[WebKit-https.git] / Source / WebCore / ChangeLog

2013-09-05  Alberto Garcia  <berto@igalia.com>

        [GTK] MediaControlsGtk: fix warning in constructor due to incorrect order of attributes
        https://bugs.webkit.org/show_bug.cgi?id=120703

        Reviewed by Carlos Garcia Campos.

        Fix member initialization so it matches their declaration [-Wreorder].

        * html/shadow/MediaControlsGtk.cpp:
        (WebCore::MediaControlsGtk::MediaControlsGtk):

2013-09-04  Dirk Schulze  <krit@webkit.org>

        Support interpolation between cross-fade() images
        https://bugs.webkit.org/show_bug.cgi?id=119955

        Reviewed by Darin Adler.

        With this patch, CSS can animate from one -webkit-cross-fade
        function to another, when the input images are the same in the
        same order.

        * css/CSSCrossfadeValue.cpp: Added blend function.
        (WebCore::blendFunc):
        (WebCore::CSSCrossfadeValue::blend):
        (WebCore::CSSCrossfadeValue::equals):
        (WebCore::CSSCrossfadeValue::equalInputImages):
        * css/CSSCrossfadeValue.h: Added save casting functions.
        (WebCore::toCSSCrossfadeValue):
        * css/CSSValue.h:
        (WebCore::CSSValue::isCrossfadeValue):
        * page/animation/CSSPropertyAnimation.cpp: Add another condition to
            interpolate between two -webkit-cross-fade functions.
        (WebCore::blendFunc):

2013-09-04  Zoltan Herczeg  <zherczeg@webkit.org>

        <https://webkit.org/b/118553> Hash navigation doesn't affect history when the page is retrieved from appcache

        Reviewed by Darin Adler.

        A new flag called keepInHistory is added to allow keeping
        certain pages in the history even if they have substitute data.

        Test: http/tests/appcache/history-test.html

        * loader/DocumentLoader.cpp:
        (WebCore::DocumentLoader::urlForHistory):
        * loader/SubstituteData.h:
        (WebCore::SubstituteData::SubstituteData):
        (WebCore::SubstituteData::shouldRevealToSessionHistory):
        (WebCore::SubstituteData::setShouldRevealToSessionHistory):
        * loader/appcache/ApplicationCacheHost.cpp:
        (WebCore::ApplicationCacheHost::maybeLoadMainResource):

2013-09-04  Grzegorz Czajkowski  <g.czajkowski@samsung.com>

        Remove deprecated markersForNode(Node* node).
        https://bugs.webkit.org/show_bug.cgi?id=120679

        Reviewed by Ryosuke Niwa.

        DocumentMarkerController::markersForNode(Node* node) has been marked as
        deprecated in favor of markersFor(Node*, MarkerTypes = AllMarkers()).

        No new tests, no behavior change.

        * dom/DocumentMarkerController.cpp:
        * dom/DocumentMarkerController.h:
        Remove never used markersForNode(Node*).

2013-09-04  Andreas Kling  <akling@apple.com>

        CachedPage construction should begin with a Page&.
        <https://webkit.org/b/120721>

        Reviewed by Anders Carlsson.

        We can't create a CachedPage from a null Page anyway.

        * history/CachedPage.cpp:
        (WebCore::CachedPage::create):
        (WebCore::CachedPage::CachedPage):
        (WebCore::CachedPage::restore):
        * history/CachedPage.h:
        * history/PageCache.cpp:
        (WebCore::PageCache::add):
        * history/PageCache.h:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::commitProvisionalLoad):

2013-09-04  Arpita Bahuguna  <a.bah@samsung.com>

        setAttributeNode() does not set the new value to an existing attribute if specified attribute is in a different case.
        https://bugs.webkit.org/show_bug.cgi?id=120293

        Reviewed by Darin Adler.

        setAttributeNode() performs a case-insensitive search for an existing
        attribute. If an existing attribute is found, it retrieves the index of
        such an attribute. For setting the attribute's new value, we call upon
        setAttributeInternal() to which both the index as well as the name of
        the attribute is passed.
        The name passed to this method is the same as the one passed to the
        setAttributeNode() API from the webpage and thus can be in any case.

        However, setAttributeInternal() uses this name to get the corresponding
        existing attribute node. Since this retrieval is not case-insensitive,
        the existing node is not returned and thus the new value is not set on
        the existing node.
        We should instead use the passed index and use that to retrieve the
        existing node.

        Note that obtaining the attribute's value using getAttributeNode() would
        still return the correct value, i.e. the new one.

        Also, this change shall make our behavior similar to that of FF and IE.

        Test: fast/dom/Element/setAttributeNode-for-existing-attribute.html

        * dom/Element.cpp:
        (WebCore::Element::setAttributeInternal):
        If the passed index is not equal to attributeNotFound, we use that index
        to retrieve the existing attribute.

2013-09-04  Andreas Kling  <akling@apple.com>

        CachedFrame construction should begin with a Frame&.
        <https://webkit.org/b/120719>

        Reviewed by Anders Carlsson.

        We can't create a CachedFrame from a null Frame anyway.

        * bindings/js/ScriptCachedFrameData.cpp:
        (WebCore::ScriptCachedFrameData::ScriptCachedFrameData):
        (WebCore::ScriptCachedFrameData::restore):
        * bindings/js/ScriptCachedFrameData.h:
        * history/CachedFrame.cpp:
        (WebCore::CachedFrameBase::CachedFrameBase):
        (WebCore::CachedFrameBase::restore):
        (WebCore::CachedFrame::CachedFrame):
        * history/CachedFrame.h:
        (WebCore::CachedFrame::create):
        * history/CachedPage.cpp:
        (WebCore::CachedPage::CachedPage):

2013-09-04  Andreas Kling  <akling@apple.com>

        Set "render tree being torn down" flag a bit earlier.
        <https://webkit.org/b/120717>

        Reviewed by Anders Carlsson.

        Set the flag at the start of Document::detach() so everyone can get a chance
        to avoid unnecessary work, not just renderers.

        * dom/Document.cpp:
        (WebCore::Document::detach):

2013-09-04  Andreas Kling  <akling@apple.com>

        Cached Page and Frame don't need to be ref-counted.
        <https://webkit.org/b/120710>

        Reviewed by Anders Carlsson.

        - CachedPage is owned by HistoryItem.
        - CachedFrame is owned by CachedPage.

        Remove the ref counting from these objects to make the code less confusing.

        The only place that used this was in FrameLoader::commitProvisionalLoad() which
        took a temporary ref on the CachedPage. Switched this to using a raw pointer.

        * history/CachedFrame.h:
        (WebCore::CachedFrame::create):
        * history/CachedPage.cpp:
        (WebCore::CachedPage::create):
        * history/CachedPage.h:
        * history/HistoryItem.h:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::commitProvisionalLoad):
        (WebCore::FrameLoader::transitionToCommitted):
        * loader/FrameLoader.h:

2013-09-04  Roger Fong  <roger_fong@apple.com>

        Unreviewed. Windows build fix and WebCore project cleanup.

        * WebCore.vcxproj/WebCore.vcxproj.filters:
        * rendering/RenderingAllInOne.cpp:

2013-09-04  Mark Lam  <mark.lam@apple.com>

        Renamed StackIterator to StackVisitor.
        https://bugs.webkit.org/show_bug.cgi?id=120706.

        Reviewed by Geoffrey Garen.

        No new tests.

        * ForwardingHeaders/interpreter/StackIterator.h: Removed.
        * ForwardingHeaders/interpreter/StackVisitor.h: Copied from Source/WebCore/ForwardingHeaders/interpreter/StackIterator.h.
        * bindings/js/JSXMLHttpRequestCustom.cpp:
        (WebCore::SendFunctor::operator()):
        * bindings/js/ScriptCallStackFactory.cpp:
        (WebCore::CreateScriptCallStackFunctor::operator()):
        (WebCore::CreateScriptCallStackForConsoleFunctor::operator()):

2013-09-04  Samuel White  <samuel_white@apple.com>

        AX: when no other label on provided on form elements, WebKit should fall back to using @title
        https://bugs.webkit.org/show_bug.cgi?id=112842

        Reviewed by Chris Fleizach.

        Don't let input elements include empty labels in their accessibility title.

        Test: platform/mac/accessibility/input-title.html

        * accessibility/AccessibilityNodeObject.cpp:
        (WebCore::AccessibilityNodeObject::titleElementText):

2013-09-04  Andreas Kling  <akling@apple.com>

        Make ImageQualityController per-RenderView.
        <https://webkit.org/b/120702>

        Reviewed by Anders Carlsson.

        Move ImageQualityController to its own files and add a RenderView::imageQualityController()
        getter instead of using a global map for all render trees.

        This avoids having to unregister every renderer (well, every RenderBoxModelObject) from the
        global hash map during render tree teardown.

        It also simplifies the live resize optimization a bit since it can now short-circuit if
        the RenderView's FrameView is being resized. (Previously there could be any number of
        RenderViews present in the map.)

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.xcodeproj/project.pbxproj:
        * rendering/ImageQualityController.cpp: Added.
        * rendering/ImageQualityController.h: Added.

2013-09-04  Roger Fong  <roger_fong@apple.com>

        Unreviewed Build fix for Windows DebugSuffix configuration.

        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.vcxproj/WebCore.vcxproj.filters:

2013-09-04  Mark Lam  <mark.lam@apple.com>

        Refining the StackIterator callback interface.
        https://bugs.webkit.org/show_bug.cgi?id=120695.

        Reviewed by Geoffrey Garen.

        No new tests.

        * bindings/js/JSXMLHttpRequestCustom.cpp:
        (WebCore::SendFunctor::SendFunctor):
        (WebCore::SendFunctor::line):
        (WebCore::SendFunctor::url):
        (WebCore::SendFunctor::operator()):
        (WebCore::JSXMLHttpRequest::send):
        * bindings/js/ScriptCallStackFactory.cpp:
        (WebCore::createScriptCallStack):

2013-09-04  Andreas Kling  <akling@apple.com>

        Remove unnecessary RenderView.h inclusion from headers.
        <https://webkit.org/b/120365>

        Reviewed by Anders Carlsson.

        RenderView.h was overzealously included by RenderText and RenderTextTrackCue,
        making it unpleasant to edit on my laptop.

        * rendering/RenderText.h:
        * rendering/RenderTextTrackCue.h:

            Don't include RenderView.h here, do it in .cpp files.

2013-09-04  Alexey Proskuryakov  <ap@apple.com>

        Editor::m_removedAnchor is unused
        https://bugs.webkit.org/show_bug.cgi?id=120701

        Reviewed by Ryosuke Niwa.

        * editing/Editor.h: Removed m_removedAnchor. It was not only unused, but also broken,
        as we didn't reset it when navigating.

2013-09-04  Pratik Solanki  <psolanki@apple.com>

        Document::updateHoverActiveState() should allow for deferred style recalcs
        https://bugs.webkit.org/show_bug.cgi?id=120700

        Reviewed by Simon Fraser.

        Add an extra argument to Document::updateHoverActiveState() to specify if a style recalc
        should be done. The default value keeps the current behavior of doing a style recalc. iOS
        touch handling code will pass in DeferRecalcStyleIfNeeded to avoid the work.

        No new tests because no functional changes.

        * dom/Document.cpp:
        (WebCore::Document::updateHoverActiveState):
        * dom/Document.h:

2013-09-04  Tim Horton  <timothy_horton@apple.com>

        [mac] PDFDocumentImage should use PDFKit to draw
        https://bugs.webkit.org/show_bug.cgi?id=120651
        <rdar://problem/12810731>

        Reviewed by Alexey Proskuryakov.

        Use PDFKit to draw PDF-in-<img> on Mac, so that annotations in PDF are painted.

        Test: fast/images/pdf-as-image-with-annotations.html

        * WebCore.xcodeproj/project.pbxproj:
        Add PDFDocumentImageMac.mm.

        * platform/graphics/cg/PDFDocumentImage.cpp:
        (WebCore::PDFDocumentImage::PDFDocumentImage):
        We don't need to initialize m_document anymore because it's now a RetainPtr.
        Initialize m_hasPage to false.

        (WebCore::PDFDocumentImage::~PDFDocumentImage):
        We don't need to manually release our CGPDFDocumentRef anymore because it's now a RetainPtr.

        (WebCore::PDFDocumentImage::size):
        Use expandedIntSize for explicitness.

        (WebCore::PDFDocumentImage::applyRotationForPainting):
        Rename adjustCTM to applyRotationForPainting, and move the one non-rotation related transformation out.
        We need to do this because PDFKit applies the rotation transformation itself, so we don't need to.
        Also, explicitly use std::min instead of importing the whole std namespace.

        (WebCore::PDFDocumentImage::dataChanged):
        Assert that we don't re-enter dataChanged after we've created a document,
        because it seems like that shouldn't happen - we only create a document when
        we've supposedly received all data, and it would be nice if we didn't have
        all this varying code to deal with SharedBuffers changing out from under each other.
        Factor the code to create a CGPDFDocumentRef out into createPDFDocument, so we can
        replace it with a different implementation that creates a PDFDocument.

        (WebCore::PDFDocumentImage::setCurrentPage):
        Make all page-number-related things unsigned, since they are in CG and PDFKit,
        and add m_hasPage to denote whether we've acquired a valid page yet.
        Factor code to retrieve the PDF box bounds into computeBoundsForCurrentPage.
        Remove setCurrentPage itself, as we never use a page other than the first page;
        we will call computeBoundsForCurrentPage and set hasPage in dataChanged, now.

        (WebCore::PDFDocumentImage::draw):
        Fix a weird comment.
        Factor code that actually draws the PDF out into drawPDFPage.

        The rest of the functions in this file are only built for USE(CG) && !PLATFORM(MAC):

        (WebCore::PDFDocumentImage::createPDFDocument):
        Factored out of dataChanged(); I only kept the !PLATFORM(MAC) branch.

        (WebCore::PDFDocumentImage::computeBoundsForCurrentPage):
        Factored out of setCurrentPage().
        Use deg2rad since we have it.

        (WebCore::PDFDocumentImage::pageCount):
        (WebCore::PDFDocumentImage::drawPDFPage):
        Factored out of draw().
        Reduced an unnecessary transform (we were effectively doing mediaBox.origin - cropBox.origin - mediaBox.origin).

        * platform/graphics/cg/PDFDocumentImage.h:
        Unindent all the things, as we don't indent the first level inside a namespace scope.
        Forward-declare PDFDocument.
        Make m_currentPage unsigned as it should be.
        Add m_hasPage.
        Make m_document a PDFDocument on PLATFORM(MAC) and a CGPDFDocumentRef on other platforms.

        * platform/graphics/mac/PDFDocumentImageMac.mm: Added.
        Soft-link in PDFKit and specifically the PDFDocument class.

        (WebCore::PDFDocumentImage::createPDFDocument):
        Create our PDFDocument from the SharedBuffer's NSData directly. This shouldn't be a problem
        (with respect to the SharedBuffer's data being appended to in secret), because we've waited
        for the document to finish loading before getting here.

        (WebCore::PDFDocumentImage::computeBoundsForCurrentPage):
        Ask PDFKit for the page's media and crop boxes; it automatically performs the correct fallback.
        Ask PDFKit for the page's rotation.

        (WebCore::PDFDocumentImage::pageCount):
        Ask PDFKit for the page count.

        (WebCore::PDFDocumentImage::drawPDFPage):
        Paint the current page of the PDF. Note that we do not apply the rotation here
        via applyRotationForPainting because PDFKit will do it itself.

        * platform/mac/SoftLinking.h:
        I couldn't find any clients of SOFT_LINK_FRAMEWORK_IN_CORESERVICES_UMBRELLA,
        so I made it the more generic SOFT_LINK_FRAMEWORK_IN_UMBRELLA, taking the name
        of the umbrella framework and the subframework, so I could use it to soft link
        Quartz.framework's PDFKit.framework.

2013-09-04  Roger Fong  <roger_fong@apple.com>

        Unreviewed Windows build fix.

        * WebCore.vcxproj/WebCoreCommon.props:

2013-09-04  Bem Jones-Bey  <bjonesbe@adobe.com>

        FloatingObjects should manage cleaning it's line box tree pointers itself
        https://bugs.webkit.org/show_bug.cgi?id=120692

        Reviewed by David Hyatt.

        This is another step in properly encapsulating FloatingObjects.
        Instead of having RenderBlock walk and clear the line box tree
        pointers, create a method for the behavior, and have RenderBlock call
        that.

        In addtion, add a proper destructor to FloatingObjects, so that
        RenderBlock does not have to explicitly delete the set in
        FloatingObjects.

        And as a bonus, fix the ordering of an if to avoid the expensive
        descendantChild check.

        This is a port of a Blink patch by Eric Seidel.

        No new tests, no behavior change.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::~RenderBlock):
        (WebCore::RenderBlock::deleteLineBoxTree):
        (WebCore::RenderBlock::repaintOverhangingFloats):
        (WebCore::RenderBlock::FloatingObjects::~FloatingObjects):
        (WebCore::RenderBlock::FloatingObjects::clearLineBoxTreePointers):
        (WebCore::RenderBlock::FloatingObjects::clear):
        * rendering/RenderBlock.h:

2013-09-04  Tim Horton  <timothy_horton@apple.com>

        Rename customCssText -> customCSSText to match WebKit style
        https://bugs.webkit.org/show_bug.cgi?id=120694

        Reviewed by Simon Fraser.

        No new tests, just a rename.

        * WebCore.order:
        * css/CSSAspectRatioValue.cpp:
        (WebCore::CSSAspectRatioValue::customCSSText):
        * css/CSSAspectRatioValue.h:
        * css/CSSBorderImageSliceValue.cpp:
        (WebCore::CSSBorderImageSliceValue::customCSSText):
        * css/CSSBorderImageSliceValue.h:
        * css/CSSCalculationValue.cpp:
        (WebCore::CSSCalcValue::customCSSText):
        (WebCore::CSSCalcPrimitiveValue::customCSSText):
        (WebCore::CSSCalcBinaryOperation::customCSSText):
        * css/CSSCalculationValue.h:
        * css/CSSCanvasValue.cpp:
        (WebCore::CSSCanvasValue::customCSSText):
        * css/CSSCanvasValue.h:
        * css/CSSCrossfadeValue.cpp:
        (WebCore::CSSCrossfadeValue::customCSSText):
        * css/CSSCrossfadeValue.h:
        * css/CSSCursorImageValue.cpp:
        (WebCore::CSSCursorImageValue::customCSSText):
        * css/CSSCursorImageValue.h:
        * css/CSSFilterImageValue.cpp:
        (WebCore::CSSFilterImageValue::customCSSText):
        * css/CSSFilterImageValue.h:
        * css/CSSFontFaceSrcValue.cpp:
        (WebCore::CSSFontFaceSrcValue::customCSSText):
        * css/CSSFontFaceSrcValue.h:
        * css/CSSFunctionValue.cpp:
        (WebCore::CSSFunctionValue::customCSSText):
        * css/CSSFunctionValue.h:
        * css/CSSGradientValue.cpp:
        (WebCore::CSSLinearGradientValue::customCSSText):
        (WebCore::CSSRadialGradientValue::customCSSText):
        * css/CSSGradientValue.h:
        * css/CSSImageSetValue.cpp:
        (WebCore::CSSImageSetValue::customCSSText):
        * css/CSSImageSetValue.h:
        * css/CSSImageValue.cpp:
        (WebCore::CSSImageValue::customCSSText):
        * css/CSSImageValue.h:
        * css/CSSInheritedValue.cpp:
        (WebCore::CSSInheritedValue::customCSSText):
        * css/CSSInheritedValue.h:
        * css/CSSInitialValue.cpp:
        (WebCore::CSSInitialValue::customCSSText):
        * css/CSSInitialValue.h:
        * css/CSSLineBoxContainValue.cpp:
        (WebCore::CSSLineBoxContainValue::customCSSText):
        * css/CSSLineBoxContainValue.h:
        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::customCSSText):
        (WebCore::CSSPrimitiveValue::customSerializeResolvingVariables):
        * css/CSSPrimitiveValue.h:
        * css/CSSReflectValue.cpp:
        (WebCore::CSSReflectValue::customCSSText):
        * css/CSSReflectValue.h:
        * css/CSSTimingFunctionValue.cpp:
        (WebCore::CSSLinearTimingFunctionValue::customCSSText):
        (WebCore::CSSCubicBezierTimingFunctionValue::customCSSText):
        (WebCore::CSSStepsTimingFunctionValue::customCSSText):
        * css/CSSTimingFunctionValue.h:
        * css/CSSUnicodeRangeValue.cpp:
        (WebCore::CSSUnicodeRangeValue::customCSSText):
        * css/CSSUnicodeRangeValue.h:
        * css/CSSValue.cpp:
        (WebCore::CSSValue::cssText):
        * css/CSSValueList.cpp:
        (WebCore::CSSValueList::customCSSText):
        * css/CSSValueList.h:
        * css/FontFeatureValue.cpp:
        (WebCore::FontFeatureValue::customCSSText):
        * css/FontFeatureValue.h:
        * css/FontValue.cpp:
        (WebCore::FontValue::customCSSText):
        * css/FontValue.h:
        * css/ShadowValue.cpp:
        (WebCore::ShadowValue::customCSSText):
        * css/ShadowValue.h:
        * css/WebKitCSSArrayFunctionValue.cpp:
        (WebCore::WebKitCSSArrayFunctionValue::customCSSText):
        * css/WebKitCSSArrayFunctionValue.h:
        * css/WebKitCSSFilterValue.cpp:
        (WebCore::WebKitCSSFilterValue::customCSSText):
        * css/WebKitCSSFilterValue.h:
        * css/WebKitCSSMatFunctionValue.cpp:
        (WebCore::WebKitCSSMatFunctionValue::customCSSText):
        * css/WebKitCSSMatFunctionValue.h:
        * css/WebKitCSSMixFunctionValue.cpp:
        (WebCore::WebKitCSSMixFunctionValue::customCSSText):
        * css/WebKitCSSMixFunctionValue.h:
        * css/WebKitCSSSVGDocumentValue.cpp:
        (WebCore::WebKitCSSSVGDocumentValue::customCSSText):
        * css/WebKitCSSSVGDocumentValue.h:
        * css/WebKitCSSShaderValue.cpp:
        (WebCore::WebKitCSSShaderValue::customCSSText):
        * css/WebKitCSSShaderValue.h:
        * css/WebKitCSSTransformValue.cpp:
        (WebCore::WebKitCSSTransformValue::customCSSText):
        * css/WebKitCSSTransformValue.h:
        * svg/SVGColor.cpp:
        (WebCore::SVGColor::customCSSText):
        * svg/SVGColor.h:
        * svg/SVGPaint.cpp:
        (WebCore::SVGPaint::customCSSText):
        * svg/SVGPaint.h:

2013-09-04  Chris Fleizach  <cfleizach@apple.com>

        AX: aria-valuetext property not exposing AXValueDescription
        https://bugs.webkit.org/show_bug.cgi?id=120375

        Reviewed by Darin Adler.

