Implement a PageTransitionEvent constructor for JSC
[WebKit-https.git] / Source / WebCore / ChangeLog
index 83d7f0b..e6fd871 100644 (file)
+2011-09-14  Kentaro Hara  <haraken@google.com>
+
+        Implement a PageTransitionEvent constructor for JSC
+        https://bugs.webkit.org/show_bug.cgi?id=68048
+
+        Reviewed by Sam Weinig.
+
+        The spec for the PageTransitionEvent constructor is here:
+        http://www.whatwg.org/specs/web-apps/current-work/#pagetransitionevent
+
+        Test: fast/events/constructors/page-transition-event-constructor.html
+
+        * bindings/generic/EventConstructors.h: Added a definition for the PageTransitionEvent constructor.
+        * bindings/js/JSEventConstructors.cpp: Added #includes for PageTransitionEvent.
+        * dom/PageTransitionEvent.cpp:
+        (WebCore::PageTransitionEventInit::PageTransitionEventInit):
+        (WebCore::PageTransitionEvent::PageTransitionEvent):
+        (WebCore::PageTransitionEvent::initPageTransitionEvent):
+        * dom/PageTransitionEvent.h: Added a definition for PageTransitionEventInit.
+        (WebCore::PageTransitionEvent::create):
+        (WebCore::PageTransitionEvent::isPageTransitionEvent):
+        (WebCore::PageTransitionEvent::persisted):
+        * dom/PageTransitionEvent.idl: Makes PageTransitionEvent constructible.
+
+2011-09-13  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r95058.
+        http://trac.webkit.org/changeset/95058
+        https://bugs.webkit.org/show_bug.cgi?id=68058
+
+        It made css3/calc/regression-62276.html crash (Requested by
+        Ossy on #webkit).
+
+        * css/CSSParser.cpp:
+        (WebCore::BorderImageParseContext::BorderImageParseContext):
+        (WebCore::BorderImageParseContext::allowBreak):
+        (WebCore::BorderImageParseContext::allowWidth):
+        (WebCore::BorderImageParseContext::allowOutset):
+        (WebCore::BorderImageParseContext::allowRepeat):
+        (WebCore::BorderImageParseContext::commitImage):
+        (WebCore::BorderImageParseContext::commitImageSlice):
+        (WebCore::BorderImageParseContext::commitSlash):
+        (WebCore::BorderImageParseContext::commitBorderWidth):
+        (WebCore::BorderImageParseContext::commitBorderOutset):
+        (WebCore::BorderImageParseContext::commitRepeat):
+        (WebCore::CSSParser::parseBorderImage):
+        (WebCore::CSSParser::parseBorderImageRepeat):
+        (WebCore::CSSParser::parseBorderImageSlice):
+        (WebCore::CSSParser::parseBorderImageQuad):
+        * css/CSSParserValues.h:
+
+2011-09-13  Abhishek Arya  <inferno@chromium.org>
+
+        Crash in RenderScrollbarPart::imageChanged.
+        https://bugs.webkit.org/show_bug.cgi?id=68009
+
+        Reviewed by Simon Fraser.
+
+        When a custom scrollbar is removed from its FrameView, its destruction
+        can be delayed because of RefPtr maintained in EventHandler class
+        (m_lastScrollbarUnderMouse). Upon removal, we delete all the scrollbar
+        parts so that they don't link back to scrollbar. However, because of the
+        delay, we can have a call to updateScrollbarPart which recreates it.
+        When scrollbar is getting destroyed, we just check to see if there are
+        remaining scrollbar parts and if yes, we destroy them.
+
+        Test: scrollbars/scrollbar-part-created-with-no-parent-crash.html
+
+        * rendering/RenderScrollbar.cpp:
+        (WebCore::RenderScrollbar::~RenderScrollbar):
+
+2011-09-13  Adam Klein  <adamk@chromium.org>
+
+        Fix cssText property of counter-valued CSSPrimitiveValue and avoid uninitialized read
+        https://bugs.webkit.org/show_bug.cgi?id=68021
+
+        Reviewed by Tony Chang.
+
+        Reported by valgrind in http://crbug.com/60653.
+
+        Besides fixing the uninitialized read, add support for outputting the
+        list separator for counters() calls and the list-style name.
+
+        Test: fast/css/counters/counter-cssText.html
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::cssText):
+
+2011-09-13  Kenichi Ishibashi  <bashi@chromium.org>
+
+        WebFont followed tiny monospace text displays weird
+        https://bugs.webkit.org/show_bug.cgi?id=67996
+
+        Reviewed by Darin Adler.
+
+        Always call wkSetCGFontRenderingMode() in Font::drawGlyphs() so that the rendering mode is set correctly.
+
+        Test: platform/mac/fast/text/webfont-after-tiny-monospace-text.html
+
+        * platform/graphics/mac/FontMac.mm:
+        (WebCore::Font::drawGlyphs):
+
+2011-09-13  Tom Sepez  <tsepez@chromium.org>
+
+        Fix XSS auditor bypass when inline handlers contain comments.
+        https://bugs.webkit.org/show_bug.cgi?id=27895
+
+        Reviewed by Adam Barth.
+
+        Tests: http/tests/security/xssAuditor/property-escape-comment.html
+               http/tests/security/xssAuditor/property-escape-entity.html
+               http/tests/security/xssAuditor/property-escape-quote.html
+
+        * html/parser/XSSAuditor.cpp:
+        (WebCore::XSSAuditor::snippetForAttribute):
+
+2011-09-13  Kentaro Hara  <haraken@google.com>
+
+        Implement a HashChangeEvent constructor for V8
+        https://bugs.webkit.org/show_bug.cgi?id=67969
+
+        Reviewed by Nate Chapin.
+
+        Test: fast/events/constructors/hash-change-event-constructor.html
+
+        * bindings/v8/custom/V8EventConstructors.cpp: Added the HashChangeEvent constructor.
+        * dom/HashChangeEvent.idl: Added a 'V8CustomConstructor' attribute.
+
+2011-09-13  Jeremy Apthorp  <jeremya@google.com>
+
+        Fix crash when an iframe element is removed during a transition to
+        fullscreen.
+        https://bugs.webkit.org/show_bug.cgi?id=67960
+
+        Reviewed by Adam Barth.
+
+        Test: fullscreen/full-screen-remove-ancestor-during-transition.html
+
+        * dom/Document.cpp:
+        (WebCore::Document::~Document):
+        Clear the list of elements to which we need to send a fullscreenchange
+        event.
+
+2011-09-13  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=68040
+        
+        Make sure border image sub-properties can be specified in any order.
+
+        Reviewed by Beth Dakin.
+
+        New tests in fast/borders.
+
+        * css/CSSParser.cpp:
+        (WebCore::BorderImageParseContext::BorderImageParseContext):
+        (WebCore::BorderImageParseContext::canAdvance):
+        (WebCore::BorderImageParseContext::setCanAdvance):
+        (WebCore::BorderImageParseContext::allowCommit):
+        (WebCore::BorderImageParseContext::allowImage):
+        (WebCore::BorderImageParseContext::allowImageSlice):
+        (WebCore::BorderImageParseContext::allowSlash):
+        (WebCore::BorderImageParseContext::requireWidth):
+        (WebCore::BorderImageParseContext::requireOutset):
+        (WebCore::BorderImageParseContext::commitImage):
+        (WebCore::BorderImageParseContext::commitImageSlice):
+        (WebCore::BorderImageParseContext::commitSlash):
+        (WebCore::BorderImageParseContext::commitBorderWidth):
+        (WebCore::BorderImageParseContext::commitBorderOutset):
+        (WebCore::BorderImageParseContext::commitRepeat):
+        (WebCore::CSSParser::parseBorderImage):
+        (WebCore::CSSParser::parseBorderImageRepeat):
+        (WebCore::CSSParser::parseBorderImageSlice):
+        (WebCore::CSSParser::parseBorderImageQuad):
+        * css/CSSParserValues.h:
+        (WebCore::CSSParserValueList::previous):
+
+2011-09-13  Jeff Miller  <jeffm@apple.com>
+
+        WebCore::Cursor::ensurePlatformCursor() should always set a valid platform cursor on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=68043
+        
+        Make sure we set a valid platform cursor in the Cursor::NoDrop case, and add a default
+        clause that uses the arrow cursor in case another cursor type is added in the future
+        and we forget to update ensurePlatformCursor().
+
+        Reviewed by Anders Carlsson.
+
+        * platform/win/CursorWin.cpp:
+        (WebCore::Cursor::ensurePlatformCursor): Always set a valid platform cursor.
+
+2011-09-12  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        MSAA: WebKit reports the document state as disabled
+        https://bugs.webkit.org/show_bug.cgi?id=67974
+        <rdar://problem/10095898>
+
+        Reviewed by Brian Weinstein.
+
+        Test: platform/win/accessibility/document-enabled-state.html
+
+        * accessibility/AccessibilityScrollView.h:
+        (WebCore::AccessibilityScrollView::isEnabled):
+        This object backs the AccessibleDocument on Windows - always return
+        true for its enabled state.
+
+2011-08-11  Cris Neckar  <cdn@chromium.org>
+
+        Fixes several bugs when adding CounterNodes to a tree which can cause asymetrical relationships.
+        https://bugs.webkit.org/show_bug.cgi?id=65996
+
+        Reviewed by Eric Seidel.
+
+        Test: fast/css/counters/counter-reparent-table-children-crash.html
+
+        * rendering/CounterNode.cpp:
+        (WebCore::CounterNode::insertAfter):
+        * rendering/RenderCounter.cpp:
+        (WebCore::findPlaceForCounter):
+        (WebCore::makeCounterNode):
+
+2011-09-13  Beth Dakin  <bdakin@apple.com>
+
+        Adding a comment I forgot to add before.
+
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+
+2011-09-13  Antti Koivisto  <antti@apple.com>
+
+        Move identifier filter from CSSStyleSelector to SelectorChecker
+        https://bugs.webkit.org/show_bug.cgi?id=68025
+
+        Reviewed by Sam Weinig.
+
+        This is a more logical place for this code. It also makes CSSStyleSelector slightly less bloated. 
+        It will make it possible to use fastRejectSelector for querySelectorAll in the future.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::loadViewSourceStyle):
+        (WebCore::CSSStyleSelector::matchRulesForList):
+        (WebCore::RuleData::RuleData):
+        * css/CSSStyleSelector.h:
+        (WebCore::CSSStyleSelector::pushParent):
+        (WebCore::CSSStyleSelector::popParent):
+        * css/SelectorChecker.cpp:
+        (WebCore::collectElementIdentifierHashes):
+        (WebCore::SelectorChecker::pushParentStackFrame):
+        (WebCore::SelectorChecker::popParentStackFrame):
+        (WebCore::SelectorChecker::pushParent):
+        (WebCore::SelectorChecker::popParent):
+        (WebCore::collectDescendantSelectorIdentifierHashes):
+        (WebCore::SelectorChecker::collectIdentifierHashes):
+        * css/SelectorChecker.h:
+        (WebCore::SelectorChecker::parentStackIsConsistent):
+        (WebCore::SelectorChecker::ParentStackFrame::ParentStackFrame):
+        (WebCore::SelectorChecker::fastRejectSelector):
+
+2011-09-13  Kiyoto Tamura  <owenestea@gmail.com>
+
+        For compatibility, execCommand should support deprecated 'useCSS' alias for 'styleWithCSS'
+        https://bugs.webkit.org/show_bug.cgi?id=36683
+
+        Reviewed by Ryosuke Niwa.
+
+        In addition to supporting the deprecated 'useCSS', 'styleWithCSS' now accepts any argument other than
+        the boolean false or the case-insensitive string "false". This is per
+        http://aryeh.name/spec/editing/editing.html#the-stylewithcss-command
+
+        Tests: editing/execCommand/style-with-css.html
+               editing/execCommand/use-css.html
+
+        * editing/EditorCommand.cpp:
+        (WebCore::executeStyleWithCSS):
+        (WebCore::executeUseCSS):
+        (WebCore::createCommandMap):
+
+2011-09-13  Anders Carlsson  <andersca@apple.com>
+
+        Disable C++ exceptions when building with clang
+        https://bugs.webkit.org/show_bug.cgi?id=68031
+        <rdar://problem/9556880>
+
+        Reviewed by Mark Rowe.
