Implement a PageTransitionEvent constructor for JSC
[WebKit-https.git] / Source / WebCore / ChangeLog
index 4ab0c7e..e6fd871 100644 (file)
@@ -1,3 +1,668 @@
+2011-09-14  Kentaro Hara  <haraken@google.com>
+
+        Implement a PageTransitionEvent constructor for JSC
+        https://bugs.webkit.org/show_bug.cgi?id=68048
+
+        Reviewed by Sam Weinig.
+
+        The spec for the PageTransitionEvent constructor is here:
+        http://www.whatwg.org/specs/web-apps/current-work/#pagetransitionevent
+
+        Test: fast/events/constructors/page-transition-event-constructor.html
+
+        * bindings/generic/EventConstructors.h: Added a definition for the PageTransitionEvent constructor.
+        * bindings/js/JSEventConstructors.cpp: Added #includes for PageTransitionEvent.
+        * dom/PageTransitionEvent.cpp:
+        (WebCore::PageTransitionEventInit::PageTransitionEventInit):
+        (WebCore::PageTransitionEvent::PageTransitionEvent):
+        (WebCore::PageTransitionEvent::initPageTransitionEvent):
+        * dom/PageTransitionEvent.h: Added a definition for PageTransitionEventInit.
+        (WebCore::PageTransitionEvent::create):
+        (WebCore::PageTransitionEvent::isPageTransitionEvent):
+        (WebCore::PageTransitionEvent::persisted):
+        * dom/PageTransitionEvent.idl: Makes PageTransitionEvent constructible.
+
+2011-09-13  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r95058.
+        http://trac.webkit.org/changeset/95058
+        https://bugs.webkit.org/show_bug.cgi?id=68058
+
+        It made css3/calc/regression-62276.html crash (Requested by
+        Ossy on #webkit).
+
+        * css/CSSParser.cpp:
+        (WebCore::BorderImageParseContext::BorderImageParseContext):
+        (WebCore::BorderImageParseContext::allowBreak):
+        (WebCore::BorderImageParseContext::allowWidth):
+        (WebCore::BorderImageParseContext::allowOutset):
+        (WebCore::BorderImageParseContext::allowRepeat):
+        (WebCore::BorderImageParseContext::commitImage):
+        (WebCore::BorderImageParseContext::commitImageSlice):
+        (WebCore::BorderImageParseContext::commitSlash):
+        (WebCore::BorderImageParseContext::commitBorderWidth):
+        (WebCore::BorderImageParseContext::commitBorderOutset):
+        (WebCore::BorderImageParseContext::commitRepeat):
+        (WebCore::CSSParser::parseBorderImage):
+        (WebCore::CSSParser::parseBorderImageRepeat):
+        (WebCore::CSSParser::parseBorderImageSlice):
+        (WebCore::CSSParser::parseBorderImageQuad):
+        * css/CSSParserValues.h:
+
+2011-09-13  Abhishek Arya  <inferno@chromium.org>
+
+        Crash in RenderScrollbarPart::imageChanged.
+        https://bugs.webkit.org/show_bug.cgi?id=68009
+
+        Reviewed by Simon Fraser.
+
+        When a custom scrollbar is removed from its FrameView, its destruction
+        can be delayed because of RefPtr maintained in EventHandler class
+        (m_lastScrollbarUnderMouse). Upon removal, we delete all the scrollbar
+        parts so that they don't link back to scrollbar. However, because of the
+        delay, we can have a call to updateScrollbarPart which recreates it.
+        When scrollbar is getting destroyed, we just check to see if there are
+        remaining scrollbar parts and if yes, we destroy them.
+
+        Test: scrollbars/scrollbar-part-created-with-no-parent-crash.html
+
+        * rendering/RenderScrollbar.cpp:
+        (WebCore::RenderScrollbar::~RenderScrollbar):
+
+2011-09-13  Adam Klein  <adamk@chromium.org>
+
+        Fix cssText property of counter-valued CSSPrimitiveValue and avoid uninitialized read
+        https://bugs.webkit.org/show_bug.cgi?id=68021
+
+        Reviewed by Tony Chang.
+
+        Reported by valgrind in http://crbug.com/60653.
+
+        Besides fixing the uninitialized read, add support for outputting the
+        list separator for counters() calls and the list-style name.
+
+        Test: fast/css/counters/counter-cssText.html
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::cssText):
+
+2011-09-13  Kenichi Ishibashi  <bashi@chromium.org>
+
+        WebFont followed tiny monospace text displays weird
+        https://bugs.webkit.org/show_bug.cgi?id=67996
+
+        Reviewed by Darin Adler.