        Expose value based attributes for incrementor roles (which are called spinbuttons by ARIA).

        Test: platform/mac/accessibility/spinbutton-valuedescription.html

        * accessibility/mac/WebAccessibilityObjectWrapperMac.mm:
        (-[WebAccessibilityObjectWrapper accessibilityAttributeNames]):

2013-09-04  Javier Fernandez  <jfernandez@igalia.com>

        <https://webkit.org/b/119622> [CSSRegions] Not possible to clear the selection when mixing content from different FlowThreads

        Reviewed by David Hyatt.

        When using CSS Regions is usual that the RenderTree doesn't match
        the DOM Tree in terms of relative position of the nodes. Besides,
        usually the content of a certain node is split and spread across
        multiple blocks, rendered in different positions.

        Regarding the Selection, this problem is even more important; the
        selection direction changes when crossing the FlowThread
        boundaries. This weird behavior is also present in other layouts
        using non-regular positioning mechanisms, like absolute,
        static. However, for those layouts the RenderTree preserves the
        order of the nodes, unlike the CSS Regions layout model.

        Because of how the RenderTree is generated with CSS Regions, the
        RenderView::setSelection algorithm is not able to repaint some of
        the rectangles defined during the selection process. In order to
        face this issue, the proposed fix determines whether it should
        backwards traversing the RenderTree, from the "stop" node to the
        RenderView node.

        Test: fast/regions/selecting-text-through-different-region-flows-2.html

        * rendering/RenderView.cpp:
        (WebCore::getNextOrPrevRenderObjectBasedOnDirection): Added.
        (WebCore::RenderView::setSelection):

2013-09-04  Eric Carlson  <eric.carlson@apple.com>

        Get MEDIA_STREAM compiling on OSX
        https://bugs.webkit.org/show_bug.cgi?id=120650

        Reviewed by Darin Adler.

        No new tests, the code changed doesn't run on OSX yet.

        * DerivedSources.make: Add MediaStream idl files.

        * Modules/mediastream/LocalMediaStream.h: Mark class as FINAL.

        * Modules/mediastream/MediaConstraintsImpl.cpp:
        (WebCore::MediaConstraintsImpl::getOptionalConstraints): append -> appendRange so we don't
            need a MediaConstraint copy constructor.

        * Modules/mediastream/RTCDataChannel.cpp:
        (WebCore::RTCDataChannel::send): Remove an unused parameter name.
        * Modules/mediastream/RTCDataChannel.h: ArrayBuffer and ArrayBufferView are in the JSC namespace.

        * Modules/mediastream/RTCPeerConnection.cpp:
        (WebCore::RTCPeerConnection::RTCPeerConnection): loader() doesn't return a pointer.
        (WebCore::RTCPeerConnection::localDescription): Set the ExceptionCode on error.
        (WebCore::RTCPeerConnection::remoteDescription): Ditto.

        * Modules/mediastream/RTCSessionDescription.cpp:
        (WebCore::RTCSessionDescription::setSdp): Remove the unused ExceptionCode parameter.
        * Modules/mediastream/RTCSessionDescription.h: Ditto.
        * Modules/mediastream/RTCSessionDescription.idl: Ditto.

        * Modules/mediastream/RTCStatsResponse.cpp:
        (WebCore::RTCStatsResponse::canGetItemsForName): Add so JSRTCStatsResponse::canGetItemsForName
            doesn't cause ref count churn.
        * Modules/mediastream/RTCStatsResponse.h: Mark class as FINAL. Declare canGetItemsForName.

        * WebCore.xcodeproj/project.pbxproj: Add new files.

        * bindings/js/JSRTCStatsResponseCustom.cpp:
        (WebCore::JSRTCStatsResponse::canGetItemsForName): Use canGetItemsForName instead of namedItem.
            Use propertyNameToAtomicString instead of propertyNameToString 
        (WebCore::JSRTCStatsResponse::nameGetter): Use propertyNameToAtomicString instead of 
            propertyNameToString because namedItem takes an AtomicString.

        * platform/mediastream/mac: Added.
        * platform/mediastream/mac/MediaStreamCenterMac.cpp: Added.
        * platform/mediastream/mac/MediaStreamCenterMac.h: Added.

2013-09-04  Daniel Bates  <dabates@apple.com>

        [iOS] Fix the build following <http://trac.webkit.org/changeset/154903>
        (https://bugs.webkit.org/show_bug.cgi?id=120540)

        * style/StyleResolveTree.cpp:
        (WebCore::Style::resolveTree): Use address operator and dot-notation when
        passing Element to CheckForVisibilityChangeOnRecalcStyle and calling
        Element::renderStyle(), respectively.

2013-09-04  Bem Jones-Bey  <bjonesbe@adobe.com>

        Move logical dimension getters/setters to FloatingObject from RenderBlock
        https://bugs.webkit.org/show_bug.cgi?id=120686

        Reviewed by David Hyatt.

        This is the first step in decoupling FloatingObject, FloatingObjects,
        et al from RenderBlock. It is not ideal that the methods take a bool;
        however, passing down the actual writing mode would require
        refactoring the way that RenderBlock stores this information, which is
        a task for the future.

        No new tests, no behavior change.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::repaintOverhangingFloats): Use new methods.
        (WebCore::RenderBlock::insertFloatingObject):  Ditto.
        (WebCore::RenderBlock::removeFloatingObject): Ditto.
        (WebCore::RenderBlock::removeFloatingObjectsBelow): Ditto.
        (WebCore::RenderBlock::computeLogicalLocationForFloat): Ditto.
        (WebCore::RenderBlock::positionNewFloats): Ditto.
        (WebCore::::updateOffsetIfNeeded): Ditto.
        (WebCore::::collectIfNeeded): Ditto.
        (WebCore::::getHeightRemaining): Ditto.
        (WebCore::RenderBlock::logicalLeftFloatOffsetForLine): Ditto.
        (WebCore::RenderBlock::logicalRightFloatOffsetForLine): Ditto.
        (WebCore::RenderBlock::nextFloatLogicalBottomBelow): Ditto.
        (WebCore::RenderBlock::lowestFloatLogicalBottom): Ditto.
        (WebCore::RenderBlock::clearFloats): Ditto.
        (WebCore::RenderBlock::addOverhangingFloats): Ditto.
        (WebCore::RenderBlock::hasOverhangingFloat): Ditto.
        (WebCore::RenderBlock::addIntrudingFloats): Ditto.
        * rendering/RenderBlock.h:
        (WebCore::RenderBlock::FloatingObject::logicalTop): Moved from RenderBlock::logicalTopForFloat
        (WebCore::RenderBlock::FloatingObject::logicalBottom): Moved from RenderBlock::logicalBottomForFloat
        (WebCore::RenderBlock::FloatingObject::logicalLeft): Moved from RenderBlock::logicalLeftForFloat
        (WebCore::RenderBlock::FloatingObject::logicalRight): Moved from RenderBlock::logicalRightForFloat
        (WebCore::RenderBlock::FloatingObject::logicalWidth): Moved from RenderBlock::logicalWidthForFloat
        (WebCore::RenderBlock::FloatingObject::pixelSnappedLogicalTop): Moved from RenderBlock::pixelSnappedLogicalTopForFloat
        (WebCore::RenderBlock::FloatingObject::pixelSnappedLogicalBottom): Moved from RenderBlock::pixelSnappedLogicalBottomForFloat
        (WebCore::RenderBlock::FloatingObject::pixelSnappedLogicalLeft): Moved from RenderBlock::pixelSnappedLogicalLeftForFloat
        (WebCore::RenderBlock::FloatingObject::pixelSnappedLogicalRight): Moved from RenderBlock::pixelSnappedLogicalRightForFloat
        (WebCore::RenderBlock::FloatingObject::setLogicalTop): Moved from RenderBlock::setLogicalTopForFloat
        (WebCore::RenderBlock::FloatingObject::setLogicalLeft): Moved from RenderBlock::setLogicalLeftForFloat
        (WebCore::RenderBlock::FloatingObject::setLogicalHeight): Moved from RenderBlock::setLogicalHeightForFloat
        (WebCore::RenderBlock::FloatingObject::setLogicalWidth): Moved from RenderBlock::setLogicalWidthForFloat
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::LineWidth::shrinkAvailableWidthForNewFloatIfNeeded): Use new methods.
        (WebCore::RenderBlock::checkPaginationAndFloatsAtEndLine): Ditto.
        (WebCore::RenderBlock::LineBreaker::nextSegmentBreak): Ditto.
        (WebCore::RenderBlock::positionNewFloatOnLine): Ditto.

2013-09-04  Andre Moreira Magalhaes   <andre.magalhaes@collabora.co.uk>

        REGRESSION(r154977): Do not urlencode soup message on ResourceRequest::toSoupMessage()
        https://bugs.webkit.org/show_bug.cgi?id=120681

        Reviewed by Martin Robinson.

        Do not call soup_message_set_uri with soupURI() (url encoded uri) on
        ResourceRequest::toSoupMessage().

        * platform/network/soup/ResourceRequest.h:
        * platform/network/soup/ResourceRequestSoup.cpp:
        (WebCore::ResourceRequest::updateSoupMessageMembers):
        (WebCore::ResourceRequest::updateSoupMessage):
        (WebCore::ResourceRequest::toSoupMessage):
        Split common code from updateSoupMessage/toSoupMessage into updateSoupMessageMembers.

2013-09-04  Danilo Cesar Lemes de Paula  <danilo.cesar@collabora.co.uk>

        [GTK] add support for subtitles on webkit2GTK
        https://bugs.webkit.org/show_bug.cgi?id=117008

        By activating subtitles support on webkit2GTK, the video player
        recognizes and use text <tracks> inside <video> elements.

        Reviewed by Martin Robinson.

        Layout tests (track-menu) should cover this change.

        * css/mediaControlsGtk.css:
        (audio::-webkit-media-controls-toggle-closed-captions-button, video::-webkit-media-controls-toggle-closed-captions-button):
        (video::-webkit-media-controls-closed-captions-container):
        (video::-webkit-media-controls-closed-captions-track-list):
        (video::-webkit-media-controls-closed-captions-track-list h3):
        (video::-webkit-media-controls-closed-captions-track-list ul):
        (video::-webkit-media-controls-closed-captions-track-list li):
        (video::-webkit-media-controls-closed-captions-track-list li.selected):
        * html/shadow/MediaControlElements.cpp:
        (WebCore::MediaControlToggleClosedCaptionsButtonElement::MediaControlToggleClosedCaptionsButtonElement):
        (WebCore::MediaControlToggleClosedCaptionsButtonElement::defaultEventHandler):
        * html/shadow/MediaControlElements.h:
        * html/shadow/MediaControlsGtk.cpp:
        (WebCore::MediaControlsGtkEventListener::create):
        (WebCore::MediaControlsGtkEventListener::cast):
        (WebCore::MediaControlsGtkEventListener::MediaControlsGtkEventListener):
        (WebCore::MediaControlsGtk::MediaControlsGtk):
        (WebCore::MediaControlsGtk::initializeControls):
        (WebCore::MediaControlsGtk::setMediaController):
        (WebCore::MediaControlsGtk::reset):
        (WebCore::MediaControlsGtk::makeTransparent):
        (WebCore::MediaControlsGtk::toggleClosedCaptionTrackList):
        (WebCore::MediaControlsGtk::showClosedCaptionTrackList):
        (WebCore::MediaControlsGtk::hideClosedCaptionTrackList):
        (WebCore::MediaControlsGtk::handleClickEvent):
        (WebCore::MediaControlsGtk::eventListener):
        (WebCore::MediaControlsGtkEventListener::handleEvent):
        (WebCore::MediaControlsGtkEventListener::operator==):
        * html/shadow/MediaControlsGtk.h:
        * page/CaptionUserPreferences.cpp:
        (WebCore::trackDisplayName):
        * platform/gtk/LocalizedStringsGtk.cpp:
        (WebCore::textTrackSubtitlesText):
        (WebCore::textTrackOffMenuItemText):
        (WebCore::textTrackNoLabelText):
        * platform/gtk/RenderThemeGtk.h:

2013-09-03  Darin Adler  <darin@apple.com>

        Use OwnPtr in the RenderLayerFilterInfo map
        https://bugs.webkit.org/show_bug.cgi?id=120619

        Reviewed by Anders Carlsson.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::~RenderLayer): Use FilterInfo::remove directly instead of
        going through removeFilterInfoIfNeeded function.
        (WebCore::RenderLayer::paintsWithFilters): Rearranged #if a little bit and tweaked
        the comment.
        (WebCore::RenderLayer::requiresFullLayerImageForFilters): Use && instead of ternary.
        (WebCore::RenderLayer::filterRenderer): Use FilterInfo::getIfExists directly instead
        of going through filterInfo function.
        (WebCore::RenderLayer::setFilterBackendNeedsRepaintingInRect): Use FilterInfo::get
        directly instead of going through filterInfo function. Also use references instead
        of pointers.
        (WebCore::shouldDoSoftwarePaint): Marked this simple function, used only once, as
        inline.
        (WebCore::paintForFixedRootBackground): Ditto.
        (WebCore::RenderLayer::setupFilters): Use FilterInfo::getIfExists directly instead
        of going through filterInfo function. Also get rendererer out of filterInfo instead
        of calling filterRenderer.
        (WebCore::RenderLayer::updateOrRemoveFilterClients): Use FilterInfo::get and
        FilterInfo::getIfExists directly instead of using ensureFilterInfo and
        filterInfo functions.
        (WebCore::RenderLayer::updateOrRemoveFilterEffectRenderer): Use FilterInfo::getIfExists
        and FilterInfo::get directly instead of using filterInfo function.

        * rendering/RenderLayer.h: Removed the ifdefs around forward declarations; overkill,
        since there is no harm in a few extras. Marked the RenderLayer class FINAL. Removed the
        no-longer-needed filterInfo, ensureFilterInfo, removeFilterInfoIfNeeded, hasFilterInfo,
        and setHasFilterInfo functions. Mark everything private instead of protected since
        there are no classes derived from this one. Made FilterInfo an embedded class so it
        can get at the m_hasFilterInfo data member directly and has a shorter name.

        * rendering/RenderLayerFilterInfo.cpp: Removed the ifs around includes, which were
        overkill, since there is little harm including a few extra files.
        (WebCore::RenderLayer::FilterInfo::map): Added. Returns the single global map.
        (WebCore::RenderLayer::FilterInfo::getIfExists): Renamed from filterInfoForRenderLayer.
        Also changed to take a reference instead of a pointer, and to use the new filterMap.
        (WebCore::RenderLayer::FilterInfo::get): Renamed from createFilterInfoForRenderLayerIfNeeded.
        Also changed to take a reference instead of a pointer, to use the new filterMap, and
        to use add to avoid hashing twice when adding a new layer to the map.
        (WebCore::RenderLayer::FilterInfo::remove): Renamed from removeFilterInfoForRenderLayer.
        Also changed to take a reference instead of a pointer and eliminated the explicit
        delete since we use OwnPtr now.
        (WebCore::RenderLayer::FilterInfo::FilterInfo): Take a reference instead of a pointer.
        (WebCore::RenderLayer::FilterInfo::~FilterInfo): Updated class name.
        (WebCore::RenderLayer::FilterInfo::setRenderer): Ditto.
        (WebCore::RenderLayer::FilterInfo::notifyFinished): Update since m_layer is a reference.
        (WebCore::RenderLayer::FilterInfo::updateReferenceFilterClients): Update to iterate in a
        slightly more idiomatic and efficient way. Also update since m_layer is a reference.
        (WebCore::RenderLayer::FilterInfo::removeReferenceFilterClients): Ditto.
        (WebCore::RenderLayer::FilterInfo::notifyCustomFilterProgramLoaded): Ditto.
        (WebCore::RenderLayer::FilterInfo::updateCustomFilterClients): Ditto. Also switched to
        a raw pointer for CustomFilterProgram*.
        (WebCore::RenderLayer::FilterInfo::removeCustomFilterClients): Ditto.

        * rendering/RenderLayerFilterInfo.h: Removed the ifs around includes, which were
        overkill, since there is little harm including a few extra files. Changed to be a
        member class of RenderLayer, marked the class FINAL, and changed the style of the
        conditionals around the base classes. Renamed functions. Made overrides private and
        used OVERRIDE. Changed functions to take references instead of pointers. Did some
        small style cleanup. Made deleteOwnedPtr a friend so we can keep the destructor private.
        Moved the typedef of RenderLayerFilterInfoMap into the class and named it just Map.
        Got rid of s_filterMap and instead added a function named just map().

2013-09-04  Andreas Kling  <akling@apple.com>

        Simplify subtree relayout scheduling a bit.
        <https://webkit.org/b/120684>

        Reviewed by Antti Koivisto.

        Subtree relayout scheduling should only happen while there's a render tree up,
        the code can freely assume that there's a RenderView present.

        Added an assertion that the render tree isn't being torn down. This should catch
        renderers doing unnecessary work during document detach and could be a source
        of "performance freebies."

        I also un-nested scheduleRelayoutOfSubtree() with early-return style to make
        the code more human-readable.

        * page/FrameView.h:
        * page/FrameView.cpp:
        (WebCore::FrameView::scheduleRelayoutOfSubtree):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::scheduleRelayout):

2013-09-04  Jae Hyun Park  <jae.park@company100.net>

        [Coordinated Graphics] Remove unused method in CoordinatedGraphicsLayer
        https://bugs.webkit.org/show_bug.cgi?id=120664

        Reviewed by Darin Adler.

        CoordinatedGraphicsLayer::hasPendingVisibleChanges is not used as of
        r148952.

        * platform/graphics/texmap/coordinated/CoordinatedGraphicsLayer.cpp:
        * platform/graphics/texmap/coordinated/CoordinatedGraphicsLayer.h:

2013-09-04  Hans Muller  <hmuller@adobe.com>

        [CSS Shapes] Revise the ShapeInterval set operations' implementation
        https://bugs.webkit.org/show_bug.cgi?id=120349

        Reviewed by Alexandru Chiculita.

        Revised the ShapeIntervals unite, intersect, and subtract operations to
        improve efficiency and clarity.

        No new tests are required, this is just an internal refactoring.

        * rendering/shapes/PolygonShape.cpp:
        (WebCore::computeOverlappingEdgeXProjections): Removed call to ShapeInterval<T>sortVector(), since calling std::sort directly is simpler.
        * rendering/shapes/ShapeInterval.h:
        (WebCore::ShapeInterval::contains): True if the interval parameter is within this interval.
        (WebCore::ShapeInterval::intersect): Substantially revised version of the original method.
        (WebCore::ShapeInterval::uniteVectors): Ditto.
        (WebCore::ShapeInterval::intersectVectors): Ditto.
        (WebCore::ShapeInterval::subtractVectors): Ditto.

2013-09-04  Krzysztof Czech  <k.czech@samsung.com>

        [ATK] Adds an accessibility support to access a value of the color control element
        https://bugs.webkit.org/show_bug.cgi?id=114354

        Reviewed by Mario Sanchez Prada.

        Implements a possibility of retrieving a value of the color control element.

        * accessibility/atk/WebKitAccessibleInterfaceText.cpp:
        (webkitAccessibleTextGetText):
        * accessibility/atk/WebKitAccessibleWrapperAtk.cpp:
        (getInterfaceMaskFromObject):

2013-09-04  Andreas Kling  <akling@apple.com>

        Use Vector<Ref<T>> in three random WebCore loops.
        <https://webkit.org/b/120661>

        Reviewed by Darin Adler.

        Clean up three little loops to use Refs to avoid null checking known-valid objects.
        Also apply auto, reserveInitialCapacity and uncheckedAppend as appropriate.

        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::dispatchAllPendingBeforeUnloadEvents):
        (WebCore::DOMWindow::dispatchAllPendingUnloadEvents):
        * platform/graphics/FontCache.cpp:
        (WebCore::FontCache::invalidate):

2013-09-04  Claudio Saavedra  <csaavedra@igalia.com>

        [GTK] Color of input button's text broken with recent gnome-themes-standard
        https://bugs.webkit.org/show_bug.cgi?id=120581

        Reviewed by Carlos Garcia Campos.

        * platform/gtk/RenderThemeGtk3.cpp:
        (WebCore::getStyleContext): add the "text-button" class.
        (WebCore::RenderThemeGtk::systemColor): Use the ACTIVE state flag,
        as this is the one actually used for button labels.

2013-09-04  Zan Dobersek  <zdobersek@igalia.com>

        [GTK] Add support for the Wayland build target
        https://bugs.webkit.org/show_bug.cgi?id=120627

        Reviewed by Gustavo Noronha Silva.

        * GNUmakefile.list.am: Reorder the Source/WebCore/plugins/np* source files.
        The X11-specific source files should only be included if the X11 target is being built. PluginPackageNone and
        PluginViewNone source files must be included in non-X11-target builds. Other source files that were previously
        guarded with the TARGET_X11 conditional should also be built for the Wayland target, so the new TARGET_X11_OR_WAYLAND
        conditional is used. If neither of those two targets is being built we fall back to adding source files to the build
        as necessary by the actual build target.
        * platform/gtk/GtkVersioning.c:
        (gdk_screen_get_monitor_workarea): Additionally guard bits of code that depend on the GDK_WINDOWING_X11 macro being
        defined - these should only be built when building the X11 target, checked for with PLATFORM(X11).

2013-09-04  Mario Sanchez Prada  <mario.prada@samsung.com>

        [GTK] Reimplement atk_text_get_text_*_offset for SENTENCE boundaries
        https://bugs.webkit.org/show_bug.cgi?id=114873

        Reviewed by Chris Fleizach.

