Implement a PageTransitionEvent constructor for JSC
[WebKit-https.git] / Source / WebCore / ChangeLog
index eec1f94..e6fd871 100644 (file)
+2011-09-14  Kentaro Hara  <haraken@google.com>
+
+        Implement a PageTransitionEvent constructor for JSC
+        https://bugs.webkit.org/show_bug.cgi?id=68048
+
+        Reviewed by Sam Weinig.
+
+        The spec for the PageTransitionEvent constructor is here:
+        http://www.whatwg.org/specs/web-apps/current-work/#pagetransitionevent
+
+        Test: fast/events/constructors/page-transition-event-constructor.html
+
+        * bindings/generic/EventConstructors.h: Added a definition for the PageTransitionEvent constructor.
+        * bindings/js/JSEventConstructors.cpp: Added #includes for PageTransitionEvent.
+        * dom/PageTransitionEvent.cpp:
+        (WebCore::PageTransitionEventInit::PageTransitionEventInit):
+        (WebCore::PageTransitionEvent::PageTransitionEvent):
+        (WebCore::PageTransitionEvent::initPageTransitionEvent):
+        * dom/PageTransitionEvent.h: Added a definition for PageTransitionEventInit.
+        (WebCore::PageTransitionEvent::create):
+        (WebCore::PageTransitionEvent::isPageTransitionEvent):
+        (WebCore::PageTransitionEvent::persisted):
+        * dom/PageTransitionEvent.idl: Makes PageTransitionEvent constructible.
+
+2011-09-13  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r95058.
+        http://trac.webkit.org/changeset/95058
+        https://bugs.webkit.org/show_bug.cgi?id=68058
+
+        It made css3/calc/regression-62276.html crash (Requested by
+        Ossy on #webkit).
+
+        * css/CSSParser.cpp:
+        (WebCore::BorderImageParseContext::BorderImageParseContext):
+        (WebCore::BorderImageParseContext::allowBreak):
+        (WebCore::BorderImageParseContext::allowWidth):
+        (WebCore::BorderImageParseContext::allowOutset):
+        (WebCore::BorderImageParseContext::allowRepeat):
+        (WebCore::BorderImageParseContext::commitImage):
+        (WebCore::BorderImageParseContext::commitImageSlice):
+        (WebCore::BorderImageParseContext::commitSlash):
+        (WebCore::BorderImageParseContext::commitBorderWidth):
+        (WebCore::BorderImageParseContext::commitBorderOutset):
+        (WebCore::BorderImageParseContext::commitRepeat):
+        (WebCore::CSSParser::parseBorderImage):
+        (WebCore::CSSParser::parseBorderImageRepeat):
+        (WebCore::CSSParser::parseBorderImageSlice):
+        (WebCore::CSSParser::parseBorderImageQuad):
+        * css/CSSParserValues.h:
+
+2011-09-13  Abhishek Arya  <inferno@chromium.org>
+
+        Crash in RenderScrollbarPart::imageChanged.
+        https://bugs.webkit.org/show_bug.cgi?id=68009
+
+        Reviewed by Simon Fraser.
+
+        When a custom scrollbar is removed from its FrameView, its destruction
+        can be delayed because of RefPtr maintained in EventHandler class
+        (m_lastScrollbarUnderMouse). Upon removal, we delete all the scrollbar
+        parts so that they don't link back to scrollbar. However, because of the
+        delay, we can have a call to updateScrollbarPart which recreates it.
+        When scrollbar is getting destroyed, we just check to see if there are
+        remaining scrollbar parts and if yes, we destroy them.
+
+        Test: scrollbars/scrollbar-part-created-with-no-parent-crash.html
+
+        * rendering/RenderScrollbar.cpp:
+        (WebCore::RenderScrollbar::~RenderScrollbar):
+
+2011-09-13  Adam Klein  <adamk@chromium.org>
+
+        Fix cssText property of counter-valued CSSPrimitiveValue and avoid uninitialized read
+        https://bugs.webkit.org/show_bug.cgi?id=68021
+
+        Reviewed by Tony Chang.
+
+        Reported by valgrind in http://crbug.com/60653.
+
+        Besides fixing the uninitialized read, add support for outputting the
+        list separator for counters() calls and the list-style name.
+
+        Test: fast/css/counters/counter-cssText.html
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::cssText):
+
+2011-09-13  Kenichi Ishibashi  <bashi@chromium.org>
+
+        WebFont followed tiny monospace text displays weird
+        https://bugs.webkit.org/show_bug.cgi?id=67996
+
+        Reviewed by Darin Adler.
+
+        Always call wkSetCGFontRenderingMode() in Font::drawGlyphs() so that the rendering mode is set correctly.
+
+        Test: platform/mac/fast/text/webfont-after-tiny-monospace-text.html
+
+        * platform/graphics/mac/FontMac.mm:
+        (WebCore::Font::drawGlyphs):
+
+2011-09-13  Tom Sepez  <tsepez@chromium.org>
+
+        Fix XSS auditor bypass when inline handlers contain comments.
+        https://bugs.webkit.org/show_bug.cgi?id=27895
+
+        Reviewed by Adam Barth.
+
+        Tests: http/tests/security/xssAuditor/property-escape-comment.html
+               http/tests/security/xssAuditor/property-escape-entity.html
+               http/tests/security/xssAuditor/property-escape-quote.html
+
+        * html/parser/XSSAuditor.cpp:
+        (WebCore::XSSAuditor::snippetForAttribute):
+
+2011-09-13  Kentaro Hara  <haraken@google.com>
+
+        Implement a HashChangeEvent constructor for V8
+        https://bugs.webkit.org/show_bug.cgi?id=67969
+
+        Reviewed by Nate Chapin.
+
+        Test: fast/events/constructors/hash-change-event-constructor.html
+
+        * bindings/v8/custom/V8EventConstructors.cpp: Added the HashChangeEvent constructor.
+        * dom/HashChangeEvent.idl: Added a 'V8CustomConstructor' attribute.
+
+2011-09-13  Jeremy Apthorp  <jeremya@google.com>
+
+        Fix crash when an iframe element is removed during a transition to
+        fullscreen.
+        https://bugs.webkit.org/show_bug.cgi?id=67960
+
+        Reviewed by Adam Barth.
+
+        Test: fullscreen/full-screen-remove-ancestor-during-transition.html
+
+        * dom/Document.cpp:
+        (WebCore::Document::~Document):
+        Clear the list of elements to which we need to send a fullscreenchange
+        event.
+
+2011-09-13  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=68040
+        
+        Make sure border image sub-properties can be specified in any order.
+
+        Reviewed by Beth Dakin.
+
+        New tests in fast/borders.
+
+        * css/CSSParser.cpp:
+        (WebCore::BorderImageParseContext::BorderImageParseContext):
+        (WebCore::BorderImageParseContext::canAdvance):
+        (WebCore::BorderImageParseContext::setCanAdvance):
+        (WebCore::BorderImageParseContext::allowCommit):
+        (WebCore::BorderImageParseContext::allowImage):
+        (WebCore::BorderImageParseContext::allowImageSlice):
+        (WebCore::BorderImageParseContext::allowSlash):
+        (WebCore::BorderImageParseContext::requireWidth):
+        (WebCore::BorderImageParseContext::requireOutset):
+        (WebCore::BorderImageParseContext::commitImage):
+        (WebCore::BorderImageParseContext::commitImageSlice):
+        (WebCore::BorderImageParseContext::commitSlash):
+        (WebCore::BorderImageParseContext::commitBorderWidth):
+        (WebCore::BorderImageParseContext::commitBorderOutset):
+        (WebCore::BorderImageParseContext::commitRepeat):
+        (WebCore::CSSParser::parseBorderImage):
+        (WebCore::CSSParser::parseBorderImageRepeat):
+        (WebCore::CSSParser::parseBorderImageSlice):
+        (WebCore::CSSParser::parseBorderImageQuad):
+        * css/CSSParserValues.h:
+        (WebCore::CSSParserValueList::previous):
+
+2011-09-13  Jeff Miller  <jeffm@apple.com>
+
+        WebCore::Cursor::ensurePlatformCursor() should always set a valid platform cursor on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=68043
+        
+        Make sure we set a valid platform cursor in the Cursor::NoDrop case, and add a default
+        clause that uses the arrow cursor in case another cursor type is added in the future
+        and we forget to update ensurePlatformCursor().
+
+        Reviewed by Anders Carlsson.
+
+        * platform/win/CursorWin.cpp:
+        (WebCore::Cursor::ensurePlatformCursor): Always set a valid platform cursor.
+
+2011-09-12  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        MSAA: WebKit reports the document state as disabled
+        https://bugs.webkit.org/show_bug.cgi?id=67974
+        <rdar://problem/10095898>
+
+        Reviewed by Brian Weinstein.
+
+        Test: platform/win/accessibility/document-enabled-state.html
+
+        * accessibility/AccessibilityScrollView.h:
+        (WebCore::AccessibilityScrollView::isEnabled):
+        This object backs the AccessibleDocument on Windows - always return
+        true for its enabled state.
+
+2011-08-11  Cris Neckar  <cdn@chromium.org>
+
+        Fixes several bugs when adding CounterNodes to a tree which can cause asymetrical relationships.
+        https://bugs.webkit.org/show_bug.cgi?id=65996
+
+        Reviewed by Eric Seidel.
+
+        Test: fast/css/counters/counter-reparent-table-children-crash.html
+
+        * rendering/CounterNode.cpp:
+        (WebCore::CounterNode::insertAfter):
+        * rendering/RenderCounter.cpp:
+        (WebCore::findPlaceForCounter):
+        (WebCore::makeCounterNode):
+
+2011-09-13  Beth Dakin  <bdakin@apple.com>
+
+        Adding a comment I forgot to add before.