+
+        Always call wkSetCGFontRenderingMode() in Font::drawGlyphs() so that the rendering mode is set correctly.
+
+        Test: platform/mac/fast/text/webfont-after-tiny-monospace-text.html
+
+        * platform/graphics/mac/FontMac.mm:
+        (WebCore::Font::drawGlyphs):
+
+2011-09-13  Tom Sepez  <tsepez@chromium.org>
+
+        Fix XSS auditor bypass when inline handlers contain comments.
+        https://bugs.webkit.org/show_bug.cgi?id=27895
+
+        Reviewed by Adam Barth.
+
+        Tests: http/tests/security/xssAuditor/property-escape-comment.html
+               http/tests/security/xssAuditor/property-escape-entity.html
+               http/tests/security/xssAuditor/property-escape-quote.html
+
+        * html/parser/XSSAuditor.cpp:
+        (WebCore::XSSAuditor::snippetForAttribute):
+
+2011-09-13  Kentaro Hara  <haraken@google.com>
+
+        Implement a HashChangeEvent constructor for V8
+        https://bugs.webkit.org/show_bug.cgi?id=67969
+
+        Reviewed by Nate Chapin.
+
+        Test: fast/events/constructors/hash-change-event-constructor.html
+
+        * bindings/v8/custom/V8EventConstructors.cpp: Added the HashChangeEvent constructor.
+        * dom/HashChangeEvent.idl: Added a 'V8CustomConstructor' attribute.
+
+2011-09-13  Jeremy Apthorp  <jeremya@google.com>
+
+        Fix crash when an iframe element is removed during a transition to
+        fullscreen.
+        https://bugs.webkit.org/show_bug.cgi?id=67960
+
+        Reviewed by Adam Barth.
+
+        Test: fullscreen/full-screen-remove-ancestor-during-transition.html
+
+        * dom/Document.cpp:
+        (WebCore::Document::~Document):
+        Clear the list of elements to which we need to send a fullscreenchange
+        event.
+
+2011-09-13  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=68040
+        
+        Make sure border image sub-properties can be specified in any order.
+
+        Reviewed by Beth Dakin.
+
+        New tests in fast/borders.
+
+        * css/CSSParser.cpp:
+        (WebCore::BorderImageParseContext::BorderImageParseContext):
+        (WebCore::BorderImageParseContext::canAdvance):
+        (WebCore::BorderImageParseContext::setCanAdvance):
+        (WebCore::BorderImageParseContext::allowCommit):
+        (WebCore::BorderImageParseContext::allowImage):
+        (WebCore::BorderImageParseContext::allowImageSlice):
+        (WebCore::BorderImageParseContext::allowSlash):
+        (WebCore::BorderImageParseContext::requireWidth):
+        (WebCore::BorderImageParseContext::requireOutset):
+        (WebCore::BorderImageParseContext::commitImage):
+        (WebCore::BorderImageParseContext::commitImageSlice):
+        (WebCore::BorderImageParseContext::commitSlash):
+        (WebCore::BorderImageParseContext::commitBorderWidth):
+        (WebCore::BorderImageParseContext::commitBorderOutset):
+        (WebCore::BorderImageParseContext::commitRepeat):
+        (WebCore::CSSParser::parseBorderImage):
+        (WebCore::CSSParser::parseBorderImageRepeat):
+        (WebCore::CSSParser::parseBorderImageSlice):
+        (WebCore::CSSParser::parseBorderImageQuad):
+        * css/CSSParserValues.h:
+        (WebCore::CSSParserValueList::previous):
+
+2011-09-13  Jeff Miller  <jeffm@apple.com>
+
+        WebCore::Cursor::ensurePlatformCursor() should always set a valid platform cursor on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=68043
+        
+        Make sure we set a valid platform cursor in the Cursor::NoDrop case, and add a default
+        clause that uses the arrow cursor in case another cursor type is added in the future
+        and we forget to update ensurePlatformCursor().
+
+        Reviewed by Anders Carlsson.
+
+        * platform/win/CursorWin.cpp:
+        (WebCore::Cursor::ensurePlatformCursor): Always set a valid platform cursor.
+
+2011-09-12  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        MSAA: WebKit reports the document state as disabled
+        https://bugs.webkit.org/show_bug.cgi?id=67974
+        <rdar://problem/10095898>
+
+        Reviewed by Brian Weinstein.