        Re-implement these functions without using GailTextUtil nor Pango.

        * accessibility/atk/WebKitAccessibleInterfaceText.cpp:
        (webkitAccessibleTextWordForBoundary): Renamed from webkitAccessibleTextGetWordForBoundary,
        to keep it consistent with names for new functions.
        (isSentenceBoundary): Helper function to know when we are either
        at the beginning or the end of a sentence.
        (isWhiteSpaceBetweenSentences): It returns true if we are in the
        middle of a white space between sentences. Useful for implementing
        the SENTENCE_END boundary type.
        (sentenceAtPositionForAtkBoundary): New helper function to find the
        sentence at a given position considering values of AtkTextBoundary.
        (webkitAccessibleTextSentenceForBoundary): New function,
        implementing atk_text_get_text_*_offset for SENTENCE.
        (webkitAccessibleTextGetTextForOffset): Replace usage of Gail for
        SENTENCE boundaries with webkitAccessibleTextSentenceForBoundary().

2013-09-04  Andrei Bucur  <abucur@adobe.com>

        [CSS Regions] Extend the RenderRegionRange class to include overflow information + apply the layout overflow
        https://bugs.webkit.org/show_bug.cgi?id=116299

        Reviewed by David Hyatt.

        Patch for computing overflow for boxes per region and applying it for layout overflow.
        The approach is based on adding a RenderOverflow object inside the RenderBoxRegionInfo
        structure. The RenderOverflow object is manipulated by the RenderRegion using some utility
        functions that receive the target box as a parameter.
        When computing the portion of a box inside a region it is necessary to split the border
        rect of the box between regions. This means mapping the rectangle in the flow thread
        coordinates, making the split and then remapping the fragment in the box coordinates.
        For now, this is not optimized and walks the render tree to compute the block offsets.
        The function getRegionRangeForBox is used to determine in what regions a box should
        be rendered into. The range is computed at layout time and it depends on the height of
        the box, if its unsplittable for fragmentation etc.
        The patch also propagates the layout overflow to the regions. This enables to correctly
        display scrollbars when chaining varying size regions (currently the horizontal overflow
        is as wide as the widest region for all the regions). Unsplittable boxes will also generate
        layout overflow in the start region so they can be scrolled and fully reachable. This
        functionality depends on fixing the visual overflow and adapting the layout to take into
        account the unsplittable box. Besides this, the relative positioning and transforms are applied
        at a fragment level. This is in line with the CSS3 Break specification:
        http://dev.w3.org/csswg/css-break/#transforms

        Tests: fast/regions/overflow-scrollable-rel-pos-fragment.html
               fast/regions/overflow-scrollable-rotated-fragment.html
               fast/regions/overflow-scrollable-unsplittable-fragment.html
               fast/regions/overflow-scrollable-varying-width-1.html
               fast/regions/overflow-scrollable-varying-width-2.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::computeOverflow):
        (WebCore::RenderBlock::clearLayoutOverflow):
        (WebCore::RenderBlock::addVisualOverflowFromTheme):
        (WebCore::RenderBlock::relayoutForPagination):
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::addOverflowFromInlineChildren):
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::clientBoxRectInRegion):
        (WebCore::RenderBox::addVisualEffectOverflow):
        (WebCore::RenderBox::applyVisualEffectOverflow):
        (WebCore::RenderBox::addOverflowFromChild):
        (WebCore::RenderBox::clearOverflow):
        * rendering/RenderBox.h:
        * rendering/RenderBoxRegionInfo.h:
        (WebCore::RenderBoxRegionInfo::createOverflow):
        (WebCore::RenderBoxRegionInfo::overflow):
        (WebCore::RenderBoxRegionInfo::clearOverflow):
        * rendering/RenderEmbeddedObject.cpp:
        (WebCore::RenderEmbeddedObject::layout):
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::updateLogicalWidth):
        (WebCore::RenderFlowThread::markRegionsForOverflowLayoutIfNeeded):
        (WebCore::RenderFlowThread::mapFromLocalToFlowThread):
        (WebCore::RenderFlowThread::mapFromFlowThreadToLocal):
        (WebCore::RenderFlowThread::addRegionsVisualEffectOverflow):
        (WebCore::RenderFlowThread::addRegionsVisualOverflowFromTheme):
        (WebCore::RenderFlowThread::addRegionsOverflowFromChild):
        (WebCore::RenderFlowThread::addRegionsLayoutOverflow):
        (WebCore::RenderFlowThread::clearRegionsOverflow):
        * rendering/RenderFlowThread.h:
        * rendering/RenderIFrame.cpp:
        (WebCore::RenderIFrame::layout):
        * rendering/RenderRegion.cpp:
        (WebCore::RenderRegion::computeOverflowFromFlowThread):
        (WebCore::RenderRegion::setRenderBoxRegionInfo):
        (WebCore::RenderRegion::ensureOverflowForBox):
        (WebCore::RenderRegion::rectFlowPortionForBox):
        (WebCore::RenderRegion::addLayoutOverflowForBox):
        (WebCore::RenderRegion::addVisualOverflowForBox):
        (WebCore::RenderRegion::layoutOverflowRectForBox):
        (WebCore::RenderRegion::visualOverflowRectForBox):
        (WebCore::RenderRegion::layoutOverflowRectForBoxForPropagation):
        (WebCore::RenderRegion::visualOverflowRectForBoxForPropagation):
        * rendering/RenderRegion.h:
        * rendering/RenderReplaced.cpp:
        (WebCore::RenderReplaced::layout):
        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::computeOverflowFromCells):

2013-09-04  Andre Moreira Magalhaes   <andre.magalhaes@collabora.co.uk>

        [GStreamer] cannot play live streams
        https://bugs.webkit.org/show_bug.cgi?id=116831

        Reviewed by Philippe Normand.

        Fix issues with rtsp streams embedded on <video> not loading.

        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        Do not reset pipeline to READY state on STATE_CHANGE_ASYNC when entering PAUSED state for
        live streams, otherwise we enter an endless loop of READY->PAUSED->READY->PAUSED when
        starting playback.

2013-09-03  Chris Fleizach  <cfleizach@apple.com>

        AX: REGRESSION: @title is exposed as AXDescription when label label from contents already exists.
        https://bugs.webkit.org/show_bug.cgi?id=120550

        Reviewed by Mario Sanchez Prada.

        Resolve a FIXME from the accessible name computation refactoring so that alternative text for links do not
        show up in the title field and do not duplicate naming when a title tag is used.

        Effectively, this means that links no longer use AXTitle for alternative text. They use AXDescription
        like all other elements.

        Test: platform/mac/accessibility/link-with-title.html

        * accessibility/mac/WebAccessibilityObjectWrapperMac.mm:
        (-[WebAccessibilityObjectWrapper accessibilityTitle]):
        (-[WebAccessibilityObjectWrapper accessibilityDescription]):

2013-09-03  Darin Adler  <darin@apple.com>

        Change type of Document::doctype back to a raw pointer
        https://bugs.webkit.org/show_bug.cgi?id=120617

        Reviewed by Andreas Kling.

        * dom/Document.cpp:
        (WebCore::Document::doctype): Return a raw pointer.
        (WebCore::Document::childrenChanged): Use the raw pointer.
        Also added a FIXME about this code that is probably in the wrong place.
        * dom/Document.h: More of the same.

        * editing/markup.cpp:
        (WebCore::documentTypeString): Get rid of local variable entirely,
        since null is already handled right by createMarkup, and also remove
        the call to get since doctype is just a raw pointer.

2013-09-03  Andreas Kling  <akling@apple.com>

        ASSERTION FAILED: frame().view() == this closing a page with SVG or video
        <https://webkit.org/b/120645>

        Reviewed by Antti Koivisto.

        Have RenderSVGResourceContainer check if the document is being destroyed before
        triggering any repaints. This replaces the previous check for a null RenderView
        which meant basically the same thing.

        We could add more and better assertions to catch unnecessary work during tree
        teardown, but let's do that separately.

        * rendering/svg/RenderSVGResourceContainer.cpp:
        (WebCore::RenderSVGResourceContainer::markClientForInvalidation):

2013-09-03  Gyuyoung Kim  <gyuyoung.kim@samsung.com>

        Fix uninitialized build warning in make_names.pl
        https://bugs.webkit.org/show_bug.cgi?id=120658

        Reviewed by Andreas Kling.

        No new tests, no behavior change.

        * dom/make_names.pl:
        (printTypeChecks): Fixed a build warning since r154965.

2013-09-03  Darin Adler  <darin@apple.com>

        Fix backwards branch in ~Node from r154967
        https://bugs.webkit.org/show_bug.cgi?id=120659

        Reviewed by Andreas Kling.

        * dom/Node.cpp:
        (WebCore::Node::~Node): Fix backwards branch. The old code ran the code only
        when we did not remove the item from the table. I removed a ! from this expression
        after review; bad idea.

2013-09-03  Enrica Casucci  <enrica@apple.com>

        Can't select Katakana word by double-clicking.
        <rdar://problem/14654926>

        Reviewed by Alexey Proskuryakov and Ryosuke Niwa.

        For some languages, like Japanese we need
        to use more context for word breaking.

        New test: editing/selection/doubleclick-japanese-text.html

        * platform/text/TextBoundaries.h:
        (WebCore::requiresContextForWordBoundary):

2013-09-03  Mark Lam  <mark.lam@apple.com>

        Converting StackIterator to a callback interface.
        https://bugs.webkit.org/show_bug.cgi?id=120564.

        Reviewed by Filip Pizlo.

        No new tests.

        * bindings/js/JSXMLHttpRequestCustom.cpp:
        (WebCore::SendFunctor::SendFunctor):
        (WebCore::SendFunctor::hasViableFrame):
        (WebCore::SendFunctor::operator()):
        (WebCore::JSXMLHttpRequest::send):
        * bindings/js/ScriptCallStackFactory.cpp:
        (WebCore::CreateScriptCallStackFunctor::CreateScriptCallStackFunctor):
        (WebCore::CreateScriptCallStackFunctor::operator()):
        (WebCore::createScriptCallStack):
        (WebCore::CreateScriptCallStackForConsoleFunctor::CreateScriptCallStackForConsoleFunctor):
        (WebCore::CreateScriptCallStackForConsoleFunctor::operator()):

2013-09-03  Oliver Hunt  <oliver@apple.com>

        Support structured clone of Map and Set
        https://bugs.webkit.org/show_bug.cgi?id=120654

        Reviewed by Simon Fraser.

        Add support for cloning Map and Set.  Fairly self explanatory change.
        Needed to add Forwarding headers for the JSMap, JSSet and MapData classes.

        * ForwardingHeaders/runtime/JSMap.h: Added.
        * ForwardingHeaders/runtime/JSSet.h: Added.
        * ForwardingHeaders/runtime/MapData.h: Added.
        * bindings/js/SerializedScriptValue.cpp:
        (WebCore::CloneSerializer::isMap):
        (WebCore::CloneSerializer::isSet):
        (WebCore::CloneSerializer::startSet):
        (WebCore::CloneSerializer::startMap):
        (WebCore::CloneSerializer::serialize):
        (WebCore::CloneDeserializer::consumeMapDataTerminationIfPossible):
        (WebCore::CloneDeserializer::deserialize):

2013-09-03  Bear Travis  <betravis@adobe.com>

        [CSS Shapes] Shape's content gets extra left offset when left-border is positive on the content box
        https://bugs.webkit.org/show_bug.cgi?id=117573

        Reviewed by David Hyatt.

        Nested blocks need to take into account their offset from the shape-inside container.
        The new code calculates the offset from the shape-inside container, then applies the
        offset to the computed segments. The line must be moved down by the offset's height,
        and each segment must be moved left by the offset's width.

        Test: fast/shapes/shape-inside/shape-inside-offset-block-children.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::relayoutShapeDescendantIfMoved): Relayout a block child if its
        new logical left would cause it to rest at a new position within a shape container.
        (WebCore::RenderBlock::logicalOffsetFromShapeAncestorContainer): Calculate the logical
        offset form a shape inside ancestor container.
        (WebCore::RenderBlock::layoutBlockChild): Call relayoutShapeDescendantIfMoved with the
        new position offset.
        * rendering/RenderBlock.h:
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::updateShapeAndSegmentsForCurrentLine): Use layout offset, rather
        than just vertical offset.
        (WebCore::RenderBlock::updateShapeAndSegmentsForCurrentLineInFlowThread): Ditto.
        (WebCore::RenderBlock::layoutRunsAndFloatsInRange): Ditto.
        * rendering/shapes/ShapeInsideInfo.h:
        (WebCore::ShapeInsideInfo::computeSegmentsForLine): Shift segments logically left when
        there is an inline offset.

2013-09-03  Antoine Quint  <graouts@apple.com>

        Web Inspector: exceptions triggered from console evaluation do not pause the debugger
        https://bugs.webkit.org/show_bug.cgi?id=120460

        Reviewed by Timothy Hatcher.

        * inspector/InjectedScriptSource.js:
        Explicitly set a sourceURL such that the frontend may identify injected script when
        processing call frames in order to hide such code from the debugger.

2013-09-03  Andreas Kling  <akling@apple.com>

        Support Vector<Ref<T>>.
        <https://webkit.org/b/120637>

        Reviewed by Antti Koivisto.

        Use Vector<Ref<T>> internally in Page.

        * page/Page.cpp:
        (WebCore::networkStateChanged):
        (WebCore::Page::refreshPlugins):

            Clean up these functions and use Vector<Ref<Frame>> to store pointers to frames
            since we know they are not going to be null.

        (WebCore::Page::pluginViews):

            Changed this to return a Vector<Ref<PluginView>> by value instead of passing a
            writable vector as an argument. Clean up loops with 'auto'.

        (WebCore::Page::storageBlockingStateChanged):
        (WebCore::Page::privateBrowsingStateChanged):

            Tweaked for pluginViews() returning a Vector now.

        (WebCore::Page::setVisibilityState):

            Store Documents that need a visibilitychange event in a Vector<Ref<Document>>.

2013-08-28  Sergio Villar Senin  <svillar@igalia.com>

        [CSS Grid Layout] Add parsing for named grid lines
        https://bugs.webkit.org/show_bug.cgi?id=119540

        Reviewed by Andreas Kling.

        From Blink r150381,r150587 by <jchaffraix@chromium.org>

        Adds parsing support for named grid lines at <grid-line> level,
        i.e., inside grid-{row|column}-{start|end}. This change covers
        only the parsing, layout changes coming in a follow up patch.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::valueForGridPosition):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseIntegerOrStringFromGridPosition):
        (WebCore::CSSParser::parseGridPosition):
        * css/CSSParser.h:
        * css/StyleResolver.cpp:
        (WebCore::createGridPosition):
        * rendering/RenderGrid.cpp:
        (WebCore::RenderGrid::resolveGridPositionFromStyle):
        * rendering/style/GridPosition.h:
        (WebCore::GridPosition::setExplicitPosition):
        (WebCore::GridPosition::setSpanPosition):
        (WebCore::GridPosition::integerPosition):
        (WebCore::GridPosition::namedGridLine):

2013-09-03  Alexey Proskuryakov  <ap@apple.com>

        [Mac] Hyphenation respects regional format settings language instead of primary language
        https://bugs.webkit.org/show_bug.cgi?id=120641

        Reviewed by Dan Bernstein.

        Fixes hyphenation tests on my machine with non-English regional format settings.

        * platform/text/cf/HyphenationCF.cpp: (createValueForNullKey):
        Use primary UI language for hyphenation, not regional settings language.

2013-09-03  Danilo Cesar Lemes de Paula  <danilo.cesar@collabora.co.uk>

        [GTK][EFL] include missing localized strings for subtitle auto track
        https://bugs.webkit.org/show_bug.cgi?id=120629

        those methods are necessary to show the "Auto" track on webkitgtk

        Reviewed by Gustavo Noronha Silva.

        * platform/efl/LocalizedStringsEfl.cpp:
        (WebCore::textTrackAutomaticMenuItemText):
        * platform/gtk/LocalizedStringsGtk.cpp:
        (WebCore::textTrackAutomaticMenuItemText):

2013-09-03  Daniel Bates  <dabates@apple.com>

        Require layout when -webkit-overflow-scrolling changes
        https://bugs.webkit.org/show_bug.cgi?id=120535

        Reviewed by Darin Adler.

        Test: fast/repaint/overflow-scroll-touch-repaint.html

        We want to require a layout when the value of -webkit-overflow-scrolling changes
        since -webkit-overflow-scrolling creates a stacking context.

        * rendering/style/RenderStyle.cpp:
        (WebCore::RenderStyle::changeRequiresLayout):

2013-09-02  Ryosuke Niwa  <rniwa@webkit.org>

        Support the "json" responseType and JSON response entity in XHR
        https://bugs.webkit.org/show_bug.cgi?id=73648

        Reviewed by Oliver Hunt.

        Based on the patch written by Jarred Nicholls.

        Implement 'json' type for XMLHttpRequest.response. We cache the result on JSC side as a cached attribute
        unlike other response types like 'document' and 'blob' for which the parsed response object is cached
        in XMLHttpRequest itself. In the long run, we should do the same for other types of response types.

        Also refactored the various code to share the code.

        Tests: fast/xmlhttprequest/xmlhttprequest-responsetype-json-invalid.html
               fast/xmlhttprequest/xmlhttprequest-responsetype-json-utf16.html
               fast/xmlhttprequest/xmlhttprequest-responsetype-json-valid.html

        * ForwardingHeaders/runtime/JSONObject.h: Added.

        * bindings/js/JSXMLHttpRequestCustom.cpp:
        (WebCore::JSXMLHttpRequest::visitChildren):
        (WebCore::JSXMLHttpRequest::response): Use JSONParse to parse the response text and cache the result.
        Call didCacheResponseJSON to set the cache status and clear the original response buffer.

        * xml/XMLHttpRequest.cpp:
        (WebCore::XMLHttpRequest::XMLHttpRequest): Added m_responseCacheIsValid to invalidate the cache of
        a json response.
        (WebCore::XMLHttpRequest::responseText):
        (WebCore::XMLHttpRequest::didCacheResponseJSON): Added; Updates m_responseCacheIsValid and clears the
        response buffer to save memory.
        (WebCore::XMLHttpRequest::responseXML):
        (WebCore::XMLHttpRequest::setResponseType):
        (WebCore::XMLHttpRequest::responseType):
        (WebCore::XMLHttpRequest::clearResponseBuffers):
        (WebCore::XMLHttpRequest::didReceiveData):

        * xml/XMLHttpRequest.h:
        (WebCore::XMLHttpRequest::doneWithoutErrors): Extracted from responseXML.
        (WebCore::XMLHttpRequest::responseTextIgnoringResponseType): Extracted from responseText.
        (WebCore::XMLHttpRequest::responseCacheIsValid): Added.
        (WebCore::XMLHttpRequest::shouldDecodeResponse): Extracted from didReceiveData.
        Also modified to decode when the response type is ResponseTypeJSON.

        * xml/XMLHttpRequest.idl: Added CachedAttribute IDL extention on response property. This cache is
        used when the response type is 'json'.

2013-09-03  Commit Queue  <commit-queue@webkit.org>

        Unreviewed, rolling out r154881.
        http://trac.webkit.org/changeset/154881
        https://bugs.webkit.org/show_bug.cgi?id=120643

        Crashes on macworld.com (Requested by kling on #webkit).

        * dom/Element.cpp:
        (WebCore::Element::setAttributeInternal):

2013-09-03  Andre Moreira Magalhaes   <andre.magalhaes@collabora.co.uk>

        [GStreamer] Don't set state to NULL until element is destroyed
        https://bugs.webkit.org/show_bug.cgi?id=117354

        Reviewed by Philippe Normand.

        Don't set playbin to NULL until it is going to be destroyed or if we stay
        for too long on the READY state. Instead only set the state to READY as this
        allows much faster state changes to PAUSED/PLAYING again. playbin internally
        caches some state that is destroyed when setting it to NULL.
        This state is independent of the URI and it is even possible to change the
        URI in READY state.

        To avoid having resources (e.g. audio devices) open indefinitely,
        when setting the state to READY we create a timeout and if the timeout
        is reached we reset the pipeline state to NULL to free resources.

        Also now all state changes use the changePipelineState method instead of setting
        the playbin state directly with gst_element_set_state, so we have a better control
        of when we are requesting state changes.

        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        (WebCore::mediaPlayerPrivateReadyStateTimeoutCallback):
        (WebCore::MediaPlayerPrivateGStreamer::MediaPlayerPrivateGStreamer):
        (WebCore::MediaPlayerPrivateGStreamer::~MediaPlayerPrivateGStreamer):
        (WebCore::MediaPlayerPrivateGStreamer::commitLoad):
        (WebCore::MediaPlayerPrivateGStreamer::changePipelineState):
        (WebCore::MediaPlayerPrivateGStreamer::setRate):
        (WebCore::MediaPlayerPrivateGStreamer::handlePluginInstallerResult):
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.h:

2013-09-03  peavo@outlook.com  <peavo@outlook.com>

        [WinCairo] Unneeded code in method GlyphPage::fill().
        https://bugs.webkit.org/show_bug.cgi?id=120634

        Reviewed by Andreas Kling.

        * platform/graphics/win/GlyphPageTreeNodeCairoWin.cpp:
        (WebCore::GlyphPage::fill): Remove unneeded call to GetTextMetrics() function.

2013-09-03  Mihnea Ovidenie  <mihnea@adobe.com>

        [CSSRegions] Pseudo-elements as regions should not be exposed to JS
        https://bugs.webkit.org/show_bug.cgi?id=120633

        Reviewed by Andreas Kling.

        Until we properly implement the Region interface (http://dev.w3.org/csswg/css-regions/#the-region-interface)
        for pseudo-elements, we should not return these as regions in JS.

        Tests: fast/regions/get-regions-by-content-pseudo.html
               fast/regions/webkit-named-flow-get-regions-pseudo.html

        * dom/WebKitNamedFlow.cpp:
        (WebCore::WebKitNamedFlow::firstEmptyRegionIndex): Skip pseudo-elements as regions here too,
        otherwise we may get an index that cannot be used with getRegions().
        (WebCore::WebKitNamedFlow::getRegionsByContent):
        (WebCore::WebKitNamedFlow::getRegions):

2013-09-03  Zan Dobersek  <zdobersek@igalia.com>

        REGRESSION(r154967): http appcache tests crashing on WK1
        https://bugs.webkit.org/show_bug.cgi?id=120620

        Reviewed by Andreas Kling.

