::GraphicsContext3D::checkFramebufferStatus):
        (WebCore::GraphicsContext3D::clearColor):
        (WebCore::GraphicsContext3D::clear):
        (WebCore::GraphicsContext3D::clearDepth):
        (WebCore::GraphicsContext3D::clearStencil):
        (WebCore::GraphicsContext3D::colorMask):
        (WebCore::GraphicsContext3D::compileShader):
        (WebCore::GraphicsContext3D::copyTexImage2D):
        (WebCore::GraphicsContext3D::copyTexSubImage2D):
        (WebCore::GraphicsContext3D::cullFace):
        (WebCore::GraphicsContext3D::depthFunc):
        (WebCore::GraphicsContext3D::depthMask):
        (WebCore::GraphicsContext3D::depthRange):
        (WebCore::GraphicsContext3D::detachShader):
        (WebCore::GraphicsContext3D::disable):
        (WebCore::GraphicsContext3D::disableVertexAttribArray):
        (WebCore::GraphicsContext3D::drawArrays):
        (WebCore::GraphicsContext3D::drawElements):
        (WebCore::GraphicsContext3D::enable):
        (WebCore::GraphicsContext3D::enableVertexAttribArray):
        (WebCore::GraphicsContext3D::finish):
        (WebCore::GraphicsContext3D::flush):
        (WebCore::GraphicsContext3D::framebufferRenderbuffer):
        (WebCore::GraphicsContext3D::framebufferTexture2D):
        (WebCore::GraphicsContext3D::frontFace):
        (WebCore::GraphicsContext3D::generateMipmap):
        (WebCore::GraphicsContext3D::getActiveAttrib):
        (WebCore::GraphicsContext3D::getActiveUniform):
        (WebCore::GraphicsContext3D::getAttribLocation):
        (WebCore::GraphicsContext3D::getError):
        (WebCore::GraphicsContext3D::getString):
        (WebCore::GraphicsContext3D::hint):
        (WebCore::GraphicsContext3D::isBuffer):
        (WebCore::GraphicsContext3D::isEnabled):
        (WebCore::GraphicsContext3D::isFramebuffer):
        (WebCore::GraphicsContext3D::isProgram):
        (WebCore::GraphicsContext3D::isRenderbuffer):
        (WebCore::GraphicsContext3D::isShader):
        (WebCore::GraphicsContext3D::isTexture):
        (WebCore::GraphicsContext3D::lineWidth):
        (WebCore::GraphicsContext3D::linkProgram):
        (WebCore::GraphicsContext3D::pixelStorei):
        (WebCore::GraphicsContext3D::polygonOffset):
        (WebCore::GraphicsContext3D::readPixels):
        (WebCore::GraphicsContext3D::releaseShaderCompiler):
        (WebCore::GraphicsContext3D::renderbufferStorage):
        (WebCore::GraphicsContext3D::sampleCoverage):
        (WebCore::GraphicsContext3D::scissor):
        (WebCore::GraphicsContext3D::shaderSource):
        (WebCore::GraphicsContext3D::stencilFunc):
        (WebCore::GraphicsContext3D::stencilFuncSeparate):
        (WebCore::GraphicsContext3D::stencilMask):
        (WebCore::GraphicsContext3D::stencilMaskSeparate):
        (WebCore::GraphicsContext3D::stencilOp):
        (WebCore::GraphicsContext3D::stencilOpSeparate):
        (WebCore::GraphicsContext3D::texParameterf):
        (WebCore::GraphicsContext3D::texParameteri):
        (WebCore::GraphicsContext3D::uniform1f):
        (WebCore::GraphicsContext3D::uniform1fv):
        (WebCore::GraphicsContext3D::uniform2f):
        (WebCore::GraphicsContext3D::uniform2fv):
        (WebCore::GraphicsContext3D::uniform3f):
        (WebCore::GraphicsContext3D::uniform3fv):
        (WebCore::GraphicsContext3D::uniform4f):
        (WebCore::GraphicsContext3D::uniform4fv):
        (WebCore::GraphicsContext3D::uniform1i):
        (WebCore::GraphicsContext3D::uniform1iv):
        (WebCore::GraphicsContext3D::uniform2i):
        (WebCore::GraphicsContext3D::uniform2iv):
        (WebCore::GraphicsContext3D::uniform3i):
        (WebCore::GraphicsContext3D::uniform3iv):
        (WebCore::GraphicsContext3D::uniform4i):
        (WebCore::GraphicsContext3D::uniform4iv):
        (WebCore::GraphicsContext3D::uniformMatrix2fv):
        (WebCore::GraphicsContext3D::uniformMatrix3fv):
        (WebCore::GraphicsContext3D::uniformMatrix4fv):
        (WebCore::GraphicsContext3D::useProgram):
        (WebCore::GraphicsContext3D::validateProgram):
        (WebCore::GraphicsContext3D::vertexAttrib1f):
        (WebCore::GraphicsContext3D::vertexAttrib1fv):
        (WebCore::GraphicsContext3D::vertexAttrib2f):
        (WebCore::GraphicsContext3D::vertexAttrib2fv):
        (WebCore::GraphicsContext3D::vertexAttrib3f):
        (WebCore::GraphicsContext3D::vertexAttrib3fv):
        (WebCore::GraphicsContext3D::vertexAttrib4f):
        (WebCore::GraphicsContext3D::vertexAttrib4fv):
        (WebCore::GraphicsContext3D::vertexAttribPointer):
        (WebCore::GraphicsContext3D::viewport):
        (WebCore::GraphicsContext3D::getBooleanv):
        (WebCore::GraphicsContext3D::getBufferParameteriv):
        (WebCore::GraphicsContext3D::getFloatv):
        (WebCore::GraphicsContext3D::getFramebufferAttachmentParameteriv):
        (WebCore::GraphicsContext3D::getIntegerv):
        (WebCore::GraphicsContext3D::getProgramiv):
        (WebCore::GraphicsContext3D::getProgramInfoLog):
        (WebCore::GraphicsContext3D::getRenderbufferParameteriv):
        (WebCore::GraphicsContext3D::getShaderiv):
        (WebCore::GraphicsContext3D::getShaderInfoLog):
        (WebCore::GraphicsContext3D::getShaderSource):
        (WebCore::GraphicsContext3D::getTexParameterfv):
        (WebCore::GraphicsContext3D::getTexParameteriv):
        (WebCore::GraphicsContext3D::getUniformfv):
        (WebCore::GraphicsContext3D::getUniformiv):
        (WebCore::GraphicsContext3D::getUniformLocation):
        (WebCore::GraphicsContext3D::getVertexAttribfv):
        (WebCore::GraphicsContext3D::getVertexAttribiv):
        (WebCore::GraphicsContext3D::getVertexAttribOffset):
        (WebCore::GraphicsContext3D::texImage2D):
        (WebCore::GraphicsContext3D::texSubImage2D):
        (WebCore::GraphicsContext3D::createBuffer):
        (WebCore::GraphicsContext3D::createFramebuffer):
        (WebCore::GraphicsContext3D::createProgram):
        (WebCore::GraphicsContext3D::createRenderbuffer):
        (WebCore::GraphicsContext3D::createShader):
        (WebCore::GraphicsContext3D::createTexture):
        (WebCore::GraphicsContext3D::deleteBuffer):
        (WebCore::GraphicsContext3D::deleteFramebuffer):
        (WebCore::GraphicsContext3D::deleteProgram):
        (WebCore::GraphicsContext3D::deleteRenderbuffer):
        (WebCore::GraphicsContext3D::deleteShader):
        (WebCore::GraphicsContext3D::deleteTexture):

2011-08-30  Tony Chang  <tony@chromium.org>

        Remove webcore_bindings (including DerivedSources##.cpp) from the critical path
        https://bugs.webkit.org/show_bug.cgi?id=67168

        Reviewed by Adam Barth.

        webcore_bindings_sources generates various files (e.g., CSSPropertyNames,
        DerivedSources, HTMLNames, etc).  webcore_bindings depends on webcore_bindings_sources
        and compiles these files.  Previously, the other webcore libs (webcore_svg,
        webcore_html, webcore_remaining, etc) depended on webcore_bindings.  This changes the
        dependency on webocre_bindings_sources so the build can parallelize the compile of
        webcore_bindings and the other webcore_* libs.

        No new tests, just changing the build dependencies.  Manually copy over the
        include dirs that we used to get from webcore_bindings' direct_dependent_settings.

        * WebCore.gyp/WebCore.gyp:

2011-08-30  Kaustubh Atrawalkar  <kaustubh@motorola.com>

        The unused ScrollView* argument can and should be removed from
        scrollRectIntoView.
        https://bugs.webkit.org/show_bug.cgi?id=67117

        Reviewed by Darin Adler.

        * loader/EmptyClients.h:
        (WebCore::EmptyChromeClient::scrollRectIntoView):
        * page/Chrome.cpp:
        (WebCore::Chrome::scrollRectIntoView):
        * page/ChromeClient.h:
        (WebCore::ChromeClient::scrollRectIntoView):

2011-08-30  Ben Wells  <benwells@chromium.org>

        Update registerProtocolHandler scheme whitelist to match spec
        https://bugs.webkit.org/show_bug.cgi?id=67104

        Reviewed by Darin Adler.

        * page/Navigator.cpp:
        (WebCore::initProtocolHandlerWhitelist):

2011-08-30  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Inspected page sometimes crashes in InspectorResourceAgent::didFailLoading
        https://bugs.webkit.org/show_bug.cgi?id=67193

        Reviewed by Pavel Feldman.

        * inspector/InspectorResourceAgent.cpp:
        (WebCore::InspectorResourceAgent::didFailLoading):

2011-08-30  Ademar de Souza Reis Jr.  <ademar.reis@openbossa.org>

        [Qt] Do not unconditionally use pkg-config in .pro files
        https://bugs.webkit.org/show_bug.cgi?id=67055

        Reviewed by Andreas Kling.

        Original patch from Rohan McGovern <rohan.mcgovern@nokia.com>

        Using the first pkg-config in PATH is prone to errors when cross
        compiling inside the Qt repository (using Qt's build-system).

        This patch protect calls for pkg-config with
        !contains(QT_CONFIG, no-pkg-config). no-pkg-config is added to
        QT_CONFIG by Qt's 'configure' when cross-compiling on systems
        without pkg-config.

        The respective change in Qt's configure has been submited already.

        No new tests as this is just a build change.

        * features.pri: protect pkg-config calls

2011-08-30  Andreas Kling  <kling@webkit.org>

        HTMLImageElement: Don't cache "ismap" and "usemap" attributes.
        https://bugs.webkit.org/show_bug.cgi?id=66784

        Reviewed by Darin Adler.

        * html/HTMLImageElement.h: Remove the "ismap" and "usemap" members,
        shrinking HTMLImageElement by 16 bytes (on 64-bit.)
        * html/HTMLImageElement.cpp:
        (WebCore::HTMLImageElement::HTMLImageElement):
        (WebCore::HTMLImageElement::parseMappedAttribute): Most of the logic
        for "ismap" and "usemap" moved into isServerMap().
        (WebCore::HTMLImageElement::isServerMap): Out-of-lined and implemented
        using fast*Attribute().

2011-08-30  Ryosuke Niwa  <rniwa@webkit.org>

        lastChangeWasUserEdit continues to return true when innerText or textContent is modified
        https://bugs.webkit.org/show_bug.cgi?id=67183

        Reviewed by Kent Tamura.

        Fixed the bug by calling setLastChangeWasNotUserEdit in HTMLTextAreaElement::childrenChanged.

        Also got rid of HTMLTextFormControlElement::subtreeHasChanged because it was a needless indirection.

        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::subtreeHasChanged): No longer calls HTMLTextFormControlElement::subtreeHasChanged.
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::childrenChanged): Calls setLastChangeWasNotUserEdit.
        (WebCore::HTMLTextAreaElement::subtreeHasChanged): No longer calls HTMLTextFormControlElement::subtreeHasChanged.
        * html/HTMLTextFormControlElement.cpp:
        (WebCore::HTMLTextFormControlElement::defaultEventHandler): Merged subtreeHasChanged.
        (WebCore::HTMLTextFormControlElement::setInnerTextValue): No longer set m_lastChangeWasUserEdit to false
        since this is now done when renderers are set dirty.
        * html/HTMLTextFormControlElement.h: Made subtreeHasChanged a pure virtual function.

2011-08-29  Yury Semikhatsky  <yurys@chromium.org>

        Web Inspector: wrong script display name when there is a slash in its URL query parameters
        https://bugs.webkit.org/show_bug.cgi?id=67120

        Fixed folder name computation in ScriptsPanel. Now search query is ignored
        when searching for the script folder name.

        Reviewed by Pavel Feldman.

        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._folderAndDisplayNameForScriptURL):

2011-08-29  Yury Semikhatsky  <yurys@chromium.org>

        Return value of window.onerror has inverted semantics
        https://bugs.webkit.org/show_bug.cgi?id=67119

        Error is now treated as handled only when window.onerror function returns true.

        Reviewed by Darin Adler.

        Test: fast/events/window-onerror13.html

        * bindings/js/JSErrorHandler.cpp:
        (WebCore::JSErrorHandler::handleEvent):
        * bindings/v8/V8WindowErrorHandler.cpp:
        (WebCore::V8WindowErrorHandler::callListenerFunction):
        * bindings/v8/V8WorkerContextErrorHandler.cpp:
        (WebCore::V8WorkerContextErrorHandler::callListenerFunction):

2011-08-29  Ryosuke Niwa  <rniwa@webkit.org>

        Touch Internals.cpp in an attempt to fix GTK+ build.

        * testing/Internals.cpp:

2011-08-29  Ryosuke Niwa  <rniwa@webkit.org>

        Move setInnerTextValue from RenderTextControl to HTMLTextFormControlElement
        https://bugs.webkit.org/show_bug.cgi?id=67152

        Reviewed by Darin Adler.

        Moved setInnerTextValue from RenderTextControl to HTMLTextFormControlElement.

        Also moved m_lastChangeWasUserEdit from RenderTextControl to HTMLTextFormControlElement
        and related inline functions from RenderTextControl to HTMLTextFormControlElement.
        Because m_lastChangeWasUserEdit is no longer reset when RenderTextControl is recreated,
        added explicit calls to setLastChangeWasNotUserEdit in setValue functions of HTMLInputElement
        and HTMLTextAreaElement.

        This patch also fixes the bug that lastChangeWasUserEdit() incorrectly returns false
        when input or textarea don't have renderer (e.g. invisible).

        Unfortunately, there is no way to test this behavioral change from layout tests.

        * WebCore.exp.in: Exports lastChangeWasUserEdit in HTMLTextFormControlElement instead of
        that of HTMLInputElement and HTMLTextAreaElement.
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::setValue): Explicitly calls setLastChangeWasNotUserEdit.
        * html/HTMLInputElement.h:
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::setValueCommon): Ditto.
        * html/HTMLTextAreaElement.h:
        * html/HTMLTextFormControlElement.cpp:
        (WebCore::HTMLTextFormControlElement::HTMLTextFormControlElement):
        (WebCore::HTMLTextFormControlElement::subtreeHasChanged): Sets m_lastChangeWasUserEdit true
        as it used to do via respondToChangeByUser.
        (WebCore::HTMLTextFormControlElement::lastChangeWasUserEdit): Moved from HTMLInputElement
        and HTMLTextAreaElement.
        (WebCore::HTMLTextFormControlElement::setInnerTextValue): Moved from RenderTextControl.
        * html/HTMLTextFormControlElement.h:
        (WebCore::HTMLTextFormControlElement::setLastChangeWasNotUserEdit): Added.
        * rendering/RenderTextControl.cpp:
        (WebCore::RenderTextControl::RenderTextControl): No longer initializes m_lastChangeWasUserEdit.
        * rendering/RenderTextControl.h:
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::updateFromElement): Calls setInnerTextValue.
        * rendering/RenderTextControlMultiLine.cpp:
        (WebCore::RenderTextControlMultiLine::updateFromElement): Ditto.

2011-08-25  Kent Tamura  <tkent@chromium.org>

        REGRESSION(r88115): Disabling a file upload control causes an endless busyloop.
        https://bugs.webkit.org/show_bug.cgi?id=66659

        Reviewed by Darin Adler.

        Test: fast/forms/file/disabling-file-busy-loop.html

        * rendering/RenderFileUploadControl.cpp:
        (WebCore::RenderFileUploadControl::updateFromElement):
        Don't call setDisabled() if the disabled status is not changed.
        setDisabled() causes styleRecalc(), and
        HTMLFormControlElement::styleRecalc() causes
        updateFromElement(). updateFromElement() should not call
        setDisabled() again.

2011-08-29  Daniel Bates  <dbates@webkit.org>

        Add HAVE(VASPRINTF) macro to test for vasprintf() support
        https://bugs.webkit.org/show_bug.cgi?id=67156

        Reviewed by Darin Adler.

        * xml/parser/XMLDocumentParserLibxml2.cpp:
        (WebCore::XMLDocumentParser::error): Modified to use HAVE(VASPRINTF).

2011-08-29  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Receive binary message as Blob
        https://bugs.webkit.org/show_bug.cgi?id=67115

        Reviewed by Kent Tamura.

        Make WebSocketChannel be able to receive WebSocket binary messages and deliver them via
        didReceiveBinaryData() callback of WebSocketChannelClient.

        Tests: http/tests/websocket/tests/hybi/fragmented-binary-frames.html
               http/tests/websocket/tests/hybi/receive-blob.html
               http/tests/websocket/tests/hybi/workers/receive-blob.html

        * bindings/js/JSMessageEventCustom.cpp:
        (WebCore::JSMessageEvent::data): Convert Blob to JSValue.
        * bindings/v8/custom/V8MessageEventCustom.cpp:
        (WebCore::V8MessageEvent::dataAccessorGetter): Convert Blob to v8::Value.
        * dom/MessageEvent.cpp:
        (WebCore::MessageEvent::MessageEvent):
        * dom/MessageEvent.h:
        Added DataTypeBlob and Blob-related functions.
        (WebCore::MessageEvent::create):
        (WebCore::MessageEvent::dataAsBlob):
        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
        (WebCore::ThreadableWebSocketChannelClientWrapper::didReceiveBinaryData):
        (WebCore::ThreadableWebSocketChannelClientWrapper::didReceiveBinaryDataCallback):
        * websockets/ThreadableWebSocketChannelClientWrapper.h:
        * websockets/WebSocket.cpp:
        (WebCore::WebSocket::didReceiveBinaryData):
        If binaryType attribute is "blob", construct a Blob using BlobData filled with the given
        binary message.
        * websockets/WebSocket.h:
        * websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::processFrame):
        Create continuousFrameData as OwnPtr<> rather than stack-allocated value so we can easily
        pass it to didReceiveBinaryData() callback.
        Save the content of a fragmented message even if it is a binary opcode.
        * websockets/WebSocketChannelClient.h:
        (WebCore::WebSocketChannelClient::didReceiveBinaryData):
        * websockets/WorkerThreadableWebSocketChannel.cpp:
        (WebCore::workerContextDidReceiveBinaryData):
        (WebCore::WorkerThreadableWebSocketChannel::Peer::didReceiveBinaryData):
        Pass binaryData as PassOwnPtr<Vector<char> > to deliver the value efficiently (without
        copying the content) across threads.
        * websockets/WorkerThreadableWebSocketChannel.h:

2011-08-29  Ryosuke Niwa  <rniwa@webkit.org>

        Add a test for lastChangeWasUserEdit in HTMLInputElement and HTMLTextAreaElement
        https://bugs.webkit.org/show_bug.cgi?id=67173

        Reviewed by Darin Adler.

        Exposed HTMLInputElement::lastChangeWasUserEdit and HTMLTextAreaElement::lastChangeWasUserEdit
        via internals.wasLastChangeUserEdit(Element*, ExceptionCode&). The first argument must be
        an input element or a textarea element lastChangeWasUserEdit is called upon.

        Test: fast/forms/textfield-lastchange-was-useredit.html

        * testing/Internals.cpp:
        (WebCore::Internals::wasLastChangeUserEdit):
        * testing/Internals.h:
        * testing/Internals.idl:

2011-08-29  Luke Macpherson   <macpherson@chromium.org>

        Implement CSSPropertyWebkitColumns in CSSStyleApplyProperty.
        https://bugs.webkit.org/show_bug.cgi?id=67106

        Reviewed by Darin Adler.

        Tests:
        LayoutTests/fast/multicol/inherit-column-values.html
        LayoutTests/fast/multicol/initial-column-values.html

        * css/CSSStyleApplyProperty.cpp:
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        Initialize handler for CSSPropertyWebkitColumns.
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        Remove existing implementation for CSSPropertyWebkitColumns.

2011-08-29  Mark Hahnenberg  <mhahnenberg@apple.com>

        Unzip initialization lists and constructors in JSCell hierarchy (3/7)
        https://bugs.webkit.org/show_bug.cgi?id=67064

        Reviewed by Darin Adler.

        No new tests.

        Completed the third level of the refactoring to add finishCreation() 
        methods to all classes within the JSCell hierarchy with non-trivial 
        constructor bodies.

        This primarily consists of pushing the calls to finishCreation() down 
        into the constructors of the subclasses of the second level of the hierarchy 
        as well as pulling the finishCreation() calls out into the class's corresponding
        create() method if it has one.  Doing both simultaneously allows us to 
        maintain the invariant that the finishCreation() method chain is called exactly 
        once during the creation of an object, since calling it any other number of 
        times (0, 2, or more) will cause an assertion failure.

        * bindings/js/JSDOMWindowShell.cpp:
        (WebCore::JSDOMWindowShell::JSDOMWindowShell):
        (WebCore::JSDOMWindowShell::finishCreation):
        * bindings/js/JSDOMWindowShell.h:

2011-08-29  John Bauman  <jbauman@chromium.org>

        Speed up texImage from BGRA
        https://bugs.webkit.org/show_bug.cgi?id=66884

        Reviewed by Kenneth Russell.

        BGRA input is common coming from skia, so optimize BGRA->RGBA
        conversion and also avoid the pointless RGBA to RGBA conversion.

        * platform/graphics/GraphicsContext3D.cpp:
        (WebCore::doUnpackingAndPacking):

2011-08-29  Matthew Delaney  <mdelaney@apple.com>

        [CG] ImageBufferCG should handle IOSurface allocation failure gracefully
        https://bugs.webkit.org/show_bug.cgi?id=67099

        Reviewed by Simon Fraser.

        No new tests. Testing the "fallback to old path" behavior is not easily testable.

        * platform/graphics/cg/ImageBufferCG.cpp: Rearranged backing store creation to fall back to
          old path if IOSurface creation path fails.
        (WebCore::ImageBuffer::ImageBuffer):

2011-08-29  Cary Clark  <caryclark@google.com>

        Only enable font smoothing as requested (Skia on Mac)
        https://bugs.webkit.org/show_bug.cgi?id=67143

        This adjusts LayoutTest pixel output to more closely
        match other platforms.

        Reviewed by Kenneth Russell.

        No new tests. This platform is not yet enabled.

        * platform/graphics/skia/FontSkia.cpp:
        (WebCore::setupPaint):
        LCD text was always enabled to test the code path. With this change,
        it is only enabled when instructed by the font state.

2011-08-29  Julien Chaffraix  <jchaffraix@webkit.org>

        Assertion failure in RenderLayer::computeRepaintRects when scrolling
        https://bugs.webkit.org/show_bug.cgi?id=67140

        Reviewed by David Hyatt.

        Test: fast/repaint/scroll-fixed-layer-with-no-visible-content.html

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::computeRepaintRects): Fixed style after r93837.

        (WebCore::RenderLayer::updateLayerPositionsAfterScroll): Tweaked the code
        to bail early if our layer has no visible content. This avoids the ASSERT
        and also makes sense as we shouldn't repaint / update empty layers.

2011-08-29  Anna Cavender  <annacc@chromium.org>

        Implement WebVTT Cue Text Parsing rules and DOM construction
        https://bugs.webkit.org/show_bug.cgi?id=64132

        Reviewed by Adam Barth.

        Tests in media/track, particularly track-webvtt-tc[022 - 028]*.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.xcodeproj/project.pbxproj:
        * html/TextTrackCue.cpp:
        * html/TextTrackCue.h:
        * platform/track/CueParser.cpp:
        * platform/track/CueParser.h:
        * platform/track/WebVTTParser.cpp:
        * platform/track/WebVTTParser.h:
        * platform/track/WebVTTToken.h: Added.
        * platform/track/WebVTTTokenizer.cpp: Added.
        * platform/track/WebVTTTokenizer.h: Added.

2011-08-29  Patrick Gansterer  <paroga@webkit.org>

        Add parsing support for extended attributes on IDL constants
        https://bugs.webkit.org/show_bug.cgi?id=65046

        Reviewed by Brent Fulgham.

        With support for extended attributes on constants we can
        replace some preprocessor lines from the IDL files with
        the corresponding [Conditional=XXX] later.
        Using the preprocessor causes much pain on native windows.