+
+        Test: platform/win/accessibility/document-enabled-state.html
+
+        * accessibility/AccessibilityScrollView.h:
+        (WebCore::AccessibilityScrollView::isEnabled):
+        This object backs the AccessibleDocument on Windows - always return
+        true for its enabled state.
+
+2011-08-11  Cris Neckar  <cdn@chromium.org>
+
+        Fixes several bugs when adding CounterNodes to a tree which can cause asymetrical relationships.
+        https://bugs.webkit.org/show_bug.cgi?id=65996
+
+        Reviewed by Eric Seidel.
+
+        Test: fast/css/counters/counter-reparent-table-children-crash.html
+
+        * rendering/CounterNode.cpp:
+        (WebCore::CounterNode::insertAfter):
+        * rendering/RenderCounter.cpp:
+        (WebCore::findPlaceForCounter):
+        (WebCore::makeCounterNode):
+
+2011-09-13  Beth Dakin  <bdakin@apple.com>
+
+        Adding a comment I forgot to add before.
+
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+
+2011-09-13  Antti Koivisto  <antti@apple.com>
+
+        Move identifier filter from CSSStyleSelector to SelectorChecker
+        https://bugs.webkit.org/show_bug.cgi?id=68025
+
+        Reviewed by Sam Weinig.
+
+        This is a more logical place for this code. It also makes CSSStyleSelector slightly less bloated. 
+        It will make it possible to use fastRejectSelector for querySelectorAll in the future.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::loadViewSourceStyle):
+        (WebCore::CSSStyleSelector::matchRulesForList):
+        (WebCore::RuleData::RuleData):
+        * css/CSSStyleSelector.h:
+        (WebCore::CSSStyleSelector::pushParent):
+        (WebCore::CSSStyleSelector::popParent):
+        * css/SelectorChecker.cpp:
+        (WebCore::collectElementIdentifierHashes):
+        (WebCore::SelectorChecker::pushParentStackFrame):
+        (WebCore::SelectorChecker::popParentStackFrame):
+        (WebCore::SelectorChecker::pushParent):
+        (WebCore::SelectorChecker::popParent):
+        (WebCore::collectDescendantSelectorIdentifierHashes):
+        (WebCore::SelectorChecker::collectIdentifierHashes):
+        * css/SelectorChecker.h:
+        (WebCore::SelectorChecker::parentStackIsConsistent):
+        (WebCore::SelectorChecker::ParentStackFrame::ParentStackFrame):
+        (WebCore::SelectorChecker::fastRejectSelector):
+
+2011-09-13  Kiyoto Tamura  <owenestea@gmail.com>
+
+        For compatibility, execCommand should support deprecated 'useCSS' alias for 'styleWithCSS'
+        https://bugs.webkit.org/show_bug.cgi?id=36683
+
+        Reviewed by Ryosuke Niwa.
+
+        In addition to supporting the deprecated 'useCSS', 'styleWithCSS' now accepts any argument other than
+        the boolean false or the case-insensitive string "false". This is per
+        http://aryeh.name/spec/editing/editing.html#the-stylewithcss-command
+
+        Tests: editing/execCommand/style-with-css.html
+               editing/execCommand/use-css.html
+
+        * editing/EditorCommand.cpp:
+        (WebCore::executeStyleWithCSS):
+        (WebCore::executeUseCSS):
+        (WebCore::createCommandMap):
+
+2011-09-13  Anders Carlsson  <andersca@apple.com>
+
+        Disable C++ exceptions when building with clang
+        https://bugs.webkit.org/show_bug.cgi?id=68031
+        <rdar://problem/9556880>
+
+        Reviewed by Mark Rowe.
+
+        * Configurations/Base.xcconfig:
+
+2011-09-13  Beth Dakin  <bdakin@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67885
+        Outline for the high-resolution broken image icon draws at 2x
+        -and corresponding-
+        <rdar://problem/10104637>
+
+        Reviewed by Dan Bernstein.
+
+        Scaled the image size to account for the deviceScaleFactor. 
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+
+2011-09-13  Tim Horton  <timothy_horton@apple.com>
+
+        REGRESSION (64275): Shape pattern-image fill turns black
+        https://bugs.webkit.org/show_bug.cgi?id=51061
+        <rdar://problem/8504705>
+
+        Reviewed by Simon Fraser.
+
+        When destroying a resource, register clients who are losing their
+        resource as having pending resources, so they can be resolved in the case a
+        resource with that id is re-registered.