        * loader/appcache/ApplicationCacheGroup.cpp:
        (WebCore::ApplicationCacheGroup::cacheDestroyed): Reintroduce pre-r154967 behavior that returned early in
        this method if the passed-in ApplicationCache object was not found in the ApplicationCacheGroup's HashSet
        of all the caches. This is now done by checking that the HashSet<T>::remove(T) returns true (meaning the
        object was found in the HashSet and removed from it) in addition to that HashSet being subsequently empty
        before the method moves on to destroying its ApplicationCacheGroup instance.

2013-09-03  Andre Moreira Magalhaes   <andre.magalhaes@collabora.co.uk>

        [gstreamer] Disable HTTP request "Accept-Encoding:" header field on gstreamer source element to avoid receiving the wrong size when retrieving data
        https://bugs.webkit.org/show_bug.cgi?id=115354

        Reviewed by Philippe Normand.

        Also disable Accept-Encoding on ResourceRequest::toSoupMessage accordingly.

        * platform/network/soup/ResourceRequestSoup.cpp:
        (WebCore::ResourceRequest::toSoupMessage):
        Call ResourceRequest::updateSoupMessage from ResourceRequest::toSoupMessage so that the
        Accept-Encoding header is also respected.

2013-09-03  Krzysztof Czech  <k.czech@samsung.com>

        [AX][ATK] Added support for sort and help attributes.
        https://bugs.webkit.org/show_bug.cgi?id=120456

        Reviewed by Chris Fleizach.

        Added support for aria-sort and aria-help attributes.

        Test: accessibility/aria-sort.html

        * accessibility/atk/WebKitAccessibleWrapperAtk.cpp:
        (webkitAccessibleGetAttributes):

2013-09-03  Allan Sandfeld Jensen  <allan.jensen@digia.com>

        [Qt] Remove dead code for QtXmlPatterns
        https://bugs.webkit.org/show_bug.cgi?id=120624

        Reviewed by Simon Hausmann.

        Remove code supporting XSLT using QtXmlPatterns which has been
        dead for some time.

        * Target.pri:
        * WebCore.pri:
        * dom/TransformSourceQt.cpp: Removed.
        * xml/XSLStyleSheetQt.cpp: Removed.
        * xml/XSLTProcessorQt.cpp: Removed.
        * xml/parser/XMLDocumentParserQt.cpp:
        (WebCore::XMLDocumentParser::doEnd):
        (WebCore::XMLDocumentParser::parseProcessingInstruction):

2013-09-03  Mihnea Ovidenie  <mihnea@adobe.com>

        [CSS Regions] position: fixed is computed relative to the first region, not the viewport
        https://bugs.webkit.org/show_bug.cgi?id=111176

        Reviewed by David Hyatt.

        Fixed positioned elements inside a named flow should be positioned and sized relative to the viewport,
        not on the first region, as described in the spec: http://dev.w3.org/csswg/css-regions/#the-flow-into-property.
        While the flow thread will still act as containing block for the fixed positioned elements, the painting and hit
        testing for the fixed positioned elements is done by RenderView. The layers for the fixed positioned elements
        are collected by the flow thread.
 
        Tests: fast/regions/element-in-named-flow-absolute-from-fixed.html
               fast/regions/element-in-named-flow-fixed-from-absolute.html
               fast/regions/element-inflow-fixed-from-outflow-static.html
               fast/regions/element-outflow-static-from-inflow-fixed.html
               fast/regions/fixed-element-transformed-parent.html
               fast/regions/fixed-in-named-flow-scroll.html
               fast/regions/fixed-inside-fixed-in-named-flow.html
               fast/regions/fixed-inside-named-flow-zIndex.html
               fast/regions/fixed-pos-elem-in-namedflow-noregions.html
               fast/regions/fixed-pos-region-in-nested-flow.html

        * rendering/FlowThreadController.cpp:
        (WebCore::FlowThreadController::collectFixedPositionedLayers):
        Return the list of layers for the fixed positioned elements with named flows as containing blocks.
        Used in RenderLayer:: paintFixedLayersInNamedFlows and RenderLayer:: hitTestFixedLayersInNamedFlows.
        * rendering/FlowThreadController.h:
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::mapLocalToContainer):
        (WebCore::RenderBox::containingBlockLogicalWidthForPositioned):
        (WebCore::RenderBox::containingBlockLogicalHeightForPositioned):
        For fixed positioned elements, width and height are given by the view instead of the first region.
        * rendering/RenderLayer.cpp:
        (WebCore::accumulateOffsetTowardsAncestor):
        Modified for the fixed positioned elements inside named flows with the named flows as containing block
        to take into account the view scroll.
        (WebCore::compareZIndex):
        Moved upwards because it is used in RenderLayer::paintFixedLayersInNamedFlows.
        (WebCore::RenderLayer::paintFixedLayersInNamedFlows):
        Paint the list of fixed layers directly from the RenderView instead of painting them through regions -> named flows.
        (WebCore::RenderLayer::paintLayerContents):
        (WebCore::RenderLayer::paintList):
        (WebCore::RenderLayer::hitTestFixedLayersInNamedFlows):
        Hit test the layers for the fix positioned elements inside named flows from the RenderView layer
        instead of the region -> named flow layer.
        (WebCore::RenderLayer::hitTestLayer):
        (WebCore::RenderLayer::calculateRects):
        * rendering/RenderLayer.h:
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::updateLayerTreeGeometry):
        We do not support yet the accelerated compositing for elements in named flows,
        so bail out early here. We need to revisit fixed elements once we finish accelerated compositing for elements in named flows.
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::fixedPositionedWithNamedFlowContainingBlock):
        (WebCore::hasFixedPosInNamedFlowContainingBlock):
        (WebCore::RenderObject::containerForRepaint):
        Changed to take into account that RenderView should be the repaintContainer for the
        fixed positioned elements with named flow as the containing block.
        * rendering/RenderObject.h:

2013-09-03  Arvid Nilsson  <anilsson@rim.com>

        [BlackBerry] Remove LayerData::LayerProgram
        https://bugs.webkit.org/show_bug.cgi?id=120601

        Reviewed by Anders Carlsson.

        JIRA 490672
        All layer contents are RGBA now, so there's no need to support BGRA any
        more and the LayerData::LayerProgram enum can be removed. Related dead
        code was removed.

        No new tests, no change in behavior.

        * platform/graphics/blackberry/EGLImageLayerWebKitThread.cpp:
        (WebCore::EGLImageLayerWebKitThread::EGLImageLayerWebKitThread):
        * platform/graphics/blackberry/LayerData.h:
        (WebCore::LayerData::LayerData):
        * platform/graphics/blackberry/LayerRenderer.cpp:
        (WebCore::LayerRenderer::compositeLayersRecursive):
        (WebCore::LayerRenderer::createProgram):
        * platform/graphics/blackberry/LayerRenderer.h:
        * platform/graphics/blackberry/LayerWebKitThread.h:
        * platform/graphics/blackberry/PluginLayerWebKitThread.cpp:
        (WebCore::PluginLayerWebKitThread::setPluginView):

2013-09-03  Xabier Rodriguez Calvar  <calvaris@igalia.com>

        [GStreamer] Video player sets system volume to 100%
        https://bugs.webkit.org/show_bug.cgi?id=118974

        Reviewed by Philippe Normand.

        In order to preserve the system volume we need to keep track of
        the volume being initialized in the HTMLMediaElement and then just
        setting the volume to the sink when initializing the pipeline if
        that volume was changed before.

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::HTMLMediaElement): Initialized
        attribute to false.
        (WebCore::HTMLMediaElement::setVolume): Set the attribute to true
        when volume is changed.
        (WebCore::HTMLMediaElement::updateVolume): Set the volume only if
        volume was initialized.
        (WebCore::HTMLMediaElement::mediaPlayerPlatformVolumeConfigurationRequired):
        Platform volume configuration is required only if volume was not
        initialized before.
        * html/HTMLMediaElement.h: Added attribute and interface method.
        * platform/graphics/MediaPlayer.h:
        (WebCore::MediaPlayerClient::mediaPlayerPlatformVolumeConfigurationRequired):
        Declared and added default implementation for the interface method.
        (WebCore::MediaPlayer::platformVolumeConfigurationRequired):
        Asked the client, meaning the HTMLMediaElement if the platform
        volume configuration is required.
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamerBase.cpp:
        (WebCore::mediaPlayerPrivateVolumeChangedCallback): Added log.
        (WebCore::MediaPlayerPrivateGStreamerBase::setVolume): Added log.
        (WebCore::MediaPlayerPrivateGStreamerBase::setStreamVolumeElement):
        Set the volume only if not platform volume is required and added log.

2013-09-02  Darin Adler  <darin@apple.com>

        * inspector/InspectorProfilerAgent.cpp:
        (WebCore::InspectorProfilerAgent::removeProfile): Fix braces here; a review
        comment I forgot to address in my last check-in.

2013-09-02  Darin Adler  <darin@apple.com>

        Cut down on double hashing and code needlessly using hash table iterators
        https://bugs.webkit.org/show_bug.cgi?id=120611

        Reviewed by Andreas Kling.

        Some of these changes are primarily code cleanup, but others could provide
        a small code size and speed improvement by avoiding extra hashing.

        * Modules/geolocation/Geolocation.cpp:
        (WebCore::Geolocation::Watchers::find): Use get instead of find.
        (WebCore::Geolocation::Watchers::remove): Use take instead of find.
        (WebCore::Geolocation::makeCachedPositionCallbacks): Use the return
        value from remove to avoid hashing twice.

        * Modules/webaudio/AudioContext.cpp:
        (WebCore::AudioContext::addAutomaticPullNode): Use the return value from
        add to avoid hashing twice.
        (WebCore::AudioContext::removeAutomaticPullNode): Use the return value
        from remove to avoid hashing twice.

        * Modules/webaudio/AudioNodeInput.cpp:
        (WebCore::AudioNodeInput::connect): Use the return value from add to avoid
        hashing twice.
        (WebCore::AudioNodeInput::disconnect): Use the return value from remove
        to avoid hashing twice.

        * Modules/webaudio/AudioParam.cpp:
        (WebCore::AudioParam::connect): Use the return value from add to avoid
        hashing twice.
        (WebCore::AudioParam::disconnect): Use the return value from remove to
        avoid hashing twice.

        * bridge/NP_jsobject.cpp:
        (ObjectMap::remove): Use remove instead of find/remove.

        * dom/Node.cpp:
        (WebCore::Node::~Node): Use the return value from remove instead of
        find/remove.

        * inspector/InspectorProfilerAgent.cpp:
        (WebCore::InspectorProfilerAgent::removeProfile): Remove needless
        calls to contains.

        * loader/DocumentLoader.cpp:
        (WebCore::DocumentLoader::removeSubresourceLoader): Use the return
        value from remove instead of find/remove.

        * loader/ResourceLoadScheduler.cpp:
        (WebCore::ResourceLoadScheduler::HostInformation::remove): Use the
        return value from remove to avoid hashing twice.

        * loader/appcache/ApplicationCacheGroup.cpp:
        (WebCore::ApplicationCacheGroup::disassociateDocumentLoader): Use
        remove instead of find/remove.
        (WebCore::ApplicationCacheGroup::cacheDestroyed): Removed a needless
        call to contains to avoid hashing twice. It's fine to do the check
        for an empty hash table unconditionally.

        * page/DOMWindow.cpp:
        (WebCore::addUnloadEventListener): Eliminated a local variable for clarity.
        (WebCore::removeUnloadEventListener): Ditto. Also use remove instead
        of find/remove.
        (WebCore::removeAllUnloadEventListeners): Ditto. Also use removeAll instead
        of find/removeAll.
        (WebCore::addBeforeUnloadEventListener): Ditto.
        (WebCore::removeBeforeUnloadEventListener): Ditto.
        (WebCore::removeAllBeforeUnloadEventListeners): Ditto.

        * page/FrameView.cpp:
        (WebCore::FrameView::removeViewportConstrainedObject): Use the return
        value from remove to avoid hashing twice.
        (WebCore::FrameView::removeScrollableArea): Use the return value from
        remove instead of find/remove.
        (WebCore::FrameView::containsScrollableArea): Use && instead of an if
        statement in a way that is idiomatic for this kind of function.

        * page/Page.cpp:
        (WebCore::Page::addRelevantRepaintedObject): Use the return value from
        remove instead of find/remove.

        * page/PageGroup.cpp:
        (WebCore::PageGroup::removeUserScriptsFromWorld): Use remove instead
        of find/remove.
        (WebCore::PageGroup::removeUserStyleSheetsFromWorld): Use the return
        value from remove instead of find/remove.

        * page/PerformanceUserTiming.cpp:
        (WebCore::clearPeformanceEntries): Removed a needless call to contains.

        * platform/graphics/DisplayRefreshMonitor.cpp:
        (WebCore::DisplayRefreshMonitor::removeClient): Use the return value
        from remove instead of find/remove.
        (WebCore::DisplayRefreshMonitorManager::displayDidRefresh): Use remove
        instead of find/remove.

        * platform/graphics/blackberry/LayerRenderer.cpp:
        (WebCore::LayerRenderer::removeLayer): Use the return value from remove
        instead of find/remove.

        * platform/win/WindowMessageBroadcaster.cpp:
        (WebCore::WindowMessageBroadcaster::removeListener): Use remove instead
        of find/remove. It's fine to do the check for an empty hash table unconditionally.

        * plugins/PluginDatabase.cpp:
        (WebCore::PluginDatabase::removeDisabledPluginFile): Use the return value
        from remove instead of find/remove.

        * rendering/style/StyleCustomFilterProgramCache.cpp:
        (WebCore::StyleCustomFilterProgramCache::lookup): Use get instead of find.
        (WebCore::StyleCustomFilterProgramCache::add): Use contains instead of find
        in an assertion.
        (WebCore::StyleCustomFilterProgramCache::remove): Use remove instead of
        find/remove.

        * svg/SVGCursorElement.cpp:
        (WebCore::SVGCursorElement::removeClient): Use the return value from remove
        instead of find/remove.

        * svg/SVGDocumentExtensions.cpp:
        (WebCore::SVGDocumentExtensions::removeResource): Removed an unneeded call
        to contains.
        (WebCore::SVGDocumentExtensions::removeAllTargetReferencesForElement): Use
        remove instead of find/remove. It's fine to do the check for an empty hash
        table unconditionally.
        (WebCore::SVGDocumentExtensions::removeAllElementReferencesForTarget): Use
        remove instead of find/remove. Also removed unhelpful assertions. One is
        already done by HashMap, and the other is just checking a basic invariant
        of every HashMap that doesn't need to be checked.

        * svg/graphics/SVGImageCache.cpp:
        (WebCore::SVGImageCache::removeClientFromCache): Removed an unneeded call
        to contains.

        * svg/properties/SVGAnimatedProperty.cpp:
        (WebCore::SVGAnimatedProperty::~SVGAnimatedProperty): Use the version of
        remove that takes an iterator rather than the one that takes a key, so
        we don't need to redo the hashing.

2013-09-02  Andreas Kling  <akling@apple.com>

        Generate isFooElement() functions from tagname data.
        <https://webkit.org/b/120584>

        Reviewed by Antti Koivisto.

        Add a "generateTypeChecks" attribute that can be used in HTMLTagNames.in & friends.
        If present, isFooElement() style helpers will be added to HTMLElementTypeChecks.h.
        This also outputs an isElementOfType<T> check for the Element iterators.

        Removed all the hand-written isFooElement() functions that only checked tag name.

        * html/HTMLTagNames.in:
        * svg/svgtags.in:

            Added "generateTypeChecks" attribute as appropriate.

        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.xcodeproj/project.pbxproj:

            Added to build systems based on how HTMLNames.h was done.
            We're just outputting an additional header file in the generated code directory
            so I suspect most ports will just pick this up automagically.

        * dom/make_names.pl:
        (defaultTagPropertyHash):
        (printLicenseHeader):
        (printTypeChecks):
        (printTypeChecksHeaderFile):

            Generate a separate file for each namespace with isFooElement() helpers for
            elements with "generateTypeChecks" attribute set.

2013-09-02  Darin Adler  <darin@apple.com>

        [Mac] No need for HardAutorelease, which is same as CFBridgingRelease
        https://bugs.webkit.org/show_bug.cgi?id=120569

        Reviewed by Andy Estes.

        * accessibility/mac/WebAccessibilityObjectWrapperMac.mm:
        (AXTextMarkerRange):
        (AXTextMarkerRangeStart):
        (AXTextMarkerRangeEnd):
        (textMarkerForVisiblePosition):
        Use CFBridgingRelease.

        * platform/mac/KURLMac.mm:
        (WebCore::KURL::operator NSURL *): Use CFBridgingRelease.
        (WebCore::KURL::createCFURL): Get rid of needless local variable.

        * platform/mac/WebCoreNSURLExtras.mm:
        (WebCore::mapHostNameWithRange):
        (WebCore::URLWithData):
        (WebCore::userVisibleString):
        * platform/text/mac/StringImplMac.mm:
        (WTF::StringImpl::operator NSString *):
        Use CFBridgingRelease.

2013-09-01  Andreas Kling  <akling@apple.com>

        Ref: A smart pointer for the reference age.
        <https://webkit.org/b/120570>

        Reviewed by Antti Koivisto.

        Use Ref<T> for various stack guards where null checking isn't needed.

2013-09-02  Andreas Kling  <akling@apple.com>

        Simplify DocumentType handling.
        <https://webkit.org/b/120529>

        Reviewed by Antti Koivisto.

        Removed the insertedInto()/removedFrom() handlers from DocumentType.

        Document no longer keeps a pointer to its doctype node, it was only used for the
        document.doctype DOM API, which now just looks through the list of (<=2) children.

        The ENABLE(LEGACY_VIEWPORT_ADAPTION) hunk from Document::setDocType() was moved
        into Document::childrenChanged().

        We no longer clear the style resolver on doctype insertion/removal since it
        doesn't actually affect style anyway.

        Also made doctype() return a PassRefPtr<DocumentType> instead of a raw pointer.

        * dom/Document.cpp:
        (WebCore::Document::dispose):
        (WebCore::Document::doctype):
        (WebCore::Document::childrenChanged):
        * dom/Document.h:
        * dom/DocumentType.cpp:
        * dom/DocumentType.h:
        * editing/markup.cpp:
        (WebCore::documentTypeString):

2013-09-02  Anton Obzhirov  <a.obzhirov@samsung.com>

        <https://webkit.org/b/98350> [GTK] accessibility/aria-invalid.html times out

        Reviewed by Mario Sanchez Prada.

        The patch exposes aria-invalid attribute to ATK.

        * accessibility/atk/AXObjectCacheAtk.cpp:
        (WebCore::AXObjectCache::postPlatformNotification):
        Added emitting state-change signal for aria-invalid event.
        * accessibility/atk/WebKitAccessibleWrapperAtk.cpp:
        (webkitAccessibleGetAttributes):
        Added aria-invalid attribute.

2013-09-02  Commit Queue  <commit-queue@webkit.org>

        Unreviewed, rolling out r154955.
        http://trac.webkit.org/changeset/154955
        https://bugs.webkit.org/show_bug.cgi?id=120605

        broke xcode4 build :| (Requested by kling on #webkit).

        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.xcodeproj/project.pbxproj:
        * dom/make_names.pl:
        (defaultTagPropertyHash):
        (printLicenseHeader):
        * html/HTMLAnchorElement.h:
        (WebCore::isHTMLAnchorElement):
        (WebCore::HTMLAnchorElement):
        * html/HTMLAreaElement.h:
        (WebCore::isHTMLAreaElement):
        (WebCore::HTMLAreaElement):
        * html/HTMLAudioElement.h:
        (WebCore::isHTMLAudioElement):
        * html/HTMLBaseElement.h:
        (WebCore::isHTMLBaseElement):
        (WebCore::HTMLBaseElement):
        * html/HTMLCanvasElement.h:
        (WebCore::isHTMLCanvasElement):
        * html/HTMLElement.h:
        * html/HTMLFieldSetElement.h:
        (WebCore::isHTMLFieldSetElement):
        (WebCore::HTMLFieldSetElement):
        * html/HTMLFormElement.h:
        (WebCore::isHTMLFormElement):
        * html/HTMLFrameSetElement.h:
        (WebCore::isHTMLFrameSetElement):
        (WebCore::HTMLFrameSetElement):
        * html/HTMLImageElement.h:
        (WebCore::isHTMLImageElement):
        * html/HTMLInputElement.h:
        (WebCore::isHTMLInputElement):
        * html/HTMLLabelElement.h:
        (WebCore::isHTMLLabelElement):
        (WebCore::HTMLLabelElement):
        * html/HTMLLegendElement.h:
        (WebCore::isHTMLLegendElement):
        (WebCore::HTMLLegendElement):
        * html/HTMLMapElement.h:
        (WebCore::isHTMLMapElement):
        * html/HTMLMeterElement.h:
        (WebCore::isHTMLMeterElement):
        * html/HTMLOptGroupElement.h:
        (WebCore::isHTMLOptGroupElement):
        * html/HTMLOptionElement.h:
        (WebCore::isHTMLOptionElement):
        * html/HTMLParamElement.h:
        (WebCore::isHTMLParamElement):
        (WebCore::HTMLParamElement):
        * html/HTMLProgressElement.h:
        (WebCore::isHTMLProgressElement):
        * html/HTMLScriptElement.h:
        (WebCore::isHTMLScriptElement):
        * html/HTMLSourceElement.h:
        (WebCore::isHTMLSourceElement):
        (WebCore::HTMLSourceElement):
        * html/HTMLStyleElement.h:
        (WebCore::isHTMLStyleElement):
        (WebCore::HTMLStyleElement):
        * html/HTMLTableElement.h:
        (WebCore::isHTMLTableElement):
        * html/HTMLTableRowElement.h:
        (WebCore::isHTMLTableRowElement):
        (WebCore::HTMLTableRowElement):
        * html/HTMLTagNames.in:
        * html/HTMLTextAreaElement.h:
        (WebCore::isHTMLTextAreaElement):
        * html/HTMLTitleElement.h:
        (WebCore::isHTMLTitleElement):
        (WebCore::HTMLTitleElement):
        * html/HTMLTrackElement.h:
        (WebCore::isHTMLTrackElement):
        (WebCore::HTMLTrackElement):
        * svg/SVGElement.h:
        * svg/SVGFontElement.h:
        (WebCore::isSVGFontElement):
        * svg/SVGFontFaceElement.h:
        (WebCore::isSVGFontFaceElement):
        (WebCore::SVGFontFaceElement):
        * svg/SVGForeignObjectElement.h:
        (WebCore::isSVGForeignObjectElement):
        (WebCore::SVGForeignObjectElement):
        * svg/SVGImageElement.h:
        (WebCore::isSVGImageElement):
        * svg/SVGScriptElement.h:
        (WebCore::isSVGScriptElement):
        * svg/svgtags.in:

2013-09-02  Antti Koivisto  <antti@apple.com>

        Clean up ContainerNode::childrenChanged
        https://bugs.webkit.org/show_bug.cgi?id=120599

        Reviewed by Andreas Kling.