+
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+
+2011-09-13  Antti Koivisto  <antti@apple.com>
+
+        Move identifier filter from CSSStyleSelector to SelectorChecker
+        https://bugs.webkit.org/show_bug.cgi?id=68025
+
+        Reviewed by Sam Weinig.
+
+        This is a more logical place for this code. It also makes CSSStyleSelector slightly less bloated. 
+        It will make it possible to use fastRejectSelector for querySelectorAll in the future.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::loadViewSourceStyle):
+        (WebCore::CSSStyleSelector::matchRulesForList):
+        (WebCore::RuleData::RuleData):
+        * css/CSSStyleSelector.h:
+        (WebCore::CSSStyleSelector::pushParent):
+        (WebCore::CSSStyleSelector::popParent):
+        * css/SelectorChecker.cpp:
+        (WebCore::collectElementIdentifierHashes):
+        (WebCore::SelectorChecker::pushParentStackFrame):
+        (WebCore::SelectorChecker::popParentStackFrame):
+        (WebCore::SelectorChecker::pushParent):
+        (WebCore::SelectorChecker::popParent):
+        (WebCore::collectDescendantSelectorIdentifierHashes):
+        (WebCore::SelectorChecker::collectIdentifierHashes):
+        * css/SelectorChecker.h:
+        (WebCore::SelectorChecker::parentStackIsConsistent):
+        (WebCore::SelectorChecker::ParentStackFrame::ParentStackFrame):
+        (WebCore::SelectorChecker::fastRejectSelector):
+
+2011-09-13  Kiyoto Tamura  <owenestea@gmail.com>
+
+        For compatibility, execCommand should support deprecated 'useCSS' alias for 'styleWithCSS'
+        https://bugs.webkit.org/show_bug.cgi?id=36683
+
+        Reviewed by Ryosuke Niwa.
+
+        In addition to supporting the deprecated 'useCSS', 'styleWithCSS' now accepts any argument other than
+        the boolean false or the case-insensitive string "false". This is per
+        http://aryeh.name/spec/editing/editing.html#the-stylewithcss-command
+
+        Tests: editing/execCommand/style-with-css.html
+               editing/execCommand/use-css.html
+
+        * editing/EditorCommand.cpp:
+        (WebCore::executeStyleWithCSS):
+        (WebCore::executeUseCSS):
+        (WebCore::createCommandMap):
+
+2011-09-13  Anders Carlsson  <andersca@apple.com>
+
+        Disable C++ exceptions when building with clang
+        https://bugs.webkit.org/show_bug.cgi?id=68031
+        <rdar://problem/9556880>
+
+        Reviewed by Mark Rowe.
+
+        * Configurations/Base.xcconfig:
+
+2011-09-13  Beth Dakin  <bdakin@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67885
+        Outline for the high-resolution broken image icon draws at 2x
+        -and corresponding-
+        <rdar://problem/10104637>
+
+        Reviewed by Dan Bernstein.
+
+        Scaled the image size to account for the deviceScaleFactor. 
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+
+2011-09-13  Tim Horton  <timothy_horton@apple.com>
+
+        REGRESSION (64275): Shape pattern-image fill turns black
+        https://bugs.webkit.org/show_bug.cgi?id=51061
+        <rdar://problem/8504705>
+
+        Reviewed by Simon Fraser.
+
+        When destroying a resource, register clients who are losing their
+        resource as having pending resources, so they can be resolved in the case a
+        resource with that id is re-registered.
+
+        Test: svg/custom/pending-resource-after-removal.xhtml
+
+        * rendering/svg/SVGResourcesCache.cpp:
+        (WebCore::SVGResourcesCache::resourceDestroyed):
+        * svg/SVGStyledElement.h:
+        (WebCore::toSVGStyledElement): Added.
+
+2011-09-13  Eric Seidel  <eric@webkit.org>
+
+        Remove ENABLE_SVG_FOREIGN_OBJECT as it is a required part of HTML5
+        https://bugs.webkit.org/show_bug.cgi?id=68018
+
+        Reviewed by Ryosuke Niwa.
+
+        * Configurations/FeatureDefines.xcconfig:
+        * DerivedSources.make:
+        * GNUmakefile.am:
+        * WebCore.exp.in:
+        * dom/DOMImplementation.cpp:
+        (WebCore::isSVG10Feature):
+        (WebCore::isSVG11Feature):
+        * dom/Text.cpp:
+        (WebCore::Text::createRenderer):
+        * features.pri:
+        * page/DOMWindow.idl:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        * rendering/svg/RenderSVGForeignObject.h:
+        * svg/SVGAnimateMotionElement.cpp:
+        (WebCore::SVGAnimateMotionElement::hasValidAttributeType):
+        * svg/SVGForeignObjectElement.cpp:
+        * svg/SVGForeignObjectElement.h:
+        * svg/SVGForeignObjectElement.idl:
+        * svg/SVGLocatable.cpp:
+        (WebCore::isViewportElement):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::isOutermostSVG):
+        * svg/SVGUseElement.cpp:
+        (WebCore::isDisallowedElement):
+        (WebCore::SVGUseElement::associateInstancesWithShadowTreeElements):
+        * svg/svgtags.in:
+
+2011-09-13  Joseph Pecoraro  <joepeck@webkit.org>
+
+        CRASH under WebCore::ArchiveResourceCollection::addAllResources loading WebArchive
+        https://bugs.webkit.org/show_bug.cgi?id=67983
+
+        Reviewed by Darin Adler.
+
+        Null mimetypes are okay for subresources, but as previously discovered
+        in bug 41082 they were required for main resources. Here we ensure
+        that they are required for main resources, but we allow null mimetypes
+        for subresources.
+
+        To fix a crash for bad input we never add a null ArchiveResource to the
+        Archive's subresource collection. It is useless and causes crashes whenever
+        someone iterates the Archive's subresource collection.
+
+        Test: webarchive/loading/test-loading-archive-subresource-null-mimetype.html
+
+        * loader/archive/cf/LegacyWebArchive.cpp:
+        (WebCore::LegacyWebArchive::createResource):
+        Allow a null mimetype, just type check from the dictionary.
+
+        (WebCore::LegacyWebArchive::extract):
+        Require a mimetype for the main resource. Do not add null
+        subresources to the subresource list.
+
+2011-09-13  Mihai Parparita  <mihaip@chromium.org>
+
+        [Chromium] Remove javascript_engine from WebCore.gyp
+        https://bugs.webkit.org/show_bug.cgi?id=68001
+
+        Reviewed by Tony Chang.
+
+        Remove javascript_engine GYP variable (similar to the removal done on
+        the Chromium side with http://crrev.com/100692)
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-09-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        [CSS3 Backgrounds and Borders] Add unprefixed border-image shorthand.
+        https://bugs.webkit.org/show_bug.cgi?id=67970
+
+        Reviewed by David Hyatt.
+
+        Also update CSSStyleSelector.cpp to support border-image to suppress assertion in
+        fast/borders/border-image-omit-right-slice.html
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::mapNinePieceImage):
+
+2011-09-13  Xianzhu Wang  <wangxianzhu@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        Webkit wraps between hyphen-minus and numeric characters 
+        https://bugs.webkit.org/show_bug.cgi?id=20677
+
+        Disallow wrapping between a hyphen-minus and a digit if the hyphen-minus
+        is not directly after a digit or a letter.
+
+        Test: fast/text/line-breaks-after-hyphen-before-number.html
+
+        * rendering/break_lines.cpp:
+        (WebCore::asciiLineBreakTable): Disabled line-breaking after '-' and before '.', '0'-'9'. Note: the change for '0'-'9' doesn't really matter because the case is handled hard-coded in shouldBreakAfter().
+        (WebCore::shouldBreakAfter): Changed line-breaking behavior after '-'.
+        (WebCore::nextBreakablePosition): Passes lastLastCh to shouldBreakAfter. 
+
+2011-09-13  Erik Wright  <erikwright@chromium.org>
+
+        platform/graphics/gtk/FontGtk.cpp was renamed to platform/graphics/pango/FontPango.cpp . Reflect this change in WebCore.gypi to fix a Chromium build breakage.
+        https://bugs.webkit.org/show_bug.cgi?id=68000
+
+        Reviewed by Tony Gentilcore.
+
+        No change in functionality, thus no new tests.
+
+        * WebCore.gypi:
+
+2011-09-10  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: Profiler: Fix overlapping data in function names column.
+        https://bugs.webkit.org/show_bug.cgi?id=67896
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ProfileDataGridTree.js:
+        (WebInspector.ProfileDataGridNode.prototype.createCell):
+        * inspector/front-end/dataGrid.css:
+        (.data-grid table.data):
+        (.data-grid td):
+
+2011-09-13  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r95025.
+        http://trac.webkit.org/changeset/95025
+        https://bugs.webkit.org/show_bug.cgi?id=68005
+
+        Test failed on Snow Leopard bots. (Requested by yutak_home on
+        #webkit).
+
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+
+2011-09-13  Yuta Kitamura  <yutak@chromium.org>
+
+        ThreadableWebSocketChannelClientWrapper shouldn't have a String in it.
+        https://bugs.webkit.org/show_bug.cgi?id=67908
+
+        Reviewed by David Levin.
+
+        Replace a String member variable in ThreadableWebSocketChannelClientWrapper with Vector<UChar>.
+
+        No change in functionality, thus no new tests. WebSocket worker tests
+        (tests under http/tests/websocket/tests/{hixie76,hybi}/workers/) should keep passing.
+
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::subprotocol):
+        Create a String from Vector<UChar>.
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setSubprotocol):
+        Copy the content of the given String into Vector.