+
+        Test: svg/custom/pending-resource-after-removal.xhtml
+
+        * rendering/svg/SVGResourcesCache.cpp:
+        (WebCore::SVGResourcesCache::resourceDestroyed):
+        * svg/SVGStyledElement.h:
+        (WebCore::toSVGStyledElement): Added.
+
+2011-09-13  Eric Seidel  <eric@webkit.org>
+
+        Remove ENABLE_SVG_FOREIGN_OBJECT as it is a required part of HTML5
+        https://bugs.webkit.org/show_bug.cgi?id=68018
+
+        Reviewed by Ryosuke Niwa.
+
+        * Configurations/FeatureDefines.xcconfig:
+        * DerivedSources.make:
+        * GNUmakefile.am:
+        * WebCore.exp.in:
+        * dom/DOMImplementation.cpp:
+        (WebCore::isSVG10Feature):
+        (WebCore::isSVG11Feature):
+        * dom/Text.cpp:
+        (WebCore::Text::createRenderer):
+        * features.pri:
+        * page/DOMWindow.idl:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        * rendering/svg/RenderSVGForeignObject.h:
+        * svg/SVGAnimateMotionElement.cpp:
+        (WebCore::SVGAnimateMotionElement::hasValidAttributeType):
+        * svg/SVGForeignObjectElement.cpp:
+        * svg/SVGForeignObjectElement.h:
+        * svg/SVGForeignObjectElement.idl:
+        * svg/SVGLocatable.cpp:
+        (WebCore::isViewportElement):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::isOutermostSVG):
+        * svg/SVGUseElement.cpp:
+        (WebCore::isDisallowedElement):
+        (WebCore::SVGUseElement::associateInstancesWithShadowTreeElements):
+        * svg/svgtags.in:
+
+2011-09-13  Joseph Pecoraro  <joepeck@webkit.org>
+
+        CRASH under WebCore::ArchiveResourceCollection::addAllResources loading WebArchive
+        https://bugs.webkit.org/show_bug.cgi?id=67983
+
+        Reviewed by Darin Adler.
+
+        Null mimetypes are okay for subresources, but as previously discovered
+        in bug 41082 they were required for main resources. Here we ensure
+        that they are required for main resources, but we allow null mimetypes
+        for subresources.
+
+        To fix a crash for bad input we never add a null ArchiveResource to the
+        Archive's subresource collection. It is useless and causes crashes whenever
+        someone iterates the Archive's subresource collection.
+
+        Test: webarchive/loading/test-loading-archive-subresource-null-mimetype.html
+
+        * loader/archive/cf/LegacyWebArchive.cpp:
+        (WebCore::LegacyWebArchive::createResource):
+        Allow a null mimetype, just type check from the dictionary.
+
+        (WebCore::LegacyWebArchive::extract):
+        Require a mimetype for the main resource. Do not add null
+        subresources to the subresource list.
+
+2011-09-13  Mihai Parparita  <mihaip@chromium.org>
+
+        [Chromium] Remove javascript_engine from WebCore.gyp
+        https://bugs.webkit.org/show_bug.cgi?id=68001
+
+        Reviewed by Tony Chang.
+
+        Remove javascript_engine GYP variable (similar to the removal done on
+        the Chromium side with http://crrev.com/100692)
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-09-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        [CSS3 Backgrounds and Borders] Add unprefixed border-image shorthand.
+        https://bugs.webkit.org/show_bug.cgi?id=67970
+
+        Reviewed by David Hyatt.
+
+        Also update CSSStyleSelector.cpp to support border-image to suppress assertion in
+        fast/borders/border-image-omit-right-slice.html
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::mapNinePieceImage):
+
+2011-09-13  Xianzhu Wang  <wangxianzhu@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        Webkit wraps between hyphen-minus and numeric characters 
+        https://bugs.webkit.org/show_bug.cgi?id=20677
+
+        Disallow wrapping between a hyphen-minus and a digit if the hyphen-minus
+        is not directly after a digit or a letter.
+
+        Test: fast/text/line-breaks-after-hyphen-before-number.html
+
+        * rendering/break_lines.cpp:
+        (WebCore::asciiLineBreakTable): Disabled line-breaking after '-' and before '.', '0'-'9'. Note: the change for '0'-'9' doesn't really matter because the case is handled hard-coded in shouldBreakAfter().
+        (WebCore::shouldBreakAfter): Changed line-breaking behavior after '-'.