        - Make childrenChanged take a single struct argument instead of a long list of arguments.
        - Use enum instead of childCountDelta. It was always -1, 0, 1 or the total number of children (in case of removing them all).
        - Remove use of Node*, give the change range as Elements.
        - Related cleanups.

        * dom/Attr.cpp:
        (WebCore::Attr::childrenChanged):
        * dom/Attr.h:
        * dom/CharacterData.cpp:
        (WebCore::CharacterData::parserAppendData):
        (WebCore::CharacterData::dispatchModifiedEvent):
        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::insertBefore):
        (WebCore::ContainerNode::notifyChildInserted):
        (WebCore::ContainerNode::notifyChildRemoved):
        
            Add private helpers for setting up the struct.

        (WebCore::ContainerNode::parserInsertBefore):
        (WebCore::ContainerNode::replaceChild):
        (WebCore::ContainerNode::removeChild):
        (WebCore::ContainerNode::parserRemoveChild):
        (WebCore::ContainerNode::removeChildren):
        (WebCore::ContainerNode::appendChild):
        (WebCore::ContainerNode::parserAppendChild):
        (WebCore::ContainerNode::childrenChanged):
        (WebCore::ContainerNode::updateTreeAfterInsertion):
        * dom/ContainerNode.h:
        * dom/Document.cpp:
        (WebCore::Document::childrenChanged):
        * dom/Document.h:
        * dom/Element.cpp:
        (WebCore::checkForSiblingStyleChanges):
        
            Clean up and simplify. Since we now get element range automatically we don't need to compute it.

        (WebCore::Element::childrenChanged):
        (WebCore::Element::finishParsingChildren):
        * dom/Element.h:
        * dom/ShadowRoot.cpp:
        (WebCore::ShadowRoot::childrenChanged):
        * dom/ShadowRoot.h:
        * html/HTMLElement.cpp:
        (WebCore::HTMLElement::childrenChanged):
        (WebCore::HTMLElement::adjustDirectionalityIfNeededAfterChildrenChanged):
        
            Try to keep the existing behavior. This code needs  more cleanup to be sane. It shouldn't operate on Nodes
            as it only really cares about Elements.

        * html/HTMLElement.h:
        * html/HTMLFieldSetElement.cpp:
        (WebCore::HTMLFieldSetElement::childrenChanged):
        * html/HTMLFieldSetElement.h:
        * html/HTMLObjectElement.cpp:
        (WebCore::HTMLObjectElement::childrenChanged):
        * html/HTMLObjectElement.h:
        * html/HTMLOptGroupElement.cpp:
        (WebCore::HTMLOptGroupElement::childrenChanged):
        * html/HTMLOptGroupElement.h:
        * html/HTMLOptionElement.cpp:
        (WebCore::HTMLOptionElement::childrenChanged):
        * html/HTMLOptionElement.h:
        * html/HTMLOutputElement.cpp:
        (WebCore::HTMLOutputElement::childrenChanged):
        * html/HTMLOutputElement.h:
        * html/HTMLScriptElement.cpp:
        (WebCore::HTMLScriptElement::childrenChanged):
        * html/HTMLScriptElement.h:
        * html/HTMLSelectElement.cpp:
        (WebCore::HTMLSelectElement::childrenChanged):
        * html/HTMLSelectElement.h:
        * html/HTMLStyleElement.cpp:
        (WebCore::HTMLStyleElement::childrenChanged):
        * html/HTMLStyleElement.h:
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::childrenChanged):
        * html/HTMLTextAreaElement.h:
        * html/HTMLTitleElement.cpp:
        (WebCore::HTMLTitleElement::childrenChanged):
        * html/HTMLTitleElement.h:
        * html/shadow/InsertionPoint.cpp:
        (WebCore::InsertionPoint::childrenChanged):
        * html/shadow/InsertionPoint.h:
        * svg/SVGClipPathElement.cpp:
        (WebCore::SVGClipPathElement::childrenChanged):
        * svg/SVGClipPathElement.h:
        * svg/SVGElement.cpp:
        (WebCore::SVGElement::childrenChanged):
        * svg/SVGElement.h:
        * svg/SVGFELightElement.cpp:
        (WebCore::SVGFELightElement::childrenChanged):
        * svg/SVGFELightElement.h:
        * svg/SVGFilterElement.cpp:
        (WebCore::SVGFilterElement::childrenChanged):
        * svg/SVGFilterElement.h:
        * svg/SVGFilterPrimitiveStandardAttributes.cpp:
        (WebCore::SVGFilterPrimitiveStandardAttributes::childrenChanged):
        * svg/SVGFilterPrimitiveStandardAttributes.h:
        * svg/SVGFontFaceElement.cpp:
        (WebCore::SVGFontFaceElement::childrenChanged):
        * svg/SVGFontFaceElement.h:
        * svg/SVGFontFaceFormatElement.cpp:
        (WebCore::SVGFontFaceFormatElement::childrenChanged):
        * svg/SVGFontFaceFormatElement.h:
        * svg/SVGFontFaceSrcElement.cpp:
        (WebCore::SVGFontFaceSrcElement::childrenChanged):
        * svg/SVGFontFaceSrcElement.h:
        * svg/SVGFontFaceUriElement.cpp:
        (WebCore::SVGFontFaceUriElement::childrenChanged):
        * svg/SVGFontFaceUriElement.h:
        * svg/SVGGradientElement.cpp:
        (WebCore::SVGGradientElement::childrenChanged):
        * svg/SVGGradientElement.h:
        * svg/SVGMarkerElement.cpp:
        (WebCore::SVGMarkerElement::childrenChanged):
        * svg/SVGMarkerElement.h:
        * svg/SVGMaskElement.cpp:
        (WebCore::SVGMaskElement::childrenChanged):
        * svg/SVGMaskElement.h:
        * svg/SVGPatternElement.cpp:
        (WebCore::SVGPatternElement::childrenChanged):
        * svg/SVGPatternElement.h:
        * svg/SVGScriptElement.cpp:
        (WebCore::SVGScriptElement::childrenChanged):
        * svg/SVGScriptElement.h:
        * svg/SVGStyleElement.cpp:
        (WebCore::SVGStyleElement::childrenChanged):
        * svg/SVGStyleElement.h:
        * svg/SVGTitleElement.cpp:
        (WebCore::SVGTitleElement::childrenChanged):
        * svg/SVGTitleElement.h:

2013-09-02  Andreas Kling  <akling@apple.com>

        Generate isFooElement() functions from tagname data.
        <https://webkit.org/b/120584>

        Reviewed by Antti Koivisto.

        Add a "generateTypeChecks" attribute that can be used in HTMLTagNames.in & friends.
        If present, isFooElement() style helpers will be added to HTMLElementTypeChecks.h.
        This also outputs an isElementOfType<T> check for the Element iterators.

        Removed all the hand-written isFooElement() functions that only checked tag name.

        * html/HTMLTagNames.in:
        * svg/svgtags.in:

            Added "generateTypeChecks" attribute as appropriate.

        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.xcodeproj/project.pbxproj:

            Added to build systems based on how HTMLNames.h was done.
            We're just outputting an additional header file in the generated code directory
            so I suspect most ports will just pick this up automagically.

        * dom/make_names.pl:
        (defaultTagPropertyHash):
        (printLicenseHeader):
        (printTypeChecks):
        (printTypeChecksHeaderFile):

            Generate a separate file for each namespace with isFooElement() helpers for
            elements with "generateTypeChecks" attribute set.

2013-09-02  Dirk Schulze  <krit@webkit.org>

        Use edgeMode=duplicate for blurring on filter() function
        https://bugs.webkit.org/show_bug.cgi?id=120590

        Reviewed by Antti Koivisto.

        Filters on the CSS Image function filter() are not allowed to extend the
        dimension of the input image. This causes weird results on blurring an image,
        where the fading on the edges is clipped at the half of the fading.
        We shouldn't fade edges at all and use the edgeMode=duplicate instead.
        This will duplicate the pixel value on the nearest edge of the input image
        instead of taking transparent black and results in nice blurred images with
        sharp edges.

        Spec: http://dev.w3.org/fxtf/filters/#blurEquivalent

        Test: fast/filter-image/filter-image-blur.html

        * css/CSSFilterImageValue.cpp: Pass consumer information to the renderer.
        (WebCore::CSSFilterImageValue::image):
        * rendering/FilterEffectRenderer.cpp: Set edgeMode for feGaussianBlur to
            'duplicate' or 'none' depending on the consumer.
        (WebCore::FilterEffectRenderer::build):
        * rendering/FilterEffectRenderer.h: Add enumeration to differ between the 
            different consumers of the renderer.
        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::updateOrRemoveFilterEffectRenderer):  Pass consumer
            information to the renderer.

2013-09-01  Dirk Schulze  <krit@webkit.org>

        Add 'edgeMode' attribute to SVGFEGaussianBlur
        https://bugs.webkit.org/show_bug.cgi?id=120582

        Add 'edgeMode' attribute to the SVGFEGaussianBlur element. This attribute
        allows users to define the behavior on edges with the values 'none' where
        pixel values outside the input image are treated as transparent black. (The
        current blurring behavior.) 'duplicate' which repeats the values on the
        nearest edge and 'warp', which takes the pixel of the opposite site of
        the input image.
        Beside the attribute, this patch implements the behavior of 'duplicate'.

        http://dev.w3.org/fxtf/filters/#feGaussianBlurEdgeModeAttribute

        Reviewed by Rob Buis.

        Tests: svg/dynamic-updates/SVGFEGaussianBlurElement-dom-edgeMode-attr.html
               svg/dynamic-updates/SVGFEGaussianBlurElement-svgdom-edgeMode-prop.html
               svg/filters/svg-gaussianblur-edgeMode-duplicate-expected.svg
               svg/filters/svg-gaussianblur-edgeMode-duplicate.svg

        * platform/graphics/filters/FEGaussianBlur.cpp:
        (WebCore::FEGaussianBlur::FEGaussianBlur):
        (WebCore::FEGaussianBlur::create):
        (WebCore::FEGaussianBlur::edgeMode):
        (WebCore::FEGaussianBlur::setEdgeMode):
        (WebCore::boxBlur):
        (WebCore::FEGaussianBlur::platformApplyGeneric):
        (WebCore::FEGaussianBlur::determineAbsolutePaintRect):
        * platform/graphics/filters/FEGaussianBlur.h:
        * rendering/FilterEffectRenderer.cpp:
        (WebCore::FilterEffectRenderer::build):
        * svg/SVGFEGaussianBlurElement.cpp:
        (WebCore::SVGFEGaussianBlurElement::SVGFEGaussianBlurElement):
        (WebCore::SVGFEGaussianBlurElement::isSupportedAttribute):
        (WebCore::SVGFEGaussianBlurElement::parseAttribute):
        (WebCore::SVGFEGaussianBlurElement::svgAttributeChanged):
        (WebCore::SVGFEGaussianBlurElement::build):
        * svg/SVGFEGaussianBlurElement.h:
        * svg/SVGFEGaussianBlurElement.idl:

2013-09-01  Andreas Kling  <akling@apple.com>

        EventHandler::m_frame should be a Frame&.
        <https://webkit.org/b/120580>

        Reviewed by Darin Adler.

        EventHandler is tied to the lifetime of its frame, so let m_frame be a Frame&.
        A handful of null checks and assertions removed.

2013-09-01  Darin Adler  <darin@apple.com>

        Fix a mistake in my recent pasteboard/editor refactoring that was causing tests to fail.

        * editing/mac/EditorMac.mm:
        (WebCore::getImage): One place this said cachedImage but it should have said tentativeCachedImage.

2013-09-01  Darin Adler  <darin@apple.com>

        HitTestResult should have innerNonSharedElement
        https://bugs.webkit.org/show_bug.cgi?id=120579

        Reviewed by Andreas Kling.

        * editing/Editor.cpp:
        (WebCore::Editor::copyImage): Call HitTestResult member function version of
        innerNonSharedElement instead of a local function that does it.

        * page/Chrome.cpp:
        (WebCore::Chrome::setToolTip): Use innerNonSharedElement instead of getting
        the node and checking if it's an input element. Also added some missing braces.

        * page/EventHandler.cpp:
        (WebCore::EventHandler::selectClosestWordFromHitTestResult): Use targetNode for
        local variables instead of innerNode to match the HitTestResult function name.
        (WebCore::EventHandler::selectClosestWordOrLinkFromMouseEvent): Ditto.
        (WebCore::EventHandler::handleMousePressEventTripleClick): Ditto.
        (WebCore::EventHandler::handleMousePressEventSingleClick): Ditto.
        (WebCore::EventHandler::handleMousePressEvent): Ditto.

        * rendering/HitTestResult.cpp:
        (WebCore::HitTestResult::innerElement): Rewrote so there there is no loop.
        (WebCore::HitTestResult::innerNonSharedElement): Ditto.

        * rendering/HitTestResult.h: Added innerNonSharedElement. Generally speaking,
        we'd like to avoid using Node unless there is some real need.

2013-09-01  Xabier Rodriguez Calvar  <calvaris@igalia.com>

        Volume slider value should be 0 when audio is muted
        https://bugs.webkit.org/show_bug.cgi?id=120553

        Reviewed by Eric Carlson.

        Fixed the problem of showing a non empty slider when audio is
        muted.

        Test: media/volume-bar-empty-when-muted.html.

        * html/shadow/MediaControls.cpp:
        (WebCore::MediaControls::reset): Use setSliderVolume.
        (WebCore::MediaControls::changedVolume): Use setSliderVolume.
        (WebCore::MediaControls::setSliderVolume): Added to set the volume
        to 0 when muted and to its value otherwise.
        * html/shadow/MediaControls.h: Added setSliderVolume.
        * html/shadow/MediaControlsApple.cpp:
        (WebCore::MediaControlsApple::reset): Used setSliderVolume and
        setFullscreenSliderVolume.
        (WebCore::MediaControlsApple::changedVolume): Used
        setFullscreenSliderVolume.
        (WebCore::MediaControlsApple::setFullscreenSliderVolume): Added to
        set the volume to 0 when muted and to its value otherwise.
        * html/shadow/MediaControlsApple.h: Added setFullscreenSliderVolume
        * html/shadow/MediaControlsBlackBerry.cpp:
        (WebCore::MediaControlsBlackBerry::reset): Used setSliderVolume.

2013-09-01  Andreas Kling  <akling@apple.com>

        Give EditCommand a protected Frame& getter.
        <https://webkit.org/b/120574>

        Reviewed by Darin Adler.

        EditCommand is only created for documents that are attached to a Frame,
        we already ASSERTed as much in the EditCommand constructor.

        This patch adds a "Frame& EditCommand::frame()" helper, so EditCommand
        and its subclasses don't have to fumble around with pointers.

2013-08-31  Antti Koivisto  <antti@apple.com>

        Add element ancestor iterator
        https://bugs.webkit.org/show_bug.cgi?id=120563

        Reviewed by Andreas Kling.

        This patch adds ancestor iterators. They iterate over elements parent chain up to the root.
        
        To iterate over Element ancestors:
        
        auto ancestors = elementAncestors(this);
        for (auto it = ancestors.begin(), end = ancestors.end(); it != end; ++it) {
            Element& element = *it;
            ...

        To iterate over Element ancestors including the current element:
        
        auto lineage = elementLineage(this);
        for (auto it = lineage.begin(), end = lineage.end(); it != end; ++it) {
            Element& element = *it;
            ...
            
        To iterate over ancestors of a specific Element subclass:

        auto htmlAncestors = ancestorsOfType<HTMLElement>(this);
        for (auto it = htmlAncestors.begin(), end = htmlAncestors.end(); it != end; ++it) {
            HTMLElement& htmlElement = *it;
            ...
            
        To iterate over ancestors of a specific Element subclass including the current element:

        auto htmlLineage = lineageOfType<HTMLElement>(this);
        for (auto it = htmlLineage.begin(), end = htmlLineage.end(); it != end; ++it) {
            HTMLElement& htmlElement = *it;
            ...
            
        The patch also uses the new types in a few places.

        * WebCore.xcodeproj/project.pbxproj:
        * accessibility/AccessibilityNodeObject.cpp:
        (WebCore::AccessibilityNodeObject::mouseButtonListener):
        (WebCore::AccessibilityNodeObject::labelForElement):
        * dom/ElementAncestorIterator.h: Added.
        (WebCore::::ElementAncestorIterator):
        (WebCore::::operator):
        (WebCore::::ElementAncestorConstIterator):
        (WebCore::::ElementAncestorIteratorAdapter):
        (WebCore::::begin):
        (WebCore::::end):
        (WebCore::::ElementAncestorConstIteratorAdapter):
        (WebCore::elementLineage):
        (WebCore::elementAncestors):
        (WebCore::ancestorsOfType):
        * dom/ElementIterator.h:
        (WebCore::findElementAncestorOfType):
        (WebCore::::traverseAncestor):
        (WebCore::=):
        * html/HTMLElement.cpp:
        (WebCore::HTMLElement::adjustDirectionalityIfNeededAfterChildAttributeChanged):
        * html/HTMLFieldSetElement.h:
        (WebCore::isHTMLFieldSetElement):
        (WebCore::HTMLFieldSetElement):
        * html/HTMLFrameSetElement.cpp:
        (WebCore::HTMLFrameSetElement::findContaining):
        * html/HTMLFrameSetElement.h:
        (WebCore::HTMLFrameSetElement):
        * html/HTMLInputElement.h:
        (WebCore::isHTMLInputElement):
        (WebCore::toHTMLInputElement):
        * html/HTMLLegendElement.cpp:
        (WebCore::HTMLLegendElement::associatedControl):

2013-08-31  Darin Adler  <darin@apple.com>

        Refactor URL and image writing so layer-violating parts are in Editor, not Pasteboard (Mac-only at first)
        https://bugs.webkit.org/show_bug.cgi?id=120573

        Reviewed by Andreas Kling.

        * editing/Editor.cpp:
        (WebCore::Editor::copy): Use writeImageToPasteboard instead of Pasteboard::writeImage on Mac.
        (WebCore::Editor::copyURL): Use writeURLToPasteboard instead of Pasteboard::writeURL on Mac.
        (WebCore::innerNonSharedElement): Added. Used in copyImage.
        (WebCore::Editor::copyImage): Use innerNonSharedElement instead of innerNonSharedNode.
        Use writeImageToPasteboard instead of Pasteboard::writeImage on Mac.

        * editing/Editor.h: Add new functions, writeURLToPasteboard and writeImageToPasteboard,
        both Mac-only for now.

        * editing/mac/EditorMac.mm:
        (WebCore::Editor::pasteWithPasteboard): Removed unneeded "m_frame.editor()" round trip that
        was left behind in this function.
        (WebCore::getImage): Added. Helper used by writeImageToPasteboard.
        (WebCore::Editor::writeURLToPasteboard): Added. Sets up PasteboardURL and then calls
        Pasteboard::write with it.
        (WebCore::Editor::writeImageToPasteboard): Added. Sets up PasteboardImage and then calls
        Pasteboard::write with it.
        * page/DragController.cpp:
        (WebCore::DragController::startDrag): Use Editor::writeURLToPasteboard instead of
        Pasteboard::writeURL on Mac.

        * platform/Pasteboard.h: Added PasteboardURL and PasteboardImage structures.
        Declare write functions for PasteboardWebContent, PasteboardURL, and PasteboardImage.
        Guard writeURL and writeImage with !PLATFORM(MAC).

        * platform/mac/PasteboardMac.mm:
        (WebCore::writeURLForTypes): Changed this to take a PasteboardURL.
        (WebCore::Pasteboard::write): Renamed writeURL and writeImage to this. Refactor both
        to take PasteboardURL and PasteboardImage arguments.
        (WebCore::fileWrapper): Renamed from fileWrapperForImage since the fact that this is
        for an image is now clear from its argument, a PasteboardImage.
        (WebCore::writeFileWrapperAsRTFDAttachment): Changed this function to use early return.

2013-08-31  Andreas Kling  <akling@apple.com>

        EditCommand constructors should take Document&.
        <https://webkit.org/b/120566>

        Reviewed by Darin Adler.

        Let EditCommand's and all subclass constructors take Document& instead of Document*.
        EditCommand::document() now returns a Document&.

        Added Editor::document() which returns Editor::frame().document() after asserting
        that it's non-null, to make passing a Document& from Editor functions easier.

2013-08-31  Andreas Kling  <akling@apple.com>

        Make more use of toRenderFoo(RenderObject&) cast helpers.
        <https://webkit.org/b/120565>

        Reviewed by Darin Adler.

        To make amends for putting ugly toRenderFoo(&renderer) casts everywhere,
        here's a patch that switches a bunch of code over to using reference-based casts.

        I removed pointer-based casts altogether for these renderers:

            - RenderBR
            - RenderCombineText
            - RenderListMarker
            - RenderVideo
            - RenderView

2013-08-31  Santosh Mahto  <santosh.ma@samsung.com>

        warning: unused parameter ‘renderingMode'  in ImageBufferCairo.cpp:94
        https://bugs.webkit.org/show_bug.cgi?id=120543

        Reviewed by Darin Adler.

        Fixing warning by adding ASSERT_UNUSED.

        * platform/graphics/cairo/ImageBufferCairo.cpp:
        (WebCore::ImageBuffer::ImageBuffer):

2013-08-31  Andreas Kling  <akling@apple.com>

        Fix typo in r154931 that caused assertions in continuation tests.