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+
+2011-09-13  Fumitoshi Ukai  <ukai@chromium.org>
+
+        Unreviewed, build fix.
+
+        CSSPropertyBorderImage was added in r94989, but not yet added in
+        WebCore::CSSStyleSelector::applyProperty
+
+        CSSStyleSelector.cpp:2481: warning: enumeration value 'CSSPropertyBorderImage' not handled in switch
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-09-12  Shinya Kawanaka  <shinyak@google.com>
+
+        Crashes in WebCore::InsertListCommand::unlistifyParagraph.
+        https://bugs.webkit.org/show_bug.cgi?id=67918
+
+        Reviewed by Ryosuke Niwa.
+
+        execCommand("InsertUnorderedList") was crashing if the parent node of the target is
+        a kind of list element and it is not contenteditable.
+        This patch checks the parent node is contenteditable.
+
+        Test: editing/execCommand/insert-list-in-noneditable-list-parent.html
+
+        * editing/htmlediting.cpp:
+        (WebCore::enclosingListChild): Checks the parent node is contenteditable.
+
+2011-09-12  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r94975.
+        http://trac.webkit.org/changeset/94975
+        https://bugs.webkit.org/show_bug.cgi?id=67984
+
+        crash in PrerenderBrowserTest.PrerenderHTML5VideoJs (Requested
+        by ukai on #webkit).
+
+        * platform/graphics/chromium/CanvasLayerChromium.h:
+        (WebCore::CanvasLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        (WebCore::ContentLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/ImageLayerChromium.h:
+        (WebCore::ImageLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::layerTreeAsText):
+        (WebCore::writeIndent):
+        (WebCore::LayerChromium::dumpLayer):
+        (WebCore::LayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/LayerChromium.h:
+        (WebCore::LayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::textureMemoryReclaimLimit):
+        (WebCore::LayerRendererChromium::create):
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::close):
+        (WebCore::LayerRendererChromium::releaseTextures):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::drawLayersInternal):
+        (WebCore::LayerRendererChromium::getOffscreenLayerTexture):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        (WebCore::LayerRendererChromium::cleanupSharedObjects):
+        (WebCore::LayerRendererChromium::layerTreeAsText):
+        (WebCore::LayerRendererChromium::dumpRenderSurfaces):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        (WebCore::LayerRendererChromium::owner):
+        (WebCore::LayerRendererChromium::rootLayer):
+        (WebCore::LayerRendererChromium::rootLayerImpl):
+        (WebCore::LayerRendererChromium::viewportSize):
+        (WebCore::LayerRendererChromium::contentsTextureManager):
+        * platform/graphics/chromium/ManagedTexture.cpp:
+        (WebCore::ManagedTexture::bindTexture):
+        (WebCore::ManagedTexture::framebufferTexture2D):
+        * platform/graphics/chromium/PluginLayerChromium.h:
+        (WebCore::PluginLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::name):
+        (WebCore::writeIndent):
+        (WebCore::RenderSurfaceChromium::dumpSurface):
+        * platform/graphics/chromium/RenderSurfaceChromium.h:
+        * platform/graphics/chromium/TextureManager.cpp:
+        (WebCore::TextureManager::deleteEvictedTextures):
+        (WebCore::TextureManager::removeTexture):
+        (WebCore::TextureManager::allocateTexture):
+        (WebCore::TextureManager::requestTexture):
+        * platform/graphics/chromium/TextureManager.h:
+        (WebCore::TextureManager::setAssociatedContextDebugOnly):
+        (WebCore::TextureManager::associatedContextDebugOnly):
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::writeIndent):
+        (WebCore::TiledLayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/TiledLayerChromium.h:
+        * platform/graphics/chromium/VideoLayerChromium.h:
+        (WebCore::VideoLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/WebGLLayerChromium.h:
+        (WebCore::WebGLLayerChromium::layerTypeAsString):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
+        (WebCore::CCLayerTreeHost::initialize):
+        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::commitTo):
+        (WebCore::CCLayerTreeHost::didRecreateGraphicsContext):
+        (WebCore::CCLayerTreeHost::setVisible):
+        (WebCore::CCLayerTreeHost::contentsTextureManager):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
+        (WebCore::CCLayerTreeHostImpl::drawLayers):
+        (WebCore::CCLayerTreeHostImpl::setVisible):
+        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
+        * platform/graphics/chromium/cc/CCProxy.h:
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
+        (WebCore::CCSingleThreadProxy::initializeLayerRenderer):
+        (WebCore::CCSingleThreadProxy::stop):
+        (WebCore::CCSingleThreadProxy::contentsTextureManager):
+        (WebCore::CCSingleThreadProxy::recreateContextIfNeeded):
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
+        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
+        (WebCore::CCThreadProxy::initializeLayerRenderer):
+        (WebCore::CCThreadProxy::contentsTextureManager):
+        (WebCore::CCThreadProxy::initializeLayerRendererOnCCThread):
+        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
+        * platform/graphics/chromium/cc/CCThreadProxy.h:
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
+        (WebCore::CCTiledLayerImpl::dumpLayerProperties):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
+
+2011-09-12  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Possible ASSERT(!storageTracker) in Lazily Initialized StorageTracker
+        https://bugs.webkit.org/show_bug.cgi?id=67957
+
+        Reviewed by Darin Adler.
+
+        The storageTracker singleton may already have been created
+        through StorageTracker::tracker before initializeTracker
+        gets called. Update the ASSERT in this case to check that
+        there is no client for the tracker.
+
+        No test, this depends on how the port initializes the tracker.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker):
+
+2011-09-12  Adam Klein  <adamk@chromium.org>
+
+        Fix out-of-bounds access in Gradient::sortStopsIfNecessary
+        https://bugs.webkit.org/show_bug.cgi?id=67958
+
+        Reviewed by Darin Adler.
+
+        Reported by Valgrind in http://crbug.com/77049.
+
+        The errant code was added as an optimization in r67804.
+        This patch reverts that one, as all parties agree that the optimization
+        doesn't seem worthwhile, and there clearly aren't any tests covering
+        the special case.
+
+        No new tests, as existing tests should cover the remaining call to
+        |std::stable_sort|.
+
+        * platform/graphics/Gradient.cpp:
+        (WebCore::Gradient::sortStopsIfNecessary):
+
+2011-09-12  Jacky Jiang  <zhajiang@rim.com>
+
+        Setting document.title doesn't affect contents of title tag of XHTML documents
+        https://bugs.webkit.org/show_bug.cgi?id=57537
+
+        Reviewed by Alexey Proskuryakov.
+
+        Update the contents of the <title> tag of XHTML documents when setting
+        document.title.
+
+        Test: fast/dom/title-content-set-innerText-get.xhtml
+
+        * dom/Document.cpp:
+        (WebCore::Document::setTitle):
+
+2011-09-12  Raphael Kubo da Costa  <kubo@profusion.mobi>
+
+        [EFL] Initialize m_unmodifiedText in PlatformKeyboardEventEfl.
+        https://bugs.webkit.org/show_bug.cgi?id=67038
+
+        Reviewed by Kenneth Rohde Christiansen.
+
+        Since most of the time it will return the same thing as text(), we
+        initialize it the same way we initialize m_text. The other case (what
+        would have been generated if no modifiers were pressed) should be
+        covered by this as well.
+
+        As this method is used when handling access keys, tests such as
+        fast/events/access-key-self-destruct.html should now pass.
+
+        No new tests, as this fixes a problem uncovered by the existing ones.
+
+        * platform/efl/PlatformKeyboardEventEfl.cpp:
+        (WebCore::PlatformKeyboardEvent::PlatformKeyboardEvent):
+
+2011-09-12  Hyowon Kim  <hw1008.kim@samsung.com>
+
+        Reviewed by Eric Seidel.
+
+        [EFL] Add GraphicsContext3DEfl for WebGL and accelerated compositing
+        https://bugs.webkit.org/show_bug.cgi?id=62709
+
+        Add GraphicsContext3D implementation for EFL port.
+        GraphicsContext3D delegates to GraphicsContext3DInternal.
+
+        * platform/graphics/efl/GraphicsContext3DEfl.cpp: Added.