+        (WebCore::nextBreakablePosition): Passes lastLastCh to shouldBreakAfter. 
+
+2011-09-13  Erik Wright  <erikwright@chromium.org>
+
+        platform/graphics/gtk/FontGtk.cpp was renamed to platform/graphics/pango/FontPango.cpp . Reflect this change in WebCore.gypi to fix a Chromium build breakage.
+        https://bugs.webkit.org/show_bug.cgi?id=68000
+
+        Reviewed by Tony Gentilcore.
+
+        No change in functionality, thus no new tests.
+
+        * WebCore.gypi:
+
+2011-09-10  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: Profiler: Fix overlapping data in function names column.
+        https://bugs.webkit.org/show_bug.cgi?id=67896
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ProfileDataGridTree.js:
+        (WebInspector.ProfileDataGridNode.prototype.createCell):
+        * inspector/front-end/dataGrid.css:
+        (.data-grid table.data):
+        (.data-grid td):
+
+2011-09-13  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r95025.
+        http://trac.webkit.org/changeset/95025
+        https://bugs.webkit.org/show_bug.cgi?id=68005
+
+        Test failed on Snow Leopard bots. (Requested by yutak_home on
+        #webkit).
+
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+
+2011-09-13  Yuta Kitamura  <yutak@chromium.org>
+
+        ThreadableWebSocketChannelClientWrapper shouldn't have a String in it.
+        https://bugs.webkit.org/show_bug.cgi?id=67908
+
+        Reviewed by David Levin.
+
+        Replace a String member variable in ThreadableWebSocketChannelClientWrapper with Vector<UChar>.
+
+        No change in functionality, thus no new tests. WebSocket worker tests
+        (tests under http/tests/websocket/tests/{hixie76,hybi}/workers/) should keep passing.
+
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
+        Create a String from Vector<UChar>.
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
+        Copy the content of the given String into Vector.
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+
+2011-09-13  Fumitoshi Ukai  <ukai@chromium.org>
+
+        Unreviewed, build fix.
+
+        CSSPropertyBorderImage was added in r94989, but not yet added in
+        WebCore::CSSStyleSelector::applyProperty
+
+        CSSStyleSelector.cpp:2481: warning: enumeration value 'CSSPropertyBorderImage' not handled in switch
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-09-12  Shinya Kawanaka  <shinyak@google.com>
+
+        Crashes in WebCore::InsertListCommand::unlistifyParagraph.
+        https://bugs.webkit.org/show_bug.cgi?id=67918
+
+        Reviewed by Ryosuke Niwa.
+
+        execCommand("InsertUnorderedList") was crashing if the parent node of the target is
+        a kind of list element and it is not contenteditable.
+        This patch checks the parent node is contenteditable.
+
+        Test: editing/execCommand/insert-list-in-noneditable-list-parent.html
+
+        * editing/htmlediting.cpp:
+        (WebCore::enclosingListChild): Checks the parent node is contenteditable.
+
+2011-09-12  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r94975.
+        http://trac.webkit.org/changeset/94975
+        https://bugs.webkit.org/show_bug.cgi?id=67984
+
+        crash in PrerenderBrowserTest.PrerenderHTML5VideoJs (Requested
+        by ukai on #webkit).