+
+        * Configurations/Base.xcconfig:
+
+2011-09-13  Beth Dakin  <bdakin@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67885
+        Outline for the high-resolution broken image icon draws at 2x
+        -and corresponding-
+        <rdar://problem/10104637>
+
+        Reviewed by Dan Bernstein.
+
+        Scaled the image size to account for the deviceScaleFactor. 
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+
+2011-09-13  Tim Horton  <timothy_horton@apple.com>
+
+        REGRESSION (64275): Shape pattern-image fill turns black
+        https://bugs.webkit.org/show_bug.cgi?id=51061
+        <rdar://problem/8504705>
+
+        Reviewed by Simon Fraser.
+
+        When destroying a resource, register clients who are losing their
+        resource as having pending resources, so they can be resolved in the case a
+        resource with that id is re-registered.
+
+        Test: svg/custom/pending-resource-after-removal.xhtml
+
+        * rendering/svg/SVGResourcesCache.cpp:
+        (WebCore::SVGResourcesCache::resourceDestroyed):
+        * svg/SVGStyledElement.h:
+        (WebCore::toSVGStyledElement): Added.
+
+2011-09-13  Eric Seidel  <eric@webkit.org>
+
+        Remove ENABLE_SVG_FOREIGN_OBJECT as it is a required part of HTML5
+        https://bugs.webkit.org/show_bug.cgi?id=68018
+
+        Reviewed by Ryosuke Niwa.
+
+        * Configurations/FeatureDefines.xcconfig:
+        * DerivedSources.make:
+        * GNUmakefile.am:
+        * WebCore.exp.in:
+        * dom/DOMImplementation.cpp:
+        (WebCore::isSVG10Feature):
+        (WebCore::isSVG11Feature):
+        * dom/Text.cpp:
+        (WebCore::Text::createRenderer):
+        * features.pri:
+        * page/DOMWindow.idl:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        * rendering/svg/RenderSVGForeignObject.h:
+        * svg/SVGAnimateMotionElement.cpp:
+        (WebCore::SVGAnimateMotionElement::hasValidAttributeType):
+        * svg/SVGForeignObjectElement.cpp:
+        * svg/SVGForeignObjectElement.h:
+        * svg/SVGForeignObjectElement.idl:
+        * svg/SVGLocatable.cpp:
+        (WebCore::isViewportElement):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::isOutermostSVG):
+        * svg/SVGUseElement.cpp:
+        (WebCore::isDisallowedElement):
+        (WebCore::SVGUseElement::associateInstancesWithShadowTreeElements):
+        * svg/svgtags.in:
+
+2011-09-13  Joseph Pecoraro  <joepeck@webkit.org>
+
+        CRASH under WebCore::ArchiveResourceCollection::addAllResources loading WebArchive
+        https://bugs.webkit.org/show_bug.cgi?id=67983
+
+        Reviewed by Darin Adler.
+
+        Null mimetypes are okay for subresources, but as previously discovered
+        in bug 41082 they were required for main resources. Here we ensure
+        that they are required for main resources, but we allow null mimetypes
+        for subresources.
+
+        To fix a crash for bad input we never add a null ArchiveResource to the
+        Archive's subresource collection. It is useless and causes crashes whenever
+        someone iterates the Archive's subresource collection.
+
+        Test: webarchive/loading/test-loading-archive-subresource-null-mimetype.html
+
+        * loader/archive/cf/LegacyWebArchive.cpp:
+        (WebCore::LegacyWebArchive::createResource):
+        Allow a null mimetype, just type check from the dictionary.
+
+        (WebCore::LegacyWebArchive::extract):
+        Require a mimetype for the main resource. Do not add null
+        subresources to the subresource list.
+
+2011-09-13  Mihai Parparita  <mihaip@chromium.org>
+
+        [Chromium] Remove javascript_engine from WebCore.gyp
+        https://bugs.webkit.org/show_bug.cgi?id=68001
+
+        Reviewed by Tony Chang.
+
+        Remove javascript_engine GYP variable (similar to the removal done on
+        the Chromium side with http://crrev.com/100692)
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-09-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        [CSS3 Backgrounds and Borders] Add unprefixed border-image shorthand.
+        https://bugs.webkit.org/show_bug.cgi?id=67970
+
+        Reviewed by David Hyatt.
+
+        Also update CSSStyleSelector.cpp to support border-image to suppress assertion in
+        fast/borders/border-image-omit-right-slice.html
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::mapNinePieceImage):
+
+2011-09-13  Xianzhu Wang  <wangxianzhu@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        Webkit wraps between hyphen-minus and numeric characters 
+        https://bugs.webkit.org/show_bug.cgi?id=20677
+
+        Disallow wrapping between a hyphen-minus and a digit if the hyphen-minus
+        is not directly after a digit or a letter.
+
+        Test: fast/text/line-breaks-after-hyphen-before-number.html
+
+        * rendering/break_lines.cpp:
+        (WebCore::asciiLineBreakTable): Disabled line-breaking after '-' and before '.', '0'-'9'. Note: the change for '0'-'9' doesn't really matter because the case is handled hard-coded in shouldBreakAfter().
+        (WebCore::shouldBreakAfter): Changed line-breaking behavior after '-'.
+        (WebCore::nextBreakablePosition): Passes lastLastCh to shouldBreakAfter. 
+
+2011-09-13  Erik Wright  <erikwright@chromium.org>
+
+        platform/graphics/gtk/FontGtk.cpp was renamed to platform/graphics/pango/FontPango.cpp . Reflect this change in WebCore.gypi to fix a Chromium build breakage.
+        https://bugs.webkit.org/show_bug.cgi?id=68000
+
+        Reviewed by Tony Gentilcore.
+
+        No change in functionality, thus no new tests.
+
+        * WebCore.gypi:
+
+2011-09-10  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: Profiler: Fix overlapping data in function names column.
+        https://bugs.webkit.org/show_bug.cgi?id=67896
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ProfileDataGridTree.js:
+        (WebInspector.ProfileDataGridNode.prototype.createCell):
+        * inspector/front-end/dataGrid.css:
+        (.data-grid table.data):
+        (.data-grid td):
+
+2011-09-13  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r95025.
+        http://trac.webkit.org/changeset/95025
+        https://bugs.webkit.org/show_bug.cgi?id=68005
+
+        Test failed on Snow Leopard bots. (Requested by yutak_home on
+        #webkit).
+
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+
+2011-09-13  Yuta Kitamura  <yutak@chromium.org>
+
+        ThreadableWebSocketChannelClientWrapper shouldn't have a String in it.
+        https://bugs.webkit.org/show_bug.cgi?id=67908
+
+        Reviewed by David Levin.
+
+        Replace a String member variable in ThreadableWebSocketChannelClientWrapper with Vector<UChar>.
+
+        No change in functionality, thus no new tests. WebSocket worker tests
+        (tests under http/tests/websocket/tests/{hixie76,hybi}/workers/) should keep passing.
+
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
+        Create a String from Vector<UChar>.
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
+        Copy the content of the given String into Vector.
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+
+2011-09-13  Fumitoshi Ukai  <ukai@chromium.org>
+
+        Unreviewed, build fix.
+
+        CSSPropertyBorderImage was added in r94989, but not yet added in
+        WebCore::CSSStyleSelector::applyProperty
+
+        CSSStyleSelector.cpp:2481: warning: enumeration value 'CSSPropertyBorderImage' not handled in switch
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-09-12  Shinya Kawanaka  <shinyak@google.com>
+
+        Crashes in WebCore::InsertListCommand::unlistifyParagraph.
+        https://bugs.webkit.org/show_bug.cgi?id=67918
+
+        Reviewed by Ryosuke Niwa.
+
+        execCommand("InsertUnorderedList") was crashing if the parent node of the target is
+        a kind of list element and it is not contenteditable.
+        This patch checks the parent node is contenteditable.
+
+        Test: editing/execCommand/insert-list-in-noneditable-list-parent.html
+
+        * editing/htmlediting.cpp:
+        (WebCore::enclosingListChild): Checks the parent node is contenteditable.
+
+2011-09-12  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r94975.
+        http://trac.webkit.org/changeset/94975
+        https://bugs.webkit.org/show_bug.cgi?id=67984
+
+        crash in PrerenderBrowserTest.PrerenderHTML5VideoJs (Requested
+        by ukai on #webkit).
+
+        * platform/graphics/chromium/CanvasLayerChromium.h:
+        (WebCore::CanvasLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        (WebCore::ContentLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/ImageLayerChromium.h:
+        (WebCore::ImageLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::layerTreeAsText):
+        (WebCore::writeIndent):
+        (WebCore::LayerChromium::dumpLayer):
+        (WebCore::LayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/LayerChromium.h:
+        (WebCore::LayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::textureMemoryReclaimLimit):
+        (WebCore::LayerRendererChromium::create):
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::close):
+        (WebCore::LayerRendererChromium::releaseTextures):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::drawLayersInternal):
+        (WebCore::LayerRendererChromium::getOffscreenLayerTexture):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        (WebCore::LayerRendererChromium::cleanupSharedObjects):
+        (WebCore::LayerRendererChromium::layerTreeAsText):
+        (WebCore::LayerRendererChromium::dumpRenderSurfaces):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        (WebCore::LayerRendererChromium::owner):
+        (WebCore::LayerRendererChromium::rootLayer):
+        (WebCore::LayerRendererChromium::rootLayerImpl):
+        (WebCore::LayerRendererChromium::viewportSize):
+        (WebCore::LayerRendererChromium::contentsTextureManager):
+        * platform/graphics/chromium/ManagedTexture.cpp:
+        (WebCore::ManagedTexture::bindTexture):
+        (WebCore::ManagedTexture::framebufferTexture2D):
+        * platform/graphics/chromium/PluginLayerChromium.h:
+        (WebCore::PluginLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::name):
+        (WebCore::writeIndent):
+        (WebCore::RenderSurfaceChromium::dumpSurface):
+        * platform/graphics/chromium/RenderSurfaceChromium.h:
+        * platform/graphics/chromium/TextureManager.cpp:
+        (WebCore::TextureManager::deleteEvictedTextures):
+        (WebCore::TextureManager::removeTexture):
+        (WebCore::TextureManager::allocateTexture):
+        (WebCore::TextureManager::requestTexture):
+        * platform/graphics/chromium/TextureManager.h:
+        (WebCore::TextureManager::setAssociatedContextDebugOnly):
+        (WebCore::TextureManager::associatedContextDebugOnly):
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::writeIndent):
+        (WebCore::TiledLayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/TiledLayerChromium.h:
+        * platform/graphics/chromium/VideoLayerChromium.h:
+        (WebCore::VideoLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/WebGLLayerChromium.h:
+        (WebCore::WebGLLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
+        (WebCore::CCLayerTreeHost::initialize):
+        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::commitTo):
+        (WebCore::CCLayerTreeHost::didRecreateGraphicsContext):
+        (WebCore::CCLayerTreeHost::setVisible):
+        (WebCore::CCLayerTreeHost::contentsTextureManager):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
+        (WebCore::CCLayerTreeHostImpl::drawLayers):
+        (WebCore::CCLayerTreeHostImpl::setVisible):
+        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
+        * platform/graphics/chromium/cc/CCProxy.h:
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
+        (WebCore::CCSingleThreadProxy::initializeLayerRenderer):
+        (WebCore::CCSingleThreadProxy::stop):
+        (WebCore::CCSingleThreadProxy::contentsTextureManager):
+        (WebCore::CCSingleThreadProxy::recreateContextIfNeeded):
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
+        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
+        (WebCore::CCThreadProxy::initializeLayerRenderer):
+        (WebCore::CCThreadProxy::contentsTextureManager):
+        (WebCore::CCThreadProxy::initializeLayerRendererOnCCThread):
+        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
+        * platform/graphics/chromium/cc/CCThreadProxy.h:
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
+        (WebCore::CCTiledLayerImpl::dumpLayerProperties):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
+
+2011-09-12  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Possible ASSERT(!storageTracker) in Lazily Initialized StorageTracker
+        https://bugs.webkit.org/show_bug.cgi?id=67957
+
+        Reviewed by Darin Adler.