+        (WebCore::GraphicsContext3D::create):
+        (WebCore::GraphicsContext3D::GraphicsContext3D):
+        (WebCore::GraphicsContext3D::~GraphicsContext3D):
+        (WebCore::GraphicsContext3D::platformGraphicsContext3D):
+        (WebCore::GraphicsContext3D::platformLayer):
+        (WebCore::GraphicsContext3D::makeContextCurrent):
+        (WebCore::GraphicsContext3D::isGLES2Compliant):
+        (WebCore::GraphicsContext3D::activeTexture):
+        (WebCore::GraphicsContext3D::attachShader):
+        (WebCore::GraphicsContext3D::bindAttribLocation):
+        (WebCore::GraphicsContext3D::bindBuffer):
+        (WebCore::GraphicsContext3D::bindFramebuffer):
+        (WebCore::GraphicsContext3D::bindRenderbuffer):
+        (WebCore::GraphicsContext3D::bindTexture):
+        (WebCore::GraphicsContext3D::blendColor):
+        (WebCore::GraphicsContext3D::blendEquation):
+        (WebCore::GraphicsContext3D::blendEquationSeparate):
+        (WebCore::GraphicsContext3D::blendFunc):
+        (WebCore::GraphicsContext3D::blendFuncSeparate):
+        (WebCore::GraphicsContext3D::bufferData):
+        (WebCore::GraphicsContext3D::bufferSubData):
+        (WebCore::GraphicsContext3D::checkFramebufferStatus):
+        (WebCore::GraphicsContext3D::clear):
+        (WebCore::GraphicsContext3D::clearColor):
+        (WebCore::GraphicsContext3D::clearDepth):
+        (WebCore::GraphicsContext3D::clearStencil):
+        (WebCore::GraphicsContext3D::colorMask):
+        (WebCore::GraphicsContext3D::compileShader):
+        (WebCore::GraphicsContext3D::copyTexImage2D):
+        (WebCore::GraphicsContext3D::copyTexSubImage2D):
+        (WebCore::GraphicsContext3D::cullFace):
+        (WebCore::GraphicsContext3D::depthFunc):
+        (WebCore::GraphicsContext3D::depthMask):
+        (WebCore::GraphicsContext3D::depthRange):
+        (WebCore::GraphicsContext3D::detachShader):
+        (WebCore::GraphicsContext3D::disable):
+        (WebCore::GraphicsContext3D::disableVertexAttribArray):
+        (WebCore::GraphicsContext3D::drawArrays):
+        (WebCore::GraphicsContext3D::drawElements):
+        (WebCore::GraphicsContext3D::enable):
+        (WebCore::GraphicsContext3D::enableVertexAttribArray):
+        (WebCore::GraphicsContext3D::finish):
+        (WebCore::GraphicsContext3D::flush):
+        (WebCore::GraphicsContext3D::framebufferRenderbuffer):
+        (WebCore::GraphicsContext3D::framebufferTexture2D):
+        (WebCore::GraphicsContext3D::frontFace):
+        (WebCore::GraphicsContext3D::generateMipmap):
+        (WebCore::GraphicsContext3D::getActiveAttrib):
+        (WebCore::GraphicsContext3D::getActiveUniform):
+        (WebCore::GraphicsContext3D::getAttachedShaders):
+        (WebCore::GraphicsContext3D::getAttribLocation):
+        (WebCore::GraphicsContext3D::getBooleanv):
+        (WebCore::GraphicsContext3D::getBufferParameteriv):
+        (WebCore::GraphicsContext3D::getContextAttributes):
+        (WebCore::GraphicsContext3D::getError):
+        (WebCore::GraphicsContext3D::getFloatv):
+        (WebCore::GraphicsContext3D::getFramebufferAttachmentParameteriv):
+        (WebCore::GraphicsContext3D::getIntegerv):
+        (WebCore::GraphicsContext3D::getProgramiv):
+        (WebCore::GraphicsContext3D::getProgramInfoLog):
+        (WebCore::GraphicsContext3D::getRenderbufferParameteriv):
+        (WebCore::GraphicsContext3D::getShaderiv):
+        (WebCore::GraphicsContext3D::getShaderInfoLog):
+        (WebCore::GraphicsContext3D::getShaderSource):
+        (WebCore::GraphicsContext3D::getString):
+        (WebCore::GraphicsContext3D::getTexParameterfv):
+        (WebCore::GraphicsContext3D::getTexParameteriv):
+        (WebCore::GraphicsContext3D::getUniformfv):
+        (WebCore::GraphicsContext3D::getUniformiv):
+        (WebCore::GraphicsContext3D::getUniformLocation):
+        (WebCore::GraphicsContext3D::getVertexAttribfv):
+        (WebCore::GraphicsContext3D::getVertexAttribiv):
+        (WebCore::GraphicsContext3D::getVertexAttribOffset):
+        (WebCore::GraphicsContext3D::hint):
+        (WebCore::GraphicsContext3D::isBuffer):
+        (WebCore::GraphicsContext3D::isEnabled):
+        (WebCore::GraphicsContext3D::isFramebuffer):
+        (WebCore::GraphicsContext3D::isProgram):
+        (WebCore::GraphicsContext3D::isRenderbuffer):
+        (WebCore::GraphicsContext3D::isShader):
+        (WebCore::GraphicsContext3D::isTexture):
+        (WebCore::GraphicsContext3D::lineWidth):
+        (WebCore::GraphicsContext3D::linkProgram):
+        (WebCore::GraphicsContext3D::pixelStorei):
+        (WebCore::GraphicsContext3D::polygonOffset):
+        (WebCore::GraphicsContext3D::readPixels):
+        (WebCore::GraphicsContext3D::releaseShaderCompiler):
+        (WebCore::GraphicsContext3D::renderbufferStorage):
+        (WebCore::GraphicsContext3D::sampleCoverage):
+        (WebCore::GraphicsContext3D::scissor):
+        (WebCore::GraphicsContext3D::shaderSource):
+        (WebCore::GraphicsContext3D::stencilFunc):
+        (WebCore::GraphicsContext3D::stencilFuncSeparate):
+        (WebCore::GraphicsContext3D::stencilMask):
+        (WebCore::GraphicsContext3D::stencilMaskSeparate):
+        (WebCore::GraphicsContext3D::stencilOp):
+        (WebCore::GraphicsContext3D::stencilOpSeparate):
+        (WebCore::GraphicsContext3D::texImage2D):
+        (WebCore::GraphicsContext3D::texParameterf):
+        (WebCore::GraphicsContext3D::texParameteri):
+        (WebCore::GraphicsContext3D::texSubImage2D):
+        (WebCore::GraphicsContext3D::uniform1f):
+        (WebCore::GraphicsContext3D::uniform1fv):
+        (WebCore::GraphicsContext3D::uniform1i):
+        (WebCore::GraphicsContext3D::uniform1iv):
+        (WebCore::GraphicsContext3D::uniform2f):
+        (WebCore::GraphicsContext3D::uniform2fv):
+        (WebCore::GraphicsContext3D::uniform2i):
+        (WebCore::GraphicsContext3D::uniform2iv):
+        (WebCore::GraphicsContext3D::uniform3f):
+        (WebCore::GraphicsContext3D::uniform3fv):
+        (WebCore::GraphicsContext3D::uniform3i):
+        (WebCore::GraphicsContext3D::uniform3iv):
+        (WebCore::GraphicsContext3D::uniform4f):
+        (WebCore::GraphicsContext3D::uniform4fv):
+        (WebCore::GraphicsContext3D::uniform4i):
+        (WebCore::GraphicsContext3D::uniform4iv):
+        (WebCore::GraphicsContext3D::uniformMatrix2fv):
+        (WebCore::GraphicsContext3D::uniformMatrix3fv):
+        (WebCore::GraphicsContext3D::uniformMatrix4fv):
+        (WebCore::GraphicsContext3D::useProgram):
+        (WebCore::GraphicsContext3D::validateProgram):
+        (WebCore::GraphicsContext3D::vertexAttrib1f):
+        (WebCore::GraphicsContext3D::vertexAttrib1fv):
+        (WebCore::GraphicsContext3D::vertexAttrib2f):
+        (WebCore::GraphicsContext3D::vertexAttrib2fv):
+        (WebCore::GraphicsContext3D::vertexAttrib3f):
+        (WebCore::GraphicsContext3D::vertexAttrib3fv):
+        (WebCore::GraphicsContext3D::vertexAttrib4f):
+        (WebCore::GraphicsContext3D::vertexAttrib4fv):
+        (WebCore::GraphicsContext3D::vertexAttribPointer):
+        (WebCore::GraphicsContext3D::viewport):
+        (WebCore::GraphicsContext3D::reshape):
+        (WebCore::GraphicsContext3D::markContextChanged):
+        (WebCore::GraphicsContext3D::markLayerComposited):
+        (WebCore::GraphicsContext3D::layerComposited):
+        (WebCore::GraphicsContext3D::paintRenderingResultsToCanvas):
+        (WebCore::GraphicsContext3D::paintRenderingResultsToImageData):
+        (WebCore::GraphicsContext3D::createBuffer):
+        (WebCore::GraphicsContext3D::createFramebuffer):
+        (WebCore::GraphicsContext3D::createProgram):
+        (WebCore::GraphicsContext3D::createRenderbuffer):
+        (WebCore::GraphicsContext3D::createShader):
+        (WebCore::GraphicsContext3D::createTexture):
+        (WebCore::GraphicsContext3D::deleteBuffer):
+        (WebCore::GraphicsContext3D::deleteFramebuffer):
+        (WebCore::GraphicsContext3D::deleteProgram):
+        (WebCore::GraphicsContext3D::deleteRenderbuffer):
+        (WebCore::GraphicsContext3D::deleteShader):
+        (WebCore::GraphicsContext3D::deleteTexture):
+        (WebCore::GraphicsContext3D::synthesizeGLError):
+        (WebCore::GraphicsContext3D::getExtensions):
+        (WebCore::GraphicsContext3D::getInternalFramebufferSize):
+        (WebCore::GraphicsContext3D::setContextLostCallback):
+        (WebCore::GraphicsContext3D::getImageData):
+
+2011-09-12  Hyowon Kim  <hw1008.kim@samsung.com>
+
+        Reviewed by Eric Seidel.
+
+        [CMAKE] Remove platform/graphics/opengl/*OpenGL.cpp files in CMakeLists.txt
+        https://bugs.webkit.org/show_bug.cgi?id=62707
+
+        No change in fuctionality so no new tests.
+
+        Bug 62376 makes all ports use GraphicsContext3DOpenGL and
+        Extensions3DOpenGL when enabling WebGL.
+        However, some ports already have their own GC3D implementation.
+        In QT and chromium, for example, GC3D delegates to GC3DInternal.
+        So, it would be better to allow each port to decide whether or not
+        to include files in platform/graphics/opengl. 
+
+        * CMakeLists.txt:
+
+2011-09-12  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/10054615> Floats in ruby text intrude into the base
+
+        Reviewed by Darin Adler.
+
+        Test: fast/ruby/float-overhang-from-ruby-text.html
+
+        * rendering/RenderRubyText.cpp:
+        (WebCore::RenderRubyText::avoidsFloats): Added. Returns true. This ensures that
+        RenderBlock::clearFloats() will not consider ruby text as having intruding floats.
+        * rendering/RenderRubyText.h:
+
+2011-09-12  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67970
+
+        Add unprefixed border-image property.
+
+        Reviewed by Beth Dakin.
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        * css/CSSPropertyNames.in:
+
+2011-09-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        REGRESSION: Moving up doesn't work in some cases
+        https://bugs.webkit.org/show_bug.cgi?id=67522
+
+        Reviewed by Eric Seidel.
+
+        The bug was caused by previousLinePosition's attempting to obtain the last root line box using
+        a position at minCaretOffset (which is, in practice, located at the beginning of wrapped lines).
+
+        Fix the bug by calling maxCaretOffset instead. Because isCandidate returns false at (br, 1),
+        use the positionBeforeNode for br elements.
+
+        Test: editing/selection/move-up-into-wrapped-line.html
+
+        * editing/visible_units.cpp:
+        (WebCore::previousLinePosition):
+
+2011-09-12  David Levin  <levin@chromium.org>
+
+        Make the ThreadSafeRefCounted support in CrossThreadCopier work for T*.
+        https://bugs.webkit.org/show_bug.cgi?id=67947
+
+        Reviewed by Adam Barth.
+
+        The changes are tested by compiling and added compile asserts to do some verification as well.
+
+        * platform/CrossThreadCopier.cpp:
+        Added some compile asserts to verify various match and non-matches for CrossThreadCopier.
+        * platform/CrossThreadCopier.h:
+        Added a typedef to convert T* to T, just like the typedef's to remove RefPtr and PassRefPtr.
+        Added a compile assert to verify that only one of the typedef did anything.
+        (CrossThreadCopierBase<false, true, T>::copy): Remove "get" as it is unnecessary.
+        It shouldn't have been here (PassRefPtr and RefPtr easily and sometimes more efficiently
+        convert to PassRefPtr without get). Also, a raw pointer doesn't have a get() method.
+
+2011-09-12  Chris Rogers  <crogers@google.com>
+
+        Address lifetime issues in OfflineAudioDestinationNode
+        https://bugs.webkit.org/show_bug.cgi?id=67949
+
+        Reviewed by Kenneth Russell.
+
+        No new tests.  This does not change JavaScript API.
+
+        * webaudio/OfflineAudioDestinationNode.cpp:
+        (WebCore::OfflineAudioDestinationNode::~OfflineAudioDestinationNode):
+        (WebCore::OfflineAudioDestinationNode::render):
+        (WebCore::OfflineAudioDestinationNode::notifyCompleteDispatch):
+
+2011-09-12  Jeff Timanus  <twiz@chromium.org>
+
+        [chromium]  Prevent a crash when tearing down an ImageBuffer that was not successfully initialized.
+        https://bugs.webkit.org/show_bug.cgi?id=67944
+
+        Reviewed by Stephen White.
+        
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::~ImageBuffer):
+
+2011-09-12  Michael Saboff  <msaboff@apple.com>
+
+        Update RegExp and related classes to use 8 bit strings when available
+        https://bugs.webkit.org/show_bug.cgi?id=67337
+
+        Updated call to match to use UString& instead of UChar*.
+
+        Reviewed by Gavin Barraclough.
+
+        No new tests, Covered by existing tests.
+
+        * platform/text/RegularExpression.cpp:
+        (WebCore::RegularExpression::match):
+
+2011-09-12  Beth Dakin  <bdakin@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67898
+        REGRESSION(r94900): fast/images/support-broken-image-delegate.html fails on Mac
+
+        Reviewed by Simon Fraser.
+
+        New function willPaintBrokenImage() returns true when there has been an error 
+        loading the image and the broken image icon will be used in its place. This is 
+        necessary since it is possible to have an error loading an image and to NOT use 
+        the broken image icon. 
+        * loader/cache/CachedImage.cpp:
+        (WebCore::CachedImage::willPaintBrokenImage):
+        * loader/cache/CachedImage.h:
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+
+2011-09-12  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Move contents texture manager from LayerRendererChromium to CCLayerTreeHost
+        https://bugs.webkit.org/show_bug.cgi?id=67440
+
+        Reviewed by Kenneth Russell.
+
+        This moves the contents TextureManager over to the CCLayerTreeHost, where it belongs, and adds in a commit path
+        to make sure that textures are deleted even if the page is not visible.  This move also removed the need for
+        LayerRendererChromium's CCLayerTreeHost pointer, so I removed that as well.  That meant moving the
+        layerTreeAsText() logic over to the CCLayerImpl side, which is where it really belonged anyway.
+
+        Covered by existing compositing/ tests and
+        platform/chromium/compositor/lost-compositor-context-with-rendersurface.html
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::releaseRenderSurfaceTextures):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        (WebCore::LayerRendererChromium::cleanupSharedObjects):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        (WebCore::LayerRendererChromium::setContentsTextureMemoryUseBytes):
+        * platform/graphics/chromium/TextureManager.cpp:
+        (WebCore::TextureManager::highLimitBytes):
+        (WebCore::TextureManager::reclaimLimitBytes):
+        (WebCore::TextureManager::lowLimitBytes):
+        * platform/graphics/chromium/TextureManager.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
+        (WebCore::CCLayerTreeHost::initialize):
+        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::deleteContentsTextures):
+        (WebCore::CCLayerTreeHost::commitTo):
+        (WebCore::CCLayerTreeHost::setVisible):
+        (WebCore::CCLayerTreeHost::contentsTextureManager):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
+        (WebCore::CCLayerTreeHostImpl::setVisible):
+        * platform/graphics/chromium/cc/CCProxy.h:
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
+        (WebCore::CCSingleThreadProxy::setNeedsCommit):
+        (WebCore::CCSingleThreadProxy::stop):
+        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
+        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
+        (WebCore::CCThreadProxy::setNeedsCommit):
+        (WebCore::CCThreadProxy::setNeedsCommitOnCCThread):
+        (WebCore::CCThreadProxy::layerTreeHostClosedOnCCThread):
+        * platform/graphics/chromium/cc/CCThreadProxy.h:
+
+2011-09-12  Chris Rogers  <crogers@google.com>
+
+        DelayNode delay buffer is not correctly wrapping around
+        https://bugs.webkit.org/show_bug.cgi?id=67872
+
+        Reviewed by Kenneth Russell.
+
+        Test: webaudio/delaynode.html
+
+        * webaudio/DelayDSPKernel.cpp:
+        (WebCore::DelayDSPKernel::process):
+
+2011-09-12  Arko Saha  <arko@motorola.com>
+
+        Selectstart is not fired when selection was created by arrow keys.
+        https://bugs.webkit.org/show_bug.cgi?id=60430
+
+        Reviewed by Ryosuke Niwa.
+
+        Fire selectstart when a user starts extending the selection using arrow key.
+        Fixed by Arko Saha  <arko@motorola.com> and Kaustubh Atrawalkar  <kaustubh@motorola.com>
+
+        Tests: fast/events/selectstart-by-arrow-keys-prevent-default.html
+               fast/events/selectstart-by-arrow-keys.html
+
+        * editing/FrameSelection.cpp:
+        (WebCore::FrameSelection::modify):
+        (WebCore::FrameSelection::shouldChangeSelection):
+        (WebCore::FrameSelection::dispatchSelectStart):
+        * editing/FrameSelection.h:
+
+2011-09-12  James Robinson  <jamesr@chromium.org>
+
+        [chromium] REGRESSION(94353): Compositor textures and resources leaked when tab closed that is not last tab in the process
+        https://bugs.webkit.org/show_bug.cgi?id=67816
+
+        Reviewed by Kenneth Russell.
+
+        We lack infrastructure to construct an automated test for this today. To test manually, open up a composited
+        page (like the poster circle), duplicate the tab many times, close all the duplicates, and verify that the
+        memory use returns to the single tab level.
+
+        * platform/graphics/chromium/LayerChromium.h:
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::TiledLayerChromium::setLayerTreeHost):
+        * platform/graphics/chromium/VideoLayerChromium.cpp:
+        (WebCore::VideoLayerChromium::setLayerTreeHost):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
+        (WebCore::CCLayerTreeHost::clearRenderSurfacesRecursive):
+        (WebCore::CCLayerTreeHost::setRootLayer):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
+
+2011-09-12  Kentaro Hara  <haraken@google.com>
+
+        Implement a HashChangeEvent constructor for JSC
+        https://bugs.webkit.org/show_bug.cgi?id=67924
+
+        Reviewed by Sam Weinig.
+
+        The spec for the HashChangeEvent constructor is here:
+        http://www.whatwg.org/specs/web-apps/current-work/#hashchangeevent
+
+        Test: fast/events/constructors/hash-change-event-constructor.html
+
+        * bindings/generic/EventConstructors.h: Added a definition for the HashChangeEvent constructor.
+        * bindings/js/JSEventConstructors.cpp: Added #includes for HashChangeEvent.
+        * dom/HashChangeEvent.h: Added a definition for HashChangeEventInit.
+        (WebCore::HashChangeEventInit::HashChangeEventInit):
+        (WebCore::HashChangeEvent::create):
+        (WebCore::HashChangeEvent::HashChangeEvent):
+        * dom/HashChangeEvent.idl: Makes HashChangeEvent constructible.
+
+2011-09-12  Mike Reed  <reed@google.com>
+
+        [skia] remove dead code, no functionality change
+        https://bugs.webkit.org/show_bug.cgi?id=67844
+
+        Reviewed by Kenneth Russell.
+
+        No new tests. just removing dead-code, existing tests apply
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::Font::drawGlyphs):
+
+2011-09-12  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Runtime.callFunctionOn does not accept arguments that evaluate to false.
+        https://bugs.webkit.org/show_bug.cgi?id=67934
+
+        Reviewed by Tony Gentilcore.
+
+        * inspector/InjectedScriptSource.js:
+
+2011-09-12  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: event dividers do not update timeline boundaries.
+        https://bugs.webkit.org/show_bug.cgi?id=67932
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._onLoadEventFired):
+        (WebInspector.NetworkLogView.prototype._domContentLoadedEventFired):
+        (WebInspector.NetworkLogView.prototype.refresh):
+        (WebInspector.NetworkTimeCalculator.prototype.updateBoundariesForEventTime):
+
+2011-09-12  Kentaro Hara  <haraken@google.com>
+
+        Implement a WebKitAnimationEvent constructor for V8
+        https://bugs.webkit.org/show_bug.cgi?id=67922
+
+        Reviewed by Adam Barth.
+
+        Test: fast/events/constructors/webkit-animation-event-constructor.html
+
+        * bindings/v8/custom/V8EventConstructors.cpp: Added the WebKitAnimationEvent constructor.
+        * dom/WebKitAnimationEvent.idl: Added a 'V8CustomConstructor' attribute.
+
+2011-09-12  Andreas Kling  <kling@webkit.org>
+
+        Shrink CanvasGradient for builds without ENABLE(DASHBOARD_SUPPORT).
+        https://bugs.webkit.org/show_bug.cgi?id=67916
+
+        Reviewed by Kenneth Rohde Christiansen.
+
+        * html/canvas/CanvasGradient.cpp:
+        (WebCore::CanvasGradient::CanvasGradient):
+        (WebCore::CanvasGradient::addColorStop):
+        * html/canvas/CanvasGradient.h:
+
+2011-09-12  Shinya Kawanaka  <shinyak@google.com>
+
+        Characters beyond U+10000 should be deleted by one pressing delete key.
+        https://bugs.webkit.org/show_bug.cgi?id=40351
+
+        Reviewed by Kent Tamura.
+
+        If a character is the trail part of unicode surrogate pair, the lead part of it
+        should also be deleted. Also, If in MacOSX, the deletion should honor Mac's behavior.
+
+        Test: editing/deleting/delete-surrogatepair.html
+
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::previousOffsetForBackwardDeletion):
+          Added if-macro to support chromium on mac, and added trail part check for unicode character.
+
+2011-09-11  Kentaro Hara  <haraken@google.com>
+
+        Implement a ProgressEvent constructor for V8
+        https://bugs.webkit.org/show_bug.cgi?id=67800
+
+        Reviewed by Sam Weinig.
+
+        Test: fast/events/constructors/progress-event-constructor.html
+
+        * bindings/js/JSDictionary.cpp:
+        (WebCore::JSDictionary::convertValue): Replaced UnsignedLongLongMax with std::numeric_limits<unsigned long long>::max().
+        * bindings/v8/OptionsObject.cpp:
+        (WebCore::OptionsObject::getKeyValue): Returns an unsigned long long value corresponding to a given key. Spec: http://www.w3.org/TR/WebIDL/#es-unsigned-long-long
+        * bindings/v8/OptionsObject.h:
+        * bindings/v8/custom/V8EventConstructors.cpp: Added the ProgressEvent constructor.
+        * dom/ProgressEvent.idl: Added a 'V8CustomConstructor' attribute.
+
+2011-09-11  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        REGRESSION (r87351): toggling display of lots (thousands) of elements with display:none is very slow
+        https://bugs.webkit.org/show_bug.cgi?id=67581
+
+        Reviewed by Darin Adler.
+
+        Test: perf/show-hide-table-rows.html
+
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRendererFactory::createRendererAndStyle): Moved style-creating code into createRendererIfNeeded, renamed
+            to createRenderer.
+        (WebCore::NodeRendererFactory::createRendererIfNeeded): Re-arrange code to avoid unnecessary creation of renderers.
+
+2011-09-11  Jeremy Moskovich  <jeremy@chromium.org>
+
+        [Chromium] Change OOP Font loading code to use CGFont*() APIs.
+        https://bugs.webkit.org/show_bug.cgi?id=66935
+
+        This change is necessary due a bug in ATSFontDeactivate() on 10.7.
+        See crbug.com/93191 for details.
+
+        Reviewed by Eric Seidel.
+
+        No new tests - covered by existing tests.
+
+        * platform/chromium/PlatformBridge.h:
+        * platform/graphics/chromium/CrossProcessFontLoading.h:
+        * platform/graphics/chromium/CrossProcessFontLoading.mm:
+        (WebCore::MemoryActivatedFont::create):
+        (WebCore::MemoryActivatedFont::MemoryActivatedFont):
+        (WebCore::MemoryActivatedFont::~MemoryActivatedFont):
+
+2011-09-09  Oliver Hunt  <oliver@apple.com>
+
+        Remove support for anonymous storage from jsobjects
+        https://bugs.webkit.org/show_bug.cgi?id=67881
+
+        Reviewed by Sam Weinig.
+
+        Remove all use of anonymous slots, this required modifying
+        bindings generation to add member variables for cached attributes,
+        and override visitChildren with the necessary logic to mark those
+        new members.
+
+        I added bindings generation tests for these values.
+
+        * bindings/js/JSAudioConstructor.h:
+        (WebCore::JSAudioConstructor::createStructure):
+        * bindings/js/JSDOMBinding.h:
+        (WebCore::DOMConstructorObject::createStructure):
+        * bindings/js/JSDOMGlobalObject.h:
+        (WebCore::JSDOMGlobalObject::createStructure):
+        * bindings/js/JSDOMWindowBase.h:
+        (WebCore::JSDOMWindowBase::createStructure):
+        * bindings/js/JSDOMWindowShell.h:
+        (WebCore::JSDOMWindowShell::createStructure):
+        * bindings/js/JSDOMWrapper.h:
+        (WebCore::JSDOMWrapper::createStructure):
+        * bindings/js/JSImageConstructor.h:
+        (WebCore::JSImageConstructor::createStructure):
+        * bindings/js/JSMessageEventCustom.cpp:
+        (WebCore::JSMessageEvent::data):
+        (WebCore::JSMessageEvent::initMessageEvent):
+        * bindings/js/JSOptionConstructor.h:
+        (WebCore::JSOptionConstructor::createStructure):
+        * bindings/js/JSWorkerContextBase.h:
+        (WebCore::JSWorkerContextBase::createStructure):
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateHeader):
+        (GenerateImplementation):
+        (GenerateConstructorDeclaration):
+        * bindings/scripts/test/JS/JSTestInterface.cpp:
+        (WebCore::JSTestInterfaceConstructor::createStructure):
+        * bindings/scripts/test/JS/JSTestInterface.h:
+        (WebCore::JSTestInterface::createStructure):
+        (WebCore::JSTestInterfacePrototype::createStructure):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
+        (WebCore::JSTestMediaQueryListListenerConstructor::createStructure):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
+        (WebCore::JSTestMediaQueryListListener::createStructure):
+        (WebCore::JSTestMediaQueryListListenerPrototype::createStructure):
+        * bindings/scripts/test/JS/JSTestObj.cpp:
+        (WebCore::JSTestObjConstructor::createStructure):
+        (WebCore::jsTestObjCachedAttribute1):
+        (WebCore::jsTestObjCachedAttribute2):
+        (WebCore::JSTestObj::visitChildren):
+        * bindings/scripts/test/JS/JSTestObj.h:
+        (WebCore::JSTestObj::createStructure):
+        (WebCore::JSTestObjPrototype::createStructure):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
+        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::createStructure):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
+        (WebCore::JSTestSerializedScriptValueInterface::createStructure):
+        (WebCore::JSTestSerializedScriptValueInterfacePrototype::createStructure):
+        * bindings/scripts/test/TestObj.idl:
+        * bindings/scripts/test/V8/V8TestObj.cpp:
+        (WebCore::TestObjInternal::cachedAttribute1AttrGetter):
+        (WebCore::TestObjInternal::cachedAttribute2AttrGetter):
+        * bridge/c/CRuntimeObject.h:
+        (JSC::Bindings::CRuntimeObject::createStructure):
+        * bridge/c/c_instance.cpp:
+        (JSC::Bindings::CRuntimeMethod::createStructure):
+        * bridge/jni/jsc/JavaInstanceJSC.cpp:
+        (JavaRuntimeMethod::createStructure):
+        * bridge/jni/jsc/JavaRuntimeObject.h:
+        (JSC::Bindings::JavaRuntimeObject::createStructure):
+        * bridge/objc/ObjCRuntimeObject.h:
+        (JSC::Bindings::ObjCRuntimeObject::createStructure):
+        * bridge/objc/objc_instance.mm:
+        (ObjCRuntimeMethod::createStructure):
+        * bridge/objc/objc_runtime.h:
+        (JSC::Bindings::ObjcFallbackObjectImp::createStructure):
+        * bridge/runtime_array.h:
+        (JSC::RuntimeArray::createStructure):
+        * bridge/runtime_method.h:
+        (JSC::RuntimeMethod::createStructure):
+        * bridge/runtime_object.h:
+        (JSC::Bindings::RuntimeObject::createStructure):
+
+2011-09-01  Filip Pizlo  <fpizlo@apple.com>
+
+        The executable allocator makes it difficult to free individual
+        chunks of executable memory
+        https://bugs.webkit.org/show_bug.cgi?id=66363
+
+        Reviewed by Oliver Hunt.
+        
+        Introduced a best-fit, balanced-tree based allocator. The allocator
+        required a balanced tree that does not allocate memory and that
+        permits the removal of individual nodes directly (as opposed to by
+        key); neither AVLTree nor WebCore's PODRedBlackTree supported this.
+        Changed all references to executable code to use a reference counted
+        handle.
+
+        No new layout tests because behavior is not changed.  New API unit
+        tests:
+        Tests/WTF/RedBlackTree.cpp
+        Tests/WTF/MetaAllocator.cpp
+
+        * ForwardingHeaders/wtf/MetaAllocatorHandle.h: Added.
+
+2011-09-10  Sam Weinig  <sam@webkit.org>
+
+        Add isInterruptedExecutionException and isTerminatedExecutionException predicates
+        https://bugs.webkit.org/show_bug.cgi?id=67892
+
+        Reviewed by Andy "First Time Reviewer" Estes.
+
+        * bindings/js/JSDOMBinding.cpp:
+        (WebCore::reportException):
+        * bindings/js/JSEventListener.cpp:
+        (WebCore::JSEventListener::handleEvent):
+        * bindings/js/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::evaluate):
+        Use the new predicates instead of probing the ClassInfo directly.
+
+2011-09-10  Kevin Ollivier  <kevino@theolliviers.com>
+
+        [wx] Unreviewed build fix. MSW build fixes.
+
+        * config.h:
+
+2011-09-09  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=67861
+        
+        Implement border-image-outset (and the mask equivalents).
+
+        Reviewed by Beth Dakin.
+
+        Added new tests in fast/borders and fast/reflections.
+
+        * css/CSSBorderImageValue.cpp:
+        (WebCore::CSSBorderImageValue::CSSBorderImageValue):
+        (WebCore::CSSBorderImageValue::cssText):
+        * css/CSSBorderImageValue.h:
+        (WebCore::CSSBorderImageValue::create):
+        Add m_outset field to CSSBorderImageValue and teach it how to dump the field as
+        part of cssText().
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::valueForNinePieceImageQuad):
+        (WebCore::valueForNinePieceImage):
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
+        Add support for border-image-outset and -webkit-mask-box-image-outset. Refactor
+        the code so that border-image-width and border-image-outset use a common
+        function.
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        (WebCore::BorderImageParseContext::BorderImageParseContext):
+        (WebCore::BorderImageParseContext::allowOutset):
+        (WebCore::BorderImageParseContext::commitSlash):
+        (WebCore::BorderImageParseContext::commitBorderWidth):
+        (WebCore::BorderImageParseContext::commitBorderOutset):
+        (WebCore::BorderImageParseContext::commitRepeat):
+        (WebCore::BorderImageParseContext::commitBorderImage):
+        (WebCore::CSSParser::parseBorderImage):
+        Teach the border image parsing code about outsets. This code will soon be
+        replaced by true shorthand parsing code, but for now keep it working and add
+        outset support to it.
+
+        (WebCore::BorderImageQuadParseContext::BorderImageQuadParseContext):
+        (WebCore::BorderImageQuadParseContext::commitBorderImageQuad):
+        (WebCore::CSSParser::parseBorderImageQuad):
+        (WebCore::CSSParser::parseBorderImageWidth):
+        (WebCore::CSSParser::parseBorderImageOutset):
+        * css/CSSParser.h:
+        Refactor the border-image-width code so that it can be shared by border-image-outset, since
+        they are extremely similar.
+
+        * css/CSSPropertyNames.in:
+        Add the new properties.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::mapNinePieceImage):
+        (WebCore::CSSStyleSelector::mapNinePieceImageQuad):
+        (WebCore::CSSStyleSelector::loadPendingImages):
+        * css/CSSStyleSelector.h:
+        Refactor the code so that width/outset share common mapping functions. Add support for outset.
+
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::addToLine):
+        (WebCore::InlineFlowBox::addBoxShadowVisualOverflow):
+        (WebCore::InlineFlowBox::addBorderOutsetVisualOverflow):
+        (WebCore::InlineFlowBox::computeOverflow):
+        Add new functions for computing the visual overflow caused by border outsets. Fix bugs in
+        the shadow overflow code as well.
+
+        (WebCore::clipRectForNinePieceImageStrip):
+        (WebCore::InlineFlowBox::paintBoxDecorations):
+        (WebCore::InlineFlowBox::paintMask):
+        * rendering/InlineFlowBox.h:
+        Make sure the clip rect pushed when painting one piece of a split inline strip is expanded to
+        include the border and mask outsets. Always include the block direction expansion, and conditionally
+        include the inline direction expansion based off includeLogicalLeftEdge()/includeLogicalRightEdge().
+        clipRectForNinePieceImageStrip is a common function shared by masks and border images that does this
+        work.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::computeOverflow):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::maskClipRect):
+        (WebCore::RenderBox::addBoxShadowAndBorderOverflow):
+        * rendering/RenderBox.h:
+        Rename addShadowOverflow to addBoxShadowAndBorderOverflow. Have it compute both shadow and border image
+        outset overflow. Fix bugs with shadow overflow computation.
+
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::paintNinePieceImage):
+        Change painting to apply the outsets to inflate the border image drawing area.
+
+        * rendering/RenderEmbeddedObject.cpp:
+        (WebCore::RenderEmbeddedObject::layout):
+        * rendering/RenderIFrame.cpp:
+        (WebCore::RenderIFrame::layout):
+        Patched to call the renamed addBoxShadowAndBorderOverflow function instead of addShadowOverflow.
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::calculateRects):
+        Patched to no longer apply box-shadow to overflow clip areas when inflating the intersection area for the
+        layer bounds. Instead we generically apply all visual overflow so that border image outsets will also be
+        included. This fixes https://bugs.webkit.org/show_bug.cgi?id=37467.
+
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::layout):
+        Patched to call the renamed addBoxShadowAndBorderOverflow function instead of addShadowOverflow.
+
+        * rendering/style/NinePieceImage.cpp:
+        (WebCore::NinePieceImage::operator==):
+        * rendering/style/NinePieceImage.h:
+        (WebCore::NinePieceImage::NinePieceImage):
+        (WebCore::NinePieceImage::outset):
+        (WebCore::NinePieceImage::setOutset):
+        (WebCore::NinePieceImage::computeOutset):
+        (WebCore::NinePieceImage::copyOutsetFrom):
+        Add the outset field to NinePieceImage along with some helpers for manipulating outsets.
+
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::getImageOutsets):
+        (WebCore::RenderStyle::getImageHorizontalOutsets):
+        (WebCore::RenderStyle::getImageVerticalOutsets):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::hasBorderImageOutsets):
+        (WebCore::InheritedFlags::getBorderImageOutsets):
+        (WebCore::InheritedFlags::getBorderImageHorizontalOutsets):
+        (WebCore::InheritedFlags::getBorderImageVerticalOutsets):
+        (WebCore::InheritedFlags::getBorderImageInlineDirectionOutsets):
+        (WebCore::InheritedFlags::getBorderImageBlockDirectionOutsets):
+        (WebCore::InheritedFlags::getImageInlineDirectionOutsets):
+        (WebCore::InheritedFlags::getImageBlockDirectionOutsets):
+        Helpers for outset computation used by painting and overflow functions.
+
+2011-09-10  Dan Bernstein  <mitz@apple.com>
+
+        Actually prevent unnecessary casts to MediaControls*.
+
+        Reviewed by Oliver Hunt.
+
+        * html/shadow/MediaControls.h:
+
+2011-09-10  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Remove printf added by r94900.
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::drawPlatformResizerImage):
+
+2011-09-09  Chris Marrin  <cmarrin@apple.com>
+
+        requestAnimationFrame doesn't throttle on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=67171
+
+        Reviewed by Simon Fraser.
+
+        Changed requestAnimationFrame to use a Timer in ScriptedAnimationController
+        on Mac, rather than runLoopObservers. The Timer is throttled to fire no
+        faster than every 15ms. It is behind a WTF_USE_REQUEST_ANIMATION_FRAME_TIMER
+        flag and can be used by any implementation, but currently it is only enabled
+        by PLATFORM(MAC).
+
+        * dom/ScriptedAnimationController.cpp:
+        (WebCore::ScriptedAnimationController::ScriptedAnimationController):
+        (WebCore::ScriptedAnimationController::resume):
+        (WebCore::ScriptedAnimationController::registerCallback):
+        (WebCore::ScriptedAnimationController::serviceScriptedAnimations):
+        (WebCore::ScriptedAnimationController::scheduleAnimation):
+        (WebCore::ScriptedAnimationController::animationTimerFired):
+        * dom/ScriptedAnimationController.h:
+        * loader/EmptyClients.h:
+        * page/Chrome.cpp:
+        (WebCore::Chrome::scheduleAnimation):
+        * page/ChromeClient.h:
+
+2011-09-10  Jarred Nicholls  <jarred@sencha.com>
+
+        [Qt] QWebSettings::setUserStyleSheetUrl() does not work with windows paths that contain drive letters
+        https://bugs.webkit.org/show_bug.cgi?id=34884
+        
+        KURL::path() alone does not handle removing the leading slash from a windows file path.
+        Using QUrl::toLocalFile() will turn file:///C:/path into C:/path appropriately.
+
+        Reviewed by Andreas Kling.
+
+        * platform/qt/KURLQt.cpp:
+        (WebCore::KURL::fileSystemPath):
+
+2011-09-10  Ken Buchanan <kenrb@chromium.org>
+
+        Crash due to bad data in SVGDocumentExtensions m_pendingResources
+        https://bugs.webkit.org/show_bug.cgi?id=67488
+
+        Reviewed by Nikolas Zimmermann.
+
+        Resolving a crash condition caused by the deletion of
+        elements while pending resource entries for those elements are still
+        recorded.
+
+        * rendering/svg/RenderSVGResourceContainer.cpp:
+        (WebCore::RenderSVGResourceContainer::registerResource)
+        * svg/SVGDocumentExtensions.h:
+        (WebCore::SVGDocumentExtensions::isElementInPendingResources)
+        * svg/SVGDocumentExtensions.cpp:
+        (WebCore::SVGDocumentExtensions::addPendingResource)
+        (WebCore::SVGDocumentExtensions::isElementInPendingResources)
+        (WebCore::SVGDocumentExtensions::removeElementFromPendingResources)
+        * svg/SVGStyledElement.h:
+        (WebCore::SVGStyledElement::clearHasPendingResourcesIfPossible)
+        * svg/SVGStyledElement.cpp:
+        (WebCore::SVGStyledElement::buildPendingResourcesIfNeeded)
+        (WebCore::SVGStyledElement::clearHasPendingResourcesIfPossible)
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::svgAttributeChanged)
+
+2011-09-10  Adam Barth  <abarth@webkit.org>
+
+        Remove DocumentWriter::deprecatedFrameEncoding()
+        https://bugs.webkit.org/show_bug.cgi?id=67882
+
+        Reviewed by Eric Seidel.
+
+        Three years ago, in http://trac.webkit.org/changeset/39026, Alexey
+        Proskuryakov added ContentDispositionEncodingFallbackArray to work
+        around a web site compatibility issue with a non-ASCII file name
+        becoming garbled when received in the Content-Disposition header.
+
+        Since that time, there has been copious discussion of this topic among
+        browser vendors, in the IETF, and in the broader web community.  For
+        example, here is a Stack Overflow thread about this topic:
+
+        http://stackoverflow.com/questions/93551/how-to-encode-the-filename-parameter-of-content-disposition-header-in-http
+
+        Eric Lawrence has written a blog post that summarizes IE's perspective
+        on this issue:
+
+        http://blogs.msdn.com/b/ieinternals/archive/2010/06/07/content-disposition-attachment-and-international-unicode-characters.aspx
+
+        The current consensus is that browsers should implement RFC 6266,
+        which is a new RFC that updates the definition of the
+        Content-Disposition header.  Chrome and Firefox have both implemented
+        RFC 6266 and have encountered only one issue, which was then fixed by
+        the web site operator.  IE has also implemented RFC 6266, but I don't
+        have detailed information about their compatibility experience.
+
+        This patch add explicit PLATFORM #ifdefs around the quirky
+        implementation previously used in Apple's Mac and Windows ports.  This
+        code is already only used on Apple's ports, so this patch introduces no
+        functional changes.  It does, however, discourage other ports from
+        adopting this quirk.  IMHO, Apple should remove this quirk as soon as
+        compatibility allows and converge behavior with the other major browser
+        vendors.
+
+        See bug for manual test (the bug manifests in Safari download UI).
+
+        * loader/DocumentWriter.cpp:
+        * loader/DocumentWriter.h:
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::addExtraFieldsToRequest):
+        * platform/network/ResourceRequestBase.cpp:
+        (WebCore::ResourceRequestBase::adopt):
+        (WebCore::ResourceRequestBase::copyData):
+        * platform/network/ResourceRequestBase.h:
+
+2011-09-09  Beth Dakin  <bdakin@apple.com>
+
+        Attempted Leopard build fix.
+
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::paintReplaced):
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::drawPlatformResizerImage):
+
+2011-09-09  Beth Dakin  <bdakin@apple.com>
+
+        Fix for https://bugs.webkit.org/show_bug.cgi?id=67819
+        Use high resolution platform images when the deviceScaleFactor > 1
+        -and corresponding-
+        <rdar://problem/10003098>
+
+        Reviewed by Darin Adler.
+
+        Add all of the new high resolution images. I also removed some tiffs from the 
+        project and replaced them with png equivalents (that are already checked into 
+        WebCore anyway). Since the high resolution images are pngs, it makes sense to use 
+        pngs for all of the images that load through Image::loadPlatformResource()
+        * WebCore.xcodeproj/project.pbxproj:
+        * platform/graphics/mac/ImageMac.mm:
+        (WebCore::Image::loadPlatformResource):
+
+        Load the @2x resource for deviceScaleFactors >= 2.
+        * editing/DeleteButtonController.cpp:
+        (WebCore::DeleteButtonController::createDeletionUI):
+
+        CachedImage::brokenImage() is no longer a static helper function, but a real 
+        member function. It also now loads the @2x resource for deviceScaleFactors >= 2 
+        and takes a parameter for the deviceScaleFactor. When CachedImage::image() returns 
+        the brokenImage(), it just returns the 1x version. brokenImage() has to be called 
+        directly to reliably return the deviceScaleFactor-appropriate resource.
+        * loader/cache/CachedImage.cpp:
+        (WebCore::CachedImage::brokenImage):
+        (WebCore::CachedImage::image):
+        * loader/cache/CachedImage.h:
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::drawPlatformResizerImage):
+        (WebCore::RenderLayer::paintResizer):
+        * rendering/RenderLayer.h:
+
+        New static function to retrieve the deviceScaleFactor for callers that do not have 
+        direct access to a Page.
+        * page/Page.cpp:
+        (WebCore::Page::deviceScaleFactor):
+        * page/Page.h:
+
+        Call CachedImage::brokenImage() for the broken-image image at an accurate 
+        resolution.
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::imageSizeForError):
+        (WebCore::RenderImage::paintReplaced):
+
+2011-09-09  Erik Arvidsson  <arv@chromium.org>
+
+        Move Element.contains to Node
+        https://bugs.webkit.org/show_bug.cgi?id=67651
+
+        Reviewed by Darin Adler.
+
+        This moves the contains method from Element to Node as in the DOM4 working draft: 
+        http://dvcs.w3.org/hg/domcore/raw-file/tip/Overview.html#dom-node-contains
+
+        This also special cases Document contains to make it O(1) instead of O(depth).
+
+        Tests: fast/dom/Node/contains-method.html
+               perf/document-contains.html
+
+        * bindings/objc/PublicDOMInterfaces.h: Move contains from DOMElement to DOMNode.
+        * dom/Element.idl:
+        * dom/Node.cpp:
+        (WebCore::Node::contains): Added document special case.
+        * dom/Node.idl:
+        * editing/DeleteSelectionCommand.cpp:
+        (WebCore::DeleteSelectionCommand::mergeParagraphs): Added a null check.
+
+2011-09-09  Tim Horton  <timothy_horton@apple.com>
+
+        Text rendered with a simple (i.e. 0px blur) shadow inside a transparency layer has a double shadow
+        https://bugs.webkit.org/show_bug.cgi?id=67543
+        <rdar://problem/10070536>
+
+        Reviewed by Darin Adler.
+
+        Generalize (begin|end)TransparencyLayer, which now forward
+        through to (begin|end)PlatformTransparencyLayer, so that
+        isInTransparencyLayer can exist on every platform.
+
+        Make use of isInTransparencyLayer in FontMac to disable
+        "simple" shadow drawing when the text is being rendered
+        into a transparency layer.
+
+        Test: svg/custom/simple-text-double-shadow.svg
+
+        * platform/graphics/GraphicsContext.cpp:
+        (WebCore::GraphicsContext::GraphicsContext):
+        (WebCore::GraphicsContext::~GraphicsContext):
+        (WebCore::GraphicsContext::beginTransparencyLayer):
+        (WebCore::GraphicsContext::endTransparencyLayer):
+        (WebCore::GraphicsContext::isInTransparencyLayer):
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/cairo/GraphicsContextCairo.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/cairo/GraphicsContextPlatformPrivateCairo.h:
+        * platform/graphics/cg/GraphicsContextCG.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/cg/GraphicsContextPlatformPrivateCG.h:
+        (WebCore::GraphicsContextPlatformPrivate::GraphicsContextPlatformPrivate):
+        * platform/graphics/haiku/GraphicsContextHaiku.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/mac/FontMac.mm:
+        (WebCore::Font::drawGlyphs):
+        * platform/graphics/openvg/GraphicsContextOpenVG.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/qt/GraphicsContextQt.cpp:
+        (WebCore::GraphicsContext::isInTransparencyLayer):
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/skia/GraphicsContextSkia.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/win/FontCGWin.cpp:
+        (WebCore::drawGDIGlyphs):
+        * platform/graphics/win/GraphicsContextCGWin.cpp:
+        (WebCore::GraphicsContext::releaseWindowsContext):
+        * platform/graphics/win/GraphicsContextCairoWin.cpp:
+        (WebCore::GraphicsContext::releaseWindowsContext):
+        * platform/graphics/win/GraphicsContextWin.cpp:
+        (WebCore::GraphicsContext::getWindowsContext):
+        * platform/graphics/wince/GraphicsContextWinCE.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/graphics/wx/GraphicsContextWx.cpp:
+        (WebCore::GraphicsContext::beginPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::endPlatformTransparencyLayer):
+        (WebCore::GraphicsContext::supportsTransparencyLayers):
+        * platform/win/ScrollbarThemeWin.cpp:
+        * plugins/win/PluginViewWin.cpp:
+        * rendering/RenderThemeWin.cpp:
+
+2011-09-09  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        [V8] V8WebKitPoint::constructorCallback leaks
+        https://bugs.webkit.org/show_bug.cgi?id=67865
+
+        Reviewed by Adam Barth.
+
+        Covered by fast/js/instanceof-XMLHttpRequest.html under Valgrind.
+
+        * bindings/v8/custom/V8WebKitPointConstructor.cpp:
+        (WebCore::V8WebKitPoint::constructorCallback): Changed the code
+        to use a RefPtr (per our usual style). Also use toV8 that will
+        take care of properly wrapping the object.
+
 2011-09-09  Chris Rogers  <crogers@google.com>
 
         HRTFDatabaseLoader should not call WTF::waitForThreadCompletion() more than once