+
+        * platform/graphics/chromium/CanvasLayerChromium.h:
+        (WebCore::CanvasLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        (WebCore::ContentLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/ImageLayerChromium.h:
+        (WebCore::ImageLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::layerTreeAsText):
+        (WebCore::writeIndent):
+        (WebCore::LayerChromium::dumpLayer):
+        (WebCore::LayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/LayerChromium.h:
+        (WebCore::LayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::textureMemoryReclaimLimit):
+        (WebCore::LayerRendererChromium::create):
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::close):
+        (WebCore::LayerRendererChromium::releaseTextures):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::drawLayersInternal):
+        (WebCore::LayerRendererChromium::getOffscreenLayerTexture):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        (WebCore::LayerRendererChromium::cleanupSharedObjects):
+        (WebCore::LayerRendererChromium::layerTreeAsText):
+        (WebCore::LayerRendererChromium::dumpRenderSurfaces):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        (WebCore::LayerRendererChromium::owner):
+        (WebCore::LayerRendererChromium::rootLayer):
+        (WebCore::LayerRendererChromium::rootLayerImpl):
+        (WebCore::LayerRendererChromium::viewportSize):
+        (WebCore::LayerRendererChromium::contentsTextureManager):
+        * platform/graphics/chromium/ManagedTexture.cpp:
+        (WebCore::ManagedTexture::bindTexture):
+        (WebCore::ManagedTexture::framebufferTexture2D):
+        * platform/graphics/chromium/PluginLayerChromium.h:
+        (WebCore::PluginLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::name):
+        (WebCore::writeIndent):
+        (WebCore::RenderSurfaceChromium::dumpSurface):
+        * platform/graphics/chromium/RenderSurfaceChromium.h:
+        * platform/graphics/chromium/TextureManager.cpp:
+        (WebCore::TextureManager::deleteEvictedTextures):
+        (WebCore::TextureManager::removeTexture):
+        (WebCore::TextureManager::allocateTexture):
+        (WebCore::TextureManager::requestTexture):
+        * platform/graphics/chromium/TextureManager.h:
+        (WebCore::TextureManager::setAssociatedContextDebugOnly):
+        (WebCore::TextureManager::associatedContextDebugOnly):
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::writeIndent):
+        (WebCore::TiledLayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/TiledLayerChromium.h:
+        * platform/graphics/chromium/VideoLayerChromium.h:
+        (WebCore::VideoLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/WebGLLayerChromium.h:
+        (WebCore::WebGLLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
+        (WebCore::CCLayerTreeHost::initialize):
+        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::commitTo):
+        (WebCore::CCLayerTreeHost::didRecreateGraphicsContext):
+        (WebCore::CCLayerTreeHost::setVisible):
+        (WebCore::CCLayerTreeHost::contentsTextureManager):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
+        (WebCore::CCLayerTreeHostImpl::drawLayers):
+        (WebCore::CCLayerTreeHostImpl::setVisible):
+        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
+        * platform/graphics/chromium/cc/CCProxy.h:
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
+        (WebCore::CCSingleThreadProxy::initializeLayerRenderer):
+        (WebCore::CCSingleThreadProxy::stop):
+        (WebCore::CCSingleThreadProxy::contentsTextureManager):
+        (WebCore::CCSingleThreadProxy::recreateContextIfNeeded):
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
+        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
+        (WebCore::CCThreadProxy::initializeLayerRenderer):
+        (WebCore::CCThreadProxy::contentsTextureManager):
+        (WebCore::CCThreadProxy::initializeLayerRendererOnCCThread):
+        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
+        * platform/graphics/chromium/cc/CCThreadProxy.h:
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
+        (WebCore::CCTiledLayerImpl::dumpLayerProperties):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
+
+2011-09-12  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Possible ASSERT(!storageTracker) in Lazily Initialized StorageTracker
+        https://bugs.webkit.org/show_bug.cgi?id=67957
+
+        Reviewed by Darin Adler.
+
+        The storageTracker singleton may already have been created
+        through StorageTracker::tracker before initializeTracker
+        gets called. Update the ASSERT in this case to check that
+        there is no client for the tracker.
+
+        No test, this depends on how the port initializes the tracker.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker):
+
+2011-09-12  Adam Klein  <adamk@chromium.org>
+
+        Fix out-of-bounds access in Gradient::sortStopsIfNecessary
+        https://bugs.webkit.org/show_bug.cgi?id=67958
+
+        Reviewed by Darin Adler.
+
+        Reported by Valgrind in http://crbug.com/77049.
+
+        The errant code was added as an optimization in r67804.
+        This patch reverts that one, as all parties agree that the optimization
+        doesn't seem worthwhile, and there clearly aren't any tests covering
+        the special case.
+
+        No new tests, as existing tests should cover the remaining call to
+        |std::stable_sort|.
+
+        * platform/graphics/Gradient.cpp:
+        (WebCore::Gradient::sortStopsIfNecessary):
+
+2011-09-12  Jacky Jiang  <zhajiang@rim.com>
+
+        Setting document.title doesn't affect contents of title tag of XHTML documents
+        https://bugs.webkit.org/show_bug.cgi?id=57537
+
+        Reviewed by Alexey Proskuryakov.
+
+        Update the contents of the <title> tag of XHTML documents when setting
+        document.title.
+
+        Test: fast/dom/title-content-set-innerText-get.xhtml
+
+        * dom/Document.cpp:
+        (WebCore::Document::setTitle):
+
 2011-09-12  Raphael Kubo da Costa  <kubo@profusion.mobi>
 
         [EFL] Initialize m_unmodifiedText in PlatformKeyboardEventEfl.