+
+        The storageTracker singleton may already have been created
+        through StorageTracker::tracker before initializeTracker
+        gets called. Update the ASSERT in this case to check that
+        there is no client for the tracker.
+
+        No test, this depends on how the port initializes the tracker.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker):
+
+2011-09-12  Adam Klein  <adamk@chromium.org>
+
+        Fix out-of-bounds access in Gradient::sortStopsIfNecessary
+        https://bugs.webkit.org/show_bug.cgi?id=67958
+
+        Reviewed by Darin Adler.
+
+        Reported by Valgrind in http://crbug.com/77049.
+
+        The errant code was added as an optimization in r67804.
+        This patch reverts that one, as all parties agree that the optimization
+        doesn't seem worthwhile, and there clearly aren't any tests covering
+        the special case.
+
+        No new tests, as existing tests should cover the remaining call to
+        |std::stable_sort|.
+
+        * platform/graphics/Gradient.cpp:
+        (WebCore::Gradient::sortStopsIfNecessary):
+
+2011-09-12  Jacky Jiang  <zhajiang@rim.com>
+
+        Setting document.title doesn't affect contents of title tag of XHTML documents
+        https://bugs.webkit.org/show_bug.cgi?id=57537
+
+        Reviewed by Alexey Proskuryakov.
+
+        Update the contents of the <title> tag of XHTML documents when setting
+        document.title.
+
+        Test: fast/dom/title-content-set-innerText-get.xhtml
+
+        * dom/Document.cpp:
+        (WebCore::Document::setTitle):
+
+2011-09-12  Raphael Kubo da Costa  <kubo@profusion.mobi>
+
+        [EFL] Initialize m_unmodifiedText in PlatformKeyboardEventEfl.
+        https://bugs.webkit.org/show_bug.cgi?id=67038
+
+        Reviewed by Kenneth Rohde Christiansen.
+
+        Since most of the time it will return the same thing as text(), we
+        initialize it the same way we initialize m_text. The other case (what
+        would have been generated if no modifiers were pressed) should be
+        covered by this as well.
+
+        As this method is used when handling access keys, tests such as
+        fast/events/access-key-self-destruct.html should now pass.
+
+        No new tests, as this fixes a problem uncovered by the existing ones.
+
+        * platform/efl/PlatformKeyboardEventEfl.cpp:
+        (WebCore::PlatformKeyboardEvent::PlatformKeyboardEvent):
+
+2011-09-12  Hyowon Kim  <hw1008.kim@samsung.com>
+
+        Reviewed by Eric Seidel.
+
+        [EFL] Add GraphicsContext3DEfl for WebGL and accelerated compositing
+        https://bugs.webkit.org/show_bug.cgi?id=62709
+
+        Add GraphicsContext3D implementation for EFL port.
+        GraphicsContext3D delegates to GraphicsContext3DInternal.
+
+        * platform/graphics/efl/GraphicsContext3DEfl.cpp: Added.
+        (WebCore::GraphicsContext3D::create):
+        (WebCore::GraphicsContext3D::GraphicsContext3D):
+        (WebCore::GraphicsContext3D::~GraphicsContext3D):
+        (WebCore::GraphicsContext3D::platformGraphicsContext3D):
+        (WebCore::GraphicsContext3D::platformLayer):
+        (WebCore::GraphicsContext3D::makeContextCurrent):
+        (WebCore::GraphicsContext3D::isGLES2Compliant):
+        (WebCore::GraphicsContext3D::activeTexture):
+        (WebCore::GraphicsContext3D::attachShader):
+        (WebCore::GraphicsContext3D::bindAttribLocation):
+        (WebCore::GraphicsContext3D::bindBuffer):
+        (WebCore::GraphicsContext3D::bindFramebuffer):
+        (WebCore::GraphicsContext3D::bindRenderbuffer):
+        (WebCore::GraphicsContext3D::bindTexture):
+        (WebCore::GraphicsContext3D::blendColor):
+        (WebCore::GraphicsContext3D::blendEquation):
+        (WebCore::GraphicsContext3D::blendEquationSeparate):
+        (WebCore::GraphicsContext3D::blendFunc):
+        (WebCore::GraphicsContext3D::blendFuncSeparate):
+        (WebCore::GraphicsContext3D::bufferData):
+        (WebCore::GraphicsContext3D::bufferSubData):
+        (WebCore::GraphicsContext3D::checkFramebufferStatus):
+        (WebCore::GraphicsContext3D::clear):
+        (WebCore::GraphicsContext3D::clearColor):
+        (WebCore::GraphicsContext3D::clearDepth):
+        (WebCore::GraphicsContext3D::clearStencil):
+        (WebCore::GraphicsContext3D::colorMask):
+        (WebCore::GraphicsContext3D::compileShader):
+        (WebCore::GraphicsContext3D::copyTexImage2D):
+        (WebCore::GraphicsContext3D::copyTexSubImage2D):
+        (WebCore::GraphicsContext3D::cullFace):
+        (WebCore::GraphicsContext3D::depthFunc):
+        (WebCore::GraphicsContext3D::depthMask):
+        (WebCore::GraphicsContext3D::depthRange):
+        (WebCore::GraphicsContext3D::detachShader):
+        (WebCore::GraphicsContext3D::disable):
+        (WebCore::GraphicsContext3D::disableVertexAttribArray):
+        (WebCore::GraphicsContext3D::drawArrays):
+        (WebCore::GraphicsContext3D::drawElements):
+        (WebCore::GraphicsContext3D::enable):
+        (WebCore::GraphicsContext3D::enableVertexAttribArray):
+        (WebCore::GraphicsContext3D::finish):
+        (WebCore::GraphicsContext3D::flush):
+        (WebCore::GraphicsContext3D::framebufferRenderbuffer):
+        (WebCore::GraphicsContext3D::framebufferTexture2D):
+        (WebCore::GraphicsContext3D::frontFace):
+        (WebCore::GraphicsContext3D::generateMipmap):
+        (WebCore::GraphicsContext3D::getActiveAttrib):
+        (WebCore::GraphicsContext3D::getActiveUniform):
+        (WebCore::GraphicsContext3D::getAttachedShaders):
+        (WebCore::GraphicsContext3D::getAttribLocation):
+        (WebCore::GraphicsContext3D::getBooleanv):
+        (WebCore::GraphicsContext3D::getBufferParameteriv):
+        (WebCore::GraphicsContext3D::getContextAttributes):
+        (WebCore::GraphicsContext3D::getError):
+        (WebCore::GraphicsContext3D::getFloatv):
+        (WebCore::GraphicsContext3D::getFramebufferAttachmentParameteriv):
+        (WebCore::GraphicsContext3D::getIntegerv):
+        (WebCore::GraphicsContext3D::getProgramiv):
+        (WebCore::GraphicsContext3D::getProgramInfoLog):
+        (WebCore::GraphicsContext3D::getRenderbufferParameteriv):
+        (WebCore::GraphicsContext3D::getShaderiv):
+        (WebCore::GraphicsContext3D::getShaderInfoLog):
+        (WebCore::GraphicsContext3D::getShaderSource):
+        (WebCore::GraphicsContext3D::getString):
+        (WebCore::GraphicsContext3D::getTexParameterfv):
+        (WebCore::GraphicsContext3D::getTexParameteriv):
+        (WebCore::GraphicsContext3D::getUniformfv):
+        (WebCore::GraphicsContext3D::getUniformiv):
+        (WebCore::GraphicsContext3D::getUniformLocation):
+        (WebCore::GraphicsContext3D::getVertexAttribfv):
+        (WebCore::GraphicsContext3D::getVertexAttribiv):
+        (WebCore::GraphicsContext3D::getVertexAttribOffset):
+        (WebCore::GraphicsContext3D::hint):
+        (WebCore::GraphicsContext3D::isBuffer):
+        (WebCore::GraphicsContext3D::isEnabled):
+        (WebCore::GraphicsContext3D::isFramebuffer):
+        (WebCore::GraphicsContext3D::isProgram):
+        (WebCore::GraphicsContext3D::isRenderbuffer):
+        (WebCore::GraphicsContext3D::isShader):
+        (WebCore::GraphicsContext3D::isTexture):
+        (WebCore::GraphicsContext3D::lineWidth):
+        (WebCore::GraphicsContext3D::linkProgram):
+        (WebCore::GraphicsContext3D::pixelStorei):
+        (WebCore::GraphicsContext3D::polygonOffset):
+        (WebCore::GraphicsContext3D::readPixels):
+        (WebCore::GraphicsContext3D::releaseShaderCompiler):
+        (WebCore::GraphicsContext3D::renderbufferStorage):
+        (WebCore::GraphicsContext3D::sampleCoverage):
+        (WebCore::GraphicsContext3D::scissor):
+        (WebCore::GraphicsContext3D::shaderSource):
+        (WebCore::GraphicsContext3D::stencilFunc):
+        (WebCore::GraphicsContext3D::stencilFuncSeparate):
+        (WebCore::GraphicsContext3D::stencilMask):
+        (WebCore::GraphicsContext3D::stencilMaskSeparate):
+        (WebCore::GraphicsContext3D::stencilOp):
+        (WebCore::GraphicsContext3D::stencilOpSeparate):
+        (WebCore::GraphicsContext3D::texImage2D):
+        (WebCore::GraphicsContext3D::texParameterf):
+        (WebCore::GraphicsContext3D::texParameteri):
+        (WebCore::GraphicsContext3D::texSubImage2D):
+        (WebCore::GraphicsContext3D::uniform1f):
+        (WebCore::GraphicsContext3D::uniform1fv):
+        (WebCore::GraphicsContext3D::uniform1i):
+        (WebCore::GraphicsContext3D::uniform1iv):
+        (WebCore::GraphicsContext3D::uniform2f):
+        (WebCore::GraphicsContext3D::uniform2fv):
+        (WebCore::GraphicsContext3D::uniform2i):
+        (WebCore::GraphicsContext3D::uniform2iv):
+        (WebCore::GraphicsContext3D::uniform3f):
+        (WebCore::GraphicsContext3D::uniform3fv):
+        (WebCore::GraphicsContext3D::uniform3i):
+        (WebCore::GraphicsContext3D::uniform3iv):
+        (WebCore::GraphicsContext3D::uniform4f):
+        (WebCore::GraphicsContext3D::uniform4fv):
+        (WebCore::GraphicsContext3D::uniform4i):
+        (WebCore::GraphicsContext3D::uniform4iv):
+        (WebCore::GraphicsContext3D::uniformMatrix2fv):
+        (WebCore::GraphicsContext3D::uniformMatrix3fv):
+        (WebCore::GraphicsContext3D::uniformMatrix4fv):
+        (WebCore::GraphicsContext3D::useProgram):
+        (WebCore::GraphicsContext3D::validateProgram):
+        (WebCore::GraphicsContext3D::vertexAttrib1f):
+        (WebCore::GraphicsContext3D::vertexAttrib1fv):
+        (WebCore::GraphicsContext3D::vertexAttrib2f):
+        (WebCore::GraphicsContext3D::vertexAttrib2fv):
+        (WebCore::GraphicsContext3D::vertexAttrib3f):
+        (WebCore::GraphicsContext3D::vertexAttrib3fv):
+        (WebCore::GraphicsContext3D::vertexAttrib4f):
+        (WebCore::GraphicsContext3D::vertexAttrib4fv):
+        (WebCore::GraphicsContext3D::vertexAttribPointer):
+        (WebCore::GraphicsContext3D::viewport):
+        (WebCore::GraphicsContext3D::reshape):
+        (WebCore::GraphicsContext3D::markContextChanged):
+        (WebCore::GraphicsContext3D::markLayerComposited):
+        (WebCore::GraphicsContext3D::layerComposited):
+        (WebCore::GraphicsContext3D::paintRenderingResultsToCanvas):
+        (WebCore::GraphicsContext3D::paintRenderingResultsToImageData):
+        (WebCore::GraphicsContext3D::createBuffer):
+        (WebCore::GraphicsContext3D::createFramebuffer):
+        (WebCore::GraphicsContext3D::createProgram):
+        (WebCore::GraphicsContext3D::createRenderbuffer):
+        (WebCore::GraphicsContext3D::createShader):
+        (WebCore::GraphicsContext3D::createTexture):
+        (WebCore::GraphicsContext3D::deleteBuffer):
+        (WebCore::GraphicsContext3D::deleteFramebuffer):
+        (WebCore::GraphicsContext3D::deleteProgram):
+        (WebCore::GraphicsContext3D::deleteRenderbuffer):
+        (WebCore::GraphicsContext3D::deleteShader):
+        (WebCore::GraphicsContext3D::deleteTexture):
+        (WebCore::GraphicsContext3D::synthesizeGLError):
+        (WebCore::GraphicsContext3D::getExtensions):
+        (WebCore::GraphicsContext3D::getInternalFramebufferSize):
+        (WebCore::GraphicsContext3D::setContextLostCallback):
+        (WebCore::GraphicsContext3D::getImageData):
+
+2011-09-12  Hyowon Kim  <hw1008.kim@samsung.com>
+
+        Reviewed by Eric Seidel.
+
+        [CMAKE] Remove platform/graphics/opengl/*OpenGL.cpp files in CMakeLists.txt
+        https://bugs.webkit.org/show_bug.cgi?id=62707
+
+        No change in fuctionality so no new tests.
+
+        Bug 62376 makes all ports use GraphicsContext3DOpenGL and
+        Extensions3DOpenGL when enabling WebGL.
+        However, some ports already have their own GC3D implementation.
+        In QT and chromium, for example, GC3D delegates to GC3DInternal.
+        So, it would be better to allow each port to decide whether or not
+        to include files in platform/graphics/opengl. 
+
+        * CMakeLists.txt:
+
+2011-09-12  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/10054615> Floats in ruby text intrude into the base
+
+        Reviewed by Darin Adler.
+
+        Test: fast/ruby/float-overhang-from-ruby-text.html
+
+        * rendering/RenderRubyText.cpp:
+        (WebCore::RenderRubyText::avoidsFloats): Added. Returns true. This ensures that
+        RenderBlock::clearFloats() will not consider ruby text as having intruding floats.
+        * rendering/RenderRubyText.h:
+
+2011-09-12  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67970
+
+        Add unprefixed border-image property.
+
+        Reviewed by Beth Dakin.
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        * css/CSSPropertyNames.in:
+
+2011-09-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        REGRESSION: Moving up doesn't work in some cases
+        https://bugs.webkit.org/show_bug.cgi?id=67522
+
+        Reviewed by Eric Seidel.
+
+        The bug was caused by previousLinePosition's attempting to obtain the last root line box using
+        a position at minCaretOffset (which is, in practice, located at the beginning of wrapped lines).
+
+        Fix the bug by calling maxCaretOffset instead. Because isCandidate returns false at (br, 1),
+        use the positionBeforeNode for br elements.
+
+        Test: editing/selection/move-up-into-wrapped-line.html
+
+        * editing/visible_units.cpp:
+        (WebCore::previousLinePosition):
+
+2011-09-12  David Levin  <levin@chromium.org>
+
+        Make the ThreadSafeRefCounted support in CrossThreadCopier work for T*.
+        https://bugs.webkit.org/show_bug.cgi?id=67947
+
+        Reviewed by Adam Barth.
+
+        The changes are tested by compiling and added compile asserts to do some verification as well.
+
+        * platform/CrossThreadCopier.cpp:
+        Added some compile asserts to verify various match and non-matches for CrossThreadCopier.
+        * platform/CrossThreadCopier.h:
+        Added a typedef to convert T* to T, just like the typedef's to remove RefPtr and PassRefPtr.
+        Added a compile assert to verify that only one of the typedef did anything.
+        (CrossThreadCopierBase<false, true, T>::copy): Remove "get" as it is unnecessary.
+        It shouldn't have been here (PassRefPtr and RefPtr easily and sometimes more efficiently
+        convert to PassRefPtr without get). Also, a raw pointer doesn't have a get() method.
+
+2011-09-12  Chris Rogers  <crogers@google.com>
+
+        Address lifetime issues in OfflineAudioDestinationNode
+        https://bugs.webkit.org/show_bug.cgi?id=67949
+
+        Reviewed by Kenneth Russell.
+
+        No new tests.  This does not change JavaScript API.
+
+        * webaudio/OfflineAudioDestinationNode.cpp:
+        (WebCore::OfflineAudioDestinationNode::~OfflineAudioDestinationNode):
+        (WebCore::OfflineAudioDestinationNode::render):
+        (WebCore::OfflineAudioDestinationNode::notifyCompleteDispatch):
+
+2011-09-12  Jeff Timanus  <twiz@chromium.org>
+
+        [chromium]  Prevent a crash when tearing down an ImageBuffer that was not successfully initialized.
+        https://bugs.webkit.org/show_bug.cgi?id=67944
+
+        Reviewed by Stephen White.
+        
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::~ImageBuffer):
+
+2011-09-12  Michael Saboff  <msaboff@apple.com>
+
+        Update RegExp and related classes to use 8 bit strings when available
+        https://bugs.webkit.org/show_bug.cgi?id=67337
+
+        Updated call to match to use UString& instead of UChar*.
+
+        Reviewed by Gavin Barraclough.
+
+        No new tests, Covered by existing tests.
+
+        * platform/text/RegularExpression.cpp:
+        (WebCore::RegularExpression::match):
+
+2011-09-12  Beth Dakin  <bdakin@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67898
+        REGRESSION(r94900): fast/images/support-broken-image-delegate.html fails on Mac
+
+        Reviewed by Simon Fraser.
+
+        New function willPaintBrokenImage() returns true when there has been an error 
+        loading the image and the broken image icon will be used in its place. This is 
+        necessary since it is possible to have an error loading an image and to NOT use 
+        the broken image icon. 
+        * loader/cache/CachedImage.cpp:
+        (WebCore::CachedImage::willPaintBrokenImage):
+        * loader/cache/CachedImage.h:
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+
+2011-09-12  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Move contents texture manager from LayerRendererChromium to CCLayerTreeHost
+        https://bugs.webkit.org/show_bug.cgi?id=67440
+
+        Reviewed by Kenneth Russell.
+
+        This moves the contents TextureManager over to the CCLayerTreeHost, where it belongs, and adds in a commit path
+        to make sure that textures are deleted even if the page is not visible.  This move also removed the need for
+        LayerRendererChromium's CCLayerTreeHost pointer, so I removed that as well.  That meant moving the
+        layerTreeAsText() logic over to the CCLayerImpl side, which is where it really belonged anyway.
+
+        Covered by existing compositing/ tests and
+        platform/chromium/compositor/lost-compositor-context-with-rendersurface.html
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::releaseRenderSurfaceTextures):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        (WebCore::LayerRendererChromium::cleanupSharedObjects):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        (WebCore::LayerRendererChromium::setContentsTextureMemoryUseBytes):
+        * platform/graphics/chromium/TextureManager.cpp:
+        (WebCore::TextureManager::highLimitBytes):
+        (WebCore::TextureManager::reclaimLimitBytes):
+        (WebCore::TextureManager::lowLimitBytes):
+        * platform/graphics/chromium/TextureManager.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
+        (WebCore::CCLayerTreeHost::initialize):
+        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::deleteContentsTextures):
+        (WebCore::CCLayerTreeHost::commitTo):
+        (WebCore::CCLayerTreeHost::setVisible):
+        (WebCore::CCLayerTreeHost::contentsTextureManager):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
+        (WebCore::CCLayerTreeHostImpl::setVisible):
+        * platform/graphics/chromium/cc/CCProxy.h:
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
+        (WebCore::CCSingleThreadProxy::setNeedsCommit):
+        (WebCore::CCSingleThreadProxy::stop):
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
+        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
+        (WebCore::CCThreadProxy::setNeedsCommit):
+        (WebCore::CCThreadProxy::setNeedsCommitOnCCThread):
+        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
+        * platform/graphics/chromium/cc/CCThreadProxy.h:
+
+2011-09-12  Chris Rogers  <crogers@google.com>
+
+        DelayNode delay buffer is not correctly wrapping around
+        https://bugs.webkit.org/show_bug.cgi?id=67872
+
+        Reviewed by Kenneth Russell.
+
+        Test: webaudio/delaynode.html
+
+        * webaudio/DelayDSPKernel.cpp:
+        (WebCore::DelayDSPKernel::process):
+
+2011-09-12  Arko Saha  <arko@motorola.com>
+
+        Selectstart is not fired when selection was created by arrow keys.
+        https://bugs.webkit.org/show_bug.cgi?id=60430
+
+        Reviewed by Ryosuke Niwa.
+
+        Fire selectstart when a user starts extending the selection using arrow key.
+        Fixed by Arko Saha  <arko@motorola.com> and Kaustubh Atrawalkar  <kaustubh@motorola.com>
+
+        Tests: fast/events/selectstart-by-arrow-keys-prevent-default.html
+               fast/events/selectstart-by-arrow-keys.html
+
+        * editing/FrameSelection.cpp:
+        (WebCore::FrameSelection::modify):
+        (WebCore::FrameSelection::shouldChangeSelection):
+        (WebCore::FrameSelection::dispatchSelectStart):
+        * editing/FrameSelection.h:
+
+2011-09-12  James Robinson  <jamesr@chromium.org>
+
+        [chromium] REGRESSION(94353): Compositor textures and resources leaked when tab closed that is not last tab in the process
+        https://bugs.webkit.org/show_bug.cgi?id=67816
+
+        Reviewed by Kenneth Russell.
+
+        We lack infrastructure to construct an automated test for this today. To test manually, open up a composited
+        page (like the poster circle), duplicate the tab many times, close all the duplicates, and verify that the
+        memory use returns to the single tab level.
+
+        * platform/graphics/chromium/LayerChromium.h:
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::TiledLayerChromium::setLayerTreeHost):
+        * platform/graphics/chromium/VideoLayerChromium.cpp:
+        (WebCore::VideoLayerChromium::setLayerTreeHost):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
+        (WebCore::CCLayerTreeHost::clearRenderSurfacesRecursive):
+        (WebCore::CCLayerTreeHost::setRootLayer):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
+
+2011-09-12  Kentaro Hara  <haraken@google.com>
+
+        Implement a HashChangeEvent constructor for JSC
+        https://bugs.webkit.org/show_bug.cgi?id=67924
+
+        Reviewed by Sam Weinig.
+
+        The spec for the HashChangeEvent constructor is here:
+        http://www.whatwg.org/specs/web-apps/current-work/#hashchangeevent
+
+        Test: fast/events/constructors/hash-change-event-constructor.html
+
+        * bindings/generic/EventConstructors.h: Added a definition for the HashChangeEvent constructor.
+        * bindings/js/JSEventConstructors.cpp: Added #includes for HashChangeEvent.
+        * dom/HashChangeEvent.h: Added a definition for HashChangeEventInit.
+        (WebCore::HashChangeEventInit::HashChangeEventInit):
+        (WebCore::HashChangeEvent::create):
+        (WebCore::HashChangeEvent::HashChangeEvent):
+        * dom/HashChangeEvent.idl: Makes HashChangeEvent constructible.
+
+2011-09-12  Mike Reed  <reed@google.com>
+
+        [skia] remove dead code, no functionality change
+        https://bugs.webkit.org/show_bug.cgi?id=67844
+
+        Reviewed by Kenneth Russell.
+
+        No new tests. just removing dead-code, existing tests apply
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::Font::drawGlyphs):
+
+2011-09-12  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Runtime.callFunctionOn does not accept arguments that evaluate to false.
+        https://bugs.webkit.org/show_bug.cgi?id=67934
+
+        Reviewed by Tony Gentilcore.
+
+        * inspector/InjectedScriptSource.js:
+
+2011-09-12  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: event dividers do not update timeline boundaries.
+        https://bugs.webkit.org/show_bug.cgi?id=67932
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._onLoadEventFired):
+        (WebInspector.NetworkLogView.prototype._domContentLoadedEventFired):
+        (WebInspector.NetworkLogView.prototype.refresh):
+        (WebInspector.NetworkTimeCalculator.prototype.updateBoundariesForEventTime):
+
+2011-09-12  Kentaro Hara  <haraken@google.com>
+
+        Implement a WebKitAnimationEvent constructor for V8
+        https://bugs.webkit.org/show_bug.cgi?id=67922
+
+        Reviewed by Adam Barth.
+
+        Test: fast/events/constructors/webkit-animation-event-constructor.html
+
+        * bindings/v8/custom/V8EventConstructors.cpp: Added the WebKitAnimationEvent constructor.
+        * dom/WebKitAnimationEvent.idl: Added a 'V8CustomConstructor' attribute.
+
+2011-09-12  Andreas Kling  <kling@webkit.org>
+
+        Shrink CanvasGradient for builds without ENABLE(DASHBOARD_SUPPORT).
+        https://bugs.webkit.org/show_bug.cgi?id=67916
+
+        Reviewed by Kenneth Rohde Christiansen.
+
+        * html/canvas/CanvasGradient.cpp:
+        (WebCore::CanvasGradient::CanvasGradient):
+        (WebCore::CanvasGradient::addColorStop):
+        * html/canvas/CanvasGradient.h:
+
+2011-09-12  Shinya Kawanaka  <shinyak@google.com>
+
+        Characters beyond U+10000 should be deleted by one pressing delete key.
+        https://bugs.webkit.org/show_bug.cgi?id=40351
+
+        Reviewed by Kent Tamura.
+
+        If a character is the trail part of unicode surrogate pair, the lead part of it
+        should also be deleted. Also, If in MacOSX, the deletion should honor Mac's behavior.
+
+        Test: editing/deleting/delete-surrogatepair.html
+
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::previousOffsetForBackwardDeletion):
+          Added if-macro to support chromium on mac, and added trail part check for unicode character.
+
+2011-09-11  Kentaro Hara  <haraken@google.com>
+
+        Implement a ProgressEvent constructor for V8
+        https://bugs.webkit.org/show_bug.cgi?id=67800
+
+        Reviewed by Sam Weinig.
+
+        Test: fast/events/constructors/progress-event-constructor.html
+
+        * bindings/js/JSDictionary.cpp:
+        (WebCore::JSDictionary::convertValue): Replaced UnsignedLongLongMax with std::numeric_limits<unsigned long long>::max().
+        * bindings/v8/OptionsObject.cpp:
+        (WebCore::OptionsObject::getKeyValue): Returns an unsigned long long value corresponding to a given key. Spec: http://www.w3.org/TR/WebIDL/#es-unsigned-long-long
+        * bindings/v8/OptionsObject.h:
+        * bindings/v8/custom/V8EventConstructors.cpp: Added the ProgressEvent constructor.
+        * dom/ProgressEvent.idl: Added a 'V8CustomConstructor' attribute.
+
+2011-09-11  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        REGRESSION (r87351): toggling display of lots (thousands) of elements with display:none is very slow
+        https://bugs.webkit.org/show_bug.cgi?id=67581
+
+        Reviewed by Darin Adler.
+
+        Test: perf/show-hide-table-rows.html
+
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRendererFactory::createRendererAndStyle): Moved style-creating code into createRendererIfNeeded, renamed
+            to createRenderer.
+        (WebCore::NodeRendererFactory::createRendererIfNeeded): Re-arrange code to avoid unnecessary creation of renderers.
+
+2011-09-11  Jeremy Moskovich  <jeremy@chromium.org>
+
+        [Chromium] Change OOP Font loading code to use CGFont*() APIs.
+        https://bugs.webkit.org/show_bug.cgi?id=66935
+
+        This change is necessary due a bug in ATSFontDeactivate() on 10.7.
+        See crbug.com/93191 for details.
+
+        Reviewed by Eric Seidel.
+
+        No new tests - covered by existing tests.
+
+        * platform/chromium/PlatformBridge.h:
+        * platform/graphics/chromium/CrossProcessFontLoading.h:
+        * platform/graphics/chromium/CrossProcessFontLoading.mm:
+        (WebCore::MemoryActivatedFont::create):
+        (WebCore::MemoryActivatedFont::MemoryActivatedFont):
+        (WebCore::MemoryActivatedFont::~MemoryActivatedFont):
+
+2011-09-09  Oliver Hunt  <oliver@apple.com>
+
+        Remove support for anonymous storage from jsobjects
+        https://bugs.webkit.org/show_bug.cgi?id=67881
+
+        Reviewed by Sam Weinig.
+
+        Remove all use of anonymous slots, this required modifying
+        bindings generation to add member variables for cached attributes,
+        and override visitChildren with the necessary logic to mark those
+        new members.
+
+        I added bindings generation tests for these values.
+
+        * bindings/js/JSAudioConstructor.h:
+        (WebCore::JSAudioConstructor::createStructure):
+        * bindings/js/JSDOMBinding.h:
+        (WebCore::DOMConstructorObject::createStructure):
+        * bindings/js/JSDOMGlobalObject.h:
+        (WebCore::JSDOMGlobalObject::createStructure):
+        * bindings/js/JSDOMWindowBase.h:
+        (WebCore::JSDOMWindowBase::createStructure):
+        * bindings/js/JSDOMWindowShell.h:
+        (WebCore::JSDOMWindowShell::createStructure):
+        * bindings/js/JSDOMWrapper.h:
+        (WebCore::JSDOMWrapper::createStructure):
+        * bindings/js/JSImageConstructor.h:
+        (WebCore::JSImageConstructor::createStructure):
+        * bindings/js/JSMessageEventCustom.cpp:
+        (WebCore::JSMessageEvent::data):
+        (WebCore::JSMessageEvent::initMessageEvent):
+        * bindings/js/JSOptionConstructor.h:
+        (WebCore::JSOptionConstructor::createStructure):
+        * bindings/js/JSWorkerContextBase.h:
+        (WebCore::JSWorkerContextBase::createStructure):
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateHeader):
+        (GenerateImplementation):
+        (GenerateConstructorDeclaration):
+        * bindings/scripts/test/JS/JSTestInterface.cpp:
+        (WebCore::JSTestInterfaceConstructor::createStructure):
+        * bindings/scripts/test/JS/JSTestInterface.h:
+        (WebCore::JSTestInterface::createStructure):
+        (WebCore::JSTestInterfacePrototype::createStructure):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
+        (WebCore::JSTestMediaQueryListListenerConstructor::createStructure):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
+        (WebCore::JSTestMediaQueryListListener::createStructure):
+        (WebCore::JSTestMediaQueryListListenerPrototype::createStructure):
+        * bindings/scripts/test/JS/JSTestObj.cpp:
+        (WebCore::JSTestObjConstructor::createStructure):
+        (WebCore::jsTestObjCachedAttribute1):
+        (WebCore::jsTestObjCachedAttribute2):
+        (WebCore::JSTestObj::visitChildren):
+        * bindings/scripts/test/JS/JSTestObj.h:
+        (WebCore::JSTestObj::createStructure):
+        (WebCore::JSTestObjPrototype::createStructure):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
+        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::createStructure):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
+        (WebCore::JSTestSerializedScriptValueInterface::createStructure):
+        (WebCore::JSTestSerializedScriptValueInterfacePrototype::createStructure):
+        * bindings/scripts/test/TestObj.idl:
+        * bindings/scripts/test/V8/V8TestObj.cpp:
+        (WebCore::TestObjInternal::cachedAttribute1AttrGetter):
+        (WebCore::TestObjInternal::cachedAttribute2AttrGetter):
+        * bridge/c/CRuntimeObject.h:
+        (JSC::Bindings::CRuntimeObject::createStructure):
+        * bridge/c/c_instance.cpp:
+        (JSC::Bindings::CRuntimeMethod::createStructure):
+        * bridge/jni/jsc/JavaInstanceJSC.cpp:
+        (JavaRuntimeMethod::createStructure):
+        * bridge/jni/jsc/JavaRuntimeObject.h:
+        (JSC::Bindings::JavaRuntimeObject::createStructure):
+        * bridge/objc/ObjCRuntimeObject.h:
+        (JSC::Bindings::ObjCRuntimeObject::createStructure):
+        * bridge/objc/objc_instance.mm:
+        (ObjCRuntimeMethod::createStructure):
+        * bridge/objc/objc_runtime.h:
+        (JSC::Bindings::ObjcFallbackObjectImp::createStructure):
+        * bridge/runtime_array.h:
+        (JSC::RuntimeArray::createStructure):
+        * bridge/runtime_method.h:
+        (JSC::RuntimeMethod::createStructure):
+        * bridge/runtime_object.h:
+        (JSC::Bindings::RuntimeObject::createStructure):
+
+2011-09-01  Filip Pizlo  <fpizlo@apple.com>
+
+        The executable allocator makes it difficult to free individual
+        chunks of executable memory
+        https://bugs.webkit.org/show_bug.cgi?id=66363
+
+        Reviewed by Oliver Hunt.
+        
+        Introduced a best-fit, balanced-tree based allocator. The allocator
+        required a balanced tree that does not allocate memory and that
+        permits the removal of individual nodes directly (as opposed to by
+        key); neither AVLTree nor WebCore's PODRedBlackTree supported this.
+        Changed all references to executable code to use a reference counted
+        handle.
+
+        No new layout tests because behavior is not changed.  New API unit
+        tests:
+        Tests/WTF/RedBlackTree.cpp
+        Tests/WTF/MetaAllocator.cpp
+
+        * ForwardingHeaders/wtf/MetaAllocatorHandle.h: Added.
+
+2011-09-10  Sam Weinig  <sam@webkit.org>
+
+        Add isInterruptedExecutionException and isTerminatedExecutionException predicates
+        https://bugs.webkit.org/show_bug.cgi?id=67892
+
+        Reviewed by Andy "First Time Reviewer" Estes.
+
+        * bindings/js/JSDOMBinding.cpp:
+        (WebCore::reportException):
+        * bindings/js/JSEventListener.cpp:
+        (WebCore::JSEventListener::handleEvent):
+        * bindings/js/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::evaluate):
+        Use the new predicates instead of probing the ClassInfo directly.
+
+2011-09-10  Kevin Ollivier  <kevino@theolliviers.com>
+
+        [wx] Unreviewed build fix. MSW build fixes.
+
+        * config.h:
+
+2011-09-09  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67861
+        
+        Implement border-image-outset (and the mask equivalents).
+
+        Reviewed by Beth Dakin.
+
+        Added new tests in fast/borders and fast/reflections.
+
+        * css/CSSBorderImageValue.cpp:
+        (WebCore::CSSBorderImageValue::CSSBorderImageValue):
+        (WebCore::CSSBorderImageValue::cssText):
+        * css/CSSBorderImageValue.h:
+        (WebCore::CSSBorderImageValue::create):
+        Add m_outset field to CSSBorderImageValue and teach it how to dump the field as
+        part of cssText().
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::valueForNinePieceImageQuad):
+        (WebCore::valueForNinePieceImage):
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
+        Add support for border-image-outset and -webkit-mask-box-image-outset. Refactor
+        the code so that border-image-width and border-image-outset use a common
+        function.
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        (WebCore::BorderImageParseContext::BorderImageParseContext):
+        (WebCore::BorderImageParseContext::allowOutset):
+        (WebCore::BorderImageParseContext::commitSlash):
+        (WebCore::BorderImageParseContext::commitBorderWidth):
+        (WebCore::BorderImageParseContext::commitBorderOutset):
+        (WebCore::BorderImageParseContext::commitRepeat):
+        (WebCore::BorderImageParseContext::commitBorderImage):
+        (WebCore::CSSParser::parseBorderImage):
+        Teach the border image parsing code about outsets. This code will soon be
+        replaced by true shorthand parsing code, but for now keep it working and add
+        outset support to it.
+
+        (WebCore::BorderImageQuadParseContext::BorderImageQuadParseContext):
+        (WebCore::BorderImageQuadParseContext::commitBorderImageQuad):
+        (WebCore::CSSParser::parseBorderImageQuad):
+        (WebCore::CSSParser::parseBorderImageWidth):
+        (WebCore::CSSParser::parseBorderImageOutset):
+        * css/CSSParser.h:
+        Refactor the border-image-width code so that it can be shared by border-image-outset, since
+        they are extremely similar.
+
+        * css/CSSPropertyNames.in:
+        Add the new properties.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::mapNinePieceImage):
+        (WebCore::CSSStyleSelector::mapNinePieceImageQuad):
+        (WebCore::CSSStyleSelector::loadPendingImages):
+        * css/CSSStyleSelector.h:
+        Refactor the code so that width/outset share common mapping functions. Add support for outset.
+
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::addToLine):
+        (WebCore::InlineFlowBox::addBoxShadowVisualOverflow):
+        (WebCore::InlineFlowBox::addBorderOutsetVisualOverflow):
+        (WebCore::InlineFlowBox::computeOverflow):
+        Add new functions for computing the visual overflow caused by border outsets. Fix bugs in
+        the shadow overflow code as well.
+
+        (WebCore::clipRectForNinePieceImageStrip):
+        (WebCore::InlineFlowBox::paintBoxDecorations):
+        (WebCore::InlineFlowBox::paintMask):
+        * rendering/InlineFlowBox.h:
+        Make sure the clip rect pushed when painting one piece of a split inline strip is expanded to
+        include the border and mask outsets. Always include the block direction expansion, and conditionally
+        include the inline direction expansion based off includeLogicalLeftEdge()/includeLogicalRightEdge().
+        clipRectForNinePieceImageStrip is a common function shared by masks and border images that does this
+        work.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::computeOverflow):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::maskClipRect):
+        (WebCore::RenderBox::addBoxShadowAndBorderOverflow):
+        * rendering/RenderBox.h:
+        Rename addShadowOverflow to addBoxShadowAndBorderOverflow. Have it compute both shadow and border image
+        outset overflow. Fix bugs with shadow overflow computation.
+
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::paintNinePieceImage):
+        Change painting to apply the outsets to inflate the border image drawing area.
+
+        * rendering/RenderEmbeddedObject.cpp:
+        (WebCore::RenderEmbeddedObject::layout):
+        * rendering/RenderIFrame.cpp:
+        (WebCore::RenderIFrame::layout):
+        Patched to call the renamed addBoxShadowAndBorderOverflow function instead of addShadowOverflow.
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::calculateRects):
+        Patched to no longer apply box-shadow to overflow clip areas when inflating the intersection area for the
+        layer bounds. Instead we generically apply all visual overflow so that border image outsets will also be
+        included. This fixes https://bugs.webkit.org/show_bug.cgi?id=37467.
+
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::layout):
+        Patched to call the renamed addBoxShadowAndBorderOverflow function instead of addShadowOverflow.
+
+        * rendering/style/NinePieceImage.cpp:
+        (WebCore::NinePieceImage::operator==):
+        * rendering/style/NinePieceImage.h:
+        (WebCore::NinePieceImage::NinePieceImage):
+        (WebCore::NinePieceImage::outset):
+        (WebCore::NinePieceImage::setOutset):
+        (WebCore::NinePieceImage::computeOutset):
+        (WebCore::NinePieceImage::copyOutsetFrom):
+        Add the outset field to NinePieceImage along with some helpers for manipulating outsets.
+
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::getImageOutsets):
+        (WebCore::RenderStyle::getImageHorizontalOutsets):
+        (WebCore::RenderStyle::getImageVerticalOutsets):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::hasBorderImageOutsets):
+        (WebCore::InheritedFlags::getBorderImageOutsets):
+        (WebCore::InheritedFlags::getBorderImageHorizontalOutsets):
+        (WebCore::InheritedFlags::getBorderImageVerticalOutsets):
+        (WebCore::InheritedFlags::getBorderImageInlineDirectionOutsets):
+        (WebCore::InheritedFlags::getBorderImageBlockDirectionOutsets):
+        (WebCore::InheritedFlags::getImageInlineDirectionOutsets):
+        (WebCore::InheritedFlags::getImageBlockDirectionOutsets):
+        Helpers for outset computation used by painting and overflow functions.
+
+2011-09-10  Dan Bernstein  <mitz@apple.com>
+
+        Actually prevent unnecessary casts to MediaControls*.
+
+        Reviewed by Oliver Hunt.
+
+        * html/shadow/MediaControls.h:
+
+2011-09-10  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Remove printf added by r94900.
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::drawPlatformResizerImage):
+
+2011-09-09  Chris Marrin  <cmarrin@apple.com>
+
+        requestAnimationFrame doesn't throttle on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=67171
+
+        Reviewed by Simon Fraser.
+
+        Changed requestAnimationFrame to use a Timer in ScriptedAnimationController
+        on Mac, rather than runLoopObservers. The Timer is throttled to fire no
+        faster than every 15ms. It is behind a WTF_USE_REQUEST_ANIMATION_FRAME_TIMER
+        flag and can be used by any implementation, but currently it is only enabled
+        by PLATFORM(MAC).
+
+        * dom/ScriptedAnimationController.cpp:
+        (WebCore::ScriptedAnimationController::ScriptedAnimationController):
+        (WebCore::ScriptedAnimationController::resume):
+        (WebCore::ScriptedAnimationController::registerCallback):
+        (WebCore::ScriptedAnimationController::serviceScriptedAnimations):
+        (WebCore::ScriptedAnimationController::scheduleAnimation):
+        (WebCore::ScriptedAnimationController::animationTimerFired):
+        * dom/ScriptedAnimationController.h:
+        * loader/EmptyClients.h:
+        * page/Chrome.cpp:
+        (WebCore::Chrome::scheduleAnimation):
+        * page/ChromeClient.h:
+
+2011-09-10  Jarred Nicholls  <jarred@sencha.com>
+
+        [Qt] QWebSettings::setUserStyleSheetUrl() does not work with windows paths that contain drive letters
+        https://bugs.webkit.org/show_bug.cgi?id=34884
+        
+        KURL::path() alone does not handle removing the leading slash from a windows file path.
+        Using QUrl::toLocalFile() will turn file:///C:/path into C:/path appropriately.
+
+        Reviewed by Andreas Kling.
+
+        * platform/qt/KURLQt.cpp:
+        (WebCore::KURL::fileSystemPath):
+
+2011-09-10  Ken Buchanan <kenrb@chromium.org>
+
+        Crash due to bad data in SVGDocumentExtensions m_pendingResources
+        https://bugs.webkit.org/show_bug.cgi?id=67488
+
+        Reviewed by Nikolas Zimmermann.
+
+        Resolving a crash condition caused by the deletion of
+        elements while pending resource entries for those elements are still
+        recorded.
+
+        * rendering/svg/RenderSVGResourceContainer.cpp:
+        (WebCore::RenderSVGResourceContainer::registerResource)
+        * svg/SVGDocumentExtensions.h:
+        (WebCore::SVGDocumentExtensions::isElementInPendingResources)
+        * svg/SVGDocumentExtensions.cpp:
+        (WebCore::SVGDocumentExtensions::addPendingResource)
+        (WebCore::SVGDocumentExtensions::isElementInPendingResources)
+        (WebCore::SVGDocumentExtensions::removeElementFromPendingResources)
+        * svg/SVGStyledElement.h:
+        (WebCore::SVGStyledElement::clearHasPendingResourcesIfPossible)
+        * svg/SVGStyledElement.cpp:
+        (WebCore::SVGStyledElement::buildPendingResourcesIfNeeded)
+        (WebCore::SVGStyledElement::clearHasPendingResourcesIfPossible)
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::svgAttributeChanged)
+
+2011-09-10  Adam Barth  <abarth@webkit.org>
+
+        Remove DocumentWriter::deprecatedFrameEncoding()
+        https://bugs.webkit.org/show_bug.cgi?id=67882
+
+        Reviewed by Eric Seidel.
+
+        Three years ago, in http://trac.webkit.org/changeset/39026, Alexey
+        Proskuryakov added ContentDispositionEncodingFallbackArray to work
+        around a web site compatibility issue with a non-ASCII file name
+        becoming garbled when received in the Content-Disposition header.
+
+        Since that time, there has been copious discussion of this topic among
+        browser vendors, in the IETF, and in the broader web community.  For
+        example, here is a Stack Overflow thread about this topic:
+
+        http://stackoverflow.com/questions/93551/how-to-encode-the-filename-parameter-of-content-disposition-header-in-http
+
+        Eric Lawrence has written a blog post that summarizes IE's perspective
+        on this issue:
+
+        http://blogs.msdn.com/b/ieinternals/archive/2010/06/07/content-disposition-attachment-and-international-unicode-characters.aspx
+
+        The current consensus is that browsers should implement RFC 6266,
+        which is a new RFC that updates the definition of the
+        Content-Disposition header.  Chrome and Firefox have both implemented
+        RFC 6266 and have encountered only one issue, which was then fixed by
+        the web site operator.  IE has also implemented RFC 6266, but I don't
+        have detailed information about their compatibility experience.
+
+        This patch add explicit PLATFORM #ifdefs around the quirky
+        implementation previously used in Apple's Mac and Windows ports.  This
+        code is already only used on Apple's ports, so this patch introduces no
+        functional changes.  It does, however, discourage other ports from
+        adopting this quirk.  IMHO, Apple should remove this quirk as soon as
+        compatibility allows and converge behavior with the other major browser
+        vendors.
+
+        See bug for manual test (the bug manifests in Safari download UI).
+
+        * loader/DocumentWriter.cpp:
+        * loader/DocumentWriter.h:
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::addExtraFieldsToRequest):
+        * platform/network/ResourceRequestBase.cpp:
+        (WebCore::ResourceRequestBase::adopt):
+        (WebCore::ResourceRequestBase::copyData):
+        * platform/network/ResourceRequestBase.h:
+
+2011-09-09  Beth Dakin  <bdakin@apple.com>
+
+        Attempted Leopard build fix.
+
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::paintReplaced):
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::drawPlatformResizerImage):
+
+2011-09-09  Beth Dakin  <bdakin@apple.com>
+
+        Fix for https://bugs.webkit.org/show_bug.cgi?id=67819
+        Use high resolution platform images when the deviceScaleFactor > 1
+        -and corresponding-
+        <rdar://problem/10003098>
+
+        Reviewed by Darin Adler.
+
+        Add all of the new high resolution images. I also removed some tiffs from the 
+        project and replaced them with png equivalents (that are already checked into 
+        WebCore anyway). Since the high resolution images are pngs, it makes sense to use 
+        pngs for all of the images that load through Image::loadPlatformResource()
+        * WebCore.xcodeproj/project.pbxproj:
+        * platform/graphics/mac/ImageMac.mm:
+        (WebCore::Image::loadPlatformResource):
+
+        Load the @2x resource for deviceScaleFactors >= 2.
+        * editing/DeleteButtonController.cpp:
+        (WebCore::DeleteButtonController::createDeletionUI):
+
+        CachedImage::brokenImage() is no longer a static helper function, but a real 
+        member function. It also now loads the @2x resource for deviceScaleFactors >= 2 
+        and takes a parameter for the deviceScaleFactor. When CachedImage::image() returns 
+        the brokenImage(), it just returns the 1x version. brokenImage() has to be called 
+        directly to reliably return the deviceScaleFactor-appropriate resource.
+        * loader/cache/CachedImage.cpp:
+        (WebCore::CachedImage::brokenImage):
+        (WebCore::CachedImage::image):
+        * loader/cache/CachedImage.h:
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::drawPlatformResizerImage):
+        (WebCore::RenderLayer::paintResizer):
+        * rendering/RenderLayer.h:
+
+        New static function to retrieve the deviceScaleFactor for callers that do not have 
+        direct access to a Page.
+        * page/Page.cpp:
+        (WebCore::Page::deviceScaleFactor):
+        * page/Page.h:
+
+        Call CachedImage::brokenImage() for the broken-image image at an accurate 
+        resolution.
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+        (WebCore::RenderImage::paintReplaced):
+
+2011-09-09  Erik Arvidsson  <arv@chromium.org>
+
+        Move Element.contains to Node
+        https://bugs.webkit.org/show_bug.cgi?id=67651
+
+        Reviewed by Darin Adler.
+
+        This moves the contains method from Element to Node as in the DOM4 working draft: 
+        http://dvcs.w3.org/hg/domcore/raw-file/tip/Overview.html#dom-node-contains
+
+        This also special cases Document contains to make it O(1) instead of O(depth).
+
+        Tests: fast/dom/Node/contains-method.html
+               perf/document-contains.html
+
+        * bindings/objc/PublicDOMInterfaces.h: Move contains from DOMElement to DOMNode.
+        * dom/Element.idl:
+        * dom/Node.cpp:
+        (WebCore::Node::contains): Added document special case.
+        * dom/Node.idl:
+        * editing/DeleteSelectionCommand.cpp:
+        (WebCore::DeleteSelectionCommand::mergeParagraphs): Added a null check.
+
+2011-09-09  Tim Horton  <timothy_horton@apple.com>
+
+        Text rendered with a simple (i.e. 0px blur) shadow inside a transparency layer has a double shadow
+        https://bugs.webkit.org/show_bug.cgi?id=67543
+        <rdar://problem/10070536>
+
+        Reviewed by Darin Adler.
+
+        Generalize (begin|end)TransparencyLayer, which now forward
+        through to (begin|end)PlatformTransparencyLayer, so that
+        isInTransparencyLayer can exist on every platform.
+
+        Make use of isInTransparencyLayer in FontMac to disable
+        "simple" shadow drawing when the text is being rendered
+        into a transparency layer.
+
+        Test: svg/custom/simple-text-double-shadow.svg
+
+        * platform/graphics/GraphicsContext.cpp:
+        (WebCore::GraphicsContext::GraphicsContext):
+        (WebCore::GraphicsContext::~GraphicsContext):
+        (WebCore::GraphicsContext::beginTransparencyLayer):
+        (WebCore::GraphicsContext::endTransparencyLayer):
+        (WebCore::GraphicsContext::isInTransparencyLayer):
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/cairo/GraphicsContextCairo.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/cairo/GraphicsContextPlatformPrivateCairo.h:
+        * platform/graphics/cg/GraphicsContextCG.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/cg/GraphicsContextPlatformPrivateCG.h:
+        (WebCore::GraphicsContextPlatformPrivate::GraphicsContextPlatformPrivate):
+        * platform/graphics/haiku/GraphicsContextHaiku.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/mac/FontMac.mm:
+        (WebCore::Font::drawGlyphs):
+        * platform/graphics/openvg/GraphicsContextOpenVG.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/qt/GraphicsContextQt.cpp:
+        (WebCore::GraphicsContext::isInTransparencyLayer):
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/skia/GraphicsContextSkia.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/win/FontCGWin.cpp:
+        (WebCore::drawGDIGlyphs):
+        * platform/graphics/win/GraphicsContextCGWin.cpp:
+        (WebCore::GraphicsContext::releaseWindowsContext):
+        * platform/graphics/win/GraphicsContextCairoWin.cpp:
+        (WebCore::GraphicsContext::releaseWindowsContext):
+        * platform/graphics/win/GraphicsContextWin.cpp:
+        (WebCore::GraphicsContext::getWindowsContext):
+        * platform/graphics/wince/GraphicsContextWinCE.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/wx/GraphicsContextWx.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/win/ScrollbarThemeWin.cpp:
+        * plugins/win/PluginViewWin.cpp:
+        * rendering/RenderThemeWin.cpp:
+
+2011-09-09  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        [V8] V8WebKitPoint::constructorCallback leaks
+        https://bugs.webkit.org/show_bug.cgi?id=67865
+
+        Reviewed by Adam Barth.
+
+        Covered by fast/js/instanceof-XMLHttpRequest.html under Valgrind.
+
+        * bindings/v8/custom/V8WebKitPointConstructor.cpp:
+        (WebCore::V8WebKitPoint::constructorCallback): Changed the code
+        to use a RefPtr (per our usual style). Also use toV8 that will
+        take care of properly wrapping the object.
+
+2011-09-09  Chris Rogers  <crogers@google.com>
+
+        HRTFDatabaseLoader should not call WTF::waitForThreadCompletion() more than once
+        https://bugs.webkit.org/show_bug.cgi?id=67866
+
+        Reviewed by David Levin.
+
+        No new tests since this is difficult to test.
+        This is designed to fix existing webaudio layout test failures.
+
+        * platform/audio/HRTFDatabaseLoader.cpp:
+        (WebCore::HRTFDatabaseLoader::HRTFDatabaseLoader):
+        (WebCore::HRTFDatabaseLoader::~HRTFDatabaseLoader):
+        (WebCore::HRTFDatabaseLoader::loadAsynchronously):
+        (WebCore::HRTFDatabaseLoader::waitForLoaderThreadCompletion):
+        * platform/audio/HRTFDatabaseLoader.h:
+
+2011-09-09  Jessie Berlin  <jberlin@apple.com>
+
+        Cookies are not available after turning off Private Browsing after the last window has been
+        closed.
+        https://bugs.webkit.org/show_bug.cgi?id=67874
+
+        Reviewed by Darin Adler.
+
+        The private browsing storage session is a global setting that is being incorrectly set on a
+        per-page basis (see http://webkit.org/b/67870).
+
+        In this case, the global value was getting out of sync with the per-page setting:
+        1. The global value was getting set to true when setPrivateBrowsingEnabled(true) was called.
+        2. All Pages were then closed, destroying their Settings objects.
+        3. When a new Page was created, a new Settings object was created and its
+           m_privateBrowsingEnabled value was getting set to false.
+        4. The WebPage settings were then applied to the new Settings object, resulting in
+           setPrivateBrowsingEnabled(false) to be called.
+        5. An if (m_privateBrowsingEnabled == privateBrowsingEnabled) early return prevented the
+           global value for the storage session from being destroyed.
+
+        * page/Settings.cpp:
+        (WebCore::Settings::setPrivateBrowsingEnabled):
+        Move the early return to be after setting the global private browsing values, and add a
+        clearer comment + FIXME.
+
+2011-09-09  Kentaro Hara  <haraken@google.com>
+
+        Generate a WebKitCSSMatrix constructor of V8 using the IDL 'Constructor' extended attribute
+        https://bugs.webkit.org/show_bug.cgi?id=67458
+
+        Reviewed by Adam Barth.
+
+        Added a 'CallWithNullValue' extended attribute.
+        If a parameter is optional and missing, 'CallWithDefaultValue'
+        handles it as a string "undefined". On the other hand,
+        'CallWithNullValue' handles it as a null string
+        (Note: not a string "null", but a null string).
+
+        Tests: fast/dom/Window/custom-constructors.html
+               transforms/svg-vs-css.xhtml
+               transforms/cssmatrix-2d-interface.xhtml
+               transforms/cssmatrix-3d-interface.xhtmlGenerate a WebKitCSSMatrix constructor
+
+        * WebCore.gypi: Removed V8WebKitCSSMatrixConstructor.cpp.
+        * WebCore.pro: Removed V8WebKitCSSMatrixConstructor.cpp.
+        * bindings/scripts/CodeGeneratorV8.pm:
+        (GenerateParametersCheck): If the 'CallWithNullValue' extended attribute is set, we call MAYBE_MISSING_PARAMETER() with MissingIsEmpty mode to obtain a maybe missing parameter. Otherwise, we call MAYBE_MISSING_PARAMETER() with MissingIsUndefined mode.
+        (RequiresCustomSignature):
+        * bindings/scripts/test/V8/V8TestInterface.cpp: Updated test results.
+        (WebCore::V8TestInterface::constructorCallback):
+        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp: Ditto.
+        (WebCore::TestMediaQueryListListenerInternal::methodCallback):
+        * bindings/scripts/test/V8/V8TestObj.cpp: Ditto.
+        (WebCore::TestObjInternal::voidMethodWithArgsCallback):
+        (WebCore::TestObjInternal::intMethodWithArgsCallback):
+        (WebCore::TestObjInternal::objMethodWithArgsCallback):
+        (WebCore::TestObjInternal::methodThatRequiresAllArgsCallback):
+        (WebCore::TestObjInternal::methodThatRequiresAllArgsAndThrowsCallback):
+        (WebCore::TestObjInternal::optionsObjectCallback):
+        (WebCore::TestObjInternal::customArgsAndExceptionCallback):
+        (WebCore::TestObjInternal::withDynamicFrameAndArgCallback):
+        (WebCore::TestObjInternal::withDynamicFrameAndOptionalArgCallback):
+        (WebCore::TestObjInternal::withDynamicFrameAndUserGestureCallback):
+        (WebCore::TestObjInternal::withDynamicFrameAndUserGestureASADCallback):
+        (WebCore::TestObjInternal::methodWithOptionalArgCallback):
+        (WebCore::TestObjInternal::methodWithNonOptionalArgAndOptionalArgCallback):
+        (WebCore::TestObjInternal::methodWithNonOptionalArgAndTwoOptionalArgsCallback):
+        (WebCore::TestObjInternal::methodWithNonCallbackArgAndCallbackArgCallback):
+        (WebCore::TestObjInternal::overloadedMethod1Callback):
+        (WebCore::TestObjInternal::overloadedMethod2Callback):
+        (WebCore::TestObjInternal::overloadedMethod3Callback):
+        (WebCore::TestObjInternal::overloadedMethod4Callback):
+        (WebCore::TestObjInternal::classMethodWithOptionalCallback):
+        (WebCore::TestObjInternal::enabledAtRuntimeMethod1Callback):
+        (WebCore::TestObjInternal::enabledAtRuntimeMethod2Callback):
+        * bindings/v8/V8Binding.h:
+        (WebCore::V8ParameterBase::prepareBase): The fact that V8ParameterBase does not have any object means that we do not need to prepare anything, i.e. we should just return true in this case.
+        (WebCore::::prepare): If V8ParameterBase does not have any object, then we set a null string.
+        * bindings/v8/custom/V8BindingMacros.h: MAYBE_MISSING_PARAMETER() returns the parameter of a given index if the parameter exists. If the parameter does not exist and MissingIsUndefined is set, this macro returns an object that represents undefined. If the parameter does not exist and MissingIsEmpty is set, this macro returns an empty object.
+        * bindings/v8/custom/V8WebKitCSSMatrixConstructor.cpp: Removed.
+        * css/WebKitCSSMatrix.idl: Added the 'Constructor' extended attribute.
+
+2011-09-09  Geoffrey Garen  <ggaren@apple.com>
+
+        Reviewed by Dan Bernstein.
+
+        Removed ENABLE(SINGLE_THREADED) support, since it is always false
+        https://bugs.webkit.org/show_bug.cgi?id=67862
+
+        Next step toward making the baseline platform assumption that threads exist.
+
+        * WebCore.pri:
+        * features.pri: 
+        * platform/sql/SQLiteDatabase.cpp:
+        (WebCore::SQLiteDatabase::interrupt): Removed now-dead code.
+
+2011-09-09  Fady Samuel  <fsamuel@chromium.org>
+
+        Move pageScaleFactor code from Frame.{h|cpp} to Page.{h|cpp}
+        https://bugs.webkit.org/show_bug.cgi?id=67250
+
+        Reviewed by Simon Fraser.
+
+        No new tests because there's no change in functionality.
+
+        * WebCore.exp.in:
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForDocument):
+        * dom/Element.cpp:
+        (WebCore::Element::getClientRects):
+        (WebCore::Element::getBoundingClientRect):
+        * dom/Range.cpp:
+        (WebCore::adjustFloatQuadsForScrollAndAbsoluteZoomAndPageScale):
+        * loader/HistoryController.cpp:
+        (WebCore::HistoryController::restoreScrollPositionAndViewState):
+        * page/Frame.cpp:
+        (WebCore::Frame::Frame):
+        (WebCore::Frame::pageScaleFactor):
+        * page/Frame.h:
+        * page/Page.cpp:
+        (WebCore::Page::Page):
+        (WebCore::Page::setPageScaleFactor):
+        * page/Page.h:
+        (WebCore::Page::pageScaleFactor):
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::shouldPropagateCompositingToEnclosingFrame):
+        (WebCore::RenderLayerCompositor::pageScaleFactor):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::paintBoxDecorations):
+
+2011-09-09  Dominic Mazzoni  <dmazzoni@google.com>
+
+        AX: Images within anchors causes crash
+        https://bugs.webkit.org/show_bug.cgi?id=44149
+
+        Reviewed by Chris Fleizach.
+
+        Fixes the way parent RenderObject of an AccessibilityRenderObject
+        is computed in the presence of adjacent continuations.
+
+        Test: accessibility/div-within-anchors-causes-crash.html
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::renderParentObject):
+
+2011-09-09  Kulanthaivel Palanichamy  <kulanthaivel@codeaurora.org>
+
+        CSS rules not being applied when a hidden field is inserted between an input[type=checkbox] and a label
+        https://bugs.webkit.org/show_bug.cgi?id=66887
+
+        Reviewed by David Hyatt.
+
+        Test: fast/css/adjacent-sibling-selector.html
+
+        This patch addresses the problem of elements not getting their style recomputed
+        when they are affected by direct adjacent sibling rules and one of their sibling in
+        their corresponding rules is modified dynamically.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::canShareStyleWithElement):
+        (WebCore::parentStylePreventsSharing):
+        * css/SelectorChecker.cpp:
+        (WebCore::SelectorChecker::checkSelector):
+        * dom/Element.cpp:
+        (WebCore::Element::recalcStyle):
+        (WebCore::checkForSiblingStyleChanges):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::RenderStyle):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::affectedByDirectAdjacentRules):
+        (WebCore::InheritedFlags::setAffectedByDirectAdjacentRules):
+
+2011-09-09  Rafael Antognolli  <antognolli@profusion.mobi>
+
+        Make the EFL port use the correct rendering file.
+        https://bugs.webkit.org/show_bug.cgi?id=66323
+
+        Reviewed by Martin Robinson.
+
+        When compiling with Pango support, the EFL port should use
+        FontPango.cpp instead of FontEfl.cpp (which is just full of stubs).
+
+        No new functionality so no new tests.
+
+        * CMakeListsEfl.txt:
+
+2011-09-09  Chris Rogers  <crogers@google.com>
+
+        AudioBufferSourceNode must validate AudioBuffer in .buffer attribute setter
+        https://bugs.webkit.org/show_bug.cgi?id=67749
+
+        Reviewed by Kenneth Russell.
+
+        Test: webaudio/audiobuffersource-channels.html
+
+        * WebCore.gypi:
+        * bindings/js/JSAudioBufferSourceNodeCustom.cpp:
+        (WebCore::JSAudioBufferSourceNode::setBuffer):
+        * bindings/v8/custom/V8AudioBufferSourceNodeCustom.cpp: Copied from Source/WebCore/bindings/js/JSAudioBufferSourceNodeCustom.cpp.
+        (WebCore::V8AudioBufferSourceNode::bufferAccessorSetter):
+        * webaudio/AudioBufferSourceNode.cpp:
+        (WebCore::AudioBufferSourceNode::setBuffer):
+        * webaudio/AudioBufferSourceNode.h:
+        * webaudio/AudioBufferSourceNode.idl:
+
+2011-09-09  Dan Bernstein  <mitz@apple.com>
+
+        RenderBlock::addOverhangingFloats() takes superfluous parameters
+        https://bugs.webkit.org/show_bug.cgi?id=67863
+
+        Reviewed by Dave Hyatt.
+
+        No new tests, because behavior is unchanged.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::layoutBlock):
+        (WebCore::RenderBlock::layoutBlockChild):
+        (WebCore::RenderBlock::addOverhangingFloats): Removed the logical{Left, Top}Offset parameters,
+        since they were always the inverse of the logical{Left, Top}() of the child parameter.
+        * rendering/RenderBlock.h:
+
+2011-09-09  Rafael Antognolli  <antognolli@profusion.mobi>
+
+        Add replacement functions for gdk ones.
+        https://bugs.webkit.org/show_bug.cgi?id=66323
+
+        Reviewed by Martin Robinson.
+
+        This will allow the EFL port to don't depend on gdk anymore.
+
+        No new functionality so no new tests.
+
+        * CMakeListsEfl.txt:
+        * platform/graphics/cairo/CairoUtilities.cpp:
+        (WebCore::appendRegionToCairoContext):
+        * platform/graphics/cairo/CairoUtilities.h:
+        * platform/graphics/pango/FontPango.cpp:
+        (WebCore::drawGlyphsShadow):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/pango/PangoUtilities.cpp: Added.
+        (WebCore::getLineClipRegionFromLayoutIter):
+        (WebCore::getClipRegionFromPangoLayoutLine):
+        * platform/graphics/pango/PangoUtilities.h: Added.
+
+2011-09-09  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Unzip initialization lists and constructors in JSCell hierarchy (5/7)
+        https://bugs.webkit.org/show_bug.cgi?id=67420
+
+        Reviewed by Geoffrey Garen.
+
+        No new tests.
+
+        Completed the fifth level of the refactoring to add finishCreation() 
+        methods to all classes within the JSCell hierarchy with non-trivial 
+        constructor bodies.
+
+        This primarily consists of pushing the calls to finishCreation() down 
+        into the constructors of the subclasses of the second level of the hierarchy 
+        as well as pulling the finishCreation() calls out into the class's corresponding
+        create() method if it has one.  Doing both simultaneously allows us to 
+        maintain the invariant that the finishCreation() method chain is called exactly 
+        once during the creation of an object, since calling it any other number of 
+        times (0, 2, or more) will cause an assertion failure.
+
+        * WebCore.exp.in:
+        * bindings/js/JSDOMBinding.h:
+        (WebCore::DOMConstructorObject::DOMConstructorObject):
+        * bindings/js/JSDOMGlobalObject.cpp:
+        (WebCore::JSDOMGlobalObject::JSDOMGlobalObject):
+        (WebCore::JSDOMGlobalObject::finishCreation):
+        * bindings/js/JSDOMGlobalObject.h:
+        * bindings/js/JSDOMWindowShell.cpp:
+        * bindings/js/JSDOMWindowShell.h:
+        (WebCore::JSDOMWindowShell::create):
+        * bindings/js/JSDOMWrapper.h:
+        (WebCore::JSDOMWrapper::JSDOMWrapper):
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateImplementation):
+        * bindings/scripts/test/JS/JSTestInterface.cpp:
+        (WebCore::JSTestInterface::JSTestInterface):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
+        (WebCore::JSTestMediaQueryListListener::JSTestMediaQueryListListener):
+        * bindings/scripts/test/JS/JSTestObj.cpp:
+        (WebCore::JSTestObj::JSTestObj):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
+        (WebCore::JSTestSerializedScriptValueInterface::JSTestSerializedScriptValueInterface):
+        * bridge/c/CRuntimeObject.cpp:
+        (JSC::Bindings::CRuntimeObject::CRuntimeObject):
+        (JSC::Bindings::CRuntimeObject::finishCreation):
+        * bridge/c/CRuntimeObject.h:
+        * bridge/jni/jsc/JavaRuntimeObject.cpp:
+        (JSC::Bindings::JavaRuntimeObject::JavaRuntimeObject):
+        (JSC::Bindings::JavaRuntimeObject::finishCreation):
+        * bridge/jni/jsc/JavaRuntimeObject.h:
+        * bridge/objc/ObjCRuntimeObject.h:
+        * bridge/objc/ObjCRuntimeObject.mm:
+        (JSC::Bindings::ObjCRuntimeObject::ObjCRuntimeObject):
+        (JSC::Bindings::ObjCRuntimeObject::finishCreation):
+        * bridge/objc/objc_runtime.h:
+        (JSC::Bindings::ObjcFallbackObjectImp::create):
+        * bridge/objc/objc_runtime.mm:
+        (JSC::Bindings::ObjcFallbackObjectImp::ObjcFallbackObjectImp):
+        * bridge/qt/qt_instance.cpp:
+        (JSC::Bindings::QtRuntimeObject::QtRuntimeObject):
+        * bridge/qt/qt_pixmapruntime.cpp:
+        (JSC::Bindings::QtPixmapRuntimeObject::QtPixmapRuntimeObject):
+        * bridge/qt/qt_runtime.cpp:
+        (JSC::Bindings::QtRuntimeMethod::QtRuntimeMethod):
+        (JSC::Bindings::QtRuntimeMethod::finishCreation):
+        * bridge/qt/qt_runtime.h:
+        * bridge/runtime_array.cpp:
+        (JSC::RuntimeArray::RuntimeArray):
+        * bridge/runtime_array.h:
+        (JSC::RuntimeArray::create):
+        * bridge/runtime_method.cpp:
+        (JSC::RuntimeMethod::RuntimeMethod):
+        (JSC::RuntimeMethod::finishCreation):
+        * bridge/runtime_method.h:
+        * bridge/runtime_object.cpp:
+        (JSC::Bindings::RuntimeObject::RuntimeObject):
+        * bridge/runtime_object.h:
+        (JSC::Bindings::RuntimeObject::create):
+
+2011-09-09  Rafael Antognolli  <antognolli@profusion.mobi>
+
+        Rename FontGtk.cpp to FontPango.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=66323
+
+        Reviewed by Martin Robinson.
+
+        This file will be used by the EFL port too, and since it's not GTK
+        specific anymore, rename it to something better.
+
+        No new functionality so no new tests.
+
+        * GNUmakefile.list.am:
+        * platform/graphics/pango/FontPango.cpp: Renamed from Source/WebCore/platform/graphics/gtk/FontGtk.cpp.
+
+2011-09-09  Adam Klein  <adamk@chromium.org>
+
+        Initialize ExceptionCode in Element::removeAttribute
+        https://bugs.webkit.org/show_bug.cgi?id=67820
+
+        Reviewed by Darin Adler.
+
+        Silences valgrind warning reported in http://crbug.com/76490.
+
+        No new tests since this would only very occasionally be flaky,
+        and in the codepath in the valgrind report, the ec is ignored anyway.
+
+        * dom/Element.cpp:
+        (WebCore::Element::removeAttribute): Initialize ec to 0.
+
+2011-09-09  Laszlo Gombos  <laszlo.1.gombos@nokia.com>
+
+        [Qt] Remove common.pri
+        https://bugs.webkit.org/show_bug.cgi?id=67814
+
+        Reviewed by Andreas Kling.
+
+        No new tests, no change in functionality.
+
+        * CodeGenerators.pri:
+        * WebCore.pri:
+
+2011-09-09  Dominic Mazzoni  <dmazzoni@google.com>
+
+        Assert being hit in AccessibilityRenderObject::addChildren()
+        https://bugs.webkit.org/show_bug.cgi?id=61805
+
+        Reviewed by Chris Fleizach.
+
+        Fix nextSibling and previousSibling to handle adjacent continuations
+        properly, otherwise nodes end up appearing in the accessibility
+        tree twice (or a debug assertion could be raised).
+
+        Test: accessibility/adjacent-continuations-cause-assertion-failure.html
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::previousSibling):
+        (WebCore::AccessibilityRenderObject::nextSibling):
+
 2011-09-08  Kentaro Hara  <haraken@google.com>
 
         Implement a WebKitAnimationEvent constructor.