        * rendering/InlineFlowBox.cpp:
        (WebCore::InlineFlowBox::paint):

2013-08-31  Rob Buis  <rwlbuis@webkit.org>

        XMLSerializer-attribute-namespace-prefix-conflicts can't produce reliable results
        https://bugs.webkit.org/show_bug.cgi?id=120490

        Reviewed by Ryosuke Niwa.

        Retain the key of the namespaces map by using AtomicString as key instead of AtomicStringImpl*.

        * editing/MarkupAccumulator.h:

2013-08-31  Andreas Kling  <akling@apple.com>

        InlineBox::renderer() and pals should return references.
        <https://webkit.org/b/120562>

        Reviewed by Antti Koivisto.

        Make InlineBox::renderer() and its friends return references instead of pointers.
        Every box always has a renderer, so this clears up any ambiguity, and a number of
        weird assertions in SVG code.

        Made InlineBox::m_renderer private so subclasses have to go through renderer().
        The next step will be to replace renderer() with tightly-typed accessors where
        applicable (e.g InlineTextBox's renderer is always a RenderText.)

        Also added reference versions of these RenderObject casts:

            - toRenderBox()
            - toRenderBlock()
            - toRenderInline()
            - toRenderSVGInlineText()

2013-08-31  Andreas Kling  <akling@apple.com>

        PostAttachCallbackDisabler should take a ContainerNode&.
        <https://webkit.org/b/120560>

        Reviewed by Antti Koivisto.

        Let PostAttachCallbackDisabler take a reference and remove an ugly assertion.

        * dom/ContainerNode.h:
        (WebCore::PostAttachCallbackDisabler::PostAttachCallbackDisabler):
        (WebCore::PostAttachCallbackDisabler::~PostAttachCallbackDisabler):
        * dom/Document.cpp:
        (WebCore::Document::recalcStyle):
        * style/StyleResolveTree.cpp:
        (WebCore::Style::attachRenderTree):

2013-08-31  Antti Koivisto  <antti@apple.com>

        Rename ChildIterator -> ElementChildIterator, DescendantIterator -> ElementDescendantIterator
        https://bugs.webkit.org/show_bug.cgi?id=120561

        Reviewed by Andreas Kling.

        New names are more descriptive and consistent. They also put related iterator files close by in file lists.
        The types are always used with auto so longer names don't make them any clumsier to use.

        For simplicity included all Element iterator types from ElementIterator.h so it is the only file that has
        to be included by the clients.

        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.xcodeproj/project.pbxproj:
        * accessibility/AccessibilityNodeObject.cpp:
        * accessibility/AccessibilityRenderObject.cpp:
        * accessibility/AccessibilityTable.cpp:
        * css/CSSFontFaceSource.cpp:
        * dom/ChildIterator.h: Removed.
        * dom/DescendantIterator.h: Removed.
        * dom/Document.cpp:
        * dom/ElementChildIterator.h: Copied from Source/WebCore/dom/ChildIterator.h.
        (WebCore::::ElementChildIterator):
        (WebCore::::operator):
        (WebCore::::ElementChildConstIterator):
        (WebCore::::ElementChildIteratorAdapter):
        (WebCore::::begin):
        (WebCore::::end):
        (WebCore::::ElementChildConstIteratorAdapter):
        (WebCore::elementChildren):
        (WebCore::childrenOfType):
        * dom/ElementDescendantIterator.h: Copied from Source/WebCore/dom/DescendantIterator.h.
        (WebCore::::ElementDescendantIterator):
        (WebCore::::operator):
        (WebCore::::ElementDescendantConstIterator):
        (WebCore::::ElementDescendantIteratorAdapter):
        (WebCore::::begin):
        (WebCore::::end):
        (WebCore::::ElementDescendantConstIteratorAdapter):
        (WebCore::elementDescendants):
        (WebCore::descendantsOfType):
        * dom/ElementIterator.h:
        * dom/Node.cpp:
        * dom/TreeScope.cpp:
        * editing/ApplyStyleCommand.cpp:
        * editing/markup.cpp:
        * html/HTMLAppletElement.cpp:
        * html/HTMLFieldSetElement.cpp:
        * html/HTMLLabelElement.cpp:
        * html/HTMLMapElement.cpp:
        * html/HTMLMediaElement.cpp:
        * html/HTMLObjectElement.cpp:
        * loader/PlaceholderDocument.cpp:
        * rendering/FilterEffectRenderer.cpp:
        * style/StyleResolveTree.cpp:
        * svg/SVGElement.cpp:
        * svg/SVGSVGElement.cpp:
        * svg/animation/SMILTimeContainer.cpp:
        * svg/graphics/SVGImage.cpp:

2013-08-31  Andreas Kling  <akling@apple.com>

        Don't do document style recalc unless there's a RenderView.
        <https://webkit.org/b/120558>

        Reviewed by Antti Koivisto.

        There's no sense in computing style for a Document that has no RenderView.
        Checking this before continuing also lets us know that there's a Frame & FrameView
        present, simplifying some things later on.

        * dom/Document.cpp:
        (WebCore::Document::recalcStyle):
        * style/StyleResolveForDocument.cpp:
        (WebCore::Style::resolveForDocument):

2013-08-31  Antti Koivisto  <antti@apple.com>

        Add common base for element iterators
        https://bugs.webkit.org/show_bug.cgi?id=120557

        Reviewed by Andreas Kling.

        Add ElementIterator and use it as the base for child and descendant iterators. The only difference is the definition of operator++.
        
        Also renamed DescendantIteratorAssertions to ElementIteratorAssertions.

        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.xcodeproj/project.pbxproj:
        * dom/ChildIterator.h:
        (WebCore::::ChildIterator):
        (WebCore::::operator):
        (WebCore::::ChildConstIterator):
        (WebCore::::begin):
        (WebCore::::end):
        * dom/DescendantIterator.h:
        (WebCore::::DescendantIterator):
        (WebCore::::operator):
        (WebCore::::DescendantConstIterator):
        * dom/DescendantIteratorAssertions.h: Removed.
        * dom/ElementIterator.h: Added.
        (WebCore::::ElementIterator):
        (WebCore::::traverseNext):
        (WebCore::::traversePrevious):
        (WebCore::::traverseNextSibling):
        (WebCore::::traversePreviousSibling):
        (WebCore::::operator):
        (WebCore::=):
        (WebCore::::ElementConstIterator):
        * dom/ElementIteratorAssertions.h: Copied from Source/WebCore/dom/DescendantIteratorAssertions.h.
        (WebCore::ElementIteratorAssertions::ElementIteratorAssertions):
        (WebCore::ElementIteratorAssertions::domTreeHasMutated):
        (WebCore::ElementIteratorAssertions::dropEventDispatchAssertion):

2013-08-30  Brent Fulgham  <bfulgham@apple.com>

        [Windows] Build fix after r154921.

        AVFoundationCF uses an internal wrapper object around the C-API. The call point
        in the original patch was inside the wrapper, which did not (yet) provide
        a method implementation.

        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.cpp:
        (WebCore::MediaPlayerPrivateAVFoundationCF::updateVideoLayerGravity):
        (WebCore::AVFWrapper::updateVideoLayerGravity):

2013-08-30  Simon Fraser  <simon.fraser@apple.com>

        Video with object-fit: cover can spill outside the box
        https://bugs.webkit.org/show_bug.cgi?id=52103

        Reviewed by Dean Jackson.
        
        object-fit on renderers which use accelerated compositing needs special
        treatment.
        
        For directly composited images, and video, GraphicsLayer needs to know
        both the size of the content layer, and also a rectangle at which this
        should be clipped (because, for the first time, that content layer can be
        larger than the renderer's content box).
        
        AVFoundation would always aspect-ratio fit video by default, so plumb
        through MediaPlayer a way to override that when object-fit requires it.
        
        Added a LAYER_TREE_INCLUDES_CONTENT_LAYERS enum to the layerTreeAsText()
        flags so we can dump content layers for testing.

        Tests: compositing/images/direct-image-object-fit.html
               compositing/reflections/direct-image-object-fit-reflected.html
               compositing/video/video-object-fit.html

        * page/Frame.h: New LayerTreeFlagsIncludeContentLayers flag.
        * platform/graphics/GraphicsLayer.h: New flag.
        * platform/graphics/MediaPlayer.cpp:
        (WebCore::MediaPlayer::shouldMaintainAspectRatio):
        (WebCore::MediaPlayer::setShouldMaintainAspectRatio):
        * platform/graphics/MediaPlayer.h:
        * platform/graphics/MediaPlayerPrivate.h:
        (WebCore::MediaPlayerPrivateInterface::shouldMaintainAspectRatio):
        (WebCore::MediaPlayerPrivateInterface::setShouldMaintainAspectRatio):
        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
        (WebCore::MediaPlayerPrivateAVFoundation::MediaPlayerPrivateAVFoundation):
        (WebCore::MediaPlayerPrivateAVFoundation::setShouldMaintainAspectRatio):
        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.h:
        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.cpp:
        (WebCore::MediaPlayerPrivateAVFoundationCF::updateVideoLayerGravity):
        (WebCore::AVFWrapper::platformLayer):
        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.h:
        * platform/graphics/avfoundation/objc/MediaPlayerPrivateAVFoundationObjC.h:
        * platform/graphics/avfoundation/objc/MediaPlayerPrivateAVFoundationObjC.mm:
        (WebCore::MediaPlayerPrivateAVFoundationObjC::createVideoLayer):
        (WebCore::MediaPlayerPrivateAVFoundationObjC::updateVideoLayerGravity):
        * platform/graphics/ca/GraphicsLayerCA.cpp: We need a new m_contentsClippingLayer to
        clip the contents layer, which only gets created when necessary. It has to be cloned
        for reflections.
        (WebCore::GraphicsLayerCA::willBeDestroyed):
        (WebCore::GraphicsLayerCA::setContentsRect):
        (WebCore::GraphicsLayerCA::setContentsClippingRect):
        (WebCore::GraphicsLayerCA::commitLayerChangesBeforeSublayers):
        (WebCore::GraphicsLayerCA::updateSublayerList):
        (WebCore::GraphicsLayerCA::updateContentsImage):
        (WebCore::GraphicsLayerCA::updateContentsMediaLayer):
        (WebCore::GraphicsLayerCA::updateContentsCanvasLayer):
        (WebCore::GraphicsLayerCA::updateContentsColorLayer):
        (WebCore::GraphicsLayerCA::updateContentsRects):
        (WebCore::GraphicsLayerCA::dumpAdditionalProperties):
        (WebCore::GraphicsLayerCA::ensureCloneLayers):
        (WebCore::GraphicsLayerCA::removeCloneLayers):
        (WebCore::GraphicsLayerCA::fetchCloneLayers):
        * platform/graphics/ca/GraphicsLayerCA.h:
        * rendering/RenderLayerBacking.cpp: Need to push both the contentsRect and
        the contentsClippingRect down to the GraphicsLayers. Most of the time they
        are the same, unless object-fit makes them different.
        (WebCore::RenderLayerBacking::resetContentsRect):
        (WebCore::RenderLayerBacking::positionOverflowControlsLayers):
        (WebCore::RenderLayerBacking::updateDirectlyCompositedBackgroundColor):
        (WebCore::RenderLayerBacking::updateDirectlyCompositedBackgroundImage):
        (WebCore::RenderLayerBacking::updateImageContents):
        (WebCore::RenderLayerBacking::contentsBox):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::layerTreeAsText):
        * rendering/RenderVideo.cpp:
        (WebCore::RenderVideo::updatePlayer):
        * testing/Internals.cpp:
        (WebCore::Internals::layerTreeAsText):
        * testing/Internals.h:
        * testing/Internals.idl:

2013-08-30  Brent Fulgham  <bfulgham@apple.com>

        [Windows] Update to incorporate additional suggestions
        https://bugs.webkit.org/show_bug.cgi?id=120448

        Reviewed by Darin Adler

        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.cpp: Add
        notes as to why AVFoundationCF needs this extra method call.
        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.h: Use OVERRIDE
        * rendering/RenderVideo.cpp: Replace ternary operator with logical &&.

2013-08-30  Brent Fulgham  <bfulgham@apple.com>

        [Windows] Vide element in page always uses non-hw accelerated mode.
        https://bugs.webkit.org/show_bug.cgi?id=120448

        Reviewed by Darin Adler

        This patch is unfortunately larger than my original idea, but seems to make the
        layout system happier. Instead of switching into composited mode when building
        the media player, we now build the original layout tree with compositing active
        if the underlying media element requires it. The AVFoundationCF player needs to
        have the compositor available at construction time so it can attach to the
        rendering device. Otherwise it falls back to CPU-only mode.

        * platform/graphics/MediaPlayer.cpp:
        (WebCore::MediaPlayer::requiresImmediateCompositing): Added
        * platform/graphics/MediaPlayer.h:
        * platform/graphics/MediaPlayerPrivate.h:
        (WebCore::MediaPlayerPrivateInterface::requiresImmediateCompositing): Added
        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.cpp:
        (WebCore::MediaPlayerPrivateAVFoundationCF::createAVPlayer): Added
        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.h:
        (WebCore::MediaPlayerPrivateAVFoundationCF::requiresImmediateCompositing):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::requiresCompositingForVideo): Uses new
        'requiresImmediateCompositing' to short-circuit check for whether a
        compositor is required.
        * rendering/RenderVideo.cpp:
        (WebCore::RenderVideo::requiresImmediateCompositing):
        * rendering/RenderVideo.h:

2013-08-30  Joseph Pecoraro  <pecoraro@apple.com>

        Web Inspector: Breakpoints should have Automatically Continue Option
        https://bugs.webkit.org/show_bug.cgi?id=120187

        Reviewed by Timothy Hatcher.

        Tests: inspector-protocol/debugger/removeBreakpoint.html
               inspector-protocol/debugger/setBreakpoint-autoContinue.html
               inspector-protocol/debugger/setBreakpoint-column.html
               inspector-protocol/debugger/setBreakpoint-condition.html
               inspector-protocol/debugger/setBreakpoint.html

        * inspector/Inspector.json:
        Convert the "condition" argument of setBreakpoint and setBreakpointByUrl
        to a BreakpointOptions object with optional properties. One of which
        is "condition" and a new option "autoContinue".

        * bindings/js/ScriptDebugServer.h:
        * bindings/js/ScriptDebugServer.cpp:
        (WebCore::ScriptDebugServer::hasBreakpoint):
        (WebCore::ScriptDebugServer::pauseIfNeeded):
        Automatically continue if the breakpoint was hit and has autoContinue.

        * inspector/InspectorDebuggerAgent.h:
        * inspector/InspectorDebuggerAgent.cpp:
        (WebCore::buildObjectForBreakpointCookie):
        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):
        (WebCore::InspectorDebuggerAgent::setBreakpoint):
        (WebCore::InspectorDebuggerAgent::continueToLocation):
        (WebCore::InspectorDebuggerAgent::didParseSource):
        * inspector/ScriptBreakpoint.h:
        (WebCore::ScriptBreakpoint::ScriptBreakpoint):
        Handle the new incoming BreakpointOptions type, and set the
        autoContinue state on ScriptBreakpoints.

        * inspector/front-end/DebuggerModel.js:
        (WebInspector.DebuggerModel.prototype.setBreakpointByURL):
        (WebInspector.DebuggerModel.prototype.setBreakpointBySourceId):
        Update old front-end to be compatible with the new API.

2013-08-30  Dean Jackson  <dino@apple.com>

        Animations should use double for key values, not floats
        https://bugs.webkit.org/show_bug.cgi?id=120547

        Reviewed by Simon Fraser.

        Merge https://chromium.googlesource.com/chromium/blink/+/71de046541c77120874b9bff82958ee9e0e20c7c

        Some files have been renamed in the Blink port, and they have made some
        improvements, but I took what applied to us.

        All our existing tests passed.

        * css/StyleResolver.cpp:
        (WebCore::StyleResolver::keyframeStylesForAnimation):
        * css/WebKitCSSKeyframeRule.cpp:
        (WebCore::StyleKeyframe::parseKeyString):
        * css/WebKitCSSKeyframeRule.h:
        (WebCore::StyleKeyframe::getKeys):
        * platform/graphics/GraphicsLayer.h:
        (WebCore::AnimationValue::keyTime):
        (WebCore::AnimationValue::AnimationValue):
        (WebCore::FloatAnimationValue::create):
        (WebCore::FloatAnimationValue::FloatAnimationValue):
        (WebCore::TransformAnimationValue::create):
        (WebCore::TransformAnimationValue::TransformAnimationValue):
        (WebCore::FilterAnimationValue::create):
        (WebCore::FilterAnimationValue::FilterAnimationValue):
        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::startAnimation):
        * rendering/style/KeyframeList.h:
        (WebCore::KeyframeValue::KeyframeValue):
        (WebCore::KeyframeValue::key):
        (WebCore::KeyframeValue::setKey):

2013-08-30  Brendan Long  <b.long@cablelabs.com>

        [GStreamer] support in-band text tracks
        https://bugs.webkit.org/show_bug.cgi?id=103771

        Reviewed by Eric Carlson.

        Tests: New tests added because existing tests were too specific.
           media/track/in-band/track-in-band-kate-ogg-cues-added-once.html
           media/track/in-band/track-in-band-kate-ogg-kind.html
           media/track/in-band/track-in-band-kate-ogg-language.html
           media/track/in-band/track-in-band-kate-ogg-mode.html
           media/track/in-band/track-in-band-kate-ogg-style.html
           media/track/in-band/track-in-band-kate-ogg-track-order.html
           media/track/in-band/track-in-band-srt-mkv-cues-added-once.html
           media/track/in-band/track-in-band-srt-mkv-kind.html
           media/track/in-band/track-in-band-srt-mkv-language.html
           media/track/in-band/track-in-band-srt-mkv-mode.html
           media/track/in-band/track-in-band-srt-mkv-style.html
           media/track/in-band/track-in-band-srt-mkv-track-order.html

        * CMakeLists.txt: Add InbandTextTrackPrivateGStreamer, InbandGenericTextTrack, InbandWebVTTTextTrack, and TextCombinerGStreamer files.
        * GNUmakefile.list.am: Same.
        * PlatformEfl.cmake: Same.
        * Target.pri: Same.
        * WebCore.vcxproj/WebCore.vcxproj: Same.
        * WebCore.vcxproj/WebCore.vcxproj.filters: Same.
        * WebCore.xcodeproj/project.pbxproj: Same.
        * html/track/InbandGenericTextTrack.cpp: Split out code for handling generic cues.
        (WebCore::GenericTextTrackCueMap::GenericTextTrackCueMap): Move from InbandTextTrack.
        (WebCore::GenericTextTrackCueMap::~GenericTextTrackCueMap): Same.
        (WebCore::GenericTextTrackCueMap::add): Same.
        (WebCore::GenericTextTrackCueMap::find): Same.
        (WebCore::GenericTextTrackCueMap::remove): Same.
        (WebCore::InbandGenericTextTrack::create): Same.
        (WebCore::InbandGenericTextTrack::updateCueFromCueData): Same.
        (WebCore::InbandGenericTextTrack::addGenericCue): Same.
        (WebCore::InbandGenericTextTrack::updateGenericCue): Same.
        (WebCore::InbandGenericTextTrack::removeGenericCue): Same.
        (WebCore::InbandGenericTextTrack::removeCue): Same.
        (WebCore::InbandGenericTextTrack::InbandGenericTextTrack): Empty.
        (WebCore::InbandGenericTextTrack::~InbandGenericTextTrack): Empty.
        * html/track/InbandGenericTextTrack.h: Copied from Source/WebCore/html/track/InbandTextTrack.h.
        The only addition is the ASSERT_NOT_REACHED() for WebVTT cues.
        * html/track/InbandTextTrack.cpp: Add label and language changed callbacks.
        (WebCore::InbandTextTrack::create): Return a generic or WebVTT text track based on the private CueFormat.
        (WebCore::InbandTextTrack::labelChanged): Added.
        (WebCore::InbandTextTrack::languageChanged): Added.
        * html/track/InbandTextTrack.h: Add label and language changed callbacks.
        * html/track/InbandWebVTTTextTrack.cpp: Added, based on InbandTextTrack.
        (WebCore::InbandWebVTTTextTrack::create): Same.
        (WebCore::InbandWebVTTTextTrack::InbandWebVTTTextTrack): Empty.
        (WebCore::InbandWebVTTTextTrack::~InbandWebVTTTextTrack): Empty.
        (WebCore::InbandWebVTTTextTrack::parseWebVTTCueData): Sends data to a WebVTTParser.
        (WebCore::InbandWebVTTTextTrack::newCuesParsed): Adds cues when WebVTTParser parses them.
        (WebCore::InbandWebVTTTextTrack::fileFailedToParse): Prints a warning when WebVTTParser has a problem.
        * html/track/InbandWebVTTTextTrack.h: Added.
        * platform/graphics/InbandTextTrackPrivate.h:
        (WebCore::InbandTextTrackPrivate::cueFormat): For determining if the track will have generic or WebVTT cues.
        (WebCore::InbandTextTrackPrivate::InbandTextTrackPrivate): Pass CueFormat in the constructor.
        * platform/graphics/InbandTextTrackPrivateClient.h: Same.
        * platform/graphics/avfoundation/InbandTextTrackPrivateAVF.cpp:
        (WebCore::InbandTextTrackPrivateAVF::InbandTextTrackPrivateAVF): Pass CueFormat (Generic) to InbandTextTrackPrivate.
        * platform/graphics/gstreamer/GRefPtrGStreamer.cpp: Add GRefPtr specializations for GstSample and GstEvent.
        * platform/graphics/gstreamer/GRefPtrGStreamer.h: Same.
        * platform/graphics/gstreamer/GStreamerUtilities.h: Add WARN_MEDIA_MESSAGE.
        * platform/graphics/gstreamer/GStreamerVersioning.h: Add a function to check GStreamer version at runtime.
        * platform/graphics/gstreamer/InbandTextTrackPrivateGStreamer.cpp: Added.
        (WebCore::textTrackPrivateEventCallback): Watches for tag and stream start events.
        (WebCore::textTrackPrivateSampleTimeoutCallback): See notifyTrackOfSample();
        (WebCore::textTrackPrivateStreamTimeoutCallback): See notifyTrackOfStreamChanged();
        (WebCore::textTrackPrivateTagsChangeTimeoutCallback): See notifyTrackOfTagsChanged();
        (WebCore::InbandTextTrackPrivateGStreamer::InbandTextTrackPrivateGStreamer): Initializes tags and stream and sets up event callback.
        (WebCore::InbandTextTrackPrivateGStreamer::~InbandTextTrackPrivateGStreamer): Calls disconnect:
        (WebCore::InbandTextTrackPrivateGStreamer::disconnect): Removes signal handlers and frees some memory.
        (WebCore::InbandTextTrackPrivateGStreamer::handleSample): Adds samples to a list and sets up callback.
        (WebCore::InbandTextTrackPrivateGStreamer::streamChanged): Sets up callback.
        (WebCore::InbandTextTrackPrivateGStreamer::tagsChanged): Same.
        (WebCore::InbandTextTrackPrivateGStreamer::notifyTrackOfSample): Parses all queued samples with WebVTTParser.
        (WebCore::InbandTextTrackPrivateGStreamer::notifyTrackOfStreamChanged): Keeps track of current stream.
        (WebCore::InbandTextTrackPrivateGStreamer::notifyTrackOfTagsChanged): Sets label and language from tags.
        * platform/graphics/gstreamer/InbandTextTrackPrivateGStreamer.h: Added.
        (WebCore::InbandTextTrackPrivateGStreamer::create): Basic RefPtr create function.
        (WebCore::InbandTextTrackPrivateGStreamer::pad): Returns the pad this track is associated with (used
        to determine if a playbin text stream has already been associated with a text track).
        (WebCore::InbandTextTrackPrivateGStreamer::setIndex): Sets the track index (used for sorting).
        (WebCore::InbandTextTrackPrivateGStreamer::streamId): Returns the stream ID (used to handle new samples).
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        (WebCore::mediaPlayerPrivateTextChangedCallback): Called for playbin "text-changed" event. See textChanged().
        (WebCore::mediaPlayerPrivateTextChangeTimeoutCallback): See notifyPlayerOfText().
        (WebCore::mediaPlayerPrivateNewTextSampleCallback): See newTextSample().
        (WebCore::MediaPlayerPrivateGStreamer::MediaPlayerPrivateGStreamer): Initialize m_textTimerHandler.
        (WebCore::MediaPlayerPrivateGStreamer::~MediaPlayerPrivateGStreamer): Disconnect text tracks (they don't necessarily
        get freed here, since a script could hold a reference).
        (WebCore::MediaPlayerPrivateGStreamer::textChanged): Setup callback for notifyPlayerOfText.
        (WebCore::MediaPlayerPrivateGStreamer::notifyPlayerOfText): Create text tracks.
        (WebCore::MediaPlayerPrivateGStreamer::newTextSample): Handle new samples by giving them to a text track
        with a matching stream. This method is syncryonous because we need to get the stream start sticky event
        immediately.
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.h:
        * platform/graphics/gstreamer/TextCombinerGStreamer.cpp: Added. This element forwards buffers from all
        of its input pads, but also converts plain text to WebVTT as needed.
        (webkit_text_combiner_init): Setup internal funnel.
        (webkitTextCombinerPadEvent): If the caps are plain text make sure we have a webvttenv, otherwise connect
        directly to the funnel.
        (webkitTextCombinerRequestNewPad): Setup ghostpad and event callback.
        (webkitTextCombinerReleasePad): Release pad and optional associated webvttenc.
        (webkit_text_combiner_class_init): Setup pad templates and request/release pad functions.
        (webkitTextCombinerNew): Returns a new WebKitTextCombiner.
        * platform/graphics/gstreamer/TextCombinerGStreamer.h: Added.
        * platform/graphics/gstreamer/TextSinkGStreamer.cpp: Added.
        (webkit_text_sink_init): Set sync=false.
        (webkitTextSinkGetProperty): Ignore sync property.
        (webkitTextSinkSetProperty): Same.
        (webkitTextSinkQuery): Ignore position and duration queries, forward everything else to appsink.
        (webkit_text_sink_class_init): Setup property and query functions.
        (webkitTextSinkNew): Return a new WebKitTextSink.
        * platform/graphics/gstreamer/TextSinkGStreamer.h: Added.