        CodeGenerator support will be added in separate patches.

        * bindings/scripts/IDLParser.pm:
        * bindings/scripts/IDLStructure.pm:

2011-08-29  Ryosuke Niwa  <rniwa@webkit.org>

        Cleanup: notifyFormStateChanged, formControlValueMatchesRenderer, and setFormControlValueMatchesRenderer
        https://bugs.webkit.org/show_bug.cgi?id=67141

        Reviewed by Eric Seidel.

        No new tests since this is a refactoring.

        * dom/Element.h: Removed formControlValueMatchesRenderer and setFormControlValueMatchesRenderer.
        * html/HTMLInputElement.cpp: Removed notifyFormStateChanged.
        * html/HTMLInputElement.h:
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::updateValue): Calls notifyFormStateChanged; modifies m_wasModifiedByUser.
        (WebCore::HTMLTextAreaElement::setValueCommon): Calls notifyFormStateChanged; also renamed value to newValue
        to avoid the conflict with value().
        * html/HTMLTextAreaElement.h: Made m_wasModifiedByUser mutable.
        * html/HTMLTextFormControlElement.cpp:
        (WebCore::HTMLTextFormControlElement::notifyFormStateChanged): Extracted from notifyFormStateChanged in
        HTMLInputElement.cpp and HTMLTextAreaElement.cpp.
        * html/HTMLTextFormControlElement.h:
        * rendering/RenderTextControl.cpp:
        (WebCore::RenderTextControl::setInnerTextValue): Calls setFormControlValueMatchesRenderer.

2011-08-29  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r93987, r93992, r93995, r93998, and
        r93999.
        http://trac.webkit.org/changeset/93987
        http://trac.webkit.org/changeset/93992
        http://trac.webkit.org/changeset/93995
        http://trac.webkit.org/changeset/93998
        http://trac.webkit.org/changeset/93999
        https://bugs.webkit.org/show_bug.cgi?id=67147

        Many failing tests (Requested by ap on #webkit).

        * WebCore.exp.in:
        * platform/mac/CookieJar.mm:
        (WebCore::cookies):
        (WebCore::cookieRequestHeaderFieldValue):
        (WebCore::setCookies):
        (WebCore::cookiesEnabled):
        (WebCore::getRawCookies):
        (WebCore::deleteCookie):
        * platform/network/CookieStorage.h:
        * platform/network/ResourceHandle.cpp:
        (WebCore::privateStorageSession):
        (WebCore::privateBrowsingStorageSessionIdentifierBase):
        (WebCore::ResourceHandle::setPrivateBrowsingEnabled):
        (WebCore::ResourceHandle::privateBrowsingStorageSession):
        (WebCore::ResourceHandle::setPrivateBrowsingStorageSessionIdentifierBase):
        * platform/network/ResourceHandle.h:
        * platform/network/cf/CookieJarCFNet.cpp:
        (WebCore::setCookies):
        (WebCore::cookies):
        (WebCore::cookieRequestHeaderFieldValue):
        (WebCore::cookiesEnabled):
        (WebCore::getRawCookies):
        (WebCore::deleteCookie):
        (WebCore::getHostnamesWithCookies):
        (WebCore::deleteCookiesForHostname):
        (WebCore::deleteAllCookies):
        * platform/network/cf/CookieStorageCFNet.cpp:
        (WebCore::privateBrowsingCookieStorage):
        (WebCore::defaultSessionCookieStorage):
        (WebCore::defaultCookieStorage):
        (WebCore::currentCookieStorage):
        (WebCore::setCurrentCookieStorage):
        (WebCore::setCookieStoragePrivateBrowsingEnabled):
        (WebCore::startObservingCookieChanges):
        (WebCore::stopObservingCookieChanges):
        * platform/network/cf/CookieStorageCFNet.h:
        * platform/network/cf/ResourceHandleCFNet.cpp:
        (WebCore::makeFinalRequest):
        (WebCore::ResourceHandle::createPrivateBrowsingStorageSession):
        (WebCore::ResourceHandle::privateBrowsingStorageSessionIdentifierDefaultBase):
        (WebCore::ResourceHandle::currentStorageSession):
        (WebCore::defaultCFURLStorageSession):
        (WebCore::ResourceHandle::setDefaultStorageSession):
        (WebCore::ResourceHandle::defaultStorageSession):
        * platform/network/mac/CookieStorageMac.mm:
        (WebCore::setCookieStoragePrivateBrowsingEnabled):
        * platform/network/mac/ResourceHandleMac.mm:
        (WebCore::shouldRelaxThirdPartyCookiePolicy):
        (WebCore::ResourceHandle::createPrivateBrowsingStorageSession):

2011-08-29  Nayan Kumar K  <nayankk@motorola.com>

        As per HTML specification, default font style of dfn tag should be italic.
        https://bugs.webkit.org/show_bug.cgi?id=56670

        Reviewed by Adam Barth.

        Test: fast/css/dfn-default-font-style.html

        * css/html.css:
        (i, cite, em, var, address, dfn):

2011-08-29  Patrick Gansterer  <paroga@webkit.org>

        Consider Conditional attribute in CodeGeneratorJS' JSValueToNative and NativeToJSValue function
        https://bugs.webkit.org/show_bug.cgi?id=65040

        Reviewed by Brent Fulgham.

        JSValueToNative and NativeToJSValue add additional include statements
        to the implementation and need to handle the Conditional attribute from
        the IDL file. The Conditional attribute adds appropriate #if ENABLE()
        lines for the preprocessor around the include statements to remove
        some unneeded build dependencies.

        * bindings/scripts/CodeGeneratorJS.pm:

2011-08-29  Nate Chapin  <japhet@chromium.org>

        Plumb ResourceLoaderOptions out to CachedResourceLoader::requestResource().
        This will be needed in order for DocumentThreadableLoader to become a CachedResourceClient.
        https://bugs.webkit.org/show_bug.cgi?id=66018

        Reviewed by Antti Koivisto.

        No new tests, refactor only.

        * loader/cache/CachedImage.cpp:
        (WebCore::CachedImage::load):
        * loader/cache/CachedResource.cpp:
        (WebCore::CachedResource::CachedResource):
        (WebCore::CachedResource::load):
        * loader/cache/CachedResource.h:
       (WebCore::CachedResource::load):
        (WebCore::CachedResource::setResourceLoaderOptions):
        (WebCore::CachedResource::sendResourceLoadCallbacks):
        * loader/cache/CachedResourceLoader.cpp:
        (WebCore::CachedResourceLoader::requestUserCSSStyleSheet):
        (WebCore::CachedResourceLoader::requestResource):
        (WebCore::CachedResourceLoader::loadResource):
        * loader/cache/CachedResourceLoader.h:
        * loader/cache/CachedResourceRequest.cpp:
        (WebCore::CachedResourceRequest::load):
        * loader/cache/CachedResourceRequest.h:

2011-08-29  Chris Palmer  <palmer@google.com>

        Fix failures when FFT size is changed.
        https://bugs.webkit.org/show_bug.cgi?id=66916

        Reviewed by Kenneth Russell.

        Test: webaudio/fft-sizing.html

        * webaudio/RealtimeAnalyser.cpp:
        (WebCore::RealtimeAnalyser::setFftSize): Assert size sanity.
        (WebCore::RealtimeAnalyser::doFFTAnalysis): Iterate the correct number of times over magnitudeBuffer.
        * webaudio/RealtimeAnalyser.h: Put member fields in the correct order (Min before Max).

2011-08-29  Abhishek Arya  <inferno@chromium.org>

        Crash in InlineBox::deleteLine due to accessing removed
        renderer.
        https://bugs.webkit.org/show_bug.cgi?id=66015

        Reviewed by Simon Fraser.

        Test: fast/block/line-layout/inline-box-wrapper-crash.html

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::positionLineBox): Make sure that the
        previous inline box wrapper is destroyed properly, before
        setting a new one.

2011-08-29  Alexey Proskuryakov  <ap@apple.com>

        Lion build fix.

        * WebCore.exp.in: We have different definitions of CFURLStorageSessionRef on different versions
        of Mac OS X, and need separate exports.

2011-08-29  Tony Chang  <tony@chromium.org>

        Implement -webkit-flex-pack for horizontal flexboxen
        https://bugs.webkit.org/show_bug.cgi?id=66898

        Reviewed by Ojan Vafai.

        Test: css3/flexbox/004.html

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutHorizontalBlock):
        (WebCore::hasPackingSpace):
        (WebCore::RenderFlexibleBox::runFreeSpaceAllocationAlgorithmHorizontal):

2011-08-29  Alexey Proskuryakov  <ap@apple.com>

        Windows build fix.

        * platform/network/cf/CookieJarCFNet.cpp:
        (WebCore::setCookies):
        (WebCore::cookies):
        (WebCore::cookieRequestHeaderFieldValue):
        (WebCore::cookiesEnabled):
        (WebCore::getRawCookies):
        (WebCore::deleteCookie):
        (WebCore::getHostnamesWithCookies):
        (WebCore::deleteCookiesForHostname):
        (WebCore::deleteAllCookies):
        Updated for new function name and signature: currentCFHTTPCookieStorage().

2011-08-29  Alexey Proskuryakov  <ap@apple.com>

        Mac build fix.

        * platform/network/cf/CookieStorageCFNet.cpp: Move Windows specific includes into PLATFORM(WIN).

2011-08-29  Andreas Kling  <kling@webkit.org>

        Viewing a post on reddit.com wastes a lot of memory on event listeners.
        https://bugs.webkit.org/show_bug.cgi?id=67133

        Reviewed by Darin Adler.

        Specialize the HashMap used to store registered listeners on an EventTarget
        to have a minimum size of 32 (rather than the default 64.)
        It's very rare for pages to register listeners for so many different events
        and this cuts memory consumption in half for the common case.

        As an example, for a typical post on the reddit.com front page,
        this reduces memory used by ~700kB on 64-bit.

        * dom/EventTarget.h:

2011-08-29  Stephen White  <senorblanco@chromium.org>

        Skia's accelerated canvas 2D implementation should use GrTexture, not DrawingBuffer
        https://bugs.webkit.org/show_bug.cgi?id=67050

        Reviewed by Kenneth Russell.

        Covered by existing tests.

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::create):
        (WebCore::Canvas2DLayerChromium::Canvas2DLayerChromium):
        (WebCore::Canvas2DLayerChromium::drawsContent):
        Construct Canvas2DLayerChromium with a GraphicsContext3D, not a
        DrawingBuffer.
        (WebCore::Canvas2DLayerChromium::updateCompositorResources):
        Flush the GrContext and GraphicsContext3D on compositor update.
        * platform/graphics/chromium/Canvas2DLayerChromium.h:
        * platform/graphics/chromium/CanvasLayerChromium.cpp:
        (WebCore::CanvasLayerChromium::CanvasLayerChromium):
        * platform/graphics/chromium/CanvasLayerChromium.h:
        Put textureId() back on the base class (CanvasLayerChromium) and
        de-virtualize it.
        (WebCore::CanvasLayerChromium::textureId):
        (WebCore::CanvasLayerChromium::setTextureId):
        Move m_textureId from WebGLLayerChromium, since canvas2D now uses
        it too.  Provide getters and setters.
        * platform/graphics/chromium/DrawingBufferChromium.cpp:
        (WebCore::DrawingBuffer::DrawingBuffer):
        (WebCore::DrawingBuffer::~DrawingBuffer):
        Remove all Canvas2D-related calls from DrawingBuffer.
        (WebCore::DrawingBuffer::publishToPlatformLayer):
        Remove GrContext::flush call, since it's now handled by the platform layer.
        (WebCore::DrawingBuffer::platformLayer):
        Return NULL for now (WebGL may rescussitate this later).
        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
        Remove a useless #include.
        * platform/graphics/chromium/ImageBufferDataSkia.h:
        Add ownership of the Canvas2DLayerChromium.
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::WebGLLayerChromium):
        * platform/graphics/chromium/WebGLLayerChromium.h:
        Remove all texture ID stuff (now on base class).
        * platform/graphics/gpu/DrawingBuffer.h:
        Remove Canvas2DLayerChromium and all Ganesh datatypes from
        DrawingBuffer, since it's no longer used by canvas2D.
        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::ImageBuffer::ImageBuffer):
        On accelerated ImageBuffer creation, create a GrTexture instead of a
        DrawingBuffer.  If all is cool, create and set the SkGpuDevice here,
        and create a Canvas2DLayerChromium platform layer.
        (WebCore::ImageBuffer::platformLayer):
        * platform/graphics/skia/PlatformContextSkia.cpp:
        (WebCore::PlatformContextSkia::setGraphicsContext3D):
        * platform/graphics/skia/PlatformContextSkia.h:
        Remove all GrContext creation and DrawingBuffer "scraping" from 
        PlatformContextSkia::setGraphicsContext3D().  This is handled in
        the ImageBuffer constructor instead.

2011-08-26  Alexey Proskuryakov  <ap@apple.com>

        DumpRenderTree should begin each test with an empty cookie store
        https://bugs.webkit.org/show_bug.cgi?id=63545
        <rdar://problem/5666907>

        Reviewed by Darin Adler.

        Use a clean CFURLStorageSession when this functionality is available.

        * WebCore.exp.in: Added exports

        * platform/mac/CookieJar.mm:
        (WebCore::cookies):
        (WebCore::cookieRequestHeaderFieldValue):
        (WebCore::setCookies):
        (WebCore::cookiesEnabled):
        (WebCore::getRawCookies):
        (WebCore::deleteCookie):
        Updated for privateBrowsingCookieStorage->currentCFHTTPCookieStorage change.

        * platform/network/CookieStorage.h: Moved CFNetwork specific declarations to CookieStorageCFNet.h.

        * platform/network/ResourceHandle.cpp: Moved CFNetwork specific code to ResourceHandleCFNet.cpp.
        This file contains cross platform functionality, and we no longer need to put code in it to
        share it between Mac and Windows.

        * platform/network/ResourceHandle.h: Expose methods to manipulate default session on Mac, too.

        * platform/network/cf/CookieStorageCFNet.cpp:
        (WebCore::cookieStorageOverride): Make it clear that this override is only for a Windows API.
        (WebCore::overrideCookieStorage): Ditto.
        (WebCore::currentCFHTTPCookieStorage): We no longer store a cookie storage in a static variable,
        unless it has been overridden on Windows. We can always get it from a session.
        (WebCore::setCookieStoragePrivateBrowsingEnabled): There is nothing to do here - we'll just
        use private session's storage. Note that Mac has a separate code path for OS versions that
        don't support sessions.

        * platform/network/cf/CookieStorageCFNet.h: Changed exposed methods for more clarity.

        * platform/network/cf/ResourceHandleCFNet.cpp:
        (WebCore::makeFinalRequest): Updated for currentCookieStorage->currentCFHTTPCookieStorage change.
        (WebCore::ResourceHandle::createPrivateBrowsingStorageSession): Moved out of USE(CFNETWORK),
        as this function is also used with NSURLConnection when sessions are enabled.
        (WebCore::ResourceHandle::currentStorageSession): Ditto. Removed an #if since default session
        is now supported on Mac, too.
        (WebCore::defaultCFURLStorageSession): Moved out of USE(CFNETWORK).
        (WebCore::ResourceHandle::setDefaultStorageSession): Moved out of USE(CFNETWORK). No longer
        adopt the session, because nothing in method name says that it will steal a reference from
        the caller.
        (WebCore::ResourceHandle::defaultStorageSession): Moved out of USE(CFNETWORK).
        (WebCore::privateStorageSession): Moved from ResourceHandle.cpp.
        (WebCore::privateBrowsingStorageSessionIdentifierBase): Moved from ResourceHandle.cpp.
        (WebCore::ResourceHandle::setPrivateBrowsingEnabled): Moved from ResourceHandle.cpp.
        (WebCore::ResourceHandle::privateBrowsingStorageSession): Moved from ResourceHandle.cpp.
        (WebCore::ResourceHandle::setPrivateBrowsingStorageSessionIdentifierBase): Moved from ResourceHandle.cpp.
        (WebCore::ResourceHandle::privateBrowsingStorageSessionIdentifierDefaultBase): Moved from ResourceHandle.cpp.

        * platform/network/mac/CookieStorageMac.mm: (WebCore::setCookieStoragePrivateBrowsingEnabled):
        We no longer store a reference to cookie storage in a static variable, so nothing to do here.
        On older OS versiosn, we still need to enable legacy private browsing mode.

        * platform/network/mac/ResourceHandleMac.mm: (WebCore::shouldRelaxThirdPartyCookiePolicy):
        Updated to use the new currentCFHTTPCookieStorage function.

2011-08-22  David Levin  <levin@chromium.org>

        postMessage raises INVALID_STATE_ERR instead of DATA_CLONE_ERR in many cases.
        https://bugs.webkit.org/show_bug.cgi?id=66713

        Reviewed by Dmitry Titov.

        See http://www.whatwg.org/specs/web-apps/current-work/multipage/comms.html#posting-messages for postMessage

        * bindings/js/JSMessagePortCustom.cpp:
        (WebCore::fillMessagePortArray):
        * bindings/v8/custom/V8MessagePortCustom.cpp:
        (WebCore::getMessagePortArray):
        * dom/MessagePort.cpp:
        (WebCore::MessagePort::postMessage):
        (WebCore::MessagePort::disentanglePorts):

2011-08-29  Tom Zakrajsek  <tomz@codeaurora.org>

        canvas arc() missing line to start of arc if swing is zero
        https://bugs.webkit.org/show_bug.cgi?id=55696

        Reviewed by Andreas Kling.

        Test: fast/canvas/canvas-arc-zero-lineto.html

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::arc):

2011-08-23  Chris Marrin  <cmarrin@apple.com>

        [mac] requestAnimationFrame support for mac port
        https://bugs.webkit.org/show_bug.cgi?id=59146

        Reviewed by Simon Fraser.

        Enable REQUEST_ANIMATION_FRAME logic and add ScriptedAnimationController
        to build. Added JavaScript support for Mac, too.

        * CodeGenerators.pri:
        * Configurations/FeatureDefines.xcconfig:
        * DerivedSources.make:
        * WebCore.exp.in:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/js/JSRequestAnimationFrameCallbackCustom.cpp: Added.
        (WebCore::JSRequestAnimationFrameCallback::handleEvent):
        * bindings/scripts/CodeGeneratorJS.pm:
        (AddIncludesForType):
        * dom/RequestAnimationFrameCallback.idl:

2011-08-29  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: <button hidden>..</button> has a different computed "display" value than "none"
        https://bugs.webkit.org/show_bug.cgi?id=67124

        Attribute styles have a higher priority than user agent styles and thus should be rendered above them.

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/StylesSidebarPane.js:
        (WebInspector.StylesSidebarPane.prototype._rebuildStyleRules):
        (WebInspector.StylesSidebarPane.prototype._rebuildStyleRules.get continue):

2011-08-25  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: rename sourceFile to (raw|ui)SourceCode in DebuggerPresentationModel.
        https://bugs.webkit.org/show_bug.cgi?id=66769

        Reviewed by Pavel Feldman.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype.uiSourceCode):
        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation.didCreateSourceMapping):
        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation):
        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation.didCreateSourceMapping):
        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation.updateAnchor.didGetLocation):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation.updateAnchor):
        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
        (WebInspector.DebuggerPresentationModel.prototype._addScript.didCreateSourceMapping):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype._uiSourceCodeReplaced):
        (WebInspector.DebuggerPresentationModel.prototype.canEditScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource.didEditScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype._updateBreakpointsAfterLiveEdit):
        (WebInspector.DebuggerPresentationModel.prototype.setFormatSourceFiles):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage.didGetUILocation):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage):
        (WebInspector.DebuggerPresentationModel.prototype._consoleCleared):
        (WebInspector.DebuggerPresentationModel.prototype.continueToLine):
        (WebInspector.DebuggerPresentationModel.prototype.breakpointsForSourceFileId):
        (WebInspector.DebuggerPresentationModel.prototype.setBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.setBreakpointEnabled):
        (WebInspector.DebuggerPresentationModel.prototype.updateBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.removeBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.findBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointRemoved):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerPaused):
        (WebInspector.DebuggerPresentationModel.prototype._rawSourceCodeForScript):
        (WebInspector.DebuggerPresentationModel.prototype._scriptForRawSourceCode):
        (WebInspector.DebuggerPresentationModel.prototype._createRawSourceCodeId):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerReset):
        (WebInspector.PresentationBreakpoint):
        (WebInspector.PresenationCallFrame.prototype.sourceLine.didGetUILocation):
        (WebInspector.PresenationCallFrame.prototype.sourceLine):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype.canSetContent):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype.setContent):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype._setContentWithInitialContent):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype.canShowAnchorLocation):
        (WebInspector.ScriptsPanel.prototype._createSourceFrame):
        (WebInspector.ScriptsPanel.prototype._sourceFrameLoaded):
        (WebInspector.ScriptsPanel.prototype._callFrameSelected.didGetSourceLocation):
        (WebInspector.ScriptsPanel.prototype._callFrameSelected):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.requestContent):
        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.suggestedFileName):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode.prototype.rawLocationToUILocation):
        (WebInspector.UILocation):

2011-08-29  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: cached permanent redirects don't show redirect code and text in Network panel.
        https://bugs.webkit.org/show_bug.cgi?id=67126

        Reviewed by Yury Semikhatsky.

        * inspector/InspectorResourceAgent.cpp:
        (WebCore::buildObjectForResourceResponse):
        * inspector/front-end/NetworkPanel.js:
        (WebInspector.NetworkDataGridNode.prototype._refreshStatusCell):

2011-08-25  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: extract FormattedContentProvider from RawSourceCode.
        https://bugs.webkit.org/show_bug.cgi?id=66938

        Reviewed by Pavel Feldman.

        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode.prototype._setContentProvider):
        (WebInspector.RawSourceCode.prototype._loadResourceContent):
        (WebInspector.RawSourceCode.prototype._loadScriptContent):
        (WebInspector.RawSourceCode.prototype._loadAndConcatenateScriptsContent):
        (WebInspector.RawSourceCode.prototype._didRequestContent):
        (WebInspector.FormattedContentProvider):
        (WebInspector.FormattedContentProvider.prototype.requestContent.didRequestContent.didFormatContent):
        (WebInspector.FormattedContentProvider.prototype.requestContent):

2011-08-25  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: link UISourceCode to RawSourceCode.
        https://bugs.webkit.org/show_bug.cgi?id=66944

        Reviewed by Pavel Feldman.

        * inspector/front-end/UISourceCode.js:
        (WebInspector.UISourceCode):
        (WebInspector.UISourceCode.prototype.get rawSourceCode):

2011-08-25  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: remove RawSourceCode.setFormatted.
        https://bugs.webkit.org/show_bug.cgi?id=66947

        Reviewed by Pavel Feldman.

        * inspector/front-end/DebuggerPresentationModel.js:
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):

2011-08-26  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: Debugger.setBreakpointByUrl should return error when setting breakpoint on the same location twice.
        https://bugs.webkit.org/show_bug.cgi?id=67030

        Reviewed by Pavel Feldman.

        Test: inspector/debugger/set-breakpoint.html

        * inspector/InspectorDebuggerAgent.cpp:
        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):

2011-08-29  Matthew Delaney  <mdelaney@apple.com>

        fast/canvas/shadow-offset-*.html fail on Leopard/Snow Leopard when removing the work around for <rdar://problem/5539388>.
        https://bugs.webkit.org/show_bug.cgi?id=67107

        Reviewed by David Levin.

        No new tests. Effectively reverting the change from https://bugs.webkit.org/show_bug.cgi?id=67052 for Leopard and SL
        because it caused test regressions on Leopard and SL, but not Lion.

        * platform/graphics/cg/GraphicsContextCG.cpp:
        (WebCore::GraphicsContext::setPlatformShadow):

2011-08-29  Zoltan Herczeg  <zherczeg@webkit.org>

        [Qt] Unreviewed minimal-build buildfix after r93937.

        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::paintInnerSpinButton):
        * platform/qt/RenderThemeQt.h:

2011-08-28  Keishi Hattori  <keishi@webkit.org>

        Chromium Win: Setting square-button appearance reaches NOTREACHED
        https://bugs.webkit.org/show_bug.cgi?id=66918

        Reviewed by Kent Tamura.

        Test: fast/css/square-button-appearance.html

        * rendering/RenderThemeChromiumWin.cpp:
        (WebCore::supportsFocus): Add case for SquareButtonPart.
        (WebCore::RenderThemeChromiumWin::supportsFocusRing): Add case for SquareButtonPart.
        (WebCore::RenderThemeChromiumWin::getThemeData): Add case for SquareButtonPart.

2011-08-28  Luke Macpherson   <macpherson@chromium.org>

        Fix reference counting of values in CSSSelector.
        https://bugs.webkit.org/show_bug.cgi?id=66452

        Reviewed by Darin Adler.

        No new tests / no functionality changed.

        Call deref when reassigning the value.

        * css/CSSSelector.h:
        (WebCore::CSSSelector::setValue):

2011-08-28  Sam Weinig  <sam@webkit.org>

        Add support for constructor syntax for Events
        https://bugs.webkit.org/show_bug.cgi?id=63878

        Reviewed by Oliver Hunt.

        Add basic support for Event constructors, starting with just supporting
        the constructor for the base Event class and just JSC support.  This lays
        the infrastructure for the other events as well.

        Test: fast/events/event-constructors.html

        * GNUmakefile.list.am:
        * UseJSC.cmake:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/js/JSBindingsAllInOne.cpp:
        Add files.

        * bindings/generic/EventConstructors.h: Added.
        Add binding agnostic header that defines the Event initializers
        using a macro based DSL.

        * bindings/js/JSEventConstructors.cpp: Added.
        (WebCore::convertValue):
        (WebCore::tryGetProperty):
        (WebCore::constructJSEventWithInitializer):
        Add JSC implementation of Event initializer DSL.

        * dom/Event.cpp:
        (WebCore::EventInit::EventInit):
        (WebCore::Event::Event):
        * dom/Event.h:
        (WebCore::Event::create):
        Add Event initializer interface for base Event.

        * dom/Event.idl:
        Mark Event as having a custom constructor function.

2011-08-27  Andreas Kling  <kling@webkit.org>

        SQLiteStatement::getColumnText() could construct WTF::String result more efficiently.
        https://bugs.webkit.org/show_bug.cgi?id=67090

        Reviewed by Darin Adler.

        * platform/sql/SQLiteStatement.cpp:
        (WebCore::SQLiteStatement::getColumnText): Use sqlite3_column_bytes16()
        to get the length of the column text without looking for the null terminator.

2011-08-07  Robert Hogan  <robert@webkit.org>

        The child div element with position:absolute will overlap with its parent div when a 'break' element is present in between
        https://bugs.webkit.org/show_bug.cgi?id=21934

        Reviewed by David Hyatt.

        Test: fast/block/positioning/absolute-appended-to-inline.html

        Appending a positioned child node to an inline flow should dirty the lines in the flow, just as
        inserting a positioned child node does. Treating an appended and inserted node differently meant that updating the display type
        from 'none' to 'block' for the following markup would result in the div getting positioned correctly under
        the line block:

            <div><a onMouseOver="mopen()">Hover</a><div style="display:none; position:absolute; background:#4682b4; height:10px; width:20px"><br></div></div>

        but this would not happen with the following markup (the <br> is before the child div rather than after it):

            <div><a onMouseOver="mopen()">Hover</a><br><div style="display:none; position:absolute; background:#4682b4; height:10px; width:20px"></div></div>

        This problem is specific to cases where an object is appended to a line block whose last child is a <br>. When the line is relaid out after appending
        the positioned object the last line in the line block is always considered dirty unless it broke cleanly (ie. with a <br>, see RenderBlock::determineStartPosition),
        So in the second case above, the clean break and failing to dirty any lines in the block when appending the object means that the line block doesn't get relaid out
        to position the new positioned object relative to its containing line block.

        So the change could special-case appending a node when the previous sibling isBR(), but it seems just as well to behave the same way as insertChildNode().

        * rendering/RenderObjectChildList.cpp:
        (WebCore::RenderObjectChildList::appendChildNode):
            Call dirtyLinesFromChangedChild() if the child is positioned, just like insertChildNode().

2011-08-27  Anders Carlsson  <andersca@apple.com>

        iChat: Receiving a message containing only a single-quote (') causes bubble to fail
        https://bugs.webkit.org/show_bug.cgi?id=67076
        <rdar://problem/10026089>

        Reviewed by Dan Bernstein.

        Test: fast/borders/border-fit-2.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::borderFitAdjust):
        Make sure that the resulting rect isn't smaller than the border + padding.

        (WebCore::RenderBlock::clearTruncation):
        Fix blatant coding style violations.

2011-08-27  Andreas Kling  <kling@webkit.org>

        Shrink RenderLayer.
        https://bugs.webkit.org/show_bug.cgi?id=67089

        Reviewed by Antonio Gomes.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::RenderLayer):
        * rendering/RenderLayer.h: Make m_inResizeMode a bitfield,
        shrinking RenderLayer by 8 bytes (on 64-bit.)

2011-08-27  Young Han Lee  <joybro@company100.net>

        Reviewed by Dirk Schulze.

        SVG animation fill="freeze" doesn't set baseVal to current animVal if animation stops before reaching the end
        https://bugs.webkit.org/show_bug.cgi?id=63553

        calculateAnimationPercentAndRepeat() is returning 1, which means 100%, whenever
        elapsed >= m_intervalEnd, but this is wrong because m_intervalEnd can be in the middle
        of the animation duration. (e.g. begin="0s" end="2s" dur="3s")

        This change makes the function return the animations's true progress instead of 100%
        when the animation ends.

        Test: svg/animations/animate-end-attribute.html

        * svg/animation/SVGSMILElement.cpp:
        (WebCore::SVGSMILElement::calculateAnimationPercentAndRepeat):

2011-08-27  Jarred Nicholls  <jarred@sencha.com>

        [Qt] Need spin-button implementation
        https://bugs.webkit.org/show_bug.cgi?id=65896

        Reviewed by Kenneth Rohde Christiansen.

        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::adjustInnerSpinButtonStyle):
        (WebCore::RenderThemeQt::paintInnerSpinButton):
        * platform/qt/RenderThemeQt.h:

2011-08-26  Xiaomei Ji  <xji@chromium.org>

        Regression(91788): Bad cast in WebCore::blockWithNextLineBox
        https://bugs.webkit.org/show_bug.cgi?id=66090

        Reviewed by Ryosuke Niwa.

        This is more like (but not exactly) a revert of r91788.
        It does not search for previous or next root inline box in different
        render object, which completely eliminates the cause of this issue.
        And it removes createPositionAvoidingIgnoredNode(), changed its caller
        to use createLegacyEditingPosition(). createPositionAvoidingIgnoredNode
        is not correct when node is a replaced element whose caretMaxOffset
        could be greater than 1.

        Tests: editing/selection/move-by-word-visually-crash-test-1.html
               editing/selection/move-by-word-visually-crash-test-2.html
               editing/selection/move-by-word-visually-crash-test-3.html
               editing/selection/move-by-word-visually-crash-test-4.html

        * editing/htmlediting.cpp:
        * editing/htmlediting.h:
        * editing/visible_units.cpp:
        (WebCore::previousWordBreakInBoxInsideBlockWithSameDirectionality):
        (WebCore::leftmostPositionInRTLBoxInLTRBlock):
        (WebCore::rightmostPositionInLTRBoxInRTLBlock):
        (WebCore::nextWordBreakInBoxInsideBlockWithDifferentDirectionality):
        (WebCore::appendPositionAtLogicalEndOfLine):
        (WebCore::leftInlineBox):
        (WebCore::rightInlineBox):

2011-08-26  James Robinson  <jamesr@chromium.org>

        [Chromium] Possible leak of LayerRendererChromium
        https://bugs.webkit.org/show_bug.cgi?id=66981

        Reviewed by Kenneth Russell.

        Fix a number of reference cycle leaks that prevent LayerRendererChromiums from being destroyed when a tab is
        closed.

        Not possible to write a layout test where an entire WebView goes away.

        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
        (WebCore::GraphicsLayerChromium::~GraphicsLayerChromium):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::clearRenderSurfacesOnCCLayerImplRecursive):
        (WebCore::LayerRendererChromium::clearRootCCLayerImpl):
        (WebCore::LayerRendererChromium::cleanupSharedObjects):
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::setRootLayer):

2011-08-26  Nate Chapin  <japhet@chromium.org>

        Move allowCredentials from ThreadableLoaderOptions down
        to ResourceLoaderOptions. This allows us to remove
        getShouldUseCredentialStorage() from SubresourceLoaderClient
        and check allowCredentials in ResourceLoader.
        https://bugs.webkit.org/show_bug.cgi?id=65330

        Reviewed by Alexey Proskuryakov.

        No new tests, refractor only.

        * loader/DocumentThreadableLoader.cpp:
        * loader/DocumentThreadableLoader.h:
        * loader/MainResourceLoader.cpp:
        * loader/NetscapePlugInStreamLoader.cpp:
        * loader/ResourceLoadScheduler.h:
        * loader/ResourceLoader.cpp:
        (WebCore::ResourceLoader::shouldUseCredentialStorage): Check
            m_options.allowCredentials instead of calling a client.
        * loader/ResourceLoaderOptions.h:
        * loader/SubresourceLoader.cpp:
        * loader/SubresourceLoader.h:
        * loader/SubresourceLoaderClient.h:
        * loader/ThreadableLoader.h:
        * loader/cache/CachedResourceRequest.cpp:

2011-08-26  Ojan Vafai  <ojan@chromium.org>

        change the default preferred width of the flex() function to 0px per the new spec
        https://bugs.webkit.org/show_bug.cgi?id=67067

        Reviewed by Tony Chang.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseFlex):

2011-08-26  Matthew Delaney  <mdelaney@apple.com>

        Remove offset hack from GraphicsContextCG setShadow code
        https://bugs.webkit.org/show_bug.cgi?id=67052

        Reviewed by Simon Fraser.

        No new tests - current tests cover it.

        * platform/graphics/cg/GraphicsContextCG.cpp:
        Removing the offset hack introduced in http://trac.webkit.org/changeset/28714
        for an issue with offsets in an old version of CoreGraphics that's long since been fixed.

2011-08-26  Alexey Proskuryakov  <ap@apple.com>

        Get rid of frame life support timer
        https://bugs.webkit.org/show_bug.cgi?id=66874

        Reviewed by Geoff Garen. V8 fixes courtesy of Dmitry Titov.

        Test: fast/frames/detached-frame-property.html

        * bindings/js/JSDOMWindowBase.cpp:
        * bindings/js/JSDOMWindowBase.h:
        * bindings/js/ScriptController.cpp: (WebCore::ScriptController::evaluateInWorld):
        * bindings/v8/ScriptController.cpp: (WebCore::ScriptController::evaluate):
        * bindings/v8/V8Proxy.cpp:
        (WebCore::V8Proxy::runScript):
        (WebCore::V8Proxy::callFunction):
        (WebCore::V8Proxy::newInstance):
        * page/Frame.cpp:
        (WebCore::Frame::Frame):
        (WebCore::Frame::~Frame):
        (WebCore::Frame::pageDestroyed):
        * page/Frame.h:
        * page/Page.cpp: (WebCore::Page::~Page):
        Removed all code that dealt with the life support timer. Protect Frame inside runScript()
        and callFunction() for v8 bindings.

        * bindings/js/JSEventListener.cpp: (WebCore::JSEventListener::handleEvent):
        Replaced ref/deref calls on self with a RefPtr.

2011-08-26  Ned Holbrook  <nholbrook@apple.com>

        RenderText::computePreferredLogicalWidths() should measure words with trailing spaces
        https://bugs.webkit.org/show_bug.cgi?id=66733

        Reviewed by Dan Bernstein.

        Test: fast/text/complex-preferred-logical-widths.html

        * rendering/RenderText.cpp:
        (WebCore::RenderText::computePreferredLogicalWidths): Apply logic from RenderBlock::LineBreaker::nextLineBreak().

2011-08-26  Tony Chang  <tony@chromium.org>

        Add CSS parsing for -webkit-flex-align
        https://bugs.webkit.org/show_bug.cgi?id=66726

        Reviewed by Ojan Vafai.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        (WebCore::CSSPrimitiveValue::operator EFlexAlign):
        * css/CSSPropertyNames.in:
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        * css/CSSValueKeywords.in:
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::flexAlign):
        (WebCore::InheritedFlags::setFlexAlign):
        (WebCore::InheritedFlags::initialFlexAlign):
        * rendering/style/RenderStyleConstants.h:
        * rendering/style/StyleFlexibleBoxData.cpp:
        (WebCore::StyleFlexibleBoxData::StyleFlexibleBoxData):
        (WebCore::StyleFlexibleBoxData::operator==):
        * rendering/style/StyleFlexibleBoxData.h:

2011-08-26  Nate Chapin  <japhet@chromium.org>

        Fix http/tests/misc/willCacheResponse-delegate-callback.html
        after r93886. We're implicitly converting an enum to a bool.

        Rubber-stamped by David Levin.

        * loader/mac/ResourceLoaderMac.mm:
        (WebCore::ResourceLoader::willCacheResponse):

2011-08-26  Chris Rogers  <crogers@google.com>

        Add MediaPlayer::audioSourceProvider() method for audio stream access by the Web Audio API.
        https://bugs.webkit.org/show_bug.cgi?id=66398

        Reviewed by Eric Carlson.

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::HTMLMediaElement):
        (WebCore::HTMLMediaElement::prepareForLoad):
        (WebCore::HTMLMediaElement::loadNextSourceChild):
        (WebCore::HTMLMediaElement::ensureMediaPlayer):
        (WebCore::HTMLMediaElement::createMediaPlayer):
            MediaPlayer creation has now been put into createMediaPlayer() instead of it being created
            separately in these various methods.  It has been made thread-safe for use with the Web Audio API
            in conjunction with an MediaElementAudioSourceNode.
        (WebCore::HTMLMediaElement::setAudioSourceNode):
        (WebCore::HTMLMediaElement::audioSourceProvider):
        * html/HTMLMediaElement.h:
        (WebCore::HTMLMediaElement::audioSourceNode):
            The HTMLMediaElement now keeps track of an optional MediaElementAudioSourceNode if
            the audio stream is being processed using the Web Audio API.
        
        * platform/graphics/MediaPlayer.cpp:
        (WebCore::MediaPlayer::audioSourceProvider):
        * platform/graphics/MediaPlayer.h:
        * platform/graphics/MediaPlayerPrivate.h:
        (WebCore::MediaPlayerPrivateInterface::audioSourceProvider):
            MediaPlayer now has an audioSourceProvider() method with a default "empty" implementation.
            audioSourceProvider() returns an AudioSourceProvider object which the Web Audio API's
            MediaElementAudioSourceNode uses (indirectly through an HTMLMediaElement method) to get the rendered audio stream.

        * webaudio/AudioContext.cpp:
        (WebCore::AudioContext::createMediaElementSource):
        * webaudio/AudioContext.h:
        * webaudio/AudioContext.idl:
            AudioContext::createMediaElementSource() is now more careful to check that an HTMLMediaElement
            doesn't already have a MediaElementAudioSourceNode attached to it.
            
        * webaudio/MediaElementAudioSourceNode.cpp:
        (WebCore::MediaElementAudioSourceNode::MediaElementAudioSourceNode):
        (WebCore::MediaElementAudioSourceNode::~MediaElementAudioSourceNode):
        (WebCore::MediaElementAudioSourceNode::process):
        (WebCore::MediaElementAudioSourceNode::lock):
        (WebCore::MediaElementAudioSourceNode::unlock):
        * webaudio/MediaElementAudioSourceNode.h:
            Implement thread-safe processing (replacing the old stub implementation).

2011-08-23  Stephen White  <senorblanco@chromium.org>

        Assertion fires if canvas is resized while save() active
        https://bugs.webkit.org/show_bug.cgi?id=66710

        Reviewed by Simon Fraser.

        Test: fast/canvas/resize-while-save-active.html

        * html/HTMLCanvasElement.cpp:
        (WebCore::HTMLCanvasElement::reset):
        Call CanvasRenderingContext2D::reset() before resizing the canvas,
        so that the GraphicsContext state stack can be unwound.
        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::unwindStateStack):
        (WebCore::CanvasRenderingContext2D::~CanvasRenderingContext2D):
        Refactor the state stack unwinding code from the destructor to 
        unwindStateStack() (new).
        (WebCore::CanvasRenderingContext2D::reset):
        Unwind the GraphicsContext state stack when the context is reset.
        * html/canvas/CanvasRenderingContext2D.h:

2011-08-26  Darin Adler  <darin@apple.com>

        [Mac] Use the progress cursor instead of the wristwatch for CSS "wait" cursor
        https://bugs.webkit.org/show_bug.cgi?id=67049

        Reviewed by Beth Dakin.

        * platform/mac/CursorMac.mm:
        (WebCore::Cursor::ensurePlatformCursor): Use BusyButClickable cursor for wait
        as well as for Progress.

2011-08-26  Nate Chapin  <japhet@chromium.org>

        Fix gtk build after r93886.

        * platform/track/CueParser.cpp:
        (WebCore::CueParser::load):

2011-08-26  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [EFL] Update searchableIndexIntroduction() to match GTK+'s.
        https://bugs.webkit.org/show_bug.cgi?id=66885

        Reviewed by Gustavo Noronha Silva.

        Using this new string allows us to share the test expectations with
        other ports, and thus makes
        fast/replaced/table-percent-height-text-controls.html pass.

        No new tests, as this is covered by an existing one.

        * platform/efl/LocalizedStringsEfl.cpp:
        (WebCore::searchableIndexIntroduction):

2011-08-26  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [EFL] Do not log an error if a fallback cursor cannot be found.
        https://bugs.webkit.org/show_bug.cgi?id=67037

        Reviewed by Gustavo Noronha Silva.

        Ecore_X does not necessarily have to be used (DumpRenderTree does not
        use it, for example), so showing an error message here is bogus.

        No new tests, as it just removes erroneous error messages from
        when running DRT with existing tests.

        * platform/efl/WidgetEfl.cpp:
        (WebCore::Widget::applyFallbackCursor):

2011-08-26  Nate Chapin  <japhet@chromium.org>

        Change a bunch of nondescript bools to
        descriptive enums in ResourceLoaderOptions and
        ThreadableLoaderOptions.
        https://bugs.webkit.org/show_bug.cgi?id=66984

        Reviewed by David Levin.

        No new tests, no functionality change intended.

        * WebCore.exp.in:
        * fileapi/FileReaderLoader.cpp:
        * html/MediaDocument.cpp:
        * html/PluginDocument.cpp:
        * loader/CrossOriginAccessControl.cpp:
        * loader/CrossOriginAccessControl.h:
        * loader/CrossOriginPreflightResultCache.cpp:
        * loader/CrossOriginPreflightResultCache.h:
        * loader/DocumentThreadableLoader.cpp:
        * loader/FrameLoader.h:
        * loader/ImageLoader.cpp:
        * loader/MainResourceLoader.cpp:
        * loader/NetscapePlugInStreamLoader.cpp:
        * loader/ResourceLoadScheduler.h:
        * loader/ResourceLoader.cpp:
        * loader/ResourceLoader.h:
        * loader/ResourceLoaderOptions.h:
        * loader/ThreadableLoader.h:
        * loader/cache/CachedResource.cpp:
        * loader/cache/CachedResourceRequest.cpp:
        * loader/cf/ResourceLoaderCFNet.cpp:
        * loader/mac/ResourceLoaderMac.mm:
        * page/EventSource.cpp:
        * platform/network/ResourceHandle.h:
        * workers/WorkerScriptLoader.cpp:
        * xml/XMLHttpRequest.cpp:

2011-08-26  Andreas Kling  <kling@webkit.org>

        HTMLMetaElement: Don't cache "http-equiv" and "content" attributes.
        https://bugs.webkit.org/show_bug.cgi?id=67040

        Reviewed by Darin Adler.

        * html/HTMLMetaElement.h: Remove m_equiv and m_content members,
        shrinking HTMLMetaElement by 16 bytes (on 64-bit.)
        * html/HTMLMetaElement.cpp:
        (WebCore::HTMLMetaElement::parseMappedAttribute):
        (WebCore::HTMLMetaElement::process): Implemented using fastGetAttribute().

2011-08-26  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: [REGRESSION] No way to expand hovered objects while debugging.
        https://bugs.webkit.org/show_bug.cgi?id=67039

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/Popover.js:
        (WebInspector.Popover):
        (WebInspector.Popover.prototype.show):
        (WebInspector.PopoverHelper.prototype._mouseDown):
        (WebInspector.PopoverHelper.prototype._hidePopover):
        (WebInspector.PopoverHelper.prototype._mouseHover):
        (WebInspector.PopoverHelper.prototype._killHidePopoverTimer):

2011-08-26  Pavel Podivilov  <podivilov@chromium.org>

        Unreviewed, rolling out r93870.
        http://trac.webkit.org/changeset/93870
        https://bugs.webkit.org/show_bug.cgi?id=65203

        Broke i18n chromium tests

        * platform/graphics/chromium/FontChromiumWin.cpp:
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::init):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::initializeForGDI):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::~TransparencyAwareFontPainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::~TransparencyAwareGlyphPainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::hdc):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::~TransparencyAwareUniscribePainter):
        (WebCore::drawGlyphsWin):
        (WebCore::Font::drawComplexText):
        * platform/graphics/chromium/UniscribeHelper.cpp:
        (WebCore::UniscribeHelper::draw):
        * platform/graphics/skia/PlatformContextSkia.cpp:
        (WebCore::PlatformContextSkia::isNativeFontRenderingAllowed):
        * platform/graphics/skia/PlatformContextSkia.h:
        * platform/graphics/skia/SkiaFontWin.cpp:
        (WebCore::windowsCanHandleDrawTextShadow):
        (WebCore::windowsCanHandleTextDrawing):
        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
        * platform/graphics/skia/SkiaFontWin.h:

2011-08-26  Alexei Svitkine  <asvitkine@chromium.org>

        Chromium Mac: Use a custom pattern image for rubber banding overhang area
        https://bugs.webkit.org/show_bug.cgi?id=66707

        Also roll Chromium revision to 98101, to include dependency: http://codereview.chromium.org/7714036/

        Reviewed by Dimitri Glazkov.

        No new tests since its just changing the Chromium-specific overhang pattern.

        * platform/chromium/ScrollbarThemeChromiumMac.mm:
        (WebCore::ScrollbarThemeChromiumMac::ScrollbarThemeChromiumMac):
        (WebCore::ScrollbarThemeChromiumMac::paintOverhangAreas):

2011-08-26  Eric Carlson  <eric.carlson@apple.com>

        <video> playlist can not advance when playing in background tab
        https://bugs.webkit.org/show_bug.cgi?id=66978

        Reviewed by Darin Adler.

        No new tests added because it isn't possible to simulate a background tab in DRT.

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::HTMLMediaElement): Set RequirePageConsentToLoadMedia restriction.
        (WebCore::HTMLMediaElement::loadInternal): Don't consider page->canStartMedia if it has ever
            allowed a file to load.
        * html/HTMLMediaElement.h:
        (WebCore::HTMLMediaElement::requirePageConsentToLoadMedia): New.
        (WebCore::HTMLMediaElement::removeBehaviorRestriction): New.

2011-08-26  Andreas Kling  <kling@webkit.org>

        [Qt] Path::boundingRect() is unnecessarily slow.
        https://bugs.webkit.org/show_bug.cgi?id=66854

        Reviewed by Benjamin Poulain.

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::stroke): Remove Qt-specific optimization
        since calling Path::boundingRect() will now do exactly the same thing.
        * platform/graphics/qt/PathQt.cpp:
        (WebCore::Path::boundingRect): Return QPainterPath::controlPointRect() since
        that is much faster than computing the (precise) QPainterPath::boundingRect()
        and Path::boundingRect() is not expected to be 100% precise anyway.

2011-08-26  Gavin Peters  <gavinp@chromium.org>

        add a state enumeration to track down cause of null CachedScript execution
        https://bugs.webkit.org/show_bug.cgi?id=66939

        Reviewed by Alexey Proskuryakov.

        Over in http://code.google.com/p/chromium/issues/detail?id=75604 I
        have a bug I cannot reproduce.  I added an earlier crash in
        https://bugs.webkit.org/show_bug.cgi?id=65563 , and we've since
        gotten many good stacks, all coming in through a failed request that
        eventually calls notifyFinished() on a ScriptElement with a NULL
        m_cachedScript.

        I'd like to know how this got NULL.  This enumeration should let
        me find that in stack dumps from reproductions.

        No new tests, as my goal here is to get telemetry on a bug that I cannot reproduce.

        * dom/ScriptElement.cpp:
        (WebCore::ScriptElement::ScriptElement):
        (WebCore::ScriptElement::requestScript):
        (WebCore::ScriptElement::stopLoadRequest):
        (WebCore::ScriptElement::notifyFinished):
        * dom/ScriptElement.h:

2011-08-26  Mike Reed  <reed@google.com>

        [skia] never draw with GDI, so that all text can be gpu-accelerated
        https://bugs.webkit.org/show_bug.cgi?id=65203

        Reviewed by Kenneth Russell.

        * platform/graphics/chromium/FontChromiumWin.cpp:
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
        (WebCore::drawGlyphsWin):
        (WebCore::Font::drawComplexText):
        * platform/graphics/chromium/UniscribeHelper.cpp:
        (WebCore::UniscribeHelper::draw):
        * platform/graphics/skia/PlatformContextSkia.cpp:
        * platform/graphics/skia/PlatformContextSkia.h:
        * platform/graphics/skia/SkiaFontWin.cpp:
        * platform/graphics/skia/SkiaFontWin.h:

2011-08-26  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: in some cases Popover code is failing to calculate popover box position.
        https://bugs.webkit.org/show_bug.cgi?id=67029

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/Popover.js:
        (WebInspector.Popover.prototype._positionElement):

2011-08-26  Nikolas Zimmermann  <nzimmermann@rim.com>

        [Qt] http/tests/misc/object-embedding-svg-delayed-size-negotiation-2.htm fails intermittently
        https://bugs.webkit.org/show_bug.cgi?id=65969

        Reviewed by Zoltan Herczeg.

        Fix intrinsic size negotiation flakiness, most visible on the Qt port.

        The http/tests/misc/object-embedding-svg-delayed-size-negotiation-2.htm testcase triggered
        an assertion on a Qt debug build indicating that the HashSet updateLayoutAndStyleIfNeededRecursive()
        operates on is mutated while its iterated, leading to an assertion/crash. Due the new forceLayoutParentViewIfNeeded()
        logic it's no longer safe to directly use the children() HashSet in that method - we have to make a copy first.

        The second part of the fix is to stop entering forceLayoutParentViewIfNeeded(), if the origin of that call
        is forceLayoutParentViewIfNeeded() itself. Set m_inLayoutParentView to true before calling FrameView::layout()
        on our parent frame view - this is only an optimization to avoid doing layout() twice.

        The third part of the fix is to call updateWidgetPositions() on the parent FrameView, _before_ calling layout()
        on the parent view itself, as the SVG document needs to report the correct intrinsic size (which can depend
        on the host object/embed/iframe) when we're running RenderReplaced::layout() on the host renderer.

        * page/FrameView.cpp:
        (WebCore::FrameView::FrameView):
        (WebCore::collectFrameViewChildren):
        (WebCore::FrameView::forceLayoutParentViewIfNeeded):
        (WebCore::FrameView::updateLayoutAndStyleIfNeededRecursive):
        * page/FrameView.h:

2011-08-26  Mikhail Naganov  <mnaganov@chromium.org>

        Web Inspector: [Chromium] Double clicking on numbers in Count & size columns doesn't toggle between values and percents in the Heap Snapshot.
        https://bugs.webkit.org/show_bug.cgi?id=66988

        Reviewed by Pavel Feldman.

        * inspector/front-end/DetailedHeapshotView.js:
        (WebInspector.DetailedHeapshotView.prototype._mouseClickInContentsGrid):
        (WebInspector.DetailedHeapshotView.prototype._mouseDownInContentsGrid):

2011-08-26  Shinya Kawanaka  <shinyak@google.com>

        REGRESSION(r93390): Empty or invalid maxlength of an input tag should be ignored.
        https://bugs.webkit.org/show_bug.cgi?id=67015

        Reviewed by Kent Tamura.

        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::parseMaxLengthAttribute):
          Checks the validity of maxlength attribute when converting it to integer.

2011-08-25  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Fix indentation of WebSocket header files
        https://bugs.webkit.org/show_bug.cgi?id=67018

        Reviewed by Kent Tamura.

        No new tests. Style fix only.

        * websockets/WebSocket.h:
        (WebCore::WebSocket::create):
        (WebCore::WebSocket::toWebSocket):
        (WebCore::WebSocket::refEventTarget):
        (WebCore::WebSocket::derefEventTarget):
        * websockets/WebSocketChannel.h:
        Removed formal parameter name of resumeTimerFired().
        (WebCore::WebSocketChannel::create):
        (WebCore::WebSocketChannel::refThreadableWebSocketChannel):
        (WebCore::WebSocketChannel::derefThreadableWebSocketChannel):
        (WebCore::WebSocketChannel::isNonControlOpCode):
        (WebCore::WebSocketChannel::isControlOpCode):
        (WebCore::WebSocketChannel::isReservedOpCode):
        * websockets/WebSocketHandshake.h:
        Removed formal parameter name of setClientProtocol().

2011-08-25  Martin Robinson  <mrobinson@igalia.com>

        Touch GtkVersioning.c so that the release bot rebuilds it. This
        is necessary because of the switch to GTK+ 3.x.

        * platform/gtk/GtkVersioning.c: Touch this file.

2011-08-25  Ben Wells  <benwells@chromium.org>

        Use PATH_BASED_BORDER_RADIUS_DRAWING for skia
        https://bugs.webkit.org/show_bug.cgi?id=65583

        This change brings in the new border rendering for Skia. To support this without aliasing the skia
        graphics context has been updated to support anti-aliased clipping around convex polygons and also
        anti-aliased clipping outside a path.

        Reviewed by James Robinson.

        * platform/graphics/skia/GraphicsContextSkia.cpp:
        (WebCore::GraphicsContext::clipOut):
        (WebCore::GraphicsContext::clipConvexPolygon):
        * platform/graphics/skia/PlatformContextSkia.cpp:
        (WebCore::PlatformContextSkia::clipPathAntiAliased):
        * rendering/RenderObject.h:

2011-08-25  Luke Macpherson   <macpherson@chromium.org>

        Implement animation and transition properties in CSSStyleApplyProperty.
        https://bugs.webkit.org/show_bug.cgi?id=66126

        Reviewed by Dean Jackson.

        No new tests. This is essentially a refactoring of the HANDLE_ANIMATION* and HANDLE_TRANSITION* macros in CSSStyleSelector.cpp.
        The only functional change is to iterate correctly over the lists instead of setting only the first element. See bug 66118 for details on that.

        * css/CSSStyleApplyProperty.cpp:
        Added new class ApplyPropertyAnimation to handle animation and transition properties.
        (WebCore::ApplyPropertyAnimation::ApplyPropertyAnimation):
        (WebCore::ApplyPropertyAnimation::applyInheritValue):
        (WebCore::ApplyPropertyAnimation::applyInitialValue):
        (WebCore::ApplyPropertyAnimation::applyValue):
        (WebCore::ApplyPropertyAnimation::setValue):
        (WebCore::ApplyPropertyAnimation::value):
        (WebCore::ApplyPropertyAnimation::test):
        (WebCore::ApplyPropertyAnimation::clear):
        (WebCore::ApplyPropertyAnimation::initial):
        (WebCore::ApplyPropertyAnimation::map):
        (WebCore::ApplyPropertyAnimation::accessAnimations):
        (WebCore::ApplyPropertyAnimation::animations):
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        * css/CSSStyleSelector.cpp:
        Removed animation and transition macros (celebrate!)
        (WebCore::CSSStyleSelector::applyProperty):
        Removed old implementations of animation and transition properties.
        * platform/animation/Animation.h:
        Changed return types of initial values to match the setters and getters.
        (WebCore::Animation::initialAnimationDelay):
        (WebCore::Animation::initialAnimationName):
        (WebCore::Animation::initialAnimationTimingFunction):

2011-08-25  Julien Chaffraix  <jchaffraix@webkit.org>

        Concentrate RenderLayer repaint rects updates
        https://bugs.webkit.org/show_bug.cgi?id=64993

        Reviewed by David Hyatt.

        The change moves the update of the repaint rects to 2 methods
        (computeRepaintRects and clearRepaintRects) to better track
        those changes.

        No new test, refactoring covered by the existing test cases.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::updateLayerPositions): Reverse the logic and
        calculate the new bounds upfront. This should have no impact as none
        of the methods rely on the internal value.

        (WebCore::RenderLayer::computeRepaintRects): Added the cachedOffset parameter
        to avoid breaking the performance optimization in updateLayerPositions. Added
        some ASSERTS.

        (WebCore::RenderLayer::clearRepaintRects): Added some ASSERTs here.
        (WebCore::RenderLayer::updateRepaintRectsAfterScroll): Added a FIXME as this
        method could use the cachedOffset trick too.

        (WebCore::RenderLayer::setHasVisibleContent): Changed the code to use
        computeRepaintRects.

        * rendering/RenderLayer.h: Updated the signature of computeRepaintRects and moved
        those 2 methods into the private section of the class.

2011-08-25  Van Lam  <vanlam@google.com>

        Remove use of magic number -1 in WebCore/editing/visible_units.cpp
        https://bugs.webkit.org/show_bug.cgi?id=66980

        Reviewed by Ryosuke Niwa.

        Replaced use of magic number -1 with constant offsetNotFound.

        * editing/visible_units.cpp:
        (WebCore::greatestOffsetUnder):
        (WebCore::smallestOffsetAbove):

2011-08-25  Igor Oliveira  <igor.oliveira@openbossa.org>

        Rollout r93799: Caused bad clipping on the bottom of tall glyphs inside a button label

        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::layoutInlineChildren):
        * rendering/RenderBox.cpp:
        * rendering/RenderBox.h:
        (WebCore::RenderBox::hasControlClip):
        (WebCore::RenderBox::controlClipRect):
        * rendering/RenderButton.cpp:
        (WebCore::RenderButton::setupInnerStyle):

2011-08-25  Ademar de Souza Reis Jr.  <ademar.reis@openbossa.org>

        [Qt] Enable password echo on Symbian builds
        https://bugs.webkit.org/show_bug.cgi?id=66954

        Reviewed by Chang Shu.

        No tests, as this is just a build change.

        * config.h:

2011-08-25  Nate Chapin  <japhet@chromium.org>

        Windows build fix after r93811.

        * loader/cf/ResourceLoaderCFNet.cpp:
        (WebCore::ResourceLoader::shouldCacheResponse):

2011-08-25  Nate Chapin  <japhet@chromium.org>

        Split some of the variables out of ThreadableLoaderOptions
        into a superclass, ResourceLoaderOptions. Use ResourceLoaderOptions
        all the way down to ResourceLoader.
        https://bugs.webkit.org/show_bug.cgi?id=63301

        Reviewed by David Levin.

        No new tests, refractor only.

        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * loader/DocumentThreadableLoader.cpp:
        * loader/MainResourceLoader.cpp:
        * loader/NetscapePlugInStreamLoader.cpp:
        * loader/ResourceLoadScheduler.cpp:
        * loader/ResourceLoadScheduler.h:
        * loader/ResourceLoader.cpp:
        * loader/ResourceLoader.h:
        * loader/ResourceLoaderOptions.h: Added.
        * loader/SubresourceLoader.cpp:
        * loader/SubresourceLoader.h:
        * loader/ThreadableLoader.h:
        * loader/cache/CachedResourceRequest.cpp:
        * loader/mac/ResourceLoaderMac.mm:

2011-08-25  Adam Klein  <adamk@chromium.org>

        use strict in CodeGeneratorJS and CodeGeneratorV8
        https://bugs.webkit.org/show_bug.cgi?id=66915

        Reviewed by Darin Adler.

        Making these files "use strict" makes changing them less
        time-consuming and error-prone, and helps avoid accidentally
        adding dead code (added a FIXME for one such case).

        No expected change in behavior.

        * bindings/scripts/CodeGeneratorJS.pm:
        (AddIncludesForType):
        (GenerateParametersCheckExpression):
        (GenerateFunctionParametersCheck):
        (GenerateImplementation):
        (GenerateImplementationFunctionCall):
        (NativeToJSValue):
        (GenerateHashValue):
        * bindings/scripts/CodeGeneratorV8.pm:
        (AddIncludesForType):
        (GenerateHeaderNamedAndIndexedPropertyAccessors):
        (GenerateNormalAttrSetter):
        (GetFunctionTemplateCallbackName):
        (GenerateNewFunctionTemplate):
        (GenerateParametersCheckExpression):
        (GenerateFunctionParametersCheck):
        (GenerateImplementation):
        ():

2011-08-25  Dean Jackson  <dino@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=21586
        Apply CSS animations and transitions to SVG properties

        Reviewed by Simon Fraser.

        Expose the applicable SVG properties from SVGRenderStyle to
        RenderStyle and add them to the list of animatable
        properties. There aren't many SVG properties that are
        animatable directly. SVGPaint (used in "fill" and "stroke")
        is supported only when both ends of the animation are
        a Color. Also updated SVGLength to have some methods
        for converting to and from user space units.

        Test: transitions/svg-transitions.html

        * page/animation/AnimationBase.cpp:
        (WebCore::blendFunc):
            Calls the blend method on SVGLength
        (WebCore::PropertyWrapperSVGPaint::PropertyWrapperSVGPaint):
            New property wrapper type for SVGPaint
        (WebCore::PropertyWrapperSVGPaint::equals):
        (WebCore::PropertyWrapperSVGPaint::blend):
        (WebCore::AnimationBase::ensurePropertyMap):
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::fillPaintType):
        (WebCore::InheritedFlags::fillPaintColor):
        (WebCore::InheritedFlags::setFillPaintColor):
        (WebCore::InheritedFlags::strokePaintType):
        (WebCore::InheritedFlags::strokePaintColor):
        (WebCore::InheritedFlags::setStrokePaintColor):
        (WebCore::InheritedFlags::strokeWidth):
        (WebCore::InheritedFlags::setStrokeWidth):
        (WebCore::InheritedFlags::strokeDashOffset):
        (WebCore::InheritedFlags::setStrokeDashOffset):
        (WebCore::InheritedFlags::strokeMiterLimit):
        (WebCore::InheritedFlags::setStrokeMiterLimit):
        (WebCore::InheritedFlags::stopOpacity):
        (WebCore::InheritedFlags::setStopOpacity):
        (WebCore::InheritedFlags::setStopColor):
        (WebCore::InheritedFlags::setFloodColor):
        (WebCore::InheritedFlags::setLightingColor):
        (WebCore::InheritedFlags::baselineShiftValue):
        (WebCore::InheritedFlags::setBaselineShiftValue):
        (WebCore::InheritedFlags::kerning):
        (WebCore::InheritedFlags::setKerning):
        (WebCore::InheritedFlags::stopColor):
        (WebCore::InheritedFlags::floodColor):
        (WebCore::InheritedFlags::lightingColor):
        * rendering/style/SVGRenderStyle.h:
        (WebCore::SVGRenderStyle::stopColor):
        (WebCore::SVGRenderStyle::floodColor):
        (WebCore::SVGRenderStyle::lightingColor):
        * svg/SVGLength.cpp:
        (WebCore::SVGLength::value):
        (WebCore::SVGLength::setValue):
        (WebCore::SVGLength::convertValueFromUserUnits):
        (WebCore::SVGLength::convertValueToUserUnits):
            New conversion functions used when setting and getting values
        * svg/SVGLength.h:
        (WebCore::SVGLength::isZero):
        (WebCore::SVGLength::blend):
            Custom blend function that takes into account
            whether the units of a length can be converted
            in an animation, where you don't necessarily have
            an SVGElement for context.

2011-08-25  Kent Tamura  <tkent@chromium.org>

        REGRESSION(r90971): Fix an assertion failure with textarea placeholder.
        https://bugs.webkit.org/show_bug.cgi?id=66164

        Reviewed by Dave Hyatt.
         
        Minor patch nits addressed by inferno@chromium.org, on Hyatt's
        review.

        Test: fast/forms/textarea-placeholder-relayout-assertion.html

        * rendering/RenderTextControl.cpp:
        (WebCore::RenderTextControl::layoutSpecialExcludedChild):
        Pass 'false' to the 'markParents' argument of setChildNeedsLayout().
        We don't need to propagate needsLayout for ancestors because
        layoutSpecialExcludedChild() is called from layout() of the
        parent.

2011-08-25  Igor Oliveira  <igor.oliveira@openbossa.org>

        Text-overflow is broken for button elements
        https://bugs.webkit.org/show_bug.cgi?id=53438

        Fix text-overflow for button elements. Make the element inside
        the button inherit the button controlClip.

        Reviewed by David Hyatt.

        Test: fast/css/button-overflow-ellipsis.html

        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::layoutInlineChildren):
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::controlClipRect):
        * rendering/RenderBox.h:
        (WebCore::RenderBox::hasControlClip):
        * rendering/RenderButton.cpp:
        (WebCore::RenderButton::setupInnerStyle):

2011-08-24  Adrienne Walker  <enne@google.com>

        [chromium] Update VideoLayerChromium to not access GC3D on the main thread
        https://bugs.webkit.org/show_bug.cgi?id=66434

        Reviewed by James Robinson.

        Covered by existing tests.

        This change allows the main thread VideoLayerChromium to not depend on
        compositor thread resources (GC3D, LayerRendererChromium). The texture
        allocation in VideoLayerChromium was changed to use ManagedTexture so
        that textures can now be evicted when there is texture memory pressure
        and so that destruction can be automatically deferred until a GC3D is
        available.

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/ManagedTexture.cpp:
        * platform/graphics/chromium/ManagedTexture.h:
        (WebCore::ManagedTexture::size):
        (WebCore::ManagedTexture::format):
        * platform/graphics/chromium/VideoLayerChromium.cpp:
        (WebCore::VideoLayerChromium::VideoLayerChromium):
        (WebCore::VideoLayerChromium::~VideoLayerChromium):
        (WebCore::VideoLayerChromium::cleanupResources):
        (WebCore::VideoLayerChromium::updateCompositorResources):
        (WebCore::VideoLayerChromium::pushPropertiesTo):
        (WebCore::VideoLayerChromium::setLayerTreeHost):
        (WebCore::VideoLayerChromium::determineTextureFormat):
        (WebCore::VideoLayerChromium::reserveTextures):
        (WebCore::VideoLayerChromium::updateTexture):
        (WebCore::VideoLayerChromium::releaseCurrentFrame):
        * platform/graphics/chromium/VideoLayerChromium.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::contentsTextureManager):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::setTexture):
        (WebCore::CCVideoLayerImpl::drawYUV):
        (WebCore::CCVideoLayerImpl::drawRGBA):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:

2011-08-25  Abhishek Arya  <inferno@chromium.org>

        Incorrect layout of :before and :after content, with display
        table, table-row and table-cell.
        https://bugs.webkit.org/show_bug.cgi?id=66699

        Reviewed by David Hyatt.

        Tests: fast/table/table-after-child-in-table.html
               fast/table/table-before-child-in-table.html
               fast/table/table-cell-after-child-in-block.html
               fast/table/table-cell-after-child-in-table.html
               fast/table/table-cell-before-child-in-block.html
               fast/table/table-cell-before-child-in-table.html
               fast/table/table-row-after-child-in-block.html
               fast/table/table-row-after-child-in-table.html
               fast/table/table-row-before-child-in-block.html
               fast/table/table-row-before-child-in-table.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::addChildIgnoringAnonymousColumnBlocks):
        Fix the looping condition to detect :after child correctly.
        isAnonymousBlock() does not apply to tables, instead
        using isAnonymous().
        * rendering/RenderTableRow.cpp:
        (WebCore::RenderTableRow::addChild): Don't add the new child
        in the generatedContainer with :before, :after content.
        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::addChild): Don't add the new child
        in the generatedContainer with :before, :after content.

2011-08-25  Sam Weinig  <sam@webkit.org>

        JSHTMLImageElement (and associated Node) is abandoned when image load is canceled via beforeload
        <rdar://problem/9925630>
        https://bugs.webkit.org/show_bug.cgi?id=66906

        Reviewed by Darin Adler.

        * loader/ImageLoader.cpp:
        (WebCore::ImageLoader::dispatchPendingBeforeLoadEvent):
        Very similar fix to the one in r93717 except this patches the case where the image load was
        canceled via beforeload.

2011-08-25  John Bates  <jbates@google.com>

        [chromium] Leaking SkBitmaps for background images
        https://bugs.webkit.org/show_bug.cgi?id=66488

        Reviewed by Stephen White.

        This patch simply changes NativeImageSkia to have a SkBitmap instead of
        deriving from SkBitmap. All dependent code updated to access the member
        instead of calling SkBitmap methods on NativeImageSkia objects. This
        may or may not fix the memory leak, but it's definitely a bug that could
        cause memory leaks.

        * platform/chromium/DragImageChromiumSkia.cpp:
        (WebCore::createDragImageFromImage):
        * platform/graphics/chromium/PlatformImage.cpp:
        (WebCore::PlatformImage::updateFromImage):
        * platform/graphics/skia/BitmapImageSingleFrameSkia.h:
        (WebCore::BitmapImageSingleFrameSkia::currentFrameHasAlpha):
        (WebCore::BitmapImageSingleFrameSkia::size):
        (WebCore::BitmapImageSingleFrameSkia::notSolidColor):
        * platform/graphics/skia/GraphicsContext3DSkia.cpp:
        (WebCore::GraphicsContext3D::getImageData):
        * platform/graphics/skia/ImageSkia.cpp:
        (WebCore::paintSkBitmap):
        (WebCore::Image::drawPattern):
        (WebCore::BitmapImage::checkForSolidColor):
        * platform/graphics/skia/NativeImageSkia.cpp:
        (WebCore::NativeImageSkia::NativeImageSkia):
        (WebCore::NativeImageSkia::decodedSize):
        (WebCore::NativeImageSkia::resizedBitmap):
        * platform/graphics/skia/NativeImageSkia.h:
        (WebCore::NativeImageSkia::bitmap):
        * platform/graphics/skia/PatternSkia.cpp:
        (WebCore::Pattern::platformPattern):
        * platform/image-decoders/ImageDecoder.h:
        (WebCore::ImageFrame::getAddr):
        * platform/image-decoders/skia/ImageDecoderSkia.cpp:
        (WebCore::ImageFrame::operator=):
        (WebCore::ImageFrame::clearPixelData):
        (WebCore::ImageFrame::zeroFillPixelData):
        (WebCore::ImageFrame::copyBitmapData):
        (WebCore::ImageFrame::setSize):
        (WebCore::ImageFrame::hasAlpha):
        (WebCore::ImageFrame::setHasAlpha):
        (WebCore::ImageFrame::width):
        (WebCore::ImageFrame::height):

2011-08-25  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r93774.
        http://trac.webkit.org/changeset/93774
        https://bugs.webkit.org/show_bug.cgi?id=66945

        It broke 26 tests on the Qt bot (Requested by ossy on
        #webkit).

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::stroke):
        * platform/graphics/qt/PathQt.cpp:
        (WebCore::Path::boundingRect):

2011-08-25  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: [refactoring] use PopoverHelper to implement popup in the SourceFrame
        https://bugs.webkit.org/show_bug.cgi?id=66858

        Reviewed by Pavel Feldman.

        * inspector/front-end/DetailedHeapshotView.js:
        (WebInspector.DetailedHeapshotView.prototype._showStringContentPopover):
        * inspector/front-end/NetworkPanel.js:
        (WebInspector.NetworkLogView.prototype.initializeView):
        (WebInspector.NetworkLogView.prototype.willHide):
        (WebInspector.NetworkLogView.prototype._reset):
        (WebInspector.NetworkLogView.prototype.switchToBriefView):
        (WebInspector.NetworkLogView.prototype._showPopover):
        * inspector/front-end/Popover.js:
        (WebInspector.Popover):
        (WebInspector.Popover.prototype.show):
        (WebInspector.Popover.prototype.dispose):
        (WebInspector.PopoverHelper):
        (WebInspector.PopoverHelper.prototype._mouseMove.doHide):
        (WebInspector.PopoverHelper.prototype._mouseMove):
        (WebInspector.PopoverHelper.prototype.hidePopover):
        (WebInspector.PopoverHelper.prototype._hidePopover):
        (WebInspector.PopoverHelper.prototype._mouseHover):
        (WebInspector.PopoverHelper.prototype._killHidePopupTimer):
        * inspector/front-end/SourceFrame.js:
        (WebInspector.SourceFrame.prototype.willHide):
        (WebInspector.SourceFrame.prototype._initializeTextViewer):
        (WebInspector.SourceFrame.prototype._scroll):
        (WebInspector.SourceFrame.prototype._mouseDown):
        (WebInspector.SourceFrame.prototype._onHidePopover):
        (WebInspector.SourceFrame.prototype._shouldShowPopover):
        (WebInspector.SourceFrame.prototype._getPopoverAnchor):
        (WebInspector.SourceFrame.prototype._highlightExpression):
        (WebInspector.SourceFrame.prototype._onShowPopover.showObjectPopover):
        (WebInspector.SourceFrame.prototype._onShowPopover):
        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel):
        (WebInspector.TimelinePanel.prototype._showPopover):
        (WebInspector.TimelinePanel.prototype._closeRecordDetails):

2011-08-25  Pavel Feldman  <pfeldman@google.com>

        [Qt] REGRESSION(93769): inspector/console/console-tests.html fails
        https://bugs.webkit.org/show_bug.cgi?id=66930

        Reviewed by Yury Semikhatsky.

        Test: inspector/console/console-repeat-count.html

        * inspector/front-end/ConsoleModel.js:
        (WebInspector.ConsoleModel):
        (WebInspector.ConsoleModel.prototype.addMessage):
        (WebInspector.ConsoleModel.prototype.clearMessages):
        (WebInspector.ConsoleModel.prototype.interruptRepeatCount):
        (WebInspector.ConsoleModel.prototype._messageRepeatCountUpdated):
        (WebInspector.ConsoleDispatcher.prototype.messageRepeatCountUpdated):
        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView.prototype._consoleMessageAdded):
        * inspector/front-end/inspector.js:

2011-08-25  Mikhail Naganov  <mnaganov@chromium.org>

        Chromium: expose MemoryCache::prune and FontCache::purgeInactiveFontData.
        https://bugs.webkit.org/show_bug.cgi?id=66132

        Reviewed by Tony Gentilcore.

        * loader/cache/MemoryCache.cpp:
        (WebCore::MemoryCache::prune):
        (WebCore::MemoryCache::pruneToPercentage):
        * loader/cache/MemoryCache.h: Methods moved from .h to .cpp to work around compilation problem with the Win Chromium port.

2011-08-25  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r93771.
        http://trac.webkit.org/changeset/93771
        https://bugs.webkit.org/show_bug.cgi?id=66933

        Broke css3/font-feature-settings-rendering.html on chromium
        mac 10.5 (Requested by podivilov on #webkit).

        * platform/graphics/mac/FontCustomPlatformData.cpp:
        (WebCore::FontCustomPlatformData::~FontCustomPlatformData):
        (WebCore::createFontCustomPlatformData):
        * platform/graphics/mac/FontCustomPlatformData.h:
        (WebCore::FontCustomPlatformData::FontCustomPlatformData):

2011-08-23  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        [Qt][WK2] Drive tiling from the WebProcess and reuse TiledBackingStore.
        https://bugs.webkit.org/show_bug.cgi?id=66771

        Reviewed by Tor Arne Vestbø.

        We need the tiling logic to be moved to the web process to allow invalidated tile rects to be
        rendered with the same layout. This also allows the web process to render tiles into
        buffers readable directly by the GPU (on supported platforms). We also take the opportunity
        to use the TiledBackingStore in WebCore to have only one tiling implementation.

        Before this patch:
        - TiledDrawingAreaProxy manages tiles from the UI process.
        - TiledDrawingArea received rendering requests for a rect and returns the result
          to the proxy through shared memory.

        After this patch:
        - TiledDrawingArea uses a TiledBackingStore to manage tiles from the web process.
        - TiledBackingStoreRemoteTile forwards tile creations, update and removals to the proxy.
        - TiledDrawingAreaProxy updates the scene graph directly from requests.

        It also implements tile buffer swapping correctly in SGTileNode, triggered by the DidRenderFrame message.
        Render throttling is implemented by waiting in TiledDrawingArea for the UI process to
        notify us when the last rendered frame is ready to make it to the screen.
        TiledDrawingAreaTileSets have been replaced by using two instances of TiledBackingStore instead.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::updateTileBuffers):
        (WebCore::TiledBackingStore::coverageRatio):
        (WebCore::TiledBackingStore::startTileBufferUpdateTimer):
        * platform/graphics/TiledBackingStore.h:
        * platform/graphics/TiledBackingStoreClient.h:
        (WebCore::TiledBackingStoreClient::tiledBackingStoreIsUpdatingAllowed):

2011-08-23  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        TiledBackingStore: Untie the tile implementation from the platform.
        https://bugs.webkit.org/show_bug.cgi?id=66760

        Reviewed by Kenneth Rohde Christiansen.

        Make the Tile class polymorphic and introduce TiledBackingStoreBackend as a Tile factory.

        * platform/graphics/Tile.h:
        (WebCore::Tile::~Tile):
        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::TiledBackingStore):
        (WebCore::TiledBackingStore::paint):
        (WebCore::TiledBackingStore::createTiles):
        * platform/graphics/TiledBackingStore.h:
        (WebCore::TiledBackingStore::client):
        * platform/graphics/TiledBackingStoreBackend.h: Added.
        (WebCore::TiledBackingStoreBackend::create):
        (WebCore::TiledBackingStoreBackend::~TiledBackingStoreBackend):
        (WebCore::TiledBackingStoreBackend::TiledBackingStoreBackend):
        * platform/graphics/qt/TileQt.cpp:
        (WebCore::TileQt::TileQt):
        (WebCore::TileQt::~TileQt):
        (WebCore::TileQt::isDirty):
        (WebCore::TileQt::isReadyToPaint):
        (WebCore::TileQt::invalidate):
        (WebCore::TileQt::updateBackBuffer):
        (WebCore::TileQt::swapBackBufferToFront):
        (WebCore::TileQt::paint):
        (WebCore::TiledBackingStoreBackend::paintCheckerPattern):
        (WebCore::TiledBackingStoreBackend::createTile):
        * platform/graphics/qt/TileQt.h: Copied from Source/WebCore/platform/graphics/Tile.h.
        (WebCore::TileQt::create):
        (WebCore::TileQt::coordinate):
        (WebCore::TileQt::rect):

2011-08-25  Andreas Kling  <kling@webkit.org>

        [Qt] Path::boundingRect() is unnecessarily slow.
        https://bugs.webkit.org/show_bug.cgi?id=66854

        Reviewed by Benjamin Poulain.

        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::stroke): Remove Qt-specific optimization
        since calling Path::boundingRect() will now do exactly the same thing.
        * platform/graphics/qt/PathQt.cpp:
        (WebCore::Path::boundingRect): Return QPainterPath::controlPointRect() since
        that is much faster than computing the (precise) QPainterPath::boundingRect()
        and Path::boundingRect() is not expected to be 100% precise anyway.

2011-08-25  Yuta Kitamura  <yutak@chromium.org>

        WebSocket: Queue messages to be sent
        https://bugs.webkit.org/show_bug.cgi?id=66298

        Reviewed by Kent Tamura.

        Blobs must be read asynchronously and thus cannot be sent immediately. Therefore, we need to
        create a queue of messages to be sent in order to handle pending requests.

        No new tests. Strictly speaking, there is a small change in behavior but it is hard to
        reproduce in tests. See description of WebSocketChannel::send below.

        * websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::WebSocketChannel):
        (WebCore::WebSocketChannel::send):
        Now, this function always returns true if hybi-10 protocol is selected. The impact of this change
        should be minimum, because the current WebSocket API defines the return type of WebSocket.send()
        is void (see also bug 65850).
        It's hard to make SocketStreamHandle::send() fail deliberately, therefore it's difficult to write
        a test to detect this behavior change.
        (WebCore::WebSocketChannel::didCloseSocketStream):
        (WebCore::WebSocketChannel::startClosingHandshake):
        (WebCore::WebSocketChannel::processFrame):
        (WebCore::WebSocketChannel::enqueueTextFrame):
        (WebCore::WebSocketChannel::enqueueRawFrame):
        (WebCore::WebSocketChannel::processOutgoingFrameQueue):
        (WebCore::WebSocketChannel::abortOutgoingFrameQueue):
        * websockets/WebSocketChannel.h:

2011-08-24  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: Directional arrow on element info box looks terrible
        https://bugs.webkit.org/show_bug.cgi?id=66819

        Beautify the tooltip arrow, give it a better alignment in some edge cases,
        and fix the tooltip font on Macs.

        Reviewed by Pavel Feldman.

        * inspector/DOMNodeHighlighter.cpp:

2011-08-25  Jeremy Moskovich  <jeremy@chromium.org>

        Remove ATSFont*() functions in favor of CGFont in FontCustomPlatformData.cpp
        https://bugs.webkit.org/show_bug.cgi?id=66629

        As of r72774 and dropping support for OS X 10.4, we can safely
        remove the ATS APIs from FontCustomPlatformData.cpp in favor of just the
        CGFont code.

        This change is motivated by a bug in ATSFontDeactivite() on 10.7 which
        affects the Chromium port, due to its compiling once against the 10.5
        SDK for all platforms - See crbug.com/93191 or rdar://9976774 .

        Reviewed by Dan Bernstein.

        No new tests - covered by existing tests.

        * platform/graphics/mac/FontCustomPlatformData.cpp:
        (WebCore::FontCustomPlatformData::~FontCustomPlatformData):
        (WebCore::createFontCustomPlatformData):
        * platform/graphics/mac/FontCustomPlatformData.h:
        (WebCore::FontCustomPlatformData::FontCustomPlatformData):

2011-08-25  Pavel Feldman  <pfeldman@google.com>

        Not reviewed: rollout r93768 for breaking build.

        * inspector/DOMNodeHighlighter.cpp:

2011-08-24  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: split ConsoleView into the View and the Model.
        https://bugs.webkit.org/show_bug.cgi?id=66861

        Reviewed by Yury Semikhatsky.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/compile-front-end.sh:
        * inspector/front-end/BreakpointManager.js:
        * inspector/front-end/ConsoleMessage.js:
        (WebInspector.ConsoleMessage.prototype._format):
        * inspector/front-end/ConsoleModel.js: Added.
        (WebInspector.ConsoleModel):
        (WebInspector.ConsoleModel.prototype._setConsoleMessageExpiredCount):
        (WebInspector.ConsoleModel.prototype.addMessage):
        (WebInspector.ConsoleModel.prototype._incrementErrorWarningCount):
        (WebInspector.ConsoleModel.prototype.requestClearMessages):
        (WebInspector.ConsoleModel.prototype.clearMessages):
        (WebInspector.ConsoleDispatcher):
        (WebInspector.ConsoleDispatcher.prototype.messageAdded):
        (WebInspector.ConsoleDispatcher.prototype.messageRepeatCountUpdated):
        * inspector/front-end/ConsolePanel.js:
        (WebInspector.ConsolePanel):
        (WebInspector.ConsolePanel.prototype.performSearch):
        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView):
        (WebInspector.ConsoleView.prototype._consoleMessageAdded):
        (WebInspector.ConsoleView.prototype._appendConsoleCommand):
        (WebInspector.ConsoleView.prototype._appendConsoleCommandResult):
        (WebInspector.ConsoleView.prototype._appendConsoleMessage):
        (WebInspector.ConsoleView.prototype._consoleCleared):
        (WebInspector.ConsoleView.prototype._registerShortcuts):
        (WebInspector.ConsoleView.prototype._requestClearMessages):
        * inspector/front-end/DebuggerModel.js:
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype.addSourceMappingListener):
        (WebInspector.DebuggerPresentationModel.prototype.removeSourceMappingListener):
        * inspector/front-end/NetworkLog.js: Copied from Source/WebCore/inspector/front-end/externs.js.
        (WebInspector.NetworkLog):
        (WebInspector.NetworkLog.prototype.get resources):
        (WebInspector.NetworkLog.prototype._frameNavigated):
        (WebInspector.NetworkLog.prototype._onResourceStarted):
        * inspector/front-end/NetworkManager.js:
        (WebInspector.NetworkDispatcher.prototype._updateResourceWithResponse):
        (WebInspector.NetworkDispatcher.prototype._mimeTypeIsConsistentWithType):
        * inspector/front-end/Resource.js:
        (WebInspector.Resource.prototype.set finished):
        * inspector/front-end/ResourceTreeModel.js:
        (WebInspector.ResourceTreeModel):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode.prototype._scriptForRawLocation):
        (WebInspector.ScriptContentProvider.prototype.requestContent):
        (WebInspector.ConcatenatedScriptsContentProvider.prototype._concatenateScriptsContent.appendChunk):
        (WebInspector.ConcatenatedScriptsContentProvider.prototype._concatenateScriptsContent):
        * inspector/front-end/UISourceCode.js:
        (WebInspector.ContentProvider):
        (WebInspector.ContentProvider.prototype.requestContent):
        * inspector/front-end/WatchExpressionsSidebarPane.js:
        (WebInspector.WatchExpressionsSection.prototype.update):
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/externs.js:
        (WebInspector.linkifyURLAsNode):
        (WebInspector.formatLinkText):
        * inspector/front-end/inspector.html:
        * inspector/front-end/inspector.js:
        (WebInspector._createGlobalStatusBarItems):
        (WebInspector._updateErrorAndWarningCounts):
        (WebInspector.showConsole):

2011-08-24  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: Directional arrow on element info box looks terrible
        https://bugs.webkit.org/show_bug.cgi?id=66819

        Beautify the tooltip arrow, give it a better alignment in some edge cases,
        and fix the tooltip font on Macs.

        Reviewed by Pavel Feldman.

        * inspector/DOMNodeHighlighter.cpp:

2011-08-25  Yuta Kitamura  <yutak@chromium.org>

        Let MessageEvent.data hold SerializedScriptValue or String selectively
        https://bugs.webkit.org/show_bug.cgi?id=66841

        Reviewed by Adam Barth.

        MessageEvent from WebSocket contains a String in its "data" attribute, but it does not have
        to be serialized.

        No new tests are added, because this is refactoring and the behavior should not change.

        * bindings/js/JSMessageEventCustom.cpp:
        (WebCore::JSMessageEvent::data):
        To call putAnonymousValue(), "this" needs to be converted to non-const using const_cast<>.
        (WebCore::JSMessageEvent::initMessageEvent):
        Update the cache value as well.
        * bindings/v8/custom/V8MessageEventCustom.cpp:
        (WebCore::V8MessageEvent::dataAccessorGetter):
        ForceSet() is used to cache a value. This is the same as what the code generated by
        CodeGeneratorV8 does.
        (WebCore::V8MessageEvent::initMessageEventCallback):
        * dom/MessageEvent.cpp:
        (WebCore::MessageEvent::MessageEvent):
        (WebCore::MessageEvent::initMessageEvent):
        (WebCore::MessageEvent::data):
        This is only used within the Objective-C bindings (JSC and V8 have the custom functions).
        Since Objective-C code generator does not support [CustomGetter] IDL attribute, there is
        no good way to return a variant value for Objective-C bindings.
        * dom/MessageEvent.h:
        (WebCore::MessageEvent::create):
        (WebCore::MessageEvent::dataType):
        (WebCore::MessageEvent::dataAsSerializedScriptValue):
        (WebCore::MessageEvent::dataAsString):
        * dom/MessageEvent.idl:
        * websockets/WebSocket.cpp:
        (WebCore::WebSocket::didReceiveMessage):
        Construct a MessageEvent without serializing the received message.

2011-08-25  MORITA Hajime  <morrita@google.com>

        Unreviewed, rolling out r93762.
        http://trac.webkit.org/changeset/93762
        https://bugs.webkit.org/show_bug.cgi?id=66756

        IndexedDb tests crash

        * WebCore.gypi:
        * WebCore.pro:
        * bindings/generic/EventConstructors.h: Removed.
        * bindings/v8/OptionsObject.cpp:
        * bindings/v8/OptionsObject.h:
        * bindings/v8/custom/V8EventConstructors.cpp: Removed.
        * dom/Event.cpp:
        * dom/Event.h:
        (WebCore::Event::create):
        * dom/Event.idl:

2011-08-24  Kentaro Hara  <haraken@google.com>

        Implement an Event constructor.
        https://bugs.webkit.org/show_bug.cgi?id=66756

        Reviewed by Adam Barth.

        The spec of the Event constructor is here:
        http://dvcs.w3.org/hg/domcore/raw-file/tip/Overview.html#concept-event-constructor.
        This patch added the Event constructor to EventConstructors.h using
        JavaScript implementation-independent macros. This patch also added the V8
        implementation of these macros to V8EventConstructors.cpp.

        The bug 63878 has been implementing the Event constructors for JSC.
        Our plan is to first implement all the Event constructors for V8
        using EventConstructors.h proposed in the JSC patch, and then merge
        the JSC patch with these V8 patches. In any case, we are going to split
        the patches for V8 and those for JSC in order to avoid hard regression.

        Test: fast/events/event-constructors.html

        * WebCore.gypi: Added V8EventConstructors.cpp.
        * WebCore.pro: Added V8EventConstructors.cpp.
        * bindings/generic/EventConstructors.h: Added. The Event constructor. This is written using JavaScript implementation-independent macros. The V8 implementation of these macros is written in bindings/v8/custom/V8EventConstructors.cpp.
        * bindings/v8/OptionsObject.cpp:
        (WebCore::OptionsObject::getKeyDouble): Returns the value of a given key of type double.
        (WebCore::OptionsObject::getKey): Returns true whenever the given key is found, even if the value is null or undefined.
        * bindings/v8/OptionsObject.h:
        (WebCore::OptionsObject::getKeyValue): Returns the value of the given key. We need to overload getKeyValue() for all types required to EventConfiguration members.
        * bindings/v8/custom/V8EventConstructors.cpp: Added. Implemented macros used in EventConstructors.h.
        (WebCore::constructV8Event): The Event constructor.
        * dom/Event.cpp:
        (WebCore::EventConfiguration::EventConfiguration): A constructor of EventConfiguration.
        (WebCore::Event::Event): A constructor of the Event class.
        * dom/Event.h: Added EventConfiguration, which manages attributes of the Event class.
        (WebCore::Event::create): A factory method of the Event class with EventConfiguration.
        * dom/Event.idl: Added 'CanBeConstructed' and 'V8CustomConstructor'.

2011-08-24  Philippe Normand  <pnormand@igalia.com>

        [GTK] bump GStreamer requirement to 0.10.30
        https://bugs.webkit.org/show_bug.cgi?id=66860

        Reviewed by Martin Robinson.

        Use fast element linking by default.

        * platform/graphics/gstreamer/GStreamerGWorld.cpp:
        (WebCore::GStreamerGWorld::enterFullscreen):
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        (WebCore::MediaPlayerPrivateGStreamer::createGSTPlayBin):

2011-08-24  James Robinson  <jamesr@chromium.org>

        Some layerTreeAsText compositing tests are flaky
        https://bugs.webkit.org/show_bug.cgi?id=66913

        Reviewed by Simon Fraser.

        Remove compositingLayerUpdatePending() and unconditionally update compositing layers when
        RenderLayerCompositor::layerTreeAsText().  compositingLayerUpdatePending() was only used by test code and is
        unreliable.

        Covered by compositing/ layerTreeAsText tests.

        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::layerTreeAsText):
        * rendering/RenderLayerCompositor.h:

2011-08-24  Kentaro Hara  <haraken@google.com>

        Implement a keypath parser strictly following the specification
        https://bugs.webkit.org/show_bug.cgi?id=62288

        Reviewed by Tony Chang.

        Implemented a keypath parser that accepts either an empty string, a JavaScript
        identifier, or multiple JavaScript identifiers separated by periods.
        We fixed createObjectStore() and createIndex() so that they parse and check
        their |keypath| argument and return an appropriate exception if the |keypath|
        is not valid. We also added unit tests for the new keypath parser in keypath-basics.html.

        Tests: storage/indexeddb/keypath-fetch-key.html
               storage/indexeddb/keypath-basics.html

        * bindings/v8/IDBBindingUtilities.cpp:
        (WebCore::createIDBKeyFromSerializedValueAndKeyPath): Replaced IDBKeyPathElement with String
        (WebCore::injectIDBKeyIntoSerializedValue): Replaced IDBKeyPathElement with String
        * bindings/v8/IDBBindingUtilities.h:
        * bindings/v8/OptionsObject.cpp:
        (WebCore::OptionsObject::getKeyStringWithUndefinedOrNullCheck): Returns false when a given value is null or undefined
        (WebCore::OptionsObject::getKey): Removed undefined check
        * storage/IDBDatabase.cpp:
        (WebCore::IDBDatabase::createObjectStore): Checks if a |keypath| argument is valid, and returns a NON_TRANSIENT_ERR if it is not valid
        * storage/IDBDatabaseBackendImpl.cpp:
        (WebCore::IDBDatabaseBackendImpl::createObjectStore): Removed null check of a keypath
        * storage/IDBKeyPath.cpp:
        (WebCore::IDBKeyPathLexer::currentElement): Part of the keypath parser
        (WebCore::IDBKeyPathLexer::lex): Part of the keypath parser
        (WebCore::IDBKeyPathLexer::lexIdentifier): Part of the keypath parser
        (WebCore::IDBIsValidKeyPath): Checks if a keypath is valid
        (WebCore::IDBParseKeyPath): Part of the keypath parser
        * storage/IDBKeyPath.h: Replaced IDBKeyPathElement with String
        * storage/IDBObjectStore.cpp:
        (WebCore::IDBObjectStore::createIndex): Checks if a |keypath| argument is valid, and returns a NON_TRANSIENT_ERR if it is not valid
        * storage/IDBObjectStore.idl:

2011-08-24  Eric Uhrhane  <ericu@chromium.org>

        Reviewed by Adam Barth.

        [filesystem/Chromium] Filesystem paths need proper URL escaping
        https://bugs.webkit.org/show_bug.cgi?id=62811

        Fix http://code.google.com/p/chromium/issues/detail?id=78860 by making
        KURLChromium.cpp's escaping code actually work.

        Make encodeWithURLEscapeSequences call into googleurl to do proper
        escaping.  Tested in WebKit/chromium/tests/KURLTest.cpp.
        * platform/KURLGoogle.cpp:
        (WebCore::encodeWithURLEscapeSequences):

2011-08-24  Chris Palmer  <palmer@google.com>

        Resolve potential integer overflow in memory allocation, and ensure
        that allocation succeeds.

        Reviewed by Kenneth Russell.

        * platform/audio/AudioArray.h:
        (WebCore::AudioArray::allocate): Check for integer overflow.
        (WebCore::AudioArray::at): Document the safety assertion.
        (WebCore::AudioArray::zero): Document the safety assertion.
        (WebCore::AudioArray::zeroRange): Document the safety assertion.
        (WebCore::AudioArray::copyToRange): Document the safety assertion.

2011-08-24  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [EFL] Fix build with ENABLE_GEOLOCATION.
        https://bugs.webkit.org/show_bug.cgi?id=66881

        Use adoptPtr() to create a new GeolocationService instance, otherwise
        the build will fail when creating the PassOwnPtr object.

        * platform/efl/GeolocationServiceEfl.cpp:
        (WebCore::GeolocationServiceEfl::create):

2011-08-24  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [CMake] Fix build with ENABLE_BLOB or ENABLE_FILE_SYSTEM.
        https://bugs.webkit.org/show_bug.cgi?id=66880

        Generate and build some additional files required by these options.

        No new tests, as this is a build fix for some build options.

        * CMakeLists.txt:

2011-08-24  Iain Merrick  <husky@google.com>

        [chromium] Don't call glDeleteTexture(0) in TextureManager
        https://bugs.webkit.org/show_bug.cgi?id=66862

        Delete(0) is allowed in standard OpenGL, but not in Chrome.
        See http://code.google.com/p/chromium/issues/detail?id=85268

        Reviewed by James Robinson.

        * platform/graphics/chromium/TextureManager.cpp:
        (WebCore::TextureManager::deleteEvictedTextures):

2011-08-24  Adrienne Walker  <enne@google.com>

        [chromium] Properly initialize CCTiledLayerImpl::m_skipsDraw
        https://bugs.webkit.org/show_bug.cgi?id=66889

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::CCTiledLayerImpl):

2011-08-24  Tom Sepez  <tsepez@chromium.org>

        chromium WebFrameImpl - don't load javascript URLs against chrome internal
        pages.  Adds a mechanism for registering sensitive schemes which should 
        not be subject to manipulation by javascript urls typed into a location bar
        or, more importantly, their bookmarklet equivalents.
        https://bugs.webkit.org/show_bug.cgi?id=66720

        Reviewed by Adam Barth.

        Test: Chromium WebKit API unit test in chromium specific directory.
        
        * platform/SchemeRegistry.cpp:
        (WebCore::notAllowingJavascriptURLsSchemes):
        (WebCore::SchemeRegistry::registerURLSchemeAsNotAllowingJavascriptURLs):
        (WebCore::SchemeRegistry::shouldTreatURLSchemeAsNotAllowingJavascriptURLs):
        * platform/SchemeRegistry.h:

2011-08-24  Alexandru Chiculita  <achicu@adobe.com>

        [CSSRegions] Fix Element::getBoundingClientRect and Element::getClientRects for content flow
        https://bugs.webkit.org/show_bug.cgi?id=66641

        Original author of the patch is Mihnea Ovidenie <mihnea@adobe.com>.

        Redirected the mapLocalToContainer method to the appropriate RenderRegion.

        Note: RenderObject::absoluteQuads method needs some refactor to support multiple regions,
        will do that in a separate bug.

        Reviewed by David Hyatt.

        Tests: fast/regions/flowed-content-bounding-client-rect-horizontal-bt.html
               fast/regions/flowed-content-bounding-client-rect-vertical-rl.html
               fast/regions/flowed-content-bounding-client-rect-vertical.html
               fast/regions/flowed-content-bounding-client-rect.html
               fast/regions/flowed-content-transform-bounding-client-rect.html

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::mapLocalToContainer):
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::renderRegionForLine):
        (WebCore::RenderFlowThread::mapFromFlowToRegion):
        * rendering/RenderFlowThread.h:

2011-08-24  Alok Priyadarshi  <alokp@chromium.org>

        [chromium] Root layer is not updated when only a portion of tile is updated
        https://bugs.webkit.org/show_bug.cgi?id=66506

        This only happened in the accelerated path which changes stencil state.
        Incorrect stencil state was used to draw the root layer.

        Reviewed by James Robinson.

        Test: compositing/overflow/overflow-scroll.html (existing)

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::drawLayersInternal):
        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
        (WebCore::LayerTextureUpdaterSkPicture::updateTextureRect):

2011-08-24  Nate Chapin  <japhet@chromium.org>

        Fix an intermittent crash in EventSource, when a
        reconnect timer triggers after a navigation
        away from the current page begins.
        https://bugs.webkit.org/show_bug.cgi?id=45202

        Reviewed by Alexey Proskuryakov.

        Test: http/tests/eventsource/eventsource-reconnect-during-navigate-crash.html

        * page/EventSource.cpp:
        (WebCore::EventSource::connect): Don't set m_requestInFlight
            to true if ThreadableLoader::create() failed.

2011-08-24  Mike Reed  <reed@google.com>

        Change clip routine to promote the clipbounds up to (local) floats and then perform the intersection,
        rather than rounding the srcRect down to integers.
        https://bugs.webkit.org/show_bug.cgi?id=66810

        Reviewed by Kenneth Russell.

        No new tests. Existing tests that resize images will exercise this code path

        * platform/graphics/skia/SkiaUtils.cpp:
        (WebCore::ClipRectToCanvas):

2011-08-24  Alexandru Chiculita  <achicu@adobe.com>

        [CSSRegions] RenderRegion is not used if there's another renderer after it
        https://bugs.webkit.org/show_bug.cgi?id=66844

        There was no call to attachRegion in RenderObjectChildList::insertChildNode, so
        the region was not added to the RenderFlowThread.

        Reviewed by David Hyatt.

        Test: fast/regions/content-flowed-into-regions-dynamically-inserted.html

        * rendering/RenderObjectChildList.cpp:
        (WebCore::RenderObjectChildList::insertChildNode):

2011-08-24  Sam Weinig  <sam@webkit.org>

        JSHTMLImageElement (and associated Node) is abandoned when image load is canceled
        <rdar://problem/9925630>
        https://bugs.webkit.org/show_bug.cgi?id=66864

        Reviewed by Anders Carlsson.

        In the JSC bindings, we use HTMLImageElement::hasPendingActivity() (which in turn calls
        HTMLImageLoader::haveFiredLoadEvent()) to reason about the liveness of JSHTMLImageElements.
        In the case that an image load is canceled, the haveFiredLoadEvent never true, so the
        JSHTMLImageElement is kept alive forever (and since it references the global object, it
        keeps the entire graph alive as well).

        * loader/ImageLoader.cpp:
        (WebCore::ImageLoader::notifyFinished):
        Set m_firedLoad to true in the case of a canceled load, to reset the state back to
        its initial values.

2011-08-24  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API: add createObjectURL functionality
        https://bugs.webkit.org/show_bug.cgi?id=65925

        This patch introduces the functionality for generating the url associated with a MediaStream,
        which can then be assigned to the src attribute of the <video> tag for example.

        Reviewed by Adam Barth.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.pro:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * dom/ScriptExecutionContext.cpp:
        (WebCore::ScriptExecutionContext::~ScriptExecutionContext):
        (WebCore::ScriptExecutionContext::createPublicBlobURL):
        (WebCore::ScriptExecutionContext::revokePublicBlobURL):
        * dom/ScriptExecutionContext.h:
        * html/DOMURL.cpp:
        (WebCore::DOMURL::createObjectURL):
        * html/DOMURL.h:
        * html/DOMURL.idl:
        * platform/MediaStreamRegistry.cpp: Added.
        (WebCore::MediaStreamRegistry::registry):
        (WebCore::MediaStreamRegistry::registerMediaStreamURL):
        (WebCore::MediaStreamRegistry::unregisterMediaStreamURL):
        (WebCore::MediaStreamRegistry::mediaStream):
        * platform/MediaStreamRegistry.h: Copied from Source/WebCore/html/DOMURL.h.

        Tests for the Media Stream API will be provided by the bug 56587, pending enough landed code.

2011-08-23  David Levin  <levin@chromium.org>

        MessageEvent.ports shouldn't ever be null.
        https://bugs.webkit.org/show_bug.cgi?id=66789

        Reviewed by Darin Adler.

        * bindings/js/JSMessageEventCustom.cpp:
        (WebCore::JSMessageEvent::ports): Never return null.
        * bindings/v8/custom/V8MessageEventCustom.cpp:
        (WebCore::V8MessageEvent::portsAccessorGetter): Ditto.

2011-08-24  Alexandru Chiculita  <achicu@adobe.com>

        https://bugs.webkit.org/show_bug.cgi?id=66799
        RenderFlowThread creates a list of child elements, so that it can search
        the insertion point of a new element without searching the whole DOM.
        The issue is that it used addChild/removeChild, but that wasn't taking care of
        elements added in anonymous blocks created inside the RenderFlowThread.

        Reviewed by David Hyatt.

        Test: fast/regions/flow-anonymous-children.html

        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::nextRendererForNode):
        (WebCore::RenderFlowThread::previousRendererForNode):
        (WebCore::RenderFlowThread::addFlowChild):
        (WebCore::RenderFlowThread::removeFlowChild):
        * rendering/RenderFlowThread.h:
        * rendering/RenderObjectChildList.cpp:
        (WebCore::renderFlowThreadContainer):
        (WebCore::RenderObjectChildList::removeChildNode):
        (WebCore::RenderObjectChildList::appendChildNode):
        (WebCore::RenderObjectChildList::insertChildNode):

2011-08-24  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: Add 9 more javascript files to the compilation.
        https://bugs.webkit.org/show_bug.cgi?id=66847

        Reviewed by Yury Semikhatsky.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/compile-front-end.sh:
        * inspector/front-end/BreakpointManager.js:
        * inspector/front-end/CSSStyleModel.js:
        * inspector/front-end/Checkbox.js:
        * inspector/front-end/ConsoleMessage.js: Added.
        (WebInspector.ConsoleStackFrame):
        (WebInspector.ConsoleMessage):
        (WebInspector.ConsoleMessage.createTextMessage):
        (WebInspector.ConsoleMessage.prototype.get stackTrace):
        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView.prototype._registerConsoleDomainDispatcher.dispatcher.messageAdded):
        (WebInspector.ConsoleView.prototype._registerConsoleDomainDispatcher.dispatcher.messageRepeatCountUpdated):
        * inspector/front-end/CookieParser.js:
        * inspector/front-end/DOMAgent.js:
        * inspector/front-end/DOMStorage.js:
        * inspector/front-end/Database.js:
        * inspector/front-end/DebuggerModel.js:
        * inspector/front-end/DebuggerPresentationModel.js:
        * inspector/front-end/InspectorFrontendHostStub.js:
        (WebInspector.isMac):
        * inspector/front-end/NetworkManager.js:
        * inspector/front-end/RemoteObject.js:
        (WebInspector.RemoteObject.prototype.setPropertyValue):
        * inspector/front-end/Resource.js:
        (WebInspector.Resource):
        (WebInspector.Resource.Type.Document.0.Stylesheet.1.Image.2.Font.3.Script.4.XHR.5.WebSocket.7.Other.8.isTextType):
        (WebInspector.Resource.Type.toUIString):
        (WebInspector.Resource.Type.toString):
        (WebInspector.Resource.prototype._checkWarnings):
        (WebInspector.ResourceDomainModelBinding):
        (WebInspector.ResourceDomainModelBinding.prototype.canSetContent):
        (WebInspector.ResourceDomainModelBinding.prototype.setContent):
        * inspector/front-end/ResourceCategory.js:
        (WebInspector.ResourceCategory):
        (WebInspector.ResourceCategory.prototype.toString):
        (WebInspector.ResourceCategory.prototype.get title):
        * inspector/front-end/ResourceTreeModel.js:
        * inspector/front-end/ScriptFormatter.js:
        (WebInspector.ScriptFormatter.prototype._didFormatContent):
        (WebInspector.FormatterMappingPayload):
        * inspector/front-end/TimelineManager.js:
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/externs.js:
        (console.assert):
        (WebInspector.linkifyURLAsNode):
        (WebInspector.linkifyStringAsFragment):
        (WebInspector.UIString):
        (Element.prototype.scrollIntoViewIfNeeded):
        * inspector/front-end/inspector.html:
        * inspector/front-end/inspector.js:
        (WebInspector.UIString):
        * inspector/front-end/treeoutline.js:
        * inspector/front-end/utilities.js:
        * inspector/generate-protocol-externs:

2011-08-24  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: extract ConsoleMessage into a separate file.
        https://bugs.webkit.org/show_bug.cgi?id=66853

        Reviewed by Yury Semikhatsky.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/front-end/ConsoleMessage.js: Added.
        (WebInspector.ConsoleMessage):
        (WebInspector.ConsoleMessage.createTextMessage):
        (WebInspector.ConsoleMessage.prototype._formatMessage):
        (WebInspector.ConsoleMessage.prototype._linkifyLocation):
        (WebInspector.ConsoleMessage.prototype._linkifyCallFrame):
        (WebInspector.ConsoleMessage.prototype.isErrorOrWarning):
        (WebInspector.ConsoleMessage.prototype._format):
        (WebInspector.ConsoleMessage.prototype._formatWithSubstitutionString.valueFormatter):
        (WebInspector.ConsoleMessage.prototype._formatWithSubstitutionString.append):
        (WebInspector.ConsoleMessage.prototype.clearHighlight):
        (WebInspector.ConsoleMessage.prototype.highlightSearchResults):
        (WebInspector.ConsoleMessage.prototype.matchesRegex):
        (WebInspector.ConsoleMessage.prototype.toMessageElement):
        (WebInspector.ConsoleMessage.prototype._populateStackTraceTreeElement):
        (WebInspector.ConsoleMessage.prototype._updateRepeatCount):
        (WebInspector.ConsoleMessage.prototype.toString):
        (WebInspector.ConsoleMessage.prototype.isEqual):
        (WebInspector.ConsoleMessage.prototype.get stackTrace):
        * inspector/front-end/ConsoleView.js:
        * inspector/front-end/WebKit.qrc:

2011-08-24  Tatiana Meshkova  <tatiana.meshkova@nokia.com>

        Paint SliderTrack and SliderThumb independently.
        https://bugs.webkit.org/show_bug.cgi?id=50453
        Also fixes https://bugs.webkit.org/show_bug.cgi?id=65456 crash.

        Reviewed by Kenneth Rohde Christiansen.

        RenderSlider works only with <input type=range>. Nowadays RenderTheme
        supports painting of SliderTrack and SliderThumb without range input.
        In order to be in sync with other platforms this patch gets rid of
        upcasting in RenderThemeQt::paintSliderTrack and allows to paint
        SliderTrack and SliderThumb independently.

        Test: platform/qt/fast/forms/range/slider-crash.html

        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::paintSliderTrack): Draw SC_SliderGroove.
        Allow paintSliderThumb() to care about SC_SliderHandle. We don't need
        to setup value and position anymore, since handle is drawn separately.
        Draw focus explicitly, since QStyleOptionSlider doesn't allow to focus
        on CC_Slider without handle subcontrol.
        (WebCore::RenderThemeQt::paintSliderThumb): Draw SC_SliderHandle.

2011-08-23  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: annotate and prepare for compilation first 14 JavaScript files within 4 modules.
        https://bugs.webkit.org/show_bug.cgi?id=66776

        Reviewed by Yury Semikhatsky.

        * inspector/compile-front-end.sh:
        * inspector/front-end/ContextMenu.js:
        * inspector/front-end/DOMAgent.js:
        (WebInspector.DOMAgent.prototype._loadNodeAttributes):
        (WebInspector.DOMAgent.prototype._childNodeRemoved):
        (WebInspector.DOMAgent.prototype._inspectElementRequested):
        (WebInspector.DOMDispatcher.prototype.inspectElementRequested):
        * inspector/front-end/DebuggerModel.js:
        (WebInspector.DebuggerModel.Location):
        * inspector/front-end/ElementsPanel.js:
        (WebInspector.ElementsPanel):
        (WebInspector.ElementsPanel.prototype._inspectElementRequested):
        * inspector/front-end/InspectorFrontendHostStub.js:
        * inspector/front-end/KeyboardShortcut.js:
        * inspector/front-end/Object.js:
        (WebInspector.Object.prototype.addEventListener):
        (WebInspector.Object.prototype.removeEventListener):
        (WebInspector.Object.prototype.hasEventListeners):
        * inspector/front-end/Panel.js:
        (WebInspector.Panel):
        * inspector/front-end/Placard.js:
        * inspector/front-end/Popover.js:
        (WebInspector.Popover.prototype.show):
        * inspector/front-end/ResourcesPanel.js:
        (WebInspector.ResourcesPanel):
        (WebInspector.StorageCategoryTreeElement):
        * inspector/front-end/Script.js:
        (WebInspector.Script.prototype.editSource):
        * inspector/front-end/ScriptsPanel.js:
        * inspector/front-end/Settings.js:
        (WebInspector.Settings):
        (WebInspector.Settings.prototype.createSetting):
        * inspector/front-end/SoftContextMenu.js:
        (.WebInspector.SoftContextMenu.prototype._menuItemMouseUp):
        (.WebInspector.SoftContextMenu.prototype._triggerAction):
        (.WebInspector.SoftContextMenu.prototype._menuKeyDown):
        * inspector/front-end/TabbedPane.js:
        * inspector/front-end/TextPrompt.js:
        * inspector/front-end/UserMetrics.js:
        * inspector/front-end/View.js:
        * inspector/front-end/externs.js:
        (JSON.parse):
        (JSON.stringify):
        * inspector/front-end/inspector.js:
        ():
        * inspector/generate-protocol-externs:

2011-08-24  Andreas Kling  <kling@webkit.org>

        SelectElementData: Reorder members to reduce memory usage.
        https://bugs.webkit.org/show_bug.cgi?id=66787

        Reviewed by Darin Adler.

        Reduced the size of SelectElementData by 24 bytes on 64-bit by rearranging
        its data members.

        Also added missing initialization of m_userDrivenChange.

        * dom/SelectElement.cpp:
        (WebCore::SelectElementData::SelectElementData):
        * dom/SelectElement.h:

2011-08-24  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: clearPseudoState should retain Element while clearing
        its state.
        https://bugs.webkit.org/show_bug.cgi?id=66790

        Reviewed by Yury Semikhatsky.

        * inspector/InspectorCSSAgent.cpp:
        (WebCore::InspectorCSSAgent::clearPseudoState):

2011-08-23  Mark Hahnenberg  <mhahnenberg@apple.com>

        Add checks to ensure allocation does not take place during initialization of GC-managed objects
        https://bugs.webkit.org/show_bug.cgi?id=65288

        Reviewed by Darin Adler.

        No new tests.

        Adding the new validation functionality.  In its current state, it will performs checks, 
        but they don't fail unless you do allocation in the arguments to the parent constructor in the 
        initialization list of a class.  The allocateCell() method turns on the global flag disallowing any new 
        allocations, and the constructorBody() method in JSCell turns it off.  This way, allocation is still 
        allowed in constructor bodies while other refactoring efforts continue.

        * bindings/js/JSDOMWindowShell.cpp:
        (WebCore::JSDOMWindowShell::operator new):
        * bindings/js/JSDOMWindowShell.h:

2011-08-23  Scott Byer  <scottbyer@chromium.org>

        ScrollAnimatorNone coasting implementation
        https://bugs.webkit.org/show_bug.cgi?id=66258

        Increase the animation time based on the velocity of the scroll, up to a
        maximum amount. Fix bugs found by additional unit testing.

        Reviewed by James Robinson.

        Additional tests in ScrollAnimatorNoneTest: CurveMathQuartic, CurveMathCoast,
        ScrollOnceQuartic, ScrollTwiceCubic, ScrollLotsCubic, ScrollLotsCubicSmoothed,
        ScrollUpToBumperCoast, ScrollDownToBumperCoast, VaryingInputsEquivalency,
        VaryingInputsEquivalencyCoast, VaryingInputsEquivalencyCoastLarge,
        VaryingInputsEquivalencyCoastSteep

        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::Parameters::Parameters):
        (WebCore::ScrollAnimatorNone::PerAxisData::curveAt):
        (WebCore::ScrollAnimatorNone::PerAxisData::coastCurve):
        (WebCore::ScrollAnimatorNone::PerAxisData::curveIntegralAt):
        (WebCore::ScrollAnimatorNone::PerAxisData::attackArea):
        (WebCore::ScrollAnimatorNone::PerAxisData::releaseArea):
        (WebCore::ScrollAnimatorNone::PerAxisData::PerAxisData):
        (WebCore::ScrollAnimatorNone::PerAxisData::updateDataFromParameters):
        (WebCore::ScrollAnimatorNone::PerAxisData::updateVisibleLength):
        (WebCore::ScrollAnimatorNone::ScrollAnimatorNone):
        (WebCore::ScrollAnimatorNone::scroll):
        (WebCore::ScrollAnimatorNone::willEndLiveResize):
        (WebCore::ScrollAnimatorNone::didAddVerticalScrollbar):
        (WebCore::ScrollAnimatorNone::didAddHorizontalScrollbar):
        (WebCore::ScrollAnimatorNone::updateVisibleLengths):
        * platform/ScrollAnimatorNone.h:

2011-08-23  James Robinson  <jamesr@chromium.org>

        [chromium] Need a way to test lost compositor context recovery
        https://bugs.webkit.org/show_bug.cgi?id=66820

        Reviewed by Kenneth Russell.

        Adds support for recreating a context as if it was lost, and fixes
        compositeAndReadback() to attempt context recovery.

        Test: platform/chromium/compositing/lost-compositor-context.html

        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::compositeAndReadback):
        (WebCore::CCLayerTreeHost::loseCompositorContext):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:

2011-08-23  Nat Duca  <nduca@chromium.org>

        [chromium] Implement CCThread in terms of WebThread
        https://bugs.webkit.org/show_bug.cgi?id=66610

        Reviewed by Darin Fisher.

        * WebCore.gypi:
        * platform/graphics/chromium/cc/CCCompletionEvent.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        (WebCore::CCLayerTreeHost::client):
        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp:
        (WebCore::CCLayerTreeHostImplProxy::CCLayerTreeHostImplProxy):
        * platform/graphics/chromium/cc/CCThread.h:
        (WebCore::CCThread::~CCThread):

2011-08-23  Iain Merrick  <husky@google.com>

        [chromium] Renderer crashes when about:gpucrash is loaded
        https://bugs.webkit.org/show_bug.cgi?id=66814

        WebViewImpl::didRecreateGraphicsContext() was calling
        setRootLayer() on the CC layer tree, but the root layer 
        doesn't actually change and the code wasn't defensive        
        against this. This CL adds some asserts to catch tree
        corruption and removes the unnecessary calls.

        Reviewed by James Robinson.

        * platform/graphics/GraphicsLayer.cpp:
        (WebCore::GraphicsLayer::setParent):
        * platform/graphics/GraphicsLayer.h:
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::setParent):
        (WebCore::LayerChromium::hasAncestor):
        * platform/graphics/chromium/LayerChromium.h:

2011-08-23  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r93645.
        http://trac.webkit.org/changeset/93645
        https://bugs.webkit.org/show_bug.cgi?id=66828

        Broke webkit_unit_tests on chromium mac (Requested by jamesr
        on #webkit).

        * platform/chromium/ScrollbarThemeChromiumMac.mm:
        (WebCore::ScrollbarThemeChromiumMac::ScrollbarThemeChromiumMac):
        (WebCore::ScrollbarThemeChromiumMac::paintOverhangAreas):

2011-08-23  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=66244
        Cached pages don't fully update when going back after changing the display scale 
        factor
        -and corresponding-
        <rdar://problem/9955656>

        Reviewed by Darin Adler.

        This patch adds a generalized concept of needing a full style recalc to the 
        BackForwardController. So when the display scale factor is changed, the 
        BackForwardController can be informed that all pages will need a full style recalc 
        when they come out of the cache. This same mechanism is also used to fix a long-
        standing bug with full-page/text zoom.

        Iterate through the HistoryItems and mark all CachedPages as needing a full style 
        recalc.
        * history/BackForwardController.cpp:
        (WebCore::BackForwardController::markPagesForFullStyleRecalc):
        * history/BackForwardController.h:

        ChachedPage has a new bool -- m_needsFullStyleRecalc -- to track whether a full 
        style recalc is needed when the CachedPage is restored.
        * history/CachedPage.cpp:
        (WebCore::CachedPage::CachedPage):
        (WebCore::CachedPage::restore):
        (WebCore::CachedPage::clear):
        * history/CachedPage.h:
        (WebCore::CachedPage::markForFullStyleRecalc):

        HistoryItem actually takes care of calling into CachedPage.
        * history/HistoryItem.cpp:
        (WebCore::HistoryItem::markForFullStyleRecalc):
        * history/HistoryItem.h:

        Fix style recalc issues for full-page/text zoom by calling our new function on 
        PageCache.
        * page/Frame.cpp:
        (WebCore::Frame::setPageAndTextZoomFactors):

        Fix style recalc issues for display scale factor changes by calling our new 
        function on PageCache.
        * page/Page.cpp:
        (WebCore::Page::setDeviceScaleFactor):

2011-08-23  Anders Carlsson  <andersca@apple.com>

        Fix build.

        * inspector/InstrumentingAgents.cpp:

2011-08-23  Chang Shu  <cshu@webkit.org>

        Added support for momentarily revealing last typed character in password input.
        Code change was partially based on Apple's iOS code and Samuel Nevala's work.
        https://bugs.webkit.org/show_bug.cgi?id=32509

        Reviewed by Alexey Proskuryakov.

        * editing/InsertIntoTextNodeCommand.cpp:
        (WebCore::InsertIntoTextNodeCommand::doApply):
        * rendering/RenderText.cpp:
        (WebCore::SecureTextTimer::SecureTextTimer):
        (WebCore::SecureTextTimer::restartWithNewText):
        (WebCore::SecureTextTimer::invalidate):
        (WebCore::SecureTextTimer::lastTypedCharacterOffset):
        (WebCore::SecureTextTimer::fired):
        (WebCore::RenderText::willBeDestroyed):
        (WebCore::RenderText::setTextInternal):
        (WebCore::RenderText::secureText):
        (WebCore::RenderText::momentarilyRevealLastTypedCharacter):
        * rendering/RenderText.h:
        (WebCore::RenderText::isSecure):
        * testing/Internals.cpp:
        (WebCore::Internals::setPasswordEchoEnabled): Fixed some silly coding in Internals.
        (WebCore::Internals::setPasswordEchoDurationInSeconds):
        (WebCore::Internals::reset):

2011-08-23  Dmitry Lomov  <Dmitry Lomov (dslomov@google.com)>

        https://bugs.webkit.org/show_bug.cgi?id=66751 
        [Chromium]WebWorkerClientImpl should always invoke
        InspectorIntrumentation on main thread.
        The fix moves calls to InspectorInstrumentation from
        WebWorkerClientImpl to unedrlying WorkerMessagingProxy.

        Reviewed by Pavel Feldman.

        Covered by existing tests.

        * inspector/InstrumentingAgents.cpp:
        (WebCore::instrumentationForPage):
        * workers/WorkerMessagingProxy.cpp:
        (WebCore::WorkerMessagingProxy::workerContextDestroyedInternal):
        (WebCore::WorkerMessagingProxy::terminateWorkerContext):

2011-08-23  Misha Tyutyunik  <michael.tyutyunik@nokia.com>

        [Qt] Button text is invisible when mobile theme is in use and application palette set to use light text color.
        https://bugs.webkit.org/show_bug.cgi?id=66635

        When mobile theme is in use and application palette is using light 
        color to display text button text becomes invisible. The reason for 
        that is that in RenderThemeQt::systemFont() we are using application 
        pallete while when are painting buttons lightGrayPalette is used.
        Calling setPaletteFromPageClientIfExists() takes care of the issue.
        
        Reviewed by Andreas Kling.

        Covered by existing tests.

        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::systemColor):

2011-08-23  Tony Chang  <tony@chromium.org>

        Add handling of mix-width and max-width for flexitems
        https://bugs.webkit.org/show_bug.cgi?id=66723

        Reviewed by David Hyatt.

        If we flex past a min/max width value, we need to mark the flexitem as
        a fixed width and re-start the flexing algorithm.  We use a HashMap to
        keep track of fixed width items.

        This patch also split out the size computation from the actual layout
        to avoid unnecessary layouts caused by restarting the flexing algorithm.

        Test: css3/flexbox/003.html

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutHorizontalBlock):
        (WebCore::RenderFlexibleBox::runFreeSpaceAllocationAlgorithm):
        * rendering/RenderFlexibleBox.h:

2011-08-23  Pratik Solanki  <psolanki@apple.com>

        ResourceRequest::setStorageSession should update NSURLRequest as well
        https://bugs.webkit.org/show_bug.cgi?id=66811

        Reviewed by Darin Adler.

        * platform/network/cf/ResourceRequestCFNet.cpp:
        (WebCore::ResourceRequest::setStorageSession): Update the m_nsRequest field as well since we
        have a new CFURLRequestRef.

2011-08-23  James Robinson  <jamesr@chromium.org>

        [chromium] Remove obsolete child context list from LayerRendererChromium
        https://bugs.webkit.org/show_bug.cgi?id=66743

        Reviewed by Kenneth Russell.

        Before we had proper semantics for flush() in the command buffer, we
        used a scheme of latches across contexts to ensure consistent frames
        were presented for WebGL and canvas. We no longer have latches and
        flush is a proper synchronization primative, so the child context list
        no longer does anything. Canvas2DLayerChromium and
        WebGLLayerChromium's implementations of updateCompositorResources() do
        flushes on the appropriate context already - canvas layers via
        DrawingBuffer::publishToPlatformLayer(), and WebGL layers via the call
        to prepareTexture().

        No new tests since the code being removed doesn't do anything.

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::~Canvas2DLayerChromium):
        (WebCore::Canvas2DLayerChromium::setDrawingBuffer):
        * platform/graphics/chromium/Canvas2DLayerChromium.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::drawLayers):
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::~WebGLLayerChromium):
        (WebCore::WebGLLayerChromium::setContext):
        * platform/graphics/chromium/WebGLLayerChromium.h:

2011-08-23  Alexei Svitkine  <asvitkine@chromium.org>

        Chromium Mac: Use a custom pattern image for rubber banding overhang area
        https://bugs.webkit.org/show_bug.cgi?id=66707

        Reviewed by Dimitri Glazkov.

        No new tests since its just changing the Chromium-specific overhang pattern.

        * platform/chromium/ScrollbarThemeChromiumMac.mm:
        (WebCore::ScrollbarThemeChromiumMac::ScrollbarThemeChromiumMac):
        (WebCore::ScrollbarThemeChromiumMac::paintOverhangAreas):

2011-08-23  Tatiana Meshkova  <tatiana.meshkova@nokia.com>

        Prepare to paint slider thumb separately.
        Provide proper size values for vertical SliderThumb.
        https://bugs.webkit.org/show_bug.cgi?id=66732

        Reviewed by Kenneth Rohde Christiansen.

        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::adjustSliderThumbSize):
        Swap length and thickness for sliderthumb-vertical.

2011-08-23  Adrienne Walker  <enne@google.com>

        [chromium] Fix potential nullptr deref in TiledLayerChromium::pushPropertiesTo
        https://bugs.webkit.org/show_bug.cgi?id=66808

        Reviewed by James Robinson.

        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::pushPropertiesTo):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::draw):

2011-08-23  Peter Kasting  <pkasting@google.com>

        Unreviewed, rolling out r93452.
        http://trac.webkit.org/changeset/93452
        https://bugs.webkit.org/show_bug.cgi?id=66423

        Broke Leopard, Snowleopard, and Chromium bots

        * xml/parser/XMLDocumentParserLibxml2.cpp:
        (WebCore::XMLDocumentParser::XMLDocumentParser):

2011-08-23  Ahmad Sharif  <asharif@chromium.org>

        Fixed warnings produced by gcc-4.6.0.
        https://bugs.webkit.org/show_bug.cgi?id=62168

        Reviewed by Adam Barth.

        * dom/Element.cpp:
        (WebCore::Element::recalcStyle):
        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::PerAxisData::curveAt):
        (WebCore::ScrollAnimatorNone::PerAxisData::curveDerivativeAt):
        * thirdparty: Copied from Source/WebCore/thirdparty.

2011-08-23  Alexandru Chiculita  <achicu@adobe.com>

        Text overlaps with the floats
        https://bugs.webkit.org/show_bug.cgi?id=66671

        The problem was that LineWidth::fitBelowFloats is not updating the m_left and m_right fields. 
        Next time LineWidth::shrinkAvailableWidthForNewFloatIfNeeded was called the width was recalculated 
        using the old values, making the line bigger.

        Reviewed by David Hyatt.

        Test: fast/block/float/fit_line_below_floats.html

        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::LineWidth::fitBelowFloats):

2011-08-23  Alexandru Chiculita  <achicu@adobe.com>

        [CSSRegions] RenderFlowThread layout should use the attached region sizes
        https://bugs.webkit.org/show_bug.cgi?id=66143

        When RenderFlowThread is doing the layout it also sets the current RenderFlowThread on
        the RenderView. RenderFlowThread cannot be nested inside a single RenderView, so there's no 
        need to put that on the LayoutState.

        The right offset used to layout the inlines inside a RenderFlowThread
        is now adjusted to fit inside the current region.

        Reviewed by David Hyatt.

        Tests: fast/regions/webkit-flow-floats-inside-regions-bounds.html
               fast/regions/webkit-flow-inlines-inside-regions-bounds-vertical-rl.html
               fast/regions/webkit-flow-inlines-inside-regions-bounds-vertical.html
               fast/regions/webkit-flow-inlines-inside-regions-bounds.html

        * rendering/LayoutState.cpp:
        (WebCore::LayoutState::LayoutState):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutBlock):
        (WebCore::RenderBlock::adjustForRegionFittingIfNeeded):
        (WebCore::RenderBlock::logicalRightOffsetForLine):
        * rendering/RenderBlock.h:
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::RenderFlowThread):
        (WebCore::CurrentRenderFlowThreadMaintainer::CurrentRenderFlowThreadMaintainer):
        (WebCore::CurrentRenderFlowThreadMaintainer::~CurrentRenderFlowThreadMaintainer):
        (WebCore::RenderFlowThread::layout):
        (WebCore::RenderFlowThread::renderRegionForLine):
        (WebCore::RenderFlowThread::regionLogicalWidthForLine):
        * rendering/RenderFlowThread.h:
        (WebCore::RegionFittingDisabler::RegionFittingDisabler):
        (WebCore::RegionFittingDisabler::~RegionFittingDisabler):
        * rendering/RenderRegion.cpp:
        (WebCore::RenderRegion::layout):
        * rendering/RenderRegion.h:
        * rendering/RenderView.cpp:
        (WebCore::RenderView::RenderView):
        * rendering/RenderView.h:
        (WebCore::RenderView::hasRenderFlowThread):
        (WebCore::RenderView::currentRenderFlowThread):
        (WebCore::RenderView::setCurrentRenderFlowThread):
        (WebCore::RenderView::pushLayoutState):

2011-08-23  Alexandru Chiculita  <achicu@adobe.com>

        Text-indent and floats push the text out of the container box
        https://bugs.webkit.org/show_bug.cgi?id=66662

        Text indent was not propagated when a new float was pushed on the line.
        It was only calculated when the logicalLeft/RightOffsetForLine was called.
        Because of that RenderBlock::LineBreaker::nextLineBreak used a bigger width
        than actually available and made the line render on top of the borders.

        Reviewed by David Hyatt.

        Tests: fast/block/float/floats-and-text-indent-rl.html
               fast/block/float/floats-and-text-indent.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::textIndentOffset):
        (WebCore::RenderBlock::logicalLeftOffsetForLine):
        (WebCore::RenderBlock::logicalRightOffsetForLine):
        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::LineWidth::shrinkAvailableWidthForNewFloatIfNeeded):

2011-08-23  Al Patrick  <apatrick@chromium.org>

        Add shareResources flag to 3D graphics context attributes
        https://bugs.webkit.org/show_bug.cgi?id=66516

        Reviewed by James Robinson.

        * html/canvas/WebGLRenderingContext.cpp:
        (WebCore::WebGLRenderingContext::create):
        * platform/graphics/GraphicsContext3D.h:
        (WebCore::GraphicsContext3D::Attributes::Attributes):
        * platform/graphics/gpu/SharedGraphicsContext3D.cpp:
        (WebCore::SharedGraphicsContext3D::create):

2011-08-23  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r93616.
        http://trac.webkit.org/changeset/93616
        https://bugs.webkit.org/show_bug.cgi?id=66796

        "causes fast/css/absolute-child-with-percent-height-inside-
        relative-parent.html to fail" (Requested by mwenge2 on
        #webkit).

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::adjustPositionedBlock):
        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::computeInlineDirectionPositionsForLine):
        (WebCore::setStaticPositions):
        (WebCore::RenderBlock::LineBreaker::nextLineBreak):

2011-07-25  Robert Hogan  <robert@webkit.org>

        div align="center" rendering problem
        https://bugs.webkit.org/show_bug.cgi?id=4860

        Reviewed by David Hyatt.

        Tests: fast/inline/absolute-positioned-block-in-centred-block.html
               fast/inline/absolute-positioned-inline-in-centred-block.html

        When an element with absolute position was the sole or first child of a render block with
        centred alignment, it wasn't obeying its parent's alignment. However it would obey the
        alignment if it was preceded by some text. The problem was that the element's render object
        was getting skipped as leading white space, so it was not included in a normal line block in
        a bidi run. Instead, its position was getting set by RenderBlockLineLayout::setStaticPositions()
        which does not pay attention to alignment. Preceding the element with some text allowed the object
        to get included in a Bidi run and so get a linebox which would get properly aligned.

        The fix is to get RenderBlockLineLayout::setStaticPositions() to obey the alignment specified by
        the object's container. This allows WebKit to get the same result on the test as Firefox and IE.
        Opera has the same bug as unpatched WebKit.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::adjustPositionedBlock): use startAlignedOffsetForBlock
        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::updateLogicalWidthForAlignment):
        (WebCore::RenderBlock::computeInlineDirectionPositionsForLine): Move the alignment check to updateLogicalWidthForAlignment.
        (WebCore::setStaticPositions): use startAlignedOffsetForLine and use startAlignedOffsetForBlock
        (WebCore::RenderBlock::LineBreaker::nextLineBreak): use startAlignedOffsetForLine
        (WebCore::RenderBlock::startAlignedOffsetForBlock): New function, find the aligned offset using updateLogicalWidthForAlignment
        (WebCore::RenderBlock::startAlignedOffsetForLine): ditto

        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::updateLogicalWidthForAlignment):
        (WebCore::RenderBlock::computeInlineDirectionPositionsForLine): Move the alignment check to updateLogicalWidthForAlignment.
        (WebCore::setStaticPositions): use startAlignedOffsetForLine.
        (WebCore::RenderBlock::startAlignedOffsetForLine): New function, find the aligned offset using updateLogicalWidthForAlignment

2011-08-23  Adrienne Walker  <enne@google.com>

        [chromium] Remove LayerRendererChromium references from TiledLayerChromium
        https://bugs.webkit.org/show_bug.cgi?id=66433

        Reviewed by James Robinson.

        Covered by existing tests.

        Updated TiledLayerChromium and the texture updater classes to not
        access LayerRendererChromium or cache GraphicsContext3D. Some settings
        like max texture size were moved from LayerRendererChromium to
        CCLayerTreeHost in order to facilitate this refactoring.

        LayerTextureUpdaterSkPicture has been #ifdef'd to only work when the
        compositor is not threaded. It will need to be refactored more in
        order to not own graphics resources from the main thread.

        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::paintContentsIfDirty):
        (WebCore::ContentLayerChromium::createTextureUpdater):
        * platform/graphics/chromium/ContentLayerChromium.h:
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerTextureUpdater::create):
        (WebCore::ImageLayerTextureUpdater::updateTextureRect):
        (WebCore::ImageLayerTextureUpdater::ImageLayerTextureUpdater):
        (WebCore::ImageLayerChromium::paintContentsIfDirty):
        (WebCore::ImageLayerChromium::createTextureUpdater):
        * platform/graphics/chromium/ImageLayerChromium.h:
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::setLayerRenderer):
        (WebCore::LayerChromium::setLayerTreeHost):
        * platform/graphics/chromium/LayerChromium.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/LayerTextureUpdater.h:
        (WebCore::LayerTextureUpdater::LayerTextureUpdater):
        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
        (WebCore::LayerTextureUpdaterCanvas::LayerTextureUpdaterCanvas):
        (WebCore::LayerTextureUpdaterBitmap::create):
        (WebCore::LayerTextureUpdaterBitmap::LayerTextureUpdaterBitmap):
        (WebCore::LayerTextureUpdaterBitmap::updateTextureRect):
        (WebCore::LayerTextureUpdaterSkPicture::create):
        (WebCore::LayerTextureUpdaterSkPicture::LayerTextureUpdaterSkPicture):
        (WebCore::LayerTextureUpdaterSkPicture::updateTextureRect):
        * platform/graphics/chromium/LayerTextureUpdaterCanvas.h:
        (WebCore::LayerTextureUpdaterSkPicture::context):
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::setLayerTreeHost):
        (WebCore::TiledLayerChromium::updateCompositorResources):
        (WebCore::TiledLayerChromium::invalidateRect):
        (WebCore::TiledLayerChromium::prepareToUpdate):
        * platform/graphics/chromium/TiledLayerChromium.h:
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::initialize):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        (WebCore::CCLayerTreeHost::layerRenderer):
        (WebCore::CCLayerTreeHost::contextSupportsMapSub):
        (WebCore::CCLayerTreeHost::maxTextureSize):
        (WebCore::CCLayerTreeHost::bestTextureFormat):

2011-08-23  Julien Chaffraix  <jchaffraix@webkit.org>

        Reduce the amount of RenderLayer rectangles' update when scrolling
        https://bugs.webkit.org/show_bug.cgi?id=66618

        Reviewed by David Hyatt.

        This patch avoids recomputing the RenderLayers rectangles if not needed.

        The current code path for scrolling would update RenderLayers' repaint rectangles
        twice. However we do need to update only children of a fixed element as they are
        the only type of layers that move during a scroll.

        We just change a call to updateLayerPositions for a call to updateLayerPositionsAfterScroll.
        updateLayerPositions being pessimist about the layer's state - because it is called after layout -
        it is missing some optimization that can be done during scrolling.

        Tests: fast/repaint/scroll-absolute-layer-with-reflection.html
               fast/repaint/scroll-fixed-layer-with-reflection.html
               fast/repaint/scroll-fixed-layer-with-transformed-parent-layer.html
               fast/repaint/scroll-fixed-reflected-layer.html
               fast/repaint/scroll-in-clipped-layer.html
               fast/repaint/scroll-in-fixed-layer.html
               fast/repaint/scroll-in-transformed-layer.html
               fast/repaint/scroll-with-transformed-parent-layer.html

        * rendering/RenderLayer.h:
        * page/FrameView.cpp:
        (WebCore::FrameView::repaintFixedElementsAfterScrolling):
        Updated those 2 call sites after updateRepaintRectsAfterScroll renaming.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::updateLayerPositionsAfterScroll): Beefed up the method
        to take care of also updating the layer's position (that sounded like a bug in
        the previous code that is covered by the tests above). Note that we don't care
        if one of our ancestor has a fixed position as we are scrolling *inside* this
        ancestor.

        (WebCore::RenderLayer::scrollTo): Call updateLayerPositionsAfterScroll instead of
        updateLayerPositions.

2011-08-23  Jeffrey Pfau  <jpfau@apple.com>

        New XML parser: pretty XML tree viewer
        https://bugs.webkit.org/show_bug.cgi?id=66489

        Reviewed by Adam Barth.

        * xml/parser/NewXMLDocumentParser.cpp:
        (WebCore::NewXMLDocumentParser::finish):

2011-08-23  Jessie Berlin  <jberlin@apple.com>

        Build fix.

        * inspector/InspectorDOMAgent.h:
        HighlightData is a struct, not a class.

2011-08-23  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: [Extensions API] provide access to page resources
        https://bugs.webkit.org/show_bug.cgi?id=66767

        Reviewed by Pavel Feldman.

        Test: inspector/extensions/extensions-resources.html

        * inspector/front-end/ExtensionAPI.js:
        (WebInspector.injectedExtensionAPI.EventSinkImpl.prototype.addListener):
        (WebInspector.injectedExtensionAPI):
        (WebInspector.injectedExtensionAPI.RequestImpl.prototype.getContent):
        (WebInspector.injectedExtensionAPI.InspectedWindow.resourceDispatch):
        (WebInspector.injectedExtensionAPI.InspectedWindow.resourceContentDispatch):
        (WebInspector.injectedExtensionAPI.InspectedWindow):
        (WebInspector.injectedExtensionAPI.InspectedWindow.prototype.eval):
        (WebInspector.injectedExtensionAPI.InspectedWindow.prototype.getResources):
        (WebInspector.injectedExtensionAPI.InspectedWindow.prototype.getResources.callbackWrapper):
        (WebInspector.injectedExtensionAPI.ResourceImpl.prototype.get url):
        (WebInspector.injectedExtensionAPI.ResourceImpl.prototype.get type):
        (WebInspector.injectedExtensionAPI.ResourceImpl.prototype.getContent):
        (WebInspector.injectedExtensionAPI.ResourceImpl.prototype.setContent):
        * inspector/front-end/ExtensionServer.js:
        (WebInspector.ExtensionServer):
        (WebInspector.ExtensionServer.prototype._notifyResourceAdded):
        (WebInspector.ExtensionServer.prototype.notifyResourceContentCommitted):
        (WebInspector.ExtensionServer.prototype._makeResource):
        (WebInspector.ExtensionServer.prototype._onGetPageResources):
        (WebInspector.ExtensionServer.prototype._getResourceContent):
        (WebInspector.ExtensionServer.prototype._onGetRequestContent):
        (WebInspector.ExtensionServer.prototype._onGetResourceContent):
        (WebInspector.ExtensionServer.prototype._onSetResourceContent):
        (WebInspector.ExtensionServer.prototype.initExtensions):
        * inspector/front-end/Resource.js:
        (WebInspector.Resource.prototype.addRevision):

2011-08-23  Pavel Feldman  <pfeldman@google.com>

        Not reviewed: fixing build. One line drive-by typo fix in the inspector shortcut (Esc -> Backspace).

        * inspector/InspectorDOMAgent.cpp:
        (WebCore::InspectorDOMAgent::highlightFrame):
        * inspector/front-end/treeoutline.js:
        (TreeOutline.prototype._treeKeyDown):

2011-08-23  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: differentiate element highlight colors for margin and padding
        https://bugs.webkit.org/show_bug.cgi?id=37768

        The highlighting WIP API is slightly changed: clients will specify colors for certain elements of the highlighted objects,
        rather than a generic "highlighting mode". This allows to:
        - use entirely custom colors for highlighting (and vary them over time);
        - display any combination of fill/outline for the highlighted area;
        - highlight any combinations of element parts.

        Reviewed by Pavel Feldman.

        * inspector/DOMNodeHighlighter.cpp:
        (WebCore::DOMNodeHighlighter::drawHighlight):
        * inspector/DOMNodeHighlighter.h:
        * inspector/Inspector.json:
        * inspector/InspectorDOMAgent.cpp:
        (WebCore::parseColor):
        (WebCore::parseConfigColor):
        (WebCore::InspectorDOMAgent::~InspectorDOMAgent):
        (WebCore::InspectorDOMAgent::clearFrontend):
        (WebCore::InspectorDOMAgent::highlightedNode):
        (WebCore::InspectorDOMAgent::handleMousePress):
        (WebCore::InspectorDOMAgent::mouseDidMoveOverElement):
        (WebCore::InspectorDOMAgent::setSearchingForNode):
        (WebCore::InspectorDOMAgent::setInspectModeEnabled):
        (WebCore::InspectorDOMAgent::setHighlightDataFromConfig):
        (WebCore::InspectorDOMAgent::highlight):
        (WebCore::InspectorDOMAgent::highlightRect):
        (WebCore::InspectorDOMAgent::highlightNode):
        (WebCore::InspectorDOMAgent::highlightFrame):
        (WebCore::InspectorDOMAgent::hideHighlight):
        (WebCore::InspectorDOMAgent::drawHighlight):
        * inspector/InspectorDOMAgent.h:
        * inspector/front-end/Color.js:
        (WebInspector.Color.fromRGBA):
        (WebInspector.Color.prototype.toProtocolRGBA):
        * inspector/front-end/ElementsPanel.js:
        (WebInspector.ElementsPanel.prototype.setSearchingForNode):
        * inspector/front-end/MetricsSidebarPane.js:
        (WebInspector.MetricsSidebarPane.prototype._highlightDOMNode.handleMouseOver):
        (WebInspector.MetricsSidebarPane.prototype._highlightDOMNode.handleMouseOut):
        (WebInspector.MetricsSidebarPane.prototype._highlightDOMNode):
        * inspector/front-end/ResourcesPanel.js:
        (WebInspector.FrameTreeElement.prototype.set hovered):
        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel.prototype._highlightRect):
        * inspector/front-end/inspector.css:
        * inspector/front-end/inspector.js:
        (WebInspector.buildHighlightConfig):
        (WebInspector.highlightDOMNode):

2011-08-23  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r93579.
        http://trac.webkit.org/changeset/93579
        https://bugs.webkit.org/show_bug.cgi?id=66774

        "ASSERTION FAILED: m_purgePreventCount" (Requested by tonyg-cr
        on #webkit).

        * platform/graphics/chromium/FontCacheLinux.cpp:
        (WebCore::FontCache::getFontDataForCharacters):

2011-08-23  Tor Arne Vestbø  <tor.arne.vestbo@nokia.com>

        [Qt] Fix build on Lion

        https://bugs.webkit.org/show_bug.cgi?id=66770

        Reviewed by Andreas Kling.

        We were mistakenly picking up mac/WebCoreSystemInterface.h instead of
        the Qt one, and building on Lion revealed this when a typedef for
        IOSurfaceRef was wrapped in PLATFORM(MAC).

        For now we fix this by including WebCoreSystemInterface using
        brackets, so that we'll pick up the right file based on the
        include paths. This also means exposing a few missing enums
        in our own version of the file, so those were added.

        Lasty, we need to link against the right system interface library
        on Lion.

        * platform/mac/WebVideoFullscreenHUDWindowController.mm:
        * platform/qt/WebCoreSystemInterface.h:

2011-08-23  Steve Block  <steveblock@google.com>

        Remove last occurrences of PLATFORM(ANDROID)
        https://bugs.webkit.org/show_bug.cgi?id=66763

        Reviewed by Tony Gentilcore.

        No new tests, removing dead code only.

        * bindings/v8/V8GCController.cpp:
        (WebCore::V8GCController::checkMemoryUsage):

2011-08-23  Steve Block  <steveblock@google.com>

        Remove Android-specific modifications to non-client-based Geolocation
        https://bugs.webkit.org/show_bug.cgi?id=66759

        Reviewed by Tony Gentilcore.

        No new tests, removing dead code only.

        * page/Geolocation.cpp:
        * page/Geolocation.h:
        * platform/GeolocationService.h:
        * platform/efl/GeolocationServiceEfl.cpp:
        * platform/efl/GeolocationServiceEfl.h:
        * platform/gtk/GeolocationServiceGtk.cpp:
        * platform/gtk/GeolocationServiceGtk.h:

2011-08-19  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: switch to using BreakpointManager.
        https://bugs.webkit.org/show_bug.cgi?id=66225

        Reviewed by Pavel Feldman.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype._addScript.didCreateSourceMapping):
        (WebInspector.DebuggerPresentationModel.prototype._addScript):
        (WebInspector.DebuggerPresentationModel.prototype.setFormatSourceFiles):
        (WebInspector.DebuggerPresentationModel.prototype.breakpointsForSourceFileId):
        (WebInspector.DebuggerPresentationModel.prototype.setBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.setBreakpointEnabled):
        (WebInspector.DebuggerPresentationModel.prototype.updateBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.removeBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype.findBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointRemoved):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerReset):
        (WebInspector.PresentationBreakpoint.prototype.loadSnippet):
        * inspector/front-end/SourceFile.js:
        (WebInspector.RawSourceCode):

2011-08-23  Steve Block  <steveblock@google.com>

        Remove all mention of removed Android files from build scripts
        https://bugs.webkit.org/show_bug.cgi?id=66755

        Reviewed by Tony Gentilcore.

        No new tests, removing dead code only.

        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * gyp/WebCore.gyp:

2011-08-23  Mikhail Naganov  <mnaganov@chromium.org>

        Web Inspector: [Chromium] Fix handling of aggregate names in profiler.
        https://bugs.webkit.org/show_bug.cgi?id=66753

        Reviewed by Pavel Feldman.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype._buildAggregates):

2011-08-23  Adam Barth  <abarth@webkit.org>

        Remove WebCore/editing/android and other Android-specific directories
        https://bugs.webkit.org/show_bug.cgi?id=66739

        Reviewed by Steve Block.

        Now that Android shares more code with Chromium, we don't need these
        Android-specific files.

        * editing/android: Removed.
        * editing/android/EditorAndroid.cpp: Removed.
        * history/android: Removed.
        * history/android/AndroidWebHistoryBridge.h: Removed.
        * history/android/HistoryItemAndroid.cpp: Removed.
        * page/android: Removed.
        * page/android/DragControllerAndroid.cpp: Removed.
        * page/android/EventHandlerAndroid.cpp: Removed.
        * platform/network/android: Removed.
        * platform/network/android/AuthenticationChallenge.h: Removed.
        * platform/network/android/CookieJarAndroid.cpp: Removed.
        * platform/network/android/ProxyServerAndroid.cpp: Removed.
        * platform/network/android/ResourceError.h: Removed.
        * platform/network/android/ResourceHandleAndroid.cpp: Removed.
        * platform/network/android/ResourceLoaderAndroid.h: Removed.
        * platform/network/android/ResourceRequest.h: Removed.
        * platform/network/android/ResourceRequestAndroid.cpp: Removed.
        * platform/network/android/ResourceResponse.h: Removed.
        * platform/text/android: Removed.
        * platform/text/android/HyphenationAndroid.cpp: Removed.
        * platform/text/android/TextBreakIteratorInternalICU.cpp: Removed.

2011-08-23  Adam Barth  <abarth@webkit.org>

        Remove WebCore/platform/android
        https://bugs.webkit.org/show_bug.cgi?id=66734

        Reviewed by Steve Block.

        This directory is not needed now that Android shares more code with
        Chromium.

        * platform/android: Removed.
        * platform/android/ClipboardAndroid.cpp: Removed.
        * platform/android/ClipboardAndroid.h: Removed.
        * platform/android/CursorAndroid.cpp: Removed.
        * platform/android/DragDataAndroid.cpp: Removed.
        * platform/android/EventLoopAndroid.cpp: Removed.
        * platform/android/FileSystemAndroid.cpp: Removed.
        * platform/android/GeolocationServiceAndroid.cpp: Removed.
        * platform/android/GeolocationServiceAndroid.h: Removed.
        * platform/android/GeolocationServiceBridge.cpp: Removed.
        * platform/android/GeolocationServiceBridge.h: Removed.
        * platform/android/KeyEventAndroid.cpp: Removed.
        * platform/android/LanguageAndroid.cpp: Removed.
        * platform/android/LocalizedStringsAndroid.cpp: Removed.
        * platform/android/PlatformBridge.h: Removed.
        * platform/android/PlatformTouchEventAndroid.cpp: Removed.
        * platform/android/PlatformTouchPointAndroid.cpp: Removed.
        * platform/android/PopupMenuAndroid.cpp: Removed.
        * platform/android/RenderThemeAndroid.cpp: Removed.
        * platform/android/RenderThemeAndroid.h: Removed.
        * platform/android/SSLKeyGeneratorAndroid.cpp: Removed.
        * platform/android/ScreenAndroid.cpp: Removed.
        * platform/android/ScrollViewAndroid.cpp: Removed.
        * platform/android/SearchPopupMenuAndroid.cpp: Removed.
        * platform/android/SharedTimerAndroid.cpp: Removed.
        * platform/android/SoundAndroid.cpp: Removed.
        * platform/android/SystemTimeAndroid.cpp: Removed.
        * platform/android/TemporaryLinkStubs.cpp: Removed.
        * platform/android/WidgetAndroid.cpp: Removed.

2011-08-23  Pavel Feldman  <pfeldman@google.com>

        Not reviewed. Adding a file that slipped from r93586.

        * inspector/generate-protocol-externs: Added.

2011-08-22  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: generate protocol externs API for the front-end compilation.
        https://bugs.webkit.org/show_bug.cgi?id=66677

        Reviewed by Tony Gentilcore.

        * inspector/Inspector.json:
        * inspector/InspectorDOMAgent.cpp:
        (WebCore::InspectorDOMAgent::setAttributesText):
        * inspector/InspectorDOMAgent.h:
        * inspector/InspectorDebuggerAgent.cpp:
        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):
        * inspector/InspectorDebuggerAgent.h:
        * inspector/compile-front-end.sh: Added.
        * inspector/front-end/DOMAgent.js:
        (WebInspector.DOMNode.prototype.setAttribute):
        * inspector/front-end/DebuggerModel.js:
        (WebInspector.DebuggerModel.prototype.setBreakpoint):
        * inspector/front-end/externs.js: Added.
        (console.warn):

2011-08-22  Pavel Feldman  <pfeldman@google.com>

        Web Inspector: Prepare utilities.js for compilation.
        https://bugs.webkit.org/show_bug.cgi?id=66656

        Removes "this" usage in functions, does not define getters for offsets.

        Reviewed by Tony Gentilcore.

        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleMessage.prototype._format):
        (WebInspector.ConsoleMessage.prototype._formatWithSubstitutionString.valueFormatter):
        * inspector/front-end/DOMAgent.js:
        (WebInspector.DOMNode.prototype.appropriateSelectorFor):
        (WebInspector.DOMNode.prototype.isAncestor):
        (WebInspector.DOMNode.prototype.isDescendant):
        (WebInspector.DOMNode.prototype.isWhitespace):
        * inspector/front-end/DataGrid.js:
        (WebInspector.DataGrid.prototype._resizerDragging):
        (WebInspector.DataGridNode.prototype.isEventWithinDisclosureTriangle):
        * inspector/front-end/Drawer.js:
        (WebInspector.Drawer.prototype.get savedHeight):
        (WebInspector.Drawer.prototype.onResize):
        (WebInspector.Drawer.prototype._startStatusBarDragging):
        (WebInspector.Drawer.prototype._statusBarDragging):
        * inspector/front-end/ElementsPanel.js:
        (WebInspector.ElementsPanel.prototype.updateModifiedNodes):
        (WebInspector.ElementsPanel.prototype.updateBreadcrumb):
        (WebInspector.ElementsPanel.prototype.updateBreadcrumbSizes.crumbsAreSmallerThanContainer):
        * inspector/front-end/ElementsTreeOutline.js:
        (WebInspector.ElementsTreeOutline.prototype.findTreeElement):
        (WebInspector.ElementsTreeOutline.prototype._treeElementFromEvent):
        ():
        * inspector/front-end/RemoteObject.js:
        (WebInspector.RemoteObject):
        * inspector/front-end/ResourceTimingView.js:
        (WebInspector.ResourceTimingView.createTimingTable):
        * inspector/front-end/ResourcesPanel.js:
        (WebInspector.BaseStorageTreeElement.prototype.isEventWithinDisclosureTriangle):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._startSidebarResizeDrag):
        * inspector/front-end/SoftContextMenu.js:
        (.WebInspector.SoftContextMenu.prototype.show):
        * inspector/front-end/Toolbar.js:
        (WebInspector.ToolbarDropdown.prototype.show):
        * inspector/front-end/WatchExpressionsSidebarPane.js:
        (WebInspector.WatchExpressionsSection.prototype._updateHoveredElement):
        * inspector/front-end/inspector.js:
        (Number.secondsToString):
        (Number.bytesToString):
        * inspector/front-end/treeoutline.js:
        (TreeElement.prototype.isEventWithinDisclosureTriangle):
        * inspector/front-end/utilities.js:
        (setupPrototypeUtilities.Element.prototype.totalOffsetLeft):
        (setupPrototypeUtilities.Element.prototype.totalOffsetTop):
        (setupPrototypeUtilities.Element.prototype.offsetRelativeToWindow):
        (setupPrototypeUtilities):
        (setupPrototypeUtilities.):
        ():

2011-08-22  John Bates  <jbates@google.com>

        Implemented skia support for caching resizes of cropped images.
        https://bugs.webkit.org/show_bug.cgi?id=65587

        Reviewed by Darin Fisher.

        Previously, resizes of cropped images would not be cached. This causes various websites to have janky CSS animations in software compositing mode.

        * platform/graphics/skia/ImageSkia.cpp:
        (WebCore::drawResampledBitmap): Changed to use new APIs for subset caching.
        (WebCore::Image::drawPattern): Added allowCaching parameter.
        * platform/graphics/skia/NativeImageSkia.cpp:
        (WebCore::NativeImageSkia::NativeImageSkia):
        (WebCore::NativeImageSkia::CachedImageInfo::CachedImageInfo):
        (WebCore::NativeImageSkia::CachedImageInfo::isEqual):
        (WebCore::NativeImageSkia::CachedImageInfo::set):
        (WebCore::NativeImageSkia::hasResizedBitmap): Changed this method so that it does not modify caching data. Added a second version used for cropped image resizes.
        (WebCore::NativeImageSkia::resizedBitmap): Added parameter to let caller specify whether caching is allowed.
        (WebCore::NativeImageSkia::shouldCacheResampling): Added a second version used for cropped image resizes.
        (WebCore::NativeImageSkia::shouldCacheResamplingInternal): Both shouldCacheResampling methods call down to this for the shared logic.
        * platform/graphics/skia/NativeImageSkia.h: Added CachedImageInfo to uniquely identify the cached or requested image resize operation.

2011-08-22  Tony Gentilcore  <tonyg@chromium.org>

        [chromium] Fonts returned by FontCache::getFontDataForCharacters() are never released
        https://bugs.webkit.org/show_bug.cgi?id=66673

        Reviewed by James Robinson.

        This was fixed for other ports in http://trac.webkit.org/changeset/88260.
        However, it was missed in FontCacheLinux likely due to similar param in the nested call to getCachedFontPlatformData().

        No new tests because no directly observable change in behavior.

        * platform/graphics/chromium/FontCacheLinux.cpp:
        (WebCore::FontCache::getFontDataForCharacters):

2011-08-22  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r93565.
        http://trac.webkit.org/changeset/93565
        https://bugs.webkit.org/show_bug.cgi?id=66745

        Breaks layout tests (Requested by koz2 on #webkit).

        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::ariaLabeledByElements):
        (WebCore::AccessibilityRenderObject::ariaLabeledByAttribute):
        (WebCore::AccessibilityRenderObject::title):
        (WebCore::AccessibilityRenderObject::hasTextAlternative):
        * accessibility/AccessibilityRenderObject.h:

2011-08-22  Alice Boxhall  <aboxhall@chromium.org>

        Range::setEnd(const Position&, ExceptionCode) calls setStart() instead of setEnd()
        https://bugs.webkit.org/show_bug.cgi?id=66638

        Reviewed by Ryosuke Niwa.

        Relevant layout test coming in a future patch (see https://bugs.webkit.org/show_bug.cgi?id=65900)

        * dom/Range.cpp:
        (WebCore::Range::setEnd):

2011-08-22  Adam Barth  <abarth@webkit.org>

        Remove PLATFORM(ANDROID)
        https://bugs.webkit.org/show_bug.cgi?id=66741

        Reviewed by Darin Adler.

        PLATFORM(CHROMIUM) && OS(ANDROID) is the new hotness.  These special
        cases can be removed now that Android shares more code with Chromium.

        * bindings/js/JSDOMWindowBase.cpp:
        (WebCore::JSDOMWindowBase::supportsRichSourceInfo):
        * bindings/v8/ScriptCachedFrameData.cpp:
        * bindings/v8/ScriptCachedFrameData.h:
        * bindings/v8/V8GCController.cpp:
        * bridge/jni/jsc/JavaInstanceJSC.cpp:
        (JavaInstance::invokeMethod):
        * history/HistoryItem.cpp:
        (WebCore::HistoryItem::~HistoryItem):
        (WebCore::HistoryItem::setDocumentState):
        (WebCore::HistoryItem::clearDocumentState):
        (WebCore::HistoryItem::setIsTargetItem):
        (WebCore::HistoryItem::addChildItem):
        (WebCore::HistoryItem::setFormInfoFromRequest):
        * history/HistoryItem.h:
        * loader/cache/CachedFont.cpp:
        * platform/DragImage.h:
        * platform/PlatformTouchEvent.h:
        * platform/PlatformTouchPoint.h:
        (WebCore::PlatformTouchPoint::PlatformTouchPoint):
        * platform/Widget.h:
        * platform/network/NetworkStateNotifier.cpp:
        * platform/network/NetworkStateNotifier.h:
        * platform/network/NetworkingContext.h:
        * platform/network/ResourceHandle.h:
        * platform/network/ResourceHandleInternal.h:
        * platform/network/ResourceRequestBase.cpp:

2011-08-22  Adrienne Walker  <enne@google.com>

        [chromium] Remove compositing assertions about creating layers when painting
        https://bugs.webkit.org/show_bug.cgi?id=66731

        Reviewed by James Robinson.

        The trigger for this assertion would cause a real rendering issue, but
        it is both intermittent and in the wrong place in the codebase to
        catch the source of the problem.

        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::LayerChromium):
        (WebCore::LayerChromium::~LayerChromium):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::updateLayers):
        * platform/graphics/chromium/LayerRendererChromium.h:

2011-08-22  Alexey Proskuryakov  <ap@apple.com>

        showModalDialog does not correctly return the defined returnValue in case domain relaxing is used
        https://bugs.webkit.org/show_bug.cgi?id=53191
        <rdar://problem/8629478>

        Reviewed by Geoff Garen.

        Cannot test domain relaxing, we only have 127.0.0.1 and localhost.

        * bindings/js/JSDOMWindowCustom.cpp: (WebCore::JSDOMWindow::getOwnPropertySlot):
        Added a FIXME about a difference with Firefox.

        (WebCore::DialogHandler::DialogHandler):
        (WebCore::DialogHandler::dialogCreated):
        (WebCore::DialogHandler::returnValue):
        Changed to fetch returnValue from the global object that's in the frame when the dialog is
        dismissed. A dialog can navigate itself, and it also creates a new JSDOMWindow on first load
        if the origin doesn't match opener origin (which the case with domain relaxing).
        Re-added a security check for returnValue that got lost in r73829, so that we don't send the
        result across origins. This matches Firefox.

        * bindings/js/JSDOMWindowShell.cpp: (WebCore::JSDOMWindowShell::setWindow): Added an assertion
        against a very confusing case that should no longer occur.

        * page/Frame.cpp: (WebCore::Frame::pageDestroyed): Don't clear the window shell, it doesn't
        seem necessary, but prevents DialogHandler from fetching the return value. Added a keepAlive
        call to avoid changing life support timer behavior in this patch.

2011-08-22  Alice Boxhall  <aboxhall@chromium.org>

        Reviewed by Chris Fleizach.

        aria-labelledby should be used in preference to aria-labeledby
        https://bugs.webkit.org/show_bug.cgi?id=62351

        Test: accessibility/aria-labelledby-overrides-aria-labeledby.html

        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::ariaLabelledByElements): Renamed from ariaLabeledByElements.
        (WebCore::AccessibilityRenderObject::ariaLabelledByAttribute): Renamed from ariaLabeledByAttribute,
        and re-ordered to prefer the standard spelling.
        (WebCore::AccessibilityRenderObject::title):
        (WebCore::AccessibilityRenderObject::hasTextAlternative):
        * accessibility/AccessibilityRenderObject.h:

2011-08-22  Nat Duca  <nduca@chromium.org>

        Make GraphicsContext3D::isResourceSafe a function and, on Chromium, determine its value lazily
        https://bugs.webkit.org/show_bug.cgi?id=66708

        Reviewed by Kenneth Russell.

        * platform/graphics/GraphicsContext3D.cpp:
        (WebCore::GraphicsContext3D::texImage2DResourceSafe):
        * platform/graphics/GraphicsContext3D.h:
        * platform/graphics/gtk/GraphicsContext3DGtk.cpp:
        (WebCore::GraphicsContext3D::GraphicsContext3D):
        * platform/graphics/mac/GraphicsContext3DMac.mm:
        (WebCore::GraphicsContext3D::GraphicsContext3D):
        * platform/graphics/opengl/GraphicsContext3DOpenGL.cpp:
        (WebCore::GraphicsContext3D::isResourceSafe):
        * platform/graphics/qt/GraphicsContext3DQt.cpp:
        (WebCore::GraphicsContext3D::GraphicsContext3D):

2011-08-22  Adam Barth  <abarth@webkit.org>

        HTMLSourceTracker crashes when network packets break poorly
        https://bugs.webkit.org/show_bug.cgi?id=66728

        Reviewed by Darin Adler.

        If there is a network packet boundary in the middle of an attribute
        that begins with the letters "on", then the HTMLSourceTracker will get
        confused and try to extract too many characters from future input.  If
        the future input is small enough, that will walk off the end of the
        input and crash.

        Test: http/tests/security/xssAuditor/crash-while-loading-tag-with-pause.html

        * html/parser/HTMLSourceTracker.cpp:
        (WebCore::HTMLSourceTracker::sourceForToken):

2011-08-22  Eric Seidel  <eric@webkit.org>

        Attempt to clean up bidiNext usage
        https://bugs.webkit.org/show_bug.cgi?id=66721

        Reviewed by Ryosuke Niwa.

        bidiNext and bidiFirst are horribly confusing.
        Even worse is that bidiNext takes a bunch of mutually exclusive options.
        It appears that there is a "return me every inline, even if its empty"
        mode which is only used for simplified inline layout in RenderBlock.cpp.
        To support that mode, there is a endOfInline pointer which keeps track
        of if we just returned at the end of an inline to so we don't get stuck in
        and empty inline (unable to distinguish the start from the finish).

        The actual bidi/line-layout code uses bidiNext/bidiFirst in a "skip empty inlines"
        mode.  (Since empty inlines do not participate in the Unicode Bidi Algorithm.)

        This change renames bidiNext to bidiNextShared (still a horrible name) and moves
        all callers to explicitly calling bidiNextSkippingEmptyInlines or bidiNextIncludingEmptyInlines.
        It becomes obvious which code uses which.

        In reviewing this code be aware that the previous bidiNext default was to "skip empty inlines" (skipInlines = true).
        Thus any caller who didn't pass true/false should now be calling bidiNextSkippingEmptyInlines instead.

        No functional change, thus no tests.

        * rendering/InlineIterator.h:
        (WebCore::bidiNextShared):
        (WebCore::bidiNextSkippingEmptyInlines):
        (WebCore::bidiNextIncludingEmptyInlines):
        (WebCore::bidiFirstSkippingEmptyInlines):
        (WebCore::bidiFirstIncludingEmptyInlines):
        (WebCore::InlineWalker::InlineWalker):
        (WebCore::InlineWalker::advance):
        (WebCore::InlineIterator::increment):
        (WebCore::InlineBidiResolver::appendRun):
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::determineStartPosition):
        (WebCore::shouldSkipWhitespaceAfterStartObject):
        (WebCore::RenderBlock::LineBreaker::nextLineBreak):

2011-08-22  David Levin  <levin@chromium.org>

        Fix usage of PassRefPtr in postMessage and structured clone code.
        https://bugs.webkit.org/show_bug.cgi?id=66725

        Reviewed by Darin Adler.

        No new functionality exposed so no new tests.

        * bindings/js/JSDOMWindowCustom.cpp:
        (WebCore::JSDOMWindow::postMessage): Changed PassRefPtr to RefPtr and added release when handed off.
        * bindings/js/JSMessageEventCustom.cpp:
        (WebCore::JSMessageEvent::initMessageEvent): Ditto.
        * bindings/js/JSMessagePortCustom.h:
        (WebCore::handlePostMessage): Ditto.
        * bindings/js/SerializedScriptValue.cpp:
        (WebCore::SerializedScriptValue::create): Ditto.
        * workers/SharedWorkerContext.cpp:
        (WebCore::createConnectEvent): Added release() when a RefPtr is returned.

2011-08-22  Luke Macpherson   <macpherson@chromium.org>

        Implement cast between CSSPrimitiveValue and EBackfaceVisibility, use in CSSStyleSelector::applyProperty.
        https://bugs.webkit.org/show_bug.cgi?id=66648

        Reviewed by Dan Bernstein.

        No new tests / no functionality changed.

        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        Support cast from EBackfaceVisibility.
        (WebCore::CSSPrimitiveValue::operator EBackfaceVisibility):
        Support cast from EBackfaceVisibility.
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        Use HANDLE_INHERIT_AND_INITIAL_AND_PRIMITIVE macro.

2011-08-22  Peter Kasting  <pkasting@google.com>

        Unreviewed, rolling out r93538.
        http://trac.webkit.org/changeset/93538
        https://bugs.webkit.org/show_bug.cgi?id=66143

        Broke Leopard, SnowLeopard, and Chromium Mac bots

        * rendering/LayoutState.cpp:
        (WebCore::LayoutState::LayoutState):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutBlock):
        (WebCore::RenderBlock::logicalRightOffsetForLine):
        * rendering/RenderBlock.h:
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::RenderFlowThread):
        (WebCore::RenderFlowThread::layout):
        (WebCore::RenderFlowThread::repaintRectangleInRegions):
        * rendering/RenderFlowThread.h:
        * rendering/RenderRegion.cpp:
        * rendering/RenderRegion.h:
        * rendering/RenderView.cpp:
        (WebCore::RenderView::RenderView):
        * rendering/RenderView.h:
        (WebCore::RenderView::pushLayoutState):

2011-08-22  Tony Chang  <tony@chromium.org>

        Add CSS parsing of -webkit-flex-pack
        https://bugs.webkit.org/show_bug.cgi?id=66701

        Reviewed by Eric Seidel.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        (WebCore::CSSPrimitiveValue::operator EFlexPack):
        * css/CSSPropertyNames.in:
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        * rendering/style/RenderStyle.h:
        (WebCore::InheritedFlags::flexPack):
        (WebCore::InheritedFlags::setFlexPack):
        (WebCore::InheritedFlags::initialFlexPack):
        * rendering/style/RenderStyleConstants.h:
        * rendering/style/StyleFlexibleBoxData.cpp:
        (WebCore::StyleFlexibleBoxData::StyleFlexibleBoxData):
        (WebCore::StyleFlexibleBoxData::operator==):
        * rendering/style/StyleFlexibleBoxData.h:

2011-08-22  Tony Chang  <tony@chromium.org>

        handle child margin values when flexing
        https://bugs.webkit.org/show_bug.cgi?id=65887

        Reviewed by David Hyatt.

        Test: css3/flexbox/002.html

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::computeLogicalWidth):
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutHorizontalBlock):
        (WebCore::RenderFlexibleBox::computePreferredSize): If the margin is
            auto, treat it as flex(1 0 0).
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::isFlexibleBoxIncludingDeprecated): Added.

2011-08-22  Nat Duca  <nduca@chromium.org>

        [chromium] Make compositor context current before querying for extensions
        https://bugs.webkit.org/show_bug.cgi?id=66696

        Reviewed by James Robinson.

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::initialize):

2011-08-22  Cary Clark  <caryclark@google.com>

        Webkit Mac10.6 Builder-Tester (Skia)(deps)(dbg) has compile failures
        https://bugs.webkit.org/show_bug.cgi?id=66703

        This error was detected by the debug build of the Chromium WebKit
        Canary.

        Reviewed by James Robinson.

        No new tests. This change suppresses a compile-time warning
        but does not affect the generated code. 

        * platform/graphics/mac/FontCustomPlatformData.h:
        Replaced struct with class in a forward reference.

2011-08-22  Alexandru Chiculita  <achicu@adobe.com>

        [CSSRegions] RenderFlowThread layout should use the attached region sizes
        https://bugs.webkit.org/show_bug.cgi?id=66143

        When RenderFlowThread is doing the layout it also sets the current RenderFlowThread on
        the RenderView. RenderFlowThread cannot be nested inside a single RenderView, so there's no 
        need to put that on the LayoutState.

        The right offset used to layout the inlines inside a RenderFlowThread
        is now adjusted to fit inside the current region.

        Reviewed by David Hyatt.

        Tests: fast/regions/webkit-flow-floats-inside-regions-bounds.html
               fast/regions/webkit-flow-inlines-inside-regions-bounds-vertical-lr.html
               fast/regions/webkit-flow-inlines-inside-regions-bounds.html

        * rendering/LayoutState.cpp:
        (WebCore::LayoutState::LayoutState):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutBlock):
        (WebCore::RenderBlock::adjustForRegionFittingIfNeeded):
        (WebCore::RenderBlock::logicalRightOffsetForLine):
        * rendering/RenderBlock.h:
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::RenderFlowThread):
        (WebCore::CurrentRenderFlowThreadMaintainer::CurrentRenderFlowThreadMaintainer):
        (WebCore::CurrentRenderFlowThreadMaintainer::~CurrentRenderFlowThreadMaintainer):
        (WebCore::RenderFlowThread::layout):
        (WebCore::RenderFlowThread::renderRegionForLine):
        (WebCore::RenderFlowThread::regionLogicalWidthForLine):
        * rendering/RenderFlowThread.h:
        (WebCore::RegionFittingDisabler::RegionFittingDisabler):
        (WebCore::RegionFittingDisabler::~RegionFittingDisabler):
        * rendering/RenderRegion.cpp:
        (WebCore::RenderRegion::layout):
        * rendering/RenderRegion.h:
        * rendering/RenderView.cpp:
        (WebCore::RenderView::RenderView):
        * rendering/RenderView.h:
        (WebCore::RenderView::hasRenderFlowThread):
        (WebCore::RenderView::currentRenderFlowThread):
        (WebCore::RenderView::setCurrentRenderFlowThread):
        (WebCore::RenderView::pushLayoutState):

2011-08-22  Peter Kasting  <pkasting@google.com>

        Unreviewed, rolling out r93517.
        http://trac.webkit.org/changeset/93517
        https://bugs.webkit.org/show_bug.cgi?id=63553

        Breaks GTK Linux and Chromium Win

        * svg/animation/SVGSMILElement.cpp:
        (WebCore::SVGSMILElement::calculateAnimationPercentAndRepeat):

2011-08-22  Wyatt Carss  <wcarss@chromium.org>

        FrameSelection::setNonDirectionalSelectionIfNeeded should not have a FrameSelection passed to it
        https://bugs.webkit.org/show_bug.cgi?id=66636

        Reviewed by Darin Adler.

        setNonDirectionalSelection was moved into FrameSelection in r93134 for 
        bug 60529, and still took a FrameSelection as an argument, which has been removed.

        * editing