2013-08-30  Dirk Schulze  <krit@webkit.org>

        Animate CSS Image filter() function
        https://bugs.webkit.org/show_bug.cgi?id=119938

        Reviewed by Simon Fraser.

        With this patch, the new introduced CSS Image function filter() can be
        animated. According to the spec, just filter functions can be
        interpolated.

        The patch also prepares StyleImage blending for interpolation of other
        generated images like gradients or cross-fade().

        http://dev.w3.org/fxtf/filters/#interpolating-filter-image

        Test: fast/filter-image/filter-image-animation.html

        * css/CSSComputedStyleDeclaration.cpp: Reuse the code that creates a
            CSSValueList from ComputeStyle logic.
        (WebCore::valueForPixel):
            For StyleRules we want to have not-adjusted length values.
        (WebCore::ComputedStyleExtractor::valueForShadow):
            Add argument to switch between adjusted and not-adjusted length.
        (WebCore::ComputedStyleExtractor::valueForFilter):
            Ditto.
        (WebCore::ComputedStyleExtractor::propertyValue):
        * css/CSSComputedStyleDeclaration.h:
        * css/CSSFilterImageValue.h: Add helper functions
            for animating filters. We need to pass the FilterOperations for
            the image generation and the CSSValueList for StyleRule.
        (WebCore::CSSFilterImageValue::filterOperations):
        (WebCore::CSSFilterImageValue::setFilterOperations):
        (WebCore::CSSFilterImageValue::cachedImage):
        * page/animation/CSSPropertyAnimation.cpp:
            Add animation code to support animations between two filter()
            function values.
        (WebCore::blendFilterOperations):
        (WebCore::blendFunc):
        (WebCore::filterBlend):
        * rendering/style/StyleGeneratedImage.h: Add helper functions.
        (WebCore::CSSFilterImageValue::imageValue):


2013-08-30  Leo Yang  <leoyang@blackberry.com>

        Make sure remove CachedResourceClient when destructing IconLoader
        https://bugs.webkit.org/show_bug.cgi?id=120541

        Reviewed by Darin Adler.

        It's a good practice to call CachedResource::removeClient(client)
        when the client is being destructed. We need to do this for InconLoader
        to prevent m_resource from keeping dangling client in case m_resource
        is referenced by someone else in the future.

        Found by code inspection. Just a defensive enhancement no new tests.

        * loader/icon/IconLoader.cpp:
        (WebCore::IconLoader::~IconLoader):

2013-08-30  Hans Muller  <hmuller@adobe.com>

        [CSS Shapes] Redefine the ShapeIntervals class as a template
        https://bugs.webkit.org/show_bug.cgi?id=120381

        Reviewed by Alexandru Chiculita.

        No new tests, this was just an internal refactoring.

        The existing ShapeIntervals class has been converted into a template whose
        type specifies the type of the interval's x1 and x2 horizontal endpoints
        (formerly float). There were several other minor changes, all in the realm
        of refactoring:

        - The original type was a struct with public x1 and x2 fields. It's now a class
        with x1 and x2 accessors. ASSERTS are now used to maintain the x2 >= x1 invariant.
        In the original code the invariant was not checked.

        - The logical comparison operators have been overloaded for ShapeInterval.
        This obviates the IntervalX1Comparator class which has been removed.

        - The names of the global ShapeInterval Vector set operation methods have been
        changed to reflect the fact that they're now members of the template class,
        rather than globals.

        PolygonShape.cpp depended on the ShapeInterval class. In the one or two places
        where an interval's x1 or x1 fields had been set explicitly, ShapeInterval::set()
        is now used to set both fields. This also enables the invariant check mentioned
        earlier. The other changes to this class are syntatic, to account for the ShapeInterval
        class's changes.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.xcodeproj/project.pbxproj:
        * rendering/shapes/PolygonShape.cpp:
        (WebCore::appendIntervalX):
        (WebCore::computeXIntersections):
        (WebCore::computeOverlappingEdgeXProjections):
        (WebCore::PolygonShape::getExcludedIntervals):
        (WebCore::PolygonShape::getIncludedIntervals):
        * rendering/shapes/PolygonShape.h:
        * rendering/shapes/ShapeInterval.cpp: Removed.
        * rendering/shapes/ShapeInterval.h: The entire implementation is now here. 
        (WebCore::ShapeInterval::ShapeInterval):
        (WebCore::ShapeInterval::x1):
        (WebCore::ShapeInterval::x2):
        (WebCore::ShapeInterval::set):
        (WebCore::ShapeInterval::overlaps):
        (WebCore::ShapeInterval::intersect):
        (WebCore::ShapeInterval::sortVector):
        (WebCore::ShapeInterval::uniteVectors):
        (WebCore::ShapeInterval::intersectVectors):
        (WebCore::ShapeInterval::subtractVectors):
        (WebCore::operator==):
        (WebCore::operator!=):
        (WebCore::operator< ):
        (WebCore::operator> ):
        (WebCore::operator<=):
        (WebCore::operator>=):

2013-08-30  Antti Koivisto  <antti@apple.com>

        Use Element& in StyleResolveTree
        https://bugs.webkit.org/show_bug.cgi?id=120540

        Reviewed by Andreas Kling.

        * dom/ContainerNode.cpp:
        (WebCore::attachChild):
        (WebCore::detachChild):
        * dom/Document.cpp:
        (WebCore::Document::recalcStyle):
        (WebCore::Document::createRenderTree):
        (WebCore::Document::detach):
        * dom/Element.cpp:
        (WebCore::Element::lazyReattach):
        (WebCore::Element::updateExistingPseudoElement):
        (WebCore::Element::createPseudoElementIfNeeded):
        (WebCore::disconnectPseudoElement):
        * dom/ShadowRoot.cpp:
        (WebCore::ShadowRoot::setResetStyleInheritance):
        * html/HTMLDetailsElement.cpp:
        (WebCore::HTMLDetailsElement::parseAttribute):
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::updateType):
        (WebCore::HTMLInputElement::parseAttribute):
        * html/HTMLObjectElement.cpp:
        (WebCore::HTMLObjectElement::renderFallbackContent):
        * html/HTMLPlugInImageElement.cpp:
        (WebCore::HTMLPlugInImageElement::willRecalcStyle):
        (WebCore::HTMLPlugInImageElement::documentWillSuspendForPageCache):
        (WebCore::HTMLPlugInImageElement::documentDidResumeFromPageCache):
        (WebCore::HTMLPlugInImageElement::restartSnapshottedPlugIn):
        * html/HTMLSelectElement.cpp:
        (WebCore::HTMLSelectElement::parseAttribute):
        (WebCore::HTMLSelectElement::parseMultipleAttribute):
        * html/HTMLViewSourceDocument.cpp:
        (WebCore::HTMLViewSourceDocument::createContainingTable):
        (WebCore::HTMLViewSourceDocument::addSpanWithClassName):
        (WebCore::HTMLViewSourceDocument::addLine):
        (WebCore::HTMLViewSourceDocument::finishLine):
        (WebCore::HTMLViewSourceDocument::addBase):
        (WebCore::HTMLViewSourceDocument::addLink):
        * html/parser/HTMLConstructionSite.cpp:
        (WebCore::executeTask):
        * html/parser/HTMLTreeBuilder.cpp:
        (WebCore::HTMLTreeBuilder::callTheAdoptionAgency):
        * html/shadow/InsertionPoint.cpp:
        (WebCore::InsertionPoint::willAttachRenderers):
        (WebCore::InsertionPoint::willDetachRenderers):
        * loader/PlaceholderDocument.cpp:
        (WebCore::PlaceholderDocument::createRenderTree):
        * style/StyleResolveTree.cpp:
        (WebCore::Style::attachChildren):
        (WebCore::Style::attachRenderTree):
        (WebCore::Style::detachChildren):
        (WebCore::Style::detachRenderTree):
        (WebCore::Style::resolveLocal):
        (WebCore::Style::updateTextStyle):
        (WebCore::Style::resolveShadowTree):
        (WebCore::Style::resolveTree):
        
            Documents only ever have one child element. Remove the loop.

        (WebCore::Style::detachRenderTreeInReattachMode):
        (WebCore::Style::reattachRenderTree):
        * style/StyleResolveTree.h:
        * svg/SVGTests.cpp:
        (WebCore::SVGTests::handleAttributeChange):
        * xml/XMLErrors.cpp:
        (WebCore::XMLErrors::insertErrorMessageBlock):
        * xml/parser/XMLDocumentParserLibxml2.cpp:
        (WebCore::XMLDocumentParser::startElementNs):

2013-08-30  Andreas Kling  <akling@apple.com>

        Document style resolve should take Document&.
        <https://webkit.org/b/120534>

        Reviewed by Darin Adler.

        Tweak Style::resolveTree(Document*) and Style::resolveForDocument(Document*) to take Document& instead.

        * dom/Document.cpp:
        (WebCore::Document::recalcStyle):
        * html/HTMLLinkElement.cpp:
        (WebCore::HTMLLinkElement::process):
        * style/StyleResolveForDocument.cpp:
        (WebCore::Style::resolveForDocument):
        * style/StyleResolveForDocument.h:
        * style/StyleResolveTree.cpp:
        (WebCore::Style::resolveTree):
        * style/StyleResolveTree.h:

2013-08-30  Darin Adler  <darin@apple.com>

        [Mac] No need for Pasteboard::getDataSelection
        https://bugs.webkit.org/show_bug.cgi?id=120536

        Reviewed by Anders Carlsson.

        * editing/Editor.h: Added some Mac-only private member functions.

        * editing/mac/EditorMac.mm:
        (WebCore::Editor::selectionInWebArchiveFormat): Added.
        (WebCore::Editor::adjustedSelectionRange): Added.
        (WebCore::attributedStringForRange): Added.
        (WebCore::dataInRTFDFormat): Added.
        (WebCore::dataInRTFFormat): Added.
        (WebCore::Editor::dataSelectionForPasteboard): Moved the implementation
        of Pasteboard::getDataSelection here, refactoring to share code with the
        writeSelectionToPasteboard function.
        (WebCore::Editor::writeSelectionToPasteboard): Refactored to share code
        with the new function above.

        * platform/Pasteboard.h: Removed getDataSelection. One less layering violation.
        * platform/mac/PasteboardMac.mm: Ditto.

2013-08-30  Rob Buis  <rwlbuis@webkit.org>

        SVG error parsing empty path
        https://bugs.webkit.org/show_bug.cgi?id=78980

        Reviewed by Darin Adler.

        According to the spec (http://www.w3.org/TR/SVG/paths.html#PathData), path 'd' attribute can be empty.
        No error should be reported in this case.

        * svg/SVGPathParser.cpp:
        (WebCore::SVGPathParser::parsePathDataFromSource):
        * svg/SVGPathUtilities.cpp:
        (WebCore::buildPathFromString):
        (WebCore::buildSVGPathByteStreamFromSVGPathSegList):
        (WebCore::buildPathFromByteStream):
        (WebCore::buildSVGPathSegListFromByteStream):
        (WebCore::buildStringFromByteStream):
        (WebCore::buildStringFromSVGPathSegList):
        (WebCore::buildSVGPathByteStreamFromString):
        (WebCore::buildAnimatedSVGPathByteStream):
        (WebCore::addToSVGPathByteStream):

2013-08-30  Andreas Kling  <akling@apple.com>

        Try to fix CSS_VARIABLES and CSS_DEVICE_ADAPTATION builds.

        * css/StyleResolver.cpp:
        (WebCore::StyleResolver::StyleResolver):
        (WebCore::StyleResolver::resolveVariables):

2013-08-30  Commit Queue  <commit-queue@webkit.org>

        Unreviewed, rolling out r154891.
        http://trac.webkit.org/changeset/154891
        https://bugs.webkit.org/show_bug.cgi?id=120539

        broke the mac build (Requested by Ossy on #webkit).

        * platform/network/SynchronousLoaderClient.h:

2013-08-30  Csaba Osztrogonác  <ossy@webkit.org>

        Add USE(CFNETWORK) guard to SynchronousLoaderClient::didReceiveAuthenticationChallengedidReceiveAuthenticationChallenge()
        https://bugs.webkit.org/show_bug.cgi?id=120532

        Reviewed by Darin Adler.

        * platform/network/SynchronousLoaderClient.h:

2013-08-30  Brent Fulgham  <bfulgham@apple.com>

        [Windows] Video inside page always uses non-hardware accelerated playback
        https://bugs.webkit.org/show_bug.cgi?id=120448

        Reviewed by Eric Carlson.

        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.cpp:
        (WebCore::MediaPlayerPrivateAVFoundationCF::createAVPlayer): Check for
        D3D device. If it doesn't exist, switch to compositing mode and try again.

2013-08-30  Leo Yang  <leoyang@blackberry.com>

        Possible dangling CachedResourceClient of StyleRuleImport and XSLImportRule
        https://bugs.webkit.org/show_bug.cgi?id=120479

        Reviewed by Darin Adler.

        In StyleRuleImport::requestStyleSheet() and XSLImportRule::loadSheet() we
        didn't call removeClient() for m_cachedSheet before assigning m_cachedSheet
        a new value. This could leave the client as a client of the old cached
        sheet and dangling after the client is deleted. Fix them by calling removeClient()
        before assigning m_cacheSheet a new value.

        Found by code inspection. Seems no way to test it automatically.

        * css/StyleRuleImport.cpp:
        (WebCore::StyleRuleImport::requestStyleSheet):
        * xml/XSLImportRule.cpp:
        (WebCore::XSLImportRule::loadSheet):

2013-08-30  Gabor Abraham  <abrhm@inf.u-szeged.hu>

        Fix unused parameter warning in graphics/cairo/GraphicsContextCairo.cpp file.
        https://bugs.webkit.org/show_bug.cgi?id=120524

        Reviewed by Darin Adler.

        * platform/graphics/cairo/GraphicsContextCairo.cpp:
        (WebCore::GraphicsContext::fillRectWithRoundedHole):

2013-08-30  Andreas Kling  <akling@apple.com>

        StyleResolver & friends should use Document&.
        <https://webkit.org/b/120527>

        Reviewed by Antti Koivisto.

        Document&-ify StyleResolver, ElementRuleCollector and SelectorChecker.

2013-08-30  Brent Fulgham  <bfulgham@apple.com>

        [Windows] Unreviewed build correction after r154835. Only seen when doing a
        full (clean) rebuild.

        * DerivedSources.cpp: Remove reference to deleted JSHTMLDialogElement.cpp

2013-08-30  Tamas Czene  <tczene@inf.u-szeged.hu>

        Resolve unused parameter warning in FindController.cpp
        https://bugs.webkit.org/show_bug.cgi?id=120407

        Reviewed by Darin Adler.

        * accessibility/atk/WebKitAccessibleInterfaceText.cpp:
        (wordAtPositionForAtkBoundary):

2013-08-30  Arpita Bahuguna  <a.bah@samsung.com>

        setAttributeNode() does not set the new value to an existing attribute if specified attribute is in a different case.
        https://bugs.webkit.org/show_bug.cgi?id=120293

        Reviewed by Darin Adler.

        setAttributeNode() performs a case-insensitive search for an existing
        attribute. If an existing attribute is found, it retrieves the index of
        such an attribute. For setting the attribute's new value, we call upon
        setAttributeInternal() to which both the index as well as the name of
        the attribute is passed.
        The name passed to this method is the same as the one passed to the
        setAttributeNode() API from the webpage and thus can be in any case.

        However, setAttributeInternal() uses this name to get the corresponding
        existing attribute node. Since this retrieval is not case-insensitive,
        the existing node is not returned and thus the new value is not set on
        the existing node.
        We should instead use the passed index and use that to retrieve the
        existing node.

        Note that obtaining the attribute's value using getAttributeNode() would
        still return the correct value, i.e. the new one.

        Also, this change shall make our behavior similar to that of FF and IE.

        Test: fast/dom/Element/setAttributeNode-for-existing-attribute.html

        * dom/Element.cpp:
        (WebCore::Element::setAttributeInternal):
        If the passed index is not equal to attributeNotFound, we use that index
        to retrieve the existing attribute.

2013-08-30  Mikhail Pozdnyakov  <mikhail.pozdnyakov@intel.com>

        SimpleClassVectorTraits shall be used for RuleData
        https://bugs.webkit.org/show_bug.cgi?id=120526

        Reviewed by Andreas Kling.

        Whereas RuleData is POD type and whereas there are quite a lot of Vector<RuleData> occurrences in the code,
        it makes sense to use SimpleClassVectorTraits for RuleData and hence to allow using more efficient mem functions
        in vectors.

        * css/RuleSet.h:

2013-08-30  Andreas Kling  <akling@apple.com>

        Node::document() should return a reference.
        <https://webkit.org/b/120496>

        Reviewed by Antti Koivisto.

        Now that orphan DocumentType nodes also have document pointers, it's no longer
        possible to have a null Node::document().

        Cement this by making document() return a reference, and remove the various
        null checks exposed by this.

2013-08-30  Andrei Parvu  <parvu@adobe.com>

        [CSS Masking] -webkit-mask-repeat: space does not work
        Added the space option to background-repeat and -webkit-mask-repeat.
        With the property value 'space', the background or mask image gets repeated as often as it fits within the background positioning
        area. The repeated images are spaced equally to fill the unused area.
        https://bugs.webkit.org/show_bug.cgi?id=119324

        Reviewed by Dirk Schulze.

        Tests: css3/background/background-repeat-space-border.html
               css3/background/background-repeat-space-content.html
               css3/background/background-repeat-space-padding.html
               css3/masking/mask-repeat-space-border.html
               css3/masking/mask-repeat-space-content.html
               css3/masking/mask-repeat-space-padding.html

        * platform/graphics/GeneratorGeneratedImage.cpp:
        (WebCore::GeneratorGeneratedImage::drawPattern): Passed the space values to the image buffer.
        * platform/graphics/Image.cpp:
        (WebCore::Image::drawTiled): Added the space values when computing the location of the tile.
        * platform/graphics/Image.h: Added the space property.
        (WebCore::Image::spaceSize):
        (WebCore::Image::setSpaceSize):
        * platform/graphics/ImageBuffer.h: Added the space property.
        (WebCore::ImageBuffer::spaceSize):
        (WebCore::ImageBuffer::setSpaceSize):
        * platform/graphics/cg/ImageBufferCG.cpp: Passed the space values when copying an image.
        (WebCore::ImageBuffer::copyImage):
        * platform/graphics/cg/ImageCG.cpp: Added the space values when creating a platform pattern.
        (WebCore::Image::drawPattern):
        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::paintFillLayerExtended): Computed the space values on x and y axis.
        (WebCore::getSpace):
        (WebCore::RenderBoxModelObject::calculateBackgroundImageGeometry): Pass the space values to the Image class.
        * rendering/RenderBoxModelObject.h: Added the space property.
        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::spaceSize):
        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setSpaceSize):
        * svg/graphics/SVGImage.cpp: Passed the space property to the created image.
        (WebCore::SVGImage::drawPatternForContainer):
        * svg/graphics/SVGImageForContainer.cpp: Passed the space property to the image property.
        (WebCore::SVGImageForContainer::drawPattern):

2013-08-30  Antti Koivisto  <antti@apple.com>

        Remove AttachContext
        https://bugs.webkit.org/show_bug.cgi?id=120518

        Reviewed by Andreas Kling.

        This type is not useful anymore. Just pass the precomputed style to attachRenderTree and reattach-or-not flag to detachRenderTree.

        * style/StyleResolveTree.cpp:
        (WebCore::Style::createRendererIfNeeded):
        (WebCore::Style::attachChildren):
        (WebCore::Style::attachShadowRoot):
        (WebCore::Style::attachRenderTree):
        (WebCore::Style::detachChildren):
        (WebCore::Style::detachShadowRoot):
        (WebCore::Style::detachRenderTree):
        (WebCore::Style::reattachRenderTree):
        (WebCore::Style::resolveLocal):
        * style/StyleResolveTree.h:

2013-08-30  Commit Queue  <commit-queue@webkit.org>

        Unreviewed, rolling out r154826.
        http://trac.webkit.org/changeset/154826
        https://bugs.webkit.org/show_bug.cgi?id=120517

        Still breaks icloud.com (Requested by mwenge_ on #webkit).

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::computePositionedLogicalWidth):
        (WebCore::RenderBox::computePositionedLogicalHeight):
        * rendering/RenderBox.h:
        (WebCore::RenderBox::intrinsicSize):
        * rendering/RenderButton.h:
        * rendering/RenderFileUploadControl.cpp:
        (WebCore::RenderFileUploadControl::computePreferredLogicalWidths):
        * rendering/RenderListBox.cpp:
        (WebCore::RenderListBox::RenderListBox):
        (WebCore::RenderListBox::computePreferredLogicalWidths):
        (WebCore::RenderListBox::computeLogicalHeight):
        * rendering/RenderListBox.h:
        * rendering/RenderMenuList.h:
        * rendering/RenderSlider.cpp:
        (WebCore::RenderSlider::computePreferredLogicalWidths):
        * rendering/RenderTextControl.cpp:
        (WebCore::RenderTextControl::RenderTextControl):
        (WebCore::RenderTextControl::computeLogicalHeight):
        * rendering/RenderTextControl.h:

2013-08-29  Ryosuke Niwa  <rniwa@webkit.org>

        Unduplicate the code to convert between VisiblePosition and index
        https://bugs.webkit.org/show_bug.cgi?id=120506

        Reviewed by Darin Adler.

        Encapsulate the conversion between VisiblePosition and index into indexForVisiblePosition
        and visiblePositionForIndexUsingCharacterIterator. It's unfortunate that these two functions
        are different from the two other existing functions of similar names but we've at least
        confined problems into a single cpp file now.

        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::visiblePositionForIndex):
        (WebCore::AccessibilityRenderObject::indexForVisiblePosition):
        * editing/Editor.cpp:
        (WebCore::findFirstMarkable):
        * editing/htmlediting.cpp:
        (WebCore::indexForVisiblePosition):
        (WebCore::visiblePositionForIndexUsingCharacterIterator):
        * editing/htmlediting.h:
        * html/HTMLTextFormControlElement.cpp:
        (WebCore::hasVisibleTextArea):
        (WebCore::HTMLTextFormControlElement::setSelectionRange):
        (WebCore::HTMLTextFormControlElement::indexForVisiblePosition):
        (WebCore::HTMLTextFormControlElement::visiblePositionForIndex):
        * html/HTMLTextFormControlElement.h:
        * rendering/RenderTextControl.cpp:
        * rendering/RenderTextControl.h:

2013-08-29  Ryosuke Niwa  <rniwa@webkit.org>

        Avoid Node references from AXObjectCache from leaking
        https://bugs.webkit.org/show_bug.cgi?id=120501

        Reviewed by Darin Adler.

        Merge https://chromium.googlesource.com/chromium/blink/+/454f31497613b6d0fbcfb0df757254b64a177c06
        without any tests since we don't have the same infrastructure to detect leaks in WebKit.

        A real world example of this would be selecting an <option> item inside frame by keyboard. The node will not be deref()-ed until the topDocument() is detached. 

        The issue was that AccessibilityMenuListOption is created in childrenChanged()
        hook called when its RenderObject is being destroyed. This patch modifies AccessibilityMenuListPopup so it won't create AccessibilityMenuListOption if its
        element is already detached.

        * accessibility/AccessibilityMenuListPopup.cpp:
        (WebCore::AccessibilityMenuListPopup::menuListOptionAccessibilityObject):
        * rendering/RenderMenuList.cpp:
        (WebCore::RenderMenuList::didUpdateActiveOption):

2013-08-26  Simon Fraser  <simon.fraser@apple.com>

        Implement object-fit CSS property
        https://bugs.webkit.org/show_bug.cgi?id=52040

        Reviewed by Antti Koivisto, Sam Weinig.
        
        Merge object-fit patch from Blink r156535, which started as a patch
        by me.

        Since then, the spec has gone to CR. This patch is an
        implementation of object-fit as described in
        http://www.w3.org/TR/2012/CR-css3-images-20120417/#object-fit

        Object-fit is used to maintain the aspect ratio of replaced content
        within its content box. All object-fit values but the initial one
        ('fill') will always ensure that the aspect ratio is retained, in
        different ways (fit inside the content box, cover the content box, or
        use intrinsic size). Painting is always clipped against the content
        box, regardless of the 'overflow' property.

        Tests: fast/css/object-fit/object-fit-canvas.html
               fast/css/object-fit/object-fit-embed.html
               fast/css/object-fit/object-fit-grow-landscape.html
               fast/css/object-fit/object-fit-grow-portrait.html
               fast/css/object-fit/object-fit-img-svg.html
               fast/css/object-fit/object-fit-img-svg2.html
               fast/css/object-fit/object-fit-img.html
               fast/css/object-fit/object-fit-input-image.html
               fast/css/object-fit/object-fit-object.html
               fast/css/object-fit/object-fit-shrink.html
               fast/css/object-fit/object-fit-video-poster.html
               fast/css/parsing-object-fit.html
               http/tests/css/object-fit-delayed-img-svg.html
               media/video-object-fit-change.html
               media/video-object-fit.html

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::ComputedStyleExtractor::propertyValue):
        * css/CSSParser.cpp:
        (WebCore::isValidKeywordPropertyAndValue):
        (WebCore::isKeywordPropertyID):
        (WebCore::CSSParser::parseValue):
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        (WebCore::CSSPrimitiveValue::operator EObjectFit):
        * css/CSSProperty.cpp:
        (WebCore::CSSProperty::isInheritedProperty):
        * css/CSSPropertyNames.in:
        * css/CSSValueKeywords.in:
        * css/DeprecatedStyleBuilder.cpp:
        (WebCore::DeprecatedStyleBuilder::DeprecatedStyleBuilder):
        * css/StyleResolver.cpp:
        (WebCore::StyleResolver::applyProperty):
        * css/html.css:
        (video): Set object-fit to 'contain'. This is how VIDEO elements
        work, apparently.
        * loader/cache/CachedImage.cpp:
        (WebCore::CachedImage::imageSizeForRenderer):
        * loader/cache/CachedImage.h:
        * platform/graphics/LayoutSize.h:
        (WebCore::fitLayoutSizeToAspectRatio): New function to grow or shrink
        in one dimension to fit to the aspect ratio.
        * rendering/RenderHTMLCanvas.cpp:
        (WebCore::RenderHTMLCanvas::paintReplaced): Apply object-fit and
        clip if necessary.
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::updateInnerContentRect):
        (WebCore::RenderImage::imageDimensionsChanged): Update intrinsic
        size properly, and recalculate the inner content rectangle (the
        exact area occupied by the replaced content) again if appropriate.
        (WebCore::RenderImage::paintReplaced): Apply object-fit and clip
        if necessary.
        (WebCore::RenderImage::foregroundIsKnownToBeOpaqueInRect):
        object-fit may leave parts of the content box empty, in which case
        it won't be fully obscured.
        (WebCore::RenderImage::layout):
        * rendering/RenderImage.h:
        * rendering/RenderImageResource.cpp:
        (WebCore::RenderImageResource::intrinsicSize): Need this to
        differentiate between intrinsic and extrinsic size for SVG images.
        * rendering/RenderImageResource.h:
        * rendering/RenderImageResourceStyleImage.h:
        * rendering/RenderReplaced.cpp:
        (WebCore::RenderReplaced::replacedContentRect): Return the
        rectangle occupied by the replaced content. This will be identical
        to the content box if object-fit is 'fill', but will typically be
        something else for other values.
        * rendering/RenderReplaced.h:
        * rendering/RenderVideo.cpp:
        (WebCore::RenderVideo::videoBox): Not much left to do here, with
        the new RenderReplaced::replacedContentRect() method in place.
        (WebCore::RenderVideo::paintReplaced): Apply object-fit and clip
        if necessary.
        * rendering/style/RenderStyle.cpp:
        (WebCore::RenderStyle::changeRequiresRepaint):
        * rendering/style/RenderStyle.h:
        * rendering/style/RenderStyleConstants.h:
        * rendering/style/StyleRareNonInheritedData.cpp:
        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
        (WebCore::StyleRareNonInheritedData::operator==):
        * rendering/style/StyleRareNonInheritedData.h:

2013-08-29  Tim Horton  <timothy_horton@apple.com>

        SVG clipping, masking, and gradients-on-text do not respect the device scale factor
        https://bugs.webkit.org/show_bug.cgi?id=120377
        <rdar://problem/14777944>

        Reviewed by Simon Fraser.

        Tests: svg/custom/masking-clipping-hidpi.svg

        calculateTransformationToOutermostCoordinateSystem should include the page's
        device scale factor in its transform.

        * rendering/svg/SVGRenderingContext.cpp:
        (WebCore::SVGRenderingContext::calculateTransformationToOutermostCoordinateSystem):

2013-08-29  Chris Fleizach  <cfleizach@apple.com>

        AX: Crash when VoiceOver reference a TextMarker from an iframe that has been removed
        https://bugs.webkit.org/show_bug.cgi?id=120318

        Reviewed by Darin Adler.

        These crashes occur because an AXTextMarker is retrieved that reference a Node in an iframe.
        The iframe goes away, but when it tries to clean up and remove that Node from the InUse cache,
        the document() tree has already been detached, so it never clears the actual InUse cache.

        The fix here is to pre-emptively clean up any nodes in the document going away when the frame is about to disconnect.

        I'm removing the clearAXObjectCache() at the disconnectOwnerElement because it 
           1) Cleared the AXObjectCache for the iframe document (which is always empty -- only the top level doc maintains the cache), because
                the document() tree had already been detached... so it essentially did nothing.
           2) And if it did work, we wouldn't want this behavior -- that is to say, when an iframe goes away, we don't want to clear the entire cache for all
               the other documents (there's even an existing layout test to verify this behavior).

        Test: platform/mac/accessibility/stale-textmarker-crash.html

        * accessibility/AXObjectCache.cpp:
        (WebCore::AXObjectCache::clearTextMarkerNodesInUse):
        * accessibility/AXObjectCache.h:
        * page/Frame.cpp:
        (WebCore::Frame::disconnectOwnerElement):

2013-08-29  Brent Fulgham  <bfulgham@apple.com>

        [Windows] More unreviewed gardening of project file.
        Move css files inline with related source code.

        * WebCore.vcxproj/WebCore.vcxproj:
        * WebCore.vcxproj/WebCore.vcxproj.filters:

2013-08-29  Sam Weinig  <sam@webkit.org>

        Add ENABLE guards for Promises
        https://bugs.webkit.org/show_bug.cgi?id=120488

        Reviewed by Andreas Kling.

        * Configurations/FeatureDefines.xcconfig:

2013-08-29  Andreas Kling  <akling@apple.com>

        Inspector: Use a bit of RefPtr::release() in generated code.
        <https://webkit.org/b/120485>

        Reviewed by Darin Adler.

        Just something I spotted while reading InspectorBackendDispatcher.cpp.
        Avoid 3 cases of reference count churnery.

        * inspector/CodeGeneratorInspectorStrings.py:

2013-08-29  Christophe Dumez  <ch.dumez@sisa.samsung.com>

        According to DOM4, all DocType nodes should have a document
        https://bugs.webkit.org/show_bug.cgi?id=99244

        Reviewed by Darin Adler.

        Doctypes now always have a node document and can be moved across document boundaries as per
        the latest DOM4 specification:
        http://dom.spec.whatwg.org/#dom-domimplementation-createdocumenttype
        http://dom.spec.whatwg.org/#dom-node-ownerdocument

        This means that DOMImplementation.createDocumentType() now sets the ownerDocument of the
        new DocumentType Node to the associated document of the current "context" object. In
        DOM4, all nodes have a document at all times. DocumentType nodes can now be moved across
        document boundaries so that the node can be added to a Document after being created.

        This means we will no longer need to special case DocumentType nodes in the code and
        Node::document() can no longer return NULL, which means that we'll be able to remove
        NULL checks in call sites.

        Firefox stable and since recently Blink already follow DOM4 here while IE10 does not (yet).

        Test: fast/dom/createDocumentType-ownerDocument.html

        * dom/ContainerNode.cpp:
        (WebCore::checkAcceptChild):
        * dom/DOMImplementation.cpp:
        (WebCore::DOMImplementation::createDocumentType):
        (WebCore::DOMImplementation::createDocument):
        * dom/Node.h:
        (WebCore::Node::document):

2013-08-29  Darin Adler  <darin@apple.com>

        Pasteboard::writeSelection violates layering (first step, fixes it for Mac platform only)
        https://bugs.webkit.org/show_bug.cgi?id=120483

        Reviewed by Anders Carlsson.

        * editing/Editor.cpp:
        (WebCore::Editor::cut): Added some comments. Use the new writeSelectionToPasteboard
        function on Mac instead of Pasteboard::writeSelection.
        (WebCore::Editor::copy): Ditto.

        * editing/Editor.h: Removed an old unused Mac-only writeSelectionToPasteboard function
        that was a cover that called through to Pasteboard::writeSelectionForTypes. Added a new
        Mac-only writeSelectionToPasteboard function that is destined to become cross-platform soon.

        * editing/mac/EditorMac.mm:
        (WebCore::Editor::writeSelectionToPasteboard): Added. Uses a new pattern where the Editor
        puts all the data into a structure called PasteboardWebContent then calls the Pasteboard to
        do the work. The platform-specific aspect of PasteboardWebContent is what formats are needed
        for each platform.

        * page/DragController.cpp:
        (WebCore::DragController::startDrag): Added some comments. Use the new writeSelectionToPasteboard
        function on Mac instead of Pasteboard::writeSelection.

        * platform/Pasteboard.h: Remove some unneeded forward declarations. Added comments for all functions
        that don't belong in this class because they are layering violations; this becomes the to do list for
        the project we are beginning here. Added the new PasteboardWebContent structure, empty on all platforms
        except for Mac for now. Removed writeSelectionForTypes, a Mac-only function that is no longer used.
        Added setTypes and writeAfterSettingTypes, the two halves of the future function named writeWebContent.
        Put the writeSelection function inside a "not Mac" if statement. Later to be deleted entirely.

        * platform/mac/PasteboardMac.mm: Removed now-unneeded selectionPasteboardTypes,
        Pasteboard::writeSelectionForTypes, and writeSelection functions.
        (WebCore::Pasteboard::setTypes): Added. First half of writing web content to the pasteboard.
        (WebCore::Pasteboard::writeAfterSettingTypes): Added. Second half of writing web content to the pasteboard.

2013-08-29  Antti Koivisto  <antti@apple.com>

        Remove code behind ENABLE(DIALOG_ELEMENT)
        https://bugs.webkit.org/show_bug.cgi?id=120467

        Reviewed by Darin Adler.

        It is incomplete and no one is building it.

        * CMakeLists.txt:
        * Configurations/FeatureDefines.xcconfig:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.exp.in:
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/generic/RuntimeEnabledFeatures.cpp:
        * bindings/generic/RuntimeEnabledFeatures.h:
        * css/StyleResolver.cpp:
        (WebCore::StyleResolver::adjustRenderStyle):
        * css/html.css:
        * dom/ContextFeatures.cpp:
        * dom/ContextFeatures.h:
        * dom/Document.cpp:
        * dom/Document.h:
        * dom/Element.cpp:
        (WebCore::Element::removedFrom):
        (WebCore::Element::setContainsFullScreenElementOnAncestorsCrossingFrameBoundaries):
        * dom/Element.h:
        (WebCore::Element::isDisabledFormControl):
        * dom/ElementRareData.h:
        (WebCore::ElementRareData::ElementRareData):
        * html/HTMLDialogElement.cpp: Removed.
        * html/HTMLDialogElement.h: Removed.
        * html/HTMLDialogElement.idl: Removed.
        * html/HTMLElementsAllInOne.cpp:
        * html/HTMLTagNames.in:
        * rendering/RenderDialog.cpp: Removed.
        * rendering/RenderDialog.h: Removed.
        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::rebuildZOrderLists):
        (WebCore::RenderLayer::collectLayers):
        * rendering/RenderLayer.h:
        * rendering/RenderObject.h:
        (WebCore::RenderObject::isCounter):
        * rendering/RenderingAllInOne.cpp:
        * testing/InternalSettings.cpp:
        (WebCore::InternalSettings::Backup::Backup):
        (WebCore::InternalSettings::Backup::restoreTo):
        * testing/InternalSettings.h:

2013-08-29  Simon Fraser  <simon.fraser@apple.com>

        Fix slider thumb event handling to use local, not absolute coordinates
        https://bugs.webkit.org/show_bug.cgi?id=120480

        Reviewed by Darin Adler.
        
        SliderThumbElement::setPositionFromPoint() did all of its coordinate
        math by mapping renderer rects into absolute coordinates, which was
        unnecessary and expensive.
        
        Fix by doing all the math in the coordinate space of the input's
        renderer. This simplified the code. Also, currentPosition
        was computed but unused, so was removed.

        No behavior change. Tested by fast/forms/range/slider-transformed.html

        * html/shadow/SliderThumbElement.cpp:
        (WebCore::SliderThumbElement::setPositionFromPoint):

2013-08-29  Zan Dobersek  <zdobersek@igalia.com>

        [Automake] libWebCoreDOM.la could use a better name
        https://bugs.webkit.org/show_bug.cgi?id=120232

        Reviewed by Martin Robinson.

        * bindings/gobject/GNUmakefile.am: Rename the libWebCoreDOM library to libGObjectDOMBindings.

2013-08-29  Joseph Pecoraro  <pecoraro@apple.com>

        Web Inspector: Download Web Archive of Inspected Page
        https://bugs.webkit.org/show_bug.cgi?id=119774

        Reviewed by Timothy Hatcher.

        Add PageAgent.archive which will return a Base-64 encoded web archive
        when successful. In order to then allow saving non-string files, extend
        InspectorFrontendHost.save to allow for Base-64 encoded data.

        * inspector/Inspector.json:
        * inspector/InspectorPageAgent.cpp:
        (WebCore::InspectorPageAgent::archive):
        * inspector/InspectorPageAgent.h:
        Introduce and implement PageAgent.archive. Create a Web Archive of the
        page's main frame.

        * inspector/InspectorFrontendClient.h:
        * inspector/InspectorFrontendClientLocal.h:
        (WebCore::InspectorFrontendClientLocal::save):
        * inspector/InspectorFrontendHost.cpp:
        (WebCore::InspectorFrontendHost::save):
        * inspector/InspectorFrontendHost.h:
        * inspector/InspectorFrontendHost.idl:
        Extend InspectorFrontendHost.save to include a base64Encoded param.

        * inspector/front-end/FileManager.js:
        * inspector/front-end/InspectorFrontendHostStub.js:
        (.WebInspector.InspectorFrontendHostStub.prototype.save):
        Misc. updates to the old inspector for function changes.

2013-08-29  Robert Hogan  <robert@webkit.org>

        Positioned Replaced Elements That Aren't RenderReplaced get Incorrect Width
        https://bugs.webkit.org/show_bug.cgi?id=93735

        Reviewed by David Hyatt.

        Replaced elements that aren't RenderReplaced aren't |isReplaced| and don't have an 
        intrinsic height or width. This causes them to go down the wrong height and width computation
        path in RenderBox when they are absolute positioned. 
        
        The notion of |isReplaced| is entwined with the notion of being |isInline| so it isn't really 
        possible to make them isReplaced without re-wiring a lot of code. So instead use an ad-hoc definition
        of isReplacedElement in RenderBox to bring all replaced elements into the height and width calculation.
        To make sure we get the right height and width in there, give non-RenderReplaced replaced renderers
        the helpers for returning their approximation of intrinsic height and width.

        The initial attempt at landing this patch had to be rolled out because it used LayoutUnit() for default
        intrinsic height of some replaced elements and this made the layout of the elements unstable in some sites.
        The fix for this issue is captured in intrinsic-button-and-input-height.html.

        Tests: fast/replaced/intrinsic-button-and-input-height.html
               fast/replaced/width-and-height-of-positioned-replaced-elements.html

        * rendering/RenderBox.cpp:
        (WebCore::isReplacedElement):
        (WebCore::RenderBox::computePositionedLogicalWidth):
        (WebCore::RenderBox::computePositionedLogicalHeight):
        * rendering/RenderBox.h:
        (WebCore::RenderBox::intrinsicSize):
        * rendering/RenderButton.h:
        * rendering/RenderFileUploadControl.cpp:
        (WebCore::RenderFileUploadControl::computePreferredLogicalWidths):
        * rendering/RenderListBox.cpp: