2012-03-23  Eric Carlson  <eric.carlson@apple.com>

        Deal with DOM modifications when evaluating source elements.
        https://bugs.webkit.org/show_bug.cgi?id=81163

        Reviewed by Alexey Proskuryakov.

        Test: media/video-beforeload-remove-source.html

        * dom/ContainerNode.cpp: Make NodeVector and collectNodes public, renamed as getChildNodes.
        (WebCore::ContainerNode::takeAllChildrenFrom): collectNodes -> getChildNodes.
        (WebCore::ContainerNode::willRemove): collectNodes -> getChildNodes.
        (WebCore::ContainerNode::willRemoveChildren): collectNodes -> getChildNodes.
        (WebCore::ContainerNode::insertedIntoDocument): collectNodes -> getChildNodes.
        (WebCore::ContainerNode::removedFromDocument): collectNodes -> getChildNodes.
        * dom/ContainerNode.h:
        (WebCore::getChildNodes):

        * editing/ReplaceSelectionCommand.cpp: Remove unused NodeVector declaration.

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::HTMLMediaElement): m_nextChildNodeToConsider and m_currentSourceNode
            are now RefPtrs.
        (WebCore::HTMLMediaElement::loadTimerFired): Protect HTMLMediaElement from being deleted during
            a DOM modification during an event callback.
        (WebCore::HTMLMediaElement::load): Ditto.
        (WebCore::HTMLMediaElement::selectMediaResource): Set m_nextChildNodeToConsider to the first
            child node, it will be the first node considered.
        (WebCore::HTMLMediaElement::havePotentialSourceChild): m_nextChildNodeToConsider and m_currentSourceNode
            are now RefPtrs.
        (WebCore::HTMLMediaElement::selectNextSourceChild): Collect all child nodes in a vector before
            looking for <source> nodes because 'beforeload' event handlers can mutate the DOM. Don't
            use a <source> that is no longer a child node after 'beforeload'. Use 0 to represent the end
            of the child node list because m_nextChildNodeToConsider is now a RefPtr so using the previous 
            sentinel, "this", would cause a retain cycle.
        (WebCore::HTMLMediaElement::sourceWasAdded):  m_nextChildNodeToConsider and m_currentSourceNode
            are now RefPtrs.
        (WebCore::HTMLMediaElement::sourceWillBeRemoved): Ditto.
        (WebCore::HTMLMediaElement::getPluginProxyParams): Protect HTMLMediaElement from being deleted during
            a DOM modification during an event callback.
        * html/HTMLMediaElement.h:

2012-03-23  Dean Jackson  <dino@apple.com>

        Disable CSS_SHADERS in Apple builds
        https://bugs.webkit.org/show_bug.cgi?id=81996

        Reviewed by Simon Fraser.

        Remove ENABLE_CSS_SHADERS from FeatureDefines. It's now in Platform.h.

        * Configurations/FeatureDefines.xcconfig:

2012-03-23  Dave Michael  <dmichael@chromium.org>

        Relanding(r111754): HTMLPluginElement is not destroyed on reload or navigation if getNPObject is called
        https://bugs.webkit.org/show_bug.cgi?id=80428

        Reviewed by Eric Seidel and Ryosuke Niwa.

        Make HTMLPluginElement release its m_NPObject in detach() to break a
        reference-counting cycle that happens on reload or navigation. With this
        change, HTMLPlugInElement::removedFromDocument is unnecessary, so it
        was removed. Note that Releasing m_NPObject does not result in a call to
        the plugin; it simply releases a reference count on the wrapper object
        for this HTMLPlugInElement. (The plugin's NPP_Deallocate is invoked
        when the render tree is destroyed, when PluginView calls
        PluginPackage::unload.) Thus, it is safe to release m_NPObject in
        detach, because it can not result in layout or style changes.

        Also added numberOfLiveNodes() and numberOfLiveDocuments() to
        window.internals to enable testing.

        Test: plugins/netscape-dom-access-and-reload.html

        * WebCore.exp.in:
        * html/HTMLPlugInElement.cpp:
        (WebCore::HTMLPlugInElement::detach):
        * html/HTMLPlugInElement.h:
        (HTMLPlugInElement):
        * testing/Internals.cpp:
        (WebCore):
        (WebCore::Internals::numberOfLiveNodes):
        (WebCore::Internals::numberOfLiveDocuments):
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-23  Ryosuke Niwa  <rniwa@webkit.org>

        CSSParser doesn't set border-*-width/style/color to initial by border shorthand property
        https://bugs.webkit.org/show_bug.cgi?id=82040

        Reviewed by Antti Koivisto.

        The border shorthand property sets values for border-width, border-style, and border-color shorthand properties.
        While CSSParser::parseValue can process these shorthand properties properly and set the longhand properties
        such as border-top-width, border-right-width, ... border-left-color, CSSParser::addProperty can't and the
        initialization in parseShorthand fails for the border property.

        Fixed the bug by explicitly initializing longhand properties.

        Changing the behavior here is unlikely to break the Web since our behavior already differs from that of Firefox
        and Internet Explorer. Both of those browsers return the actual initial values such as "medium" and "currentColor".
        This discrepancy is tracked by https://bugs.webkit.org/show_bug.cgi?id=82078.

        Test: fast/css/border-shorthand-initialize-longhands.html

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue): Uses borderAbridgedLonghand.
        (WebCore::CSSParser::parseShorthand): Uses longhand properties for initialization if one is available.
        This allows us to initialize multiple properties (e.g. border-*-color) for a single property missing in the set.
        * css/CSSPropertyLonghand.cpp:
        (WebCore::borderAbridgedLonghand): Added. The longhand here (border-width, border-style, border-color) is
        "abridged" in the sense that they're still shorthands.
        * css/CSSPropertyLonghand.h:
        (WebCore::CSSPropertyLonghand::CSSPropertyLonghand):
        (CSSPropertyLonghand): Added the version that takes longhand instances for initialization purposes.
        (WebCore::CSSPropertyLonghand::longhandsForInitialization):

2012-03-23  Tony Chang  <tony@chromium.org>

        [chromium] rename newwtf target back to wtf
        https://bugs.webkit.org/show_bug.cgi?id=82064

        Reviewed by Adam Barth.

        No new tests, only renaming a build target.

        * WebCore.gyp/WebCore.gyp:

2012-03-23  Adrienne Walker  <enne@google.com>

        [chromium] Turn off painting of scrollbars on compositor thread for unsupported platforms
        https://bugs.webkit.org/show_bug.cgi?id=82066

        Reviewed by James Robinson.

        With threaded compositing, OSX will crash and Windows will have black
        scrollbars. Fix that by reverting to the previosu behavior of updating
        scrollbars on the main thread instead.

        * page/scrolling/chromium/ScrollingCoordinatorChromium.cpp:
        (WebCore::scrollbarLayerDidChange):

2012-03-23  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/7883987> ASSERTION FAILED: ASSERT(input == AnimationStateInputEndTimerFired || input == AnimationStateInputPlayStatePaused) in AnimationBase::updateStateMachine causing multiple "crashes" on Lion Intel Debug WebKit testers
        https://bugs.webkit.org/show_bug.cgi?id=81351

        Rubber-stamped by Jessie Berlin.

        * page/animation/AnimationBase.cpp:
        (WebCore::AnimationBase::updateStateMachine): Replaced the assertion with a LOG_ERROR so that
        the issue is still noticeable, but it does not automatically make the debug bots red.

2012-03-23  Mike Lawther  <mikelawther@chromium.org>

        CSS3 calc: image sizing works with mixed percentage/absolute
        https://bugs.webkit.org/show_bug.cgi?id=82017

        Reviewed by Ojan Vafai.

        Test: css3/calc/img-size-expected.html

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::computeReplacedLogicalWidthUsing):
        (WebCore::RenderBox::computeReplacedLogicalHeightUsing):

2012-03-23  Julien Chaffraix  <jchaffraix@webkit.org>

        REGRESSION(107971): Google Voice contact list is broken in WebKit due to badly allocating the extra height
        https://bugs.webkit.org/show_bug.cgi?id=81826

        Reviewed by Tony Chang.

        Covered by tables/mozilla/bugs/bug27038-{1|2}.html.

        This partly reverts r107971: the extra logical height distribution change was not needed
        to fix the bug (it is needed by the test though). We revert to giving all the extra height
        to the first tbody and not the first section.

        This is broken but unfortunately some websites are relying on that. Getting a real
        distribution algorithm is covered by bug 81824. However this is super tricky to get
        right and I did not want to add more compatibility risks until I have something solid.

        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::distributeExtraLogicalHeight):

2012-03-23  Xingnan Wang  <xingnan.wang@intel.com>

        Optimize for IPP in DirectConvolver::process()
        https://bugs.webkit.org/show_bug.cgi?id=80255

        Reviewed by Chris Rogers.

        Increase ~2X performance by conv() in IPP.

        * platform/audio/DirectConvolver.cpp:
        (WebCore::DirectConvolver::DirectConvolver):
        (WebCore::DirectConvolver::process):
        * platform/audio/DirectConvolver.h:
        (DirectConvolver):

2012-03-23  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API (JSEP): Introducing PeerConnection00 and IceCallback
        https://bugs.webkit.org/show_bug.cgi?id=81657

        Reviewed by Adam Barth.

        Last major WebCore patch for the JSEP PeerConnection, together with the associated
        IceCallback (they both depend on each other and IceCallback has very few lines of real code).

        My next patch after this one will do a major overhaul of the existing layout tests
        and add a few new ones.

        * GNUmakefile.list.am:
        * Modules/mediastream/DOMWindowMediaStream.idl:
        * Modules/mediastream/IceCallback.h: Added.
        (WebCore):
        (IceCallback):
        (WebCore::IceCallback::~IceCallback):
        * Modules/mediastream/IceCallback.idl: Added.
        * Modules/mediastream/PeerConnection00.cpp: Added.
        (WebCore):
        (WebCore::PeerConnection00::create):
        (WebCore::PeerConnection00::PeerConnection00):
        (WebCore::PeerConnection00::~PeerConnection00):
        (WebCore::PeerConnection00::hasLocalAudioTrack):
        (WebCore::PeerConnection00::hasLocalVideoTrack):
        (WebCore::PeerConnection00::parseMediaHints):
        (WebCore::PeerConnection00::createOffer):
        (WebCore::PeerConnection00::createAnswer):
        (WebCore::PeerConnection00::setLocalDescription):
        (WebCore::PeerConnection00::setRemoteDescription):
        (WebCore::PeerConnection00::localDescription):
        (WebCore::PeerConnection00::remoteDescription):
        (WebCore::PeerConnection00::startIce):
        (WebCore::PeerConnection00::processIceMessage):
        (WebCore::PeerConnection00::readyState):
        (WebCore::PeerConnection00::iceState):
        (WebCore::PeerConnection00::addStream):
        (WebCore::PeerConnection00::removeStream):
        (WebCore::PeerConnection00::localStreams):
        (WebCore::PeerConnection00::remoteStreams):
        (WebCore::PeerConnection00::close):
        (WebCore::PeerConnection00::didGenerateIceCandidate):
        (WebCore::PeerConnection00::didChangeReadyState):
        (WebCore::PeerConnection00::didChangeIceState):
        (WebCore::PeerConnection00::didAddRemoteStream):
        (WebCore::PeerConnection00::didRemoveRemoteStream):
        (WebCore::PeerConnection00::interfaceName):
        (WebCore::PeerConnection00::scriptExecutionContext):
        (WebCore::PeerConnection00::stop):
        (WebCore::PeerConnection00::eventTargetData):
        (WebCore::PeerConnection00::ensureEventTargetData):
        (WebCore::PeerConnection00::changeReadyState):
        (WebCore::PeerConnection00::changeIceState):
        * Modules/mediastream/PeerConnection00.h: Added.
        (WebCore):
        (PeerConnection00):
        (WebCore::PeerConnection00::refEventTarget):
        (WebCore::PeerConnection00::derefEventTarget):
        * Modules/mediastream/PeerConnection00.idl: Added.
        * WebCore.gypi:
        * bindings/generic/RuntimeEnabledFeatures.h:
        (WebCore::RuntimeEnabledFeatures::webkitPeerConnection00Enabled):
        * bindings/js/JSPeerConnection00Custom.cpp: Added.
        (WebCore):
        (WebCore::JSPeerConnection00Constructor::constructJSPeerConnection00):
        * dom/EventTargetFactory.in:

2012-03-23  Adrienne Walker  <enne@google.com>

        [chromium] Fix scrollbarLayerLostContext flaky test crash on 10.6
        https://bugs.webkit.org/show_bug.cgi?id=82062

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.h:
        (CCScrollbarLayerImpl):

2012-03-23  Tommy Widenflycht  <tommyw@google.com>

        [chromium] MediaStream API (JSEP): Extending WebMediaStreamCenter
        https://bugs.webkit.org/show_bug.cgi?id=81924

        Reviewed by Adam Barth.

        Nothing to test, just moving methods.

        * platform/mediastream/MediaStreamCenter.cpp:
        (WebCore::MediaStreamCenter::constructSDP):
        (WebCore):

2012-03-23  Sami Kyostila  <skyostil@chromium.org>

        Reuse buffer allocation if canvas size does not change
        https://bugs.webkit.org/show_bug.cgi?id=80871

        Reviewed by Stephen White.

        If the user changes the width or height attributes of a canvas element,
        the contents of the canvas should be cleared and the context state
        should be reset. This has become a common idiom to clear the canvas
        "efficiently" at the start of a frame.

        Previously, this code path triggered a full reallocation of the image
        buffer backing the canvas, leading to reduced performance. This patch
        implements an optimization where we reuse the previous image buffer
        allocation if the size of the canvas did not change. Also, instead of
        clearing the canvas every time its dimensions are touched, we only clear
        if anything has been drawn into the canvas since it was previously
        cleared.

        Note that for now this optimization only applies for 2D canvases,
        since it is not entirely clear how touching the dimensions of a WebGL
        canvas should work.

        Test: fast/canvas/canvas-resize-after-paint-without-layout.html +
              existing layout tests for canvas resetting.

        * html/HTMLCanvasElement.cpp:
        (WebCore::HTMLCanvasElement::HTMLCanvasElement):
        (WebCore::HTMLCanvasElement::reset):
        (WebCore::HTMLCanvasElement::createImageBuffer): Save the initial
        graphics context state so we can restore it without creating a new
        context.
        (WebCore::HTMLCanvasElement::clearImageBuffer):
        (WebCore):
        (WebCore::HTMLCanvasElement::clearCopiedImage):
        * html/HTMLCanvasElement.h:
        (HTMLCanvasElement):
        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::reset): No need to notify the
        compositor when the context is reset, because clearing the image buffer
        does the same thing. We can also skip the notification if we did not
        have an image buffer at the time of the reset, because the reset will
        not have any visual impact in this case. Finally, if the canvas size
        did change, the notification is also unnecessary because of the call
        to RenderObject::repaint() from HTMLCanvasElement::reset().

2012-03-22  Martin Robinson  <mrobinson@igalia.com>

        Fix some code generation warnings on GTK+.

        Reviewed by Gustavo Noronha Silva.

        No new tests. This just fixes warnings.

        * GNUmakefile.am: Remove nonexistent directories from the list IDL directories.

2012-03-23  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111751.
        http://trac.webkit.org/changeset/111751
        https://bugs.webkit.org/show_bug.cgi?id=82060

        caused 15% page cycler regression for chromium-linux
        (Requested by eae on #webkit).

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):

2012-03-23  Kentaro Hara  <haraken@chromium.org>

        Support [ImplementedAs] for attributes
        https://bugs.webkit.org/show_bug.cgi?id=81605

        Reviewed by Adam Barth.

        [ImplementedAs] just supports methods. [ImplementedAs] should support
        attributes too.

        Explained here: https://trac.webkit.org/wiki/WebKitIDL#ImplementedAs

        Test: bindings/scripts/test/TestObj.idl

        * bindings/scripts/CodeGenerator.pm: Modified to support [ImplementedAs] for attributes.
        (AttributeNameForGetterAndSetter):

        * bindings/scripts/test/TestObj.idl: Added a test case.

        * bindings/scripts/test/CPP/WebDOMTestObj.cpp: Updated run-bindings-tests results.
        (WebDOMTestObj::strawberry):
        (WebDOMTestObj::setStrawberry):
        * bindings/scripts/test/CPP/WebDOMTestObj.h:
        * bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
        (webkit_dom_test_obj_get_strawberry):
        (webkit_dom_test_obj_set_strawberry):
        (webkit_dom_test_obj_get_property):
        (webkit_dom_test_obj_class_init):
        * bindings/scripts/test/GObject/WebKitDOMTestObj.h:
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore):
        (WebCore::jsTestObjStrawberry):
        (WebCore::setJSTestObjStrawberry):
        * bindings/scripts/test/JS/JSTestObj.h:
        (WebCore):
        * bindings/scripts/test/ObjC/DOMTestObj.h:
        * bindings/scripts/test/ObjC/DOMTestObj.mm:
        (-[DOMTestObj strawberry]):
        (-[DOMTestObj setStrawberry:]):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::TestObjInternal::strawberryAttrGetter):
        (TestObjInternal):
        (WebCore::TestObjInternal::strawberryAttrSetter):
        (WebCore):

2012-03-23  Tommy Widenflycht  <tommyw@google.com>

        The JSC code generator doesn't generate correct code for Constructors
        https://bugs.webkit.org/show_bug.cgi?id=82046

        Reviewed by Kentaro Hara.

        The main bulk of generated code for constructors uses the name jsConstructor
        for the created object, and then calls GenerateParametersCheck which generates
        code that uses the name castedThis.

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateConstructorDefinition):
        * bindings/scripts/test/JS/JSTestInterface.cpp:
        (WebCore::JSTestInterfaceConstructor::constructJSTestInterface):
        * bindings/scripts/test/JS/JSTestNamedConstructor.cpp:
        (WebCore::JSTestNamedConstructorNamedConstructor::constructJSTestNamedConstructor):
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::JSTestObjConstructor::finishCreation):
        (WebCore::JSTestObjConstructor::constructJSTestObj):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::constructJSTestSerializedScriptValueInterface):
        * bindings/scripts/test/TestObj.idl:
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::V8TestObj::constructorCallback):

2012-03-23  Tommy Widenflycht  <tommyw@google.com>

        The JSC code generator can't handle boolean arguments for Callbacks
        https://bugs.webkit.org/show_bug.cgi?id=82045

        Reviewed by Kentaro Hara.

        CodeGeneratorJS.pm only handles DOMStrings and objects as arguments
        for a Callback, so I added support for boolean values as well.

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateCallbackImplementation):
        * bindings/scripts/test/CPP/WebDOMTestCallback.cpp:
        (WebDOMTestCallback::callbackWithBoolean):
        * bindings/scripts/test/CPP/WebDOMTestCallback.h:
        (WebDOMTestCallback):
        * bindings/scripts/test/GObject/WebKitDOMTestCallback.cpp:
        (webkit_dom_test_callback_callback_with_boolean):
        * bindings/scripts/test/GObject/WebKitDOMTestCallback.h:
        * bindings/scripts/test/JS/JSTestCallback.cpp:
        (WebCore::JSTestCallback::callbackWithBoolean):
        (WebCore):
        * bindings/scripts/test/JS/JSTestCallback.h:
        (JSTestCallback):
        * bindings/scripts/test/ObjC/DOMTestCallback.h:
        * bindings/scripts/test/ObjC/DOMTestCallback.mm:
        (-[DOMTestCallback callbackWithBoolean:]):
        * bindings/scripts/test/TestCallback.idl:
        * bindings/scripts/test/V8/V8TestCallback.cpp:
        (WebCore::V8TestCallback::callbackWithBoolean):
        (WebCore):
        * bindings/scripts/test/V8/V8TestCallback.h:
        (V8TestCallback):

2012-03-23  Allan Sandfeld Jensen  <allan.jensen@nokia.com>

        Touch adjustment forgets some subtarget quads.
        https://bugs.webkit.org/show_bug.cgi?id=82044

        Reviewed by Kenneth Rohde Christiansen.

        Do not uncritically skip all nodes that are ancestors to other test results.
        Instead return the inner-most element if multiple nodes have the same distance.

        Test: touchadjustment/block-testing.html

        * page/TouchAdjustment.cpp:
        (WebCore::TouchAdjustment::compileSubtargetList):
        (WebCore::TouchAdjustment::findNodeWithLowestDistanceMetric):

2012-03-23  Allan Sandfeld Jensen  <allan.jensen@nokia.com>

        TouchAdjustment does not correct for frame position
        https://bugs.webkit.org/show_bug.cgi?id=82043

        Reviewed by Kenneth Rohde Christiansen.

        Convert geometry to window coordinates before calculating distance.

        Test: touchadjustment/iframe.html

        * page/TouchAdjustment.cpp:
        (WebCore::TouchAdjustment::distanceSquaredToTargetCenterLine):

2012-03-23  Vlad Voicu  <vladv@rosedu.org>

        Fixed minor WebInspector display issue
        Clicking on disabled sections in Styles Sidebar Pane creates new elements.
        https://bugs.webkit.org/show_bug.cgi?id=81925

        Reviewed by Timothy Hatcher

        No new tests should be required.

        * inspector/front-end/StylesSidebarPane.js:
        (WebInspector.StylePropertiesSection.prototype._handleEmptySpaceClick):
        (WebInspector.StylePropertyTreeElement.prototype):

2012-03-23  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, rebaselined run-bindings-tests results.

        * bindings/scripts/test/CPP/WebDOMTestObj.cpp:
        * bindings/scripts/test/CPP/WebDOMTestObj.h:
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::jsTestObjPrototypeFunctionMethodWithCallbackArg):
        (WebCore::jsTestObjPrototypeFunctionMethodWithNonCallbackArgAndCallbackArg):
        (WebCore::jsTestObjPrototypeFunctionMethodWithCallbackAndOptionalArg):
        (WebCore::jsTestObjPrototypeFunctionOverloadedMethod5):
        (WebCore::jsTestObjPrototypeFunctionOverloadedMethod):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::TestObjInternal::methodWithCallbackArgCallback):
        (WebCore::TestObjInternal::methodWithNonCallbackArgAndCallbackArgCallback):
        (WebCore::TestObjInternal::methodWithCallbackAndOptionalArgCallback):
        (WebCore::TestObjInternal::overloadedMethod5Callback):
        (WebCore::TestObjInternal::overloadedMethodCallback):

2012-03-23  Ryosuke Niwa  <rniwa@webkit.org>

        cssText should use StringBuilder
        https://bugs.webkit.org/show_bug.cgi?id=82028

        Reviewed by Hajime Morita.

        Make StylePropertySet::asText more efficient by deploying StringBuilder;
        avoids heap churn by String::operator+ and String::operator+=.

        * css/StylePropertySet.cpp:
        (WebCore::StylePropertySet::asText):

2012-03-23  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION(r111754): plugins/reloadplugins-and-pages.html fails on all platforms
        https://bugs.webkit.org/show_bug.cgi?id=82035

        Rollout r111754 since it caused a test to fail and the test added by the patch
        is failing on Mac WebKit 2.

        * WebCore.exp.in:
        * html/HTMLPlugInElement.cpp:
        (WebCore::HTMLPlugInElement::detach):
        (WebCore):
        (WebCore::HTMLPlugInElement::removedFromDocument):
        * html/HTMLPlugInElement.h:
        (HTMLPlugInElement):
        * testing/Internals.cpp:
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-23  Adam Barth  <abarth@webkit.org>

        Move Notifications APIs from DOMWindow.idl to DOMWindowNotifications.idl (Part 2)
        https://bugs.webkit.org/show_bug.cgi?id=82026

        Reviewed by Kentaro Hara.

        This patch removes DOMWindow::resetNotifications, which was unneeded
        special-case logic for clearing the notifications center.  The previous
        patch that tried to accomplish the same thing did not override
        willDetachPage, which is why it caused crashes.

        There's actually a cleaner way to handle these cases, which will let us
        implement reconnectFrame, but that will need to wait for the next
        patch.

        * notifications/DOMWindowNotifications.cpp:
        (WebCore::DOMWindowNotifications::DOMWindowNotifications):
        (WebCore::DOMWindowNotifications::from):
        (WebCore::DOMWindowNotifications::webkitNotifications):
        (WebCore):
        (WebCore::DOMWindowNotifications::disconnectFrame):
        (WebCore::DOMWindowNotifications::willDetachPage):
        (WebCore::DOMWindowNotifications::reset):
        * notifications/DOMWindowNotifications.h:
        (DOMWindowNotifications):
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::willDetachPage):
        (WebCore::DOMWindow::disconnectDOMWindowProperties):
        (WebCore::DOMWindow::clearDOMWindowProperties):
        * page/DOMWindow.h:
        (DOMWindow):
        * page/Frame.cpp:
        (WebCore::Frame::willDetachPage):

2012-03-22  Adam Barth  <abarth@webkit.org>

        Move Notifications APIs from DOMWindow.idl to DOMWindowNotifications.idl (Part 1)
        https://bugs.webkit.org/show_bug.cgi?id=82015

        Reviewed by Kentaro Hara.

        This patch moves DOMWindow.webkitNotifications from DOMWindow.idl to
        DOMWindowNotificiations.idl in preparation for moving notificiations
        into Modules.

        A future patch will remove DOMWindow::resetNotificaitions in favor of
        more general mechanisms.

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * notifications/DOMWindowNotifications.cpp: Added.
        (WebCore):
        (WebCore::DOMWindowNotifications::DOMWindowNotifications):
        (WebCore::DOMWindowNotifications::~DOMWindowNotifications):
        (WebCore::DOMWindowNotifications::from):
        (WebCore::DOMWindowNotifications::webkitNotifications):
        (WebCore::DOMWindowNotifications::reset):
        (WebCore::DOMWindowNotifications::supplementName):
        * notifications/DOMWindowNotifications.h: Added.
        (WebCore):
        (DOMWindowNotifications):
        * notifications/DOMWindowNotifications.idl: Added.
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::~DOMWindow):
        (WebCore):
        (WebCore::DOMWindow::resetNotifications):
        * page/DOMWindow.h:
        (WebCore):
        (DOMWindow):
        * page/DOMWindow.idl:

2012-03-22  Li Yin  <li.yin@intel.com>

        A client MUST close a connection if it detects a masked frame
        https://bugs.webkit.org/show_bug.cgi?id=81361

        Reviewed by Kent Tamura.

        A server must not mask any frames that it sends to the client.
        Change the test case, not mask the frames from server to client.
        
        Test: http/tests/websocket/tests/hybi/invalid-masked-frames-from-server.html

        * Modules/websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::processFrame):

2012-03-22  Li Yin  <li.yin@intel.com>

        [WebSocket]The minimal number of bytes MUST be used to encode the length
        https://bugs.webkit.org/show_bug.cgi?id=81443

        Reviewed by Kent Tamura.

        From RFC 6455 http://tools.ietf.org/html/rfc6455#section-5.2
        the minimal number of bytes MUST be used to encode the length
        
        New test case : http/tests/websocket/tests/hybi/invalid-encode-length.html

        * Modules/websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::parseFrame):

2012-03-22  Adam Barth  <abarth@webkit.org>

        Unreviewed.  Sort xcodeproj file.

        * WebCore.xcodeproj/project.pbxproj:

2012-03-22  Mao Yujie  <yujie.mao@intel.com>

        Implement strict testing criterion for callback function definition
        https://bugs.webkit.org/show_bug.cgi?id=80005

        Reviewed by Adam Barth.

        Callback function should be defined as the function type instead of
        the object type.

        LayoutTest: fast/dom/MediaStream/argument-types.html

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateParametersCheckExpression):
        (GenerateParametersCheck):
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateParametersCheckExpression):
        (GenerateParametersCheck):

2012-03-22  Gyuyoung Kim  <gyuyoung.kim@samsung.com>

        Convert hasGrammarMarker to use Internals interface
        https://bugs.webkit.org/show_bug.cgi?id=82004

        Reviewed by Ryosuke Niwa.

        Remove hasGrammarMarker functions, because it is able to work in the
        cross-port way through the Internals interface.

        No new tests, since we are improving here the infra-structure
        for testing a specific method.

        * testing/Internals.cpp:
        (WebCore::Internals::hasGrammarMarker):
        (WebCore):
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-22  Xingnan Wang  <xingnan.wang@intel.com>

        Add exception for the setter of "fftSize" in RealtimeAnalyserNode
        https://bugs.webkit.org/show_bug.cgi?id=81748

        Reviewed by Chris Rogers.

        * Modules/webaudio/RealtimeAnalyser.cpp:
        (WebCore::RealtimeAnalyser::setFftSize):
        * Modules/webaudio/RealtimeAnalyser.h:
        (RealtimeAnalyser):
        * Modules/webaudio/RealtimeAnalyserNode.cpp:
        (WebCore::RealtimeAnalyserNode::setFftSize):
        (WebCore):
        * Modules/webaudio/RealtimeAnalyserNode.h:
        (RealtimeAnalyserNode):
        * Modules/webaudio/RealtimeAnalyserNode.idl:

2012-03-22  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Add HistoryItemViewState for BlackBerry port
        https://bugs.webkit.org/show_bug.cgi?id=81867

        Reviewed by Rob Buis.

        HistoryItemViewState is the blackberry specific field of HistoryItem.
        It's used to maintain the porting specific view state.

        No new test because the port can't be built yet.

        * history/HistoryItem.h:
        (HistoryItem):
        (WebCore::HistoryItem::viewState):

2012-03-22  SravanKumar Sandela  <ssandela@innominds.com>

        Fieldset unexpectedly stretches to minimum intrinsic width
        https://bugs.webkit.org/show_bug.cgi?id=79128

        Reviewed by Julien Chaffraix.

        Fieldset element width will now check if css width is specified explicitly
        before stretching to minimum intrinsic width. The reference
        can be taken from IE9, instead of FF(FF acknowledged the broken behavior). 

        Tests: fast/forms/fieldset-width-nostretch-ifspecified-expected.html
               fast/forms/fieldset-width-nostretch-ifspecified.html

        * rendering/RenderFieldset.cpp:
        (WebCore::RenderFieldset::stretchesToMinIntrinsicLogicalWidth):
        (WebCore):
        * rendering/RenderFieldset.h:
        (RenderFieldset):

2012-03-22  Shawn Singh  <shawnsingh@chromium.org>

        [chromium] Target surface should be damaged for a new layers even when layer had no changes
        https://bugs.webkit.org/show_bug.cgi?id=81879

        Reviewed by Adrienne Walker.

        Unit test added to CCDamageTrackerTest.

        * platform/graphics/chromium/cc/CCDamageTracker.cpp:
        (WebCore::CCDamageTracker::removeRectFromCurrentFrame): added a
        boolean arg to detect if the layer is new on this update.

        (WebCore::CCDamageTracker::extendDamageForLayer): added logic that
        damages the target surface if the layer is new.

        (WebCore::CCDamageTracker::extendDamageForRenderSurface): added
        logic that damages the target surface if the descendant surface is
        new; similar logic for the surface's replica if the replica is new.

        * platform/graphics/chromium/cc/CCDamageTracker.h:
        (CCDamageTracker):

2012-03-22  Charles Wei  <charles.wei@torchmobile.com.cn>

        [BlackBerry] Need to store the meta info of a page in the ViewState of the history
        https://bugs.webkit.org/show_bug.cgi?id=82000

        Reviewed by Rob Buis.

        Internally reviewed by George Staikos.

        No new tests, BlackBerry porting doesn't build yet upstreaming.

        * history/blackberry/HistoryItemViewState.h:
        (WebCore::HistoryItemViewState::HistoryItemViewState):
        (HistoryItemViewState):

2012-03-22  Adam Klein  <adamk@chromium.org>

        [v8] wrapSlow methods should ref underlying object before creating wrapper
        https://bugs.webkit.org/show_bug.cgi?id=81919

        Reviewed by Adam Barth.

        Because instatiating the wrapper can trigger GC, it's important that
        wrapSlow() hold a reference to an object when creating a wrapper for
        that object. Once the V8 wrapper exists and is associated with the object,
        the reference can be handed off (via leakRef) to be handled by the normal
        binding code logic (where derefObject is called if the handle is GCed).

        Binding tests have been updated to reflect this change.

        Testing the change directly is hard. Any test landed today would only
        be a valid test until V8's logic about when to GC changes, at which point
        it would become dead weight. So I don't think it's worth landing a
        layout test along with this.

        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateHeader): Make wrapSlow take a PassRefPtr for RefCounted objects.
        (GenerateToV8Converters): Get rid of the explicit call to ref() and
        instead call leakRef() when adding a RefCounted object to the DOM map.
        (GetPassRefPtrType): Helper to generate "PassRefPtr<T>", or "PassRefPtr<T<U> >" as appropriate.
        * bindings/scripts/test/V8/V8Float64Array.cpp:
        (WebCore::V8Float64Array::wrapSlow):
        * bindings/scripts/test/V8/V8Float64Array.h:
        (V8Float64Array):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.cpp:
        (WebCore::V8TestActiveDOMObject::wrapSlow):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.h:
        (V8TestActiveDOMObject):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.cpp:
        (WebCore::V8TestCustomNamedGetter::wrapSlow):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.h:
        (V8TestCustomNamedGetter):
        * bindings/scripts/test/V8/V8TestEventConstructor.cpp:
        (WebCore::V8TestEventConstructor::wrapSlow):
        * bindings/scripts/test/V8/V8TestEventConstructor.h:
        (V8TestEventConstructor):
        * bindings/scripts/test/V8/V8TestEventTarget.cpp:
        (WebCore::V8TestEventTarget::wrapSlow):
        * bindings/scripts/test/V8/V8TestEventTarget.h:
        (V8TestEventTarget):
        * bindings/scripts/test/V8/V8TestInterface.cpp:
        (WebCore::V8TestInterface::wrapSlow):
        * bindings/scripts/test/V8/V8TestInterface.h:
        (V8TestInterface):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp:
        (WebCore::V8TestMediaQueryListListener::wrapSlow):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.h:
        (V8TestMediaQueryListListener):
        * bindings/scripts/test/V8/V8TestNamedConstructor.cpp:
        (WebCore::V8TestNamedConstructor::wrapSlow):
        * bindings/scripts/test/V8/V8TestNamedConstructor.h:
        (V8TestNamedConstructor):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::V8TestObj::wrapSlow):
        * bindings/scripts/test/V8/V8TestObj.h:
        (V8TestObj):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.cpp:
        (WebCore::V8TestSerializedScriptValueInterface::wrapSlow):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.h:
        (V8TestSerializedScriptValueInterface):

2012-03-22  Jonathan Dong  <jonathan.dong@torchmobile.com.cn>

        [BlackBerry] add interface clearCredentials() and clearNeverRememberSites()
        https://bugs.webkit.org/show_bug.cgi?id=81887

        Reviewed by Rob Buis.

        Fixed SQL issue when clearing table logins and table never_remember.

        No new tests.

        * platform/network/blackberry/CredentialBackingStore.cpp:
        (WebCore::CredentialBackingStore::clearLogins):
        (WebCore::CredentialBackingStore::clearNeverRemember):

2012-03-22  Jonathan Dong  <jonathan.dong@torchmobile.com.cn>

        [BlackBerry] http authenticate dialog popup only once no matter authentication pass or fail
        https://bugs.webkit.org/show_bug.cgi?id=80135

        Reviewed by Rob Buis.

        Modified the interface function authenticationChallenge() in class
        PageClientBlackBerry, moved Credential from return value to the
        function's reference parameter, and returned a bool to indicate if
        user pressed Ok button or not.
        Removed the logic which checks m_currentWebChallenge not null,
        because we should challenge user again if the last provided credential
        is not valid; also added the logic that will popup challenge
        dialog again immediately if user press Ok buttton directly without
        inputting anything.

        No new tests.

        * platform/blackberry/PageClientBlackBerry.h:
        * platform/network/blackberry/NetworkJob.cpp:
        (WebCore::NetworkJob::handleAuthHeader):
        (WebCore::NetworkJob::sendRequestWithCredentials):

2012-03-22  Jason Liu  <jason.liu@torchmobile.com.cn>

        [BlackBerry] Synchronize platform/network/blackberry
        https://bugs.webkit.org/show_bug.cgi?id=81874

        We changed a lot in these files locally. But the changes are not upstreamed.
        It is not convenient to do the other upstreaming work based on these differences.
        So upstream these changes.

        Reviewed by Rob Buis.

        No new tests. Just synchronize codes.

        * platform/network/blackberry/NetworkJob.cpp:
        (WebCore::NetworkJob::NetworkJob):
        (WebCore::NetworkJob::initialize):
        (WebCore::NetworkJob::handleNotifyHeaderReceived):
        (WebCore::NetworkJob::handleNotifyDataReceived):
        (WebCore::NetworkJob::sendResponseIfNeeded):
        (WebCore::NetworkJob::sendRequestWithCredentials):
        (WebCore::NetworkJob::handleAbout):
        * platform/network/blackberry/NetworkJob.h:
        (WebCore::NetworkJob::isError):
        (NetworkJob):
        * platform/network/blackberry/NetworkManager.cpp:
        (WebCore::NetworkManager::startJob):
        * platform/network/blackberry/ResourceRequest.h:
        (WebCore::ResourceRequest::ResourceRequest):
        * platform/network/blackberry/ResourceRequestBlackBerry.cpp:
        (WebCore::platformTargetTypeForRequest):

2012-03-22  Tom Sepez  <tsepez@chromium.org>

        XSS Auditor bypass via script tag src=data:, URLS.
        https://bugs.webkit.org/show_bug.cgi?id=81948

        Reviewed by Adam Barth.

        This change fixes an XSSAuditor bypass wherby a script with a data: URL src
        attribute could evade detection by using characters from the page to create
        a snippet for matching not found in the URL's reflected vector.  This change 
        terminates the snippet for matching earlier in these cases.
        
        Test: http/tests/security/xssAuditor/script-tag-with-source-data-url2.html

        * html/parser/XSSAuditor.cpp:
        (WebCore::XSSAuditor::decodedSnippetForAttribute):

2012-03-22  Dana Jansens  <danakj@chromium.org>

        [chromium] Incorrect assert on animating opacity for a surface
        https://bugs.webkit.org/show_bug.cgi?id=81994

        Reviewed by Adrienne Walker.

        Draw opacity and animation state match on the surface itself. A
        surface with animating opacity always has an owning layer without
        animation, as the surface does the animation for it.

        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintLayerContents):

2012-03-22  Dana Jansens  <danakj@chromium.org>

        [chromium] Skip frames when checkerboarding an animation
        https://bugs.webkit.org/show_bug.cgi?id=81716

        Reviewed by Adrienne Walker.

        This will stop drawing frames when prepareToDraw fails, if the draw is
        not forced. The expected behaviour is outlined below by the unit tests.

        When a draw fails, we:
        1. Set m_needsRedraw to try again next vsync
        2. Set m_needsCommit because we need more data from webkit to succeed
        3. Set m_drawIfPossibleFailed. This allows us to try draw again within
        the same vsync *if* a commit finishes during this time.

        Unit test: CCSchedulerTest.RequestRedrawInsideFailedDraw
                   CCSchedulerTest.RequestCommitInsideFailedDraw
                   CCSchedulerTest.NoBeginFrameWhenDrawFails
                   CCSchedulerStateMachineTest.TestFailedDrawSetsNeedsCommitAndDoesNotDrawAgain
                   CCSchedulerStateMachineTest.TestSetNeedsRedrawDuringFailedDrawDoesNotRemoveNeedsRedraw
                   CCSchedulerStateMachineTest.TestCommitAfterFailedDrawAllowsDrawInSameFrame
                   CCSchedulerStateMachineTest.TestCommitAfterFailedAndSuccessfulDrawDoesNotAllowDrawInSameFrame
                   CCSchedulerStateMachineTest.TestFailedDrawIsRetriedNextVSync

        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::calculateRenderPasses):
        (WebCore::CCLayerTreeHostImpl::prepareToDraw):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCScheduler.cpp:
        (WebCore::CCScheduler::processScheduledActions):
        * platform/graphics/chromium/cc/CCScheduler.h:
        (CCSchedulerClient):
        * platform/graphics/chromium/cc/CCSchedulerStateMachine.cpp:
        (WebCore::CCSchedulerStateMachine::CCSchedulerStateMachine):
        (WebCore::CCSchedulerStateMachine::nextAction):
        (WebCore::CCSchedulerStateMachine::updateState):
        (WebCore::CCSchedulerStateMachine::didDrawIfPossibleCompleted):
        (WebCore):
        * platform/graphics/chromium/cc/CCSchedulerStateMachine.h:
        (CCSchedulerStateMachine):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwapInternal):
        (WebCore):
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwapIfPossible):
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwapForced):
        * platform/graphics/chromium/cc/CCThreadProxy.h:
        (CCThreadProxy):

2012-03-22  W. James MacLean  <wjmaclean@chromium.org>

        [chromium] Force update of nonFastScrollableRegion if target CCLayerImpl has been freshly created.
        https://bugs.webkit.org/show_bug.cgi?id=81968

        Reviewed by Adrienne Walker.

        Added unit test to existing tests for TreeSynchronizer.

        When creating a new CCLayerImpl during tree synchronization, make sure we transfer the nonFastScrollableRegion as
        the new CCLayerImpl will default to an empty region.

        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::nonFastScrollableRegion):
        (WebCore::LayerChromium::setNonFastScrollableRegionChanged):
        * platform/graphics/chromium/TreeSynchronizer.cpp:
        (WebCore::TreeSynchronizer::reuseOrCreateCCLayerImpl):

2012-03-22  Raphael Kubo da Costa  <rakuco@FreeBSD.org>

        [CMake] Unreviewed build fix after r111778.

        * CMakeLists.txt: Replace ${JAVASCRIPTCORE_DIR}/wtf includes with
        ${WTF_DIR}/wtf ones.

2012-03-22  Tony Chang  <tony@chromium.org>

        Unreviewed, fix chromium build after wtf move.

        Only use newwtf, remove references to wtf.

        * WebCore.gyp/WebCore.gyp:

2012-03-22  Benjamin Poulain  <bpoulain@apple.com>

        Remove an obsolete comment regarding magic frames from Geolocation
        https://bugs.webkit.org/show_bug.cgi?id=81871

        Reviewed by Alexey Proskuryakov.

        Moving a frame into another document is no longer possible after r111361. The comment
        is now irrelevant.

        * Modules/geolocation/Geolocation.cpp:
        (WebCore::Geolocation::stop):

2012-03-22  Csaba Osztrogonác  <ossy@webkit.org>

        Actually move WTF files to their new home
        https://bugs.webkit.org/show_bug.cgi?id=81844

        [Qt] Unreviewed buildfix after r111778.

        * Target.pri:

2012-03-22  Kentaro Hara  <haraken@chromium.org>

        run-bindings-tests output a lot of errors in TestSerializedScriptValueInterface.idl
        https://bugs.webkit.org/show_bug.cgi?id=81852

        Reviewed by Adam Barth.

        run-bindings-tests output a lot of errors in TestSerializedScriptValueInterface.idl:

        Use of uninitialized value in string eq at WebCore/bindings/scripts/CodeGeneratorJS.pm line 2743.
        Use of uninitialized value $name in substitution (s///) at WebCore/bindings/scripts/CodeGenerator.pm line 119.
        Use of uninitialized value $type in string eq at WebCore/bindings/scripts/CodeGeneratorJS.pm line 2969.
        Use of uninitialized value $type in string eq at WebCore/bindings/scripts/CodeGeneratorJS.pm line 2972.
        Use of uninitialized value $type in hash element at WebCore/bindings/scripts/CodeGenerator.pm line 367.
        Use of uninitialized value $type in hash element at WebCore/bindings/scripts/CodeGenerator.pm line 368.
        ...

        This is because [Constructor(...)] does not yet support [Optional] arguments.
        It just supports [Optional=DefaultIsUndefined] and [Optional=DefaultIsNullString] arguments:
        https://trac.webkit.org/wiki/WebKitIDL#Constructor

        This patch replaces [Optional] with [Optional=DefaultIsUndefined]
        in TestSerializedScriptValueInterface.idl.

        Test: bindings/scripts/test/TestSerializedScriptValueInterface.idl

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateConstructorDefinition):
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateConstructorCallback):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::constructJSTestSerializedScriptValueInterface):
        * bindings/scripts/test/TestSerializedScriptValueInterface.idl:
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.cpp:
        (WebCore::V8TestSerializedScriptValueInterface::constructorCallback):

2012-03-22  Michal Mocny  <mmocny@google.com>

        [chromium] LayerRendererChromium should use GpuMemoryAllocationChanged callback to explicitly manage framebuffer.
        https://bugs.webkit.org/show_bug.cgi?id=81823

        Reviewed by Adrienne Walker.

        New UnitTests: LayerRendererChromiumTest

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (LayerRendererGpuMemoryAllocationChangedCallbackAdapter):
        (WebCore::LayerRendererGpuMemoryAllocationChangedCallbackAdapter::create):
        (WebCore::LayerRendererGpuMemoryAllocationChangedCallbackAdapter::~LayerRendererGpuMemoryAllocationChangedCallbackAdapter):
        (WebCore::LayerRendererGpuMemoryAllocationChangedCallbackAdapter::onGpuMemoryAllocationChanged):
        (WebCore::LayerRendererGpuMemoryAllocationChangedCallbackAdapter::LayerRendererGpuMemoryAllocationChangedCallbackAdapter):
        (WebCore):
        (WebCore::LayerRendererChromium::LayerRendererChromium):
        (WebCore::LayerRendererChromium::initialize):
        (WebCore::LayerRendererChromium::~LayerRendererChromium):
        (WebCore::LayerRendererChromium::setVisible):
        (WebCore::LayerRendererChromium::swapBuffers):
        (WebCore::LayerRendererChromium::discardFramebuffer):
        (WebCore::LayerRendererChromium::ensureFramebuffer):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore):
        (LayerRendererChromiumClient):
        (LayerRendererChromium):
        (WebCore::LayerRendererChromium::isFramebufferDiscarded):
        (ScopedEnsureFramebufferAllocation):
        (WebCore::ScopedEnsureFramebufferAllocation::ScopedEnsureFramebufferAllocation):
        (WebCore::ScopedEnsureFramebufferAllocation::~ScopedEnsureFramebufferAllocation):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        (WebCore::LayerRendererCapabilities::LayerRendererCapabilities):
        (LayerRendererCapabilities):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::setVisible):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::compositeAndReadback):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::compositeAndReadback):

2012-03-22  Adam Barth  <abarth@webkit.org>

        ContainerNode::insertedIntoTree and removedFromTree use weak iteration patterns
        https://bugs.webkit.org/show_bug.cgi?id=80570

        Reviewed by Ryosuke Niwa.

        These functions use weak iteration patterns, but as far as I can tell,
        we never execute script below these functions.  This patch adds ASSERTs
        to help us avoid adding events in the future.

        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::insertedIntoTree):
        (WebCore::ContainerNode::removedFromTree):
        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::loadInternal):
            - There's a somewhat complex call chain from insertedIntoTree into
              HTMLMediaElement, and somewhat complex control flow below
              loadInternal that eventually leads to the BeforeLoad event being
              fired.  In studying this code, I don't see a way for the
              BeforeLoad event to be fired during insertedIntoTree, but I've
              added this assert here to make sure we don't call loadInternal
              when we're not supposed to dispatch events.  This ASSERT should
              help us catch these BeforeLoad errors more quickly.

2012-03-22  Raphael Kubo da Costa  <rakuco@FreeBSD.org>

        Crash in fast/dom/navigator-detached-nocrash.html
        https://bugs.webkit.org/show_bug.cgi?id=81773

        Reviewed by Adam Barth.

        BatteryManager::create() blindly assumes the Navigator* it
        receives has a valid Frame, which is not always the case, as made
        evident by the crashing test.

        Follow abarth's suggestion and just stop
        NavigatorBattery::webkitBattery() before it reaches the call to
        BatteryManager::create() if that's the case.

        No new tests, covered by fast/dom/navigator-detached-nocrash.html.

        * Modules/battery/NavigatorBattery.cpp:
        (WebCore::NavigatorBattery::webkitBattery):

2012-03-22  Emil A Eklund  <eae@chromium.org>

        Unreviewed, add missing include statement for CSSValueList.h.

        * css/CSSStyleSelector.h:

2012-03-22  Tony Chang  <tony@chromium.org>

        flexbox flexing implementation should match the spec
        https://bugs.webkit.org/show_bug.cgi?id=70796

        Reviewed by Ojan Vafai.

        Match the algorithm in the spec. Handling min/max constraints are slightly improved.
        http://dev.w3.org/csswg/css3-flexbox/#resolve-the-flexible-lengths

        New test cases in css3/flexbox/flex-algorithm-min-max.html.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::adjustFlexSizeForMinAndMax): Step 5 of resolving flexible lengths.
        (WebCore):
        (WebCore::RenderFlexibleBox::Violation::Violation):
        (RenderFlexibleBox::Violation):
        (WebCore::RenderFlexibleBox::freezeViolations): Used by step 6.
        (WebCore::RenderFlexibleBox::resolveFlexibleLengths):
        * rendering/RenderFlexibleBox.h:

2012-03-22  Emil A Eklund  <eae@chromium.org>

        Unreviewed, add missing import.

        * rendering/RenderThemeMac.mm:

2012-03-22  Anders Carlsson  <andersca@apple.com>

        ASSERT(!needsLayout) in RenderView.cpp when visiting http://www.panic.com/blog/
        https://bugs.webkit.org/show_bug.cgi?id=81953
        <rdar://problem/11086998>

        Reviewed by Sam Weinig.

        If a page ends up creating CATiledLayers, CA transactions can be committed outside of the normal
        CA run loop observer, so we can't call setNeedsDisplay on tile cache layers directly because then
        we'll end up calling into painting code before all the layers have been flushed.

        Fix this by adding a list of dirty rects to platformCALayerDidCreateTiles and change GraphicsLayerCA to
        mark them as dirty. This ensures that any CA transaction commits won't cause newly added layers to be painted.

        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.cpp:
        (WebCore::LayerClient::platformCALayerDidCreateTiles):
        * platform/graphics/ca/GraphicsLayerCA.cpp:
        (WebCore::GraphicsLayerCA::platformCALayerDidCreateTiles):
        * platform/graphics/ca/GraphicsLayerCA.h:
        (GraphicsLayerCA):
        * platform/graphics/ca/PlatformCALayerClient.h:
        (PlatformCALayerClient):
        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::setScale):
        (WebCore::TileCache::revalidateTiles):
        * platform/graphics/win/MediaPlayerPrivateQuickTimeVisualContext.cpp:
        (WebCore::MediaPlayerPrivateQuickTimeVisualContext::LayerClient::platformCALayerDidCreateTiles):

2012-03-19  Robert Hogan  <robert@webkit.org>

        Text should overflow when list item height set to 0
        https://bugs.webkit.org/show_bug.cgi?id=78726

        Reviewed by Julien Chaffraix.

        Tests: css2.1/20110323/height-applies-to-010a-expected.html
               fast/css/heightless-list-item-expected.html
               fast/css/heightless-list-item.html

        * rendering/RenderListItem.cpp:
        (WebCore::RenderListItem::paint):
           If the list item has height:0, only paint it if the list item allows any block or inline content 
           to overflow unclipped. The zero-height check is a shortcut to avoid unnecessary painting and 
           this seems to be the only case where there's something to do.

2012-03-22  Dave Michael  <dmichael@chromium.org>

        HTMLPluginElement is not destroyed on reload or navigation if getNPObject is called
        https://bugs.webkit.org/show_bug.cgi?id=80428

        Reviewed by Eric Seidel.

        Make HTMLPluginElement release its m_NPObject in detach() to break a
        reference-counting cycle that happens on reload or navigation. With this
        change, HTMLPlugInElement::removedFromDocument is unnecessary, so it
        was removed. Note that Releasing m_NPObject does not result in a call to
        the plugin; it simply releases a reference count on the wrapper object
        for this HTMLPlugInElement. (The plugin's NPP_Deallocate is invoked
        when the render tree is destroyed, when PluginView calls
        PluginPackage::unload.) Thus, it is safe to release m_NPObject in
        detach, because it can not result in layout or style changes.

        Also added numberOfLiveNodes() and numberOfLiveDocuments() to
        window.internals to enable testing.

        Test: plugins/netscape-dom-access-and-reload.html

        * WebCore.exp.in:
        * html/HTMLPlugInElement.cpp:
        (WebCore::HTMLPlugInElement::detach):
        * html/HTMLPlugInElement.h:
        (HTMLPlugInElement):
        * testing/Internals.cpp:
        (WebCore::Internals::numberOfLiveDocuments):
        (WebCore::Internals::numberOfLiveNodes):
        (WebCore):
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-22  Shawn Singh  <shawnsingh@chromium.org>

        [chromium] Make CCDamageTracker robust to empty layer lists
        https://bugs.webkit.org/show_bug.cgi?id=81831

        Reviewed by Adrienne Walker.

        Added a unit test in CCDamageTrackerTest that causes a crash in
        the old code. With this patch applied, the crash will not occur.
        In theory, that crash should never occur anyway, unless there is a
        bug outside the damage tracker, but for robustness it's
        appropriate to handle it properly.

        In addition to this fix, performed some trivial maintenance on the
        damage tracker code.

        * platform/graphics/chromium/cc/CCDamageTracker.cpp:
        (WebCore::CCDamageTracker::updateDamageTrackingState): removed
        unclean code that accessed the targetSurface to get necessary
        information. Instead, we now pass those args through the damage
        tracker's API.

        * platform/graphics/chromium/cc/CCDamageTracker.h:
        (CCDamageTracker): modified args passed to damage tracker on update.

        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::trackDamageForAllSurfaces):
        modified args passed to damage tracker on update.

2012-03-22  Julien Chaffraix  <jchaffraix@webkit.org>

        Enable style sharing for elements with a style attribute
        https://bugs.webkit.org/show_bug.cgi?id=81523

        Reviewed by Antti Koivisto.

        Memory improvement change only.

        Overall, this is a performance wash (some benchmarks may regress a bit due to the increase in time taken
        by CSSStyleSelector::locateSharedStyle as we try more nodes, others increase their performance due to style sharing).

        Instrumenting our style sharing, this should give us some nice memory shavings on some benchmarks:
        - HTML5 isn't impacted as it doesn't use much inline style
        - page cyclers' intl1 showed a 6% increase in style sharing.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::canShareStyleWithElement):
        This method now handles inline style like presentation attributes on the element.

        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        (WebCore::CSSStyleSelector::locateSharedStyle):
        Don't bail out for an element with an inline style declaration.

        (WebCore::CSSStyleSelector::stylesEqual):
        Generalized attributeStylesEqual to share the logic between attribute and
        inline style property set. This means that attribute checks are actually
        doing a little extra more work but that didn't impact our benchmarks.

2012-03-22  Kevin Ollivier  <kevino@theolliviers.com>

        [wx] Unreviewed. WebDOM build fix after array type changes.

        * bindings/scripts/CodeGeneratorCPP.pm:
        (ShouldSkipType):

2012-03-22  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: text gutter decorations should move upon edits.
        https://bugs.webkit.org/show_bug.cgi?id=81932

        Reviewed by Vsevolod Vlasov.

        Decorations set by the line number now shift as editing inserts / removes lines.

        * inspector/front-end/TextViewer.js:
        (WebInspector.TextViewer.prototype._syncLineHeight):
        (WebInspector.TextEditorGutterPanel):
        (WebInspector.TextEditorGutterPanel.prototype.textChanged):
        (WebInspector.TextEditorGutterPanel.prototype.syncClientHeight):
        (WebInspector.TextEditorGutterPanel.prototype.addDecoration):
        (WebInspector.TextEditorGutterPanel.prototype.removeDecoration):

2012-03-21  Robert Hogan  <robert@webkit.org>

        CSS 2.1 failure: fixed-table-layout-006 fails
        https://bugs.webkit.org/show_bug.cgi?id=78412

        Reviewed by Julien Chaffraix.

        Tests: css2.1/20110323/fixed-table-layout-006.htm
               fast/css/fixed-table-layout-cell-padding.htm

        In fixed tables, positive width specified on a column should include borders and padding.
        See the thread at http://lists.w3.org/Archives/Public/www-style/2011Oct/0502.html. The discussion
        there resulted in a whole new set of tests for section 17.5.2.1 in the CSS 2.1 spec. See 
        http://test.csswg.org/harness/test/CSS21_DEV/section/17.5.2.1/. This patch allows WebKit
        to pass all of them, and all tests for the 17.5.2.1 section as a whole. I'll land them all separately.
    
        * rendering/FixedTableLayout.cpp:
        (WebCore::FixedTableLayout::calcWidthArray): Include border width and cell padding in the width of the column.
         Note that borderAndPaddingLogicalWidth() returns the border width for separate and collapsed borders as appropriate.

2012-03-22  Simon Fraser  <simon.fraser@apple.com>

        Factor compositing layer updates after scroll into a new method
        https://bugs.webkit.org/show_bug.cgi?id=81943

        Reviewed by Dean Jackson.

        Move some code that updates compositing layers after scrolling
        into its own method, for cleanliness.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::scrollTo):
        (WebCore::RenderLayer::updateCompositingLayersAfterScroll):
        (WebCore):
        * rendering/RenderLayer.h:
        (RenderLayer):

2012-03-22  Gavin Barraclough  <barraclough@apple.com>

        Add JSValue::isFunction
        https://bugs.webkit.org/show_bug.cgi?id=81935

        Reviewed by Geoff Garen.

        This would be useful in the WebCore bindings code.
        Also, remove asFunction, replace with jsCast<JSFunction*>.

        * bindings/js/JSInjectedScriptHostCustom.cpp:
        (WebCore::JSInjectedScriptHost::functionDetails):
        * bindings/js/ScriptCallStackFactory.cpp:
        (WebCore::createScriptCallStack):

2012-03-22  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        TiledBackingStore: Fix test regressions that appeared with r111560.
        https://bugs.webkit.org/show_bug.cgi?id=81519

        Reviewed by Kenneth Rohde Christiansen.

        The visible rect wasn't intersected with the contents rect anymore which
        could lead to an astronomical layer size to check for intersecting tiles.

        Add a visibleContentsRect that doesn't do the conversion and use it
        in visibleAreaIsCovered.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::visibleContentsRect):
        (WebCore):
        (WebCore::TiledBackingStore::visibleRect):
        (WebCore::TiledBackingStore::visibleAreaIsCovered):
        * platform/graphics/TiledBackingStore.h:
        (TiledBackingStore):

2012-03-22  Joe Thomas  <joethomas@motorola.com>

        Make Length Calculation functions non-inline
        https://bugs.webkit.org/show_bug.cgi?id=81733

        Currently length calculation functions in LengthFunctions.h are inline. These functions are pretty big to be inline.
        And these functions are expected to grow again when new length units will be introduced in bug 27160.

        A decent rule of thumb is to not inline a function if it is more than 10 lines long. Also it's typically not cost effective to inline
        functions with loops or switch statements. (Reference: http://google-styleguide.googlecode.com/svn/trunk/cppguide.xml#Inline_Functions).

        Ran PerformanceTests/Parser/html5-full-render.html on Mac Snow-Leopard with and without the patch and did not see much performance difference.

        Reviewed by Antti Koivisto.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * css/LengthFunctions.cpp: Added.
        (WebCore):
        (WebCore::miminumValueForLength):
        (WebCore::valueForLength):
        (WebCore::floatValueForLength):
        * css/LengthFunctions.h:
        (WebCore):

2012-03-22  Alexis Menard  <alexis.menard@openbossa.org>

        Increase code sharing between CSSParser and CSSPropertyLonghand.
        https://bugs.webkit.org/show_bug.cgi?id=81587

        Reviewed by Antti Koivisto.

        Expose the longhands declaration for a given shorthand in CSSPropertyLonghand and
        make CSSParser use them. It will make the declaration of longhands in one place only.
        Remove the map of CSSPropertyLonghand and replace it by a regular switch/case.
        The map doesn't bring much here and it's cleaner and faster to use the switch.
        It also shows a little performance improvement in CSS/CSSPropertySetterGetter.html.

        No new tests : no behavior change.

        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::CSSParser::parseAnimationShorthand):
        (WebCore::CSSParser::parseTransitionShorthand):
        (WebCore::CSSParser::parseShorthand):
        Modify the prototype of this function to directly use the CSSPropertyLonghand.
        * css/CSSParser.h:
        (WebCore):
        (CSSParser):
        * css/CSSPropertyLonghand.cpp:
        (WebCore):
        (WebCore::backgroundLonghand):
        (WebCore::backgroundPositionLonghand):
        (WebCore::backgroundRepeatLonghand):
        (WebCore::borderLonghand):
        (WebCore::borderBottomLonghand):
        (WebCore::borderColorLonghand):
        (WebCore::borderImageLonghand):
        (WebCore::borderLeftLonghand):
        (WebCore::borderRadiusLonghand):
        (WebCore::borderRightLonghand):
        (WebCore::borderSpacingLonghand):
        (WebCore::borderStyleLonghand):
        (WebCore::borderTopLonghand):
        (WebCore::borderWidthLonghand):
        (WebCore::listStyleLonghand):
        (WebCore::fontLonghand):
        (WebCore::marginLonghand):
        (WebCore::outlineLonghand):
        (WebCore::overflowLonghand):
        (WebCore::paddingLonghand):
        (WebCore::webkitAnimationLonghand):
        (WebCore::webkitBorderAfterLonghand):
        (WebCore::webkitBorderBeforeLonghand):
        (WebCore::webkitBorderEndLonghand):
        (WebCore::webkitBorderStartLonghand):
        (WebCore::webkitColumnsLonghand):
        (WebCore::webkitColumnRuleLonghand):
        (WebCore::webkitFlexFlowLonghand):
        (WebCore::webkitMarginCollapseLonghand):
        (WebCore::webkitMarqueeLonghand):
        (WebCore::webkitMaskLonghand):
        (WebCore::webkitMaskPositionLonghand):
        (WebCore::webkitMaskRepeatLonghand):
        (WebCore::webkitTextEmphasisLonghand):
        (WebCore::webkitTextStrokeLonghand):
        (WebCore::webkitTransitionLonghand):
        (WebCore::webkitTransformOriginLonghand):
        (WebCore::webkitWrapLonghand):
        (WebCore::longhandForProperty):
        * css/CSSPropertyLonghand.h:
        (WebCore):

2012-03-22  Emil A Eklund  <eae@chromium.org>

        Unreviewed, touching file to force bots to pick up CSS_SHADERS flag change. 

        * css/CSSStyleSelector.h:
        (CSSStyleSelector):

2012-03-22  Xingnan Wang  <xingnan.wang@intel.com>

        ReverbConvolver::latencyFrames() should return 0.
        https://bugs.webkit.org/show_bug.cgi?id=81806

        Reviewed by Chris Rogers.

        * platform/audio/ReverbConvolver.cpp:
        (WebCore::ReverbConvolver::latencyFrames):

2012-03-22  Tony Chang  <tony@chromium.org>

        refactor flexbox in preparation for flex-line-pack
        https://bugs.webkit.org/show_bug.cgi?id=81843

        Reviewed by Ojan Vafai.

        Replace WrapReverseContext with a vector of LineContexts that contain
        the same information, plus values needed for flex-align.

        alignChildren has been moved to after all the lines have been
        positioned. We want to align children after flex-line-pack has changed
        the size of each line to avoid unnecessary layouts.

        Take 2: Remove the assert. If there are no children, then there are no
        flex lines. Instead, assert that child is not null.

        No new tests, just refactoring.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::LineContext::LineContext): New struct,
        holds information needed for wrap-reverse and aligning children.
        (RenderFlexibleBox::LineContext):
        (WebCore::RenderFlexibleBox::layoutFlexItems): alignChildren after layout out all the lines rather than after each line.
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildren): don't alignChildren
        (WebCore::RenderFlexibleBox::alignChildren): align all flex items, not just a line at a time.
        (WebCore::RenderFlexibleBox::flipForWrapReverse): Update to use LineContext
        * rendering/RenderFlexibleBox.h:

2012-03-22  Allan Sandfeld Jensen  <allan.jensen@nokia.com>

        Event dispatching in XMLHttpRequestProgressEventThrottle should go through XMLHttpRequestProgressEventThrottle::dispatchEvent
        https://bugs.webkit.org/show_bug.cgi?id=46743

        Reviewed by Julien Chaffraix
        Based on original patch by Anton D'Auria

        In preparation for platform-specific queuing of XMLHttpRequest events,
        this patch changes all calls to m_target->dispatchEvent to
        XMLHttpRequestProgressEventThrottle::dispatchEvent.
        Currently, we queue only one progress event on suspend() if we have
        throttled progress events. We should be able to queue all XHR events
        that can be generated after suspend(), if the platform network layer
        continues to receive data.
        XMLHttpRequest uses XMLHttpRequestProgressEventThrottle to dispatch only
        download events, so this doesn't change behavior of upload events, which
        aren't throttled or queued.

        * xml/XMLHttpRequest.cpp:
        (WebCore::XMLHttpRequest::callReadyStateChangeListener):
        * xml/XMLHttpRequestProgressEventThrottle.cpp:
        (WebCore::XMLHttpRequestProgressEventThrottle::dispatchReadyStateChangeEvent):
        (WebCore::XMLHttpRequestProgressEventThrottle::dispatchEvent):
        (WebCore::XMLHttpRequestProgressEventThrottle::flushProgressEvent):
        (WebCore::XMLHttpRequestProgressEventThrottle::dispatchPausedEvent):
        (WebCore::XMLHttpRequestProgressEventThrottle::fired):
        * xml/XMLHttpRequestProgressEventThrottle.h:
        (XMLHttpRequestProgressEventThrottle):

2012-03-22  Sudarsana Nagineni  <sudarsana.nagineni@linux.intel.com>

        [EFL] Map BackSpace key code to Unicode value
        https://bugs.webkit.org/show_bug.cgi?id=81130

        Reviewed by Gustavo Noronha Silva.

        Test: fast/events/backspace-navigates-back.html

        * platform/efl/EflKeyboardUtilities.cpp:
        (WebCore::createKeyMap): Map BackSpace to Unicode value

2012-03-22  Abhishek Arya  <inferno@chromium.org>

        Incorrect beforeChild parent calculation in RenderRubyBase::moveChildren.
        https://bugs.webkit.org/show_bug.cgi?id=80297

        Reviewed by Julien Chaffraix.

        beforeChild might share the same anonymous block parent with other previous
        siblings. Before moving the children across ruby bases, we need to make sure
        to split the tree across the beforeChild correctly.

        Test: fast/ruby/ruby-text-before-child-split.html

        * rendering/RenderRubyBase.cpp:
        (WebCore::RenderRubyBase::moveChildren):

2012-03-22  Kristóf Kosztyó  <kkristof@inf.u-szeged.hu>

        [Qt] Fix Qt minimal build after r111692

        Reviewed by Csaba Osztrogonác.

        * bindings/js/JSScriptProfileNodeCustom.cpp:

2012-03-22  Adrienne Walker  <enne@google.com>

        [chromium] Fix scrollbar layers holding onto invalid textures after lost context
        https://bugs.webkit.org/show_bug.cgi?id=81841

        Reviewed by James Robinson.

        Unit test: CCLayerTreeHostImplTest.scrollbarLayerLostContext

        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.cpp:
        (WebCore::CCScrollbarLayerImpl::willDraw):

2012-03-22  Philippe Normand  <pnormand@igalia.com>

        [GTK] ASSERT bug in WebAudio (AudioFileReader)
        https://bugs.webkit.org/show_bug.cgi?id=81777

        Reviewed by Martin Robinson.

        * platform/audio/gstreamer/AudioFileReaderGStreamer.cpp:
        (WebCore::AudioFileReader::decodeAudioForBusCreation): Don't steal
        the GstBus floating reference.
        (WebCore::AudioFileReader::createBus): Ditto.

2012-03-22  Ilya Tikhonovsky  <loislo@chromium.org>

        Unreviewed: Web Inspector: fix syntax error in text.

        * English.lproj/localizedStrings.js:
        * inspector/front-end/HeapSnapshotProxy.js:
        (WebInspector.HeapSnapshotWorker.prototype._messageReceived):

2012-03-22  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111688.
        http://trac.webkit.org/changeset/111688
        https://bugs.webkit.org/show_bug.cgi?id=81912

        "Heap profiler test fails" (Requested by yurys on #webkit).

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype._buildRetainers):

2012-03-22  Dana Jansens  <danakj@chromium.org>

        [chromium] Early out in a new prepareToDraw() step if checkerboarding an accelerated animation in order to skip the frame
        https://bugs.webkit.org/show_bug.cgi?id=81437

        Reviewed by Adrienne Walker.

        Split CCLayerTreeHostImpl::drawLayers() into two phases:
        prepareToDraw() and drawLayers().

        When calculating a RenderPass, and we checkerboard a quad on a
        layer, bubble this info back up to CCLayerTreeHostImpl. If the
        layer is transforming in an animation, then abort the prepareToDraw()
        phase and cause it to return false back to the thread proxy.

        Unit test: CCLayerTreeHostImplTest.prepareToDrawFailsWhenAnimationUsesCheckerboard

        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::calculateRenderPasses):
        (WebCore::CCLayerTreeHostImpl::prepareToDraw):
        (WebCore):
        (WebCore::CCLayerTreeHostImpl::drawLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        (FrameData):
        * platform/graphics/chromium/cc/CCQuadCuller.cpp:
        (WebCore::CCQuadCuller::append):
        * platform/graphics/chromium/cc/CCQuadCuller.h:
        (CCQuadCuller):
        * platform/graphics/chromium/cc/CCRenderPass.cpp:
        (WebCore::CCRenderPass::appendQuadsForLayer):
        * platform/graphics/chromium/cc/CCRenderPass.h:
        (CCRenderPass):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.cpp:
        (WebCore::CCScrollbarLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.h:
        (CCScrollbarLayerImpl):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::doComposite):
        * platform/graphics/chromium/cc/CCSolidColorLayerImpl.cpp:
        (WebCore::CCSolidColorLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCSolidColorLayerImpl.h:
        (CCSolidColorLayerImpl):
        * platform/graphics/chromium/cc/CCTextureLayerImpl.cpp:
        (WebCore::CCTextureLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCTextureLayerImpl.h:
        (CCTextureLayerImpl):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwap):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
        (CCTiledLayerImpl):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
        (CCVideoLayerImpl):

2012-03-22  Levi Weintraub  <leviw@chromium.org>

        Correct LayoutUnit usage in Accessibility code
        https://bugs.webkit.org/show_bug.cgi?id=81789

        Reviewed by Eric Seidel.

        Reverting Accessibility hit testing code back to integers. Accessibility hit tests originate from
        the embedder and don't accumulate offsets, so we get nothing from using LayoutUnits, and needlessly
        expose them to the embedder.

        No new tests. No change in behavior.

        * accessibility/AccessibilityListBox.cpp:
        (WebCore::AccessibilityListBox::elementAccessibilityHitTest): See above.
        * accessibility/AccessibilityListBox.h:
        (AccessibilityListBox):
        * accessibility/AccessibilityObject.cpp:
        (WebCore::AccessibilityObject::clickPoint): This value is only ever used to display a context menu,
        which is always done with integer coordinates.
        (WebCore::AccessibilityObject::boundingBoxForQuads): This is a bounding box built from floats. We
        don't pixel snap floats, so we return an integer bounding box.
        (WebCore::AccessibilityObject::elementAccessibilityHitTest): See above.
        (WebCore::AccessibilityObject::scrollToMakeVisible): Pixel snapping the bounding box and simplifying
        up the code to position it at (0,0).
        * accessibility/AccessibilityObject.h:
        (WebCore::AccessibilityObject::accessibilityHitTest): See above.
        (AccessibilityObject):
        (WebCore::AccessibilityObject::pixelSnappedBoundingBoxRect): Convenience method for embedder callers.
        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::visiblePositionForPoint): The point passed in here is comes from
        screen coordinates and originates in embedder code. Reverting it to take an integer.
        (WebCore::AccessibilityRenderObject::accessibilityImageMapHitTest): See above.
        (WebCore::AccessibilityRenderObject::accessibilityHitTest): See above.
        * accessibility/AccessibilityRenderObject.h:
        (AccessibilityRenderObject):
        * accessibility/AccessibilityScrollView.cpp:
        (WebCore::AccessibilityScrollView::accessibilityHitTest): See above.
        * accessibility/AccessibilityScrollView.h:
        (AccessibilityScrollView):
        * accessibility/AccessibilitySlider.cpp:
        (WebCore::AccessibilitySlider::elementAccessibilityHitTest): See above.
        * accessibility/AccessibilitySlider.h:
        (AccessibilitySlider):

2012-03-21  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: HeapProfiler: Heap snapshot worker has to report the errors to the front-end
        https://bugs.webkit.org/show_bug.cgi?id=81804

        Sometimes the worker process of HeapSnapshot does some wrong thing and throw an Exception.
        At this momemnt we have no way to see the error in the front-end.

        Reviewed by Yury Semikhatsky.

        * English.lproj/localizedStrings.js:
        * inspector/front-end/HeapSnapshotProxy.js: check the exception field and dump it into front-end's console.
        (WebInspector.HeapSnapshotWorker.prototype._messageReceived):
        * inspector/front-end/HeapSnapshotWorkerDispatcher.js: catch the exception and transfer it's text to requester's side.
        (WebInspector.HeapSnapshotWorkerDispatcher.prototype.dispatchMessage):

2012-03-22  Carlos Garcia Campos  <cgarcia@bb-webkit-rel-64.local.igalia.com>

        [GTK] Use the angle-bracket form to include wtf headers
        https://bugs.webkit.org/show_bug.cgi?id=81884

        Reviewed by Eric Seidel.

        Use #include <wtf/foo> instead of #include "foo".

        * platform/graphics/freetype/FontPlatformData.h:
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        * platform/gtk/DataObjectGtk.h:
        * platform/network/ResourceHandleInternal.h:
        * platform/network/soup/SocketStreamHandleSoup.cpp:

2012-03-22  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: Case of the elements of the xml document should be shown as it is in the console
        https://bugs.webkit.org/show_bug.cgi?id=81902

        When registering a detached root, DOMAgent always presumes it is a node,
        while it can also be a document.

        Reviewed by Vsevolod Vlasov.

        Test: inspector/console/console-xml-document.html

        * inspector/front-end/ConsoleMessage.js:
        (WebInspector.ConsoleMessageImpl.prototype._formatParameterAsNode):
        * inspector/front-end/DOMAgent.js:
        (WebInspector.DOMAgent.prototype._setDetachedRoot):

2012-03-22  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Introduce ScriptBound/ScriptUnbound events in ScriptMapping.
        https://bugs.webkit.org/show_bug.cgi?id=81904

        Reviewed by Pavel Feldman.

        This is another step on the way to cleaner BreakpointManager logic.
        Here we extract ScriptBound/ScriptUnbound events from UISourceCodeListChanged event.
        This allows us to handle script-uiSourceCode binding separately from
        uiSourceCode creation/deletion and to handle unbinding that was not
        possible at all before.

        * inspector/front-end/CompilerScriptMapping.js:
        (WebInspector.CompilerScriptMapping.prototype._uiSourceCodesForSourceMap):
        (WebInspector.CompilerScriptMapping.prototype.addScript.get this):
        (WebInspector.CompilerScriptMapping.prototype.addScript):
        (WebInspector.CompilerScriptMapping.prototype.reset):
        * inspector/front-end/ResourceScriptMapping.js:
        (WebInspector.ResourceScriptMapping.prototype._uiSourceCodeChanged):
        * inspector/front-end/ScriptMapping.js:
        (WebInspector.MainScriptMapping):
        (WebInspector.MainScriptMapping.prototype._updateLiveLocation):
        (WebInspector.MainScriptMapping.prototype._handleUISourceCodeListChanged):
        (WebInspector.MainScriptMapping.prototype._handleScriptBound):
        (WebInspector.MainScriptMapping.prototype._handleScriptUnbound):
        * inspector/front-end/SnippetsModel.js:
        (WebInspector.SnippetsScriptMapping.prototype.addScript.get this):
        (WebInspector.SnippetsScriptMapping.prototype._snippetAdded):
        (WebInspector.SnippetsScriptMapping.prototype._createUISourceCodeForScript):
        (WebInspector.SnippetsScriptMapping.prototype._snippetRemoved.get this):
        (WebInspector.SnippetsScriptMapping.prototype._snippetRemoved):
        (WebInspector.SnippetsScriptMapping.prototype.reset):

2012-03-22  Vineet Chaudhary  <rgf748@motorola.com>

        https://bugs.webkit.org/show_bug.cgi?id=81893
        Remove custom bindings form ScriptProfileNode.idl of attribute type Array.

        Reviewed by Kentaro Hara.

        Replace [CustomGetter] Array with sequence<ScriptProfileNode>.
        To remove the custom bindings code.

        Test: No new tests. LayoutTests/fast/profiler/* test are enough for this.

        * bindings/js/JSScriptProfileNodeCustom.cpp: Removed custom function.
        (WebCore::JSScriptProfileNode::callUID):
        * bindings/v8/custom/V8ScriptProfileNodeCustom.cpp: Removed custom function.
        (WebCore):
        * inspector/ScriptProfileNode.idl: Replaced Array with sequence<ScriptProfileNode>.

2012-03-22  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: only update timeline overview categories strips when these are visible
        https://bugs.webkit.org/show_bug.cgi?id=81903

        Reviewed by Pavel Feldman.

        - factor out category strips update into a separate method;
        - only invoke it when "Timeline" overview mode is selected.

        * inspector/front-end/TimelineOverviewPane.js:
        (WebInspector.TimelineOverviewPane.prototype._showTimelines):
        (WebInspector.TimelineOverviewPane.prototype.update):
        (WebInspector.TimelineOverviewPane.prototype._updateCategoryStrips):

2012-03-22  Levi Weintraub  <leviw@chromium.org>

        Update LayoutUnit usage in FrameSelection
        https://bugs.webkit.org/show_bug.cgi?id=81754

        Reviewed by Eric Seidel.

        FrameSelection stores its caret and repaint bounds in absolute coordinates. Absolute coordinates
        we treat as pixel values, so this patch changes these values to integers. Sub-pixel precision
        will still be used when these coordinates are passed down and used locally.

        No new tests. No change in behavior.

        * editing/FrameSelection.cpp:
        (WebCore::absoluteCaretY): Uses absolute coordinates, which are ints.
        (WebCore::FrameSelection::modify): Uses absolute coordinates to handle vertical selection
        modification. Sub-pixel precision will be used when these values are converted to local ones.
        (WebCore::CaretBase::absoluteBoundsForLocalRect): Absolute coordinates -> ints.
        (WebCore::FrameSelection::absoluteCaretBounds): Ditto.
        (WebCore::CaretBase::caretRepaintRect): The caret repaint rect is stored in absolute coordinates.
        Reverting the values to ints.
        (WebCore::FrameSelection::recomputeCaretRect): Ditto.
        * editing/FrameSelection.h:
        (FrameSelection):
        * editing/mac/FrameSelectionMac.mm:
        (WebCore::FrameSelection::notifyAccessibilityForSelectionChange): Switching to store absolute
        coordinates as integers.

2012-03-22  Alexei Filippov  <alexeif@chromium.org>

        Web Inspector: Speed up the build retainers phase.
        https://bugs.webkit.org/show_bug.cgi?id=81763

        Replacing the edge iterator with a raw loop makes it
        faster by more than 10 times.

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype._buildRetainers):

2012-03-22  No'am Rosenthal  <noam.rosenthal@nokia.com>

        [Qt][WK2] The background appears to have one extra pixel from the contents
        https://bugs.webkit.org/show_bug.cgi?id=81830

        Reviewed by Kenneth Rohde Christiansen.

        TextureMapperGL applied a 1-offset that was covering for another bug,
        which was already fixed.

        No new tests, this would be tested once we test GL rendering results.

        * platform/graphics/texmap/TextureMapperGL.cpp:
        (WebCore::TextureMapperGLData::SharedGLData::scissorClip):

2012-03-22  W. James MacLean  <wjmaclean@chromium.org>

        Rename touchpad fling curve, add curve parameters to constructor.
        https://bugs.webkit.org/show_bug.cgi?id=81820

        Reviewed by Adrienne Walker.

        Covered by existing unit tests.

        * GNUmakefile.list.am:
        * WebCore.gypi:
        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::fireUpAnAnimation):
        * platform/TouchpadFlingPlatformGestureCurve.cpp: Renamed from Source/WebCore/platform/TouchFlingPlatformGestureCurve.cpp.
        (WebCore):
        (WebCore::TouchpadFlingPlatformGestureCurve::create):
        (WebCore::TouchpadFlingPlatformGestureCurve::TouchpadFlingPlatformGestureCurve):
        (WebCore::TouchpadFlingPlatformGestureCurve::~TouchpadFlingPlatformGestureCurve):
        (WebCore::TouchpadFlingPlatformGestureCurve::apply):
        * platform/TouchpadFlingPlatformGestureCurve.h: Renamed from Source/WebCore/platform/TouchFlingPlatformGestureCurve.h.
        (WebCore):
        (TouchpadFlingPlatformGestureCurve):

2012-03-22  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: make CSS and JavaScript files editable by default.
        https://bugs.webkit.org/show_bug.cgi?id=81787

        Reviewed by Vsevolod Vlasov.

        This change removes cancelEditing and setReadOnly capabilities from source frame.
        It removes dblclick handler as well since one does not need to enter editing mode.
        It also establishes proper content dispatching so that views are updated with the
        resource content. All these are inter-dependent, need to be landed simultaneously.
        Drive-by follow up to the r111675 where range is modified prior to the exiting
        edit mode.

        * inspector/front-end/JavaScriptSourceFrame.js:
        (WebInspector.JavaScriptSourceFrame):
        (WebInspector.JavaScriptSourceFrame.prototype.requestContent):
        (WebInspector.JavaScriptSourceFrame.prototype.afterTextChanged):
        (WebInspector.JavaScriptSourceFrame.prototype.beforeTextChanged):
        (WebInspector.JavaScriptSourceFrame.prototype.didEditContent):
        (WebInspector.JavaScriptSourceFrame.prototype._lineNumberAfterEditing):
        * inspector/front-end/ResourceView.js:
        (WebInspector.ResourceSourceFrame):
        (WebInspector.ResourceSourceFrame.prototype.suggestedFileName):
        (WebInspector.ResourceSourceFrame.prototype._contentChanged):
        (WebInspector.EditableResourceSourceFrame.prototype.canEditSource):
        (WebInspector.EditableResourceSourceFrame.prototype.editContent.callbackWrapper):
        (WebInspector.EditableResourceSourceFrame.prototype.editContent):
        (WebInspector.EditableResourceSourceFrame.prototype._contentChanged):
        * inspector/front-end/ResourcesPanel.js:
        (WebInspector.ResourcesPanel.prototype._innerShowView):
        (WebInspector.FrameResourceTreeElement.prototype._appendRevision):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype.setScriptSourceIsDirty):
        * inspector/front-end/Settings.js:
        (WebInspector.ExperimentsSettings):
        * inspector/front-end/SourceFrame.js:
        (WebInspector.SourceFrame):
        (WebInspector.SourceFrame.prototype.wasShown):
        (WebInspector.SourceFrame.prototype.willHide):
        (WebInspector.SourceFrame.prototype.beforeTextChanged):
        (WebInspector.SourceFrame.prototype.setContent):
        (WebInspector.SourceFrame.prototype.commitEditing):
        (WebInspector.SourceFrame.prototype.didEditContent):
        (WebInspector.SourceFrame.prototype.editContent):
        * inspector/front-end/TextPrompt.js:
        (WebInspector.TextPrompt.prototype._startEditing):
        (WebInspector.TextPrompt.prototype._stopEditing):
        * inspector/front-end/TextViewer.js:
        (WebInspector.TextViewer):
        (WebInspector.TextViewer.prototype._registerShortcuts):
        (WebInspector.TextEditorMainPanel.prototype.handleEnterKey):

2012-03-22  Allan Sandfeld Jensen  <allan.jensen@nokia.com>

        [Qt] Enable FAST_MOBILE_SCROLLING when scrolling is delegated.
        https://bugs.webkit.org/show_bug.cgi?id=81889

        Reviewed by Kenneth Rohde Christiansen.

        On the Qt platform only enable the fast mobile scroll feature when scrolling is delegated.

        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::styleWillChange):

2012-03-22  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: dispatch styleSheetChanged event synchronously.
        https://bugs.webkit.org/show_bug.cgi?id=81892

        Reviewed by Vsevolod Vlasov.

        Today, backend generates stylesheet change event synchronously from within set* command.
        But CSSStyleModel defers its dispatching until the stylesheet content is available. This
        prevents us from ignoring update events from within commands that initiated those updates.

        This change makes stylesheet change event dispatch synchronously and delegates stylesheet
        content fetching to the event client.

        * inspector/front-end/CSSStyleModel.js:
        (WebInspector.CSSStyleModel.prototype._fireStyleSheetChanged):
        (WebInspector.CSSStyleDeclaration.prototype.insertPropertyAt):
        (WebInspector.CSSStyleModelResourceBinding.prototype.setContent):
        (WebInspector.CSSStyleModelResourceBinding.prototype._innerSetContent.callbackWrapper):
        (WebInspector.CSSStyleModelResourceBinding.prototype._innerSetContent):
        (WebInspector.CSSStyleModelResourceBinding.prototype._styleSheetChanged.callback):
        (WebInspector.CSSStyleModelResourceBinding.prototype._styleSheetChanged):
        (WebInspector.CSSStyleModelResourceBinding.prototype._innerStyleSheetChanged):

2012-03-21  Ian Vollick  <vollick@chromium.org>

        [chromium] timing functions are getting incorrectly applied for accelerated css transitions
        https://bugs.webkit.org/show_bug.cgi?id=81692

        Reviewed by Adrienne Walker.

        Tested in CCLayerTreeHostTestAddAnimationWithTimingFunction

        * platform/graphics/chromium/cc/CCLayerAnimationController.cpp:

2012-03-22  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: allow on-hover popover while in edit mode.
        https://bugs.webkit.org/show_bug.cgi?id=81898

        Reviewed by Vsevolod Vlasov.

        This change allows popover while in-edit mode, hides it upon Esc. It also introduces anchorOverride
        concept in ObjectPopoverHelper that allows dynamically switching the anchor (say if we want to highlight anchor itself).

        * inspector/front-end/DetailedHeapshotView.js:
        * inspector/front-end/ElementsPanel.js:
        * inspector/front-end/JavaScriptSourceFrame.js:
        (WebInspector.JavaScriptSourceFrame.prototype._resolveObjectForPopover.showObjectPopover):
        (WebInspector.JavaScriptSourceFrame.prototype._resolveObjectForPopover):
        (WebInspector.JavaScriptSourceFrame.prototype._onKeyDown):
        * inspector/front-end/NetworkPanel.js:
        * inspector/front-end/ObjectPopoverHelper.js:
        (WebInspector.ObjectPopoverHelper.prototype._showObjectPopover.showObjectPopover.):
        (WebInspector.ObjectPopoverHelper.prototype._showObjectPopover):
        * inspector/front-end/Popover.js:
        (WebInspector.PopoverHelper.prototype.isPopoverVisible):
        * inspector/front-end/TimelinePanel.js:

2012-03-22  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: breakpoints should shift when line break is inserted in the middle of the line.
        https://bugs.webkit.org/show_bug.cgi?id=81896

        Reviewed by Vsevolod Vlasov.

        There is a bug that collapses selection prior to exiting change mode, we should never
        collapse edit area prior committing.

        * inspector/front-end/TextEditorModel.js:
        (WebInspector.TextEditorModel.endsWithBracketRegex.):
        * inspector/front-end/TextViewer.js:
        (WebInspector.TextViewer):
        (WebInspector.TextEditorMainPanel.prototype.highlightLine):
        (WebInspector.TextEditorMainPanel.prototype.handleUndoRedo.callback):
        (WebInspector.TextEditorMainPanel.prototype.handleUndoRedo):

2012-03-22  Zoltan Herczeg  <zherczeg@webkit.org>

        Merge SVGImageBufferTools to SVGRenderingContext
        https://bugs.webkit.org/show_bug.cgi?id=81890

        Reviewed by Nikolas Zimmermann.

        Copy the code to SVGRenderingContext and delete
        SVGImageBufferTools[.cpp.h]. Update build systems,
        no functionality change. This is the first step
        towards making SVGImageBufferTools stageful.

        Existing tests cover this issue.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.xcodeproj/project.pbxproj:
        * platform/graphics/filters/FETile.cpp:
        (WebCore::FETile::platformApplySoftware):
        * rendering/svg/RenderSVGAllInOne.cpp:
        * rendering/svg/RenderSVGInlineText.cpp:
        (WebCore::RenderSVGInlineText::computeNewScaledFontForStyle):
        * rendering/svg/RenderSVGResourceClipper.cpp:
        (WebCore::RenderSVGResourceClipper::applyClippingToContext):
        (WebCore::RenderSVGResourceClipper::drawContentIntoMaskImage):
        * rendering/svg/RenderSVGResourceFilter.cpp:
        (WebCore::RenderSVGResourceFilter::applyResource):
        * rendering/svg/RenderSVGResourceGradient.cpp:
        (WebCore::createMaskAndSwapContextForTextGradient):
        (WebCore::clipToTextMask):
        * rendering/svg/RenderSVGResourceMasker.cpp:
        (WebCore::RenderSVGResourceMasker::applyResource):
        (WebCore::RenderSVGResourceMasker::drawContentIntoMaskImage):
        * rendering/svg/RenderSVGResourcePattern.cpp:
        (WebCore::RenderSVGResourcePattern::applyResource):
        (WebCore::RenderSVGResourcePattern::createTileImage):
        * rendering/svg/SVGImageBufferTools.cpp: Removed.
        * rendering/svg/SVGImageBufferTools.h: Removed.
        * rendering/svg/SVGInlineTextBox.cpp:
        * rendering/svg/SVGRenderingContext.cpp:
        (WebCore::currentContentTransformation):
        (WebCore):
        (WebCore::SVGRenderingContext::calculateTransformationToOutermostSVGCoordinateSystem):
        (WebCore::SVGRenderingContext::createImageBuffer):
        (WebCore::SVGRenderingContext::createImageBufferForPattern):
        (WebCore::SVGRenderingContext::renderSubtreeToImageBuffer):
        (WebCore::SVGRenderingContext::clipToImageBuffer):
        (WebCore::SVGRenderingContext::clampedAbsoluteTargetRect):
        (WebCore::SVGRenderingContext::clampedAbsoluteSize):
        (WebCore::SVGRenderingContext::clear2DRotation):
        * rendering/svg/SVGRenderingContext.h:
        (SVGRenderingContext):
        (WebCore::SVGRenderingContext::calculateImageBufferRect):
        * svg/graphics/filters/SVGFEImage.cpp:
        (WebCore::FEImage::platformApplySoftware):

2012-03-22  Hyowon Kim  <hw1008.kim@samsung.com>

        [EFL] Add PageClientEfl to WebCoreSupport.
        https://bugs.webkit.org/show_bug.cgi?id=80748

        Reviewed by Noam Rosenthal.

        * platform/Widget.h: Use PageClientEfl as type for PlatformPageClient.
        (WebCore):
        * platform/graphics/efl/GraphicsContext3DPrivate.cpp:
        (WebCore::GraphicsContext3DPrivate::createSurface): Change the argument type.
        * plugins/efl/PluginViewEfl.cpp:
        (WebCore::PluginView::platformGetValue): Use PageClientEfl.

2012-03-22  Kaustubh Atrawalkar  <kaustubh@motorola.com>

        blur() on shadow host should work when a shadow host contains a focused element in its shadow DOM subtrees
        https://bugs.webkit.org/show_bug.cgi?id=81102

        Reviewed by Hajime Morita.

        This implementation will support blur for a focused element when its shadowHost's blur() is called.
        To achieve this Element::blur() function is modified to blur the focused node in it's treeScope.

        Test: fast/dom/shadow/shadow-root-blur.html

        * dom/Element.cpp:
        (WebCore::Element::blur): Modified to blur current treeScope's focused node.
        * dom/ShadowRoot.h:
        (WebCore::ShadowRoot::activeElement): Rework for code sharing.
        * dom/TreeScope.cpp:
        (WebCore::TreeScope::focusedNode): Added new function to share code for getting focused node.
        * dom/TreeScope.h:
        (TreeScope): New function declartion.
        * html/HTMLDocument.cpp:
        (WebCore::HTMLDocument::activeElement): Rework for code sharing.

2012-03-22  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: RawSourceCode does not need uiSourceCode lists because it never has more than one.
        https://bugs.webkit.org/show_bug.cgi?id=81894

        RawSourceCode never has more than one uiSourceCode, uiSourceCodeList
        are just remains of older implementation. This patch switches RawSourceCode
        and SourceMappings from uiSourceCodeList to uiSourceCode.

        Reviewed by Pavel Feldman.

        * inspector/front-end/RawSourceCode.js:
        (WebInspector.RawSourceCode.prototype.uiSourceCode):
        (WebInspector.RawSourceCode.prototype._saveSourceMapping):
        (WebInspector.RawSourceCode.SourceMapping.prototype.uiLocationToRawLocation):
        (WebInspector.RawSourceCode.SourceMapping.prototype.uiSourceCode):
        (WebInspector.RawSourceCode.PlainSourceMapping):
        (WebInspector.RawSourceCode.PlainSourceMapping.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.PlainSourceMapping.prototype.uiLocationToRawLocation):
        (WebInspector.RawSourceCode.PlainSourceMapping.prototype.uiSourceCode):
        (WebInspector.RawSourceCode.FormattedSourceMapping):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.uiLocationToRawLocation):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.uiSourceCode):
        * inspector/front-end/ResourceScriptMapping.js:
        (WebInspector.ResourceScriptMapping.prototype.uiSourceCodeList):
        (WebInspector.ResourceScriptMapping.prototype.addScript):
        (WebInspector.ResourceScriptMapping.prototype._handleUISourceCodeChanged):
        (WebInspector.ResourceScriptMapping.prototype._uiSourceCodeChanged):
        (WebInspector.ResourceScriptMapping.prototype.reset):

2012-03-22  Mario Sanchez Prada  <msanchez@igalia.com>

        [GTK] Fix the only remaining coding style issue in GTK accessibility code
        https://bugs.webkit.org/show_bug.cgi?id=81885

        Reviewed by Xan Lopez.

        Add needed extra line and remove an unneeded one.

        * accessibility/gtk/AccessibilityObjectAtk.cpp:

2012-03-22  Kent Tamura  <tkent@chromium.org>

        Expand RenderTextControlSingleLine::controlClipRect() to contain contentRect().
        https://bugs.webkit.org/show_bug.cgi?id=81866

        Reviewed by Hajime Morita.

        We need to expand the controlClipRect because the existing shadow
        tree of a text field can be wrapped by another shadow tree. e.g.

        A current situation:

        <input>
          ┗ ShadowRoot
             ┗ container element
        ┌────────────┐<input>'s border box
        │┌──────────┐│
        ││container box       ││
        │└──────────┘│
        └────────────┘

        Wrapped by another ShadowRoot:

        <input>
          ┗ New ShadowRoot
             ┣ <shadow> represents the existing shadow tree
             ┃  ┗ container element
             ┗ D: an additional decoration element
        ┌────────────┐<input>'s border box
        │┌───────┬──┐│
        ││container box │ D  ││
        │└───────┴──┘│
        └────────────┘
        In this case, if we clip child renderers by container box, D is not
        drawn. We should clip by the content box of the <input>.

        A search field has an exceptional behavior. It can have the container
        box of which height is taller than the content box height. The
        controlClipRect should contain both of the container box and the content
        box in this case. In other cases, the container box is equivalent to the
        content box. So the code always unites them.

        No new tests. This won't make any behavior change for now.

        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::controlClipRect):

2012-03-22  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] The option element should not be form associated element.
        https://bugs.webkit.org/show_bug.cgi?id=79764

        Reviewed by Kent Tamura.

        This patch changes base class of HTMLOptionELement to HTMLElement
        from HTMLFormControlElement for saving memory space and iteration
        time of extra "option" elements in HTMLFormElement::m_formAssociatedElements
        and matching the HTML5 specification for ease of maintenance.

        This patch changes behavior of handling of CSS pseudo classes "invalid"
        and "valid". The "option" elements no longer use these CSS pseudo classes
        as HTML5 specification. This bug was filed in https://bugs.webkit.org/show_bug.cgi?id=80088

        Changes of TextIterator is lead by usage of isFormControlElement. This
        changes will be replaced with more meaningful predicate as part of
        https://bugs.webkit.org/show_bug.cgi?id=80381

        No new tests but updated select-live-pseudo-selectors.html test.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::canShareStyleWithElement): Added checking of the "option" element and returns false as HTMLFormControlElement.
        * css/SelectorChecker.cpp:
        (WebCore::SelectorChecker::checkOneSelector): Removed isFormControlElement for PseudoDisabled and PseudoChecked.
        * html/HTMLKeygenElement.cpp:
        (WebCore::HTMLKeygenElement::HTMLKeygenElement): Removed form parameter of call site of HTMLOptionElement::create.
        * html/HTMLOptionElement.cpp:
        (WebCore::HTMLOptionElement::HTMLOptionElement): Removed form parameter which no longer needed. Changed base class in initialization list. Added m_disabled initialization.
        (WebCore::HTMLOptionElement::create): Removed form parameter which no longer needed.
        (WebCore::HTMLOptionElement::attach): Changeid base class.
        (WebCore::HTMLOptionElement::detach): Changed base class.
        (WebCore::HTMLOptionElement::parseAttribute): Changed base class. Added "disabled" attribute handling.
        (WebCore::HTMLOptionElement::childrenChanged): Changed base class.
        (WebCore::HTMLOptionElement::insertedIntoTree): Changed base class.
        * html/HTMLOptionElement.h:
        (HTMLOptionElement): Added new member variable m_disabled which was in HTMLFormControlElement.
        (WebCore::HTMLOptionElement::ownElementDisabled): Changed for using m_disabled.
        * html/HTMLTagNames.in: Removed constructorNeedsFormElement for the "option" element, which was used for passing form parameter to create function.

2012-03-21  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: rename ClosureCompilerSourceMapping to SourceMapParser and move it to CompilerScriptMapping.js.
        https://bugs.webkit.org/show_bug.cgi?id=81780

        Reviewed by Pavel Feldman.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/compile-front-end.py:
        * inspector/front-end/CompilerScriptMapping.js:
        (WebInspector.CompilerScriptMapping.prototype.loadSourceMapForScript):
        (WebInspector.SourceMapParserPayload):
        (WebInspector.SourceMapParser):
        (WebInspector.SourceMapParser.prototype.load):
        (WebInspector.SourceMapParser.prototype.compiledLocationToSourceLocation):
        (WebInspector.SourceMapParser.prototype.sourceLocationToCompiledLocation):
        (WebInspector.SourceMapParser.prototype.sources):
        (WebInspector.SourceMapParser.prototype.loadSourceCode):
        (WebInspector.SourceMapParser.prototype._findMapping):
        (WebInspector.SourceMapParser.prototype._parseMappingPayload):
        (WebInspector.SourceMapParser.prototype._parseSections):
        (WebInspector.SourceMapParser.prototype._parseMap):
        (WebInspector.SourceMapParser.prototype._isSeparator):
        (WebInspector.SourceMapParser.prototype._decodeVLQ):
        (WebInspector.SourceMapParser.prototype._canonicalizeURL):
        (WebInspector.SourceMapParser.StringCharIterator):
        (WebInspector.SourceMapParser.StringCharIterator.prototype.next):
        (WebInspector.SourceMapParser.StringCharIterator.prototype.peek):
        (WebInspector.SourceMapParser.StringCharIterator.prototype.hasNext):
        * inspector/front-end/CompilerSourceMapping.js: Removed.
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/inspector.html:

2012-03-21  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: IndexedDB transaction is not closed when requesting data.
        https://bugs.webkit.org/show_bug.cgi?id=81837

        Reviewed by Pavel Feldman.

        * inspector/InspectorIndexedDBAgent.cpp: Added missing IDBCursorBackendInterface::postSuccessHandlerCallback() call.
        (WebCore):

2012-03-21  Yury Semikhatsky  <yurys@chromium.org>

        Web Inspector: event listeners section is broken for about:blank page
        https://bugs.webkit.org/show_bug.cgi?id=81795

        Parse about:blank as a valid URL.

        Reviewed by Pavel Feldman.

        Test: inspector/elements/event-listeners-about-blank.html

        * inspector/front-end/utilities.js:
        (String.prototype.asParsedURL):

2012-03-21  Dan Bernstein  <mitz@apple.com>

        REGRESSION (r111635): Assertion failure in RenderFlexibleBox::layoutFlexItems() (!lineContexts.size()) in many flexbox tests
        https://bugs.webkit.org/show_bug.cgi?id=81870

        Reverted r111635, the fix for bug 81843.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::WrapReverseContext::WrapReverseContext):
        (WebCore::RenderFlexibleBox::WrapReverseContext::addCrossAxisOffset):
        (RenderFlexibleBox::WrapReverseContext):
        (WebCore::RenderFlexibleBox::WrapReverseContext::addNumberOfChildrenOnLine):
        (WebCore::RenderFlexibleBox::WrapReverseContext::lineCrossAxisDelta):
        (WebCore::RenderFlexibleBox::layoutFlexItems):
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildren):
        (WebCore::RenderFlexibleBox::alignChildren):
        (WebCore::RenderFlexibleBox::flipForWrapReverse):
        * rendering/RenderFlexibleBox.h:

2012-03-21  Emil A Eklund  <eae@chromium.org>

        Unreviewed change touching CustomFilterProgram.h to try
        to force the chromium-win bots to rebuilt it and pick up
        on the fact that CSS_SHADERS is not set (since r111610). 

        * platform/graphics/filters/CustomFilterProgram.h:

2012-03-21  Vangelis Kokkevis  <vangelis@chromium.org>

        [chromium] FPS counter causes garbage to be displayed at top left corner
        https://bugs.webkit.org/show_bug.cgi?id=81851

        The HUD expects the PlatformCanvas it paints on to be cleared on creation which is
        no longer true after http://src.chromium.org/viewvc/chrome?view=rev&revision=127196 .
        This patch does an explicit clearRect before the HUD contents are painted.

        Reviewed by Adrienne Walker.

        TEST=Manually verified that --show-fps-counter and --show-composited-layer-tree work correctly.

        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
        (WebCore::CCHeadsUpDisplay::draw):

2012-03-21  Ryosuke Niwa  <rniwa@webkit.org>

        Touch a file to make Chromium Windows bots happy.

        * css/CSSValueKeywords.in:

2012-03-19  Igor Oliveira  <igor.o@sisa.samsung.com>

        Every call to RenderObject::setAnimatableStyle() iterates through all m_compositeAnimations: potentially O(N^2)
        https://bugs.webkit.org/show_bug.cgi?id=38025

        Implement updateAnimationTimerForRender. This reduces unnecessary animation
        steps on the current RenderObject by checking the value of timeToNextService
        before starting a new timer.

        Reviewed by Dean Jackson.

        Test: animations/animation-welcome-safari.html

        * page/animation/AnimationController.cpp:
        (WebCore::AnimationControllerPrivate::updateAnimationTimerForRenderer):
        (WebCore):
        (WebCore::AnimationController::updateAnimations):
        * page/animation/AnimationControllerPrivate.h:
        (AnimationControllerPrivate):

2012-03-21  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111616.
        http://trac.webkit.org/changeset/111616
        https://bugs.webkit.org/show_bug.cgi?id=81862

        broke chromium mac (Requested by eae on #webkit).

        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::calculateRenderPasses):
        (WebCore::CCLayerTreeHostImpl::drawLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCQuadCuller.cpp:
        (WebCore::CCQuadCuller::append):
        * platform/graphics/chromium/cc/CCQuadCuller.h:
        (CCQuadCuller):
        * platform/graphics/chromium/cc/CCRenderPass.cpp:
        (WebCore::CCRenderPass::appendQuadsForLayer):
        * platform/graphics/chromium/cc/CCRenderPass.h:
        (CCRenderPass):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.cpp:
        (WebCore::CCScrollbarLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.h:
        (CCScrollbarLayerImpl):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::doComposite):
        * platform/graphics/chromium/cc/CCSolidColorLayerImpl.cpp:
        (WebCore::CCSolidColorLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCSolidColorLayerImpl.h:
        (CCSolidColorLayerImpl):
        * platform/graphics/chromium/cc/CCTextureLayerImpl.cpp:
        (WebCore::CCTextureLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCTextureLayerImpl.h:
        (CCTextureLayerImpl):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwap):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
        (CCTiledLayerImpl):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
        (CCVideoLayerImpl):

2012-03-21  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=80322
        Implement image-set

        Reviewed by Dean Jackson.

        This initial implementation of -webkit-image-set. 
        http://lists.w3.org/Archives/Public/www-style/2012Feb/1103.html
        The idea behind the feature is to allow authors to provide multiple variants 
        of the same image at differing resolutions, and to allow the User Agent to 
        choose the resource that is most appropriate at the time. This patch will 
        choose the most appropriate image based on device scale factor.

        CSSImageSetValue inherits from CSSValueList and behaves a lot like 
        CSSImageValue.
        * WebCore.xcodeproj/project.pbxproj:
        * css/CSSImageSetValue.h: Added.
        (WebCore):
        (CSSImageSetValue):
        (WebCore::CSSImageSetValue::create):
        (WebCore::CSSImageSetValue::isPending):
        (ImageWithScale):
        (WebCore::CSSImageSetValue::compareByScaleFactor):
        * css/CSSImageSetValue.cpp: Added.
        (WebCore):
        (WebCore::CSSImageSetValue::CSSImageSetValue):
        (WebCore::CSSImageSetValue::~CSSImageSetValue):
        (WebCore::CSSImageSetValue::cachedOrPendingImageSet):
        (WebCore::CSSImageSetValue::customCssText):

        fillImageSet() iterates through the value list and turns the information into 
        a sorted Vector of ImageWithScales (which is a struct containing image URLs 
        and scale factors).
        (WebCore::CSSImageSetValue::fillImageSet):

        cachedImageSet() finds which image is most appropriate based on the device 
        scale factor, and it loads only that image. In the future, additional scale 
        factors will be taken into account.
        (WebCore::CSSImageSetValue::bestImageForScaleFactor):
        (WebCore::CSSImageSetValue::cachedImageSet):

        parseImageSet() is called everywhere in the CSSParser that a regular image or 
        generated image can be found.
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::CSSParser::parseContent):
        (WebCore::CSSParser::parseFillImage):
        (WebCore::CSSParser::parseBorderImage):
        (WebCore):
        (WebCore::CSSParser::parseImageSet):
        * css/CSSParser.h:

        Since CSSImageSetValue is implemented as a value list, 
        ApplyPropertyFillLayer::applyValue() needs to be more specific when it's 
        looking for a list of multiple URLs.
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyFillLayer::applyValue):

        Handle image-set as a valid image value.
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * css/CSSStyleSelector.h:
        (CSSStyleSelector):
        * css/CSSValue.cpp:
        (WebCore::CSSValue::cssText):
        (WebCore::CSSValue::destroy):
        * css/CSSValue.h:
        (CSSValue):
        (WebCore::CSSValue::isImageSetValue):

        computeIntrinsicDimensions() now takes an optional scaleFactor parameter that represents the author-enforced "intrinsic" scale factor of the image.
        * loader/cache/CachedImage.cpp:
        (WebCore::CachedImage::computeIntrinsicDimensions):
        * loader/cache/CachedImage.h:
        (CachedImage):
        * platform/graphics/GeneratedImage.h:
        (GeneratedImage):
        * platform/graphics/GeneratorGeneratedImage.cpp:
        (WebCore::GeneratedImage::computeIntrinsicDimensions):
        * platform/graphics/Image.cpp:
        (WebCore::Image::computeIntrinsicDimensions):
        * platform/graphics/Image.h:
        (Image):
        * platform/graphics/cg/PDFDocumentImage.cpp:
        (WebCore::PDFDocumentImage::computeIntrinsicDimensions):
        * platform/graphics/cg/PDFDocumentImage.h:
        (PDFDocumentImage):
        * svg/graphics/SVGImage.cpp:
        (WebCore::SVGImage::computeIntrinsicDimensions):
        * svg/graphics/SVGImage.h:
        (SVGImage):

        Inherits from StyleImage and returns a scaled size for imageSize() and 
        computeIntrinsicDimensions().
        * rendering/style/StyleCachedImageSet.cpp: Added.
        (WebCore):
        (WebCore::StyleCachedImageSet::StyleCachedImageSet):
        (WebCore::StyleCachedImageSet::cssValue):
        (WebCore::StyleCachedImageSet::canRender):
        (WebCore::StyleCachedImageSet::isLoaded):
        (WebCore::StyleCachedImageSet::errorOccurred):
        (WebCore::StyleCachedImageSet::imageSize):
        (WebCore::StyleCachedImageSet::imageHasRelativeWidth):
        (WebCore::StyleCachedImageSet::imageHasRelativeHeight):
        (WebCore::StyleCachedImageSet::computeIntrinsicDimensions):
        (WebCore::StyleCachedImageSet::usesImageContainerSize):
        (WebCore::StyleCachedImageSet::setContainerSizeForRenderer):
        (WebCore::StyleCachedImageSet::addClient):
        (WebCore::StyleCachedImageSet::removeClient):
        (WebCore::StyleCachedImageSet::image):
        * rendering/style/StyleCachedImageSet.h: Added.
        (WebCore):
        (StyleCachedImageSet):
        (WebCore::StyleCachedImageSet::create):
        (WebCore::StyleCachedImageSet::data):
        (WebCore::StyleCachedImageSet::cachedImage):

        Handle image-set.
        * rendering/style/StyleImage.h:
        (WebCore::StyleImage::isCachedImageSet):
        (WebCore::StyleImage::StyleImage):
        (StyleImage):
        * rendering/style/StylePendingImage.h:
        (StylePendingImage):
        (WebCore::StylePendingImage::cssImageSetValue):

2012-03-21  David Barton  <dbarton@mathscribe.com>

        MathML internals - improve naming in RenderMathMLSquareRoot.cpp and RenderMathMLRoot.cpp
        https://bugs.webkit.org/show_bug.cgi?id=81850

        Reviewed by Eric Seidel.

        This prepares these files for bug fixes, and eventually combining their common code. To
        understand this patch, I suggest you start with RenderMathMLSquareRoot.cpp, as it's
        simpler than RenderMathMLRoot.cpp.

        No new tests. LayoutTests/mathml/presentation/roots.xhtml is thorough enough for this.

        * rendering/mathml/RenderMathMLRoot.cpp:
        (WebCore):
        (WebCore::RenderMathMLRoot::addChild):
        (WebCore::RenderMathMLRoot::paint):
        (WebCore::RenderMathMLRoot::layout):
        * rendering/mathml/RenderMathMLRoot.h:
        (WebCore):
        (RenderMathMLRoot):
        * rendering/mathml/RenderMathMLSquareRoot.cpp:
        (WebCore):
        (WebCore::RenderMathMLSquareRoot::paint):
        (WebCore::RenderMathMLSquareRoot::layout):
        * rendering/mathml/RenderMathMLSquareRoot.h:
        (WebCore):
        (RenderMathMLSquareRoot):
        * rendering/mathml/RenderMathMLSubSup.h:
        (WebCore):

2012-03-21  Tony Chang  <tony@chromium.org>

        refactor flexbox in preparation for flex-line-pack
        https://bugs.webkit.org/show_bug.cgi?id=81843

        Reviewed by Ojan Vafai.

        Replace WrapReverseContext with a vector of LineContexts that contain
        the same information, plus values needed for flex-align.

        alignChildren has been moved to after all the lines have been
        positioned. We want to align children after flex-line-pack has changed
        the size of each line to avoid unnecessary layouts.

        No new tests, just refactoring.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::LineContext::LineContext): New struct,
        holds information needed for wrap-reverse and aligning children.
        (RenderFlexibleBox::LineContext):
        (WebCore::RenderFlexibleBox::layoutFlexItems): alignChildren after layout out all the lines rather than after each line.
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildren): don't alignChildren
        (WebCore::RenderFlexibleBox::alignChildren): align all flex items, not just a line at a time.
        (WebCore::RenderFlexibleBox::flipForWrapReverse): Update to use LineContext
        * rendering/RenderFlexibleBox.h:

2012-03-21  Ryosuke Niwa  <rniwa@webkit.org>

        BDI element should have dir=auto by default
        https://bugs.webkit.org/show_bug.cgi?id=68773

        Reviewed by Daniel Bates.

        Treat bdi elements without dir content attribute as if they have dir=auto per spec:
        http://www.whatwg.org/specs/web-apps/current-work/multipage/text-level-semantics.html#the-bdi-element

        The patch tries to encapsulate the logic to look for dir content attribute and dir=auto.

        It also adds HTMLBDIElement interface (binding remains to use HTMLElement) to set
        selfOrAncestorHasDirAutoAttribute flag true by default, which is used by functions like
        directionalityIfhasDirAutoAttribute to look for elements with dir=auto. Since dir=auto-ness of bdi
        elements can be overridden by dir content attribute, we must change and only change the default value.

        Tests: fast/text/international/bdi-dir-default-to-auto-expected.html
               fast/text/international/bdi-dir-default-to-auto.html

        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * html/HTMLBDIElement.h: Added.
        (WebCore):
        (HTMLBDIElement):
        (WebCore::HTMLBDIElement::create):
        (WebCore::HTMLBDIElement::HTMLBDIElement): Sets selfOrAncestorHasDirAutoAttribute to true because
        bdi elements are treated as if it has dir=auto by default.
        * html/HTMLElement.cpp:
        (WebCore::elementAffectsDirectionality): Added. Checks if the specified element is bdi or
        has dir content attribute.
        (WebCore):
        (WebCore::setHasDirAutoFlagRecursively):
        (WebCore::HTMLElement::hasDirectionAuto): Added. Checks if the specified element should be treated
        as if it has dir=auto (bdi or element with dir=auto).
        (WebCore::HTMLElement::directionalityIfhasDirAutoAttribute):
        (WebCore::HTMLElement::adjustDirectionalityIfNeededAfterChildAttributeChanged):
        (WebCore::HTMLElement::adjustDirectionalityIfNeededAfterChildrenChanged):
        * html/HTMLElement.h:
        (HTMLElement):
        * html/HTMLTagNames.in: Use HTMLBDIElement instead of HTMLElement for constructing bdi element
        to set selfOrAncestorHasDirAutoAttribute true but still use HTMLElement for binding.

2012-03-21  Luke Macpherson  <macpherson@chromium.org>

        Use CSSPrimitiveValue::convertToLength() in a few places.
        https://bugs.webkit.org/show_bug.cgi?id=81492

        Reviewed by Eric Seidel.

        No new tests - refactoring only.

        CSSPrimitiveValue::convertToLength() provides the same functionality that is duplicated
        in many places in CSSStyleSelector. This patch removes some of that code duplication.

        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyVerticalAlign::applyValue):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):

2012-03-21  Patrick Gansterer  <paroga@webkit.org>

        Build fix for ENABLE(SVG) && !ENABLE(FILTERS) after r111601.

        * rendering/svg/RenderSVGRoot.cpp:

2012-03-21  Patrick Gansterer  <paroga@webkit.org>

        Build fix for !ENABLE(INSPECTOR) after r104831.

        * bindings/js/ScriptDebugServer.cpp:
        (WebCore::ScriptDebugServer::dispatchDidParseSource):

2012-03-21  Xiaomei Ji  <xji@chromium.org>

        visual word movement: using cache to decrease the number of collectLeafBoxesInLogicalOrder on RootInlineBox
        https://bugs.webkit.org/show_bug.cgi?id=81408

        Reviewed by Ryosuke Niwa.

        Cache logically ordered leaf boxes under a particular root box.
        Also, move 'Vector<UChar, 1024> string' declared in visualWordPosition() to outside of loop (it is always
        clear-ed before use).

        * editing/visible_units.cpp:
        (CachedLogicallyOrderedLeafBoxes): Add class to cache logically ordered leaf boxes under a particular root box.
        (WebCore::CachedLogicallyOrderedLeafBoxes::size):
        (WebCore::CachedLogicallyOrderedLeafBoxes::firstBox):
        (WebCore):
        (WebCore::CachedLogicallyOrderedLeafBoxes::CachedLogicallyOrderedLeafBoxes):
        (WebCore::CachedLogicallyOrderedLeafBoxes::previousTextBox):
        (WebCore::CachedLogicallyOrderedLeafBoxes::nextTextBox):
        (WebCore::CachedLogicallyOrderedLeafBoxes::collectBoxes):
        (WebCore::CachedLogicallyOrderedLeafBoxes::boxIndexInLeaves):
        (WebCore::logicallyPreviousBox): Pass CachedLogicallyOrderedLeafBoxes object around.
        (WebCore::logicallyNextBox):
        (WebCore::wordBreakIteratorForMinOffsetBoundary):
        (WebCore::wordBreakIteratorForMaxOffsetBoundary):
        (WebCore::visualWordPosition):

2012-03-21  Dana Jansens  <danakj@chromium.org>

        [chromium] Early out in a new prepareToDraw() step if checkerboarding an accelerated animation in order to skip the frame
        https://bugs.webkit.org/show_bug.cgi?id=81437

        Reviewed by Adrienne Walker.

        Split CCLayerTreeHostImpl::drawLayers() into two phases:
        prepareToDraw() and drawLayers().

        When calculating a RenderPass, and we checkerboard a quad on a
        layer, bubble this info back up to CCLayerTreeHostImpl. If the
        layer is transforming in an animation, then abort the prepareToDraw()
        phase and cause it to return false back to the thread proxy.

        Unit test: CCLayerTreeHostImplTest.prepareToDrawFailsWhenAnimationUsesCheckerboard

        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::calculateRenderPasses):
        (WebCore::CCLayerTreeHostImpl::prepareToDraw):
        (WebCore):
        (WebCore::CCLayerTreeHostImpl::drawLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        (FrameData):
        * platform/graphics/chromium/cc/CCQuadCuller.cpp:
        (WebCore::CCQuadCuller::append):
        * platform/graphics/chromium/cc/CCQuadCuller.h:
        (CCQuadCuller):
        * platform/graphics/chromium/cc/CCRenderPass.cpp:
        (WebCore::CCRenderPass::appendQuadsForLayer):
        * platform/graphics/chromium/cc/CCRenderPass.h:
        (CCRenderPass):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.cpp:
        (WebCore::CCScrollbarLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.h:
        (CCScrollbarLayerImpl):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::doComposite):
        * platform/graphics/chromium/cc/CCSolidColorLayerImpl.cpp:
        (WebCore::CCSolidColorLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCSolidColorLayerImpl.h:
        (CCSolidColorLayerImpl):
        * platform/graphics/chromium/cc/CCTextureLayerImpl.cpp:
        (WebCore::CCTextureLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCTextureLayerImpl.h:
        (CCTextureLayerImpl):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwap):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
        (CCTiledLayerImpl):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
        (CCVideoLayerImpl):

2012-03-21  Enrica Casucci  <enrica@apple.com>

        WebKitURLWithTitles pasteboard format should support URLs containing Emoji characters.
        https://bugs.webkit.org/show_bug.cgi?id=81835
        <rdar://problem/11082749>

        Reviewed by Brady Eidson.

        When writing the URL in the pasteboard for the WebURLWithTitles format,
        we use the user visible string instead of the original URL.
        In case of URL with Unicode characters, we lose the encoding.
        
        Added TestWebKitAPI test.

        * platform/mac/PasteboardMac.mm:
        (WebCore::writeURLForTypes): Writes to the pasteboard the original URL.

2012-03-21  Levi Weintraub  <leviw@chromium.org>

        Correct LayoutUnit usage in VisiblePosition.cpp
        https://bugs.webkit.org/show_bug.cgi?id=81775

        Reviewed by Eric Seidel.

        Correcting a mismatch between the .h and .cpp for the definition of localCaretRect,
        and properly using LayoutUnits for local coordinates.

        No new tests. No change in behavior.

        * editing/VisiblePosition.cpp:
        (WebCore::VisiblePosition::localCaretRect): Switching to return a LayoutRect, as in the
        header. Local coordinates are in LayoutUnits.
        (WebCore::VisiblePosition::absoluteCaretBounds): Using LayoutRect for the localCaretRect.
        (WebCore::VisiblePosition::lineDirectionPointForBlockDirectionNavigation): Ditto.

2012-03-21  Adam Klein  <adamk@chromium.org>

        "this" argument for MutationCallbacks should be the MutationObserver
        https://bugs.webkit.org/show_bug.cgi?id=81712

        Reviewed by Adam Barth.

        Test: fast/mutation/callback-arguments.html

        * bindings/js/JSCallbackData.cpp:
        (WebCore::JSCallbackData::invokeCallback): Add an overload that takes
        an explicit this argument and have the old method call the new one.
        * bindings/js/JSCallbackData.h:
        (JSCallbackData):
        * bindings/js/JSMutationCallbackCustom.cpp:
        (WebCore::JSMutationCallback::handleEvent): Call the new overload.
        * bindings/v8/custom/V8CustomVoidCallback.cpp:
        (WebCore::invokeCallback): Add an overload that takes an explicit this
        argument and have the old method call the new one.
        * bindings/v8/custom/V8CustomVoidCallback.h:
        (WebCore):
        * bindings/v8/custom/V8MutationCallbackCustom.cpp:
        (WebCore::V8MutationCallback::handleEvent): Call the new overload.

2012-03-21  Alexandru Chiculita  <achicu@adobe.com>

        [CSS Shaders] Make CSS Shaders compile on Chromium
        https://bugs.webkit.org/show_bug.cgi?id=81435

        Reviewed by Stephen White.

        This patch enables the CSS Shaders compile time flag, but keeps the runtime flag disabled.
        The only way to test the functionality now is to use the overridePreference from dump render tree.

        Also part of this patch I fix a layering violation: I removed the "Document" reference from the FECustomFilter.cpp and passed the
        HostWindow directly. There should be no problem when the HostWindow changes, because the RenderLayer and the FECustomFilter
        get recreated anyway.

        No new tests. I've updated the existing custom filter tests to run under Chromium and added the expected results.
        I've just added window.layoutTestController.overridePreference("WebKitCSSCustomFilterEnabled", "1") to force 
        enable the feature at runtime. 

        * loader/cache/CachedResource.cpp: Made CachedResource::ShaderResource report as ResourceRequest::TargetIsSubresource for Chromium.
        (WebCore::cachedResourceTypeToTargetType):

        * platform/graphics/filters/FECustomFilter.cpp:
        (WebCore::FECustomFilter::FECustomFilter): Removed Document and just used the HostWindow directly.
        (WebCore::FECustomFilter::create):
        (WebCore::FECustomFilter::initializeContext):
        (WebCore::FECustomFilter::bindVertexAttribute): There was a typo and instead of using the "size" parameter it always used 4 component attribute.
        Other drivers didn't complain about it, but it was clearly a bug.
        (WebCore::FECustomFilter::bindProgramAndBuffers): Reading the image back from GPU will flip vertically the framebuffer in Chromium. I've flipped the
        projection matrix only on Chromium, so that we get the correct result.

        * rendering/FilterEffectRenderer.cpp:
        (WebCore::FilterEffectRenderer::build): Passing the HostWindow instead of the Document.

2012-03-21  Mark Pilgrim  <pilgrim@chromium.org>

        Realphabetize about webaudio move
        https://bugs.webkit.org/show_bug.cgi?id=81825

        Reviewed by Adam Barth.

        No new tests, all existing tests pass.

        * CMakeLists.txt:

2012-03-21  Anders Carlsson  <andersca@apple.com>

        Evict tiles from pages in background tabs
        https://bugs.webkit.org/show_bug.cgi?id=81829
        <rdar://problem/10866152>

        Reviewed by Andreas Kling.

        When the tile cache for a page is no longer in a window (which happens when it's moved to 
        a background tab), schedule a tile revalidation after 4 seconds. This tile revalidation 
        will ensure that tiles outside of the visible rect will be dropped.

        * platform/graphics/ca/mac/TileCache.h:
        (TileCache):
        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::tileCacheLayerBoundsChanged):
        (WebCore::TileCache::setIsInWindow):
        (WebCore::TileCache::tileCoverageRect):
        (WebCore):
        (WebCore::TileCache::scheduleTileRevalidation):
        (WebCore::TileCache::revalidateTiles):

2012-03-21  Stephen Chenney  <schenney@chromium.org>

        SVG layout leaves objects still needing layout
        https://bugs.webkit.org/show_bug.cgi?id=81006

        Reviewed by Nikolas Zimmermann.

        Change the layout of SVG objects such that resources that trigger
        layout of other objects are handled in a distinct pass, and then
        objects still requiring layout are laid out again.

        Test: svg/custom/delete-text-innerText-crash.html

        * rendering/svg/RenderSVGResourceContainer.cpp:
        (WebCore::RenderSVGResourceContainer::layout):
        * rendering/svg/RenderSVGResourceMarker.cpp:
        (WebCore::RenderSVGResourceMarker::layout):
        * rendering/svg/RenderSVGRoot.cpp:
        (WebCore::RenderSVGRoot::layout):
        (WebCore::RenderSVGRoot::addResourceForClientInvalidation):
        (WebCore):
        * rendering/svg/RenderSVGRoot.h:
        (RenderSVGRoot):

2012-03-21  Tim Horton  <timothy_horton@apple.com>

        Make use of CG rounded-rect primitives
        https://bugs.webkit.org/show_bug.cgi?id=79932
        <rdar://problem/9274953>

        Reviewed by Simon Fraser.

        Portions of patch by Nikolas Zimmermann and Mustafizur Rahaman.

        Dispatch to potentially platform-specific rounded rectangle path
        construction from addPathForRoundedRect. Make use of this to call
        wkCGPathAddRoundedRect on Lion and above, as long as the rounded
        corners are all equivalent.

        The origin of the stroke dash differs between the bezier approach
        and the path added by wkCGPathAddRoundedRect, so Path::addRoundedRect()
        takes a new parameter allowing code which is sensitive to stroke dash
        origin (i.e. SVG) to fall back to the old behavior if need be.

        Make use of the new Path::addRoundedRect() parameter to fall back to
        the old (bezier) rounded-rect behavior when constructing a dashed SVG path,
        in order to continue complying with the spec.

        No new tests, as this is covered by many that use rounded corners,
        and is only a performance improvement.

        * WebCore.exp.in:
        * platform/graphics/Path.cpp:
        (WebCore::Path::addRoundedRect):
        (WebCore):
        (WebCore::Path::addPathForRoundedRect):
        * platform/graphics/Path.h:
        (Path):
        * platform/graphics/cg/PathCG.cpp:
        (WebCore::Path::platformAddPathForRoundedRect):
        (WebCore):
        * platform/mac/WebCoreSystemInterface.h:
        * platform/mac/WebCoreSystemInterface.mm:
        * rendering/svg/SVGPathData.cpp:
        (WebCore::updatePathFromRectElement):

2012-03-21  David Reveman  <reveman@chromium.org>

        [Chromium] GL_EXT_occlusion_query_boolean and GL_CHROMIUM_command_buffer_query support.
        https://bugs.webkit.org/show_bug.cgi?id=80988

        Reviewed by Adrienne Walker.

        Expose EXT_occlusion_query API to WebKit compositor. Add
        GL_EXT_occlusion_query_boolean and GL_CHROMIUM_command_buffer_query
        enums.

        * platform/graphics/chromium/Extensions3DChromium.h:
        (Extensions3DChromium):

2012-03-21  Tony Chang  <tony@chromium.org>

        compute the sign of flexibility for new flexbox
        https://bugs.webkit.org/show_bug.cgi?id=81722

        Reviewed by Ojan Vafai.

        This implements the computation of the sign of flexibility used by the
        new flexing algorithm.
        http://dev.w3.org/csswg/css3-flexbox/#resolve-the-flexible-lengths

        No new tests, we don't use the sign of flexibility yet.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutFlexItems):
        (WebCore::RenderFlexibleBox::computeNextFlexLine): Compute the size
        adjusted for min/max as well as not adjusted.
        (WebCore::RenderFlexibleBox::resolveFlexibleLengths): Renamed to match
        spec text better.
        * rendering/RenderFlexibleBox.h: Added enum for flex sign.

2012-03-21  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Extract WebInspector.UIBreakpoint from WebInspector.Breakpoint.
        https://bugs.webkit.org/show_bug.cgi?id=81669

        Reviewed by Pavel Feldman.

        * inspector/front-end/BreakpointManager.js:
        (WebInspector.BreakpointManager.get for):
        (WebInspector.BreakpointManager):
        (WebInspector.BreakpointManager.prototype.uiSourceCodeAdded):
        (WebInspector.BreakpointManager.prototype.uiSourceCodeRemoved):
        (WebInspector.BreakpointManager.prototype.breakpointsForUISourceCode):
        (WebInspector.BreakpointManager.prototype.setBreakpoint):
        (WebInspector.BreakpointManager.prototype.removeBreakpoint):
        (WebInspector.BreakpointManager.prototype._innerRemoveBreakpoint):
        (WebInspector.BreakpointManager.prototype.removeAllBreakpoints):
        (WebInspector.BreakpointManager.prototype._moveBreakpointInUI):
        (WebInspector.BreakpointManager.prototype._uiBreakpoints.get this):
        (WebInspector.BreakpointManager.prototype._uiBreakpoints):
        (WebInspector.BreakpointManager.prototype.get _uiBreakpoint):
        (WebInspector.BreakpointManager.prototype._addBreakpointToUI):
        (WebInspector.BreakpointManager.prototype._removeBreakpointFromUI):
        (WebInspector.BreakpointManager.prototype._breakpoints):
        (WebInspector.BreakpointManager.prototype._breakpoint):
        (WebInspector.BreakpointManager.prototype._addBreakpointToModel):
        (WebInspector.BreakpointManager.prototype._removeBreakpointFromModel):
        (WebInspector.BreakpointManager.prototype._forEachBreakpoint):
        (WebInspector.BreakpointManager.prototype._setBreakpointInDebugger):
        (WebInspector.BreakpointManager.prototype._removeBreakpointFromDebugger):
        (WebInspector.BreakpointManager.prototype.debuggerReset):
        (WebInspector.Breakpoint.prototype.serialize):
        (WebInspector.Breakpoint.prototype.get uiBreakpoint):
        (WebInspector.Breakpoint.prototype.createUIBreakpoint):
        (WebInspector.Breakpoint.prototype.removeUIBreakpoint):
        (WebInspector.UIBreakpoint):
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype._handleUISourceCodeListChanged):
        (WebInspector.DebuggerPresentationModel.prototype.findBreakpoint):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded):
        (WebInspector.DebuggerPresentationModel.prototype._breakpointRemoved):
        * inspector/front-end/ScriptsPanel.js:

2012-03-21  Anders Carlsson  <andersca@apple.com>

        TileCache needs to know if its containing page is in a window
        https://bugs.webkit.org/show_bug.cgi?id=81821

        Reviewed by Andreas Kling.

        This is in preparation for throwing away invisible tiles in background tabs to reduce memory usage.

        * page/FrameView.cpp:
        (WebCore::FrameView::didMoveOnscreen):
        (WebCore::FrameView::willMoveOffscreen):
        * page/Page.cpp:
        (WebCore::Page::Page):
        (WebCore::Page::didMoveOnscreen):
        (WebCore::Page::willMoveOffscreen):
        * page/Page.h:
        (WebCore::Page::isOnscreen):
        (Page):
        * platform/graphics/TiledBacking.h:
        (TiledBacking):
        * platform/graphics/ca/mac/TileCache.h:
        (TileCache):
        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::TileCache):
        (WebCore::TileCache::setIsInWindow):
        (WebCore):
        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::RenderLayerBacking):

2012-03-21  Xingnan Wang  <xingnan.wang@intel.com>

        Web audio layout test failed in debug with an ASSERT error in ReverbConvolverStage.cpp
        https://bugs.webkit.org/show_bug.cgi?id=81744

        Reviewed by Chris Rogers.

        * platform/audio/ReverbConvolverStage.cpp:
        (WebCore::ReverbConvolverStage::ReverbConvolverStage):

2012-03-21  Xiaomei Ji  <xji@chromium.org>

        [chromium] Font fallback in cr-win is wrong for string contains zero-width-space.
        https://bugs.webkit.org/show_bug.cgi?id=79961

        Reviewed by Adam Barth.

        Treat zero-width-space (\u200B) as true for treatAsZeroWidthSpaceInComplexScipt().

        * platform/graphics/Font.h:
        (WebCore::Font::treatAsZeroWidthSpaceInComplexScript):
        * platform/graphics/mac/ComplexTextController.cpp:
        (WebCore::ComplexTextController::adjustGlyphsAndAdvances):
        * platform/graphics/win/UniscribeController.cpp:
        (WebCore::UniscribeController::shapeAndPlaceItem):

2012-03-21  Patrick Gansterer  <paroga@webkit.org>

        Build fix for !ENABLE(INSPECTOR) after r111005.

        * inspector/ContentSearchUtils.h:

2012-03-21  Ulan Degenbaev  <ulan@chromium.org>

        [V8] V8GCForContextDispose should indicate whether a context is disposed for the main frame or not
        https://bugs.webkit.org/show_bug.cgi?id=81200

        Reviewed by Adam Barth.

        Pass a hint to V8::IdleNotification that requests more aggressive GC
        when a main frame context is disposed and requests incremental GC otherwise.

        * bindings/v8/V8DOMWindowShell.cpp:
        (WebCore::V8DOMWindowShell::disposeContextHandles):
        * bindings/v8/V8GCForContextDispose.cpp:
        (WebCore::V8GCForContextDispose::V8GCForContextDispose):
        (WebCore::V8GCForContextDispose::notifyContextDisposed):
        (WebCore::V8GCForContextDispose::pseudoIdleTimerFired):
        * bindings/v8/V8GCForContextDispose.h:
        (V8GCForContextDispose):

2012-03-21  Nat Duca  <nduca@chromium.org>

        [chromium] CCThreadProxy must initialize frameBeginTime to monotonicallyIncreasingTime rather than zero
        https://bugs.webkit.org/show_bug.cgi?id=81790

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::scheduledActionBeginFrame):

2012-03-21  Xingnan Wang  <xingnan.wang@intel.com>

        Add multichannel support in RealtimeAnalyser
        https://bugs.webkit.org/show_bug.cgi?id=81745

        Reviewed by Chris Rogers.

        * Modules/webaudio/RealtimeAnalyser.cpp:
        (WebCore::RealtimeAnalyser::writeInput):
        (WebCore):

2012-03-21  Eric Carlson  <eric.carlson@apple.com>

        Removing HTMLTrackElement does not delete TextTrack
        https://bugs.webkit.org/show_bug.cgi?id=80873

        Reviewed by Antti Koivisto.

        No new tests, but media/track/track-language-preference.html has been updated
        to test this fix.

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::didAddTrack): Renamed from trackWasAdded.
        (WebCore::HTMLMediaElement::willRemoveTrack): Renamed from trackWasRemoved because it is
        called before the track is removed, to allow the TextTrack to be removed.
        * html/HTMLMediaElement.h:

        * html/HTMLTrackElement.cpp:
        (WebCore::HTMLTrackElement::insertedIntoTree): Renamed from insertedIntoDocument
        (WebCore::HTMLTrackElement::willRemove): Renamed from removedFromDocument.
        * html/HTMLTrackElement.h:

        * html/track/LoadableTextTrack.cpp:
        (WebCore::LoadableTextTrack::trackElementIndex): Don't include tracks that are not in the
        document in the calcualtion.

2012-03-21  Zeno Albisser  <zeno@webkit.org>

        [Qt][Mac] ranlib segfaults when creating symbol tables for libWebCore.a.
        https://bugs.webkit.org/show_bug.cgi?id=81750

        Building WebCore on mac currently creates an archive that is bigger than
        4GB. But ranlib fails to create a symbol table for such a big archive,
        even on 64bit machines.
        Therefore we start using SVGAllInOne.cpp when building debug
        on mac. This reduces the size of the archive by about 300MB.

        Reviewed by Tor Arne Vestbø.

        * Target.pri:

2012-03-21  Tommy Widenflycht  <tommyw@google.com>

        [chromium] MediaStream API (JSEP): Introducing WebSessionDescription and WebIceCandidate
        https://bugs.webkit.org/show_bug.cgi?id=81339

        Reviewed by Adam Barth.

        Not possible to test until the entire JSEP feature is commited.

        * Modules/mediastream/IceCandidate.cpp:
        (WebCore::IceCandidate::toSdp):
        * Modules/mediastream/SessionDescription.cpp:
        (WebCore::SessionDescription::toSdp):
        * platform/mediastream/IceCandidateDescriptor.cpp:
        (WebCore::IceCandidateDescriptor::toSDP):
        * platform/mediastream/IceCandidateDescriptor.h:
        (IceCandidateDescriptor):
        * platform/mediastream/MediaStreamCenter.cpp:
        (WebCore::MediaStreamCenter::constructSDP):
        * platform/mediastream/MediaStreamCenter.h:
        (MediaStreamCenter):
        * platform/mediastream/SessionDescriptionDescriptor.cpp:
        (WebCore::SessionDescriptionDescriptor::SessionDescriptionDescriptor):
        (WebCore::SessionDescriptionDescriptor::toSDP):
        (WebCore::SessionDescriptionDescriptor::initialSDP):
        * platform/mediastream/SessionDescriptionDescriptor.h:
        (SessionDescriptionDescriptor):

2012-03-21  Yuta Kitamura  <yutak@chromium.org>

        Use RFC version of WebSocket protocol by default
        https://bugs.webkit.org/show_bug.cgi?id=81718

        Reviewed by Kent Tamura.

        Flip the default value of Settings::m_useHixie76WebSocketProtocol so WebKit ports will use
        RFC version of WebSocket protocol by default.

        All the existing ports already use the RFC protocol as of now, so this change will not make
        any impact (hopefully).

        No new tests. No change in functionality.

        * page/Settings.cpp:
        (WebCore::Settings::Settings):

2012-03-21  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: only show JS event listeners in Event Listeners tab of Elements panel
        https://bugs.webkit.org/show_bug.cgi?id=81798

        Reviewed by Pavel Feldman.

        * bindings/js/JSInjectedScriptHostCustom.cpp:
        (WebCore::getJSListenerFunctions):
        * bindings/js/ScriptEventListener.cpp:
        (WebCore::eventListenerHandlerBody):
        (WebCore::eventListenerHandlerLocation):
        * bindings/v8/custom/V8InjectedScriptHostCustom.cpp:
        (WebCore::getJSListenerFunctions):
        * inspector/InspectorDOMAgent.cpp:
        (WebCore::InspectorDOMAgent::getEventListeners):

2012-03-21  Andrey Kosyakov  <caseq@chromium.org>

        EventListener::Type enum has unused member InspectorDOMAgentType
        https://bugs.webkit.org/show_bug.cgi?id=81794

        Reviewed by Pavel Feldman.

        * dom/EventListener.h:

2012-03-21  Tom Hudson  <tomhudson@google.com>

        Incremental cleanup of BitmapImage: inlined virtual functions
        https://bugs.webkit.org/show_bug.cgi?id=81688

        Reviewed by James Robinson.

        No change in functionality, so no new tests.

        Move virtual functions defined in headers into .cpp files.

        * WebCore.gypi:
        * platform/graphics/BitmapImage.cpp:
        (WebCore::BitmapImage::isBitmapImage):
        (WebCore):
        (WebCore::BitmapImage::hasSingleSecurityOrigin):
        (WebCore::BitmapImage::nativeImageForCurrentFrame):
        (WebCore::BitmapImage::currentFrameHasAlpha):
        (WebCore::BitmapImage::notSolidColor):
        (WebCore::BitmapImage::decodedSize):
        (WebCore::BitmapImage::mayFillWithSolidColor):
        (WebCore::BitmapImage::solidColor):
        * platform/graphics/BitmapImage.h:
        (BitmapImage):
        * platform/graphics/skia/BitmapImageSingleFrameSkia.cpp: Added.
        (WebCore):
        (WebCore::BitmapImageSingleFrameSkia::isBitmapImage):
        (WebCore::BitmapImageSingleFrameSkia::currentFrameHasAlpha):
        (WebCore::BitmapImageSingleFrameSkia::size):
        (WebCore::BitmapImageSingleFrameSkia::destroyDecodedData):
        (WebCore::BitmapImageSingleFrameSkia::decodedSize):
        (WebCore::BitmapImageSingleFrameSkia::nativeImageForCurrentFrame):
        (WebCore::BitmapImageSingleFrameSkia::notSolidColor):
        * platform/graphics/skia/BitmapImageSingleFrameSkia.h:
        (BitmapImageSingleFrameSkia):

2012-03-21  Alexey Proskuryakov  <ap@apple.com>

        Remove obsolete File attributes
        https://bugs.webkit.org/show_bug.cgi?id=79383

        Reviewed by Hajime Morita.

        * bindings/objc/PublicDOMInterfaces.h:
        * fileapi/File.h:
        * fileapi/File.idl:
        Removed fileName and fileSize, they have different names now.

        * html/FileInputType.cpp:
        (WebCore::FileInputType::appendFormData):
        (WebCore::FileInputType::getTypeSpecificValue):
        (WebCore::FileInputType::defaultToolTip):
        Updated to use new function names.

2012-03-21  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        TiledBackingStore: Create the first round of tiles synchronously after setting the visible rect.
        https://bugs.webkit.org/show_bug.cgi?id=81762

        Reviewed by Kenneth Rohde Christiansen.

        The first round of tiles should cover completely the visible rect.
        Creating the tiles synchronously allows us to get the new tiles immediately
        and prevents an extra AC layers sync to be able to remove the old tiles.

        At some point it might also make sense to remove the tile creation timer
        completely.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::coverWithTilesIfNeeded):

2012-03-19  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        TiledBackingStore: When checking if the visible area is covered, only convert to scaled coordinates once.
        https://bugs.webkit.org/show_bug.cgi?id=81519

        Reviewed by Kenneth Rohde Christiansen.

        Both visibleRect and coverageRatio call mapFromContents on the input rect,
        this woulc cause the coverageRatio to never reach 1.0 when the contents is
        scaled up.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::visibleAreaIsCovered):

2012-03-21  Mao Yujie  <yujie.mao@intel.com>

        MediaStream API: Need to support MediaStream constructor for JSC
        https://bugs.webkit.org/show_bug.cgi?id=78781

        Reviewed by Adam Barth.

        No new tests.

        * Modules/mediastream/DOMWindowMediaStream.idl:
        * bindings/generic/RuntimeEnabledFeatures.h:
        (WebCore::RuntimeEnabledFeatures::webkitMediaStreamEnabled):

2012-03-21  Philip Rogers  <pdr@google.com>

        Skip building resources if SVGTRef is not in a document
        https://bugs.webkit.org/show_bug.cgi?id=81473

        Reviewed by Nikolas Zimmermann.

        We can skip the building of pending resources in SVGTRef if we're not
        yet in a document. This mirrors the nearly identical logic in
        SVGUseElement::buildPendingResource() and
        SVGFEImageElement::buildPendingResource().

        Test: http/tests/svg/tref-adoptNode-crash.html

        * svg/SVGTRefElement.cpp:
        (WebCore::SVGTRefElement::buildPendingResource):

2012-03-21  Sami Kyostila  <skyostil@chromium.org>

        [chromium] Use floating point scroll deltas for layers
        https://bugs.webkit.org/show_bug.cgi?id=81546

        Reviewed by James Robinson.

        Use floating point scroll deltas for layers instead of integral scroll
        deltas. This is because due to page scaling it may be necessary to
        scroll layers in sub-CSS-pixel steps to avoid visible jumps. When the
        floating point scroll offset is committed to the main thread, it is
        truncated to integer, but the fractional part is kept on the CC side to
        make sure fractional scroll offsets are accumulated correctly over
        multiple commits.

        Test: CCLayerTreeHostTestFractionalScroll

        * platform/graphics/FloatPoint.h:
        (WebCore::toSize):
        (WebCore):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::scrollBy):
        (WebCore::CCLayerImpl::setScrollDelta):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (WebCore::CCLayerImpl::scrollDelta):
        (CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::startPageScaleAnimation):
        (WebCore::CCLayerTreeHostImpl::adjustScrollsForPageScaleChange):
        (WebCore::CCLayerTreeHostImpl::processScrollDeltas):
        (WebCore::CCLayerTreeHostImpl::animatePageScale):

2012-03-21  Li Yin  <li.yin@intel.com>

        [WebSocket]The Sec-WebSocket-Accept MUST NOT appear more than once in an HTTP response
        https://bugs.webkit.org/show_bug.cgi?id=81655

        Reviewed by Adam Barth.

        Test: http/tests/websocket/tests/hybi/handshake-fail-by-more-accept-header.html

        * Modules/websockets/WebSocketHandshake.cpp:
        (WebCore::WebSocketHandshake::readHTTPHeaders):

2012-03-21  Alexei Filippov  <alexeif@chromium.org>

        Web Inspector: Speedup heap snapshot loading.
        https://bugs.webkit.org/show_bug.cgi?id=81788

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshotLoader.prototype._parseNodes):

2012-03-21  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: get rid of isInEditMode, use isBeingEdited on particular element.
        https://bugs.webkit.org/show_bug.cgi?id=81766

        Reviewed by Yury Semikhatsky.

        We should check event target and its ancestors for being edited, not use some
        global property. This change also introduces Event.prototype.consume so that we
        were consistently consuming events.

        * inspector/front-end/AdvancedSearchController.js:
        (WebInspector.SearchView.prototype._onKeyDown):
        * inspector/front-end/BreakpointsSidebarPane.js:
        (WebInspector.JavaScriptBreakpointsSidebarPane.prototype._breakpointCheckboxClicked):
        * inspector/front-end/CSSSelectorProfileView.js:
        * inspector/front-end/Checkbox.js:
        (WebInspector.Checkbox.prototype.addEventListener):
        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView.prototype._enterKeyPressed):
        (WebInspector.ConsoleGroup.prototype._titleClicked):
        * inspector/front-end/ContextMenu.js:
        (WebInspector.ContextMenu.prototype.show):
        * inspector/front-end/DataGrid.js:
        (WebInspector.DataGrid.prototype._keyDown):
        * inspector/front-end/DatabaseQueryView.js:
        (WebInspector.DatabaseQueryView.prototype._enterKeyPressed):
        * inspector/front-end/DetailedHeapshotView.js:
        (WebInspector.DetailedHeapshotView.prototype._mouseDownInContentsGrid):
        (WebInspector.DetailedHeapshotView.prototype._startRetainersHeaderDragging):
        (WebInspector.DetailedHeapshotView.prototype._retainersHeaderDragging):
        (WebInspector.DetailedHeapshotView.prototype._endRetainersHeaderDragging):
        * inspector/front-end/Dialog.js:
        (WebInspector.Dialog.prototype._onKeyDown):
        * inspector/front-end/Drawer.js:
        (WebInspector.Drawer.prototype._startStatusBarDragging):
        (WebInspector.Drawer.prototype._statusBarDragging):
        (WebInspector.Drawer.prototype._endStatusBarDragging):
        * inspector/front-end/EventListenersSidebarPane.js:
        (WebInspector.EventListenersSidebarPane.get if):
        * inspector/front-end/HelpScreen.js:
        (WebInspector.HelpScreen.prototype._onKeyDown):
        * inspector/front-end/InspectorView.js:
        (WebInspector.InspectorView.prototype._keyDown):
        * inspector/front-end/MetricsSidebarPane.js:
        (WebInspector.MetricsSidebarPane.prototype._highlightDOMNode):
        * inspector/front-end/NetworkPanel.js:
        * inspector/front-end/Object.js:
        (WebInspector.Event.prototype.preventDefault):
        (WebInspector.Event.prototype.consume):
        * inspector/front-end/ObjectPropertiesSection.js:
        (WebInspector.ObjectPropertyTreeElement.prototype._promptKeyDown):
        * inspector/front-end/ProfileView.js:
        * inspector/front-end/SearchController.js:
        (WebInspector.SearchController.prototype._onKeyDown):
        * inspector/front-end/Section.js:
        (WebInspector.Section.prototype.handleClick):
        * inspector/front-end/Settings.js:
        (WebInspector.ExperimentsSettings):
        * inspector/front-end/SoftContextMenu.js:
        (.WebInspector.SoftContextMenu.prototype.show):
        (.WebInspector.SoftContextMenu.prototype._menuItemMouseDown):
        (.WebInspector.SoftContextMenu.prototype._menuKeyDown):
        (.WebInspector.SoftContextMenu.prototype._discardMenu):
        * inspector/front-end/Spectrum.js:
        (WebInspector.Spectrum.draggable.consume):
        (WebInspector.Spectrum.draggable.start):
        (WebInspector.Spectrum.draggable.stop):
        (WebInspector.Spectrum.draggable):
        (WebInspector.Spectrum.prototype._onKeyDown):
        * inspector/front-end/StylesSidebarPane.js:
        (WebInspector.StylesSidebarPane.muteEventListener):
        (WebInspector.StylesSidebarPane):
        (WebInspector.StylesSidebarPane.prototype.set _createNewRule):
        (WebInspector.StylesSidebarPane.prototype._toggleElementStatePane):
        (WebInspector.StylePropertiesSection.prototype._handleEmptySpaceClick):
        (WebInspector.StylePropertiesSection.prototype._handleSelectorClick):
        (WebInspector.StylePropertyTreeElement.prototype.updateTitle.):
        (WebInspector.StylePropertyTreeElement.prototype):
        * inspector/front-end/TextPrompt.js:
        (WebInspector.TextPrompt.prototype.onKeyDown):
        (WebInspector.TextPromptWithHistory.prototype.defaultKeyHandler):
        (WebInspector.TextPrompt.SuggestBox.prototype._onItemMouseDown):
        * inspector/front-end/TextViewer.js:
        (WebInspector.TextViewer.prototype._handleKeyDown):
        * inspector/front-end/Toolbar.js:
        (WebInspector.ToolbarDropdown.prototype._onKeyDown):
        * inspector/front-end/UIUtils.js:
        (WebInspector.isBeingEdited):
        (WebInspector.startEditing):
        * inspector/front-end/View.js:
        (WebInspector.View.prototype._doLoadCSS):
        * inspector/front-end/WatchExpressionsSidebarPane.js:
        (WebInspector.WatchExpressionsSidebarPane.prototype._addButtonClicked):
        (WebInspector.WatchExpressionsSidebarPane.prototype._refreshButtonClicked):
        * inspector/front-end/inspector.js:
        (WebInspector.documentClick.followLink):
        (WebInspector.documentClick):
        (WebInspector.documentKeyDown):
        (WebInspector.postDocumentKeyDown):
        (WebInspector.addMainEventListeners):
        * inspector/front-end/treeoutline.js:
        (TreeOutline.prototype._treeKeyPress):
        (TreeOutline.prototype._treeKeyDown):
        (TreeOutline.prototype._searchInputKeyDown):
        (TreeElement.treeElementToggled):
        (TreeElement.prototype.selectOnMouseDown):
        * inspector/front-end/utilities.js:
        (Event.prototype.consume):

2012-03-21  Yury Semikhatsky  <yurys@chromium.org>

        Web Inspector: event listener section doesn't show all event listeners of the element ancestors
        https://bugs.webkit.org/show_bug.cgi?id=81782

        Event listeners section now contains all event listeners for the selected
        element ancestors chain (in case option "All Nodes" is selected).

        Reviewed by Pavel Feldman.

        * inspector/InspectorDOMAgent.cpp:
        (WebCore::InspectorDOMAgent::getEventListenersForNode):
        * inspector/front-end/EventListenersSidebarPane.js:
        (WebInspector.EventListenersSidebarPane.prototype.update.callback):
        (WebInspector.EventListenersSidebarPane.prototype.update):
        (WebInspector.EventListenersSidebarPane.prototype):

2012-03-21  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: HeapSnapshot: move all builders and calculation calls to HeapSnapshot._init function.
        https://bugs.webkit.org/show_bug.cgi?id=81784

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype._init):
        (WebInspector.HeapSnapshot.prototype.dispose):
        (WebInspector.HeapSnapshot.prototype._retainersForNode):
        (WebInspector.HeapSnapshot.prototype._dominatedNodesOfNode):
        (WebInspector.HeapSnapshot.prototype._flagsOfNode):
        (WebInspector.HeapSnapshot.prototype.aggregates):
        (WebInspector.HeapSnapshot.prototype._buildRetainers):
        (WebInspector.HeapSnapshot.prototype.get nodeIndexes):

2012-03-21  Jessie Berlin  <jberlin@apple.com>

        WTF headers should be in $(ConfigurationBuildDir)\include\private\wtf, not
        $(ConfigurationBuildDir)\include\private\JavaScriptCore\wtf.
        https://bugs.webkit.org/show_bug.cgi?id=81739

        Reviewed by Dan Bernstein.

        * WebCore.vcproj/WebCore.vcproj:
        Look for AtomicString.cpp, StringBuilder.cpp, StringImpl.cpp, and WTFString.cpp in the wtf
        subdirectory of the build output, not the JavaScriptCore/wtf subdirectory.

2012-03-21  Jonathan Dong  <jonathan.dong@torchmobile.com.cn>

        [BlackBerry] Credential save and autofill implemetation
        https://bugs.webkit.org/show_bug.cgi?id=80401

        Reviewed by Rob Buis.

        Added interface function authenticationChallenge() and
        notifyShouldSaveCredential() into PageClientBlackBerry.
        As this class is our platform specific interface,
        by doing this we don't need to add an interface function
        in class FrameLoaderClient which is a platform
        independent interface.

        No new tests.

        * platform/blackberry/PageClientBlackBerry.h:
        (WebCore):
        * platform/network/blackberry/NetworkJob.cpp:
        (WebCore::NetworkJob::sendRequestWithCredentials):

2012-03-21  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: HeapProfiler: DOM node id can overflow Int32.
        https://bugs.webkit.org/show_bug.cgi?id=81776

        Reviewed by Pavel Feldman.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.Uint32Array):
        (WebInspector.HeapSnapshotLoader.prototype.pushJSONChunk):
        (WebInspector.HeapSnapshot.prototype._buildReverseIndex.var):
        (WebInspector.HeapSnapshot.prototype._buildReverseIndex):
        (WebInspector.HeapSnapshot.prototype._buildNodeIndex):

2012-03-21  Tim Dresser  <tdresser@chromium.org>

        [chromium] Increase size of Combo Box Options for touch and high DPI devices
        https://bugs.webkit.org/show_bug.cgi?id=80027

        Reviewed by Darin Fisher.

        Scale Combo box popups by defaultDeviceScaleFactor, and add padding to
        <option> elements when touch is enabled.

        Manually tested with --default-device-scale-factor=1,2 and unset.
        Each of these were tested with RuntimeEnabledFeatures::touchEnabled
        set to true and false.

        * platform/chromium/PopupListBox.cpp:
        (WebCore::PopupListBox::paint):
        (WebCore::PopupListBox::paintRow):
        (WebCore::PopupListBox::getRowHeight):
        * platform/chromium/PopupListBox.h:
        (PopupContainerSettings):
        * platform/chromium/PopupMenuChromium.cpp:
        (WebCore):
        (WebCore::PopupMenuChromium::show):
        * platform/chromium/PopupMenuChromium.h:
        (WebCore::PopupMenuChromium::optionPaddingForTouch):
        (WebCore::PopupMenuChromium::setOptionPaddingForTouch):
        (PopupMenuChromium):
        * rendering/RenderMenuList.cpp:
        (WebCore::RenderMenuList::showPopup):

2012-03-21  Takashi Toyoshima  <toyoshim@chromium.org>

        [Chromium] [WebSocket] provide WebFrameClient with a chance of
        accessing to opening WebSocketStreamHandle.
        https://bugs.webkit.org/show_bug.cgi?id=78459

        Reviewed by Kent Tamura and Darin Fisher.

        Add willOpenSocketStream client function to WebFrameClient with an
        argument representing an opening SocketStreamHandle.
        These mechanisms provide embedders with a chance to bind arbitrary
        data to a WebSocketStreamHandle from WebFrameClient to which the
        WebSocket object having the WebSocketStreamHandle belongs.

        No new tests because this change just provide mechanisms to embedders.

        * Modules/websockets/WebSocketChannel.cpp: Implement willOpenSocketStream to call a client function in WebFrameClient.
        (WebCore::WebSocketChannel::willOpenSocketStream):
        (WebCore):
        * Modules/websockets/WebSocketChannel.h: Add willOpenSocketStream declaration.
        (WebSocketChannel):
        * loader/FrameLoaderClient.h: Add dispatchWillOpenSocketStream declaration.
        (WebCore):
        (FrameLoaderClient):
        (WebCore::FrameLoaderClient::dispatchWillOpenSocketStream):
        * platform/network/SocketStreamHandleClient.h: Add willOpenSocketStream declaration.
        (WebCore::SocketStreamHandleClient::willOpenSocketStream):

2012-03-21  Vineet Chaudhary  <rgf748@motorola.com>

        https://bugs.webkit.org/show_bug.cgi?id=81761
        Fix Gobject binding for sequence<T> for function return type.

        Reviewed by Kentaro Hara.

        No new tests.

        * bindings/scripts/CodeGeneratorGObject.pm:
        (SkipFunction): Skip function with sequence<T> return type.
        * bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
        (webkit_dom_test_obj_method_with_sequence_arg):
        * bindings/scripts/test/GObject/WebKitDOMTestObj.h:

2012-03-21  Andrey Kosyakov  <caseq@chromium.org>

        Unreviewed build fix for r111529.

        * inspector/InjectedScriptHost.h:
        (WebCore):

2012-03-21  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111497, r111506, r111508, and
        r111513.
        http://trac.webkit.org/changeset/111497
        http://trac.webkit.org/changeset/111506
        http://trac.webkit.org/changeset/111508
        http://trac.webkit.org/changeset/111513
        https://bugs.webkit.org/show_bug.cgi?id=81774

        It broke 2 tests on all platform (Requested by Ossy on
        #webkit).

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * css/SelectorChecker.cpp:
        (WebCore::SelectorChecker::checkOneSelector):
        * html/HTMLKeygenElement.cpp:
        (WebCore::HTMLKeygenElement::HTMLKeygenElement):
        * html/HTMLOptionElement.cpp:
        (WebCore::HTMLOptionElement::HTMLOptionElement):
        (WebCore::HTMLOptionElement::create):
        (WebCore::HTMLOptionElement::attach):
        (WebCore::HTMLOptionElement::detach):
        (WebCore::HTMLOptionElement::formControlType):
        (WebCore):
        (WebCore::HTMLOptionElement::parseAttribute):
        (WebCore::HTMLOptionElement::childrenChanged):
        (WebCore::HTMLOptionElement::insertedIntoTree):
        * html/HTMLOptionElement.h:
        (HTMLOptionElement):
        (WebCore::HTMLOptionElement::ownElementDisabled):
        * html/HTMLTagNames.in:

2012-03-21  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: expose getEventListeners() to console command line API
        https://bugs.webkit.org/show_bug.cgi?id=81658

        Reviewed by Yury Semikhatsky.

        Test: inspector/console/command-line-api-getEventListeners.html

        * bindings/js/JSInjectedScriptHostCustom.cpp:
        (WebCore::JSInjectedScriptHost::functionDetails):
        (WebCore):
        (WebCore::getJSListenerFunctions):
        (WebCore::JSInjectedScriptHost::getEventListeners):
        * bindings/v8/custom/V8InjectedScriptHostCustom.cpp:
        (WebCore::getJSListenerFunctions):
        (WebCore):
        (WebCore::V8InjectedScriptHost::getEventListenersCallback):
        * inspector/InjectedScriptHost.cpp:
        (WebCore::InjectedScriptHost::InjectedScriptHost):
        (WebCore::InjectedScriptHost::disconnect):
        (WebCore::InjectedScriptHost::getEventListenersImpl):
        (WebCore):
        * inspector/InjectedScriptHost.h:
        (WebCore):
        (WebCore::InjectedScriptHost::init):
        (InjectedScriptHost):
        * inspector/InjectedScriptHost.idl:
        * inspector/InjectedScriptSource.js:
        (.):
        * inspector/InspectorController.cpp:
        (WebCore::InspectorController::InspectorController):
        * inspector/InspectorDOMAgent.cpp:
        (WebCore::InspectorDOMAgent::getEventListenersForNode):
        (WebCore::InspectorDOMAgent::getEventListeners):
        (WebCore):
        * inspector/InspectorDOMAgent.h:
        (InspectorDOMAgent):
        * inspector/WorkerInspectorController.cpp:
        (WebCore::WorkerInspectorController::WorkerInspectorController):

2012-03-21  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, rebaselined run-bindings-tests results.

        * bindings/scripts/test/CPP/WebDOMFloat64Array.cpp:
        * bindings/scripts/test/GObject/WebKitDOMFloat64Array.cpp:
        * bindings/scripts/test/GObject/WebKitDOMFloat64ArrayPrivate.h:
        * bindings/scripts/test/ObjC/DOMFloat64Array.mm:

2012-03-21  Ian Vollick  <vollick@chromium.org>

        [chromium] timing functions are getting incorrectly applied for accelerated css transitions
        https://bugs.webkit.org/show_bug.cgi?id=81692

        Reviewed by Adrienne Walker.

        Tested in CCLayerTreeHostTestAddAnimationWithTimingFunction

        * platform/graphics/chromium/cc/CCLayerAnimationController.cpp:

2012-03-21  Allan Sandfeld Jensen  <allan.jensen@nokia.com>

        [Qt] Cookie Jar blocks on fsync in SQLITE
        https://bugs.webkit.org/show_bug.cgi?id=81755

        Reviewed by Simon Hausmann.

        Set PRAGMA synchronous to OFF, which tells SQLITE to never fsync.

        * platform/qt/CookieJarQt.cpp:
        (WebCore::SharedCookieJarQt::ensureDatabaseTable):

2012-03-21  Ian Vollick  <vollick@chromium.org>

        [chromium] Animation events should only be used for synchronizing animation start times
        https://bugs.webkit.org/show_bug.cgi?id=81484

        Reviewed by Adrienne Walker.

        Tested in CCLayerTreeHostTestSynchronizeAnimationStartTimes

        Eliminated animation finished events. Animations will finish naturally on the
        main thread and the final values will be set.

        Animation started events are now also used to synchronize the main thread
        animations' start times with their impl thread equivalents, preventing skew.
        Until main thread animations receive their synchronized start times, they will
        apply their initial values (i.e., they will be paused at time zero). This
        guarantees that we will not jump to the animation's final value on the main
        thread while we wait for the synchronized start time.

        * WebCore.gypi:
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::notifyAnimationStarted):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore):
        (LayerChromium):
        * platform/graphics/chromium/cc/CCActiveAnimation.cpp:
        (WebCore::CCActiveAnimation::CCActiveAnimation):
        * platform/graphics/chromium/cc/CCActiveAnimation.h:
        (CCActiveAnimation):
        (WebCore::CCActiveAnimation::needsSynchronizedStartTime):
        (WebCore::CCActiveAnimation::setNeedsSynchronizedStartTime):
        * platform/graphics/chromium/cc/CCAnimationEvents.cpp: Removed.
        * platform/graphics/chromium/cc/CCAnimationEvents.h:
        (WebCore::CCAnimationStartedEvent::CCAnimationStartedEvent):
        (CCAnimationStartedEvent):
        (WebCore):
        * platform/graphics/chromium/cc/CCLayerAnimationController.cpp:
        (WebCore::CCLayerAnimationController::animate):
        (WebCore::CCLayerAnimationController::notifyAnimationStarted):
        (WebCore):
        (WebCore::CCLayerAnimationController::pushNewAnimationsToImplThread):
        (WebCore::CCLayerAnimationController::startAnimationsWaitingForNextTick):
        (WebCore::CCLayerAnimationController::startAnimationsWaitingForStartTime):
        (WebCore::CCLayerAnimationController::startAnimationsWaitingForTargetAvailability):
        (WebCore::CCLayerAnimationController::purgeFinishedAnimations):
        (WebCore::CCLayerAnimationController::tickAnimations):
        * platform/graphics/chromium/cc/CCLayerAnimationController.h:
        (CCLayerAnimationController):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::updateAnimations):
        (WebCore::CCLayerTreeHost::setAnimationEventsRecursive):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        (CCLayerTreeHost):

2012-03-21  Zeno Albisser  <zeno@webkit.org>

        [Qt][WK2][Mac] MiniBrowser asserts at HashTable.h:480
        https://bugs.webkit.org/show_bug.cgi?id=81113

        The GLContext is created by QWindow/QSurface using
        QOpenGLContext which is implemented using NSOpenGL functions
        on mac. Therefore we should use QOpenGLContext as well when
        querying for the current context. AGL is not supposed
        to be paired with NSOpenGL.
        Altering the typedef for GLContext is fine, since
        the GLContext type is only used as a key in a map.

        Reviewed by Kenneth Rohde Christiansen.

        * platform/graphics/texmap/TextureMapperGL.cpp:
        (SharedGLData):
        (WebCore::TextureMapperGLData::SharedGLData::getCurrentGLContext):

2012-03-21  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: HeapSnapshot: make _bfs twice as fast as the old version.
        https://bugs.webkit.org/show_bug.cgi?id=81756

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype._calculateObjectToWindowDistance):
        (WebInspector.HeapSnapshot.prototype._bfs):

2012-03-21  Vineet Chaudhary  <rgf748@motorola.com>

        https://bugs.webkit.org/show_bug.cgi?id=81705
        REGRESSION (r111416): fast/dom/prototype-inheritance-2.html is failing.

        Reviewed by Csaba Osztrogonác.

        No new tests.

        * bindings/js/JSDOMBinding.h: Needs passing globalObject to constructArray().
        (WebCore::jsArray):

2012-03-21  Jonathan Dong  <jonathan.dong@torchmobile.com.cn>

        [BlackBerry] Upstreaming blackberry specific css file
        https://bugs.webkit.org/show_bug.cgi?id=81650

        Ustream BlackBerry specific css files, including:
        css/themeBlackBerry.css
        css/mediaControlsBlackBerry.css

        Reviewed by Nikolas Zimmermann.

        No new tests, this is the initial upstream patch
        for BlackBerry specific css files.

        * css/mediaControlsBlackBerry.css: Added.
        (audio):
        (audio::-webkit-media-controls-panel, video::-webkit-media-controls-panel):
        (video:-webkit-full-page-media::-webkit-media-controls-panel):
        (audio::-webkit-media-controls-play-button, video::-webkit-media-controls-play-button):
        (audio::-webkit-media-controls-timeline-container, video::-webkit-media-controls-timeline-container):
        (audio::-webkit-media-controls-current-time-display, video::-webkit-media-controls-current-time-display):
        (audio::-webkit-media-controls-time-remaining-display, video::-webkit-media-controls-time-remaining-display):
        (audio::-webkit-media-controls-timeline, video::-webkit-media-controls-timeline):
        (audio::-webkit-media-controls-fullscreen-button, video::-webkit-media-controls-fullscreen-button):
        (audio::-webkit-media-controls-mute-button, video::-webkit-media-controls-mute-button):
        (audio::-webkit-media-controls-volume-slider-container, video::-webkit-media-controls-volume-slider-container):
        (audio::-webkit-media-controls-volume-slider, video::-webkit-media-controls-volume-slider):
        (audio::-webkit-media-controls-seek-back-button, video::-webkit-media-controls-seek-back-button):
        (audio::-webkit-media-controls-seek-forward-button, video::-webkit-media-controls-seek-forward-button):
        * css/themeBlackBerry.css: Added.
        (textarea):
        (input, textarea):
        (input[type="color"]):
        (select:focus):
        (select[size][multiple]):
        (select[size][multiple]:focus):

2012-03-21  Levi Weintraub  <leviw@chromium.org>

        Update LayoutUnit usage in descendants of RenderReplaced
        https://bugs.webkit.org/show_bug.cgi?id=80918

        Reviewed by Eric Seidel.

        Replaced elements have to flow in the new sub-pixel Render Tree, but since the rendering of these
        often takes place outside of WebCore (or in cases such as foreign objects, in WebCore after
        passing through platform code), care must be taken to determine the final rendered size and
        location before render time. This patch brings these classes up to the latest and greatest in the
        subpixellayout branch.

        See https://trac.webkit.org/wiki/LayoutUnit for more information.

        No new tests. No change in behavior.

        * rendering/RenderFrameBase.cpp:
        (WebCore::RenderFrameBase::layoutWithFlattening): Build Fix.
        * rendering/RenderFullScreen.cpp:
        (RenderFullScreen::createPlaceholder): Ditto.
        * rendering/RenderFullScreen.h:
        (RenderFullScreen): Ditto.
        * rendering/RenderHTMLCanvas.cpp:
        (WebCore::RenderHTMLCanvas::canvasSizeChanged): Ditto.
        * rendering/RenderIFrame.cpp:
        (WebCore::RenderIFrame::computeLogicalHeight): Ditto.
        (WebCore::RenderIFrame::computeLogicalWidth): Ditto.
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::updateIntrinsicSizeIfNeeded): Intrinsic sizes are always integers, since they
        originate outside of WebCore.
        (WebCore::RenderImage::paintIntoRect): Use pixel snapping to paint into an arbitrary rect.
        (WebCore::RenderImage::computeReplacedLogicalWidth): Intrinsic size is always integral -- rounding
        values to integers.
        * rendering/RenderImage.h:
        (RenderImage):
        * rendering/RenderVideo.cpp:
        (WebCore::RenderVideo::videoBox):
        (WebCore::RenderVideo::paintReplaced): Painting at integer boundaries.
        * rendering/RenderWidget.cpp:
        (WebCore):
        (WebCore::roundedIntRect): Widgets are rendered outside of WebCore, so we always align them to
        integer boundaries. This means we can actually round the size of our ultimate content box. This
        function is implemented here specifically to prevent its misuse if we put it elsewhere.
        (WebCore::RenderWidget::setWidgetGeometry): We simplify layout by taking a LayoutRect and rounding
        it to its final location within this function.
        (WebCore::RenderWidget::updateWidgetGeometry): We keep things in LayoutUnits until handing off to
        setWidgetGeometry.
        (WebCore::RenderWidget::paint): Rounding the paint location before handing painting off to the
        widget itself.
        * rendering/RenderWidget.h:
        (RenderWidget):

2012-03-21  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: HeapProfiler: support distance column in Summary View.
        https://bugs.webkit.org/show_bug.cgi?id=81675

        In many cases when a page leaked an object we see not only this object
        but the all objects it retains. It is quite difficult to find out which
        the object is the root of leak. It'd be simpler to sort the leaked
        objects by Distance column and track down the first one.

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/DetailedHeapshotGridNodes.js:
        (WebInspector.HeapSnapshotGenericObjectNode):
        (WebInspector.HeapSnapshotGenericObjectNode.prototype.get data):
        (WebInspector.HeapSnapshotInstanceNode.prototype.comparator):
        (WebInspector.HeapSnapshotConstructorNode):
        (WebInspector.HeapSnapshotConstructorNode.prototype.comparator):
        (WebInspector.HeapSnapshotConstructorNode.prototype.get data):
        * inspector/front-end/DetailedHeapshotView.js:
        (WebInspector.HeapSnapshotConstructorsDataGrid):
        (WebInspector.HeapSnapshotConstructorsDataGrid.prototype._defaultPopulateCount.100._sortFields):
        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshotNodesProvider.prototype._serialize):

2012-03-21  Charles Wei  <charles.wei@torchmobile.com.cn>

        [BlackBerry] Remove redundant code in SocketStreamHandler
        https://bugs.webkit.org/show_bug.cgi?id=81726

        Reviewed by George Staikos.

        No new tests needed. Just remove redundant code.

        * platform/network/blackberry/SocketStreamHandle.h:
        (SocketStreamHandle):
        * platform/network/blackberry/SocketStreamHandleBlackBerry.cpp:

2012-03-20  Eric Seidel  <eric@webkit.org>

        Move wtf/Platform.h from JavaScriptCore to Source/WTF/wtf
        https://bugs.webkit.org/show_bug.cgi?id=80911

        Reviewed by Adam Barth.

        * CMakeLists.txt:
         - Look for headers in Source/WTF as well.

2012-03-20  Dana Jansens  <danakj@chromium.org>

        [chromium] Use origin transform to transform occlusion from surface content space to its target content space
        https://bugs.webkit.org/show_bug.cgi?id=81730

        Reviewed by Adrienne Walker.

        Unit test: CCOcclusionTrackerTestSurfaceOcclusionTranslatesToParent

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::transformSurfaceOpaqueRegion):
        (WebCore::::leaveToTargetRenderSurface):

2012-03-19  Shinya Kawanaka  <shinyak@chromium.org>

        [Crash] RenderMenuList::addChild() in Shadow DOM.
        https://bugs.webkit.org/show_bug.cgi?id=81201

        Reviewed by Dimitri Glazkov.

        <audio>, <video>, <meter>, <progress>, and <select> are implemented using
        Shadow DOM having HTMLContentElement. Their renderer children basically should not
        create a renderer unless they are on the upper shadow encapsulation boundary,
        which means they are the direct children of the shadow root.

        However, current implementation allows their renderer children to create a renderer
        even if they are on a lower shadow encapsulation boundary, which means
        they are distributed elements of HTMLContentElement.

        This patch makes there renderer children not to create a renderer if they are on a lower shadow
        encapsulation boudary.

        Tests: fast/dom/shadow/content-element-in-media-element.html
               fast/dom/shadow/content-element-in-meter-element.html
               fast/dom/shadow/content-element-in-progress-element.html
               fast/dom/shadow/content-element-in-select-element.html

        * dom/NodeRenderingContext.h:
        (NodeRenderingContext):
        (WebCore::NodeRenderingContext::isOnUpperEncapsulationBoundary):
        (WebCore):
        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::childShouldCreateRenderer):
        * html/HTMLMeterElement.cpp:
        (WebCore::HTMLMeterElement::childShouldCreateRenderer):
        * html/HTMLProgressElement.cpp:
        (WebCore::HTMLProgressElement::childShouldCreateRenderer):
        * html/HTMLSelectElement.cpp:
        (WebCore::HTMLSelectElement::childShouldCreateRenderer):

2012-03-20  Dana Jansens  <danakj@chromium.org>

        [chromium] Store origin/screen space transforms for surface and replica in the surface
        https://bugs.webkit.org/show_bug.cgi?id=81296

        Reviewed by Adrienne Walker.

        Compute and save a number of transforms for render surfaces. The origin
        tranform for the replica into its target surface. The origin transform
        for the replica into the screen. And the origin transform for the surface
        into the screen.

        These transforms will allow us to detect occlusion of render surfaces,
        allowing us to cull (or partially-cull) the render surface quad during
        drawing.

        This also fixes a subtle bug in the transforms used by the damage
        tracking code.

        Unit test: CCLayerTreeHostCommonTest.verifyTransformsForSingleRenderSurface
                   CCLayerTreeHostCommonTest.verifyTransformsForReplica
                   CCLayerTreeHostCommonTest.verifyTransformsForRenderSurfaceHierarchy

        * platform/graphics/chromium/RenderSurfaceChromium.h:
        (WebCore::RenderSurfaceChromium::screenSpaceTransform):
        (WebCore::RenderSurfaceChromium::setScreenSpaceTransform):
        (RenderSurfaceChromium):
        (WebCore::RenderSurfaceChromium::replicaOriginTransform):
        (WebCore::RenderSurfaceChromium::setReplicaOriginTransform):
        (WebCore::RenderSurfaceChromium::replicaScreenSpaceTransform):
        (WebCore::RenderSurfaceChromium::setReplicaScreenSpaceTransform):
        * platform/graphics/chromium/cc/CCDamageTracker.cpp:
        (WebCore::CCDamageTracker::extendDamageForRenderSurface):
        * platform/graphics/chromium/cc/CCLayerTreeHostCommon.cpp:
        (WebCore::calculateDrawTransformsAndVisibilityInternal):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::damageInSurfaceSpace):
        * platform/graphics/chromium/cc/CCRenderSurface.h:
        (WebCore::CCRenderSurface::setDrawTransform):
        (WebCore::CCRenderSurface::drawTransform):
        (WebCore::CCRenderSurface::setScreenSpaceTransform):
        (WebCore::CCRenderSurface::screenSpaceTransform):
        (CCRenderSurface):
        (WebCore::CCRenderSurface::setReplicaDrawTransform):
        (WebCore::CCRenderSurface::replicaDrawTransform):
        (WebCore::CCRenderSurface::setReplicaOriginTransform):
        (WebCore::CCRenderSurface::replicaOriginTransform):
        (WebCore::CCRenderSurface::setReplicaScreenSpaceTransform):
        (WebCore::CCRenderSurface::replicaScreenSpaceTransform):

2012-03-20  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] The option element should not be form associated element.
        https://bugs.webkit.org/show_bug.cgi?id=79764

        Reviewed by Kent Tamura.

        This patch changes base class of HTMLOptionELement to HTMLElement
        from HTMLFormControlElement for saving memory space and iteration
        time of extra "option" elements in HTMLFormElement::m_formAssociatedElements
        and matching the HTML5 specification for ease of maintenance.

        This patch changes behavior of handling of CSS pseudo classes "invalid"
        and "valid". The "option" elements no longer use these CSS pseudo classes
        as HTML5 specification. This bug was filed in https://bugs.webkit.org/show_bug.cgi?id=80088

        Changes of TextIterator is lead by usage of isFormControlElement. This
        changes will be replaced with more meaningful predicate as part of
        https://bugs.webkit.org/show_bug.cgi?id=80381

        No new tests but updated select-live-pseudo-selectors.html test.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::canShareStyleWithElement): Added checking of the "option" element and returns false as HTMLFormControlElement.
        * css/SelectorChecker.cpp:
        (WebCore::SelectorChecker::checkOneSelector): Removed isFormControlElement for PseudoDisabled and PseudoChecked.
        * html/HTMLKeygenElement.cpp:
        (WebCore::HTMLKeygenElement::HTMLKeygenElement): Removed form parameter of call site of HTMLOptionElement::create.
        * html/HTMLOptionElement.cpp:
        (WebCore::HTMLOptionElement::HTMLOptionElement): Removed form parameter which no longer needed. Changed base class in initialization list. Added m_disabled initialization.
        (WebCore::HTMLOptionElement::create): Removed form parameter which no longer needed.
        (WebCore::HTMLOptionElement::attach): Changeid base class.
        (WebCore::HTMLOptionElement::detach): Changed base class.
        (WebCore::HTMLOptionElement::parseAttribute): Changed base class. Added "disabled" attribute handling.
        (WebCore::HTMLOptionElement::childrenChanged): Changed base class.
        (WebCore::HTMLOptionElement::insertedIntoTree): Changed base class.
        * html/HTMLOptionElement.h:
        (HTMLOptionElement): Added new member variable m_disabled which was in HTMLFormControlElement.
        (WebCore::HTMLOptionElement::ownElementDisabled): Changed for using m_disabled.
        * html/HTMLTagNames.in: Removed constructorNeedsFormElement for the "option" element, which was used for passing form parameter to create function.

2012-03-20  Xiaomei Ji  <xji@chromium.org>

        Crash introduced in r110965.
        https://bugs.webkit.org/show_bug.cgi?id=81720

        Reviewed by Ryosuke Niwa.

        Since word break iterator just keeps a pointer to the UChar array given to the constructor,
        we need to allocate the UChar array deeper in the stack than the iterator.

        Test: editing/selection/move-by-word-visually-crash-test-5.html

        * editing/visible_units.cpp:
        (WebCore::wordBreakIteratorForMinOffsetBoundary):
        (WebCore::wordBreakIteratorForMaxOffsetBoundary):
        (WebCore::visualWordPosition):

2012-03-20  W. James MacLean  <wjmaclean@chromium.org>

        [chromium] Convert TouchFlingPlatformGestureCurve to a 2-D Bezier for better control of curve shape.
        https://bugs.webkit.org/show_bug.cgi?id=81713

        Reviewed by Dirk Pranke.

        Exisiting unit test revised to cover this change.

        Change the fling gesture animation curve to use a 2-D Bezier to obtain greater control
        over the shape of the curve. Also, change time scaling code to be logarithmic for more
        natural feel.

        * platform/TouchFlingPlatformGestureCurve.cpp:
        (WebCore::TouchFlingPlatformGestureCurve::TouchFlingPlatformGestureCurve):
        (WebCore::TouchFlingPlatformGestureCurve::apply):

2012-03-18  Tim Horton  <timothy_horton@apple.com>

        Infinite repaint loop with SVGImageCache and deferred repaint timers
        https://bugs.webkit.org/show_bug.cgi?id=78315
        <rdar://problem/10651634>

        Reviewed by Nikolas Zimmermann.

        Only defer image redraw on a timer if we're in layout. This breaks
        the repaint loop while still preventing us from drawing inside layout.

        Completely disable repaint during relayout inside SVGImage::drawSVGToImageBuffer,
        preventing deferred repaint timers from being started during that process.

        No new tests, as the problem only occurs in a nonstandard configuration.

        * page/FrameView.cpp:
        (WebCore::FrameView::FrameView):
        (WebCore::FrameView::reset):
        (WebCore::FrameView::repaintContentRectangle):
        (WebCore::FrameView::endDeferredRepaints):
        (WebCore::FrameView::startDeferredRepaintTimer):
        (WebCore):
        (WebCore::FrameView::doDeferredRepaints):
        (WebCore::FrameView::deferredRepaintTimerFired):
        (WebCore::FrameView::beginDisableRepaints):
        (WebCore::FrameView::endDisableRepaints):
        * page/FrameView.h:
        (FrameView):
        (WebCore::FrameView::repaintsDisabled):
        * rendering/RenderView.cpp:
        (WebCore::RenderView::shouldRepaint):
        * svg/graphics/SVGImage.cpp:
        (WebCore::SVGImage::drawSVGToImageBuffer):
        (WebCore::SVGImage::draw):
        (WebCore::SVGImage::frameView):
        (WebCore):
        * svg/graphics/SVGImage.h:
        (WebCore):
        * svg/graphics/SVGImageCache.cpp:
        (WebCore::SVGImageCache::imageContentChanged):
        (WebCore::SVGImageCache::redraw):
        (WebCore::SVGImageCache::redrawTimerFired):
        (WebCore):
        * svg/graphics/SVGImageCache.h:
        (SVGImageCache):

2012-03-20  Adam Klein  <adamk@chromium.org>

        Include fix for dom/xhtml test promised in r111449.

        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::replaceChild): Check against next instead of
        prev when deciding there's no work to do.

2012-03-20  Jon Lee  <jonlee@apple.com>

        Restrict access to notifications for unique origins and file URLs with no local file access
        https://bugs.webkit.org/show_bug.cgi?id=79704
        <rdar://problem/10912430>

        Reviewed by Adam Barth.

        Before checking or requesting permissions, we look at whether we can show notifications based on
        the security context. If not, we short circuit and do not forward the request to the client.

        * notifications/Notification.cpp:
        (WebCore::Notification::Notification): Fix a bug where creating a notification goes through slightly
        different logic for checking permissions than when checking permissions through the
        notification center.
        * notifications/NotificationCenter.cpp:
        (WebCore::NotificationCenter::checkPermission): Check to see if the origin can show notifications.
        (WebCore::NotificationCenter::requestPermission): If we know whether an origin can show notifications,
        we asynchronously call the callback with that decision. Otherwise we ask the client.

        Add new variable in the notification center to keep track of pending callbacks when we short-circuit
        requestPermission().
        * notifications/NotificationCenter.h:
        (NotificationRequestCallback): Add new private class encapsulating the callback.
        * notifications/NotificationCenter.cpp:
        (WebCore::NotificationCenter::requestTimedOut): Remove the request from the set of pending callbacks.
        (WebCore::NotificationCenter::NotificationRequest::createAndStartTimer): Because this is used when we already
        know the decision, and are not asking the client to decide, we can immediately trigger a one-shot timer
        to invoke the callback.
        (WebCore::NotificationCenter::NotificationRequest::NotificationRequest):
        (WebCore::NotificationCenter::NotificationRequest::startTimer):
        (WebCore::NotificationCenter::NotificationRequest::timerFired): Invoke the callback and tell the notification
        center.
        * page/SecurityOrigin.h: Add new toRawString() method to return the string representation of the origin,
        regardless of any restrictions that might otherwise cause toString() to return "null".
        * page/SecurityOrigin.cpp:
        (WebCore::SecurityOrigin::canShowNotifications): Added to return a tri-state regarding whether we know
        the origin can show notifications. If the origin is unique, we never let it show. If the origin has
        universal access, we always let it show. Otherwise the client should be asked.
        (WebCore::SecurityOrigin::toString): Refactor to use toRawString().
        (WebCore::SecurityOrigin::toRawString):

        Added FIXME's regarding the naming of enforceFilePathSeparation().
        * dom/Document.cpp:
        (WebCore::Document::initSecurityContext): Also, tab reformatting.

        * WebCore.exp.in: Export toRawString().

2012-03-20  Mark Pilgrim  <pilgrim@chromium.org>

        Move webaudio to Modules/webaudio/
        https://bugs.webkit.org/show_bug.cgi?id=81541

        Reviewed by Kentaro Hara.

        No new tests, all existing tests pass.

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * Modules/webaudio: Added.
        * Modules/webaudio/AsyncAudioDecoder.cpp: Copied from Source/WebCore/webaudio/AsyncAudioDecoder.cpp.
        * Modules/webaudio/AsyncAudioDecoder.h: Copied from Source/WebCore/webaudio/AsyncAudioDecoder.h.
        * Modules/webaudio/AudioBasicProcessorNode.cpp: Copied from Source/WebCore/webaudio/AudioBasicProcessorNode.cpp.
        * Modules/webaudio/AudioBasicProcessorNode.h: Copied from Source/WebCore/webaudio/AudioBasicProcessorNode.h.
        * Modules/webaudio/AudioBuffer.cpp: Copied from Source/WebCore/webaudio/AudioBuffer.cpp.
        * Modules/webaudio/AudioBuffer.h: Copied from Source/WebCore/webaudio/AudioBuffer.h.
        * Modules/webaudio/AudioBuffer.idl: Copied from Source/WebCore/webaudio/AudioBuffer.idl.
        * Modules/webaudio/AudioBufferCallback.h: Copied from Source/WebCore/webaudio/AudioBufferCallback.h.
        * Modules/webaudio/AudioBufferCallback.idl: Copied from Source/WebCore/webaudio/AudioBufferCallback.idl.
        * Modules/webaudio/AudioBufferSourceNode.cpp: Copied from Source/WebCore/webaudio/AudioBufferSourceNode.cpp.
        * Modules/webaudio/AudioBufferSourceNode.h: Copied from Source/WebCore/webaudio/AudioBufferSourceNode.h.
        * Modules/webaudio/AudioBufferSourceNode.idl: Copied from Source/WebCore/webaudio/AudioBufferSourceNode.idl.
        * Modules/webaudio/AudioChannelMerger.cpp: Copied from Source/WebCore/webaudio/AudioChannelMerger.cpp.
        * Modules/webaudio/AudioChannelMerger.h: Copied from Source/WebCore/webaudio/AudioChannelMerger.h.
        * Modules/webaudio/AudioChannelMerger.idl: Copied from Source/WebCore/webaudio/AudioChannelMerger.idl.
        * Modules/webaudio/AudioChannelSplitter.cpp: Copied from Source/WebCore/webaudio/AudioChannelSplitter.cpp.
        * Modules/webaudio/AudioChannelSplitter.h: Copied from Source/WebCore/webaudio/AudioChannelSplitter.h.
        * Modules/webaudio/AudioChannelSplitter.idl: Copied from Source/WebCore/webaudio/AudioChannelSplitter.idl.
        * Modules/webaudio/AudioContext.cpp: Copied from Source/WebCore/webaudio/AudioContext.cpp.
        * Modules/webaudio/AudioContext.h: Copied from Source/WebCore/webaudio/AudioContext.h.
        * Modules/webaudio/AudioContext.idl: Copied from Source/WebCore/webaudio/AudioContext.idl.
        * Modules/webaudio/AudioDestinationNode.cpp: Copied from Source/WebCore/webaudio/AudioDestinationNode.cpp.
        * Modules/webaudio/AudioDestinationNode.h: Copied from Source/WebCore/webaudio/AudioDestinationNode.h.
        * Modules/webaudio/AudioDestinationNode.idl: Copied from Source/WebCore/webaudio/AudioDestinationNode.idl.
        * Modules/webaudio/AudioGain.h: Copied from Source/WebCore/webaudio/AudioGain.h.
        * Modules/webaudio/AudioGain.idl: Copied from Source/WebCore/webaudio/AudioGain.idl.
        * Modules/webaudio/AudioGainNode.cpp: Copied from Source/WebCore/webaudio/AudioGainNode.cpp.
        * Modules/webaudio/AudioGainNode.h: Copied from Source/WebCore/webaudio/AudioGainNode.h.
        * Modules/webaudio/AudioGainNode.idl: Copied from Source/WebCore/webaudio/AudioGainNode.idl.
        * Modules/webaudio/AudioListener.cpp: Copied from Source/WebCore/webaudio/AudioListener.cpp.
        * Modules/webaudio/AudioListener.h: Copied from Source/WebCore/webaudio/AudioListener.h.
        * Modules/webaudio/AudioListener.idl: Copied from Source/WebCore/webaudio/AudioListener.idl.
        * Modules/webaudio/AudioNode.cpp: Copied from Source/WebCore/webaudio/AudioNode.cpp.
        * Modules/webaudio/AudioNode.h: Copied from Source/WebCore/webaudio/AudioNode.h.
        * Modules/webaudio/AudioNode.idl: Copied from Source/WebCore/webaudio/AudioNode.idl.
        * Modules/webaudio/AudioNodeInput.cpp: Copied from Source/WebCore/webaudio/AudioNodeInput.cpp.
        * Modules/webaudio/AudioNodeInput.h: Copied from Source/WebCore/webaudio/AudioNodeInput.h.
        * Modules/webaudio/AudioNodeOutput.cpp: Copied from Source/WebCore/webaudio/AudioNodeOutput.cpp.
        * Modules/webaudio/AudioNodeOutput.h: Copied from Source/WebCore/webaudio/AudioNodeOutput.h.
        * Modules/webaudio/AudioPannerNode.cpp: Copied from Source/WebCore/webaudio/AudioPannerNode.cpp.
        * Modules/webaudio/AudioPannerNode.h: Copied from Source/WebCore/webaudio/AudioPannerNode.h.
        * Modules/webaudio/AudioPannerNode.idl: Copied from Source/WebCore/webaudio/AudioPannerNode.idl.
        * Modules/webaudio/AudioParam.cpp: Copied from Source/WebCore/webaudio/AudioParam.cpp.
        * Modules/webaudio/AudioParam.h: Copied from Source/WebCore/webaudio/AudioParam.h.
        * Modules/webaudio/AudioParam.idl: Copied from Source/WebCore/webaudio/AudioParam.idl.
        * Modules/webaudio/AudioParamTimeline.cpp: Copied from Source/WebCore/webaudio/AudioParamTimeline.cpp.
        * Modules/webaudio/AudioParamTimeline.h: Copied from Source/WebCore/webaudio/AudioParamTimeline.h.
        * Modules/webaudio/AudioProcessingEvent.cpp: Copied from Source/WebCore/webaudio/AudioProcessingEvent.cpp.
        * Modules/webaudio/AudioProcessingEvent.h: Copied from Source/WebCore/webaudio/AudioProcessingEvent.h.
        * Modules/webaudio/AudioProcessingEvent.idl: Copied from Source/WebCore/webaudio/AudioProcessingEvent.idl.
        * Modules/webaudio/AudioSourceNode.h: Copied from Source/WebCore/webaudio/AudioSourceNode.h.
        * Modules/webaudio/AudioSourceNode.idl: Copied from Source/WebCore/webaudio/AudioSourceNode.idl.
        * Modules/webaudio/BiquadDSPKernel.cpp: Copied from Source/WebCore/webaudio/BiquadDSPKernel.cpp.
        * Modules/webaudio/BiquadDSPKernel.h: Copied from Source/WebCore/webaudio/BiquadDSPKernel.h.
        * Modules/webaudio/BiquadFilterNode.cpp: Copied from Source/WebCore/webaudio/BiquadFilterNode.cpp.
        * Modules/webaudio/BiquadFilterNode.h: Copied from Source/WebCore/webaudio/BiquadFilterNode.h.
        * Modules/webaudio/BiquadFilterNode.idl: Copied from Source/WebCore/webaudio/BiquadFilterNode.idl.
        * Modules/webaudio/BiquadProcessor.cpp: Copied from Source/WebCore/webaudio/BiquadProcessor.cpp.
        * Modules/webaudio/BiquadProcessor.h: Copied from Source/WebCore/webaudio/BiquadProcessor.h.
        * Modules/webaudio/ConvolverNode.cpp: Copied from Source/WebCore/webaudio/ConvolverNode.cpp.
        * Modules/webaudio/ConvolverNode.h: Copied from Source/WebCore/webaudio/ConvolverNode.h.
        * Modules/webaudio/ConvolverNode.idl: Copied from Source/WebCore/webaudio/ConvolverNode.idl.
        * Modules/webaudio/DOMWindowWebAudio.idl: Copied from Source/WebCore/webaudio/DOMWindowWebAudio.idl.
        * Modules/webaudio/DefaultAudioDestinationNode.cpp: Copied from Source/WebCore/webaudio/DefaultAudioDestinationNode.cpp.
        * Modules/webaudio/DefaultAudioDestinationNode.h: Copied from Source/WebCore/webaudio/DefaultAudioDestinationNode.h.
        * Modules/webaudio/DelayDSPKernel.cpp: Copied from Source/WebCore/webaudio/DelayDSPKernel.cpp.
        * Modules/webaudio/DelayDSPKernel.h: Copied from Source/WebCore/webaudio/DelayDSPKernel.h.
        * Modules/webaudio/DelayNode.cpp: Copied from Source/WebCore/webaudio/DelayNode.cpp.
        * Modules/webaudio/DelayNode.h: Copied from Source/WebCore/webaudio/DelayNode.h.
        * Modules/webaudio/DelayNode.idl: Copied from Source/WebCore/webaudio/DelayNode.idl.
        * Modules/webaudio/DelayProcessor.cpp: Copied from Source/WebCore/webaudio/DelayProcessor.cpp.
        * Modules/webaudio/DelayProcessor.h: Copied from Source/WebCore/webaudio/DelayProcessor.h.
        * Modules/webaudio/DynamicsCompressorNode.cpp: Copied from Source/WebCore/webaudio/DynamicsCompressorNode.cpp.
        * Modules/webaudio/DynamicsCompressorNode.h: Copied from Source/WebCore/webaudio/DynamicsCompressorNode.h.
        * Modules/webaudio/DynamicsCompressorNode.idl: Copied from Source/WebCore/webaudio/DynamicsCompressorNode.idl.
        * Modules/webaudio/HighPass2FilterNode.cpp: Copied from Source/WebCore/webaudio/HighPass2FilterNode.cpp.
        * Modules/webaudio/HighPass2FilterNode.h: Copied from Source/WebCore/webaudio/HighPass2FilterNode.h.
        * Modules/webaudio/HighPass2FilterNode.idl: Copied from Source/WebCore/webaudio/HighPass2FilterNode.idl.
        * Modules/webaudio/JavaScriptAudioNode.cpp: Copied from Source/WebCore/webaudio/JavaScriptAudioNode.cpp.
        * Modules/webaudio/JavaScriptAudioNode.h: Copied from Source/WebCore/webaudio/JavaScriptAudioNode.h.
        * Modules/webaudio/JavaScriptAudioNode.idl: Copied from Source/WebCore/webaudio/JavaScriptAudioNode.idl.
        * Modules/webaudio/LowPass2FilterNode.cpp: Copied from Source/WebCore/webaudio/LowPass2FilterNode.cpp.
        * Modules/webaudio/LowPass2FilterNode.h: Copied from Source/WebCore/webaudio/LowPass2FilterNode.h.
        * Modules/webaudio/LowPass2FilterNode.idl: Copied from Source/WebCore/webaudio/LowPass2FilterNode.idl.
        * Modules/webaudio/MediaElementAudioSourceNode.cpp: Copied from Source/WebCore/webaudio/MediaElementAudioSourceNode.cpp.
        * Modules/webaudio/MediaElementAudioSourceNode.h: Copied from Source/WebCore/webaudio/MediaElementAudioSourceNode.h.
        * Modules/webaudio/MediaElementAudioSourceNode.idl: Copied from Source/WebCore/webaudio/MediaElementAudioSourceNode.idl.
        * Modules/webaudio/OfflineAudioCompletionEvent.cpp: Copied from Source/WebCore/webaudio/OfflineAudioCompletionEvent.cpp.
        * Modules/webaudio/OfflineAudioCompletionEvent.h: Copied from Source/WebCore/webaudio/OfflineAudioCompletionEvent.h.
        * Modules/webaudio/OfflineAudioCompletionEvent.idl: Copied from Source/WebCore/webaudio/OfflineAudioCompletionEvent.idl.
        * Modules/webaudio/OfflineAudioDestinationNode.cpp: Copied from Source/WebCore/webaudio/OfflineAudioDestinationNode.cpp.
        * Modules/webaudio/OfflineAudioDestinationNode.h: Copied from Source/WebCore/webaudio/OfflineAudioDestinationNode.h.
        * Modules/webaudio/RealtimeAnalyser.cpp: Copied from Source/WebCore/webaudio/RealtimeAnalyser.cpp.
        * Modules/webaudio/RealtimeAnalyser.h: Copied from Source/WebCore/webaudio/RealtimeAnalyser.h.
        * Modules/webaudio/RealtimeAnalyserNode.cpp: Copied from Source/WebCore/webaudio/RealtimeAnalyserNode.cpp.
        * Modules/webaudio/RealtimeAnalyserNode.h: Copied from Source/WebCore/webaudio/RealtimeAnalyserNode.h.
        * Modules/webaudio/RealtimeAnalyserNode.idl: Copied from Source/WebCore/webaudio/RealtimeAnalyserNode.idl.
        * Modules/webaudio/WaveShaperDSPKernel.cpp: Copied from Source/WebCore/webaudio/WaveShaperDSPKernel.cpp.
        * Modules/webaudio/WaveShaperDSPKernel.h: Copied from Source/WebCore/webaudio/WaveShaperDSPKernel.h.
        * Modules/webaudio/WaveShaperNode.cpp: Copied from Source/WebCore/webaudio/WaveShaperNode.cpp.
        * Modules/webaudio/WaveShaperNode.h: Copied from Source/WebCore/webaudio/WaveShaperNode.h.
        * Modules/webaudio/WaveShaperNode.idl: Copied from Source/WebCore/webaudio/WaveShaperNode.idl.
        * Modules/webaudio/WaveShaperProcessor.cpp: Copied from Source/WebCore/webaudio/WaveShaperProcessor.cpp.
        * Modules/webaudio/WaveShaperProcessor.h: Copied from Source/WebCore/webaudio/WaveShaperProcessor.h.
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * WebCore.pri:
        * WebCore.xcodeproj/project.pbxproj:
        * webaudio/AsyncAudioDecoder.cpp: Removed.
        * webaudio/AsyncAudioDecoder.h: Removed.
        * webaudio/AudioBasicProcessorNode.cpp: Removed.
        * webaudio/AudioBasicProcessorNode.h: Removed.
        * webaudio/AudioBuffer.cpp: Removed.
        * webaudio/AudioBuffer.h: Removed.
        * webaudio/AudioBuffer.idl: Removed.
        * webaudio/AudioBufferCallback.h: Removed.
        * webaudio/AudioBufferCallback.idl: Removed.
        * webaudio/AudioBufferSourceNode.cpp: Removed.
        * webaudio/AudioBufferSourceNode.h: Removed.
        * webaudio/AudioBufferSourceNode.idl: Removed.
        * webaudio/AudioChannelMerger.cpp: Removed.
        * webaudio/AudioChannelMerger.h: Removed.
        * webaudio/AudioChannelMerger.idl: Removed.
        * webaudio/AudioChannelSplitter.cpp: Removed.
        * webaudio/AudioChannelSplitter.h: Removed.
        * webaudio/AudioChannelSplitter.idl: Removed.
        * webaudio/AudioContext.cpp: Removed.
        * webaudio/AudioContext.h: Removed.
        * webaudio/AudioContext.idl: Removed.
        * webaudio/AudioDestinationNode.cpp: Removed.
        * webaudio/AudioDestinationNode.h: Removed.
        * webaudio/AudioDestinationNode.idl: Removed.
        * webaudio/AudioGain.h: Removed.
        * webaudio/AudioGain.idl: Removed.
        * webaudio/AudioGainNode.cpp: Removed.
        * webaudio/AudioGainNode.h: Removed.
        * webaudio/AudioGainNode.idl: Removed.
        * webaudio/AudioListener.cpp: Removed.
        * webaudio/AudioListener.h: Removed.
        * webaudio/AudioListener.idl: Removed.
        * webaudio/AudioNode.cpp: Removed.
        * webaudio/AudioNode.h: Removed.
        * webaudio/AudioNode.idl: Removed.
        * webaudio/AudioNodeInput.cpp: Removed.
        * webaudio/AudioNodeInput.h: Removed.
        * webaudio/AudioNodeOutput.cpp: Removed.
        * webaudio/AudioNodeOutput.h: Removed.
        * webaudio/AudioPannerNode.cpp: Removed.
        * webaudio/AudioPannerNode.h: Removed.
        * webaudio/AudioPannerNode.idl: Removed.
        * webaudio/AudioParam.cpp: Removed.
        * webaudio/AudioParam.h: Removed.
        * webaudio/AudioParam.idl: Removed.
        * webaudio/AudioParamTimeline.cpp: Removed.
        * webaudio/AudioParamTimeline.h: Removed.
        * webaudio/AudioProcessingEvent.cpp: Removed.
        * webaudio/AudioProcessingEvent.h: Removed.
        * webaudio/AudioProcessingEvent.idl: Removed.
        * webaudio/AudioSourceNode.h: Removed.
        * webaudio/AudioSourceNode.idl: Removed.
        * webaudio/BiquadDSPKernel.cpp: Removed.
        * webaudio/BiquadDSPKernel.h: Removed.
        * webaudio/BiquadFilterNode.cpp: Removed.
        * webaudio/BiquadFilterNode.h: Removed.
        * webaudio/BiquadFilterNode.idl: Removed.
        * webaudio/BiquadProcessor.cpp: Removed.
        * webaudio/BiquadProcessor.h: Removed.
        * webaudio/ConvolverNode.cpp: Removed.
        * webaudio/ConvolverNode.h: Removed.
        * webaudio/ConvolverNode.idl: Removed.
        * webaudio/DOMWindowWebAudio.idl: Removed.
        * webaudio/DefaultAudioDestinationNode.cpp: Removed.
        * webaudio/DefaultAudioDestinationNode.h: Removed.
        * webaudio/DelayDSPKernel.cpp: Removed.
        * webaudio/DelayDSPKernel.h: Removed.
        * webaudio/DelayNode.cpp: Removed.
        * webaudio/DelayNode.h: Removed.
        * webaudio/DelayNode.idl: Removed.
        * webaudio/DelayProcessor.cpp: Removed.
        * webaudio/DelayProcessor.h: Removed.
        * webaudio/DynamicsCompressorNode.cpp: Removed.
        * webaudio/DynamicsCompressorNode.h: Removed.
        * webaudio/DynamicsCompressorNode.idl: Removed.
        * webaudio/HighPass2FilterNode.cpp: Removed.
        * webaudio/HighPass2FilterNode.h: Removed.
        * webaudio/HighPass2FilterNode.idl: Removed.
        * webaudio/JavaScriptAudioNode.cpp: Removed.
        * webaudio/JavaScriptAudioNode.h: Removed.
        * webaudio/JavaScriptAudioNode.idl: Removed.
        * webaudio/LowPass2FilterNode.cpp: Removed.
        * webaudio/LowPass2FilterNode.h: Removed.
        * webaudio/LowPass2FilterNode.idl: Removed.
        * webaudio/MediaElementAudioSourceNode.cpp: Removed.
        * webaudio/MediaElementAudioSourceNode.h: Removed.
        * webaudio/MediaElementAudioSourceNode.idl: Removed.
        * webaudio/OfflineAudioCompletionEvent.cpp: Removed.
        * webaudio/OfflineAudioCompletionEvent.h: Removed.
        * webaudio/OfflineAudioCompletionEvent.idl: Removed.
        * webaudio/OfflineAudioDestinationNode.cpp: Removed.
        * webaudio/OfflineAudioDestinationNode.h: Removed.
        * webaudio/RealtimeAnalyser.cpp: Removed.
        * webaudio/RealtimeAnalyser.h: Removed.
        * webaudio/RealtimeAnalyserNode.cpp: Removed.
        * webaudio/RealtimeAnalyserNode.h: Removed.
        * webaudio/RealtimeAnalyserNode.idl: Removed.
        * webaudio/WaveShaperDSPKernel.cpp: Removed.
        * webaudio/WaveShaperDSPKernel.h: Removed.
        * webaudio/WaveShaperNode.cpp: Removed.
        * webaudio/WaveShaperNode.h: Removed.
        * webaudio/WaveShaperNode.idl: Removed.
        * webaudio/WaveShaperProcessor.cpp: Removed.
        * webaudio/WaveShaperProcessor.h: Removed.

2012-03-20  Anders Carlsson  <andersca@apple.com>

        Add a per-ScrollableArea tile cache base class
        https://bugs.webkit.org/show_bug.cgi?id=81694

        Reviewed by Sam Weinig.

        Add an abstract base class, TiledBacking, that can be used to inform tile caches about changed
        state in scrollable areas (such as the currently visible rect, whether the page is active or not, etc).

        Make TileCache inherit from TiledBacking and port updating the visible rect over to this new mechanism.

        * WebCore.xcodeproj/project.pbxproj:
        * page/FrameView.cpp:
        (WebCore::FrameView::tiledBacking):
        (WebCore):
        * page/FrameView.h:
        (FrameView):
        * platform/ScrollableArea.h:
        (WebCore):
        (ScrollableArea):
        (WebCore::ScrollableArea::tiledBacking):
        * platform/graphics/GraphicsLayer.h:
        (WebCore):
        (WebCore::GraphicsLayer::tiledBacking):
        * platform/graphics/TiledBacking.h: Added.
        (WebCore):
        (TiledBacking):
        (WebCore::TiledBacking::~TiledBacking):
        * platform/graphics/ca/GraphicsLayerCA.cpp:
        (WebCore::GraphicsLayerCA::tiledBacking):
        * platform/graphics/ca/GraphicsLayerCA.h:
        (GraphicsLayerCA):
        * platform/graphics/ca/PlatformCALayer.h:
        (PlatformCALayer):
        * platform/graphics/ca/mac/PlatformCALayerMac.mm:
        (PlatformCALayer::tiledBacking):
        * platform/graphics/ca/mac/TileCache.h:
        (TileCache):
        * platform/graphics/ca/mac/WebTileCacheLayer.h:
        (WebCore):
        * platform/graphics/ca/mac/WebTileCacheLayer.mm:
        (-[WebTileCacheLayer WebCore::]):
        * platform/graphics/ca/win/PlatformCALayerWin.cpp:
        (PlatformCALayer::tiledBacking):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::frameViewDidScroll):

2012-03-20  Xiaomei Ji  <xji@chromium.org>

        visual word movement: crashes on CSS generated content.
        https://bugs.webkit.org/show_bug.cgi?id=81581

        Reviewed by Ryosuke Niwa.

        Check for null pointer when referencing box->renderer()->node() in previousRootInlineBox and nextRootInlineBox.

        Test: editing/selection/move-by-word-visually-crash-test-css-generated-content.html

        * editing/visible_units.cpp:
        (WebCore::previousRootInlineBox):
        (WebCore::nextRootInlineBox):

2012-03-20  Luke Macpherson  <macpherson@chromium.org>

        Use CSSPrimitiveValue::convertToLength() to handle CSSPropertyWebkitBoxReflect and in createGridTrackBreadth.
        https://bugs.webkit.org/show_bug.cgi?id=81633

        Reviewed by Andreas Kling.

        No new tests / refactoring only.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):

2012-03-20  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111442.
        http://trac.webkit.org/changeset/111442
        https://bugs.webkit.org/show_bug.cgi?id=81711

        Causes crashes and image mismatches in canvas tests (Requested
        by leviw on #webkit).

        * html/HTMLCanvasElement.cpp:
        (WebCore::HTMLCanvasElement::HTMLCanvasElement):
        (WebCore::HTMLCanvasElement::reset):
        (WebCore::HTMLCanvasElement::createImageBuffer):
        (WebCore::HTMLCanvasElement::clearCopiedImage):
        * html/HTMLCanvasElement.h:
        (HTMLCanvasElement):
        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::CanvasRenderingContext2D):
        (WebCore::CanvasRenderingContext2D::unwindStateStack):
        (WebCore::CanvasRenderingContext2D::reset):

2012-03-20  Adrienne Walker  <enne@google.com>

        RenderLayerCompositor doesn't properly clip graphics layer sizes
        https://bugs.webkit.org/show_bug.cgi?id=80372

        Reviewed by Simon Fraser.

        To find the bounds for a composited layer, calculateCompositedBounds
        iterates through all non-composited child layers using z-order and
        normal flow lists. This does not preserve clipping from ancestor
        layers, because a clipping ancestor layer can end up as a sibling to
        its clipped descendent because it is not a stacking context.

        Fix by explicitly checking cached clip roots.

        Test: compositing/clip-child-by-non-stacking-ancestor.html

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::localClipRect):
        (WebCore):
        * rendering/RenderLayer.h:
        (RenderLayer):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::repaintOnCompositingChange):
        (WebCore::RenderLayerCompositor::calculateCompositedBounds):

2012-03-20  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111445 and r111446.
        http://trac.webkit.org/changeset/111445
        http://trac.webkit.org/changeset/111446
        https://bugs.webkit.org/show_bug.cgi?id=81708

        It broke Qt and GTK build intentionally (Requested by Ossy on
        #webkit).

        * WebCore.exp.in:
        * dom/Document.cpp:
        (WebCore::Document::initSecurityContext):
        * notifications/Notification.cpp:
        (WebCore::Notification::Notification):
        * notifications/NotificationCenter.cpp:
        (WebCore::NotificationCenter::checkPermission):
        (WebCore::NotificationCenter::requestPermission):
        * notifications/NotificationCenter.h:
        (NotificationCenter):
        * page/SecurityOrigin.cpp:
        (WebCore::SecurityOrigin::toString):
        * page/SecurityOrigin.h:
        (SecurityOrigin):

2012-03-20  Adam Klein  <adamk@chromium.org>

        Refactor ContainerNode::replaceChild to match other mutation methods and share code
        https://bugs.webkit.org/show_bug.cgi?id=81579

        Reviewed by Ojan Vafai.

        Originally landed as r111310, this fixes a bug in replaceChild
        introduced when switching to the insert-before logic.

        A future change will make use of the consistency among insertBefore/appendChild/replaceChild
        to handle insertion of DocumentFragments more cleanly.

        No new tests, no change in behavior.

        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::replaceChild): Use collectTargetNodes rather than walking through DocumentFragment children.
        Insert before rather than inserting after. Dispatch to other methods to update parent/sibling pointers.
        (WebCore::ContainerNode::appendChild): Call appendChildToContainer to update parent/sibling pointers.
        (WebCore::ContainerNode::parserAddChild): Use type inference in call to appendChildToContainer.

2012-03-20  Jon Lee  <jonlee@apple.com>

        Restrict access to notifications for unique origins and file URLs with no local file access
        https://bugs.webkit.org/show_bug.cgi?id=79704
        <rdar://problem/10912430>

        Reviewed by Adam Barth.

        Before checking or requesting permissions, we look at whether we can show notifications based on
        the security context. If not, we short circuit and do not forward the request to the client.

        * notifications/Notification.cpp:
        (WebCore::Notification::Notification): Fix a bug where creating a notification goes through slightly
        different logic for checking permissions than when checking permissions through the
        notification center.
        * notifications/NotificationCenter.cpp:
        (WebCore::NotificationCenter::checkPermission): Check to see if the origin can show notifications.
        (WebCore::NotificationCenter::requestPermission): If we know whether an origin can show notifications,
        we asynchronously call the callback with that decision. Otherwise we ask the client.

        Add new variable in the notification center to keep track of pending callbacks when we short-circuit
        requestPermission().
        * notifications/NotificationCenter.h:
        (NotificationRequestCallback): Add new private class encapsulating the callback.
        * notifications/NotificationCenter.cpp:
        (WebCore::NotificationCenter::requestTimedOut): Remove the request from the set of pending callbacks.
        (WebCore::NotificationCenter::NotificationRequest::createAndStartTimer): Because this is used when we already
        know the decision, and are not asking the client to decide, we can immediately trigger a one-shot timer
        to invoke the callback.
        (WebCore::NotificationCenter::NotificationRequest::NotificationRequest):
        (WebCore::NotificationCenter::NotificationRequest::startTimer):
        (WebCore::NotificationCenter::NotificationRequest::timerFired): Invoke the callback and tell the notification
        center.
        * page/SecurityOrigin.h: Add new toRawString() method to return the string representation of the origin,
        regardless of any restrictions that might otherwise cause toString() to return "null".
        * page/SecurityOrigin.cpp:
        (WebCore::SecurityOrigin::canShowNotifications): Added to return a tri-state regarding whether we know
        the origin can show notifications. If the origin is unique, we never let it show. If the origin has
        universal access, we always let it show. Otherwise the client should be asked.
        (WebCore::SecurityOrigin::toString): Refactor to use toRawString().
        (WebCore::SecurityOrigin::toRawString):

        Added FIXME's regarding the naming of enforceFilePathSeparation().
        * dom/Document.cpp:
        (WebCore::Document::initSecurityContext): Also, tab reformatting.

        * WebCore.exp.in: Export toRawString().

2012-03-20  Andreas Kling  <kling@webkit.org>

        Remove unused CSSPrimitiveValue constructors.
        <http://webkit.org/b/81695>

        Reviewed by Antti Koivisto.

        Kill off CSSPrimitiveValue constructors that aren't used anywhere.

        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        * css/CSSPrimitiveValue.h:
        (CSSPrimitiveValueBase):
        (WebCore::CSSPrimitiveValueBase::CSSPrimitiveValueBase):
        (CSSPrimitiveValue):
        * css/CSSPrimitiveValueMappings.h:

2012-03-20  Sami Kyostila  <skyostil@chromium.org>

        Reuse buffer allocation if canvas size does not change
        https://bugs.webkit.org/show_bug.cgi?id=80871

        Reviewed by Stephen White.

        If the user changes the width or height attributes of a canvas element,
        the contents of the canvas should be cleared and the context state
        should be reset. This has become a common idiom to clear the canvas
        "efficiently" at the start of a frame.

        Previously, this code path triggered a full reallocation of the image
        buffer backing the canvas, leading to reduced performance. This patch
        implements an optimization where we reuse the previous image buffer
        allocation if the size of the canvas did not change. Also, instead of
        clearing the canvas every time its dimensions are touched, we only clear
        if anything has been drawn into the canvas since it was previously
        cleared.

        Note that for now this optimization only applies for 2D canvases,
        since it is not entirely clear how touching the dimensions of a WebGL
        canvas should work.

        Test: fast/canvas/canvas-resize-after-paint-without-layout.html +
              existing layout tests for canvas resetting.

        * html/HTMLCanvasElement.cpp:
        (WebCore::HTMLCanvasElement::HTMLCanvasElement):
        (WebCore::HTMLCanvasElement::reset):
        (WebCore::HTMLCanvasElement::createImageBuffer):
        (WebCore::HTMLCanvasElement::clearImageBuffer):
        (WebCore):
        (WebCore::HTMLCanvasElement::clearCopiedImage):
        * html/HTMLCanvasElement.h:
        (HTMLCanvasElement):
        * html/canvas/CanvasRenderingContext2D.cpp:
        (WebCore::CanvasRenderingContext2D::CanvasRenderingContext2D): Save the
        initial graphics context state so we can restore it without creating a
        new context.
        (WebCore::CanvasRenderingContext2D::unwindStateStack):
        (WebCore::CanvasRenderingContext2D::reset): No need to notify the
        compositor when the context is reset, because clearing the image buffer
        does the same thing. We can also skip the notification if we did not
        have an image buffer at the time of the reset, because the reset will
        not have any visual impact in this case. Finally, if the canvas size
        did change, the notification is also unnecessary because of the call
        to RenderObject::repaint() from HTMLCanvasElement::reset().

2012-03-20  Dana Jansens  <danakj@chromium.org>

        [chromium] Allow us to disable overdraw metrics when tracing is off
        https://bugs.webkit.org/show_bug.cgi?id=81431

        Reviewed by Adrienne Walker.

        This change allows us to disable overdraw metrics conditionally in the
        future with a one-line change in each LayerTreeHost class.

        Unit test: CCQuadCullerTest.verifyWithoutMetrics

        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintLayerContents):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::calculateRenderPasses):
        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::::CCOcclusionTrackerBase):
        (WebCore):
        * platform/graphics/chromium/cc/CCOcclusionTracker.h:
        (CCOcclusionTrackerBase):
        * platform/graphics/chromium/cc/CCOverdrawMetrics.cpp:
        (WebCore::CCOverdrawMetrics::CCOverdrawMetrics):
        (WebCore::CCOverdrawMetrics::didCull):
        (WebCore::CCOverdrawMetrics::didDraw):
        (WebCore::CCOverdrawMetrics::recordMetrics):
        * platform/graphics/chromium/cc/CCOverdrawMetrics.h:
        (WebCore::CCOverdrawMetrics::create):
        (CCOverdrawMetrics):

2012-03-20  Robert Hogan  <robert@webkit.org>

        Use-after-free of continuation in RenderBlock::paintContinuationOutlines()
        https://bugs.webkit.org/show_bug.cgi?id=81276

        Reviewed by David Hyatt.

        Test: fast/css/relative-positioned-block-crash.html

        https://trac.webkit.org/changeset/108185/ allowed anonymous blocks to get their own layer (when they're
        relatively positioned). This broke the dependency in addContinuationWithOutline() on the owner of the continuation
        table and the renderer getting added to it always being in the same layer. When they're not in the same layer
        there's no guarantee that the owner of the continuation table will get painted again and so avoid any stale pointers
        in its continuation table should any of the renderers in there get destroyed.

        Fix this for now by only adding renderers to the containing block's continuation table if we don't have our own layer.
        This fix causes fast/inline/continuation-outlines-with-layers.html to regress as it uses blocks inside relatively positioned
        inlines, so skip it on all platforms pending a medium-term fix.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::paintObject):

2012-03-20  Adele Peterson  <adele@apple.com>

        "Attempt to insert nil value " exception when calling attributed string APIs on content with a custom font
        https://bugs.webkit.org/show_bug.cgi?id=81630
        <rdar://problem/10650660> 

        Reviewed by Alexey Proskuryakov. 

        Test: TestWebKitAPI/Tests/mac/AttributedString.mm 

        If content is using a custom font, then the platform font will be nil and needs to be nil checked.

        * platform/mac/HTMLConverter.mm: (+[WebHTMLConverter editingAttributedStringFromRange:]):

2012-03-20  Julien Chaffraix  <jchaffraix@webkit.org>

        Make distributeExtraLogicalHeightToRows return the consumed logical height
        https://bugs.webkit.org/show_bug.cgi?id=81678

        Reviewed by Tony Chang.

        Small refactoring, no change in behavior.

        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::distributeExtraLogicalHeight):
        Remove the consumed logical height from the available height.

        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::distributeExtraLogicalHeightToPercentRows):
        (WebCore::RenderTableSection::distributeExtraLogicalHeightToAutoRows):
        (WebCore::RenderTableSection::distributeRemainingExtraLogicalHeight):
        Changed those method to not return anything but remove from the available width.

        (WebCore::RenderTableSection::distributeExtraLogicalHeightToRows):
        Return the consumed logical height.

        * rendering/RenderTableSection.h:
        Updated the previous distribute functions signature and the comment about
        the returned value from distributeExtraLogicalHeightToRows.

2012-03-20  Jacky Jiang  <zhajiang@rim.com>

        [BlackBerry] Dijit crash WebCore::CookieManager::getRawCookies
        https://bugs.webkit.org/show_bug.cgi?id=81686

        Reviewed by Rob Buis.

        HTML plugin element with an empty src caused an ASSERT failure on debug
        build and a crash on release build.
        When getting cookie, url can be null, so we need to check for it to
        avoid the crash.

        No new tests as this is covered by
        LayoutTests/fast/loader/empty-embed-src-attribute.html.

        * platform/network/blackberry/ResourceRequestBlackBerry.cpp:
        (WebCore::ResourceRequest::initializePlatformRequest):

2012-03-20  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Tabbed pane drop down should be sorted.
        https://bugs.webkit.org/show_bug.cgi?id=81680

        Reviewed by Pavel Feldman.

        * inspector/front-end/TabbedPane.js:
        (WebInspector.TabbedPane.prototype._populateDropDownFromIndex.compareFunction):
        (WebInspector.TabbedPane.prototype._populateDropDownFromIndex):

2012-03-20  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Open resource dialog scripts list should be sorted.
        https://bugs.webkit.org/show_bug.cgi?id=81682

        Reviewed by Pavel Feldman.

        * inspector/front-end/FilteredItemSelectionDialog.js:
        (WebInspector.OpenResourceDialog.compareFunction):
        (WebInspector.OpenResourceDialog):

2012-03-20  Dana Jansens  <danakj@chromium.org>

        [chromium] Use opaque contents for paint culling
        https://bugs.webkit.org/show_bug.cgi?id=81676

        Reviewed by Adrienne Walker.

        UnitTest: CCLayerTreeHostTestContentLayerOcclusion

        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintLayerContents):

2012-03-20  Dan Bernstein  <mitz@apple.com>

        Build fix after r111419.

        * dom/WebKitNamedFlow.cpp:
        * dom/WebKitNamedFlow.h:

2012-03-20  Dan Bernstein  <mitz@apple.com>

        REGRESSION (r111229): css1/basic/inheritance.html is failing
        https://bugs.webkit.org/show_bug.cgi?id=81684

        Reverted r111229.

        Rubber-stamped by Dave Hyatt.

        * dom/Document.cpp:
        (WebCore::Document::webkitGetFlowByName):
        * dom/Document.h:
        (Document):
        * dom/Element.cpp:
        (WebCore::Element::detach):
        * dom/NodeRenderingContext.cpp:
        (WebCore::NodeRenderingContext::moveToFlowThreadIfNeeded):
        * dom/WebKitNamedFlow.cpp:
        (WebCore):
        * dom/WebKitNamedFlow.h:
        (WebCore):
        (WebKitNamedFlow):
        * dom/WebKitNamedFlow.idl:

2012-03-20  Vineet Chaudhary  <rgf748@motorola.com>

        https://bugs.webkit.org/show_bug.cgi?id=80696
        Remove custom bindings for attribute type Array.

        Reviewed by Kentaro Hara.

        No new tests.

        * bindings/js/JSConsoleCustom.cpp: Removed custom function.
        (WebCore):
        * bindings/js/JSDOMBinding.h: Added template jsArray and toNativeArray.
        (WebCore):
        (WebCore::jsArray):
        (WebCore::toNativeArray):
        * bindings/scripts/CodeGenerator.pm: Modified codegenerators to generate appropriate code.
        (GetArrayType): Added GetArrayType to get return type of attribute interface.
        * bindings/scripts/CodeGeneratorGObject.pm: Modified codegenerators to generate appropriate code.
        (SkipAttribute):
        * bindings/scripts/CodeGeneratorJS.pm: Modified codegenerators to generate appropriate code.
        (AddIncludesForType):
        (JSValueToNative):
        (NativeToJSValue):
        * bindings/scripts/CodeGeneratorV8.pm: Modified codegenerators to generate appropriate code.
        (GenerateNormalAttrGetter):
        (GenerateNormalAttrSetter):
        (JSValueToNative):
        (NativeToJSValue):
        * bindings/scripts/test/GObject/WebKitDOMTestObj.cpp: Updated results from running binding tests.
        (webkit_dom_test_obj_get_property):
        (webkit_dom_test_obj_class_init):
        * bindings/scripts/test/GObject/WebKitDOMTestObj.h: Ditto.
        * bindings/scripts/test/JS/JSTestObj.cpp: Ditto.
        (WebCore::jsTestObjSequenceAttr):
        (WebCore::setJSTestObjSequenceAttr):
        (WebCore::jsTestObjPrototypeFunctionMethodReturningSequence):
        * bindings/scripts/test/V8/V8TestObj.cpp: Ditto.
        (WebCore::TestObjInternal::sequenceAttrAttrGetter):
        (WebCore::TestObjInternal::sequenceAttrAttrSetter):
        (WebCore::TestObjInternal::methodReturningSequenceCallback):
        * bindings/v8/V8Binding.h: Added template v8Array and toNativeArray.
        (WebCore):
        (WebCore::v8Array):
        (WebCore::toNativeArray):
        * bindings/v8/custom/V8ConsoleCustom.cpp: Removed custom function.
        (WebCore):
        * page/Console.idl: Replaced attribute type Array to sequence<SriptProfile> to remove
          custom bindings.

2012-03-20  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111310.
        http://trac.webkit.org/changeset/111310
        https://bugs.webkit.org/show_bug.cgi?id=81683

        Broke layout test
        dom/xhtml/level3/core/nodereplacechild30.xhtml (Requested by
        aklein on #webkit).

        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::replaceChild):
        (WebCore::ContainerNode::appendChild):
        (WebCore::ContainerNode::parserAddChild):

2012-03-20  Gyuyoung Kim  <gyuyoung.kim@samsung.com>

        Convert hasSpellingMarker to use Internals interface.
        https://bugs.webkit.org/show_bug.cgi?id=81300

        Reviewed by Ryosuke Niwa.

        Remove hasSpellingMarker functions, because it is able to work in the
        cross-port way through the Internals interface.

        No new tests, since we are improving here the infra-structure
        for testing a specific method.

        * testing/Internals.cpp:
        (WebCore::Internals::hasSpellingMarker):
        (WebCore):
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-20  Dan Bernstein  <mitz@apple.com>

        Build fix.

        * history/PageCache.cpp: Fixed an unused function warning introduced in r111391.

2012-03-20  Konrad Piascik  <kpiascik@rim.com>

        (r110063) m_mouseDownMayStartDrag is used without being behind the ENABLE(DRAG_SUPPORT) macro
        https://bugs.webkit.org/show_bug.cgi?id=81666

        Reviewed by Rob Buis.

        Compiled with feature disabled and built.

        * page/EventHandler.cpp:
        (WebCore::EventHandler::selectCursor):

2012-03-20  W. James MacLean  <wjmaclean@chromium.org>

        [chromium] Tune fling physics curve. [Not for review yet]
        https://bugs.webkit.org/show_bug.cgi?id=81398

        Reviewed by James Robinson.

        Existing tests updated.

        Tune physics of curve for better feel.

        * platform/TouchFlingPlatformGestureCurve.cpp:
        (WebCore::TouchFlingPlatformGestureCurve::apply):

2012-03-20  Alexis Menard  <alexis.menard@openbossa.org>

        Implement a fast path when setting CSS properties with keywords from JS.
        https://bugs.webkit.org/show_bug.cgi?id=80874

        Reviewed by Antti Koivisto.

        The idea is to avoid the creation of the CSSParser instance and to run the parser on
        a string we know it should be a keyword. When JS calls parseValue we try to check if we can
        use the fast path and if the keyword is accepted then we just add it to the declaration directly.
        For the sake of maintenance the parseValue function used by CSSGrammar.y is sharing some code with
        the fast path (keyword matching mostly).

        This patch improves this use case by 20%. Setting keyword properties from JS is used a lot in
        Google Maps for example (when zooming or panning).

        No new tests : it's a performance improvement, there shouldn't be any behavior change.

        * css/CSSParser.cpp:
        (WebCore):
        (WebCore::isValidKeywordPropertyAndValue):
        (WebCore::isKeywordPropertyID):
        (WebCore::parseKeywordValue):
        (WebCore::CSSParser::parseValue):

2012-03-20  Ian Vollick  <vollick@chromium.org>

        [chromium] Infrastructure to allow animating layers to be only partially updated
        https://bugs.webkit.org/show_bug.cgi?id=81106

        Reviewed by James Robinson

        Merged the controller tests in CCLayerAnimationControllerTest

        * WebCore.gypi:
        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
        * platform/graphics/chromium/GraphicsLayerChromium.h:
        (GraphicsLayerChromium):
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::LayerChromium):
        (WebCore::LayerChromium::pushPropertiesTo):
        (WebCore::LayerChromium::setOpacityFromAnimation):
        (WebCore):
        (WebCore::LayerChromium::setTransformFromAnimation):
        (WebCore::LayerChromium::addAnimation):
        (WebCore::LayerChromium::pauseAnimation):
        (WebCore::LayerChromium::removeAnimation):
        (WebCore::LayerChromium::suspendAnimations):
        (WebCore::LayerChromium::resumeAnimations):
        (WebCore::LayerChromium::setLayerAnimationController):
        (WebCore::LayerChromium::hasActiveAnimation):
        (WebCore::LayerChromium::setAnimationEvent):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore):
        (LayerChromium):
        (WebCore::LayerChromium::id):
        (WebCore::LayerChromium::opacity):
        (WebCore::LayerChromium::transform):
        (WebCore::LayerChromium::bounds):
        * platform/graphics/chromium/cc/CCActiveAnimation.h:
        (CCActiveAnimation):
        * platform/graphics/chromium/cc/CCAnimationEvents.cpp:
        (WebCore::CCAnimationEvent::CCAnimationEvent):
        (WebCore::CCAnimationEvent::toFloatAnimationFinishedEvent):
        (WebCore::CCAnimationEvent::toTransformAnimationFinishedEvent):
        (WebCore::CCAnimationStartedEvent::create):
        (WebCore):
        (WebCore::CCAnimationStartedEvent::CCAnimationStartedEvent):
        (WebCore::CCFloatAnimationFinishedEvent::create):
        (WebCore::CCFloatAnimationFinishedEvent::CCFloatAnimationFinishedEvent):
        (WebCore::CCFloatAnimationFinishedEvent::~CCFloatAnimationFinishedEvent):
        (WebCore::CCFloatAnimationFinishedEvent::type):
        (WebCore::CCTransformAnimationFinishedEvent::create):
        (WebCore::CCTransformAnimationFinishedEvent::CCTransformAnimationFinishedEvent):
        (WebCore::CCTransformAnimationFinishedEvent::~CCTransformAnimationFinishedEvent):
        (WebCore::CCTransformAnimationFinishedEvent::type):
        * platform/graphics/chromium/cc/CCAnimationEvents.h:
        (WebCore):
        (WebCore::CCAnimationEvent::targetProperty):
        (CCAnimationEvent):
        (CCAnimationStartedEvent):
        (CCFloatAnimationFinishedEvent):
        (WebCore::CCFloatAnimationFinishedEvent::finalValue):
        (CCTransformAnimationFinishedEvent):
        (WebCore::CCTransformAnimationFinishedEvent::finalValue):
        * platform/graphics/chromium/cc/CCLayerAnimationController.cpp:
        (WebCore::CCLayerAnimationController::CCLayerAnimationController):
        (WebCore::CCLayerAnimationController::create):
        (WebCore::CCLayerAnimationController::pushAnimationUpdatesTo):
        (WebCore::CCLayerAnimationController::animate):
        (WebCore):
        (WebCore::CCLayerAnimationController::add):
        (WebCore::CCLayerAnimationController::getActiveAnimation):
        (WebCore::CCLayerAnimationController::hasActiveAnimation):
        (WebCore::CCLayerAnimationController::isAnimatingProperty):
        (WebCore::CCLayerAnimationController::pushNewAnimationsToImplThread):
        (WebCore::CCLayerAnimationController::removeAnimationsCompletedOnMainThread):
        (WebCore::CCLayerAnimationController::startAnimationsWaitingForNextTick):
        (WebCore::CCLayerAnimationController::startAnimationsWaitingForStartTime):
        (WebCore::CCLayerAnimationController::startAnimationsWaitingForTargetAvailability):
        (WebCore::CCLayerAnimationController::resolveConflicts):
        (WebCore::CCLayerAnimationController::purgeFinishedAnimations):
        (WebCore::CCLayerAnimationController::tickAnimations):
        * platform/graphics/chromium/cc/CCLayerAnimationController.h:
        (WebCore):
        (CCLayerAnimationControllerClient):
        (WebCore::CCLayerAnimationControllerClient::~CCLayerAnimationControllerClient):
        (CCLayerAnimationController):
        * platform/graphics/chromium/cc/CCLayerAnimationControllerImpl.cpp: Removed.
        * platform/graphics/chromium/cc/CCLayerAnimationControllerImpl.h: Removed.
        * platform/graphics/chromium/cc/CCLayerAnimationDelegate.h:
        (CCLayerAnimationDelegate):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::CCLayerImpl):
        (WebCore::CCLayerImpl::setOpacityFromAnimation):
        (WebCore):
        (WebCore::CCLayerImpl::setTransformFromAnimation):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (CCLayerImpl):
        (WebCore::CCLayerImpl::id):
        (WebCore::CCLayerImpl::layerAnimationController):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
        (WebCore::CCLayerTreeHost::updateAnimations):
        (WebCore::CCLayerTreeHost::finishCommitOnImplThread):
        (WebCore::CCLayerTreeHost::didBecomeInvisibleOnImplThread):
        (WebCore::CCLayerTreeHost::animateLayers):
        (WebCore):
        (WebCore::CCLayerTreeHost::animateLayersRecursive):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        * platform/graphics/chromium/cc/CCLayerTreeHostCommon.cpp:
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::animateLayersRecursive):
        (WebCore::CCLayerTreeHostImpl::animateLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCThreadProxy.h:
        (WebCore::CCThreadProxy::BeginFrameAndCommitState::BeginFrameAndCommitState):

2012-03-20  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: REGRESSION Detached DOM Nodes are not highlighted
        https://bugs.webkit.org/show_bug.cgi?id=81662

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshotNode.prototype.get isDetachedDOMTree):

2012-03-20  Gavin Peters  <gavinp@chromium.org>

        New PageCache histogram for tracking the highest leverage frame reject reasons.
        https://bugs.webkit.org/show_bug.cgi?id=81358

        Reviewed by Adam Barth.

        The current chromium FrameClientImpl always denies page cache; but
        that's easily fixable.  This histogram tracks which rejection
        causes occur alone with that cause.  I'm particularly interested
        in knowing how many more pages would work in the page cache if we
        could get plugins in.

        * history/PageCache.cpp:
        (WebCore::logCanCachePageDecision):

2012-03-15  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: support inline source maps.
        https://bugs.webkit.org/show_bug.cgi?id=81248

        - support optional map.sourcesContent array with sources content
        - support data: url as script sourceMapURL, e.g. "//@ sourceMappingURL=data:application/json;base64,<base64-encoded map>"

        Reviewed by Pavel Feldman.

        * inspector/front-end/CompilerSourceMapping.js:
        (WebInspector.ClosureCompilerSourceMapping):
        (WebInspector.ClosureCompilerSourceMapping.prototype.loadSourceCode):
        (WebInspector.ClosureCompilerSourceMapping.prototype._parseMap):
        (WebInspector.ClosureCompilerSourceMapping.prototype._canonicalizeURL):

2012-03-20  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: treat Uint* external arrays as arrays in console.
        https://bugs.webkit.org/show_bug.cgi?id=81653

        Reviewed by Yury Semikhatsky.

        * bindings/js/JSInjectedScriptHostCustom.cpp:
        (WebCore::JSInjectedScriptHost::type):
        * bindings/v8/custom/V8InjectedScriptHostCustom.cpp:
        (WebCore::V8InjectedScriptHost::typeCallback):

2012-03-20  Andreas Kling  <kling@webkit.org>

        Let CSSImageValue inherit directly from CSSValue.
        <http://webkit.org/b/81635>

        Reviewed by Antti Koivisto.

        This removes the last of the CSSPrimitiveValue subclasses, which will
        open up the class to heavier refactoring.

        Those CSSImageValues that used to represent the 'none' value are now
        simply created as CSSPrimitiveValue identifiers by the parser.

        Test: fast/css/image-value-type.html

        * css/CSSCursorImageValue.cpp:
        (WebCore::CSSCursorImageValue::~CSSCursorImageValue):
        (WebCore::CSSCursorImageValue::updateIfSVGCursorIsUsed):
        (WebCore::CSSCursorImageValue::cachedImage):
        * css/CSSImageValue.cpp:
        (WebCore::CSSImageValue::CSSImageValue):
        (WebCore::CSSImageValue::cachedOrPendingImage):
        (WebCore::CSSImageValue::cachedImage):
        (WebCore::CSSImageValue::customCssText):
        * css/CSSImageValue.h:
        (WebCore::CSSImageValue::url):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        (WebCore::CSSParser::parseFillImage):
        (WebCore::CSSParser::parseBorderImage):
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyCursor::applyValue):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * css/CSSValue.h:
        (WebCore::CSSValue::isPrimitiveValue):

2012-03-20  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: call .length as the last check when detecting arrays.
        https://bugs.webkit.org/show_bug.cgi?id=81335

        Reviewed by Yury Semikhatsky.

        * inspector/InjectedScriptSource.js:

2012-03-20  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: newly added CSS rules shouldn't rewrite HTML content in the resources panel
        https://bugs.webkit.org/show_bug.cgi?id=81414

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/CSSStyleModel.js:
        (WebInspector.CSSStyleModelResourceBinding.prototype._styleSheetChanged.setContent):
        (WebInspector.CSSStyleModelResourceBinding.prototype._styleSheetChanged):

2012-03-20  Yury Semikhatsky  <yurys@chromium.org>

        Web Inspector: provide class name filter for "comparison" view in heap profiler
        https://bugs.webkit.org/show_bug.cgi?id=81641

        Class name filtering now works for both Summary and Comparison views.

        Reviewed by Pavel Feldman.

        * inspector/front-end/DetailedHeapshotView.js:
        (WebInspector.DetailedHeapshotView.prototype._createToolbarWithClassNameFilter):
        (WebInspector.DetailedHeapshotView.prototype._changeNameFilter):
        * inspector/front-end/heapProfiler.css:
        (.detailed-heapshot-view .class-view-grid):
        (.detailed-heapshot-view .class-view-toolbar):
        (.detailed-heapshot-view .class-view-toolbar input.class-name-filter):

2012-03-20  Nikolas Zimmermann  <nzimmermann@rim.com>

        Make animVal support type-safe
        https://bugs.webkit.org/show_bug.cgi?id=81640

        Reviewed by Antti Koivisto.

        Test: svg/animations/force-use-shadow-tree-recreation-while-animating.html

        Redesign animVal support in a type-safe fashion, avoiding the SVGGenericAnimatedType
        and associated reinterpret_casts, which require all call-sites to assure that the
        types are safe to cast, before actually calling the method.

        Remove pure virtual animationStarted/Ended/ValueWillChange/ValueDidChange & currentBaseValueVariant methods from SVGAnimatedProperty,
        and de-virtualize them in classes that inherit from SVGAnimatedProperty, like SVGAnimatedPropertyTearOff, etc.

        Add startAnimValAnimation/stopAnimValAnimation/resetAnimValToBaseVal/animValWillChange/animVallDidChange methods to all
        SVGAnimatedXXXAnimator classes that currently support animVal (SVGAnimatedLength/LengthList/Number(OptionalNumber)/NumberList/TransformList).
        Those SVGAnimatedLengthAnimator can cast the generic SVGAnimatedProperty* associated with a certain SVG DOM property, to the real type
        eg. SVGAnimatedLength (which is a SVGAnimatedPropertyTearOff<SVGLength>). This way we can call those methods, without relying on virtual
        function calls. Also it makes the "SVGGenericAnimatedType* currentBaseValueVariant()" accessor needless, as we can just call the method
        right on eg. the SVGAnimatedLength, which gives us the "const SVGLength&" object, instead of a generic pointer type, that we have to
        reinterpret_cast to some hopefully-matching expected type. The new approach is truly type-safey, but needs a bit more boilerplate code.

        To reduce the amount of copy&paste across the SVGAnimatedXXXAnimator classes, all code is placed in template functions in
        SVGAnimatedTypeAnimator.h, which can be shared across all SVGAnimatedXXXAnimator classes, that inherit from SVGAnimatedTypeAnimator.

        Test: svg/animations/force-use-shadow-tree-recreation-while-animating.html

        * svg/SVGAnimateElement.cpp:
        (WebCore::SVGAnimateElement::calculateAnimatedValue):
        (WebCore::SVGAnimateElement::resetToBaseValue):
        (WebCore::SVGAnimateElement::applyResultsToTarget):
        (WebCore):
        (WebCore::SVGAnimateElement::targetElementWillChange):
        * svg/SVGAnimatedLength.cpp:
        (WebCore::SVGAnimatedLengthAnimator::startAnimValAnimation):
        (WebCore::SVGAnimatedLengthAnimator::stopAnimValAnimation):
        (WebCore):
        (WebCore::SVGAnimatedLengthAnimator::resetAnimValToBaseVal):
        (WebCore::SVGAnimatedLengthAnimator::animValWillChange):
        (WebCore::SVGAnimatedLengthAnimator::animValDidChange):
        * svg/SVGAnimatedLength.h:
        (WebCore):
        (SVGAnimatedLengthAnimator):
        * svg/SVGAnimatedLengthList.cpp:
        (WebCore::SVGAnimatedLengthListAnimator::startAnimValAnimation):
        (WebCore::SVGAnimatedLengthListAnimator::stopAnimValAnimation):
        (WebCore):
        (WebCore::SVGAnimatedLengthListAnimator::resetAnimValToBaseVal):
        (WebCore::SVGAnimatedLengthListAnimator::animValWillChange):
        (WebCore::SVGAnimatedLengthListAnimator::animValDidChange):
        * svg/SVGAnimatedLengthList.h:
        (WebCore):
        (SVGAnimatedLengthListAnimator):
        * svg/SVGAnimatedNumber.cpp:
        (WebCore::SVGAnimatedNumberAnimator::startAnimValAnimation):
        (WebCore::SVGAnimatedNumberAnimator::stopAnimValAnimation):
        (WebCore):
        (WebCore::SVGAnimatedNumberAnimator::resetAnimValToBaseVal):
        (WebCore::SVGAnimatedNumberAnimator::animValWillChange):
        (WebCore::SVGAnimatedNumberAnimator::animValDidChange):
        * svg/SVGAnimatedNumber.h:
        (WebCore):
        (SVGAnimatedNumberAnimator):
        * svg/SVGAnimatedNumberList.cpp:
        (WebCore::SVGAnimatedNumberListAnimator::startAnimValAnimation):
        (WebCore::SVGAnimatedNumberListAnimator::stopAnimValAnimation):
        (WebCore):
        (WebCore::SVGAnimatedNumberListAnimator::resetAnimValToBaseVal):
        (WebCore::SVGAnimatedNumberListAnimator::animValWillChange):
        (WebCore::SVGAnimatedNumberListAnimator::animValDidChange):
        * svg/SVGAnimatedNumberList.h:
        (WebCore):
        (SVGAnimatedNumberListAnimator):
        * svg/SVGAnimatedNumberOptionalNumber.cpp:
        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::startAnimValAnimation):
        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::stopAnimValAnimation):
        (WebCore):
        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::resetAnimValToBaseVal):
        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::animValWillChange):
        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::animValDidChange):
        * svg/SVGAnimatedNumberOptionalNumber.h:
        (WebCore):
        (SVGAnimatedNumberOptionalNumberAnimator):
        * svg/SVGAnimatedTransformList.cpp:
        (WebCore::SVGAnimatedTransformListAnimator::startAnimValAnimation):
        (WebCore):
        (WebCore::SVGAnimatedTransformListAnimator::stopAnimValAnimation):
        (WebCore::SVGAnimatedTransformListAnimator::resetAnimValToBaseVal):
        (WebCore::SVGAnimatedTransformListAnimator::animValWillChange):
        (WebCore::SVGAnimatedTransformListAnimator::animValDidChange):
        * svg/SVGAnimatedTransformList.h:
        (WebCore):
        (SVGAnimatedTransformListAnimator):
        * svg/SVGAnimatedType.h:
        (WebCore):
        * svg/SVGAnimatedTypeAnimator.h:
        (WebCore):
        (SVGAnimatedTypeAnimator):
        (WebCore::SVGAnimatedTypeAnimator::startAnimValAnimation):
        (WebCore::SVGAnimatedTypeAnimator::stopAnimValAnimation):
        (WebCore::SVGAnimatedTypeAnimator::resetAnimValToBaseVal):
        (WebCore::SVGAnimatedTypeAnimator::animValWillChange):
        (WebCore::SVGAnimatedTypeAnimator::animValDidChange):
        (WebCore::SVGAnimatedTypeAnimator::findAnimatedPropertiesForAttributeName):
        (WebCore::SVGAnimatedTypeAnimator::startAnimation):
        (WebCore::SVGAnimatedTypeAnimator::stopAnimValAnimationForType):
        (WebCore::SVGAnimatedTypeAnimator::animValDidChangeForType):
        (WebCore::SVGAnimatedTypeAnimator::animValWillChangeForType):
        (WebCore::SVGAnimatedTypeAnimator::constructFromOneBaseValue):
        (WebCore::SVGAnimatedTypeAnimator::resetFromOneBaseValue):
        (WebCore::SVGAnimatedTypeAnimator::constructFromTwoBaseValues):
        (WebCore::SVGAnimatedTypeAnimator::resetFromTwoBaseValues):
        (WebCore::SVGAnimatedTypeAnimator::castAnimatedPropertyToActualType):
        (WebCore::SVGAnimatedTypeAnimator::collectAnimatedPropertiesFromInstances):
        * svg/SVGAnimationElement.cpp:
        (WebCore::SVGAnimationElement::applyAnimatedValue):
        (WebCore::SVGAnimationElement::setTargetAttributeAnimatedValue):
        * svg/SVGAnimationElement.h:
        (SVGAnimationElement):
        * svg/SVGElementInstance.cpp:
        (WebCore::SVGElementInstance::invalidateAllInstancesOfElement):
        (WebCore::SVGElementInstance::InstanceUpdateBlocker::InstanceUpdateBlocker):
        (WebCore):
        (WebCore::SVGElementInstance::InstanceUpdateBlocker::~InstanceUpdateBlocker):
        * svg/SVGElementInstance.h:
        (WebCore):
        (InstanceUpdateBlocker):
        (SVGElementInstance):
        * svg/properties/SVGAnimatedListPropertyTearOff.h:
        (WebCore::SVGAnimatedListPropertyTearOff::currentBaseValue):
        (WebCore::SVGAnimatedListPropertyTearOff::animationStarted):
        (WebCore::SVGAnimatedListPropertyTearOff::animationEnded):
        (WebCore::SVGAnimatedListPropertyTearOff::animValWillChange):
        (WebCore::SVGAnimatedListPropertyTearOff::animValDidChange):
        * svg/properties/SVGAnimatedProperty.h:
        (WebCore):
        * svg/properties/SVGAnimatedPropertyTearOff.h:
        (WebCore::SVGAnimatedPropertyTearOff::currentBaseValue):
        (WebCore::SVGAnimatedPropertyTearOff::animationStarted):
        (WebCore::SVGAnimatedPropertyTearOff::animationEnded):
        (WebCore::SVGAnimatedPropertyTearOff::animValWillChange):
        (WebCore::SVGAnimatedPropertyTearOff::animValDidChange):
        * svg/properties/SVGAnimatedStaticPropertyTearOff.h:
        (WebCore::SVGAnimatedStaticPropertyTearOff::currentBaseValue):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animationStarted):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animationEnded):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animValWillChange):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animValDidChange):

2012-03-20  Mihnea Ovidenie  <mihnea@adobe.com>

        [CSSRegions]Implement NamedFlow::getRegionsByContentNode
        https://bugs.webkit.org/show_bug.cgi?id=77746

        Reviewed by David Hyatt.

        The list of regions returned is a static node list.

        Tests: fast/regions/get-regions-by-content-node-horiz-bt.html
               fast/regions/get-regions-by-content-node-horiz-tb.html
               fast/regions/get-regions-by-content-node-vert-lr.html
               fast/regions/get-regions-by-content-node-vert-rl.html
               fast/regions/get-regions-by-content-node.html
               fast/regions/get-regions-by-content-node2.html

        * dom/WebKitNamedFlow.cpp:
        (WebCore::WebKitNamedFlow::getRegionsByContentNode):
        (WebCore):
        * dom/WebKitNamedFlow.h:
        (WebKitNamedFlow):
        * dom/WebKitNamedFlow.idl:
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::regionInRange):
        (WebCore):
        (WebCore::RenderFlowThread::objectInFlowRegion):
        * rendering/RenderFlowThread.h:
        * rendering/RenderRegion.h:
        (WebCore::RenderRegion::flowThread):

2012-03-20  Luke Macpherson  <macpherson@chromium.org>

        Remove min and max parameters from CSSPrimitiveValue's roundForImpreciseConversion function.
        https://bugs.webkit.org/show_bug.cgi?id=81629

        Reviewed by Andreas Kling.

        No new tests / refactoring only.

        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::computeLength):
        * css/CSSPrimitiveValue.h:
        (WebCore::roundForImpreciseConversion):
        * rendering/style/RenderStyle.h:
        (WebCore::adjustForAbsoluteZoom):

2012-03-20  Jason Liu  <jason.liu@torchmobile.com.cn>

        [BlackBerry]Cookies shouldn't be set into each of webcore's request and platform's request. And this makes a regression.
        https://bugs.webkit.org/show_bug.cgi?id=80800

        FrameLoaderClientBlackBerry::dispatchWillSendRequest sets cookies to resourceRequest's header
        list to show cookies in inspector. And NetworkManager::startJob will set cookies to platformRequest's
        m_cookieData again. So cookies are set two times. This causes performance issue.

        Moreover, platformRequest will copy cookies from the resourceRequest. And then platformRequest has
        the same cookies in its header list and m_cookieData. Network will use header list's cookies which
        are output as latin1 only. This causes the regression of https://bugs.webkit.org/show_bug.cgi?id=80307.

        Now, set cookies in initializePlatformRequest to ensure setting cookies only once.

        Reviewed by George Staikos.

        Test: http/tests/cookies/resources/setUtf8Cookies.php

        * platform/network/blackberry/NetworkManager.cpp:
        (WebCore::NetworkManager::startJob):
        * platform/network/blackberry/ResourceRequest.h:
        (ResourceRequest):
        * platform/network/blackberry/ResourceRequestBlackBerry.cpp:
        (WebCore::ResourceRequest::initializePlatformRequest):

2012-03-19  Benjamin Poulain  <bpoulain@apple.com>

        Build fix for Debug build after r111358

        Unreviewed.

        * bindings/js/CachedScriptSourceProvider.h:
        * bindings/js/StringSourceProvider.h:

2012-03-19  Emil A Eklund  <eae@chromium.org>

        Add FractionalLayoutUnit version of blend to AnimationUtilities
        https://bugs.webkit.org/show_bug.cgi?id=81572

        Reviewed by Eric Seidel.
        
        Add version of blend method that operates on FractionalLayoutUnits. This
        will be used in place of the integer version in many places once we
        enable support for subpixel layout.

        No new tests.

        * platform/FractionalLayoutUnit.h:
        Include math.h to make GTK build happy.

        * platform/animation/AnimationUtilities.h:
        (WebCore::blend):

2012-03-19  Adam Barth  <abarth@webkit.org>

        Remove support for "magic" iframe
        https://bugs.webkit.org/show_bug.cgi?id=81590

        Reviewed by Eric Seidel.

        This patch removes support for "magic" iframe, which previously allowed
        an iframe to be transfered from one document to another without
        reloading the iframe.  The idea behind this feature was to let sites
        create "pop out" windows that could outlive their parents by
        transfering state to these windows via these magic iframes.

        Unforuntately, this feature was never implemented by other browsers and
        has been the source of a series of security vulnerabilities.  Although
        we have fixed each vulnerability as it has been discovered, the feature
        is still a complex corner case that isn't widely exercised on the web.
        For that reason, it's likely to have more vulnerabilities in the
        future.

        I'm not aware of any web sites that use this feature anymore.  There
        were a handful of them, but we appear to have been successful in
        evangalizing them to move away from "magic" iframe.

        * dom/Document.cpp:
        (WebCore::Document::adoptNode):
        * html/HTMLFrameElementBase.cpp:
        (WebCore):
        (WebCore::HTMLFrameElementBase::HTMLFrameElementBase):
        (WebCore::HTMLFrameElementBase::insertedIntoDocument):
        * html/HTMLFrameElementBase.h:
        (HTMLFrameElementBase):
        * loader/DocumentLoader.cpp:
        (WebCore):
        * loader/DocumentLoader.h:
        (DocumentLoader):
        * loader/EmptyClients.h:
        (WebCore::EmptyFrameLoaderClient::createFrame):
        * loader/FrameLoader.cpp:
        (WebCore):
        * loader/FrameLoader.h:
        (FrameLoader):
        * loader/FrameLoaderClient.h:
        (FrameLoaderClient):
        * loader/ResourceLoadNotifier.cpp:
        (WebCore):
        * loader/ResourceLoadNotifier.h:
        (ResourceLoadNotifier):
        * page/Frame.cpp:
        (WebCore):
        * page/Frame.h:
        (Frame):

2012-03-19  Julien Chaffraix  <jchaffraix@webkit.org>

        REGRESSION(r110072): Improper repainting on table with overflow: hidden
        https://bugs.webkit.org/show_bug.cgi?id=81460

        Reviewed by Simon Fraser.

        Test: fast/repaint/table-hover-on-link.html

        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::layout): Add a call to RenderBlock::updateCachedSizeForOverflowClip
        so that we properly keep our cached size up to date. This fixes the problem for now but the
        real solution is to make sure it is called on all classes that needs to. This is tracked by
        bug 81461.

2012-03-19  Pablo Flouret  <pablof@motorola.com>

        Add support for crossorigin attribute in script elements
        https://bugs.webkit.org/show_bug.cgi?id=81438

        Reviewed by Adam Barth.

        Works similarly to img and its crossorigin attribute. In the future it
        could allow for things like showing full error messages in error
        handlers, etc.

        Tests: http/tests/security/script-crossorigin-loads-correctly.html
               http/tests/security/script-crossorigin-loads-same-origin.html
               http/tests/security/script-with-failed-cors-check-fails-to-load.html

        * dom/ScriptElement.cpp:
        (WebCore::ScriptElement::ScriptElement):
        (WebCore::ScriptElement::requestScript):
        (WebCore::ScriptElement::notifyFinished):
        * dom/ScriptElement.h:
        (ScriptElement):
        * html/HTMLScriptElement.idl:

2012-03-19  Benjamin Poulain  <benjamin@webkit.org>

        Do not copy the script source in the SourceProvider, just reference the existing string
        https://bugs.webkit.org/show_bug.cgi?id=81466

        Reviewed by Geoffrey Garen.

        Instead of creating a copy of the string with 16bits characters, we just return
        a shared StringImpl.

        * bindings/js/CachedScriptSourceProvider.h:
        * bindings/js/StringSourceProvider.h:

2012-03-19  Dana Jansens  <danakj@chromium.org>

        A quick early-out for Region::contains() test
        https://bugs.webkit.org/show_bug.cgi?id=81625

        Reviewed by Anders Carlsson.

        If the bounds of region B include a row/column that is outside the bounds of
        region A, then region B contains a pixel within that row/column that is
        outside of region A.

        * platform/graphics/Region.cpp:
        (WebCore::Region::contains):

2012-03-19  Eric Seidel  <eric@webkit.org>

        Unreviewed attempt to fix the EFL build.

        * platform/graphics/efl/IconEfl.cpp:

2012-03-19  Eric Seidel  <eric@webkit.org>

        Fix more WTF header include paths in WebCore
        https://bugs.webkit.org/show_bug.cgi?id=81602

        Reviewed by Martin Robinson.

        Chromium, Mac and Win already build w/o including wtf subdirectories
        in their include paths for WebCore/WebKit.  Gtk, Qt, and other ports
        should eventually do the same.  This patch fixes up a few loose
        wtf includes in these ports using some search/replace across WebCore.
        If the EWS bots pass this patch doesn't really need any other review.

        * accessibility/gtk/AXObjectCacheAtk.cpp:
        * accessibility/gtk/WebKitAccessibleInterfaceText.cpp:
        * platform/KURL.cpp:
        * platform/audio/gstreamer/AudioDestinationGStreamer.cpp:
        * platform/audio/gstreamer/WebKitWebAudioSourceGStreamer.cpp:
        * platform/audio/gtk/AudioBusGtk.cpp:
        * platform/clutter/GRefPtrClutter.h:
        * platform/graphics/gstreamer/GRefPtrGStreamer.h:
        * platform/graphics/gstreamer/ImageGStreamerCairo.cpp:
        * platform/graphics/gstreamer/ImageGStreamerQt.cpp:
        * platform/graphics/gstreamer/WebKitWebSourceGStreamer.cpp:
        * platform/graphics/gtk/ImageBufferGtk.cpp:
        * platform/graphics/pango/FontPango.cpp:
        * platform/graphics/qt/ImageBufferDataQt.h:
        * platform/graphics/wx/ImageBufferDataWx.h:
        * platform/gtk/ContextMenuGtk.cpp:
        * platform/gtk/ContextMenuItemGtk.cpp:
        * platform/gtk/FileSystemGtk.cpp:
        * platform/gtk/GOwnPtrGtk.h:
        * platform/gtk/GtkAuthenticationDialog.h:
        * platform/gtk/GtkPopupMenu.cpp:
        * platform/gtk/LanguageGtk.cpp:
        * platform/gtk/LocalizedStringsGtk.cpp:
        * platform/gtk/PopupMenuGtk.cpp:
        * platform/gtk/RenderThemeGtk.cpp:
        * platform/gtk/RenderThemeGtk.h:
        * platform/network/soup/GOwnPtrSoup.h:
        * platform/network/soup/ResourceRequestSoup.cpp:
        * platform/network/soup/ResourceResponseSoup.cpp:
        * platform/network/soup/SocketStreamHandle.h:
        * platform/network/soup/SoupURIUtils.cpp:
        * platform/text/TextEncoding.cpp:
        * platform/text/gtk/TextBreakIteratorGtk.cpp:
        * platform/text/gtk/TextCodecGtk.cpp:
        * platform/text/gtk/TextCodecGtk.h:

2012-03-19  Julien Chaffraix  <jchaffraix@webkit.org>

        Move the extra logical height distribution into RenderTable as a new step in our layout algorithm
        https://bugs.webkit.org/show_bug.cgi?id=81548

        Reviewed by Tony Chang.

        Refactoring, no expected change in behavior.

        Moving the distribution step into RenderTable is needed to implement a better distribution algorithm that would
        span several RenderTableSection (which is what IE and FF are doing right now).

        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::distributeExtraLogicalHeight):
        (WebCore::RenderTable::layout):
        Moved the distribution step into distributeExtraLogicalHeight. While at it, changed the code to make use of the helper
        methods to iterate over the sections and explicitly floor the LayoutUnit before calling distributeExtraLogicalHeight.

        * rendering/RenderTable.h:
        Added distributeExtraLogicalHeight.

        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::layoutRows):
        Changed the method signature as it doesn't handle the distribution step anymore.

        * rendering/RenderTableSection.h:
        Updated layoutRows signature and exposed distributeExtraLogicalHeightToRows for RenderTable use.

2012-03-19  Anders Carlsson  <andersca@apple.com>

        Another attempt at fixing the Windows build.

        * platform/graphics/avfoundation/cf/MediaPlayerPrivateAVFoundationCF.cpp:
        (WebCore::LayerClient::platformCALayerDeviceScaleFactor):

2012-03-19  Gyuyoung Kim  <gyuyoung.kim@samsung.com>

        [EFL] Fix build break because of PlatformString.h
        https://bugs.webkit.org/show_bug.cgi?id=81619

        Unreviewed. Fix build break because of PlatformString.h.

        * platform/graphics/efl/IconEfl.cpp: Include PlatformString.h from text directory.

2012-03-19  Eric Seidel  <eric@webkit.org>

        Fix CrWin build after r111258.
        https://bugs.webkit.org/show_bug.cgi?id=81281

        Unreviewed build fix.
        I also fixed similarly incorrect wtf/ includes for other ports
        (which aren't yet as strict as Chromium about wtf includes).

        * platform/blackberry/CookieManager.cpp:
        * platform/blackberry/CookieParser.cpp:
        * platform/blackberry/ParsedCookie.cpp:
        * platform/blackberry/SharedTimerBlackBerry.cpp:
        * platform/graphics/qt/GraphicsLayerQt.cpp:
        * platform/graphics/texmap/TextureMapperAnimation.cpp:
        * rendering/RenderThemeChromiumWin.cpp:
        (WebCore):

2012-03-19  Eric Seidel  <eric@webkit.org>

        Fix CrWin build after r111258.
        https://bugs.webkit.org/show_bug.cgi?id=81281

        Unreviewed build fix.

        * platform/graphics/chromium/FontCacheChromiumWin.cpp:
        * platform/graphics/chromium/FontPlatformDataChromiumWin.cpp:
        * platform/graphics/texmap/TextureMapperAnimation.h:

2012-03-19  Tony Chang  <tony@chromium.org>

        add css parsing of flex-line-pack
        https://bugs.webkit.org/show_bug.cgi?id=81427

        Reviewed by Ojan Vafai.

        Spec: http://dev.w3.org/csswg/css3-flexbox/#flex-line-pack

        Updated tests in css3/flexbox/css-properties.html

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore):
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseValue):
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        (WebCore):
        (WebCore::CSSPrimitiveValue::operator EFlexLinePack):
        * css/CSSProperty.cpp:
        (WebCore::CSSProperty::isInheritedProperty):
        * css/CSSPropertyNames.in:
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * css/CSSValueKeywords.in:
        * rendering/style/RenderStyle.h:
        * rendering/style/RenderStyleConstants.h:
        * rendering/style/StyleFlexibleBoxData.cpp:
        (WebCore::StyleFlexibleBoxData::StyleFlexibleBoxData):
        (WebCore::StyleFlexibleBoxData::operator==):
        * rendering/style/StyleFlexibleBoxData.h:
        (StyleFlexibleBoxData):

2012-03-19  Gustavo Noronha Silva  <gns@gnome.org>

        [GTK] libWebCore.la has become too big for make
        https://bugs.webkit.org/show_bug.cgi?id=81582

        Unreviewed build fix.

        * GNUmakefile.am: build an intermediate library for modules, so that the list
        of source files used to build WebCore can be split and not reach make's limits;
        also try to force relinking libWebCore.la and libWebCoreModules.la when the
        GNUmakefile.am or GNUmakefile.list.am change

2012-03-19  Dana Jansens  <danakj@chromium.org>

        [chromium] Push culled tiles that are prepainted
        https://bugs.webkit.org/show_bug.cgi?id=81552

        Reviewed by Adrienne Walker.

        If a tile was culled during paint, but then prepainted in the following
        idle paint pass, it was still marked as culled (and thus dirty) and not
        pushed to the impl side.

        Renames tile->m_updateCulled to tile->m_updated. This value is true if
        the tile is updated any time during a commit, and remains false if it
        is culled every time the layer is painted.

        Unit test: TiledLayerChromiumTest.pushIdlePaintedOccludedTiles

        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::UpdatableTile::isDirtyForCurrentFrame):
        (UpdatableTile):
        (WebCore::UpdatableTile::UpdatableTile):
        (WebCore::TiledLayerChromium::updateCompositorResources):
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):
        (WebCore::TiledLayerChromium::resetUpdateState):

2012-03-19  Anders Carlsson  <andersca@apple.com>

        Fix Snow Leopard build.

        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::createTileLayer):

2012-03-19  Michal Mocny  <mmocny@google.com>

        [chromium] Adding support for GL_EXT_discard_framebuffer.
        https://bugs.webkit.org/show_bug.cgi?id=81383

        Reviewed by James Robinson.

        * platform/graphics/chromium/Extensions3DChromium.h:

2012-03-19  Adam Klein  <adamk@chromium.org>

        Refactor ContainerNode::replaceChild to match other mutation methods and share code
        https://bugs.webkit.org/show_bug.cgi?id=81579

        Reviewed by Ojan Vafai.

        A future change will make use of the consistency among insertBefore/appendChild/replaceChild
        to handle insertion of DocumentFragments more cleanly.

        No new tests, no change in behavior.

        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::replaceChild): Use collectTargetNodes rather than walking through DocumentFragment children.
        Insert before rather than inserting after. Dispatch to other methods to update parent/sibling pointers.
        (WebCore::ContainerNode::appendChild): Call appendChildToContainer to update parent/sibling pointers.
        (WebCore::ContainerNode::parserAddChild): Use type inference in call to appendChildToContainer.

2012-03-19  Ian Vollick  <vollick@chromium.org>

        [chromium] Times in the cc should be expressed in seconds.
        https://bugs.webkit.org/show_bug.cgi?id=80514

        Reviewed by James Robinson.

        Updated timer tests to use seconds.

        * platform/TouchFlingPlatformGestureCurve.h:
        (TouchFlingPlatformGestureCurve):
        * platform/graphics/chromium/cc/CCActiveGestureAnimation.cpp:
        (WebCore::CCActiveGestureAnimation::animate):
        * platform/graphics/chromium/cc/CCActiveGestureAnimation.h:
        (CCActiveGestureAnimation):
        * platform/graphics/chromium/cc/CCDelayBasedTimeSource.cpp:
        (WebCore::CCDelayBasedTimeSource::create):
        (WebCore::CCDelayBasedTimeSource::CCDelayBasedTimeSource):
        (WebCore::CCDelayBasedTimeSource::setActive):
        (WebCore::CCDelayBasedTimeSource::onTimerFired):
        (WebCore::CCDelayBasedTimeSource::monotonicallyIncreasingTime):
        (WebCore):
        (WebCore::CCDelayBasedTimeSource::postNextTickTask):
        * platform/graphics/chromium/cc/CCDelayBasedTimeSource.h:
        (CCDelayBasedTimeSource):
        * platform/graphics/chromium/cc/CCGestureCurve.h:
        (CCGestureCurve):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WTF):
        (WebCore::CCThreadProxy::beginContextRecreation):
        (WebCore::CCThreadProxy::tryToRecreateContext):
        (WebCore::CCThreadProxy::initializeImplOnImplThread):
        * platform/graphics/chromium/cc/CCTimer.cpp:
        (WebCore::CCTimer::startOneShot):
        * platform/graphics/chromium/cc/CCTimer.h:
        (CCTimer):

2012-03-19  Florin Malita  <fmalita@google.com>

        Relative-height block SVG root not layed out on container height change
        https://bugs.webkit.org/show_bug.cgi?id=81513

        Reviewed by Dirk Schulze.

        Tests: svg/custom/svg-percent-scale-block-expected.html
               svg/custom/svg-percent-scale-block.html

        A couple of places still have style()->logical{Min,Max,}Height percent checks,
        which do not work for SVG elements. This patch adds a virtual hasRelativeLogicalHeight()
        RenderBox method to replace the explicit style checks.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutBlockChildren):
        Use virtual hasRelativeLogicalHeight() instead of logical height style checks.

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::hasRelativeLogicalHeight):
        (WebCore):
        * rendering/RenderBox.h:
        (RenderBox):
        Add virtual hasRelativeLogicalHeight().

        * rendering/RenderView.cpp:
        (WebCore::RenderView::layout):
        Use virtual hasRelativeLogicalHeight() instead of logical height style checks, if possible.

        * rendering/svg/RenderSVGRoot.cpp:
        (WebCore::RenderSVGRoot::hasRelativeLogicalHeight):
        (WebCore):
        * rendering/svg/RenderSVGRoot.h:
        (RenderSVGRoot):
        Add hasRelativeLogicalHeight() override.

2012-03-19  Jer Noble  <jer.noble@apple.com>

        Assertion failure in RenderBlock::addChildIgnoringAnonymousColumnBlocks when running fullscreen/full-screen-twice-crash.html 
        causing "crashes" on the Lion Intel Debug WebKit2 test bots.
        https://bugs.webkit.org/show_bug.cgi?id=81171

        Reviewed by Dan Bernstein.

        No new tests; fixes fullscreen/* tests when running in WebKitTestRunner (WebKit2).

        Add a special-case check if the parent anonymous container is a full screen renderer or placeholder.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::addChildIgnoringAnonymousColumnBlocks):

2012-03-19  Enrica Casucci  <enrica@apple.com>

        WebKit2: create sandbox extensions for files that are dropped in an input control.
        https://bugs.webkit.org/show_bug.cgi?id=81153
        <rdar://problem/11031207>

        Reviewed by Alexey Proskuryakov.

        Now the pasteboard access is performed only in the UI process, it is
        necessary to create sandbox extensions for each file that is dropped into
        an input type=file element. The extensions are created at the time the files
        are dropped and consumed immediately.

        * page/DragActions.h: Added new drag action to be used by the WebDragClient.
        * page/DragController.cpp:
        (WebCore::DragController::concludeEditDrag): Added call to the drag client with the new action.

2012-03-19  Eric Seidel  <eric@webkit.org>

        Fix Chromium Win
        https://bugs.webkit.org/show_bug.cgi?id=81281

        Unreviewed build fix.

        * platform/graphics/chromium/TransparencyWin.h:

2012-03-19  Eric Seidel  <eric@webkit.org>

        Fix the chromium world.
        https://bugs.webkit.org/show_bug.cgi?id=81281

        Unreviewed build fix.

        * rendering/RenderThemeChromiumSkia.cpp:

2012-03-19  Brady Eidson  <beidson@apple.com>

        <rdar://problem/10917120> and https://bugs.webkit.org/show_bug.cgi?id=81066
        Crash in 3rd party WebKit apps under XHR/Cache code

        Reviewed by Antti Koivisto.

        No new layout tests.
        TestWebKitAPI test MemoryCachePruneWithinResourceLoadDelegate included

        A CachedResource representing an XHR was being deleted by cache pruning during a delegate callback.
        This worked until http://trac.webkit.org/changeset/98380

        * history/PageCache.cpp:
        (WebCore::PageCache::releaseAutoreleasedPagesNow): Only trigger pruning after the page cache
          autorelease if it was enabled before.

        * loader/cache/CachedResourceLoader.cpp:
        (WebCore::CachedResourceLoader::loadResource): Disable pruning before loading the resource and
          re-enable it afterwards if necessary.

        * loader/cache/MemoryCache.h:
        (WebCore::MemoryCache::pruneEnabled):

2012-03-19  Anders Carlsson  <andersca@apple.com>

        Fix Windows build.

        * platform/graphics/win/MediaPlayerPrivateQuickTimeVisualContext.cpp:
        (WebCore::MediaPlayerPrivateQuickTimeVisualContext::LayerClient::platformCALayerDeviceScaleFactor):

2012-03-18  James Robinson  <jamesr@chromium.org>

        [chromium] Implement fling-by-wheel on compositor thread
        https://bugs.webkit.org/show_bug.cgi?id=81462

        Reviewed by Adrienne Walker.

        Adds compositor thread support for a fling type implemented as a sequence of wheel scrolls. Covered by new tests
        in WebCompositorInputHandlerImplTests.

        * platform/graphics/chromium/cc/CCInputHandler.h:
        (CCInputHandler):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::scheduleAnimation):
        (WebCore):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwap):

2012-03-19  Emil A Eklund  <eae@chromium.org>

        [mac/chromium] Change platform code to use pixelSnappedRect methods
        https://bugs.webkit.org/show_bug.cgi?id=81016

        Reviewed by Eric Seidel.

        Change platform code to use Node::getPixelSnappedRect,
        pixelSnappedBoundingBoxRect and pixelSnappedAbsoluteClippedOverflowRect
        to avoid exposing subpixel types to the platform layer.

        No new tests.

        * WebCore.exp.in:
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::pixelSnappedAbsoluteClippedOverflowRect):
        Add pixelSnapped version of absoluteClippedOverflowRect
        
        (WebCore):
        * rendering/RenderObject.h:
        (RenderObject):

2012-03-19  Brady Eidson  <beidson@apple.com>

        <rdar://problem/10848575> and https://bugs.webkit.org/show_bug.cgi?id=81516
        REGRESSION (r107435) URLs copied from WebKit apps aren't in the right pasteboard format

        Reviewed by Enrica Casucci.

        r107435 started saving/restoring URLs as strings.
        We need to go back to setting the URL on the pasteboard using AppKit URL pasteboard APIs.

        WebKit API test: ContextMenuCanCopyURL
        No WebKit2 API test possible at this time.

        * platform/mac/PlatformPasteboardMac.mm:
        (WebCore::PlatformPasteboard::setURL):

2012-03-19  Anders Carlsson  <andersca@apple.com>

        Make the TileCache work with HiDPI again
        https://bugs.webkit.org/show_bug.cgi?id=81569
        <rdar://problem/11031542>

        Reviewed by Sam Weinig.

        Set the contentsScale of the individual tile layers to be the same as the device scale factor.
        Also, take into account the fact that the value passed to TileCache::setScale is the product of the
        page scale factor and the device scale factor, so divide it by the device scale factor before storing
        it in m_scale.

        * platform/graphics/ca/GraphicsLayerCA.cpp:
        (WebCore::GraphicsLayerCA::platformCALayerDeviceScaleFactor):
        (WebCore):
        * platform/graphics/ca/GraphicsLayerCA.h:
        (GraphicsLayerCA):
        * platform/graphics/ca/PlatformCALayerClient.h:
        (PlatformCALayerClient):
        * platform/graphics/ca/mac/TileCache.h:
        (TileCache):
        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::TileCache):
        (WebCore::TileCache::setScale):
        (WebCore::TileCache::createTileLayer):

2012-03-19  Abhishek Arya  <inferno@chromium.org>

        Crash due to layer tree information not updated when moving run-in children.
        https://bugs.webkit.org/show_bug.cgi?id=81265

        Reviewed by Julien Chaffraix.

        We need to do a full removal as the run-in child is getting inserted into
        the neighbouring block and |blockRunIn| is going to be destroyed later
        in the function.

        Test: fast/runin/run-in-layer-not-removed-crash.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::handleRunInChild):

2012-03-19  Dana Jansens  <danakj@chromium.org>

        [chromium] Remove misleading double-if
        https://bugs.webkit.org/show_bug.cgi?id=81557

        Reviewed by Adrienne Walker.

        Simple code cleanup, no functionality change.

        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):

2012-03-19  Eric Seidel  <eric@webkit.org>

        Fix WTF header include discipline in Chromium WebKit
        https://bugs.webkit.org/show_bug.cgi?id=81281

        Reviewed by James Robinson.

        I also fixed some bad include dicipline for other ports
        as well.  Those changes are not yet necessary for those ports
        to keep building, but soon should be as those authors
        remove all the extra WTF includes from WebCore and other non-WTF projects.

        * Modules/indexeddb/IDBLevelDBBackingStore.cpp:
        * bindings/scripts/test/CPP/WebDOMFloat64Array.cpp:
        * bindings/scripts/test/GObject/WebKitDOMFloat64Array.cpp:
        * bindings/scripts/test/GObject/WebKitDOMFloat64ArrayPrivate.h:
        * bindings/scripts/test/ObjC/DOMFloat64Array.mm:
        * bindings/v8/NPV8Object.cpp:
        * bindings/v8/SerializedScriptValue.cpp:
        * bindings/v8/SerializedScriptValue.h:
        * bindings/v8/V8Binding.cpp:
        * bindings/v8/V8Binding.h:
        * bindings/v8/V8DOMWrapper.cpp:
        * bindings/v8/V8Utilities.cpp:
        * bindings/v8/custom/V8ArrayBufferCustom.cpp:
        * bindings/v8/custom/V8ArrayBufferViewCustom.h:
        * bindings/v8/custom/V8AudioContextCustom.cpp:
        * bindings/v8/custom/V8DOMWindowCustom.cpp:
        * bindings/v8/custom/V8DedicatedWorkerContextCustom.cpp:
        * bindings/v8/custom/V8Float32ArrayCustom.cpp:
        * bindings/v8/custom/V8Float64ArrayCustom.cpp:
        * bindings/v8/custom/V8Int16ArrayCustom.cpp:
        * bindings/v8/custom/V8Int32ArrayCustom.cpp:
        * bindings/v8/custom/V8Int8ArrayCustom.cpp:
        * bindings/v8/custom/V8MessagePortCustom.cpp:
        * bindings/v8/custom/V8Uint16ArrayCustom.cpp:
        * bindings/v8/custom/V8Uint32ArrayCustom.cpp:
        * bindings/v8/custom/V8Uint8ArrayCustom.cpp:
        * bindings/v8/custom/V8Uint8ClampedArrayCustom.cpp:
        * bindings/v8/custom/V8WorkerCustom.cpp:
        * bindings/v8/custom/V8XMLHttpRequestCustom.cpp:
        * bridge/qt/qt_runtime.cpp:
        * editing/gtk/FrameSelectionGtk.cpp:
        * loader/archive/mhtml/MHTMLArchive.cpp:
        * platform/ScrollAnimatorNone.cpp:
        * platform/blackberry/CookieMap.h:
        * platform/blackberry/CookieParser.h:
        * platform/blackberry/SSLKeyGeneratorBlackBerry.cpp:
        * platform/chromium/DragImageChromiumSkia.cpp:
        * platform/chromium/PlatformCursor.h:
        * platform/chromium/PlatformSupport.h:
        * platform/chromium/PopupMenuPrivate.h:
        * platform/chromium/TraceEvent.h:
        * platform/chromium/WidgetChromium.cpp:
        * platform/efl/RefPtrEfl.h:
        * platform/graphics/cairo/RefPtrCairo.h:
        * platform/graphics/chromium/RateLimiter.h:
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        * platform/graphics/efl/IconEfl.cpp:
        * platform/graphics/gstreamer/GStreamerGWorld.h:
        * platform/graphics/gtk/IconGtk.cpp:
        * platform/graphics/skia/PlatformContextSkia.h:
        * platform/graphics/texmap/TextureMapperBackingStore.h:
        * platform/graphics/texmap/TextureMapperLayer.cpp:
        * platform/graphics/wx/TransformationMatrixWx.cpp:
        * platform/gtk/PlatformMouseEventGtk.cpp:
        * platform/leveldb/LevelDBSlice.h:
        * platform/mediastream/MediaStreamCenter.cpp:
        * platform/network/soup/SocketStreamHandleSoup.cpp:
        * platform/network/win/ResourceHandleWin.cpp:
        * platform/qt/RenderThemeQtMobile.cpp:
        * platform/wx/MouseEventWx.cpp:
        * platform/wx/wxcode/win/fontprops.cpp:

2012-03-19  Dana Jansens  <danakj@chromium.org>

        [chromium] Invalidate/update evicted tiles during commit
        https://bugs.webkit.org/show_bug.cgi?id=81529

        Reviewed by Adrienne Walker.

        A previous change caused a regression where evicted (invalid) tiles
        were no longer marked as dirty and updated. The regress was caused
        in https://bugs.webkit.org/show_bug.cgi?id=81175 and is fixed here.

        Unit test: TiledLayerChromiumTest.pushDeletedTiles

        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::UpdatableTile::copyAndClearDirty):
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):

2012-03-19  Adam Barth  <abarth@webkit.org>

        Remove PLATFORM(TORCHMOBILE) ifdef from MainResourceLoader.cpp
        https://bugs.webkit.org/show_bug.cgi?id=81549

        Reviewed by Eric Seidel.

        This appears to be the only PLATFORM(TORCHMOBILE) ifdef in WebCore.  I
        don't believe this ifdef is needed anymore.

        * loader/MainResourceLoader.cpp:
        (WebCore::shouldLoadAsEmptyDocument):
        (WebCore):

2012-03-19  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111207.
        http://trac.webkit.org/changeset/111207
        https://bugs.webkit.org/show_bug.cgi?id=81561

        Causing chromium unit test failure (Requested by reveman on
        #webkit).

        * platform/graphics/chromium/Extensions3DChromium.h:
        (Extensions3DChromium):

2012-03-19  Anders Carlsson  <andersca@apple.com>

        Remove unnecessary CALayer overrides from WebTileCacheLayer
        https://bugs.webkit.org/show_bug.cgi?id=81562

        Reviewed by Dan Bernstein.

        * platform/graphics/ca/mac/TileCache.h:
        (TileCache):
        * platform/graphics/ca/mac/WebTileCacheLayer.mm:

2012-03-19  Emil A Eklund  <eae@chromium.org>

        Correct usage of LayoutUnits in page code in preparation for turning on subpixel layout
        https://bugs.webkit.org/show_bug.cgi?id=81538

        Reviewed by Eric Seidel.

        Fix usage of LayoutUnits and conversions between types in page code.

        No new tests.

        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::innerHeight):
        (WebCore::DOMWindow::innerWidth):
        Explicitly cast long to int. InspectorInstrumentation requires a long and
        FractionalLayoutUnit has no constructor that takes long.
        
        * page/EventHandler.cpp:
        (WebCore::EventHandler::sendContextMenuEventForKey):
        Pixel snap overflow rect as selection rects are integer based.
        
        * page/FrameView.cpp:
        (WebCore::FrameView::scrollContentsFastPath):
        Pixel snap repaint rects when computing update rect as all scrolling is
        done on integer bounds.
        
        * page/GestureTapHighlighter.cpp:
        Change rects vector to IntRect as addFocusRingRects operates on IntRects.
        
        * page/Page.cpp:
        (WebCore::Page::addRelevantRepaintedObject):
        (WebCore::Page::addRelevantUnpaintedObject):
        Change paint methods to take a LayoutRect paint rect.
        
        * page/SpatialNavigation.cpp:
        (WebCore::distanceDataForNode):
        Change distance calculation to use floats instead of converting to float
        at the end.

2012-03-19  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=81553
        
        [New Multicolumn] Stub out classes to represent sets of column region boxes.

        RenderRegionSet is an abstract class representing a set of contiguous anonymous
        same-size regions.
        
        RenderMultiColumnSet derives from RenderRegionSet and represents a set of contiguous
        columns. It will also handle unique column behavior like column rule painting.
        
        Eventually there will be a RenderPageSet derived class for printing/pages, but
        that will come later after I finish rebuilding multi-column layout.

        Reviewed by Dan Bernstein.

        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * rendering/RenderMultiColumnSet.cpp: Added.
        (WebCore):
        (WebCore::RenderMultiColumnSet::RenderMultiColumnSet):
        (WebCore::RenderMultiColumnSet::renderName):
        * rendering/RenderMultiColumnSet.h: Added.
        (WebCore):
        (RenderMultiColumnSet):
        * rendering/RenderRegionSet.cpp: Added.
        (WebCore):
        (WebCore::RenderRegionSet::RenderRegionSet):
        * rendering/RenderRegionSet.h: Added.
        (WebCore):
        (RenderRegionSet):

2012-03-19  Raymond Toy  <rtoy@google.com>

        Add playback state for AudioBufferSourceNode and add number of active nodes
        https://bugs.webkit.org/show_bug.cgi?id=79701

        Add a playback state to AudioBufferSourceNode so that the user can
        tell if the node is scheduled, playing, or finished.

        For an AudioContext, add a count of the number of
        AudioBufferSourceNode's that are active (playing audio).

        Deleted m_isPlaying and m_hasFinished. For the record, m_isPlaying
        is the same as a playbackState of SCHEDULED_STATE or PLAYING_STATE.
        m_hasFinished is equivalent to a playbackState of FINISHED_STATE.
        
        Reviewed by Chris Rogers.

        Test: webaudio/audiobuffersource-playbackState.html

        * webaudio/AudioBufferSourceNode.cpp:
        (WebCore):
        (WebCore::AudioBufferSourceNode::AudioBufferSourceNode):
        initialize playbackState, remove m_isPlaying, m_hasFinished.
        (WebCore::AudioBufferSourceNode::process): Update playbackState
        (WebCore::AudioBufferSourceNode::finish): Update playbackState
        (WebCore::AudioBufferSourceNode::noteOn): Update playbackState
        (WebCore::AudioBufferSourceNode::noteGrainOn): Update playbackState
        (WebCore::AudioBufferSourceNode::noteOff): Use playbackState 
        * webaudio/AudioBufferSourceNode.h:
        (AudioBufferSourceNode): Define states, remove m_isPlaying, m_hasFinished.
        (WebCore::AudioBufferSourceNode::playbackState): Added.
        * webaudio/AudioBufferSourceNode.idl: Define constants for the
        playback state, add attribute playbackState.
        * webaudio/AudioContext.cpp:
        (WebCore::AudioContext::activeSourceCount): Added.
        (WebCore::AudioContext::incrementActiveSourceCount): Added.
        (WebCore::AudioContext::decrementActiveSourceCount): Added.
        * webaudio/AudioContext.h:
        (AudioContext):
        * webaudio/AudioContext.idl: Add attribute activeSourceCount.

2012-03-19  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r109014.
        http://trac.webkit.org/changeset/109014
        https://bugs.webkit.org/show_bug.cgi?id=81551

        Causing crashes (Requested by inferno-sec on #webkit).

        * rendering/style/RenderStyle.h:

2012-03-19  Tony Chang  <tony@chromium.org>

        Unreviewed, remove headers that no longer exist or moved in WebCore.gypi.

        * WebCore.gypi:

2012-03-19  Mihnea Ovidenie  <mihnea@adobe.com>

        [CSSRegions]Implement NamedFlow::contentNodes attribute
        https://bugs.webkit.org/show_bug.cgi?id=80134

        Reviewed by David Hyatt.

        The named flow content nodes collection contains those nodes with webkitFlowInto property set to 'flow'.
        In the list, the nodes are placed in document order. Nodes with display:none are also part of the list.
        The list of nodes is returned as a static node list.

        Test: fast/regions/webkit-named-flow-content-nodes.html

        * dom/Document.cpp:
        (WebCore::Document::webkitGetFlowByName):
        * dom/Document.h:
        * dom/Element.cpp:
        (WebCore::Element::detach):
        * dom/NodeRenderingContext.cpp:
        (WebCore::NodeRenderingContext::moveToFlowThreadIfNeeded):
        * dom/WebKitNamedFlow.cpp:
        (WebCore::WebKitNamedFlow::contentNodes):
        (WebCore):
        (WebCore::WebKitNamedFlow::registerContentNode):
        * dom/WebKitNamedFlow.h:
        (WebCore):
        (WebKitNamedFlow):
        (WebCore::WebKitNamedFlow::unregisterContentNode):
        * dom/WebKitNamedFlow.idl:

2012-03-19  Xingnan Wang  <xingnan.wang@intel.com>

        ConvolverNode should not incur processing latency
        https://bugs.webkit.org/show_bug.cgi?id=75564

        Reviewed by Chris Rogers.

        Add the DirectConvolver instead of FFTConvolver for the processing of the leading portion of impulse response.

        * WebCore.gypi:
        * platform/audio/DirectConvolver.cpp: Added.
        (WebCore):
        (WebCore::DirectConvolver::DirectConvolver):
        (WebCore::DirectConvolver::process):
        (WebCore::DirectConvolver::reset):
        * platform/audio/DirectConvolver.h: Added.
        (WebCore):
        (DirectConvolver):
        (WebCore::DirectConvolver::convolveSize):
        * platform/audio/ReverbConvolver.cpp:
        (WebCore::ReverbConvolver::ReverbConvolver):
        * platform/audio/ReverbConvolver.h:
        * platform/audio/ReverbConvolverStage.cpp:
        (WebCore::ReverbConvolverStage::ReverbConvolverStage):
        (WebCore::ReverbConvolverStage::process):
        (WebCore::ReverbConvolverStage::reset):
        * platform/audio/ReverbConvolverStage.h:
        (WebCore):
        (ReverbConvolverStage):

2012-03-19  Anders Carlsson  <andersca@apple.com>

        Find in page highlights get out of place when scrolling
        https://bugs.webkit.org/show_bug.cgi?id=81543

        Reviewed by Sam Weinig.

        Remove a now unused function from GraphicsLayer.

        * platform/graphics/GraphicsLayer.h:
        (GraphicsLayer):
        * platform/graphics/ca/GraphicsLayerCA.h:
        (GraphicsLayerCA):

2012-03-19  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=81534

        [New Multicolumn] Make the multi-column block re-layout its children when the column width/count change.
        Cache the count/width on the multi-column block for easy access.

        Reviewed by Antti Koivisto.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::recomputeLogicalWidth):
        (WebCore::RenderBlock::layoutBlock):
        * rendering/RenderBlock.h:
        Virtualize the code that recomputes the logical width for a block and sets relayoutChildren to true,
        so that column code can subclass the method to also check for changes in the column width/count.

        * rendering/RenderMultiColumnBlock.cpp:
        (WebCore::RenderMultiColumnBlock::computeColumnCountAndWidth):
        The column count/width determination algorithm in one method on the RenderMultiColumnBlock. It's a copy
        of the code from RenderBlock (which will be going away eventually).

        (WebCore::RenderMultiColumnBlock::recomputeLogicalWidth):
        * rendering/RenderMultiColumnBlock.h:
        (RenderMultiColumnBlock):
        Subclassed method to also check for changes in the column width to set relayoutChildren to true.

2012-03-19  Michal Mocny  <mmocny@google.com>

        [chromium] Updating WebGraphicsContext3D MemoryAllocation callback to accept a struct with have backbuffer suggestion.
        https://bugs.webkit.org/show_bug.cgi?id=81279

        Reviewed by James Robinson.

        * platform/graphics/chromium/Extensions3DChromium.h:
        (GpuMemoryAllocationCHROMIUM):
        (WebCore::Extensions3DChromium::GpuMemoryAllocationCHROMIUM::GpuMemoryAllocationCHROMIUM):
        (GpuMemoryAllocationChangedCallbackCHROMIUM):

2012-03-19  Tony Chang  <tony@chromium.org>

        flex-item-align: stretch should only grow, never shrink
        https://bugs.webkit.org/show_bug.cgi?id=80882

        Reviewed by Ojan Vafai.

        New test cases in css3/flexbox/flex-align-stretch.html.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::alignChildren): Move stretch code into a separate function.
        (WebCore::RenderFlexibleBox::alignChildStretch): Add an early return if our height is shrinking.
        (WebCore):
        * rendering/RenderFlexibleBox.h:
        (RenderFlexibleBox):

2012-03-19  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Implement snippets evaluation.
        https://bugs.webkit.org/show_bug.cgi?id=81334

        Reviewed by Pavel Feldman.

        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView.prototype.evaluateUsingTextPrompt):
        (WebInspector.ConsoleView.prototype._enterKeyPressed):
        * inspector/front-end/ScriptMapping.js:
        (WebInspector.MainScriptMapping):
        * inspector/front-end/SnippetsModel.js:
        * inspector/front-end/externs.js:
        (WebInspector.evaluateInConsole):
        * inspector/front-end/inspector.js:
        (WebInspector.evaluateInConsole):

2012-03-19  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API (JSEP): Introducing PeerConnection00Handler
        https://bugs.webkit.org/show_bug.cgi?id=81333

        Reviewed by Adam Barth.

        In preparation of the last WebCore patch that will introduce PeerConnection00 here's its platform representation.

        Not possible to test until the entire JSEP feature is commited.

        * GNUmakefile.list.am:
        * WebCore.gypi:
        * platform/mediastream/PeerConnection00Handler.cpp: Added.
        (WebCore):
        (WebCore::PeerConnection00Handler::create):
        (WebCore::PeerConnection00Handler::PeerConnection00Handler):
        (WebCore::PeerConnection00Handler::~PeerConnection00Handler):
        (WebCore::PeerConnection00Handler::createOffer):
        (WebCore::PeerConnection00Handler::createAnswer):
        (WebCore::PeerConnection00Handler::setLocalDescription):
        (WebCore::PeerConnection00Handler::setRemoteDescription):
        (WebCore::PeerConnection00Handler::localDescription):
        (WebCore::PeerConnection00Handler::remoteDescription):
        (WebCore::PeerConnection00Handler::startIce):
        (WebCore::PeerConnection00Handler::processIceMessage):
        (WebCore::PeerConnection00Handler::addStream):
        (WebCore::PeerConnection00Handler::removeStream):
        (WebCore::PeerConnection00Handler::stop):
        * platform/mediastream/PeerConnection00Handler.h: Added.
        (WebCore):
        (PeerConnection00Handler):
        * platform/mediastream/PeerConnection00HandlerClient.h: Added.
        (WebCore):
        (PeerConnection00HandlerClient):
        (WebCore::PeerConnection00HandlerClient::~PeerConnection00HandlerClient):

2012-03-19  David Reveman  <reveman@chromium.org>

        [Chromium] GL_EXT_occlusion_query_boolean and GL_CHROMIUM_command_buffer_query support.
        https://bugs.webkit.org/show_bug.cgi?id=80988

        Reviewed by Adrienne Walker.

        Expose EXT_occlusion_query API to WebKit compositor. Add
        GL_EXT_occlusion_query_boolean and GL_CHROMIUM_command_buffer_query
        enums.

        * platform/graphics/chromium/Extensions3DChromium.h:
        (Extensions3DChromium):

2012-03-19  Mike Lawther  <mikelawther@chromium.org>

        CSS3 calc: make mask images work with mixed percent/absolute
        https://bugs.webkit.org/show_bug.cgi?id=81477

        Reviewed by Ojan Vafai.

        Test: css3/calc/simple-composited-mask-expected.html

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):

2012-03-19  Mark Pilgrim  <pilgrim@chromium.org>

        Style cleanup in Modules/filesystem/
        https://bugs.webkit.org/show_bug.cgi?id=81520

        Reviewed by Adam Barth.

        No new tests, all existing tests pass.

        * Modules/filesystem/AsyncFileWriter.h:
        (WebCore::AsyncFileWriter::~AsyncFileWriter):
        * Modules/filesystem/AsyncFileWriterClient.h:
        (WebCore::AsyncFileWriterClient::~AsyncFileWriterClient):
        * Modules/filesystem/DOMFilePath.cpp:
        (WebCore::DOMFilePath::getDirectory):
        * Modules/filesystem/DOMFilePath.h:
        (DOMFilePath):
        * Modules/filesystem/DOMFileSystemBase.h:
        (DOMFileSystemBase):
        * Modules/filesystem/DirectoryEntry.h:
        * Modules/filesystem/DirectoryEntrySync.h:
        * Modules/filesystem/EntryArray.h:
        (EntryArray):
        * Modules/filesystem/FileEntry.h:
        (FileEntry):
        * Modules/filesystem/FileSystemCallbacks.h:
        (FileSystemCallbacksBase):
        * Modules/filesystem/FileWriter.cpp:
        (WebCore::FileWriter::abort):

2012-03-19  Mike Lawther  <mikelawther@chromium.org>

        CSS3 calc: background positioning works with mixed percent/absolute expressions
        https://bugs.webkit.org/show_bug.cgi?id=81478

        Reviewed by Ojan Vafai.

        Test: css3/calc/background-position-parsing-expected.html

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):

2012-03-19  Alexander Færøy  <alexander.faeroy@nokia.com>

        Add NodeRenderStyle.h to TouchAdjustment.cpp

        Unreviewed build fix after r111185.

        * page/TouchAdjustment.cpp:

2012-03-19  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Add PlatformMediaEngineClassName for blackberry in platform/graphics/MediaPlayer.cpp
        https://bugs.webkit.org/show_bug.cgi?id=81489

        Reviewed by Rob Buis.

        * platform/graphics/MediaPlayer.cpp:

2012-03-19  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Upstream the BlackBerry change to platform/PlatformKeyboardEvent.h
        https://bugs.webkit.org/show_bug.cgi?id=81312

        Reviewed by Rob Buis.

        * platform/PlatformKeyboardEvent.h:
        (Platform):
        (WebCore::PlatformKeyboardEvent::PlatformKeyboardEvent):
        (PlatformKeyboardEvent):
        (WebCore::PlatformKeyboardEvent::unmodifiedCharacter):
        Add BlackBerry specific constructor and member fields.
        * platform/blackberry/PlatformKeyboardEventBlackBerry.cpp:
        (WebCore::PlatformKeyboardEvent::PlatformKeyboardEvent):
        Change the parameter type to const reference type to adapt to the declaration.

2012-03-19  Allan Sandfeld Jensen  <allan.jensen@nokia.com>

        Select best target for tap gesture.
        https://bugs.webkit.org/show_bug.cgi?id=78801

        Reviewed by Kenneth Rohde Christiansen.
        IntRect changes reviewed by Dave Hyatt.

        The new API is available through EventHandler::bestClickableNodeForTouchPoint, but
        implementation details have been placed in page/TouchAdjustment.

        The default hit detection is performed by measuring the distance to the center
        lines of the absolute rects of the hit nodes. Absolute rects are used instead
        of bounding rects to make hit-detecting against links over line breaks. Distance
        to center line is used to make it easier to hit small links next to large links.
        For line-rects the distance to the center-line is a better expression of the distance
        to a rectangles center than the distance to the center-point.

        Tests: touchadjustment/event-triggered-widgets.html
               touchadjustment/html-label.html
               touchadjustment/nested-touch.html
               touchadjustment/touch-inlines.html

        * Target.pri:
        * page/EventHandler.cpp:
        (WebCore::EventHandler::handleGestureTap):
        (WebCore::EventHandler::bestClickableNodeForTouchPoint):
        * page/EventHandler.h:
        * page/TouchAdjustment.cpp: Added.
        (WebCore::TouchAdjustment::QuadForHitTest::QuadForHitTest):
        (WebCore::TouchAdjustment::QuadForHitTest::node):
        (WebCore::TouchAdjustment::QuadForHitTest::quad):
        (WebCore::TouchAdjustment::QuadForHitTest::boundingBox):
        (WebCore::TouchAdjustment::nodeRespondsToTapGesture):
        (WebCore::TouchAdjustment::appendAbsoluteQuadsForNodeToHitTestList):
        (WebCore::TouchAdjustment::compileQuadsForHitTesting):
        (WebCore::TouchAdjustment::distanceSquaredToQuadCenterLine):
        (WebCore::TouchAdjustment::findNodeWithLowestMetric):
        (WebCore::findBestClickableCandidate):
        * page/TouchAdjustment.h: Added.
        * platform/graphics/FloatQuad.h:
        (WebCore::FloatQuad::center):
        * platform/graphics/IntPoint.h:
        (WebCore::IntPoint::distanceSquaredToPoint):
        * platform/graphics/IntRect.cpp:
        (WebCore::distanceToInterval):
        (WebCore::IntRect::differenceToPoint):
        (WebCore::IntRect::differenceFromCenterLineToPoint):
        * platform/graphics/IntRect.h:
        (WebCore::IntRect::distanceSquaredToPoint):
        (WebCore::IntRect::distanceSquaredFromCenterLineToPoint):
        * platform/graphics/IntSize.h:
        (WebCore::IntSize::diagonalLengthSquared):
        * testing/Internals.cpp:
        (WebCore::Internals::touchPositionAdjustedToBestClickableNode):
        (WebCore::Internals::touchNodeAdjustedToBestClickableNode):
        * testing/Internals.h:
        * testing/Internals.idl:

2012-03-19  Mark Pilgrim  <pilgrim@chromium.org>

        Add ENABLED(FILE_SYSTEM) to DOMFilePath.h
        https://bugs.webkit.org/show_bug.cgi?id=81393

        Reviewed by Kentaro Hara.

        No new tests, all existing tests pass.

        * Modules/filesystem/DOMFilePath.h:

2012-03-19  Max Vujovic  <mvujovic@adobe.com>

        inspector highlight of SVG root element with viewbox does not match dimensions of element
        https://bugs.webkit.org/show_bug.cgi?id=78037

        Reviewed by Nikolas Zimmermann.

        Functions such as RenderBox::absoluteQuads and DOMNodeHighlighter::getOrDrawNodeHighlight
        eventually call RenderSVGRoot::mapLocalToContainer, passing along local CSS box coordinates.

        However, before this patch, RenderSVGRoot::mapLocalToContainer expected local SVG viewport
        coordinates. This caused the inspector highlight to be incorrectly sized and positioned.

        Now, RenderSVGRoot::mapLocalToContainer expects local CSS box coordinates, like other HTML
        renderers.

        Test: inspector/elements/highlight-svg-root.html

        * dom/Element.cpp:
        (WebCore::Element::getBoundingClientRect):
            Now, the SVG root element can use the code path for elements with CSS boxes to calculate
            its bounding client rect.

        * rendering/svg/RenderSVGRoot.cpp:
        (WebCore::RenderSVGRoot::mapLocalToContainer):
            RenderSVGRoot::mapLocalToContainer no longer needs to apply the
            localToBorderBoxTransform to convert from local SVG viewport coordinates to local CSS
            box coordinates. Now, it receives local CSS box coordinates.

        * rendering/svg/RenderSVGRoot.h:
        (WebCore::RenderSVGRoot::localToBorderBoxTransform):
            RenderSVGRoot::localToBorderBoxTransform has been exposed for child elements in the SVG
            namespace to use when mapping from local SVG viewport coordinates to local CSS box
            coordinates.

        (RenderSVGRoot):
        * rendering/svg/SVGRenderSupport.cpp:
        (WebCore::SVGRenderSupport::mapLocalToContainer):
            Elements in the SVG namespace should now apply the localToBorderBoxTransform at the
            SVG/HTML boundary (aka RenderSVGRoot) when mapping their coordinates up the render tree.

        * svg/SVGSVGElement.cpp:
        (WebCore::SVGSVGElement::localCoordinateSpaceTransform):
            Same as above. This method is eventually used in the SVGLocatable::getScreenCTM
            calculation.

2012-03-19  Hironori Bono  <hbono@chromium.org>

        Add a copy constructor to CollapsedBorderValue
        https://bugs.webkit.org/show_bug.cgi?id=81502

        Reviewed by Hajime Morita.

        Due to the lack of this copy constructor, GCC (x86) creates a broken copy
        constructor and it causes a build break on Google Chrome.

        * rendering/style/CollapsedBorderValue.h:
        (WebCore::CollapsedBorderValue::CollapsedBorderValue):
        (CollapsedBorderValue):

2012-03-18  Matt Falkenhagen  <falken@chromium.org>

        Fallback to common script when per-script font setting is the empty string
        https://bugs.webkit.org/show_bug.cgi?id=81329

        Reviewed by Kent Tamura.

        Tests: fast/text/international/font-fallback-to-common-script.html

        * page/Settings.cpp:
        (WebCore::setGenericFontFamilyForScript): Remove the setting when the per-script font family is the empty string.

2012-03-18  Luke Macpherson   <macpherson@chromium.org>

        Remove remnants of code that assume Lengths are 28 bit integers.
        https://bugs.webkit.org/show_bug.cgi?id=67976

        Reviewed by Eric Seidel.

        Test: LayoutTests/fast/table/max-width-integer-overflow-expected.html

        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::computeLength):
        Bound by INT_MAX and INT_MIN instead of 28 bit bounds.
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyBorderRadius::applyValue):
        Use PrimitiveValue::computeLength function directly.
        * platform/Length.h:
        Remove 28 bit integer limit constants.
        * rendering/AutoTableLayout.cpp:
        (WebCore::AutoTableLayout::computePreferredLogicalWidths):
        Use std::numeric_limits.

2012-03-16  Shinya Kawanaka  <shinyak@chromium.org>

        Should remove RuntimeEnabledFeatures::multipleShadowSubtreesEnabled
        https://bugs.webkit.org/show_bug.cgi?id=79307

        Reviewed by Dimitri Glazkov.

        Since RuntimeEnabledFeatures::multipleShadowSubtreesEnabled was introduced for
        temporal unstability of multiple shadow roots. We should remove it now, and
        enable it by default.

        Test: fast/dom/shadow/shadow-root-js-api.html should cover this change.
        The other shadow related tests should also covers this change.

        * WebCore.exp.in:
        * bindings/generic/RuntimeEnabledFeatures.cpp:
        (WebCore):
        * bindings/generic/RuntimeEnabledFeatures.h:
        (RuntimeEnabledFeatures):
        * dom/ShadowRoot.cpp:
        (WebCore::ShadowRoot::create):
        * dom/ShadowTree.cpp:
        (WebCore::ShadowTree::addShadowRoot):
        * testing/Internals.cpp:
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-18  Dana Jansens  <danakj@chromium.org>

        [chromium] Don't occlude on main-thread behind layers/surfaces with impl-thread animations
        https://bugs.webkit.org/show_bug.cgi?id=81354

        Reviewed by Adrienne Walker.

        Layers and surfaces can have an animating opacity or translation on the
        impl thread. In this case, the main thread does not know their actual
        values, and treats these values as "unknowns". This means we can't use
        them for marking areas of the screen as occluded, and we can't consider
        a part of a layer occluded in a space that we can not reliably transform
        to.

        Unit test: CCOcclusionTrackerTestAnimationOpacity0OnMainThread
                   CCOcclusionTrackerTestAnimationOpacity1OnMainThread
                   CCOcclusionTrackerTestAnimationTranslateOnMainThread

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::layerOpacityKnown):
        (WebCore::layerTransformsToTargetKnown):
        (WebCore::layerTransformsToScreenKnown):
        (WebCore):
        (WebCore::surfaceOpacityUnknown):
        (WebCore::surfaceTransformsToTargetUnknown):
        (WebCore::surfaceTransformsToScreenUnknown):
        (WebCore::::finishedTargetRenderSurface):
        (WebCore::contentToScreenSpaceTransform):
        (WebCore::contentToTargetSurfaceTransform):
        (WebCore::::markOccludedBehindLayer):
        (WebCore::::occluded):
        (WebCore::::unoccludedContentRect):

2012-03-18  Dana Jansens  <danakj@chromium.org>

        [chromium] Animating opacity is not opaque and should create a render surface on main thread
        https://bugs.webkit.org/show_bug.cgi?id=81401

        Reviewed by James Robinson.

        Unit test: CCLayerTreeHostCommonTest.verifyAnimationsForRenderSurfaceHierarchy

        * platform/graphics/chromium/cc/CCLayerTreeHostCommon.cpp:
        (WebCore::layerOpacityIsOpaque):
        (WebCore):
        (WebCore::subtreeShouldRenderToSeparateSurface):

2012-03-18  Sam Weinig  <sam@webkit.org>

        WebCore::BitmapImage::getCGImageRef should not be used off the main thread.
        https://bugs.webkit.org/show_bug.cgi?id=81441

        Reviewed by Anders Carlsson.

        Covered by existing tests.

        * loader/cache/MemoryCache.cpp:
        (WebCore::memoryCache):
        (WebCore::MemoryCache::add):
        (WebCore::MemoryCache::revalidationFailed):
        (WebCore::MemoryCache::resourceForURL):
        (WebCore::MemoryCache::evict):
        Add back main thread assertions.

        * platform/graphics/cg/PatternCG.cpp:
        (PatternCallbackData):
        (WebCore::patternCallback):
        (WebCore::patternReleaseOnMainThreadCallback):
        (WebCore::Pattern::createPlatformPattern):
        Instead of pulling out the CGImageRef in the pattern callback, do it upfront.

2012-03-18  Alexander Færøy  <alexander.faeroy@nokia.com>

        [Qt] Don't prepare SQL statements when the database is not open
        https://bugs.webkit.org/show_bug.cgi?id=81470

        Reviewed by Kenneth Rohde Christiansen.

        Already covered by existing tests.

        * platform/qt/CookieJarQt.cpp:
        (WebCore::SharedCookieJarQt::deleteCookiesForHostname):
        (WebCore::SharedCookieJarQt::deleteAllCookies):
        (WebCore::SharedCookieJarQt::setCookiesFromUrl):
        (WebCore::SharedCookieJarQt::loadCookies):

2012-03-18  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, rolling out r110994 due to Chromium crash

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * notifications/DOMWindowNotifications.cpp: Removed.
        * notifications/DOMWindowNotifications.h: Removed.
        * notifications/DOMWindowNotifications.idl: Removed.
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::~DOMWindow):
        (WebCore::DOMWindow::willDetachPage):
        (WebCore::DOMWindow::disconnectDOMWindowProperties):
        (WebCore::DOMWindow::clearDOMWindowProperties):
        (WebCore):
        (WebCore::DOMWindow::webkitNotifications):
        (WebCore::DOMWindow::resetNotifications):
        * page/DOMWindow.h:
        (WebCore):
        (DOMWindow):
        * page/DOMWindow.idl:
        * page/Frame.cpp:
        (WebCore::Frame::willDetachPage):
        (WebCore::Frame::transferChildFrameToNewDocument):

2012-03-18  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, rolling out r111086.
        http://trac.webkit.org/changeset/111086
        https://bugs.webkit.org/show_bug.cgi?id=81374

        Chromium crash

        * notifications/DOMWindowNotifications.cpp:
        (WebCore::DOMWindowNotifications::disconnectFrame):

2012-03-18  David Reveman  <reveman@chromium.org>

        Invalidation issue when creating backing layer for fixed positioned element.
        https://bugs.webkit.org/show_bug.cgi?id=80647

        Reviewed by James Robinson.

        Ensure that root layer is correctly invalidated by handling scroll and
        invalidation from movement of fixed position elements prior to creating
        any backing layers.

        Test: compositing/layer-creation/fixed-position-scroll.html

        * page/FrameView.cpp:
        (WebCore::FrameView::repaintFixedElementsAfterScrolling):
        (WebCore):
        (WebCore::FrameView::updateFixedElementsAfterScrolling):
        * page/FrameView.h:
        (FrameView):
        * platform/ScrollView.cpp:
        (WebCore::ScrollView::scrollTo):
        * platform/ScrollView.h:
        (WebCore::ScrollView::repaintFixedElementsAfterScrolling):
        (WebCore::ScrollView::updateFixedElementsAfterScrolling):

2012-03-18  Dana Jansens  <danakj@chromium.org>

        [chromium] Transform animation state should be inherited from parents
        https://bugs.webkit.org/show_bug.cgi?id=81363

        Reviewed by Adrienne Walker.

        Adds a drawTransformIsAnimating() and screenSpaceTransformIsAnimating()
        to the layer classes, and similar to the surface classes. These inherit
        the values from their parents in the same way that the transforms
        themselves do, and reflect if the layer's transform is being affected
        by some active animation.

        These can be used in main-thread culling when determining if the layer's
        position is static in the given coordinate space or being animated.

        Unit test: CCLayerTreeHostCommonTest.verifyAnimationsForRenderSurfaceHierarchy

        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::LayerChromium):
        * platform/graphics/chromium/LayerChromium.h:
        (LayerChromium):
        (WebCore::LayerChromium::drawTransformIsAnimating):
        (WebCore::LayerChromium::setDrawTransformIsAnimating):
        (WebCore::LayerChromium::screenSpaceTransformIsAnimating):
        (WebCore::LayerChromium::setScreenSpaceTransformIsAnimating):
        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
        (WebCore::RenderSurfaceChromium::RenderSurfaceChromium):
        * platform/graphics/chromium/RenderSurfaceChromium.h:
        (WebCore::RenderSurfaceChromium::targetSurfaceTransformsAreAnimating):
        (WebCore::RenderSurfaceChromium::setTargetSurfaceTransformsAreAnimating):
        (WebCore::RenderSurfaceChromium::screenSpaceTransformsAreAnimating):
        (WebCore::RenderSurfaceChromium::setScreenSpaceTransformsAreAnimating):
        (RenderSurfaceChromium):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (CCLayerImpl):
        (WebCore::CCLayerImpl::drawTransformIsAnimating):
        (WebCore::CCLayerImpl::setDrawTransformIsAnimating):
        (WebCore::CCLayerImpl::screenSpaceTransformIsAnimating):
        (WebCore::CCLayerImpl::setScreenSpaceTransformIsAnimating):
        * platform/graphics/chromium/cc/CCLayerTreeHostCommon.cpp:
        (WebCore::subtreeShouldBeSkipped):
        (WebCore::calculateDrawTransformsAndVisibilityInternal):
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::CCRenderSurface):
        * platform/graphics/chromium/cc/CCRenderSurface.h:
        (WebCore::CCRenderSurface::targetSurfaceTransformsAreAnimating):
        (WebCore::CCRenderSurface::setTargetSurfaceTransformsAreAnimating):
        (WebCore::CCRenderSurface::screenSpaceTransformsAreAnimating):
        (WebCore::CCRenderSurface::setScreenSpaceTransformsAreAnimating):
        (CCRenderSurface):

2012-03-18  Pratik Solanki  <psolanki@apple.com>

        Fix compile when FULLSCREEN_API is not enabled on Mac
        https://bugs.webkit.org/show_bug.cgi?id=81474

        Reviewed by Ada Chan.

        Guard the full screen api code inside ENABLE(FULLSCREEN_API).

        No new tests because no functional changes.

        * platform/mac/WebCoreFullScreenWindow.h:
        * platform/mac/WebCoreFullScreenWindow.mm:

2012-03-18  Kentaro Hara  <haraken@chromium.org>

        Change the initial buffer size of a plain text
        https://bugs.webkit.org/show_bug.cgi?id=81192

        Reviewed by Dimitri Glazkov.

        r111109 changed the initial buffer size of a plain text
        from 1<<16 to 1<<15 in Chromium/Mac only, for the following reasons:

        - As far as I experimented locally, while 1<<15 is better than 1<<16 in Chromium/Mac,
        1<<15 and 1<<16 are the same in AppleWebKit/Mac and Chromium/Linux (their performance
        "gap" exists at between 1<<17 and 1<<18).
        - The reason why I changed 1<<16 to 1<<15 in Chromium/Mac only is that
        the value highly depends on the underlying malloc system and I was a bit afraid
        that changing to 1<<15 _might_ cause unintentional performance regression in some
        platform.

        That being said, it seems that 1<<15 would not be worse than 1<<16 in all platforms,
        and we should just keep the value consistent. In the first place, according to anttik
        (who wrote 1<<16 a long time ago), there was no strong reason for 1<<16.

        Based on these observations (See https://bugs.webkit.org/show_bug.cgi?id=81192
        for more details), this patch unifies the value to 1<<15 in all platforms.

        No tests. No change in behavior.

        * editing/TextIterator.cpp:
        (WebCore::plainTextToMallocAllocatedBuffer):

2012-02-13  Robert Hogan  <robert@webkit.org>

        CSS 2.1 failure: eof-003.htm fails
        https://bugs.webkit.org/show_bug.cgi?id=78538

        Reviewed by Antti Koivisto.

        Tests: css2.1/20110323/eof-001.htm
               css2.1/20110323/eof-003.htm
               css2.1/20110323/eof-004.htm
               css2.1/20110323/eof-005.htm
               css2.1/20110323/eof-006.htm
               css2.1/20110323/eof-007.htm

        This patch fixes eof-003.htm, eof-005.htm and eof-006.htm. The other eof-* tests already pass.

        * css/CSSGrammar.y: Allow EOF as well as ';' to terminate import rules.
                            This should probably be done for other rules in a separate patch.
        * css/CSSParser.cpp:
        (WebCore::CSSParser::checkAndSkipString): Allow strings to end with EOF.
        (WebCore::CSSParser::parseString): ditto

2012-03-17  David Reveman  <reveman@chromium.org>

        [Chromium] PlatformContextSkia::m_drawingToImageBuffer is not correctly set when using per-tile painting.
        https://bugs.webkit.org/show_bug.cgi?id=81463

        Reviewed by James Robinson.

        Call PlatformContextSkia::setDrawingToImageBuffer() from
        SkPictureCanvasLayerTextureUpdater::prepareToUpdate so that sub-pixel
        text rendering is not used incorrectly with per-tile painting.

        No new tests.

        * platform/graphics/chromium/SkPictureCanvasLayerTextureUpdater.cpp:
        (WebCore::SkPictureCanvasLayerTextureUpdater::prepareToUpdate):

2012-03-17  Robert Kroeger  <rjkroege@chromium.org>

        [chromium] Make pixel-accurate wheel scrolling be unanimated
        https://bugs.webkit.org/show_bug.cgi?id=81457

        Reviewed by James Robinson.

        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::scroll):

2012-03-17  Rob Buis  <rbuis@rim.com>

        [BlackBerry] Implement openTemporaryFile in FileSystem
        https://bugs.webkit.org/show_bug.cgi?id=81373

        Reviewed by George Staikos.

        Move the Efl implementation to Posix, this way BlackBerry port can reuse it.

        * platform/blackberry/FileSystemBlackBerry.cpp:
        * platform/efl/FileSystemEfl.cpp:
        * platform/posix/FileSystemPOSIX.cpp:
        (WebCore::openTemporaryFile):
        (WebCore):

2012-03-17  Joe Thomas  <joethomas@motorola.com>

        move calc*Value functions out from Length (and platform)
        https://bugs.webkit.org/show_bug.cgi?id=80897

        Moving the Length calc*Value functions out from Length structure and also from /WebCore/platform/ folder.
        This helps to avoid the layering violation while length calculation. Otherwise layer violation can be avoided only by adding a virtual interface(bug 27160).

        Reviewed by Antti Koivisto.

        * GNUmakefile.list.am: Build system changes for adding new files.
        * Target.pri: Ditto.
        * WebCore.gypi: Ditto.
        * WebCore.vcproj/WebCore.vcproj: Ditto.
        * WebCore.xcodeproj/project.pbxproj: Ditto.
        * accessibility/gtk/WebKitAccessibleInterfaceText.cpp:
        (getAttributeSetForAccessibilityObject):
        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/LengthFunctions.h: Added. Moved calc*Value functions of Length.
        (WebCore):
        (WebCore::calculateMinimumValue):
        (WebCore::calculateValue):
        (WebCore::calculateFloatValue):
        * dom/Document.cpp:
        (WebCore::Document::pageSizeAndMarginsInPixels):
        * html/HTMLAreaElement.cpp:
        (WebCore::HTMLAreaElement::getRegion):
        * platform/CalculationValue.h:
        (WebCore::CalcExpressionLength::evaluate):
        * platform/Length.h: Removed the calc*Value functions from Length structure.
        (Length):
        (WebCore::Length::getFloatValue):
        (WebCore::Length::getIntValue):
        * platform/graphics/ca/mac/PlatformCAAnimationMac.mm:
        * platform/graphics/ca/mac/PlatformCALayerMac.mm:
        (PlatformCALayer::setFilters):
        * platform/graphics/chromium/cc/CCRenderSurfaceFilters.cpp:
        (WebCore::CCRenderSurfaceFilters::apply):
        * platform/graphics/filters/FilterOperations.cpp:
        (WebCore::FilterOperations::getOutsets):
        * platform/graphics/transforms/PerspectiveTransformOperation.cpp:
        (WebCore::PerspectiveTransformOperation::blend):
        * platform/graphics/transforms/PerspectiveTransformOperation.h:
        (WebCore::PerspectiveTransformOperation::isIdentity):
        (WebCore::PerspectiveTransformOperation::apply):
        * platform/graphics/transforms/TranslateTransformOperation.h:
        (WebCore::TranslateTransformOperation::x):
        (WebCore::TranslateTransformOperation::y):
        (WebCore::TranslateTransformOperation::z):
        (WebCore::TranslateTransformOperation::isIdentity):
        * platform/win/PopupMenuWin.cpp:
        (WebCore::PopupMenuWin::paint):
        * rendering/AutoTableLayout.cpp:
        (WebCore::AutoTableLayout::layout):
        * rendering/FilterEffectRenderer.cpp:
        (WebCore::FilterEffectRenderer::build):
        * rendering/FixedTableLayout.cpp:
        (WebCore::FixedTableLayout::layout):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::textIndentOffset):
        (WebCore::RenderBlock::computeInlinePreferredLogicalWidths):
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::reflectionOffset):
        (WebCore::RenderBox::clipRect):
        (WebCore::RenderBox::computeLogicalWidthInRegion):
        (WebCore::RenderBox::computeLogicalWidthInRegionUsing):
        (WebCore::RenderBox::computeInlineDirectionMargins):
        (WebCore::RenderBox::computePercentageLogicalHeight):
        (WebCore::RenderBox::computeReplacedLogicalWidthUsing):
        (WebCore::RenderBox::computeReplacedLogicalHeightUsing):
        (WebCore::RenderBox::availableLogicalHeightUsing):
        (WebCore::RenderBox::computeBlockDirectionMargins):
        (WebCore::RenderBox::computePositionedLogicalWidthUsing):
        (WebCore::RenderBox::computePositionedLogicalHeightUsing):
        (WebCore::RenderBox::computePositionedLogicalWidthReplaced):
        (WebCore::RenderBox::computePositionedLogicalHeightReplaced):
        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::relativePositionOffsetX):
        (WebCore::RenderBoxModelObject::relativePositionOffsetY):
        (WebCore::RenderBoxModelObject::paddingTop):
        (WebCore::RenderBoxModelObject::paddingBottom):
        (WebCore::RenderBoxModelObject::paddingLeft):
        (WebCore::RenderBoxModelObject::paddingRight):
        (WebCore::RenderBoxModelObject::paddingBefore):
        (WebCore::RenderBoxModelObject::paddingAfter):
        (WebCore::RenderBoxModelObject::paddingStart):
        (WebCore::RenderBoxModelObject::paddingEnd):
        (WebCore::RenderBoxModelObject::calculateFillTileSize):
        (WebCore::RenderBoxModelObject::calculateBackgroundImageGeometry):
        (WebCore::computeBorderImageSide):
        (WebCore::RenderBoxModelObject::paintNinePieceImage):
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::preferredMainAxisContentExtentForChild):
        (WebCore::RenderFlexibleBox::computeMainAxisPreferredSizes):
        (WebCore::RenderFlexibleBox::runFreeSpaceAllocationAlgorithm):
        * rendering/RenderFrameSet.cpp:
        (WebCore::RenderFrameSet::layOutAxis):
        * rendering/RenderInline.cpp:
        (WebCore::computeMargin):
        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::perspectiveTransform):
        (WebCore::RenderLayer::perspectiveOrigin):
        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::computeTransformOrigin):
        (WebCore::RenderLayerBacking::computePerspectiveOrigin):
        * rendering/RenderMarquee.cpp:
        (WebCore::RenderMarquee::timerFired):
        * rendering/RenderMenuList.cpp:
        (WebCore::RenderMenuList::updateOptionsWidth):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::repaintAfterLayoutIfNeeded):
        * rendering/RenderReplaced.cpp:
        (WebCore::RenderReplaced::computeReplacedLogicalWidth):
        * rendering/RenderScrollbarPart.cpp:
        (WebCore::calcScrollbarThicknessUsing):
        (WebCore::RenderScrollbarPart::computeScrollbarWidth):
        (WebCore::RenderScrollbarPart::computeScrollbarHeight):
        * rendering/RenderTable.cpp:
        (WebCore::RenderTable::computeLogicalWidth):
        (WebCore::RenderTable::convertStyleLogicalWidthToComputedWidth):
        * rendering/RenderTableCell.cpp:
        (WebCore::RenderTableCell::logicalHeightForRowSizing):
        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::calcRowLogicalHeight):
        * rendering/RenderText.h:
        (WebCore::RenderText::marginLeft):
        (WebCore::RenderText::marginRight):
        * rendering/RootInlineBox.cpp:
        (WebCore::RootInlineBox::verticalPositionForBox):
        * rendering/style/RenderStyle.cpp:
        (WebCore::RenderStyle::applyTransform):
        (WebCore::calcRadiiFor):
        * rendering/style/RenderStyle.h:
        * rendering/svg/RenderSVGRoot.cpp:
        (WebCore::RenderSVGRoot::computeIntrinsicRatioInformation):
        (WebCore::resolveLengthAttributeForSVG):
        * svg/SVGSVGElement.cpp:
        (WebCore::SVGSVGElement::currentViewBoxRect):
        (WebCore::SVGSVGElement::currentViewportSize):
        * svg/graphics/SVGImage.cpp:
        (WebCore::SVGImage::computeIntrinsicDimensions):

2012-03-17  Nikolas Zimmermann  <nzimmermann@rim.com>

        Enable animVal support for SVGNumberOptionalNumber
        https://bugs.webkit.org/show_bug.cgi?id=81448

        Reviewed by Antti Koivisto.

        Enable animVal support for SVGNumberOptionalNumber. Its a special case as two SVG DOM properties
        eg. stdDeviationX/stdDeviationY are mapped to a single XML attribute: SVGNames::stdDeviationAttr.

        When animating properties like this, both animVal wrappers need to reflect changes.
        Generalize the current animVal code to support more than one SVGAnimatedProperty that gets
        animated for a single attributeName. This allows us to remove SVGAnimatedType::variantValue/setVariantValue
        which paves the way for removing SVGGenericAnimatedType from even more places.

        Covered by existing tests.

        * svg/SVGAnimateElement.cpp:
        (WebCore::SVGAnimateElement::SVGAnimateElement):
        (WebCore::SVGAnimateElement::calculateAnimatedValue):
        (WebCore::SVGAnimateElement::resetToBaseValue):
        (WebCore::SVGAnimateElement::targetElementWillChange):
        * svg/SVGAnimateElement.h:
        (SVGAnimateElement):
        * svg/SVGAnimatedLength.cpp:
        (WebCore::SVGAnimatedLengthAnimator::constructFromBaseValue):
        (WebCore):
        (WebCore::SVGAnimatedLengthAnimator::resetAnimatedTypeToBaseValue):
        * svg/SVGAnimatedLength.h:
        (SVGAnimatedLengthAnimator):
        * svg/SVGAnimatedLengthList.cpp:
        (WebCore::SVGAnimatedLengthListAnimator::constructFromBaseValue):
        (WebCore):
        (WebCore::SVGAnimatedLengthListAnimator::resetAnimatedTypeToBaseValue):
        * svg/SVGAnimatedLengthList.h:
        (SVGAnimatedLengthListAnimator):
        * svg/SVGAnimatedNumber.cpp:
        (WebCore::SVGAnimatedNumberAnimator::constructFromBaseValue):
        (WebCore):
        (WebCore::SVGAnimatedNumberAnimator::resetAnimatedTypeToBaseValue):
        * svg/SVGAnimatedNumber.h:
        (SVGAnimatedNumberAnimator):
        * svg/SVGAnimatedNumberList.cpp:
        (WebCore::SVGAnimatedNumberListAnimator::constructFromBaseValue):
        (WebCore):
        (WebCore::SVGAnimatedNumberListAnimator::resetAnimatedTypeToBaseValue):
        * svg/SVGAnimatedNumberList.h:
        (SVGAnimatedNumberListAnimator):
        * svg/SVGAnimatedNumberOptionalNumber.cpp:
        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::constructFromBaseValue):
        (WebCore):
        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::resetAnimatedTypeToBaseValue):
        * svg/SVGAnimatedNumberOptionalNumber.h:
        (WebCore):
        (SVGAnimatedNumberOptionalNumberAnimator):
        * svg/SVGAnimatedTransformList.cpp:
        (WebCore::SVGAnimatedTransformListAnimator::constructFromBaseValue):
        (WebCore::SVGAnimatedTransformListAnimator::resetAnimatedTypeToBaseValue):
        (WebCore):
        * svg/SVGAnimatedTransformList.h:
        (SVGAnimatedTransformListAnimator):
        * svg/SVGAnimatedType.cpp:
        (WebCore::SVGAnimatedType::supportsAnimVal):
        * svg/SVGAnimatedType.h:
        (SVGAnimatedType):
        * svg/SVGAnimatedTypeAnimator.h:
        (SVGAnimatedTypeAnimator):
        (WebCore::SVGAnimatedTypeAnimator::constructFromBaseValue):
        (WebCore::SVGAnimatedTypeAnimator::resetAnimatedTypeToBaseValue):
        (WebCore::SVGAnimatedTypeAnimator::currentBaseValueVariant):
        (WebCore::SVGAnimatedTypeAnimator::constructFromOneBaseValue):
        (WebCore::SVGAnimatedTypeAnimator::resetAnimatedTypeFromOneBaseValue):
        (WebCore::SVGAnimatedTypeAnimator::constructFromTwoBaseValues):
        (WebCore::SVGAnimatedTypeAnimator::resetAnimatedTypeFromTwoBaseValues):
        * svg/SVGAnimationElement.cpp:
        (WebCore::findMatchingAnimatedProperties):
        (WebCore::SVGAnimationElement::applyAnimatedValue):
        (WebCore::notifyAnimatedPropertyAboutAnimationBeginEnd):
        (WebCore::SVGAnimationElement::animationStarted):
        (WebCore::SVGAnimationElement::animationEnded):
        (WebCore::SVGAnimationElement::animatedPropertiesForType):
        * svg/SVGAnimationElement.h:
        * svg/properties/SVGAnimatedListPropertyTearOff.h:
        (WebCore::SVGAnimatedListPropertyTearOff::currentBaseValueVariant):
        (WebCore::SVGAnimatedListPropertyTearOff::animationStarted):
        * svg/properties/SVGAnimatedProperty.h:
        (SVGAnimatedProperty):
        * svg/properties/SVGAnimatedPropertyTearOff.h:
        (WebCore::SVGAnimatedPropertyTearOff::currentBaseValueVariant):
        (WebCore::SVGAnimatedPropertyTearOff::animationStarted):
        * svg/properties/SVGAnimatedStaticPropertyTearOff.h:
        (WebCore::SVGAnimatedStaticPropertyTearOff::currentBaseValueVariant):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animationStarted):

2012-03-12  Philippe Normand  <pnormand@igalia.com>

        [GStreamer] run AudioFileReader in a nested loop
        https://bugs.webkit.org/show_bug.cgi?id=80823

        Reviewed by Martin Robinson.

        Use a separate main loop for the file reader, this approach is
        much cleaner than polling the default GLib main context.

        * platform/audio/gstreamer/AudioFileReaderGStreamer.cpp:
        (AudioFileReader):
        (WebCore::enteredMainLoopCallback):
        (WebCore):
        (WebCore::AudioFileReader::AudioFileReader):
        (WebCore::AudioFileReader::handleMessage):
        (WebCore::AudioFileReader::start):
        (WebCore::AudioFileReader::createBus):

2012-02-07  Robert Hogan  <robert@webkit.org>

        CSS 2.1 failure: fixed-table-layout-013 and fixed-table-layout-015 fail
        https://bugs.webkit.org/show_bug.cgi?id=78027

        Reviewed by Julien Chaffraix.

        Both of these test the (slightly implicit) rule that width set on column-groups cannot
        affect the width of columns in a fixed layout table: http://www.w3.org/TR/CSS21/tables.html#fixed-table-layout
        FF, Opera and IE all pass these two tests.

        Tests: css2.1/20110323/fixed-table-layout-013.htm
               css2.1/20110323/fixed-table-layout-015.htm
               fast/table/fixed-table-layout-toggle-colwidth.html

        * rendering/FixedTableLayout.cpp:
        (WebCore::nextCol): A helper function for finding the next column along.
        (WebCore::FixedTableLayout::calcWidthArray): Ignore width specified by column groups.
        * rendering/RenderTableCol.h:
        (WebCore::RenderTableCol::isTableColGroup): Convenience function for identifying column groups.

2012-03-16  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Add BlackBerry to NavigatorBase.cpp
        https://bugs.webkit.org/show_bug.cgi?id=81303

        Reviewed by Rob Buis.

        * page/NavigatorBase.cpp:

2012-03-16  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Add typedef of DragDataRef for blackberry
        https://bugs.webkit.org/show_bug.cgi?id=81301

        Reviewed by Rob Buis.

        * platform/DragData.h:

2012-03-16  James Robinson  <jamesr@chromium.org>

        [chromium] Unify the drawing logic for different layer types that output textures to the compositor
        https://bugs.webkit.org/show_bug.cgi?id=81286

        Reviewed by Adrienne Walker.

        Currently canvas 2d, webgl, and plugin layers all export a texture to the compositor that then needs to be
        drawn.  There are a small set of operations that can be applied to the texture at draw time - do a Y flip,
        stretch a subrect to the layer bounds, set the blend mode etc but they are fundamentally the same thing. This
        collapses the nearly-redundant code into a single impl-side layer type for a texture-backed layer that can
        handle the union of the bits needed for each layer type.

        Canvas 2d, WebGL and plugin composited rendering are all covered by layout tests.

        * WebCore.gypi:
        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::pushPropertiesTo):
        * platform/graphics/chromium/CanvasLayerChromium.cpp:
        (WebCore::CanvasLayerChromium::createCCLayerImpl):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::drawQuad):
        (WebCore::TexStretchTextureProgramBinding::set):
        (WebCore::TexTransformTextureProgramBinding::set):
        (WebCore::LayerRendererChromium::drawTextureQuad):
        (WebCore::LayerRendererChromium::textureLayerProgramFlip):
        (WebCore::LayerRendererChromium::textureLayerProgramStretch):
        (WebCore::LayerRendererChromium::textureLayerProgramStretchFlip):
        (WebCore::LayerRendererChromium::textureLayerTexRectProgram):
        (WebCore::LayerRendererChromium::textureLayerTexRectProgramFlip):
        (WebCore::LayerRendererChromium::cleanupSharedObjects):
        * platform/graphics/chromium/LayerRendererChromium.h:
        (WebCore):
        (LayerRendererChromium):
        * platform/graphics/chromium/PluginLayerChromium.cpp:
        (WebCore::PluginLayerChromium::PluginLayerChromium):
        (WebCore::PluginLayerChromium::createCCLayerImpl):
        (WebCore::PluginLayerChromium::setIOSurfaceProperties):
        (WebCore::PluginLayerChromium::pushPropertiesTo):
        * platform/graphics/chromium/PluginLayerChromium.h:
        (PluginLayerChromium):
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::pushPropertiesTo):
        * platform/graphics/chromium/cc/CCCanvasDrawQuad.cpp: Removed.
        * platform/graphics/chromium/cc/CCCanvasDrawQuad.h: Removed.
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp: Removed.
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h: Removed.
        * platform/graphics/chromium/cc/CCDrawQuad.cpp:
        (WebCore::CCDrawQuad::toTextureDrawQuad):
        * platform/graphics/chromium/cc/CCDrawQuad.h:
        (WebCore):
        (CCDrawQuad):
        * platform/graphics/chromium/cc/CCTextureDrawQuad.cpp: Renamed from Source/WebCore/platform/graphics/chromium/cc/CCPluginDrawQuad.cpp.
        (WebCore):
        (WebCore::CCTextureDrawQuad::create):
        (WebCore::CCTextureDrawQuad::CCTextureDrawQuad):
        * platform/graphics/chromium/cc/CCTextureDrawQuad.h: Renamed from Source/WebCore/platform/graphics/chromium/cc/CCPluginDrawQuad.h.
        (WebCore):
        (CCTextureDrawQuad):
        (WebCore::CCTextureDrawQuad::textureId):
        (WebCore::CCTextureDrawQuad::hasAlpha):
        (WebCore::CCTextureDrawQuad::premultipliedAlpha):
        (WebCore::CCTextureDrawQuad::uvRect):
        (WebCore::CCTextureDrawQuad::flipped):
        (WebCore::CCTextureDrawQuad::ioSurfaceSize):
        (WebCore::CCTextureDrawQuad::ioSurfaceTextureId):
        * platform/graphics/chromium/cc/CCTextureLayerImpl.cpp: Renamed from Source/WebCore/platform/graphics/chromium/cc/CCPluginLayerImpl.cpp.
        (WebCore):
        (WebCore::CCTextureLayerImpl::CCTextureLayerImpl):
        (WebCore::CCTextureLayerImpl::~CCTextureLayerImpl):
        (WebCore::CCTextureLayerImpl::willDraw):
        (WebCore::CCTextureLayerImpl::appendQuads):
        (WebCore::CCTextureLayerImpl::dumpLayerProperties):
        (WebCore::CCTextureLayerImpl::didLoseContext):
        (WebCore::CCTextureLayerImpl::setIOSurfaceProperties):
        * platform/graphics/chromium/cc/CCTextureLayerImpl.h: Renamed from Source/WebCore/platform/graphics/chromium/cc/CCPluginLayerImpl.h.
        (WebCore):
        (CCTextureLayerImpl):
        (WebCore::CCTextureLayerImpl::create):
        (WebCore::CCTextureLayerImpl::textureId):
        (WebCore::CCTextureLayerImpl::setTextureId):
        (WebCore::CCTextureLayerImpl::setHasAlpha):
        (WebCore::CCTextureLayerImpl::setPremultipliedAlpha):
        (WebCore::CCTextureLayerImpl::setFlipped):
        (WebCore::CCTextureLayerImpl::setUVRect):
        (WebCore::CCTextureLayerImpl::layerTypeAsString):

2012-03-16  Martin Robinson  <mrobinson@igalia.com>

        [Cairo] Text extent of shadowed text is calculated incorrectly
        https://bugs.webkit.org/show_bug.cgi?id=65035

        Reviewed by Martin Robinson.

        No new tests. This is already covered by fast/canvas/fillText-shadow.html.

        Correct determine the size of rendered text using x and y bearing from the font
        extents.

        * platform/graphics/cairo/FontCairo.cpp:
        (WebCore::drawGlyphsShadow): Use the x and y bearing to calculate text extents.
        This gives a more accurate sizing and avoids clipping the edges of the shadow.

2012-03-16  Kentaro Hara  <haraken@chromium.org>

        [Chromium][Performance] Optimize innerText and outerText in Chromium/Mac
        https://bugs.webkit.org/show_bug.cgi?id=81192

        Reviewed by Dimitri Glazkov.

        This patch makes innerText and outerText 4 times faster on Chromium/Mac.
        A similar performance improvement will be also observed in APIs that are using
        TextIterator::plainText() (e.g. Editting, SpellChecker, Clipboard, Pasteboard etc).

        Performance test: https://bugs.webkit.org/attachment.cgi?id=131989

        - AppleWebKit/JavaScriptCore/Mac:
        div.innerText : 2978.4ms
        div.outerText : 2944.4ms

        - Chromium/V8/Mac without the patch:
        div.innerText : 10050.8ms
        div.outerText : 10072.2ms

        - Chromium/V8/Mac with the patch:
        div.innerText: 2536.4ms
        div.outerText: 2714ms

        This patch just changes the initial buffer size of a plain text buffer on Chromium/Mac.
        As shown below, in my local Chromium/Mac environment the performance changes
        dramatically between 1<<15 and 1<<16, and in my local Chromium/Linux environment
        the performance changes between 1<<17 and 1<<18. I am not yet sure what determines
        these figures, but it seems there exists a performance gap at some point
        depending on a malloc mechanism.

        - div.innerText results on Chromium/V8/Mac:
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 14 ==> 2465.6 ms
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 15 ==> 2447.2 ms   <--- after this patch
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 16 ==> 10250.8 ms  <--- before this patch
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 17 ==> 10278.2 ms

        - div.innerText results on Chromium/V8/Linux:
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 14 ==> 1569.8 ms
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 15 ==> 1531.8 ms
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 16 ==> 1543.2 ms  <--- before/after this patch
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 17 ==> 1541.6 ms
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 18 ==> 12540.8 ms
        WTF_TEXT_ITERATOR_BUFFER_INITIAL_CAPACITY = 1 << 19 ==> 12340.8 ms

        * editing/TextIterator.cpp:
        (WebCore::plainTextToMallocAllocatedBuffer):

2012-03-16  Dmitry Titov  <dimich@chromium.org>

        HTMLFrameElementBase::m_remainsAliveOnRemovalFromTree can be cleared without unloading the frame.
        https://bugs.webkit.org/show_bug.cgi?id=80766

        Reviewed by Adam Barth.

        * html/HTMLFrameElementBase.cpp:
        (WebCore::HTMLFrameElementBase::insertedIntoDocument):
        (WebCore::HTMLFrameElementBase::setRemainsAliveOnRemovalFromTree):
        if adoptNode() is called on a detached iframe or with a detached document,
        unload the iframe to avoid live iframe to hang around w/o being attached to
        a document.

2012-03-16  Joe Thomas  <joethomas@motorola.com>

        Xcode project file is not sorted.
        https://bugs.webkit.org/show_bug.cgi?id=81439

        Sorted the project file entries using sort-Xcode-project-file script.

        Reviewed by Eric Seidel.

        * WebCore.xcodeproj/project.pbxproj:

2012-03-16  Yael Aharon  <yael.aharon@nokia.com>

        Unreviewed build fix after r111075.
        Correct the path of WebKitBlobBuilder.idl.

        * DerivedSources.pri:

2012-03-16  David Levin  <levin@chromium.org>

        Fix for test runs for non-chromium platforms.

        * loader/cache/MemoryCache.cpp:
        (WebCore::memoryCache):
        (WebCore::MemoryCache::add):
        (WebCore::MemoryCache::revalidationFailed):
        (WebCore::MemoryCache::resourceForURL):
        (WebCore::MemoryCache::evict):

2012-03-16  Tony Chang  <tony@chromium.org>

        Unreviewed, rolling out r111094.
        http://trac.webkit.org/changeset/111094
        https://bugs.webkit.org/show_bug.cgi?id=80882

        broke test on chromium-win

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::alignChildren):
        * rendering/RenderFlexibleBox.h:
        (RenderFlexibleBox):

2012-03-16  Anders Carlsson  <andersca@apple.com>

        REGRESSION (r110737): Height element changes on scrolled page causes failure
        https://bugs.webkit.org/show_bug.cgi?id=81381
        <rdar://problem/11066006>

        Reviewed by Sam Weinig.

        Limit the fix made in r110737 to check if there's a rubber-band gesture in progress and only ignore the range if that is the case.

        * platform/ScrollAnimator.h:
        (WebCore::ScrollAnimator::isRubberBandInProgress):
        (ScrollAnimator):
        * platform/ScrollView.cpp:
        (WebCore::ScrollView::updateScrollbars):
        * platform/mac/ScrollAnimatorMac.h:
        (ScrollAnimatorMac):
        * platform/mac/ScrollAnimatorMac.mm:
        (WebCore::ScrollAnimatorMac::isRubberBandInProgress):
        (WebCore):
        * platform/mac/ScrollElasticityController.h:
        (ScrollElasticityController):
        * platform/mac/ScrollElasticityController.mm:
        (WebCore::ScrollElasticityController::isRubberBandInProgress):
        (WebCore):

2012-03-16  Robert Kroeger  <rjkroege@chromium.org>

        GestureTapDown needs to pin in-progress flings
        https://bugs.webkit.org/show_bug.cgi?id=80875

        Reviewed by Adam Barth.

        * page/EventHandler.cpp:
        (WebCore):
        (WebCore::EventHandler::handleGestureTapDown):
        * page/EventHandler.h:
        (EventHandler):

2012-03-16  Chris Rogers  <crogers@google.com>

        Account for sample-rate in convolution normalization
        https://bugs.webkit.org/show_bug.cgi?id=81432

        Reviewed by James Robinson.

        * platform/audio/Reverb.cpp:
        (WebCore):
        (WebCore::calculateNormalizationScale):
        * webaudio/ConvolverNode.cpp:
        (WebCore::ConvolverNode::setBuffer):

2012-03-16  Tom Sepez  <tsepez@chromium.org>

        Make V8 window.open.call(), window.open.showModalDialog() results more closely match JSC. 
        https://bugs.webkit.org/show_bug.cgi?id=81260
        https://bugs.webkit.org/show_bug.cgi?id=39897

        Reviewed by Adam Barth.

        Tested via http/tests/security/cross-frame-access-call.htm

        * bindings/v8/custom/V8DOMWindowCustom.cpp:
        (WebCore::V8DOMWindow::showModalDialogCallback):
        (WebCore::V8DOMWindow::openCallback):

2012-03-16  Matt Lilek  <mrl@apple.com>

        Use modern NSNumberFormatter API in LocalizedNumberMac.mm
        https://bugs.webkit.org/show_bug.cgi?id=81429

        Reviewed by Dan Bernstein.

        No new tests as no change in behavior.

        * platform/text/mac/LocalizedNumberMac.mm:
        (WebCore::createFormatterForCurrentLocaleForDisplay):

2012-03-16  Tony Chang  <tony@chromium.org>

        flex-item-align: stretch should only grow, never shrink
        https://bugs.webkit.org/show_bug.cgi?id=80882

        Reviewed by Ojan Vafai.

        New test cases in css3/flexbox/flex-align-stretch.html.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::alignChildren): Move stretch code into a separate function.
        (WebCore::RenderFlexibleBox::alignChildStretch): Add an early return if our height is shrinking.
        (WebCore):
        * rendering/RenderFlexibleBox.h:
        (RenderFlexibleBox):

2012-03-16  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [EFL] Unreviewed, fix build after r111041.

        * platform/efl/RenderThemeEfl.cpp:
        (WebCore::RenderThemeEfl::emitMediaButtonSignal): Rename
        MediaFullscreenButton to MediaEnterFullscreenButton.
        (WebCore::RenderThemeEfl::paintMediaFullscreenButton): Ditto.

2012-03-16  Dmitry Lomov  <dslomov@google.com>

        REGRESSION: DOMURL::revokeObjectURL accesses memoryCache on worker thread.
        https://bugs.webkit.org/show_bug.cgi?id=80889
        On worker threads, post a task to main thread to evict from cache.
        ASSERT that MemoryCache is only accessed from main thread.

        Reviewed by David Levin.

        * html/DOMURL.cpp:
        (WebCore::DOMURL::revokeObjectURL):
        * loader/cache/MemoryCache.cpp:
        (WebCore::memoryCache):
        (WebCore::MemoryCache::add):
        (WebCore::MemoryCache::revalidationFailed):
        (WebCore::MemoryCache::resourceForURL):
        (WebCore::MemoryCache::evict):
        (WebCore):
        (WebCore::MemoryCache::removeUrlFromCache):
        (WebCore::MemoryCache::removeUrlFromCacheImpl):
        * loader/cache/MemoryCache.h:
        (WebCore):
        (MemoryCache):

2012-03-16  Jacky Jiang  <zhajiang@rim.com>

        [BlackBerry] Upstream ScriptControllerBlackBerry.cpp
        https://bugs.webkit.org/show_bug.cgi?id=81397

        Reviewed by Rob Buis.

        Initial upstream, no new tests.

        * bindings/js/ScriptControllerBlackBerry.cpp: Added.

2012-03-16  Adam Barth  <abarth@webkit.org>

        remove-body-during-body-replacement2.html is triggering crashes on all platforms
        https://bugs.webkit.org/show_bug.cgi?id=81374

        Reviewed by Eric Seidel.

        When overriding disconnectFrame, we need to call the base class version
        of the method so that it can clear the m_frame pointer.

        Tests: This patch fixes a large number of crashes in tests.

        * notifications/DOMWindowNotifications.cpp:
        (WebCore::DOMWindowNotifications::disconnectFrame):

2012-03-16  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Upstream the BlackBerry change to platform/Widget.h
        https://bugs.webkit.org/show_bug.cgi?id=81304

        Reviewed by Rob Buis.

        typedefs of PlatformWidget and PlatformPageClient for the BlackBerry.

        * platform/Widget.h:

2012-03-16  David Barton  <dbarton@mathscribe.com>

        MathML internals - factor code for almost anonymous blocks
        https://bugs.webkit.org/show_bug.cgi?id=81387

        Reviewed by Eric Seidel.

        MathML uses "almost anonymous" blocks to layout parts of mathematical expressions. These
        will be converted to true anonymous blocks in a later patch. Here we factor out the code
        to create them into RenderMathMLBlock::createAlmostAnonymousBlock().

        No new tests. Some tree dump output is modified for existing tests. <munder>, <mover>,
        and <munderover> renderers already used true anonymous blocks, so we change them to call
        RenderBlock::createAnonymousBlock(). In the other direction, <mroot>'s almost anonymous
        blocks are now made RenderMathMLBlock not just RenderBlock, in agreement with other
        current MathML renderers.

        * rendering/mathml/RenderMathMLBlock.cpp:
        (WebCore::RenderMathMLBlock::createAlmostAnonymousBlock):
        * rendering/mathml/RenderMathMLBlock.h:
        (RenderMathMLBlock):
        (WebCore::RenderMathMLBlock::getBoxModelObjectWidth):
        * rendering/mathml/RenderMathMLFenced.cpp:
        (WebCore::RenderMathMLFenced::addChild):
        * rendering/mathml/RenderMathMLFraction.cpp:
        (WebCore::RenderMathMLFraction::updateFromElement):
            - improve some variable names
        (WebCore::RenderMathMLFraction::addChild):
        (WebCore::RenderMathMLFraction::layout):
        (WebCore::RenderMathMLFraction::paint):
        (WebCore::RenderMathMLFraction::baselinePosition):
        * rendering/mathml/RenderMathMLRoot.cpp:
        (WebCore::RenderMathMLRoot::addChild):
        * rendering/mathml/RenderMathMLSubSup.cpp:
        (WebCore::RenderMathMLSubSup::addChild):
        * rendering/mathml/RenderMathMLSubSup.h:
        * rendering/mathml/RenderMathMLUnderOver.cpp:
        (WebCore::RenderMathMLUnderOver::addChild):

2012-03-16  Levi Weintraub  <leviw@chromium.org>

        Prepare RenderObject for FractionalLayoutUnits
        https://bugs.webkit.org/show_bug.cgi?id=81178

        Reviewed by Eric Seidel.

        This readies RenderObject to deal with FractionalLayoutUnits as a backend for the
        LayoutUnit abstraction.

        No new tests. No change in behavior.

        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::pixelSnappedAbsoluteClippedOverflowRect): Convenience method to be
        used instead of absouluteClippedOverflowRect in platform code. Platform updates will come
        in a separate patch.
        (WebCore):
        (WebCore::RenderObject::repaintAfterLayoutIfNeeded): Borders remain ints when we move to
        sub-pixel layout. This adjusts border variables for this, and adds compiler fixes when
        using std::max and std::min with mixed int/LayoutUnits.
        (WebCore::RenderObject::adjustRectForOutlineAndShadow): Outlines, like borders, remain
        ints in the new sub-pixel world. Using variables that reflect that.
        * rendering/RenderObject.h:
        (RenderObject):
        (WebCore::adjustForAbsoluteZoom): Handles FractionalLayoutUnit values. Flooring is what
        JavaScript requires since this is used with values that must return ints.
        (WebCore): Adding FractionalLayoutUnit.h to support the new adjusteForAbsoluteZoom method.

2012-03-16  Brady Eidson  <beidson@apple.com>

        <rdar://problem/11027997> and https://bugs.webkit.org/show_bug.cgi?id=81412
        REGRESSION (r107435) Copy a link and paste to Mail: Nothing is pasted

        Reviewed by Geoff Garen.

        WebKit API test WebViewCanPasteURL.mm added.

        * WebCore.exp.in:

        Add a strategy method specifically for getting the URL:
        * platform/PasteboardStrategy.h:

        Use that strategy method when creating the fragment for a URL:
        * platform/mac/PasteboardMac.mm:
        (WebCore::Pasteboard::documentFragment):

        Add a platform pasteboard accessor to "do the right thing" for getting a URL:
        * platform/PlatformPasteboard.h:
        * platform/mac/PlatformPasteboardMac.mm:
        (WebCore::PlatformPasteboard::url):

2012-03-16  Joseph Pecoraro  <pecoraro@apple.com>

        <http://webkit.org/b/81380> clang warning unused variable when ENABLE(TEXT_CARET) is disabled

        Reviewed by Dan Bernstein.

        * editing/FrameSelection.cpp:
        (WebCore::FrameSelection::recomputeCaretRect):
        Put the variable inside of a guard because it is only
        used inside of a guard.

2012-03-16  Andreas Kling  <kling@webkit.org>

        Shrink BorderValue.
        <http://webkit.org/b/69521>

        Reviewed by Anders Carlsson.

        Split BorderValue's Color member into RGBA32/bool buddies and stash the bool in
        the BorderValue bitfield.

        This shrinks BorderValue by 4 bytes, in turn shrinking BorderData by 16 bytes.
        Altogether this yields ~800 kB in reduced memory consumption when viewing the full
        HTML5 spec at <http://whatwg.org/c>

        * rendering/style/BorderValue.h:
        (WebCore::BorderValue::BorderValue):
        (WebCore::BorderValue::isTransparent):
        (WebCore::BorderValue::operator==):
        (BorderValue):
        (WebCore::BorderValue::setColor):
        (WebCore::BorderValue::color):
        * rendering/style/OutlineValue.h:
        (WebCore::OutlineValue::operator==):
        * rendering/style/RenderStyle.cpp:
        (SameSizeAsBorderValue):
        * rendering/style/RenderStyle.h:

2012-03-16  Mark Pilgrim  <pilgrim@chromium.org>

        Moves remaining filesystem files to Modules/filesystem/
        https://bugs.webkit.org/show_bug.cgi?id=81353

        Reviewed by Adam Barth.

        No new tests, all existing tests pass.

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.list.am:
        * Modules/filesystem/AsyncFileWriter.h: Copied from Source/WebCore/fileapi/AsyncFileWriter.h.
        * Modules/filesystem/AsyncFileWriterClient.h: Copied from Source/WebCore/fileapi/AsyncFileWriterClient.h.
        * Modules/filesystem/DOMFilePath.cpp: Copied from Source/WebCore/fileapi/DOMFilePath.cpp.
        * Modules/filesystem/DOMFilePath.h: Copied from Source/WebCore/fileapi/DOMFilePath.h.
        * Modules/filesystem/DOMFileSystem.cpp: Copied from Source/WebCore/fileapi/DOMFileSystem.cpp.
        * Modules/filesystem/DOMFileSystem.h: Copied from Source/WebCore/fileapi/DOMFileSystem.h.
        * Modules/filesystem/DOMFileSystem.idl: Copied from Source/WebCore/fileapi/DOMFileSystem.idl.
        * Modules/filesystem/DOMFileSystemBase.cpp: Copied from Source/WebCore/fileapi/DOMFileSystemBase.cpp.
        * Modules/filesystem/DOMFileSystemBase.h: Copied from Source/WebCore/fileapi/DOMFileSystemBase.h.
        * Modules/filesystem/DOMFileSystemSync.cpp: Copied from Source/WebCore/fileapi/DOMFileSystemSync.cpp.
        * Modules/filesystem/DOMFileSystemSync.h: Copied from Source/WebCore/fileapi/DOMFileSystemSync.h.
        * Modules/filesystem/DOMFileSystemSync.idl: Copied from Source/WebCore/fileapi/DOMFileSystemSync.idl.
        * Modules/filesystem/Entry.cpp: Copied from Source/WebCore/fileapi/Entry.cpp.
        * Modules/filesystem/Entry.h: Copied from Source/WebCore/fileapi/Entry.h.
        * Modules/filesystem/Entry.idl: Copied from Source/WebCore/fileapi/Entry.idl.
        * Modules/filesystem/EntryArray.cpp: Copied from Source/WebCore/fileapi/EntryArray.cpp.
        * Modules/filesystem/EntryArray.h: Copied from Source/WebCore/fileapi/EntryArray.h.
        * Modules/filesystem/EntryArray.idl: Copied from Source/WebCore/fileapi/EntryArray.idl.
        * Modules/filesystem/EntryArraySync.cpp: Copied from Source/WebCore/fileapi/EntryArraySync.cpp.
        * Modules/filesystem/EntryArraySync.h: Copied from Source/WebCore/fileapi/EntryArraySync.h.
        * Modules/filesystem/EntryArraySync.idl: Copied from Source/WebCore/fileapi/EntryArraySync.idl.
        * Modules/filesystem/EntryBase.cpp: Copied from Source/WebCore/fileapi/EntryBase.cpp.
        * Modules/filesystem/EntryBase.h: Copied from Source/WebCore/fileapi/EntryBase.h.
        * Modules/filesystem/EntryCallback.h: Copied from Source/WebCore/fileapi/EntryCallback.h.
        * Modules/filesystem/EntryCallback.idl: Copied from Source/WebCore/fileapi/EntryCallback.idl.
        * Modules/filesystem/EntrySync.cpp: Copied from Source/WebCore/fileapi/EntrySync.cpp.
        * Modules/filesystem/EntrySync.h: Copied from Source/WebCore/fileapi/EntrySync.h.
        * Modules/filesystem/EntrySync.idl: Copied from Source/WebCore/fileapi/EntrySync.idl.
        * Modules/filesystem/ErrorCallback.h: Copied from Source/WebCore/fileapi/ErrorCallback.h.
        * Modules/filesystem/ErrorCallback.idl: Copied from Source/WebCore/fileapi/ErrorCallback.idl.
        * Modules/filesystem/FileCallback.h: Copied from Source/WebCore/fileapi/FileCallback.h.
        * Modules/filesystem/FileCallback.idl: Copied from Source/WebCore/fileapi/FileCallback.idl.
        * Modules/filesystem/FileEntry.cpp: Copied from Source/WebCore/fileapi/FileEntry.cpp.
        * Modules/filesystem/FileEntry.h: Copied from Source/WebCore/fileapi/FileEntry.h.
        * Modules/filesystem/FileEntry.idl: Copied from Source/WebCore/fileapi/FileEntry.idl.
        * Modules/filesystem/FileEntrySync.cpp: Copied from Source/WebCore/fileapi/FileEntrySync.cpp.
        * Modules/filesystem/FileEntrySync.h: Copied from Source/WebCore/fileapi/FileEntrySync.h.
        * Modules/filesystem/FileEntrySync.idl: Copied from Source/WebCore/fileapi/FileEntrySync.idl.
        * Modules/filesystem/FileSystemCallback.h: Copied from Source/WebCore/fileapi/FileSystemCallback.h.
        * Modules/filesystem/FileSystemCallback.idl: Copied from Source/WebCore/fileapi/FileSystemCallback.idl.
        * Modules/filesystem/FileSystemCallbacks.cpp: Copied from Source/WebCore/fileapi/FileSystemCallbacks.cpp.
        * Modules/filesystem/FileSystemCallbacks.h: Copied from Source/WebCore/fileapi/FileSystemCallbacks.h.
        * Modules/filesystem/FileWriter.cpp: Copied from Source/WebCore/fileapi/FileWriter.cpp.
        * Modules/filesystem/FileWriter.h: Copied from Source/WebCore/fileapi/FileWriter.h.
        * Modules/filesystem/FileWriter.idl: Copied from Source/WebCore/fileapi/FileWriter.idl.
        * Modules/filesystem/FileWriterBase.cpp: Copied from Source/WebCore/fileapi/FileWriterBase.cpp.
        * Modules/filesystem/FileWriterBase.h: Copied from Source/WebCore/fileapi/FileWriterBase.h.
        * Modules/filesystem/FileWriterBaseCallback.h: Copied from Source/WebCore/fileapi/FileWriterBaseCallback.h.
        * Modules/filesystem/FileWriterCallback.h: Copied from Source/WebCore/fileapi/FileWriterCallback.h.
        * Modules/filesystem/FileWriterCallback.idl: Copied from Source/WebCore/fileapi/FileWriterCallback.idl.
        * Modules/filesystem/FileWriterSync.cpp: Copied from Source/WebCore/fileapi/FileWriterSync.cpp.
        * Modules/filesystem/FileWriterSync.h: Copied from Source/WebCore/fileapi/FileWriterSync.h.
        * Modules/filesystem/FileWriterSync.idl: Copied from Source/WebCore/fileapi/FileWriterSync.idl.
        * Modules/filesystem/LocalFileSystem.cpp: Copied from Source/WebCore/fileapi/LocalFileSystem.cpp.
        * Modules/filesystem/LocalFileSystem.h: Copied from Source/WebCore/fileapi/LocalFileSystem.h.
        * Modules/filesystem/Metadata.h: Copied from Source/WebCore/fileapi/Metadata.h.
        * Modules/filesystem/Metadata.idl: Copied from Source/WebCore/fileapi/Metadata.idl.
        * Modules/filesystem/MetadataCallback.h: Copied from Source/WebCore/fileapi/MetadataCallback.h.
        * Modules/filesystem/MetadataCallback.idl: Copied from Source/WebCore/fileapi/MetadataCallback.idl.
        * Modules/filesystem/SyncCallbackHelper.h: Copied from Source/WebCore/fileapi/SyncCallbackHelper.h.
        * Modules/filesystem/WebKitFlags.h: Copied from Source/WebCore/fileapi/WebKitFlags.h.
        * Modules/filesystem/WorkerContextFileSystem.cpp: Copied from Source/WebCore/fileapi/WorkerContextFileSystem.cpp.
        * Modules/filesystem/WorkerContextFileSystem.h: Copied from Source/WebCore/fileapi/WorkerContextFileSystem.h.
        * Modules/filesystem/WorkerContextFileSystem.idl: Copied from Source/WebCore/fileapi/WorkerContextFileSystem.idl.
        * Target.pri:
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * fileapi/AsyncFileWriter.h: Removed.
        * fileapi/AsyncFileWriterClient.h: Removed.
        * fileapi/DOMFilePath.cpp: Removed.
        * fileapi/DOMFilePath.h: Removed.
        * fileapi/DOMFileSystem.cpp: Removed.
        * fileapi/DOMFileSystem.h: Removed.
        * fileapi/DOMFileSystem.idl: Removed.
        * fileapi/DOMFileSystemBase.cpp: Removed.
        * fileapi/DOMFileSystemBase.h: Removed.
        * fileapi/DOMFileSystemSync.cpp: Removed.
        * fileapi/DOMFileSystemSync.h: Removed.
        * fileapi/DOMFileSystemSync.idl: Removed.
        * fileapi/Entry.cpp: Removed.
        * fileapi/Entry.h: Removed.
        * fileapi/Entry.idl: Removed.
        * fileapi/EntryArray.cpp: Removed.
        * fileapi/EntryArray.h: Removed.
        * fileapi/EntryArray.idl: Removed.
        * fileapi/EntryArraySync.cpp: Removed.
        * fileapi/EntryArraySync.h: Removed.
        * fileapi/EntryArraySync.idl: Removed.
        * fileapi/EntryBase.cpp: Removed.
        * fileapi/EntryBase.h: Removed.
        * fileapi/EntryCallback.h: Removed.
        * fileapi/EntryCallback.idl: Removed.
        * fileapi/EntrySync.cpp: Removed.
        * fileapi/EntrySync.h: Removed.
        * fileapi/EntrySync.idl: Removed.
        * fileapi/ErrorCallback.h: Removed.
        * fileapi/ErrorCallback.idl: Removed.
        * fileapi/FileCallback.h: Removed.
        * fileapi/FileCallback.idl: Removed.
        * fileapi/FileEntry.cpp: Removed.
        * fileapi/FileEntry.h: Removed.
        * fileapi/FileEntry.idl: Removed.
        * fileapi/FileEntrySync.cpp: Removed.
        * fileapi/FileEntrySync.h: Removed.
        * fileapi/FileEntrySync.idl: Removed.
        * fileapi/FileSystemCallback.h: Removed.
        * fileapi/FileSystemCallback.idl: Removed.
        * fileapi/FileSystemCallbacks.cpp: Removed.
        * fileapi/FileSystemCallbacks.h: Removed.
        * fileapi/FileWriter.cpp: Removed.
        * fileapi/FileWriter.h: Removed.
        * fileapi/FileWriter.idl: Removed.
        * fileapi/FileWriterBase.cpp: Removed.
        * fileapi/FileWriterBase.h: Removed.
        * fileapi/FileWriterBaseCallback.h: Removed.
        * fileapi/FileWriterCallback.h: Removed.
        * fileapi/FileWriterCallback.idl: Removed.
        * fileapi/FileWriterSync.cpp: Removed.
        * fileapi/FileWriterSync.h: Removed.
        * fileapi/FileWriterSync.idl: Removed.
        * fileapi/LocalFileSystem.cpp: Removed.
        * fileapi/LocalFileSystem.h: Removed.
        * fileapi/Metadata.h: Removed.
        * fileapi/Metadata.idl: Removed.
        * fileapi/MetadataCallback.h: Removed.
        * fileapi/MetadataCallback.idl: Removed.
        * fileapi/SyncCallbackHelper.h: Removed.
        * fileapi/WebKitFlags.h: Removed.
        * fileapi/WorkerContextFileSystem.cpp: Removed.
        * fileapi/WorkerContextFileSystem.h: Removed.
        * fileapi/WorkerContextFileSystem.idl: Removed.

2012-03-16  Mark Pilgrim  <pilgrim@chromium.org>

        Collapse ENABLE(BLOB)|ENABLE(FILE_SYSTEM) to just ENABLE(BLOB) in OperationNotAllowedException.idl
        https://bugs.webkit.org/show_bug.cgi?id=81391

        Reviewed by Adam Barth.

        No new tests, all existing tests pass.

        * fileapi/OperationNotAllowedException.idl:

2012-03-16  Emil A Eklund  <eae@chromium.org>

        Fix rounding and usage of LayoutUnits in RenderBoxModelObject
        https://bugs.webkit.org/show_bug.cgi?id=81057

        Reviewed by Julien Chaffraix.

        No new tests.

        (WebCore):
        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::pixelSnappedOffsetWidth):
        (WebCore::RenderBoxModelObject::pixelSnappedOffsetHeight):
        Fix implementation of pixelSnappedOffsetWidth/Height. The location
        parameter will be ignored until we enable subpixel support.

        (WebCore::RenderBoxModelObject::paintFillLayerExtended):
        Use ints for border widths.
        
        (WebCore::resolveWidthForRatio):
        (WebCore::resolveHeightForRatio):
        (WebCore::resolveAgainstIntrinsicWidthOrHeightAndRatio):
        (WebCore::resolveAgainstIntrinsicRatio):
        Change resolve*Ratio methods to operate on IntSizes as none of the
        callers need subpixel precision.

        (WebCore::RenderBoxModelObject::calculateBackgroundImageGeometry):
        (WebCore::RenderBoxModelObject::paintNinePieceImage):
        Pixel snap paintRect when computing image geometry.

2012-03-16  Terry Anderson  <tdanderson@chromium.org>

        100% height elements to not respond to vertical browser rescaling
        https://bugs.webkit.org/show_bug.cgi?id=43022

        Reviewed by Julien Chaffraix.

        Test: fast/replaced/vertical-resize-100percent-element.html

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::computeReplacedLogicalHeightUsing):
            For the case where a replaced element has a percentage height,
            we update the entries in RenderBlock::gPercentHeightDescendantsMap
            corresponding to all ancestors of the replaced element.

2012-03-15  Daniel Cheng  <dcheng@chromium.org>

        [chromium] Refactor ClipboardChromium and DataTransferItemList/DataTransferItem to support HTML spec
        https://bugs.webkit.org/show_bug.cgi?id=76598

        Reviewed by Tony Chang.

        We no longer store drag/clipboard data in named fields. We used to maintain the data store
        list separately, which resulted in a lot of complicated code to try to make sure that
        ChromiumDataObject and this list stayed in sync. We now just store what is essentially a
        list MIME type/data pairs directly in ChromiumDataObject. This has the benefit of letting us
        easily add write support during dragstart/copy operations using DataTransferItemList.

        Tests: fast/events/clipboard-dataTransferItemList.html
               fast/events/drag-dataTransferItemList.html

        * platform/chromium/ChromiumDataObject.cpp:
        (WebCore::findItem):
        (WebCore::ChromiumDataObject::createFromPasteboard):
        (WebCore::ChromiumDataObject::create):
        (WebCore::ChromiumDataObject::copy):
        (WebCore::ChromiumDataObject::items):
        (WebCore::ChromiumDataObject::clearData):
        (WebCore::ChromiumDataObject::clearAll):
        (WebCore::ChromiumDataObject::clearAllExceptFiles):
        (WebCore::ChromiumDataObject::types):
        (WebCore::ChromiumDataObject::getData):
        (WebCore::ChromiumDataObject::setData):
        (WebCore::ChromiumDataObject::urlAndTitle):
        (WebCore::ChromiumDataObject::setURLAndTitle):
        (WebCore::ChromiumDataObject::htmlAndBaseURL):
        (WebCore::ChromiumDataObject::setHTMLAndBaseURL):
        (WebCore::ChromiumDataObject::containsFilenames):
        (WebCore):
        (WebCore::ChromiumDataObject::filenames):
        (WebCore::ChromiumDataObject::addFilename):
        (WebCore::ChromiumDataObject::addSharedBuffer):
        (WebCore::ChromiumDataObject::ChromiumDataObject):
        * platform/chromium/ChromiumDataObject.h:
        (WebCore):
        (ChromiumDataObject):
        * platform/chromium/ClipboardChromium.cpp:
        (WebCore::normalizeType):
        (WebCore::ClipboardChromium::ClipboardChromium):
        (WebCore::ClipboardChromium::clearData):
        (WebCore::ClipboardChromium::clearAllData):
        (WebCore::ClipboardChromium::getData):
        (WebCore::ClipboardChromium::setData):
        (WebCore::ClipboardChromium::types):
        (WebCore::ClipboardChromium::files):
        (WebCore::writeImageToDataObject):
        (WebCore::ClipboardChromium::declareAndWriteDragImage):
        (WebCore::ClipboardChromium::writeURL):
        (WebCore::ClipboardChromium::writeRange):
        (WebCore::ClipboardChromium::writePlainText):
        (WebCore::ClipboardChromium::hasData):
        (WebCore::ClipboardChromium::items):
        * platform/chromium/ClipboardChromium.h:
        (WebCore):
        (ClipboardChromium):
        (WebCore::ClipboardChromium::frame):
        * platform/chromium/ClipboardUtilitiesChromium.cpp:
        (WebCore::convertURIListToURL):
        (WebCore):
        * platform/chromium/ClipboardUtilitiesChromium.h:
        (WebCore):
        * platform/chromium/DataTransferItemChromium.cpp:
        (WebCore::DataTransferItemChromium::createFromString):
        (WebCore::DataTransferItemChromium::createFromFile):
        (WebCore::DataTransferItemChromium::createFromURL):
        (WebCore::DataTransferItemChromium::createFromHTML):
        (WebCore):
        (WebCore::DataTransferItemChromium::createFromSharedBuffer):
        (WebCore::DataTransferItemChromium::createFromPasteboard):
        (WebCore::DataTransferItemChromium::DataTransferItemChromium):
        (WebCore::DataTransferItemChromium::getAsString):
        (WebCore::DataTransferItemChromium::getAsFile):
        (WebCore::DataTransferItemChromium::internalGetAsString):
        (WebCore::DataTransferItemChromium::isFilename):
        * platform/chromium/DataTransferItemChromium.h:
        (WebCore):
        (DataTransferItemChromium):
        (WebCore::DataTransferItemChromium::kind):
        (WebCore::DataTransferItemChromium::type):
        (WebCore::DataTransferItemChromium::sharedBuffer):
        (WebCore::DataTransferItemChromium::title):
        (WebCore::DataTransferItemChromium::baseURL):
        * platform/chromium/DataTransferItemListChromium.cpp:
        (WebCore::DataTransferItemListChromium::create):
        (WebCore::DataTransferItemListChromium::createFromPasteboard):
        (WebCore):
        (WebCore::DataTransferItemListChromium::DataTransferItemListChromium):
        (WebCore::DataTransferItemListChromium::length):
        (WebCore::DataTransferItemListChromium::item):
        (WebCore::DataTransferItemListChromium::deleteItem):
        (WebCore::DataTransferItemListChromium::clear):
        (WebCore::DataTransferItemListChromium::add):
        (WebCore::DataTransferItemListChromium::internalAddStringItem):
        (WebCore::DataTransferItemListChromium::internalAddFileItem):
        * platform/chromium/DataTransferItemListChromium.h:
        (WebCore):
        (DataTransferItemListChromium):
        * platform/chromium/DragDataChromium.cpp:
        (WebCore::DragData::asURL):
        (WebCore::DragData::asPlainText):
        (WebCore::DragData::asFragment):

2012-03-16  Matt Lilek  <mrl@apple.com>

        Don't install libWebCoreTestSupport on OS X production builds
        https://bugs.webkit.org/show_bug.cgi?id=81087

        Reviewed by Mark Rowe.

        * Configurations/WebCoreTestSupport.xcconfig:

2012-03-16  Tony Chang  <tony@chromium.org>

        incorrectly removing scrollbar height for auto height flexbox children
        https://bugs.webkit.org/show_bug.cgi?id=81388

        Reviewed by Ojan Vafai.

        In a column flexbox, when computing the preferred height of an auto
        height child, we were subtracting out the horizontal scrollbar height.

        New test case in css3/flexbox/columns-auto-size.html.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::preferredMainAxisContentExtentForChild):

2012-03-16  Adam Klein  <adamk@chromium.org>

        Out-of-document radio buttons should be grouped when associated with a form
        https://bugs.webkit.org/show_bug.cgi?id=81268

        Reviewed by Kent Tamura.

        Per the HTML spec, and the behavior of Firefox and IE 8/9, radio buttons
        with a form owner should be grouped, even if that form is not in the document.

        r104668 added many inDocument() tests to radio button grouping code.
        While those are necessary to avoid unattached <input type=radio>
        elements being grouped together, it also kept them from being grouped
        when associated with a form outside the document.

        This patch changes the HTMLInputElement::checkedRadioButtons() method
        to return either a pointer to the proper CheckedRadioButtons instance
        (either the document's or a form's), but will return null if the
        element should not be associated with any radio button group.

        The main fallout of this was that the callers of checkedRadioButtons()
        now have to check for null, resulting in the creation of a few helper
        methods in HTMLInputElement to wrap the null checks.

        This refactoring has the pleasant side-effect of exposing a cleaner API between
        HTMLInputElement and RadioInputType, and making a clearer contract
        between HTMLInputElement and CheckedRadioButtons (e.g., all
        CheckedRadioButtons methods that take an element can now assume that
        it is a radio button, where previously some checked for that and
        others asserted it).

        Test: fast/forms/radio/radio-group-in-detached-form.html

        * dom/CheckedRadioButtons.cpp:
        (WebCore): Removed shouldMakeRadioGroup() helper function.
        (WebCore::CheckedRadioButtons::addButton): Replace call to shouldMakeRadioGroup
        with appropriate assert and name check.
        (WebCore::CheckedRadioButtons::updateCheckedState): ditto.
        (WebCore::CheckedRadioButtons::requiredAttributeChanged): ditto.
        (WebCore::CheckedRadioButtons::isRequiredGroup): Renamed from isInRequiredGroup,
        changed to take only a group name, not an element.
        (WebCore::CheckedRadioButtons::removeButton): Replace call to shouldMakeRadioGroup.
        with appropriate assert and name check.
        * dom/CheckedRadioButtons.h:
        (CheckedRadioButtons):
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::~HTMLInputElement): Added isRadioButton check
        now that it's asserted in CheckedRadioButtons.
        (WebCore::HTMLInputElement::updateType): Call helper method instead of
        calling directly into CheckedRadioButtons.
        (WebCore::HTMLInputElement::parseAttribute): ditto.
        (WebCore::HTMLInputElement::setChecked): ditto.
        (WebCore::HTMLInputElement::willChangeForm): ditto.
        (WebCore::HTMLInputElement::didChangeForm): ditto.
        (WebCore::HTMLInputElement::insertedIntoDocument): ditto.
        (WebCore::HTMLInputElement::removedFromDocument): ditto.
        (WebCore::HTMLInputElement::didMoveToNewDocument): Added isRadioButton check.
        (WebCore::HTMLInputElement::requiredAttributeChanged): Check for membership in a group
        before calling into CheckedRadioButtons.
        (WebCore::HTMLInputElement::isInRequiredRadioButtonGroup): Added helper method for use by RadioInputType.
        (WebCore):
        (WebCore::HTMLInputElement::checkedRadioButtonForGroup): ditto.
        (WebCore::HTMLInputElement::checkedRadioButtons): Changed to return a
        pointer, only return non-null if actually a member of a group.
        (WebCore::HTMLInputElement::addToRadioButtonGroup): Helper method for
        use in HTMLInputElement.
        (WebCore::HTMLInputElement::removeFromRadioButtonGroup): ditto.
        * html/HTMLInputElement.h:
        (HTMLInputElement): Added/removed methods, removed outdated comment about visibility.
        * html/RadioInputType.cpp:
        (WebCore::RadioInputType::valueMissing): Call new HTMLInputElement methods instead
        of interacting directly with CheckedRadioButtons.
        (WebCore::RadioInputType::isKeyboardFocusable): ditto.
        (WebCore::RadioInputType::willDispatchClick): ditto.

2012-03-16  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=81366
        
        Add RenderMultiColumnBlock subclass of RenderBlock. This new class will hold all of the multi-column
        logic (as well as painting/hit testing). That way the column code can be kept out of the base class
        and be more cleanly factored.

        Patch Node::diff so that we detach and re-attach the renderer if column counts or widths change
        from auto to non-auto (and vice versa) to ensure the right renderer gets made.
        
        Patch RenderObject::createObject to make a RenderMultiColumnBlock if either the column count or
        column width is non-auto.
        
        Patch RenderBlock::calcColumnWidth to "turn off" the old implementation of columns if the pref to use
        the new column implementation is set. This single chokepoint should be sufficient for disabling the old
        columns in favor of the new.

        Reviewed by Dan Bernstein.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * dom/Document.cpp:
        (WebCore::Document::regionBasedColumnsEnabled):
        (WebCore):
        (WebCore::Document::recalcStyle):
        * dom/Document.h:
        (Document):
        * dom/Element.cpp:
        (WebCore::Element::recalcStyle):
        * dom/Node.cpp:
        (WebCore::Node::diff):
        * dom/Node.h:
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::calcColumnWidth):
        (WebCore::RenderBlock::updateFirstLetterStyle):
        * rendering/RenderMultiColumnBlock.cpp: Added.
        (WebCore):
        (WebCore::RenderMultiColumnBlock::RenderMultiColumnBlock):
        (WebCore::RenderMultiColumnBlock::renderName):
        * rendering/RenderMultiColumnBlock.h: Added.
        (WebCore):
        (RenderMultiColumnBlock):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::createObject):
        * rendering/RenderObjectChildList.cpp:
        (WebCore::RenderObjectChildList::updateBeforeAfterContent):

2012-03-16  Stephen White  <senorblanco@chromium.org>

        [chromium] Improve CSS3 filter blur performance.
        https://bugs.webkit.org/show_bug.cgi?id=81360

        This change improves blur performance by 2-2.5X on blurred CSS
        3D transforms and accelerated canvas demos by skipping an unnecessary
        texture allocation and bitmap draw.

        Reviewed by James Robinson.

        Covered by existing layout tests in css3/filters.

        * platform/graphics/chromium/cc/CCRenderSurfaceFilters.cpp:
        (WebCore::CCRenderSurfaceFilters::apply):
        Call SkCanvas::drawSprite() directly instead of using
        saveLayer()/restore().

2012-03-16  Joshua Bell  <jsbell@chromium.org>

        [Chromium] IndexedDB: Assertion failure when storing File objects
        https://bugs.webkit.org/show_bug.cgi?id=76746

        The blob data in Blob/File/FileList objects is serialized "by reference" (the
        internal URL) rather than "by value" (the actual data); this is sufficient for
        postMessage() but not for IndexedDB since the referenced data is not retained
        Expose a mechanism to enumerate the URLs so that SSVs can be rejected by IDB
        until blob data serialization can is implemented (outside the SSV mechanism, and
        potentially asynchronously).

        Also, correct issue in V8DOMWrapper::instantiateV8Object where context is assumed
        to be a Worker context if it's not a Window, which is incorrect for the
        Chromium utility process; this is hit if Blobs are not blocked.

        Reviewed by Tony Chang.

        Test: storage/indexeddb/noblobs.html

        * Modules/indexeddb/IDBCursor.cpp:
        (WebCore::IDBCursor::update): Reject SSVs that contain blob references.
        * Modules/indexeddb/IDBObjectStore.cpp:
        (WebCore::IDBObjectStore::add): Reject SSVs that contain blob references.
        (WebCore::IDBObjectStore::put): Reject SSVs that contain blob references.
        * bindings/js/SerializedScriptValue.cpp:
        (WebCore::CloneSerializer::serialize):
        (WebCore::CloneSerializer::CloneSerializer):
        (WebCore::CloneSerializer::dumpIfTerminal):
        (WebCore::CloneSerializer::write):
        (CloneSerializer):
        (WebCore::SerializedScriptValue::SerializedScriptValue):
        (WebCore::SerializedScriptValue::create):
        (WebCore::SerializedScriptValue::undefinedValue):
        (WebCore::SerializedScriptValue::booleanValue):
        * bindings/js/SerializedScriptValue.h: New API to enable the clients to be picky.
        * bindings/v8/SerializedScriptValue.cpp:
        (WebCore::SerializedScriptValue::SerializedScriptValue):
        * bindings/v8/SerializedScriptValue.h: New API to enable the clients to be picky.
        (WebCore::SerializedScriptValue::blobURLs):
        (SerializedScriptValue):
        * bindings/v8/V8DOMWrapper.cpp:
        (WebCore::V8DOMWrapper::instantiateV8Object):  Ensure context is a worker context before treating it as such.

2012-03-16  Erik Arvidsson  <arv@chromium.org>

        [V8] Ensure that invalid syntax in inline event handlers does not cause a crash
        https://bugs.webkit.org/show_bug.cgi?id=81385

        Reviewed by Nate Chapin.

        The way that V8 does its inline event handler involves concatting strings and
        if the attribute value is crafted in a special way this could cause a crash.

        Test: fast/dom/inline-event-attributes-crash.html

        * bindings/v8/V8LazyEventListener.cpp:
        (WebCore::V8LazyEventListener::prepareListenerObject):

2012-03-14  Jer Noble  <jer.noble@apple.com>

        Wrong icon to restore to windowed mode in full screen video panel
        https://bugs.webkit.org/show_bug.cgi?id=70437

        Reviewed by Eric Carlson.

        No new tests. Updated platform/mac/accessibility/media-element-expected.txt.

        Renamed MediaFullscreenButton to MediaEnterFullscreenButton and added MediaExitFullscreenButton:
        * accessibility/AccessibilityMediaControls.cpp:
        (WebCore::AccessibilityMediaControl::controlTypeName):
        (WebCore::AccessibilityMediaControl::roleValue):
        * html/shadow/MediaControlElements.cpp:
        (WebCore::MediaControlFullscreenButtonElement::MediaControlFullscreenButtonElement):
        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        * css/CSSValueKeywords.in:
        * platform/ThemeTypes.h:

        Added setIsFullscreen which controls the display of the enter/exit fullscreen button:
        * html/shadow/MediaControlElements.cpp:
        (WebCore::MediaControlFullscreenButtonElement::setIsFullscreen): Added.
        * html/shadow/MediaControlElements.h:
        * html/shadow/MediaControlRootElement.cpp:
        (WebCore::MediaControlRootElement::enteredFullscreen):
        (WebCore::MediaControlRootElement::exitedFullscreen):

        Paint the enter/exit fullscreen button accordingly:
        * rendering/RenderMediaControlsChromium.cpp:
        (WebCore::RenderMediaControlsChromium::paintMediaControlsPart):
        * rendering/RenderTheme.cpp:
        (WebCore::RenderTheme::paint):
        * rendering/RenderThemeChromiumAndroid.cpp:
        (WebCore::RenderThemeChromiumAndroid::paintMediaFullscreenButton):
        * rendering/RenderThemeMac.mm:
        (WebCore::RenderThemeMac::paintMediaFullscreenButton):
        * rendering/RenderMediaControls.cpp:
        (WebCore::RenderMediaControls::paintMediaControlsPart):
        * rendering/RenderThemeSafari.cpp:
        (WebCore::RenderThemeSafari::paintMediaFullscreenButton):

        Update the localized strings for the exit and enter fullscreen buttons:
        * English.lproj/Localizable.strings:
        * platform/LocalizedStrings.cpp:
        (WebCore::localizedMediaControlElementString):
        * platform/gtk/LocalizedStringsGtk.cpp:
        (WebCore::localizedMediaControlElementString):
        (WebCore::localizedMediaControlElementHelpText):
        * platform/qt/LocalizedStringsQt.cpp:
        (WebCore::localizedMediaControlElementString):
        (WebCore::localizedMediaControlElementHelpText):

2012-03-16  Levi Weintraub  <leviw@chromium.org>

        Update LayoutUnit usage in RenderListBox
        https://bugs.webkit.org/show_bug.cgi?id=81038

        Reviewed by Julien Chaffraix.

        Bringing RenderListBox in line with the rules listed in
        https://trac.webkit.org/wiki/LayoutUnit

        No new tests. No change in behavior.

        * rendering/RenderListBox.cpp:
        (WebCore::RenderListBox::paintScrollbar): Pixel snapping before handing off scrollbar
        painting to the platform.
        (WebCore::RenderListBox::paintItemForeground): Rounding the offset for text painting.
        (WebCore::RenderListBox::paintItemBackground): Pixel snapping the background rect.
        (WebCore::RenderListBox::panScroll): EventHandler::currentMousePosition is an IntPoint,
        so it doesn't require additional rounding in RenderListBox.

2012-03-16  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r111020.
        http://trac.webkit.org/changeset/111020
        https://bugs.webkit.org/show_bug.cgi?id=81377

        Broke Chromium Win compile (Requested by pkasting on #webkit).

        * GNUmakefile.list.am:
        * WebCore.gypi:
        * platform/mediastream/PeerConnection00Handler.cpp: Removed.
        * platform/mediastream/PeerConnection00Handler.h: Removed.
        * platform/mediastream/PeerConnection00HandlerClient.h: Removed.

2012-03-16  Dominic Mazzoni  <dmazzoni@google.com>

        File input control accessibility can cause a crash
        https://bugs.webkit.org/show_bug.cgi?id=80896

        Reviewed by Chris Fleizach.

        Test: accessibility/input-file-causes-crash.html

        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::textUnderElement):

2012-03-08  Jer Noble  <jer.noble@apple.com>

        Support W3C Full Screen API proposal
        https://bugs.webkit.org/show_bug.cgi?id=80660

        Reviewed by Alexey Proskuryakov.

        Tests: fullscreen/full-screen-element-stack.html
               fullscreen/full-screen-enabled.html
               fullscreen/full-screen-restrictions.html

        The W3C proposal for taking arbitrary elements into full-screen mode is significantly
        different than the Mozilla proposal. For example, the W3C has proposed a lower-case "s"
        in "Fullscreen", which means the W3C and Mozilla "requestFullscreen" APIs differ only by
        in that lower-case "s". Annoying as this is, it does allow us to retain the semantics for
        the Mozilla case (har!).

        A significant difficulty is obeying the new W3C spec rules is that we would like to apply the
        fullscreen CSS rules while exiting fullscreen mode, though the W3C spec insists that the
        webkitFullscreenElement returns the new value immediately.  As such, we retain the m_fullScreenElement
        variable (distinct from the top of the m_fullScreenElements stack) which is controlled by the
        webkit{Will,Did}{Enter,Exit}FullScreen functions.

        New APIs for the W3C Fullscreen spec:
        * dom/Document.h:
        (WebCore::Document::webkitFullscreenElement):
        (WebCore::Document::webkitFullscreenEnabled):
        * dom/Document.idl:
        * dom/Element.cpp:
        (WebCore::Element::webkitRequestFullscreen):
        * dom/Element.h:
        * dom/Element.idl:

        * dom/Document.cpp:
        (WebCore::Document::removedLastRef): Clear m_fullScreenElementStack.
        (WebCore::Document::requestFullScreenForElement): Implement the W3C requirements.
        (WebCore::Document::webkitExitFullscreen): Ditto.
        (WebCore::Document::webkitCancelFullScreen): Implement in terms of webkitCancelFullscreen.
        (WebCore::Document::webkitDidEnterFullScreenForElement): 
        (WebCore::Document::webkitWillExitFullScreenForElement):
        (WebCore::Document::webkitDidExitFullScreenForElement):
        (WebCore::Document::fullScreenChangeDelayTimerFired): Protect against items being
            added to the event and error queue by swapping out empty queues before starting.
        (WebCore::Document::clearFullscreenElementStack): Simple accessor.
        (WebCore::Document::popFullscreenElementStack): Ditto.
        (WebCore::Document::pushFullscreenElementStack): Ditto.
        * dom/Element.cpp:
        (WebCore::Element::webkitRequestFullScreen):

        Add new RuntimeEnabledFeatures functions for the added Document and Element functions.
        * bindings/generic/RuntimeEnabledFeatures.h:
        (RuntimeEnabledFeatures):
        (WebCore::RuntimeEnabledFeatures::webkitFullscreenEnabledEnabled):
        (WebCore::RuntimeEnabledFeatures::webkitFullscreenElementEnabled):
        (WebCore::RuntimeEnabledFeatures::webkitExitFullscreenEnabled):
        (WebCore::RuntimeEnabledFeatures::webkitRequestFullscreenEnabled):


2012-03-16  Adam Klein  <adamk@chromium.org>

        Make HTMLInputElement::isRadioButton non-virtual and remove unused HTMLFormControlElement::isRadioButton method
        https://bugs.webkit.org/show_bug.cgi?id=81255

        Reviewed by Kent Tamura.

        No new tests, no change in behavior.

        * html/HTMLFormControlElement.h:
        * html/HTMLInputElement.h:
        (HTMLInputElement):

2012-03-16  Tay Grigg  <tgrigg@rim.com>

        [BlackBerry] Update NetworkJob to accept batched headers
        https://bugs.webkit.org/show_bug.cgi?id=81273

        Batch up the headers into a vector before they come into
        webkit to increase performance, and simplify the API.

        Reviewed by George Staikos.

        * platform/network/blackberry/NetworkJob.cpp:
        (WebCore::NetworkJob::notifyHeadersReceived):
        * platform/network/blackberry/NetworkJob.h:
        (NetworkJob):

2012-03-16  Dana Jansens  <danakj@chromium.org>

        [chromium] Add overdraw metrics for texture uploads
        https://bugs.webkit.org/show_bug.cgi?id=81175

        Reviewed by Adrienne Walker.

        Record texture upload metrics during paint. To properly record
        the amount of pixels culled, we must compute the amount of pixels we
        would have uploaded for a tile. This requires knowing the dirty rect of
        the tile, but the dirty rect can be changed by WebKit during a paint, so
        we always store the dirtyRect in the tile's updateRect. We add an
        m_updateCulled bool to the UpdatableTile structure, to identify tiles
        that were not updated, and know a tile was updated if updateRect is not
        empty and updateCulled is false.

        Tested by all TiledLayerChromiumTests that use occlusion tracker.

        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (UpdatableTile):
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintLayerContents):

2012-03-16  Jer Noble  <jer.noble@apple.com>

        Allow AudioContext::create() to emit an ExceptionCode.
        https://bugs.webkit.org/show_bug.cgi?id=81049

        Reviewed by Kentaro Hara.

        No new tests; no change in functionality.

        Pass through an ExceptionCode parameter to AudioContext::create().  It is currently
        never modified, but exceptions will be added in the future.

        * bindings/js/JSAudioContextCustom.cpp:
        (WebCore::JSAudioContextConstructor::constructJSAudioContext):
        * bindings/v8/custom/V8AudioContextCustom.cpp:
        (WebCore::V8AudioContext::constructorCallback):
        * webaudio/AudioContext.cpp:
        (WebCore::AudioContext::create):
        * webaudio/AudioContext.h:

2012-03-16  Dana Jansens  <danakj@chromium.org>

        [chromium] Remove surface damage client from occlusion tracker
        https://bugs.webkit.org/show_bug.cgi?id=81242

        Reviewed by Adrienne Walker.

        Code was not used yet, so no new tests. Removing tests instead!

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::::CCOcclusionTrackerBase):
        (WebCore::::layerScissorRectInTargetSurface):
        (WebCore):
        * platform/graphics/chromium/cc/CCOcclusionTracker.h:
        (WebCore):
        (CCOcclusionTrackerBase):

2012-03-16  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API (JSEP): Introducing PeerConnection00Handler
        https://bugs.webkit.org/show_bug.cgi?id=81333

        Reviewed by Adam Barth.

        In preparation of the last WebCore patch that will introduce PeerConnection00 here's its platform representation.

        Not possible to test until the entire JSEP feature is commited.

        * GNUmakefile.list.am:
        * WebCore.gypi:
        * platform/mediastream/PeerConnection00Handler.cpp: Added.
        (WebCore):
        (WebCore::PeerConnection00Handler::create):
        (WebCore::PeerConnection00Handler::PeerConnection00Handler):
        (WebCore::PeerConnection00Handler::~PeerConnection00Handler):
        (WebCore::PeerConnection00Handler::createOffer):
        (WebCore::PeerConnection00Handler::createAnswer):
        (WebCore::PeerConnection00Handler::setLocalDescription):
        (WebCore::PeerConnection00Handler::setRemoteDescription):
        (WebCore::PeerConnection00Handler::localDescription):
        (WebCore::PeerConnection00Handler::remoteDescription):
        (WebCore::PeerConnection00Handler::startIce):
        (WebCore::PeerConnection00Handler::processIceMessage):
        (WebCore::PeerConnection00Handler::addStream):
        (WebCore::PeerConnection00Handler::removeStream):
        (WebCore::PeerConnection00Handler::stop):
        * platform/mediastream/PeerConnection00Handler.h: Added.
        (WebCore):
        (PeerConnection00Handler):
        * platform/mediastream/PeerConnection00HandlerClient.h: Added.
        (WebCore):
        (PeerConnection00HandlerClient):
        (WebCore::PeerConnection00HandlerClient::~PeerConnection00HandlerClient):

2012-03-16  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: fix exception when hovering over bound function in heap profiler.
        https://bugs.webkit.org/show_bug.cgi?id=81362

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.Linkifier.prototype.linkifyRawLocation):

2012-03-16  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] The "progress" element should not be a form-associated element.
        https://bugs.webkit.org/show_bug.cgi?id=80240

        Reviewed by Kent Tamura.

        This patch changes base class of HTMLProgressElement to LabelableElement from
        HTMLFormControlElement for saving memory space and iteration time of
        extra "progress" elements in HTMLFormElement::m_formAssociatedElements
        and matching the HTML5 specification for ease of maintenance.

        Changes of TextIterator is lead by usage of isFormControlElement. This
        changes will be replaced with more meaningful predicate as part of
        https://bugs.webkit.org/show_bug.cgi?id=80381

        No new tests. Update existing tests to cover this change.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::canShareStyleWithElement): Moved the "progress" element support code from canShareStyleWithControl.
        (WebCore::CSSStyleSelector::canShareStyleWithControl):
        * css/SelectorChecker.cpp:
        (WebCore::SelectorChecker::checkOneSelector): Remove isFormControlElement check for PseudoIndeterminate.
        * editing/TextIterator.cpp:
        (WebCore::TextIterator::advance): Check HTMLProgressElement in addition to isFormControlElement. This change is for text dump in LayoutTests implemented by document.innerText attribute.
        * html/HTMLProgressElement.cpp: Remove unused include file.
        (WebCore::HTMLProgressElement::HTMLProgressElement): Changed base class to LabelableElement.
        (WebCore::HTMLProgressElement::create): Remove form paraprogress.
        (WebCore::HTMLProgressElement::parseAttribute): Replace HTMLFormControlElement to LabelableElement.
        (WebCore::HTMLProgressElement::attach): Replace HTMLFormControlElement to LabelableElement.
        * html/HTMLProgressElement.h:
        (HTMLProgressElement):
        * html/HTMLProgressElement.idl: Remove the "form" attribute which isn't listed in the HTML5 specification.
        * html/HTMLTagNames.in: Remove "constructorNeedsFormElement" for not passing "form" parameter in HTMLElementFactory.

2012-03-16  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: Heap Snapshot: Unreviewed single line fix for isWindow getter.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshotNode.prototype.get isWindow):

2012-03-16  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API (JSEP): Fixing a few nits
        https://bugs.webkit.org/show_bug.cgi?id=81322

        Reviewed by Adam Barth.

        Addressing the nits from bugs 81206 and 81207.

        Nothing to test.

        * Modules/mediastream/SessionDescription.idl:
        * platform/mediastream/IceOptions.h:
        (WebCore::IceOptions::IceOptions):
        * platform/mediastream/SessionDescriptionDescriptor.h:
        (SessionDescriptionDescriptor):

2012-03-16  Peter Rybin  <peter.rybin@gmail.com>

        Web Inspector: TypeBuilder: Introduce OptOutput class for optional output parameters
        https://bugs.webkit.org/show_bug.cgi?id=80789

        Reviewed by Yury Semikhatsky.

        OptOutput class is added for optional return parameters.

        Strict mode added to Generator that makes all parameter types strict
        and drop pre-set default values for return parameters.

        Debugger and Page domain is switched to strict mode.

        * inspector/CodeGeneratorInspector.py:
        (CommandReturnPassModel.OptOutput):
        (CommandReturnPassModel.OptOutput.__init__):
        (CommandReturnPassModel.OptOutput.get_return_var_type):
        (CommandReturnPassModel.OptOutput.get_output_argument_prefix):
        (CommandReturnPassModel.OptOutput.get_output_to_raw_expression):
        (CommandReturnPassModel.OptOutput.get_output_parameter_type):
        (CommandReturnPassModel):
        (CommandReturnPassModel.OptOutput.get_set_return_condition):
        (TypeModel.Enum.get_optional.EnumOptional.get_command_return_pass_model):
        (TypeModel.ValueType.ValueOptional.get_command_return_pass_model):
        (OptOutput):
        (Generator.process_event):
        (Generator.process_command):
        * inspector/ContentSearchUtils.cpp:
        (WebCore::ContentSearchUtils::buildObjectForSearchMatch):
        (WebCore::ContentSearchUtils::searchInTextByLines):
        * inspector/ContentSearchUtils.h:
        (ContentSearchUtils):
        * inspector/InjectedScript.cpp:
        (WebCore::InjectedScript::evaluate):
        (WebCore::InjectedScript::callFunctionOn):
        (WebCore::InjectedScript::evaluateOnCallFrame):
        (WebCore::InjectedScript::makeEvalCall):
        * inspector/InjectedScript.h:
        (InjectedScript):
        * inspector/InspectorDOMDebuggerAgent.cpp:
        (WebCore::InspectorDOMDebuggerAgent::didInvalidateStyleAttr):
        (WebCore::InspectorDOMDebuggerAgent::willInsertDOMNode):
        (WebCore::InspectorDOMDebuggerAgent::willRemoveDOMNode):
        (WebCore::InspectorDOMDebuggerAgent::willModifyDOMAttr):
        (WebCore::InspectorDOMDebuggerAgent::pauseOnNativeEventIfNeeded):
        (WebCore::InspectorDOMDebuggerAgent::willSendXMLHttpRequest):
        * inspector/InspectorDebuggerAgent.cpp:
        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):
        (WebCore::InspectorDebuggerAgent::setBreakpoint):
        (WebCore::InspectorDebuggerAgent::searchInContent):
        (WebCore::InspectorDebuggerAgent::setScriptSource):
        (WebCore::InspectorDebuggerAgent::getFunctionDetails):
        (WebCore::InspectorDebuggerAgent::schedulePauseOnNextStatement):
        (WebCore::InspectorDebuggerAgent::evaluateOnCallFrame):
        (WebCore::InspectorDebuggerAgent::didPause):
        (WebCore::InspectorDebuggerAgent::breakProgram):
        (WebCore::InspectorDebuggerAgent::clearBreakDetails):
        * inspector/InspectorDebuggerAgent.h:
        (InspectorDebuggerAgent):
        * inspector/InspectorPageAgent.cpp:
        (WebCore::buildObjectForCookie):
        (WebCore::buildArrayForCookies):
        (WebCore::InspectorPageAgent::getCookies):
        (WebCore::InspectorPageAgent::getResourceTree):
        (WebCore::InspectorPageAgent::searchInResource):
        (WebCore::InspectorPageAgent::searchInResources):
        (WebCore::InspectorPageAgent::buildObjectForFrame):
        (WebCore::InspectorPageAgent::buildObjectForFrameTree):
        * inspector/InspectorPageAgent.h:
        * inspector/InspectorRuntimeAgent.cpp:
        (WebCore::InspectorRuntimeAgent::evaluate):
        (WebCore::InspectorRuntimeAgent::callFunctionOn):

2012-03-16  Kentaro Hara  <haraken@chromium.org>

        The IDL parser should support sequence<T> type
        https://bugs.webkit.org/show_bug.cgi?id=81345

        Reviewed by Adam Barth.

        This patch makes the IDL parser support sequence<T> type.
        This patch just makes sequence<T> parseable, and the generated code
        for sequence<T> is wrong. This issue will be soon fixed in bug 80696.
        This is a preparing patch for bug 80696.

        Test: bindings/scripts/test/TestObj.idl

        * bindings/scripts/test/TestObj.idl: Added tests for sequence<T>.

        * bindings/scripts/IDLStructure.pm: Updated the regular expressions to support sequence<T>.

        * bindings/scripts/test/CPP/WebDOMTestObj.cpp: Updated run-bindings-tests results.
        (WebDOMTestObj::sequenceAttr):
        (WebDOMTestObj::setSequenceAttr):
        (WebDOMTestObj::methodWithSequenceArg):
        (WebDOMTestObj::methodReturningSequence):
        * bindings/scripts/test/CPP/WebDOMTestObj.h:
        * bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
        (webkit_dom_test_obj_method_with_sequence_arg):
        (webkit_dom_test_obj_method_returning_sequence):
        (webkit_dom_test_obj_get_sequence_attr):
        (webkit_dom_test_obj_set_sequence_attr):
        (webkit_dom_test_obj_get_property):
        (webkit_dom_test_obj_class_init):
        * bindings/scripts/test/GObject/WebKitDOMTestObj.h:
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore):
        (WebCore::jsTestObjSequenceAttr):
        (WebCore::setJSTestObjSequenceAttr):
        (WebCore::jsTestObjPrototypeFunctionMethodWithSequenceArg):
        (WebCore::jsTestObjPrototypeFunctionMethodReturningSequence):
        * bindings/scripts/test/JS/JSTestObj.h:
        (WebCore):
        * bindings/scripts/test/ObjC/DOMTestObj.h:
        * bindings/scripts/test/ObjC/DOMTestObj.mm:
        (-[DOMTestObj sequenceAttr]):
        (-[DOMTestObj setSequenceAttr:]):
        (-[DOMTestObj methodWithSequenceArg:]):
        (-[DOMTestObj methodReturningSequence:]):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::TestObjInternal::sequenceAttrAttrGetter):
        (TestObjInternal):
        (WebCore::TestObjInternal::sequenceAttrAttrSetter):
        (WebCore::TestObjInternal::methodWithSequenceArgCallback):
        (WebCore::TestObjInternal::methodReturningSequenceCallback):
        (WebCore):
        (WebCore::ConfigureV8TestObjTemplate):

2012-03-16  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: HeapSnapshot: merge two long operations into one.
        https://bugs.webkit.org/show_bug.cgi?id=81347

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype.aggregates):
        (WebInspector.HeapSnapshot.prototype._buildAggregates):
        (WebInspector.HeapSnapshot.prototype._buildAggregates.forDominatedNodes):

2012-03-16  Gavin Peters  <gavinp@chromium.org>

        Add asserts and improve logging in PageCache.
        https://bugs.webkit.org/show_bug.cgi?id=81179

        Reviewed by Brady Eidson.

        The early exits from logCanCacheFrameDecision had the potential to skew histogram data.  Moving
        the DocumentLoader check to the top, but eliminating the early exits is a compromise that keeps
        the logged data mostly accurate.

        * history/PageCache.cpp:
        (WebCore::logCanCacheFrameDecision):

2012-03-16  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] label.form attribute doesn't work
        https://bugs.webkit.org/show_bug.cgi?id=80499

        Reviewed by Kent Tamura.

        This patch changes implementation of label.form of IDL attribute to
        compute it to the form element specified by the "form" HTML attribute
        or form ancestor when the "form" HTML attribute isn't in HTML.

        This patch introduces new function FormAssociatedElement::findAssociatedForm
        for sharing code among FormAssociateElement::insertedIntoTree, resetFormOwner
        and HTMLLabelElement::form.

        No new tests. Update existing tests.

        * html/FormAssociatedElement.cpp:
        (WebCore::FormAssociatedElement::findAssociatedForm): Added.
        (WebCore):
        (WebCore::FormAssociatedElement::insertedIntoTree):
        (WebCore::FormAssociatedElement::resetFormOwner):
        * html/FormAssociatedElement.h:
        (FormAssociatedElement):
        * html/HTMLLabelElement.cpp: Remove unused include files
        (WebCore::HTMLLabelElement::form): Added.

2012-03-16  Kenneth Rohde Christiansen  <kenneth@webkit.org>

        Use the normalize method of FloatPoint instead of normalizing manually
        https://bugs.webkit.org/show_bug.cgi?id=81343

        Reviewed by Simon Hausmann.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::coverWithTilesIfNeeded):
        (WebCore::TiledBackingStore::computeCoverAndKeepRect):

2012-03-16  Kentaro Hara  <haraken@chromium.org>

        Move Notifications APIs from DOMWindow.idl to DOMWindowNotifications.idl
        https://bugs.webkit.org/show_bug.cgi?id=79636

        Reviewed by Adam Barth.

        For WebKit modularization, this patch moves Notifications-related APIs
        from DOMWindow.idl to DOMWindowNotifications.idl.

        Tests: fast/notifications/* (No change in test results)

        * CMakeLists.txt: Added DOMWindowNotifications.{h,cpp,idl}.
        * DerivedSources.make: Ditto.
        * DerivedSources.pri: Ditto.
        * GNUmakefile.list.am: Ditto.
        * Target.pri: Ditto.
        * WebCore.gypi: Ditto.
        * WebCore.vcproj/WebCore.vcproj: Ditto.

        * WebCore.exp.in: Added mangled signatures of webkitNotifications().

        * notifications/DOMWindowNotifications.cpp: Added.
        (WebCore):
        (WebCore::DOMWindowNotifications::DOMWindowNotifications):
        (WebCore::DOMWindowNotifications::~DOMWindowNotifications):
        (WebCore::DOMWindowNotifications::from):
        (WebCore::DOMWindowNotifications::webkitNotifications):
        (WebCore::DOMWindowNotifications::ensureWebkitNotifications):
        (WebCore::DOMWindowNotifications::disconnectFrame):
        * notifications/DOMWindowNotifications.h: Added.
        (WebCore):
        (DOMWindowNotifications):
        * notifications/DOMWindowNotifications.idl: Added.

        * page/DOMWindow.cpp: Removed ENABLE(NOTIFICATIONS).
        (WebCore::DOMWindow::~DOMWindow):
        (WebCore::DOMWindow::willDetachPage):
        (WebCore::DOMWindow::clear):
        * page/DOMWindow.h: Ditto.
        (WebCore):
        (DOMWindow):
        * page/DOMWindow.idl: Ditto.
        * page/Frame.cpp: Ditto.
        (WebCore::Frame::willDetachPage):
        (WebCore::Frame::transferChildFrameToNewDocument):

2012-03-16  Kentaro Hara  <haraken@chromium.org>

        [Performance] Optimize innerHTML and outerHTML
        https://bugs.webkit.org/show_bug.cgi?id=81214

        Reviewed by Adam Barth.

        This patch makes innerHTML and outerHTML 2.4 times faster.

        Performance test: https://bugs.webkit.org/attachment.cgi?id=132034
        The performance test measures body.innerHTML for 3000 lines of HTML,
        which is copied from the HTML spec.

        - Chromium/Mac without the patch
        div.innerHTML: 1658.6 ms
        div.outerHTML: 4859.6 ms
        body.innerHTML: 640.2 ms
        body.outerHTML: 641.8 ms

        - Chromium/Mac with the patch
        div.innerHTML:  751.0 ms
        div.outerHTML: 2096.0 ms
        body.innerHTML: 271.2 ms
        body.outerHTML: 271.2 ms

        - Chromium/Linux without the patch
        div.innerHTML:  950.4 ms
        div.outerHTML: 2257.8 ms
        body.innerHTML: 452.8 ms
        body.outerHTML: 457.6 ms

        - Chromium/Linux with the patch
        div.innerHTML:  582.4 ms
        div.outerHTML: 1283.0 ms
        body.innerHTML: 233.0 ms
        body.outerHTML: 233.4 ms

        - AppleWebKit/Mac without the patch
        div.innerHTML:  900.6 ms
        div.outerHTML: 2245.2 ms
        body.innerHTML: 462.6 ms
        body.outerHTML: 468.0 ms

        - AppleWebKit/Mac with the patch
        div.innerHTML:  529.8  ms
        div.outerHTML: 1090.2 ms
        body.innerHTML: 239.2 ms
        body.outerHTML: 239.2 ms

        This patch applies the following two optimizations:

        (a) Remove redundant copies between Vector<String> and StringBuilders
        in MarkupAccumulator::serializeNodes(), MarkupAccumulator::appendStartTag(),
        and MarkupAccumulator::appendEndTag().

            (Previous behavior)
            - Create a StringBuilder for each tag.
            - Append a created string in each StringBuilder to Vector<String>,
              parsing the DOM tree.
            - After the parsing, allocate a StringBuilder whose size is the sum
              of all Strings in Vector<String>.
            - Append all Strings in Vector<String> to the StringBuilder.
            (New behavior)
            - Allocate a StringBuilder with a default buffer size.
            - Append created strings to the StringBuilder, incrementally parsing
              the DOM tree.

        (b) Optimize stringBuilder.append().
            (b-1) Replace stringBuilder.append("A") with stringBuilder.append('A').
                  stringBuilder.append("A") requires to cast the characters to LChar*,
                  and then call strlen("A"). stringBuilder.append('A') is faster.
            (b-2) Replace stringBuilder.append("AB") with stringBuilder.append('A')
                  and stringBuilder.append('B'). In my experiment, appending characters
                  one by one is faster than appending the characters at a breath if the
                  number of characters is less than 3.
            (b-3) Hard-code a string length; i.e. replace stringBuilder.append("ABCDE")
                  with stringBuilder.append("ABCDE", 5). While the former requires to call
                  strlen("ABCDE"), the latter does not.

        (a) improves performance by 170% ~ 200%. (b) improves performance by 30 ~ 40%.

        Tests: fast/dom/Range/range-extract-contents.html
               fast/dom/serialize-nodes.xhtml
               fast/dom/XMLSerializer.html
               and all other tests that use innerHTML or outerHTML.
               No change in the test results.

        * editing/MarkupAccumulator.cpp:
        (WebCore::MarkupAccumulator::serializeNodes):
        (WebCore::MarkupAccumulator::appendString):
        (WebCore::MarkupAccumulator::appendStartTag):
        (WebCore::MarkupAccumulator::appendEndTag):
        (WebCore::MarkupAccumulator::concatenateMarkup):
        (WebCore::MarkupAccumulator::appendQuotedURLAttributeValue):
        (WebCore::MarkupAccumulator::appendComment):
        (WebCore::MarkupAccumulator::appendDocumentType):
        (WebCore::MarkupAccumulator::appendProcessingInstruction):
        (WebCore::MarkupAccumulator::appendOpenTag):
        (WebCore::MarkupAccumulator::appendAttribute):
        (WebCore::MarkupAccumulator::appendCDATASection):
        * editing/MarkupAccumulator.h:
        (MarkupAccumulator):

2012-03-16  Kihong Kwon  <kihong.kwon@samsung.com>

        Support for Battery Status API
        https://bugs.webkit.org/show_bug.cgi?id=62698

        Battery Status API is implemented under the Navigator class.
        Battery Status API has four types of events, and all events are operated based on a callback mechanism.
         : onchargingchange, onchargingtimechange, ondischargingtimechange, onlevelchange.
        The battery status can be accessed using BatteryManager(navigator.webkitBattery), and battery status is controlled by BatteryController which manages instances of BatteryManager.
        When battery status event is raised, BatteryController calls all registered BatteryManager's event dispatcher.
        http://www.w3.org/TR/battery-status/

        Reviewed by Adam Barth.

        Tests: batterystatus/add-listener-from-callback.html
               batterystatus/basic-all-types-of-events.html
               batterystatus/basic-operation.html
               batterystatus/event-after-navigation.html
               batterystatus/multiple-frames.html
               batterystatus/updates.html
               batterystatus/window-property.html

        * CMakeLists.txt:
        * Modules/battery/BatteryClient.h: Added.
        (WebCore):
        (BatteryClient):
        (WebCore::BatteryClient::~BatteryClient):
        * Modules/battery/BatteryController.cpp: Added.
        (WebCore):
        (WebCore::BatteryController::BatteryController):
        (WebCore::BatteryController::~BatteryController):
        (WebCore::BatteryController::create):
        (WebCore::BatteryController::addListener):
        (WebCore::BatteryController::removeListener):
        (WebCore::BatteryController::didChangeBatteryStatus):
        (WebCore::BatteryController::supplementName):
        (WebCore::BatteryController::isActive):
        (WebCore::provideBatteryTo):
        * Modules/battery/BatteryController.h: Added.
        (WebCore):
        (BatteryController):
        (WebCore::BatteryController::client):
        (WebCore::BatteryController::from):
        * Modules/battery/BatteryManager.cpp: Added.
        (WebCore):
        (WebCore::BatteryManager::create):
        (WebCore::BatteryManager::~BatteryManager):
        (WebCore::BatteryManager::BatteryManager):
        (WebCore::BatteryManager::charging):
        (WebCore::BatteryManager::chargingTime):
        (WebCore::BatteryManager::dischargingTime):
        (WebCore::BatteryManager::level):
        (WebCore::BatteryManager::didChangeBatteryStatus):
        (WebCore::BatteryManager::suspend):
        (WebCore::BatteryManager::resume):
        (WebCore::BatteryManager::stop):
        * Modules/battery/BatteryManager.h: Added.
        (WebCore):
        (BatteryManager):
        (WebCore::BatteryManager::interfaceName):
        (WebCore::BatteryManager::scriptExecutionContext):
        (WebCore::BatteryManager::batteryControllerDestroyed):
        (WebCore::BatteryManager::canSuspend):
        (WebCore::BatteryManager::eventTargetData):
        (WebCore::BatteryManager::ensureEventTargetData):
        (WebCore::BatteryManager::refEventTarget):
        (WebCore::BatteryManager::derefEventTarget):
        * Modules/battery/BatteryManager.idl: Added.
        * Modules/battery/BatteryStatus.cpp: Added.
        (WebCore):
        (WebCore::BatteryStatus::create):
        (WebCore::BatteryStatus::BatteryStatus):
        * Modules/battery/BatteryStatus.h: Added.
        (WebCore):
        (BatteryStatus):
        (WebCore::BatteryStatus::charging):
        (WebCore::BatteryStatus::chargingTime):
        (WebCore::BatteryStatus::dischargingTime):
        (WebCore::BatteryStatus::level):
        * Modules/battery/NavigatorBattery.cpp: Added.
        (WebCore):
        (WebCore::NavigatorBattery::NavigatorBattery):
        (WebCore::NavigatorBattery::~NavigatorBattery):
        (WebCore::NavigatorBattery::webkitBattery):
        (WebCore::NavigatorBattery::from):
        (WebCore::NavigatorBattery::batteryManager):
        * Modules/battery/NavigatorBattery.h: Added.
        (WebCore):
        (NavigatorBattery):
        * Modules/battery/NavigatorBattery.idl: Added.
        * dom/EventNames.h:
        (WebCore):
        * dom/EventTargetFactory.in:
        * testing/Internals.cpp:
        (WebCore::Internals::setBatteryStatus):
        (WebCore):
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-16  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: HeapSnapshot: speedup buildReverseIndex.
        https://bugs.webkit.org/show_bug.cgi?id=81327

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype.get maxNodeId):
        (WebInspector.HeapSnapshot.prototype._buildNodeIndex):
        (WebInspector.HeapSnapshot.prototype._findNearestNodeIndex):
        (WebInspector.HeapSnapshot.prototype._getRetainerIndex):
        (WebInspector.HeapSnapshot.prototype._buildDominatedNodes):
        (WebInspector.HeapSnapshot.prototype):

2012-03-16  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110976.
        http://trac.webkit.org/changeset/110976
        https://bugs.webkit.org/show_bug.cgi?id=81330

        webkit_unit_tests crashes. (Requested by morrita on #webkit).

        * loader/cache/CachedCSSStyleSheet.cpp:
        (WebCore::CachedCSSStyleSheet::error):
        (WebCore):
        * loader/cache/CachedCSSStyleSheet.h:
        (CachedCSSStyleSheet):
        * loader/cache/CachedFont.cpp:
        (WebCore):
        (WebCore::CachedFont::error):
        * loader/cache/CachedFont.h:
        (CachedFont):
        * loader/cache/CachedImage.cpp:
        (WebCore::CachedImage::error):
        * loader/cache/CachedResource.h:
        (CachedResource):
        * loader/cache/CachedScript.cpp:
        (WebCore::CachedScript::error):
        (WebCore):
        * loader/cache/CachedScript.h:
        (CachedScript):
        * loader/cache/CachedXSLStyleSheet.cpp:
        (WebCore::CachedXSLStyleSheet::error):
        (WebCore):
        * loader/cache/CachedXSLStyleSheet.h:
        (CachedXSLStyleSheet):

2012-03-16  Luke Macpherson   <macpherson@chromium.org>

        Implement cast between CSSPrimitiveValue and LineClampValue.
        https://bugs.webkit.org/show_bug.cgi?id=76806

        Reviewed by Andreas Kling.

        Covered by many existing LayoutTests.

        This simplifies code in CSSStyleSelector and future mapping to CSSStyleApplyProperty.

        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        (WebCore::CSSPrimitiveValue::operator LineClampValue):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):

2012-03-16  Nat Duca  <nduca@chromium.org>

        [chromium] Bump textureUpdatesPerFrame to 32 to favor updating the screen over jank prevention
        https://bugs.webkit.org/show_bug.cgi?id=81298

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WTF):

2012-03-16  Levi Weintraub  <leviw@chromium.org>

        Update usage of LayoutUnits in RenderBlock*
        https://bugs.webkit.org/show_bug.cgi?id=80437

        Reviewed by Julien Chaffraix.

        Updating LayoutUnit usage in RenderBlock and RenderBlockLineLayout. This better readies trunk for
        the transition to subpixel layout.

        See https://trac.webkit.org/wiki/LayoutUnit for more details.

        No new tests. No changed behavior.

        * rendering/InlineTextBox.cpp:
        (WebCore::InlineTextBox::paint): Adding the paint offset rounding previously in RenderBlock::paint.
        * rendering/LayoutTypes.h:
        (WebCore::floorToInt): Will floor a LayoutUnit to an integer once we switch to
        FractionalLayoutUnits.
        (WebCore::boundedMultiply): Method that will return the multiplied result of two LayoutUnits
        or the max/min LayoutUnit if the result overflows. Only does a regular multiply while
        LayoutUnits are integers instead of FractionalLayoutUnits.
        (WebCore):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::paintContents): Rounding the paintOffset here didn't work for all
        inline blocks. This rounding is actually only needed for InlineTextBoxes, so the logic has
        been moved there.
        (WebCore::RenderBlock::newLine): Use a LayoutUnit for the y position.
        (WebCore::RenderBlock::isPointInOverflowControl): Points for hit testing need to be rounded.
        (WebCore::RenderBlock::layoutColumns): Using boundedMultiply for a calculation prone to overflow.
        (WebCore::updatePreferredWidth): Reverting back to using ceilf. ceiledLayoutUnit was to be ultimately
        converted to just a straight LayoutUnit constructor to preserve precision. This precision doesn't work
        for us here as we still paint Boxes/Blocks on pixel boundaries, so we need to expand to a pixel size
        that encloses the contained text.
        (WebCore::RenderBlock::setPageLogicalOffset): LogicalOffset should be a LayoutUnit.
        (WebCore::RenderBlock::marginValuesForChild): Margins should have subpixel resolution.
        (WebCore::RenderBlock::FloatingObjects::intervalForFloatingObject): Intervals for floating objects
        need to use pixel snapped values to give the proper results.
        * rendering/RenderBlock.h:
        (WebCore::RenderBlock::pixelSnappedLogicalLeftOffsetForLine): Only moved.
        (WebCore::RenderBlock::pixelSnappedLogicalRightOffsetForLine): While we can round the left offset,
        columns add an extra offset at paint that can't currently be planned for at line-layout time. To
        avoid laying out lines that run off the end of columns, we floor the right offset. The resulting
        lines will be up to 1 pixel shorter than they potentially could be.
        (RenderBlock):
        (WebCore::RenderBlock::FloatingObject::pixelSnappedX): Using corresponding pixelSnappedX value from
        LayoutRects.
        (WebCore::RenderBlock::FloatingObject::pixelSnappedMaxX): Ditto.
        (WebCore::RenderBlock::FloatingObject::pixelSnappedY): Ditto.
        (WebCore::RenderBlock::FloatingObject::pixelSnappedMaxY): Ditto.
        (WebCore::RenderBlock::FloatingObject::pixelSnappedWidth): Ditto.
        (WebCore::RenderBlock::FloatingObject::pixelSnappedHeight): Ditto.
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::LineWidth::shrinkAvailableWidthForNewFloatIfNeeded): LogicalHeight is a LayoutUnit. Also
        flooring textIndentOffset to an integer to match old behavior.
        (WebCore::LineWidth::fitBelowFloats): Using LayoutUnits for float logical top and bottoms.
        (WebCore::LineLayoutState::endLineLogicalTop): Changing to a LayoutUnit.
        (WebCore::LineLayoutState::setEndLineLogicalTop): Ditto.
        (LineLayoutState): Ditto.
        (WebCore::RenderBlock::linkToEndLineIfNeeded): Calculating overflow with LayoutUnits.
        (WebCore::RenderBlock::layoutInlineChildren): LowestAllowedPosition should be subpixel.
        (WebCore::RenderBlock::checkLinesForTextOverflow): Reverting ellipsis width calculation to integers
        as this value can be seen as representing pixels on screen.

2012-03-15  Kenneth Rohde Christiansen  <kenneth@webkit.org>

        Follow up to: window.innerWidth/Height should not include page scale
        https://bugs.webkit.org/show_bug.cgi?id=76555

        Reviewed by Simon Hausmann.

        Introduce mapping methods for converting between CSS and layout units.

        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::innerHeight):
        (WebCore::DOMWindow::innerWidth):
        (WebCore::DOMWindow::scrollX):
        (WebCore::DOMWindow::scrollY):
        (WebCore::DOMWindow::scrollTo):
        * page/FrameView.h:
        (FrameView):
        (WebCore::FrameView::mapFromLayoutToCSSUnits):
        (WebCore):
        (WebCore::FrameView::mapFromCSSToLayoutUnits):

2012-03-16  Ian Vollick  <vollick@chromium.org>

        [chromium] Threaded opacity animation jump to opacity of 0
        https://bugs.webkit.org/show_bug.cgi?id=80744

        Reviewed by James Robinson.

        Tested in CCLayerTreeHostTestDoNotSkipLayersWithAnimatedOpacity

        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::LayerChromium):
        (WebCore::LayerChromium::opacityIsAnimating):
        (WebCore):
        (WebCore::LayerChromium::transformIsAnimating):
        * platform/graphics/chromium/LayerChromium.h:
        (LayerChromium):
        (WebCore::LayerChromium::drawOpacityIsAnimating):
        (WebCore::LayerChromium::setDrawOpacityIsAnimating):
        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
        (WebCore::RenderSurfaceChromium::RenderSurfaceChromium):
        * platform/graphics/chromium/RenderSurfaceChromium.h:
        (WebCore::RenderSurfaceChromium::drawOpacityIsAnimating):
        (WebCore::RenderSurfaceChromium::setDrawOpacityIsAnimating):
        (RenderSurfaceChromium):
        * platform/graphics/chromium/cc/CCLayerAnimationController.cpp:
        (WebCore::CCLayerAnimationController::isAnimatingProperty):
        (WebCore):
        * platform/graphics/chromium/cc/CCLayerAnimationController.h:
        (CCLayerAnimationController):
        * platform/graphics/chromium/cc/CCLayerAnimationControllerImpl.cpp:
        (WebCore::CCLayerAnimationControllerImpl::isAnimatingProperty):
        (WebCore):
        * platform/graphics/chromium/cc/CCLayerAnimationControllerImpl.h:
        (CCLayerAnimationControllerImpl):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::CCLayerImpl):
        (WebCore::CCLayerImpl::opacityIsAnimating):
        (WebCore):
        (WebCore::CCLayerImpl::transformIsAnimating):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (CCLayerImpl):
        (WebCore::CCLayerImpl::drawOpacityIsAnimating):
        (WebCore::CCLayerImpl::setDrawOpacityIsAnimating):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintLayerContents):
        (WebCore::CCLayerTreeHost::updateCompositorResources):
        * platform/graphics/chromium/cc/CCLayerTreeHostCommon.cpp:
        (WebCore::layerShouldBeSkipped):
        (WebCore::subtreeShouldBeSkipped):
        (WebCore):
        (WebCore::LayerChromium):
        (WebCore::calculateDrawTransformsAndVisibilityInternal):
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::CCRenderSurface):
        * platform/graphics/chromium/cc/CCRenderSurface.h:
        (WebCore::CCRenderSurface::drawOpacityIsAnimating):
        (WebCore::CCRenderSurface::setDrawOpacityIsAnimating):
        (CCRenderSurface):

2012-03-15  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        [TexMap] Reuse textures following the same rules as they do internally.
        https://bugs.webkit.org/show_bug.cgi?id=80843

        Reviewed by Noam Rosenthal.

        BitmapTextures were recently changed to be the same size as their contents.
        This would obsolete the logic in acquireTextureFromPool which would
        assume that a BitmapTexture has good chances of being reused if its
        size is bigger or equal to the new size.

        This asks the texture instead if it can be reused which now simply
        check for an exact size match.

        * platform/graphics/texmap/TextureMapper.cpp:
        (WebCore::TextureMapper::acquireTextureFromPool):
        * platform/graphics/texmap/TextureMapper.h:
        (WebCore::BitmapTexture::canReuseWith):
        (WebCore::BitmapTexture::reset):
        (WebCore::BitmapTexture::didReset):
        * platform/graphics/texmap/TextureMapperGL.cpp:
        (WebCore::BitmapTextureGL::canReuseWith):
        (WebCore):
        * platform/graphics/texmap/TextureMapperGL.h:
        (BitmapTextureGL):

2012-03-16  Robert Kroeger  <rjkroege@chromium.org>

        Connect up fling event delivery to gesture curve animation framework
        https://bugs.webkit.org/show_bug.cgi?id=80858

        Reviewed by Adam Barth.

        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::fireUpAnAnimation):

2012-03-16  Nate Chapin  <japhet@chromium.org>

        Remove duplicate error() impls in CachedResource subclasses
        https://bugs.webkit.org/show_bug.cgi?id=81161

        Reviewed by Alexey Proskuryakov.

        No new tests, refactor only.

        * loader/cache/CachedCSSStyleSheet.cpp:
        * loader/cache/CachedCSSStyleSheet.h:
        * loader/cache/CachedFont.cpp:
        * loader/cache/CachedFont.h:
        * loader/cache/CachedImage.cpp:
        * loader/cache/CachedResource.h: Make checkNotify()
             virtual, so the right checkNotify() gets called in error().
        * loader/cache/CachedScript.cpp:
        * loader/cache/CachedScript.h:
        * loader/cache/CachedXSLStyleSheet.cpp:
        * loader/cache/CachedXSLStyleSheet.h:

2012-03-16  Dana Jansens  <danakj@chromium.org>

        [chromium] Changes to overdraw metrics to allow upload tracking
        https://bugs.webkit.org/show_bug.cgi?id=81222

        Reviewed by Adrienne Walker.

        Stick CCOverdrawMetrics into CCOcclusionTracker, so that it is available
        everywhere that culling/drawing/painting is going on. Then we can stop
        plumbing a metrics object through CCQuadCuller.

        Rename the CCOverdrawMetrics "painting" stuff to "uploading" as this will
        measure texture uploads rather than pixels painted in main memory.

        Covered by existing tests.

        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::calculateRenderPasses):
        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::::CCOcclusionTrackerBase):
        * platform/graphics/chromium/cc/CCOcclusionTracker.h:
        (CCOcclusionTrackerBase):
        (WebCore::CCOcclusionTrackerBase::overdrawMetrics):
        * platform/graphics/chromium/cc/CCOverdrawMetrics.cpp:
        (WebCore::CCOverdrawMetrics::didCull):
        (WebCore):
        (WebCore::CCOverdrawMetrics::didDraw):
        (WebCore::CCOverdrawMetrics::recordMetrics):
        (WebCore::CCOverdrawMetrics::recordMetricsInternal):
        * platform/graphics/chromium/cc/CCOverdrawMetrics.h:
        (WebCore):
        (WebCore::CCOverdrawMetrics::create):
        (CCOverdrawMetrics):
        * platform/graphics/chromium/cc/CCQuadCuller.cpp:
        (WebCore::CCQuadCuller::CCQuadCuller):
        (WebCore::CCQuadCuller::append):
        * platform/graphics/chromium/cc/CCQuadCuller.h:
        (CCQuadCuller):
        * platform/graphics/chromium/cc/CCRenderPass.cpp:
        (WebCore::CCRenderPass::appendQuadsForLayer):
        * platform/graphics/chromium/cc/CCRenderPass.h:
        (WebCore):
        (CCRenderPass):

2012-03-16  Greg Billock  <gbillock@google.com>

        Add TransferList IDL modifier, with support in V8 code gen.
        https://bugs.webkit.org/show_bug.cgi?id=81127

        Reviewed by Adam Barth.

        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateFunctionCallback):
        (GetIndexOf):
        (GenerateParametersCheck):
        (GenerateConstructorCallback):
        (GenerateNamedConstructorCallback):
        (GenerateFunctionCallString):
        * bindings/scripts/IDLAttributes.txt:
        * bindings/scripts/test/CPP/WebDOMTestSerializedScriptValueInterface.cpp:
        (WebDOMTestSerializedScriptValueInterface::acceptTransferList):
        * bindings/scripts/test/CPP/WebDOMTestSerializedScriptValueInterface.h:
        (WebDOMTestSerializedScriptValueInterface):
        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterface.cpp:
        (webkit_dom_test_serialized_script_value_interface_accept_transfer_list):
        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterface.h:
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::finishCreation):
        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::constructJSTestSerializedScriptValueInterface):
        (WebCore):
        (WebCore::JSTestSerializedScriptValueInterfacePrototype::getOwnPropertySlot):
        (WebCore::JSTestSerializedScriptValueInterfacePrototype::getOwnPropertyDescriptor):
        (WebCore::jsTestSerializedScriptValueInterfacePrototypeFunctionAcceptTransferList):
        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
        (JSTestSerializedScriptValueInterfacePrototype):
        (WebCore):
        * bindings/scripts/test/ObjC/DOMTestSerializedScriptValueInterface.h:
        * bindings/scripts/test/ObjC/DOMTestSerializedScriptValueInterface.mm:
        (-[DOMTestSerializedScriptValueInterface acceptTransferList:transferList:]):
        * bindings/scripts/test/TestSerializedScriptValueInterface.idl:
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.cpp:
        (WebCore::TestSerializedScriptValueInterfaceInternal::acceptTransferListCallback):
        (TestSerializedScriptValueInterfaceInternal):
        (WebCore):
        (WebCore::V8TestSerializedScriptValueInterface::constructorCallback):
        (WebCore::ConfigureV8TestSerializedScriptValueInterfaceTemplate):

2012-03-16  Dana Jansens  <danakj@chromium.org>

        [chromium] Quads that become fully opaque after culling should not use blending
        https://bugs.webkit.org/show_bug.cgi?id=81235

        Reviewed by Adrienne Walker.

        Unit test: CCLayerTreeHostImplTest.blendingOffWhenDrawingOpaqueLayers

        * platform/graphics/chromium/cc/CCDrawQuad.h:
        (WebCore::CCDrawQuad::needsBlending):

2012-03-16  Xiaomei Ji  <xji@chromium.org>

        Using ICU break iterator to simplify visual word movement implementation.
        https://bugs.webkit.org/show_bug.cgi?id=78856

        Reviewed by Ryosuke Niwa.

        This patch relies on ICU word break iterator and cursor visual movement by character to get the word break
        position in visual order. It reduces the complexity of old implementation.

        Test: editing/selection/move-by-word-visually-wrong-left-right.html

        * editing/FrameSelection.cpp: Exclude WinCE from visual word movement since isWordTextBreak is not implemented.
        (WebCore::FrameSelection::modifyMovingRight):
        (WebCore::FrameSelection::modifyMovingLeft):
        * editing/visible_units.cpp:
        (WebCore):
        (WebCore::previousLeafWithSameEditability): Just moving to the top without functionality change.
        (WebCore::enclosingNodeWithNonInlineRenderer): ditto.
        (WebCore::nextLeafWithSameEditability): ditto.
        (WebCore::previousRootInlineBox): return previous RootInlineBox which is in different renderer.
        (WebCore::nextRootInlineBox): return next RootInlineBox which is in different renderer.
        (WebCore::boxIndexInVector):
        (WebCore::previousBoxInLine): returns logically previous box in one line.
        (WebCore::logicallyPreviousBox): returns logically previous box.
        (WebCore::nextBoxInLine): returns logically next box in one line.
        (WebCore::logicallyNextBox): returns logically next box.
        (WebCore::wordBreakIteratorForMinOffsetBoundary): create word break iterator for position that is a box's min offset.
        (WebCore::wordBreakIteratorForMaxOffsetBoundary): create word break iterator for position that is a box's max offset.
        (WebCore::isLogicalStartOfWord): return whether a position is logically start of word.
        (WebCore::islogicalEndOfWord): return whether a position is logically end of word.
        (WebCore::visualWordPosition): returns the visual left or right word position.
        (WebCore::leftWordPosition):
        (WebCore::rightWordPosition):
        * platform/text/TextBreakIterator.h: Add isWordTextBreak().
        (WebCore):
        * platform/text/TextBreakIteratorICU.cpp:
        (WebCore::isWordTextBreak):
        (WebCore):
        * platform/text/gtk/TextBreakIteratorGtk.cpp:
        (WebCore::isWordTextBreak):
        (WebCore):
        * platform/text/qt/TextBreakIteratorQt.cpp:
        (WebCore::isWordTextBreak):
        (WebCore):
        * platform/text/wince/TextBreakIteratorWinCE.cpp:
        (WebCore::isWordTextBreak):
        (WebCore):

2012-03-16  Dana Jansens  <danakj@chromium.org>

        [chromium] Don't create a quad for video layers without a frame (avoid use of uninitialized m_format)
        https://bugs.webkit.org/show_bug.cgi?id=81250

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::appendQuads):

2012-03-16  Hajime Morrita  <morrita@chromium.org>

        Unreviewed attempt to fix Chromium windows build.

        * Modules/speech/SpeechRecognition.h:
        (SpeechRecognition):

2012-03-16  Mark Pilgrim  <pilgrim@chromium.org>

        Move DOMWindowFileSystem to Modules/filesystem/
        https://bugs.webkit.org/show_bug.cgi?id=81030

        Reviewed by Adam Barth.

        No new tests, all existing tests pass.

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * Modules/filesystem/DOMWindowFileSystem.cpp: Copied from Source/WebCore/fileapi/DOMWindowFileSystem.cpp.
        * Modules/filesystem/DOMWindowFileSystem.h: Copied from Source/WebCore/fileapi/DOMWindowFileSystem.h.
        * Modules/filesystem/DOMWindowFileSystem.idl: Copied from Source/WebCore/fileapi/DOMWindowFileSystem.idl.
        * Target.pri:
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.vcproj/WebCoreCommon.vsprops:
        * WebCore.vcproj/copyForwardingHeaders.cmd:
        * fileapi/DOMWindowFileSystem.cpp: Removed.
        * fileapi/DOMWindowFileSystem.h: Removed.
        * fileapi/DOMWindowFileSystem.idl: Removed.

2012-03-16  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110951.
        http://trac.webkit.org/changeset/110951
        https://bugs.webkit.org/show_bug.cgi?id=81316

        Does not build on apple-mac (Requested by abarth on #webkit).

        * platform/audio/DynamicsCompressor.h:
        (DynamicsCompressor):
        * webaudio/DynamicsCompressorNode.cpp:
        (WebCore::DynamicsCompressorNode::DynamicsCompressorNode):
        (WebCore::DynamicsCompressorNode::process):
        * webaudio/DynamicsCompressorNode.h:
        (DynamicsCompressorNode):
        * webaudio/DynamicsCompressorNode.idl:

2012-03-16  Seo Sanghyeon  <sh4.seo@samsung.com>

        Cleanup empty attribute list in IDLs
        https://bugs.webkit.org/show_bug.cgi?id=81228

        Reviewed by Adam Barth.

        No tests. No change in behavior.

        * css/WebKitCSSRegionRule.idl:

2012-03-16  Pratik Solanki  <psolanki@apple.com>

        onorientationchange event should have JSWindowEventListener attribute
        https://bugs.webkit.org/show_bug.cgi?id=79513

        Reviewed by Kentaro Hara.

        * html/HTMLFrameSetElement.idl:

2012-03-15  Gao Chun  <chun.gao@intel.com>

        Expose attack, release as DynamicsCompressorNode's attributes.
        https://bugs.webkit.org/show_bug.cgi?id=81221

        Reviewed by Chris Rogers.

        Test: webaudio/dynamicscompressor-basic.html

        * platform/audio/DynamicsCompressor.h:
        (DynamicsCompressor):
        * webaudio/DynamicsCompressorNode.cpp:
        (WebCore::DynamicsCompressorNode::DynamicsCompressorNode):
        (WebCore::DynamicsCompressorNode::process):
        * webaudio/DynamicsCompressorNode.h:
        (WebCore::DynamicsCompressorNode::attack):
        (WebCore::DynamicsCompressorNode::release):
        (DynamicsCompressorNode):
        * webaudio/DynamicsCompressorNode.idl:

2012-03-15  Hans Wennborg  <hans@chromium.org>

        Speech JavaScript API: SpeechRecognition, Controller and Client
        https://bugs.webkit.org/show_bug.cgi?id=81096

        Reviewed by Adam Barth.

        Add implementation stub for SpeechRecognition. Add the
        SpeechRecognitionController class and SpeechRecognitionClient
        interface.

        Test: fast/speech/scripted/basics.html

        * Modules/speech/DOMWindowSpeech.idl:
        * Modules/speech/SpeechRecognition.cpp: Added.
        (WebCore):
        (WebCore::SpeechRecognition::create):
        (WebCore::SpeechRecognition::start):
        (WebCore::SpeechRecognition::stopFunction):
        (WebCore::SpeechRecognition::abort):
        (WebCore::SpeechRecognition::audioStartCallback):
        (WebCore::SpeechRecognition::soundStartCallback):
        (WebCore::SpeechRecognition::speechStartCallback):
        (WebCore::SpeechRecognition::speechEndCallback):
        (WebCore::SpeechRecognition::audioEndCallback):
        (WebCore::SpeechRecognition::resultCallback):
        (WebCore::SpeechRecognition::noMatchCallback):
        (WebCore::SpeechRecognition::resultDeletedCallback):
        (WebCore::SpeechRecognition::errorCallback):
        (WebCore::SpeechRecognition::startCallback):
        (WebCore::SpeechRecognition::endCallback):
        (WebCore::SpeechRecognition::interfaceName):
        (WebCore::SpeechRecognition::scriptExecutionContext):
        (WebCore::SpeechRecognition::SpeechRecognition):
        (WebCore::SpeechRecognition::~SpeechRecognition):
        * Modules/speech/SpeechRecognition.h: Added.
        (WebCore):
        (SpeechRecognition):
        (WebCore::SpeechRecognition::grammars):
        (WebCore::SpeechRecognition::setGrammars):
        (WebCore::SpeechRecognition::lang):
        (WebCore::SpeechRecognition::setLang):
        (WebCore::SpeechRecognition::continuous):
        (WebCore::SpeechRecognition::setContinuous):
        * Modules/speech/SpeechRecognition.idl:
        * Modules/speech/SpeechRecognitionClient.h:
        (WebCore):
        (SpeechRecognitionClient):
        (WebCore::SpeechRecognitionClient::~SpeechRecognitionClient):
        * Modules/speech/SpeechRecognitionController.cpp:
        (WebCore):
        (WebCore::SpeechRecognitionController::supplementName):
        (WebCore::SpeechRecognitionController::SpeechRecognitionController):
        (WebCore::SpeechRecognitionController::~SpeechRecognitionController):
        (WebCore::SpeechRecognitionController::create):
        (WebCore::provideSpeechRecognitionTo):
        * Modules/speech/SpeechRecognitionController.h: Added.
        (WebCore):
        (SpeechRecognitionController):
        (WebCore::SpeechRecognitionController::start):
        (WebCore::SpeechRecognitionController::stop):
        (WebCore::SpeechRecognitionController::abort):
        (WebCore::SpeechRecognitionController::visibilityHidden):
        (WebCore::SpeechRecognitionController::unregisterSpeechRecognition):
        (WebCore::SpeechRecognitionController::from):
        * WebCore.gypi:
        * dom/EventTargetFactory.in:

2012-03-15  Michal Ciepielski  <m.ciepielski@samsung.com>

        [EFL] Sets alpha channel for new buffers.
        https://bugs.webkit.org/show_bug.cgi?id=77101

        Reviewed by Hajime Morita.

        No new tests.

        By default EFL creates buffers without alpha channel.
        This causes improper rendering of HTML controls (i.e. radio buttons, checkboxes).
        This commits sets alpha channel for all newly created buffers by EFL.

        * platform/efl/RenderThemeEfl.cpp:
        (WebCore::RenderThemeEfl::cacheThemePartNew):

2012-03-15  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110941.
        http://trac.webkit.org/changeset/110941
        https://bugs.webkit.org/show_bug.cgi?id=81307

        the revert looks innocent. (Requested by morrita on #webkit).

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/Canvas2DLayerChromium.h:
        (Canvas2DLayerChromium):
        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::paintContentsIfDirty):
        (WebCore::ContentLayerChromium::idlePaintContentsIfDirty):
        * platform/graphics/chromium/ContentLayerChromium.h:
        (WebCore):
        (ContentLayerChromium):
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/ImageLayerChromium.h:
        (WebCore):
        (ImageLayerChromium):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::paintContentsIfDirty):
        (WebCore::LayerChromium::idlePaintContentsIfDirty):
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):
        (WebCore::TiledLayerChromium::prepareToUpdate):
        (WebCore::TiledLayerChromium::prepareToUpdateIdle):
        * platform/graphics/chromium/TiledLayerChromium.h:
        (TiledLayerChromium):
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/WebGLLayerChromium.h:
        (WebGLLayerChromium):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintContentsIfDirty):
        (WebCore::CCLayerTreeHost::paintMaskAndReplicaForRenderSurface):
        (WebCore::CCLayerTreeHost::paintLayerContents):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:

2012-03-15  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API (JSEP): Introducing SessionDescription
        https://bugs.webkit.org/show_bug.cgi?id=81206

        Reviewed by Adam Barth.

        Patch #3 in a series of patches to change the PeerConnection from ROAP to JSEP,
        see bug 80589 for more information.
        Adding the SessionDescription JS object and its platform counterpart SessionDescriptionDescriptor.

        Not possible to test until the entire JSEP feature is commited.

        * GNUmakefile.list.am:
        * Modules/mediastream/SessionDescription.cpp: Copied from Source/WebCore/platform/mediastream/MediaStreamCenter.cpp.
        (WebCore):
        (WebCore::SessionDescription::create):
        (WebCore::SessionDescription::SessionDescription):
        (WebCore::SessionDescription::~SessionDescription):
        (WebCore::SessionDescription::addCandidate):
        (WebCore::SessionDescription::toSdp):
        (WebCore::SessionDescription::descriptor):
        * Modules/mediastream/SessionDescription.h: Copied from Source/WebCore/platform/mediastream/MediaStreamCenter.cpp.
        (WebCore):
        (SessionDescription):
        * Modules/mediastream/SessionDescription.idl: Added.
        * WebCore.gypi:
        * platform/mediastream/MediaStreamCenter.cpp:
        (WebCore::MediaStreamCenter::constructSdp):
        (WebCore):
        * platform/mediastream/MediaStreamCenter.h:
        (WebCore):
        (MediaStreamCenter):
        * platform/mediastream/SessionDescriptionDescriptor.cpp: Copied from Source/WebCore/platform/mediastream/MediaStreamCenter.cpp.
        (WebCore):
        (WebCore::SessionDescriptionDescriptor::create):
        (WebCore::SessionDescriptionDescriptor::SessionDescriptionDescriptor):
        (WebCore::SessionDescriptionDescriptor::~SessionDescriptionDescriptor):
        (WebCore::SessionDescriptionDescriptor::addCandidate):
        (WebCore::SessionDescriptionDescriptor::toSdp):
        (WebCore::SessionDescriptionDescriptor::numberOfAddedCandidates):
        (WebCore::SessionDescriptionDescriptor::candidate):
        (WebCore::SessionDescriptionDescriptor::initialSdp):
        * platform/mediastream/SessionDescriptionDescriptor.h: Copied from Source/WebCore/platform/mediastream/MediaStreamCenter.cpp.
        (WebCore):
        (SessionDescriptionDescriptor):

2012-03-15  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110929.
        http://trac.webkit.org/changeset/110929
        https://bugs.webkit.org/show_bug.cgi?id=81306

        breaking webkit_unit_tests (Requested by morrita on #webkit).

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/Canvas2DLayerChromium.h:
        (Canvas2DLayerChromium):
        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::paintContentsIfDirty):
        (WebCore::ContentLayerChromium::idlePaintContentsIfDirty):
        * platform/graphics/chromium/ContentLayerChromium.h:
        (WebCore):
        (ContentLayerChromium):
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/ImageLayerChromium.h:
        (WebCore):
        (ImageLayerChromium):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::paintContentsIfDirty):
        (WebCore::LayerChromium::idlePaintContentsIfDirty):
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore):
        (WebCore::contentToLayerTransform):
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):
        (WebCore::TiledLayerChromium::prepareToUpdate):
        (WebCore::TiledLayerChromium::prepareToUpdateIdle):
        * platform/graphics/chromium/TiledLayerChromium.h:
        (WebCore):
        (TiledLayerChromium):
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/WebGLLayerChromium.h:
        (WebGLLayerChromium):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintContentsIfDirty):
        (WebCore::CCLayerTreeHost::paintMaskAndReplicaForRenderSurface):
        (WebCore::CCLayerTreeHost::paintLayerContents):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:

2012-03-15  Allan Sandfeld Jensen  <allan.jensen@nokia.com>

        REGRESSION(r106232): The resize handler is always called after loading.
        https://bugs.webkit.org/show_bug.cgi?id=80242

        Reviewed by Kenneth Rohde Christiansen.

        Ensure resize-events are not emitted when layout-size changes due to added
        scrollbars. For fixed layout, scrollbars are never subtracted or added, so
        we can compare fixedLayoutSize directly. For normal layout, use the full
        visible rect size which is the same as layout size plus scrollbars.

        Test: fast/events/resize-events.html

        * page/FrameView.cpp:
        (WebCore::FrameView::reset):
        (WebCore::FrameView::layout):
        (WebCore::FrameView::performPostLayoutTasks):
        * page/FrameView.h:
        (FrameView):

2012-03-15  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API (JSEP): Introducing MediaHints and IceOptions
        https://bugs.webkit.org/show_bug.cgi?id=81207

        Reviewed by Adam Barth.

        Patch #4 in a series of patches to change the PeerConnection from ROAP to JSEP,
        see bug 80589 for more information.
        Introducing the platform MediaHints and IceOptions helper classes.

        Not possible to test until the entire JSEP feature is commited.

        * GNUmakefile.list.am:
        * WebCore.gypi:
        * platform/mediastream/IceOptions.cpp: Added.
        (WebCore):
        (WebCore::IceOptions::create):
        * platform/mediastream/IceOptions.h: Added.
        (WebCore):
        (IceOptions):
        (WebCore::IceOptions::~IceOptions):
        (WebCore::IceOptions::useCandidates):
        (WebCore::IceOptions::IceOptions):
        * platform/mediastream/MediaHints.cpp: Added.
        (WebCore):
        (WebCore::MediaHints::create):
        (WebCore::MediaHints::audio):
        (WebCore::MediaHints::video):
        * platform/mediastream/MediaHints.h: Added.
        (WebCore):
        (MediaHints):
        (WebCore::MediaHints::~MediaHints):
        (WebCore::MediaHints::MediaHints):

2012-03-15  Shinya Kawanaka  <shinyak@chromium.org>

        [Crash] Adding <content> into a ShadowRoot causes crash.
        https://bugs.webkit.org/show_bug.cgi?id=80020

        Reviewed by Hajime Morita.

        The problem is <content> tries to select host children though it is not prepared.
        Since populating host children for insertion points is performed just before
        attaching a shadow tree, we should recalculate whole shadow tree if <content> is
        appended as a child.

        However, element->appendChild() does not know the element is in a shadow tree or not.
        We have to ensure reattaching whole shadow tree here.

        So this patch adds some phases to HTMLContentSelector so that we can check node
        distribution algorihm is begin processed or not. If not we cannot select anything,
        but we have to enable a flag to reattach whole shadow tree.

        Tests: fast/dom/shadow/shadow-content-crash-expected.html
               fast/dom/shadow/shadow-content-crash.html

        * dom/ShadowTree.cpp:
        (WebCore::ShadowTree::attach):
        (WebCore::ShadowTree::insertionPointFor):
        * dom/ShadowTree.h:
        (WebCore):
        (ShadowTree):
        (WebCore::ShadowTree::selector):
        * html/shadow/HTMLContentSelector.cpp:
        (WebCore::HTMLContentSelector::HTMLContentSelector):
        (WebCore::HTMLContentSelector::select):
        (WebCore::HTMLContentSelector::willSelect):
        (WebCore):
        (WebCore::HTMLContentSelector::didSelect):
        (WebCore::HTMLContentSelector::populateIfNecessary):
        * html/shadow/HTMLContentSelector.h:
        (HTMLContentSelector):
        (WebCore::HTMLContentSelector::isSelecting):
        (WebCore):
        (WebCore::HTMLContentSelector::hasPopulated):
        * html/shadow/InsertionPoint.cpp:
        (WebCore::InsertionPoint::distributeHostChildren):
        (WebCore::InsertionPoint::clearDistribution):

2012-03-15  Mike Lawther  <mikelawther@chromium.org>

        CSS3 calc: mixed percent/absolute expressions for gradients
        https://bugs.webkit.org/show_bug.cgi?id=81182

        Reviewed by Ojan Vafai.

        * css/CSSGradientValue.cpp:
        (WebCore::CSSGradientValue::addStops):
        (WebCore::positionFromValue):

2012-03-15  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Sync up MIMETypeRegistry.cpp
        https://bugs.webkit.org/show_bug.cgi?id=81191

        Reviewed by Rob Buis.

        Add png and jpeg to supportedImageMIMETypesForEncoding for BlackBerry.

        * platform/MIMETypeRegistry.cpp:
        (WebCore::initializeSupportedImageMIMETypesForEncoding):

2012-03-15  Dana Jansens  <danakj@chromium.org>

        [chromium] Decide occlusion in paint culling with CCOcclusionTracker
        https://bugs.webkit.org/show_bug.cgi?id=81181

        Reviewed by Adrienne Walker.

        Plumb a CCOcclusionTracker* around instead of a bare Region, so that it
        can make a more informed decision if a tile is occluded or not during
        paint.

        Covered by existing tests.

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/Canvas2DLayerChromium.h:
        (Canvas2DLayerChromium):
        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::paintContentsIfDirty):
        (WebCore::ContentLayerChromium::idlePaintContentsIfDirty):
        * platform/graphics/chromium/ContentLayerChromium.h:
        (WebCore):
        (ContentLayerChromium):
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/ImageLayerChromium.h:
        (WebCore):
        (ImageLayerChromium):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::paintContentsIfDirty):
        (WebCore::LayerChromium::idlePaintContentsIfDirty):
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):
        (WebCore::TiledLayerChromium::prepareToUpdate):
        (WebCore::TiledLayerChromium::prepareToUpdateIdle):
        * platform/graphics/chromium/TiledLayerChromium.h:
        (TiledLayerChromium):
        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/WebGLLayerChromium.h:
        (WebGLLayerChromium):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintContentsIfDirty):
        (WebCore::CCLayerTreeHost::paintMaskAndReplicaForRenderSurface):
        (WebCore::CCLayerTreeHost::paintLayerContents):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:

2012-03-15  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] The "meter" element should not be a form-associated element.
        https://bugs.webkit.org/show_bug.cgi?id=80380

        Reviewed by Kent Tamura.

        This patch changes base class of HTMLMeterElement to LabelableElement from
        HTMLFormControlElement for saving memory space and iteration time of
        extra "meter" elements in HTMLFormElement::m_formAssociatedElements
        and matching the HTML5 specification for ease of maintenance.

        This patch renames isLabelable method to supportLabels and makes isLabelable
        as predicate of an instance of LabelableElement or not.

        Changes of TextIterator is lead by usage of isFormControlElement. This
        changes will be replaced with more meaningful predicate as part of
        https://bugs.webkit.org/show_bug.cgi?id=80381

        No new tests. Update existing tests to cover this change.

        * editing/TextIterator.cpp:
        (WebCore::TextIterator::advance): Check HTMLMeterElement in addition to isFormControlElement. This change is for text dump in LayoutTests implemented by document.innerText attribute.
        * html/HTMLButton.h:
        (WebCore::HTMLButtonElement::supportLabels): Renamed from isLabelable
        * html/HTMLElement.h:
        (WebCore::HTMLElement::isLabelable): Added. A predicate for an instance of LabelableElement.
        * html/HTMLInputElement.h:
        (WebCore::HTMLInputElement::supportLabels): Renamed from isLabelable
        * html/HTMLKeygenElement.h:
        (WebCore::HTMLKeygenElement::supportLabels): Renamed from isLabelable
         * html/HTMLLabelElement.cpp:
        (WebCore::nodeAsLabelableElement): Changed to return LabelableElement instead of HTMLFormControlElement.
        (WebCore::HTMLLabelElement::control): Changed to return LabelableElement instead of HTMLFormControlElement.
        * html/HTMLLabelElement.h:
        (HTMLLabelElement):
        * html/HTMLMeterElement.cpp:
        (WebCore::HTMLMeterElement::HTMLMeterElement): Changed base class to LabelableElement.
        (WebCore::HTMLMeterElement::create): Remove form parameter.
        (WebCore::HTMLMeterElement::formControlType): Remove implementation of virtual method declared in HTMLFormControlElement.
        (WebCore::HTMLMeterElement::parseAttribute): Replace HTMLFormControlElement to LabelableElement
        (WebCore::HTMLMeterElement::attach): Replace HTMLFormControlElement to LabelableElement
        * html/HTMLMeterElement.idl: Remove the "form" attribute which isn't listed in the HTML5 specification.
        * html/HTMLMeterElement.h:
        (HTMLMeterElement):
        (WebCore::HTMLMeterElement::supportLabels): Renamed from isLabelable
        * html/HTMLOutputElement.h:
        (WebCore::HTMLOutputElement::supportLabels): Renamed from isLabelable
        * html/HTMLProgressElement.h:
        (WebCore::HTMLProgressElement::supportLabels): Renamed from isLabelable
         * html/HTMLSelectElement.h:
        (WebCore::HTMLSelectElement::supportLabels): Renamed from isLabelable
        * html/HTMLTextAreaElement.h:
        (WebCore::HTMLTextAreaElement::supportLabels): Renamed from isLabelable
        * html/HiddenInputType.h:
        (WebCore::HiddenInputType::supportLabels): Renamed from isLabelable
        * html/InputType.h:
        (WebCore::InputType::supportLabels): Renamed from isLabelable
        * html/HTMLTagNames.in: Remove "constructorNeedsFormElement" for not passing "form" parameter in HTMLElementFactory.
        * html/LabelableElement.cpp:
        (WebCore::LabelableElement::labels): Replace isLabelable to supportLabels
        * html/LabelableElement.h:
        (LabelableElement):

2012-03-15  Adam Klein  <adamk@chromium.org>

        REGRESSION(r103452): 100% CPU usage and 5s pause after clicking on a link in Yahoo Mail
        https://bugs.webkit.org/show_bug.cgi?id=81141

        Reviewed by Ojan Vafai.

        Revert the behavior change from r103452: don't fire DOMSubtreeModified
        events when an attribute value merely changes. Still fire that event
        when an attribute is added or removed from an element.

        Though this contradicts the DOM3 spec, it matches legacy WebKit behavior,
        and given that Mutation Events are deprecated, it seems unwise to make
        any additions to WebKit's implementation of them.

        Test: fast/dom/subtree-modified-attributes.html

        * dom/Element.cpp:
        (WebCore::Element::didAddAttribute): Renamed from didModifyAttribute.
        (WebCore::Element::didModifyAttribute): Remove the call to dispatchSubtreeModifiedEvent.
        (WebCore):
        * dom/Element.h:
        (Element):
        * dom/ElementAttributeData.cpp:
        (WebCore::ElementAttributeData::addAttribute): Call didAddAttribute instead of didModifyAttribute.

2012-03-15  Dana Jansens  <danakj@chromium.org>

        [chromium] Move overdraw metrics into a templated class for both paint and draw metrics.
        https://bugs.webkit.org/show_bug.cgi?id=81156

        Reviewed by Adrienne Walker.

        Creates CCOverdrawMetrics which can be called to inform it about
        draws/paints. At the end of the frame, the CCOverdrawMetrics
        recordMetrics() method will put its data into histograms, a
        TRACE_COUNTER for culling information, and a TRACE_EVENT for details
        about the number of opaque/translucent pixels.

        Covered by existing tests.

        * WebCore.gypi:
        * platform/chromium/TraceEvent.h:
        (TraceEvent):
        (WebCore::TraceEvent::addTraceEvent):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::calculateRenderPasses):
        * platform/graphics/chromium/cc/CCOverdrawMetrics.cpp: Added.
        (WebCore):
        (WebCore::CCOverdrawMetrics::CCOverdrawMetrics):
        (WebCore::wedgeProduct):
        (WebCore::quadArea):
        (WebCore::CCOverdrawMetrics::didDraw):
        (WebCore::CCOverdrawMetrics::recordMetrics):
        (WebCore::CCOverdrawMetrics::recordMetricsInternal):
        * platform/graphics/chromium/cc/CCOverdrawMetrics.h: Added.
        (WebCore):
        (CCOverdrawMetrics):
        (WebCore::CCOverdrawMetrics::pixelsDrawnOpaque):
        (WebCore::CCOverdrawMetrics::pixelsDrawnTranslucent):
        (WebCore::CCOverdrawMetrics::pixelsCulled):
        * platform/graphics/chromium/cc/CCQuadCuller.cpp:
        (WebCore::CCQuadCuller::CCQuadCuller):
        (WebCore::CCQuadCuller::append):
        * platform/graphics/chromium/cc/CCQuadCuller.h:
        (WebCore):
        (CCQuadCuller):
        * platform/graphics/chromium/cc/CCRenderPass.cpp:
        (WebCore::CCRenderPass::appendQuadsForLayer):
        * platform/graphics/chromium/cc/CCRenderPass.h:
        (WebCore):
        (CCRenderPass):

2012-03-15  James Robinson  <jamesr@chromium.org>

        [chromium] RateLimiter should hold a reference to its context
        https://bugs.webkit.org/show_bug.cgi?id=80761

        Reviewed by Stephen White.

        * platform/graphics/chromium/RateLimiter.h:
        (RateLimiter):

2012-03-15  Adam Klein  <adamk@chromium.org>

        Share code in FormAssociatedElement by resetting the form owner whenever insertedIntoTree is called
        https://bugs.webkit.org/show_bug.cgi?id=81160

        Reviewed by Kent Tamura.

        The only difference between the previous insertedIntoTree method and
        resetFormOwner was a missing element->inDocument() check in the
        former. But that check is actually important, as seen by the included test case.

        Test: fast/forms/form-attribute-not-in-document.html

        * html/FormAssociatedElement.cpp:
        (WebCore::FormAssociatedElement::insertedIntoTree):

2012-03-15  Kentaro Hara  <haraken@chromium.org>

        [Refactoring] Rename StringBuilder variables in MarkupAccumulator.{h,cpp}
        https://bugs.webkit.org/show_bug.cgi?id=81288

        Reviewed by Adam Barth.

        This is a refactoring for fixing bug 81214. Currently MarkupAccumulator mixes
        'out' and 'result' for variable names of StringBuilder. This patch unifies them
        to 'result'.

        No tests. No change in behavior.

        * editing/MarkupAccumulator.cpp: Renamed 'out' to 'result'.
        (WebCore::appendCharactersReplacingEntities):
        (WebCore::MarkupAccumulator::serializeNodes): Renamed 'node' to 'targetNode' for clarification
        (and for avoiding style check error in MarkupAccumulator.h).
        (WebCore::MarkupAccumulator::concatenateMarkup):
        (WebCore::MarkupAccumulator::appendNodeValue):
        (WebCore::MarkupAccumulator::shouldAddNamespaceAttribute):
        (WebCore::MarkupAccumulator::appendNamespace):
        (WebCore::MarkupAccumulator::entityMaskForText):
        (WebCore::MarkupAccumulator::appendText):
        (WebCore::MarkupAccumulator::appendComment):
        (WebCore::MarkupAccumulator::appendProcessingInstruction):
        (WebCore::MarkupAccumulator::appendElement):
        (WebCore::MarkupAccumulator::appendOpenTag):
        (WebCore::MarkupAccumulator::appendCloseTag):
        (WebCore::MarkupAccumulator::appendAttribute):
        (WebCore::MarkupAccumulator::appendCDATASection):
        (WebCore::MarkupAccumulator::elementCannotHaveEndTag):
        * editing/MarkupAccumulator.h: Removed redundant variable names.
        (MarkupAccumulator):
        (WebCore):

2012-03-15  Brent Fulgham  <bfulgham@webkit.org>

        [WinCairo] Correct <wtf/*.h> include paths.
        https://bugs.webkit.org/show_bug.cgi?id=81278

        Reviewed by Eric Seidel.

        Modify the #include declarations for several Cairo-related files
        so that the wtf types are included using the full path.

        * platform/graphics/FontPlatformData.h:
        * platform/graphics/cairo/OwnPtrCairo.h:
        * platform/graphics/cairo/RefPtrCairo.h:

2012-03-15  Anders Carlsson  <andersca@apple.com>

        only some tiles rendered when zoomed in
        https://bugs.webkit.org/show_bug.cgi?id=81282
        <rdar://problem/11058898>

        Reviewed by Andreas Kling.

        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::rectForTileIndex):
        Make sure that the tile cache bounds are scaled accordingly.

2012-03-15  Zeno Albisser  <zeno@webkit.org>

        [Qt] RenderThemeQt::fileListNameForWidth should override function in base class RenderTheme. (r110560)
        https://bugs.webkit.org/show_bug.cgi?id=81107

        Add "bool multipleFilesAllowed" to the parameter list of RenderThemeQt::fileListNameForWidth.
        This way the base class function is properly overridden.
        The need for this change became obvious after r110560 where the OVERRIDE keyword had been
        added to the function signature.

        Reviewed by Simon Hausmann.

        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::fileListNameForWidth):
        * platform/qt/RenderThemeQt.h:
        (RenderThemeQt):

2012-03-07  Jon Lee  <jonlee@apple.com>

        Move NotificationContents into Notification
        https://bugs.webkit.org/show_bug.cgi?id=80487
        <rdar://problem/10965519>

        Reviewed by Jian Li.

        * notifications/Notification.cpp: Alter signature of constructor to take the fields directly instead of
        a NotificationContents instance.
        (WebCore::Notification::Notification): Derive KURL from string representation of icon.
        (WebCore::Notification::create):
        * notifications/Notification.h:
        (Notification): Remove contents() accessor and replace with get for title and body. iconURL()
        already existed, but use local variable instead of going through NotificationContents.
        (WebCore::Notification::iconURL):
        (WebCore::Notification::title):
        (WebCore::Notification::body):
        * notifications/NotificationCenter.h:
        (WebCore::NotificationCenter::createNotification): Refactor to use new constructor.
        * notifications/NotificationContents.h: Removed.

        Remove NotificationContents.h from project files
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:

2012-03-13  Jon Lee  <jonlee@apple.com>

        Deprecate ondisplay()
        https://bugs.webkit.org/show_bug.cgi?id=80483
        <rdar://problem/10912432>

        Reviewed by Jian Li.

        The appropriate event listener for notifications is onshow().

        * notifications/Notification.h: Wrap ondisplay in ENABLE(LEGACY_NOTIFICATIONS).
        * notifications/Notification.idl: Wrap ondisplay in ENABLE_LEGACY_NOTIFICATIONS.

2012-03-14  W. James MacLean  <wjmaclean@chromium.org>

        [chromium] Wire up PlatformGestureCurves for CC, ScrollAnimatorNone.
        https://bugs.webkit.org/show_bug.cgi?id=80607

        Reviewed by James Robinson.

        Unit tests added. Layout tests to follow.

        Provides implementation of PlatformGestureCurves in Chrome Compositor, and basic
        support in ScrollAnimatorNone, for fling gestures.

        * GNUmakefile.list.am:
        * platform/ActivePlatformGestureAnimation.cpp:
        (WebCore::ActivePlatformGestureAnimation::create):
        (WebCore::ActivePlatformGestureAnimation::ActivePlatformGestureAnimation):
        (WebCore::ActivePlatformGestureAnimation::animate):
        * platform/ActivePlatformGestureAnimation.h:
        (ActivePlatformGestureAnimation):
        * platform/PlatformGestureCurveTarget.h:
        (PlatformGestureCurveTarget):
        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::cancelAnimations):
        (WebCore::ScrollAnimatorNone::animationTimerFired):
        (WebCore::ScrollAnimatorNone::scrollBy):
        (WebCore):
        * platform/ScrollAnimatorNone.h:
        (WebCore):
        (ScrollAnimatorNone):
        * platform/TouchFlingPlatformGestureCurve.cpp:
        (WebCore::TouchFlingPlatformGestureCurve::apply):
        * platform/WheelFlingPlatformGestureCurve.cpp:
        (WebCore::WheelFlingPlatformGestureCurve::apply):
        * platform/graphics/chromium/cc/CCActiveGestureAnimation.cpp:
        (WebCore::CCActiveGestureAnimation::create):
        (WebCore::CCActiveGestureAnimation::CCActiveGestureAnimation):
        (WebCore::CCActiveGestureAnimation::animate):
        * platform/graphics/chromium/cc/CCActiveGestureAnimation.h:
        (CCActiveGestureAnimation):
        * platform/graphics/chromium/cc/CCGestureCurve.h:
        (CCGestureCurveTarget):
        * platform/graphics/chromium/cc/CCInputHandler.h:
        (WebCore):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::animate):
        (WebCore::CCLayerTreeHostImpl::setActiveGestureAnimation):
        (WebCore):
        (WebCore::CCLayerTreeHostImpl::animateGestures):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (WebCore):
        (WebCore::CCLayerTreeHostImpl::activeGestureAnimation):
        (CCLayerTreeHostImpl):

2012-03-15  Patrick Gansterer  <paroga@webkit.org>

        [EFL] Make zlib a general build requirement
        https://bugs.webkit.org/show_bug.cgi?id=80153

        Reviewed by Hajime Morita.

        After r109538 WebSocket module needs zlib to support deflate-frame extension.

        * PlatformEfl.cmake:

2012-03-15  Robert Kroeger  <rjkroege@chromium.org>

        REGRESSION (r110371): broke platform/gtk/scrollbars/overflow-scrollbar-horizontal-wheel-scroll.html
        https://bugs.webkit.org/show_bug.cgi?id=80825

        Reviewed by James Robinson.

        * page/EventHandler.cpp:
        (WebCore::EventHandler::handleWheelEvent): Corrected a typo.

2012-03-15  Scott Byer  <scottbyer@chromium.org>

        Fix crbug 117957 - get settings scrolling with the wheel again.
        https://bugs.webkit.org/show_bug.cgi?id=81247

        Reviewed by James Robinson.

        Tests to follow.

        * page/FrameView.cpp:
        (WebCore::FrameView::serviceScriptedAnimations):

2012-03-15  David Hyatt  <hyatt@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=81258

        Add a preference for enabling the new multi-column layout code that will be based on regions.

        Reviewed by Beth Dakin.

        * page/Settings.cpp:
        (WebCore::Settings::Settings):
        * page/Settings.h:
        (WebCore::Settings::setRegionBasedColumnsEnabled):
        (WebCore::Settings::regionBasedColumnsEnabled):
        (Settings):

2012-03-15  Andreas Kling  <kling@webkit.org>

        RenderStyle: Return Color objects by value instead of as const references.
        <http://webkit.org/b/81180>

        Reviewed by Antti Koivisto.

        Make RenderStyle getters return "Color" rather than "const Color&". This is preparation
        for storing some color values in a more space-efficient fashion.

        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyColor::applyInheritValue):
        * page/animation/AnimationBase.cpp:
        (PropertyWrapperColor):
        (WebCore::PropertyWrapperColor::PropertyWrapperColor):
        (WebCore::PropertyWrapperColor::blend):
        (WebCore::PropertyWrapperMaybeInvalidColor::PropertyWrapperMaybeInvalidColor):
        (PropertyWrapperMaybeInvalidColor):
        (WebCore::PropertyWrapperVisitedAffectedColor::PropertyWrapperVisitedAffectedColor):
        (WebCore::PropertyWrapperSVGPaint::PropertyWrapperSVGPaint):
        (PropertyWrapperSVGPaint):
        * platform/graphics/Color.h:
        (WebCore::Color::Color):
        * rendering/style/RenderStyle.h:

2012-03-15  Jessie Berlin  <jberlin@apple.com>

        Assertion failures in WebCore::Page::goBackOrForward causing multiple "crashes" on Lion Intel
        Debug WebKit2 testers
        https://bugs.webkit.org/show_bug.cgi?id=81159

        Rubber-stamped by Brady Eidson.

        It is plausible that history could change in between the time a navigation request is
        scheduled and the timer is fired, so the request index could be out of the b/f list range.
        Hence, the assertion is invalid and should be removed.

        * page/Page.cpp:
        (WebCore::Page::goBackOrForward):

2012-03-15  Alexey Proskuryakov  <ap@apple.com>

        Assertion failures in checkEncodedString when running WebKit2 tests
        https://bugs.webkit.org/show_bug.cgi?id=67425
        <rdar://problem/11043492>

        Reviewed by Anders Carlsson.

        * platform/network/cf/ResourceErrorCF.cpp: (WebCore::ResourceError::cfError):
        * platform/network/mac/ResourceErrorMac.mm: (WebCore::ResourceError::nsError):
        The failing URL is certainly not guaranteed to be valid, so it's not correct to put it back
        into a URL as if it's been normalized by KURL.

2012-03-15  Brady Eidson  <beidson@apple.com>

        <rdar://problem/11036900> and https://bugs.webkit.org/show_bug.cgi?id=81079
        REGRESSION(r107844): Clipboard API only remembers most recent data set on clipboard

        Reviewed by Sam Weinig.

        Test: editing/pasteboard/copy-two-pasteboard-types-both-work.html

        Add the non-destructive "addTypes" to supplement the destructive "setTypes"
        * platform/PasteboardStrategy.h:
        (PasteboardStrategy):
        * platform/PlatformPasteboard.h:
        (PlatformPasteboard):
        * platform/mac/PlatformPasteboardMac.mm:
        (WebCore::PlatformPasteboard::addTypes):
        * WebCore.exp.in:

        * platform/mac/ClipboardMac.mm:
        (WebCore::ClipboardMac::setData): Call the non-destructive "addTypes" instead of
          the destructive "setTypes"

2012-03-15  Dana Jansens  <danakj@chromium.org>

        [Chromium] REGRESSION(r110596) CCQuadCullerTest.verifyCullChildLinesUpTopLeft fails on Windows
        https://bugs.webkit.org/show_bug.cgi?id=81083

        Reviewed by Adrienne Walker.

        The surface pointer on the occlusion tracker stack is uninitialized, and
        can be non-null, but the layer's target surface is null, causing asserts
        to fail. Fixes the TestCCOcclusionTrackerImpl to initialize the stack's
        surface to be null.

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::::enterTargetRenderSurface):
        (WebCore::::unoccludedContentRect):
        * platform/graphics/chromium/cc/CCOcclusionTracker.h:
        (WebCore::CCOcclusionTrackerBase::StackObject::StackObject):

2012-03-15  David Levin  <levin@chromium.org>

        Various autoresize fixes.
        https://bugs.webkit.org/show_bug.cgi?id=81199

        Reviewed by Darin Fisher.

        Tested by WebViewTest additions.

        * page/FrameView.cpp:
        (WebCore::FrameView::autoSizeIfEnabled): Fixed a bug that caused a horizontal
        scrollbar to appear when the size was width was fixed and height overflowed which
        is one of the tests that was added.

2012-03-15  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: normalize vertical overview bars by longest bar, not by longest frame
        https://bugs.webkit.org/show_bug.cgi?id=81231

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/TimelineOverviewPane.js:
        (WebInspector.TimelineOverviewPane):
        (WebInspector.TimelineOverviewPane.prototype.reset):
        (WebInspector.TimelineOverviewPane.prototype.accept):
        (WebInspector.TimelineOverviewPane.prototype.windowEndTime):
        (WebInspector.TimelineVerticalOverview.prototype.reset):
        (WebInspector.TimelineVerticalOverview.prototype.update):
        (WebInspector.TimelineVerticalOverview.prototype._aggregateFrames):
        (WebInspector.TimelineVerticalOverview.prototype._aggregateRecords):
        (WebInspector.TimelineVerticalOverview.prototype.getWindowTimes):

2012-03-15  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: crash in InspectorTimelineAgent when trying to add children to cancelable records
        https://bugs.webkit.org/show_bug.cgi?id=81245

        Reviewed by Vsevolod Vlasov.

        * inspector/InspectorTimelineAgent.cpp:
        (WebCore::InspectorTimelineAgent::addRecordToTimeline):
        (WebCore):
        (WebCore::InspectorTimelineAgent::innerAddRecordToTimeline):
        (WebCore::InspectorTimelineAgent::appendRecord):
        (WebCore::InspectorTimelineAgent::commitCancelableRecords):
        * inspector/InspectorTimelineAgent.h:
        (InspectorTimelineAgent):

2012-03-15  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: live locations could be disposed twice.
        https://bugs.webkit.org/show_bug.cgi?id=81249

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/ScriptMapping.js:
        (WebInspector.MainScriptMapping.prototype._unregisterLiveLocation):

2012-03-15  Carlos Garcia Campos  <cgarcia@igalia.com>

        [GTK] Implement unicode submenu items
        https://bugs.webkit.org/show_bug.cgi?id=81117

        Reviewed by Martin Robinson.

        * loader/EmptyClients.h:
        (WebCore::EmptyEditorClient::shouldShowUnicodeMenu): Just return
        false.
        * page/ContextMenuController.cpp:
        (WebCore::insertUnicodeCharacter): Helper function to insert a
        unicode character.
        (WebCore::ContextMenuController::contextMenuItemSelected):
        Implement unicode menu items using insertUnicodeCharacter() to
        insert the apropriate unicode character.
        (WebCore::ContextMenuController::createAndAppendUnicodeSubMenu):
        Create the unicode submenu.
        (WebCore::ContextMenuController::populate): Add unicode submenu
        item for editable content.
        (WebCore::ContextMenuController::checkOrEnableIfNeeded): Add
        unicode submenu items to the switch.
        * page/ContextMenuController.h:
        * page/EditorClient.h:
        (EditorClient): Add shouldShowUnicodeMenu() for GTK platform.
        * platform/ContextMenuItem.h:
        * platform/LocalizedStrings.h:
        * platform/gtk/LocalizedStringsGtk.cpp:
        (WebCore::contextMenuItemTagUnicodeInsertLRMMark): Add localized
        string for the unicode menu item.
        (WebCore::contextMenuItemTagUnicodeInsertRLMMark): Ditto.
        (WebCore::contextMenuItemTagUnicodeInsertLREMark): Ditto.
        (WebCore::contextMenuItemTagUnicodeInsertRLEMark): Ditto.
        (WebCore::contextMenuItemTagUnicodeInsertLROMark): Ditto.
        (WebCore::contextMenuItemTagUnicodeInsertRLOMark): Ditto.
        (WebCore::contextMenuItemTagUnicodeInsertPDFMark): Ditto.
        (WebCore::contextMenuItemTagUnicodeInsertZWSMark): Ditto.
        (WebCore::contextMenuItemTagUnicodeInsertZWJMark): Ditto.
        (WebCore::contextMenuItemTagUnicodeInsertZWNJMark): Ditto.

2012-03-15  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: MainScriptMapping should detect snippet scripts by means of sourceURL set before evaluation.
        https://bugs.webkit.org/show_bug.cgi?id=81031

        Reviewed by Pavel Feldman.

        * inspector/front-end/SnippetsModel.js:
        (WebInspector.SnippetsModel):
        (WebInspector.SnippetsModel.prototype._saveSettings):
        (WebInspector.SnippetsModel.prototype.deleteSnippet):
        (WebInspector.SnippetsModel.prototype._snippetAdded):
        (WebInspector.SnippetsModel.prototype._sourceURLForSnippet):
        (WebInspector.SnippetsModel.prototype.snippetIdForSourceURL):
        (WebInspector.SnippetsModel.prototype.snippetForSourceURL):
        (WebInspector.Snippet.prototype.evaluate):
        (WebInspector.SnippetsScriptMapping):
        (WebInspector.SnippetsScriptMapping.prototype.uiLocationToRawLocation.get if):
        (WebInspector.SnippetsScriptMapping.prototype.uiLocationToRawLocation):
        (WebInspector.SnippetsScriptMapping.prototype._releasedUISourceCodes):
        (WebInspector.SnippetsScriptMapping.prototype._snippetAdded):
        (WebInspector.SnippetsScriptMapping.prototype._snippetWillBeEvaluated):
        (WebInspector.SnippetsScriptMapping.prototype._snippetRemoved.get this):
        (WebInspector.SnippetsScriptMapping.prototype._snippetRemoved):

2012-03-15  Kevin Ollivier  <kevino@theolliviers.com>

        [wx] Unreviewed. Build fixes for Mac and DOM bindings.

        * bindings/cpp/WebDOMEventTarget.cpp:
        (toWebKit):
        * platform/graphics/mac/ComplexTextControllerCoreText.mm:
        (WebCore::ComplexTextController::collectComplexTextRunsForCharactersCoreText):

2012-03-14  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: extract CompilerScriptMapping from RawSourceCode.
        https://bugs.webkit.org/show_bug.cgi?id=81088

        Reviewed by Vsevolod Vlasov.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/compile-front-end.py:
        * inspector/front-end/CompilerScriptMapping.js: Added.
        (WebInspector.CompilerScriptMapping):
        (WebInspector.CompilerScriptMapping.prototype.rawLocationToUILocation):
        (WebInspector.CompilerScriptMapping.prototype.get uiSourceCodeList):
        (WebInspector.CompilerScriptMapping.prototype.addScript.get this):
        (WebInspector.CompilerScriptMapping.prototype.addScript):
        (WebInspector.CompilerScriptMapping.prototype.loadSourceMapForScript):
        (WebInspector.CompilerScriptMapping.prototype.reset):
        * inspector/front-end/RawSourceCode.js:
        (WebInspector.RawSourceCode):
        (WebInspector.RawSourceCode.prototype.setFormatted):
        (WebInspector.RawSourceCode.prototype._resourceFinished):
        (WebInspector.RawSourceCode.prototype._createUISourceCode):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.rawLocationToUILocation):
        * inspector/front-end/ResourceScriptMapping.js:
        (WebInspector.ResourceScriptMapping.prototype.addScript):
        * inspector/front-end/ScriptMapping.js:
        (WebInspector.MainScriptMapping):
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/inspector.html:

2012-03-15  Peter Rybin  <peter.rybin@gmail.com>

        Web Inspector: Move all includes behind ENABLE(INSPECTOR) guards
        https://bugs.webkit.org/show_bug.cgi?id=81132

        Reviewed by Yury Semikhatsky.

        Include directives are moved several lines down in .cpp files and in
        generator templates.

        * inspector/CodeGeneratorInspector.py:
        * inspector/ContentSearchUtils.cpp:
        * inspector/DOMEditor.cpp:
        * inspector/DOMNodeHighlighter.cpp:
        * inspector/DOMPatchSupport.cpp:
        * inspector/IdentifiersFactory.cpp:
        * inspector/InjectedScript.cpp:
        * inspector/InjectedScriptHost.cpp:
        * inspector/InjectedScriptManager.cpp:
        * inspector/InspectorAgent.cpp:
        * inspector/InspectorApplicationCacheAgent.cpp:
        * inspector/InspectorBaseAgent.cpp:
        * inspector/InspectorCSSAgent.cpp:
        * inspector/InspectorClient.cpp:
        * inspector/InspectorConsoleAgent.cpp:
        * inspector/InspectorController.cpp:
        * inspector/InspectorCounters.cpp:
        * inspector/InspectorDOMAgent.cpp:
        * inspector/InspectorDOMDebuggerAgent.cpp:
        * inspector/InspectorDOMStorageAgent.cpp:
        * inspector/InspectorDatabaseAgent.cpp:
        * inspector/InspectorDatabaseResource.cpp:
        * inspector/InspectorDebuggerAgent.cpp:
        * inspector/InspectorFileSystemAgent.cpp:
        * inspector/InspectorFrontendClientLocal.cpp:
        * inspector/InspectorFrontendHost.cpp:
        * inspector/InspectorHistory.cpp:
        * inspector/InspectorIndexedDBAgent.cpp:
        * inspector/InspectorInstrumentation.cpp:
        * inspector/InspectorMemoryAgent.cpp:
        * inspector/InspectorPageAgent.cpp:
        * inspector/InspectorProfilerAgent.cpp:
        * inspector/InspectorResourceAgent.cpp:
        * inspector/InspectorRuntimeAgent.cpp:
        * inspector/InspectorState.cpp:
        * inspector/InspectorStyleSheet.cpp:
        * inspector/InspectorStyleTextEditor.cpp:
        * inspector/InspectorTimelineAgent.cpp:
        * inspector/InspectorValues.cpp:
        * inspector/InstrumentingAgents.cpp:
        * inspector/NetworkResourcesData.cpp:
        * inspector/PageConsoleAgent.cpp:
        * inspector/PageDebuggerAgent.cpp:
        * inspector/PageRuntimeAgent.cpp:
        * inspector/TimelineRecordFactory.cpp:
        * inspector/WorkerConsoleAgent.cpp:
        * inspector/WorkerDebuggerAgent.cpp:
        * inspector/WorkerRuntimeAgent.cpp:

2012-03-15  Yury Semikhatsky  <yurys@chromium.org>

        Web Inspector: improve HeapSnapshot._buildReversIndex performance
        https://bugs.webkit.org/show_bug.cgi?id=81224

        Caching node indexes and node count in local variables instead of
        calling getters each time reduces the method run time by
        factor of 1.5

        Reviewed by Pavel Feldman.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype._buildReverseIndex):

2012-03-15  Nikolas Zimmermann  <nzimmermann@rim.com>

        SVG Animations update baseVal instead of animVal
        https://bugs.webkit.org/show_bug.cgi?id=12437

        Rubber-stamped by Rob Buis.

        Rename constructFromCopy to constructFromVariant, and currentBaseValue to currentBaseValueVariant, to clarify what it actually does.

        * svg/SVGAnimateElement.cpp:
        (WebCore::SVGAnimateElement::resetToBaseValue):
        * svg/SVGAnimatedLength.cpp:
        (WebCore::SVGAnimatedLengthAnimator::constructFromVariant):
        * svg/SVGAnimatedLength.h:
        (SVGAnimatedLengthAnimator):
        * svg/SVGAnimatedLengthList.cpp:
        (WebCore::SVGAnimatedLengthListAnimator::constructFromVariant):
        * svg/SVGAnimatedLengthList.h:
        (SVGAnimatedLengthListAnimator):
        * svg/SVGAnimatedNumber.cpp:
        (WebCore::SVGAnimatedNumberAnimator::constructFromVariant):
        * svg/SVGAnimatedNumber.h:
        (SVGAnimatedNumberAnimator):
        * svg/SVGAnimatedNumberList.cpp:
        (WebCore::SVGAnimatedNumberListAnimator::constructFromVariant):
        * svg/SVGAnimatedNumberList.h:
        (SVGAnimatedNumberListAnimator):
        * svg/SVGAnimatedTransformList.cpp:
        (WebCore::SVGAnimatedTransformListAnimator::constructFromVariant):
        * svg/SVGAnimatedTransformList.h:
        (SVGAnimatedTransformListAnimator):
        * svg/SVGAnimatedTypeAnimator.h:
        (WebCore::SVGAnimatedTypeAnimator::constructFromVariant):
        * svg/properties/SVGAnimatedListPropertyTearOff.h:
        (WebCore::SVGAnimatedListPropertyTearOff::currentBaseValueVariant):
        * svg/properties/SVGAnimatedProperty.h:
        (SVGAnimatedProperty):
        * svg/properties/SVGAnimatedPropertyTearOff.h:
        (WebCore::SVGAnimatedPropertyTearOff::currentBaseValueVariant):
        * svg/properties/SVGAnimatedStaticPropertyTearOff.h:
        (WebCore::SVGAnimatedStaticPropertyTearOff::currentBaseValueVariant):

2012-03-15  Nikolas Zimmermann  <nzimmermann@rim.com>

        Enable animVal support for SVGNumberList
        https://bugs.webkit.org/show_bug.cgi?id=81219

        Reviewed by Rob Buis.

        Enable animVal support for SVGNumberList. Easy patch, we just need to add the missing
        constructFromCopy() method to SVGAnumatedNumberListAnimator and report AnimatedNumberList
        as supporting animVal.

        Covered by existing tests.

        * svg/SVGAnimatedNumberList.cpp:
        (WebCore::SVGAnimatedNumberListAnimator::constructFromCopy):
        (WebCore):
        * svg/SVGAnimatedNumberList.h:
        (WebCore):
        (SVGAnimatedNumberListAnimator):
        * svg/SVGAnimatedType.cpp:
        (WebCore::SVGAnimatedType::supportsAnimVal):
        (WebCore::SVGAnimatedType::setVariantValue):

2012-03-15  Rob Buis  <rbuis@rim.com>

        Fix cast-align GCC warnings
        https://bugs.webkit.org/show_bug.cgi?id=80790

        Reviewed by Nikolas Zimmermann.

        * platform/graphics/WOFFFileFormat.cpp:
        (WebCore::writeUInt32):
        (WebCore::writeUInt16):
        (WebCore::convertWOFFToSfnt):

2012-03-15  Nikolas Zimmermann  <nzimmermann@rim.com>

        Not reviewed. Forgot to preserve copyrights, per reviewer comment.

        * svg/SVGAnimatedTransformList.cpp:

2012-03-15  Nikolas Zimmermann  <nzimmermann@rim.com>

        Enable animVal support for SVGNumber
        https://bugs.webkit.org/show_bug.cgi?id=81212

        Reviewed by Rob Buis.

        Enable animVal support for SVGNumber. This aligns SVGAnimatedStaticPropertyTearOff,
        with the other SVGListPropertyTearOff & SVGPropertyTearOff, as all support animVal now.
        Converting the rest of the types can be done in small patches now.

        Test: svg/animations/svgnumber-animation-4.html

        * svg/SVGAnimatedNumber.cpp:
        (WebCore::SVGAnimatedNumberAnimator::constructFromCopy):
        (WebCore):
        * svg/SVGAnimatedNumber.h:
        (WebCore):
        (SVGAnimatedNumberAnimator):
        * svg/SVGAnimatedType.cpp:
        (WebCore::SVGAnimatedType::supportsAnimVal):
        (WebCore::SVGAnimatedType::setVariantValue):
        * svg/properties/SVGAnimatedProperty.h:
        (SVGAnimatedProperty):
        * svg/properties/SVGAnimatedStaticPropertyTearOff.h:
        (WebCore::SVGAnimatedStaticPropertyTearOff::animVal):
        (WebCore::SVGAnimatedStaticPropertyTearOff::currentAnimatedValue):
        (SVGAnimatedStaticPropertyTearOff):
        (WebCore::SVGAnimatedStaticPropertyTearOff::currentBaseValue):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animationStarted):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animationEnded):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animationValueWillChange):
        (WebCore::SVGAnimatedStaticPropertyTearOff::animationValueDidChange):
        (WebCore::SVGAnimatedStaticPropertyTearOff::SVGAnimatedStaticPropertyTearOff):

2012-03-15  Nikolas Zimmermann  <nzimmermann@rim.com>

        Enable animVal support for SVGTransformList
        https://bugs.webkit.org/show_bug.cgi?id=80758

        Reviewed by Antti Koivisto.

        Enable animVal support for SVGTransformList. SVGTransformLists are only animatable
        via <animateTransform>, not via <animate> directly. Still we can handle it in the
        same framework as all other types used for <animate>, as we also need proper animVal
        support for <animateTransform>.

        This patch removes the special <animateTransform> implementation, and lets
        SVGAnimateTransformElement inherit from SVGAnimateElement, just like its done
        for SVGAnimateColorElement & SVGSetElement.

        All existing code (calculateFromAndToValues/FromAndByValues/etc..) are moved from
        SVGAnimateTransform right into the SVGAnimatedTransformListAnimator.

        This doesn't change <animateTransform> behavior, it just simplies the code
        and enables animVal support for SVGTransformLists - all covered by existing tests.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.xcodeproj/project.pbxproj:
        * svg/SVGAllInOne.cpp:
        * svg/SVGAnimateElement.cpp:
        (WebCore::SVGAnimateElement::SVGAnimateElement):
        (WebCore::SVGAnimateElement::determineAnimatedPropertyType):
        (WebCore::SVGAnimateElement::calculateAnimatedValue):
        (WebCore::SVGAnimateElement::applyResultsToTarget):
        * svg/SVGAnimateTransformElement.cpp:
        (WebCore::SVGAnimateTransformElement::SVGAnimateTransformElement):
        (WebCore::SVGAnimateTransformElement::hasValidAttributeType):
        (WebCore::SVGAnimateTransformElement::parseAttribute):
        * svg/SVGAnimateTransformElement.h:
        (WebCore::SVGAnimateTransformElement::transformType):
        (SVGAnimateTransformElement):
        * svg/SVGAnimatedTransformList.cpp: Added.
        (WebCore):
        (WebCore::SVGAnimatedTransformListAnimator::SVGAnimatedTransformListAnimator):
        (WebCore::SVGAnimatedTransformListAnimator::constructFromString):
        (WebCore::SVGAnimatedTransformListAnimator::constructFromCopy):
        (WebCore::SVGAnimatedTransformListAnimator::calculateFromAndToValues):
        (WebCore::SVGAnimatedTransformListAnimator::calculateFromAndByValues):
        (WebCore::SVGAnimatedTransformListAnimator::calculateAnimatedValue):
        (WebCore::SVGAnimatedTransformListAnimator::calculateDistance):
        * svg/SVGAnimatedTransformList.h:
        (WebCore):
        (SVGAnimatedTransformListAnimator):
        (WebCore::SVGAnimatedTransformListAnimator::~SVGAnimatedTransformListAnimator):
        * svg/SVGAnimatedType.cpp:
        (WebCore::SVGAnimatedType::~SVGAnimatedType):
        (WebCore::SVGAnimatedType::createTransformList):
        (WebCore):
        (WebCore::SVGAnimatedType::transformList):
        (WebCore::SVGAnimatedType::valueAsString):
        (WebCore::SVGAnimatedType::setValueAsString):
        (WebCore::SVGAnimatedType::supportsAnimVal):
        (WebCore::SVGAnimatedType::setVariantValue):
        * svg/SVGAnimatedType.h:
        (WebCore):
        (SVGAnimatedType):
        * svg/SVGAnimatorFactory.h:
        (WebCore::SVGAnimatorFactory::create):
        * svg/SVGGradientElement.cpp:
        (WebCore::SVGGradientElement::parseAttribute):
        * svg/SVGPatternElement.cpp:
        (WebCore::SVGPatternElement::parseAttribute):
        * svg/SVGStyledTransformableElement.cpp:
        (WebCore::SVGStyledTransformableElement::parseAttribute):
        * svg/SVGTextElement.cpp:
        (WebCore::SVGTextElement::parseAttribute):
        * svg/SVGTransform.cpp:
        (WebCore::SVGTransform::transformTypePrefixForParsing):
        (WebCore):
        (WebCore::SVGTransform::valueAsString):
        * svg/SVGTransform.h:
        (SVGTransform):
        * svg/SVGTransformList.cpp:
        (WebCore::SVGTransformList::parse):
        (WebCore):
        * svg/SVGTransformList.h:
        (SVGTransformList):
        * svg/SVGTransformable.cpp:
        (WebCore::SVGTransformable::parseTransformType):
        * svg/SVGTransformable.h:
        (WebCore):
        * svg/SVGViewSpec.cpp:
        (WebCore::SVGViewSpec::setTransform):

2012-03-13  Nikolas Zimmermann  <nzimmermann@rim.com>

        Enable animVal support for SVGLengthList
        https://bugs.webkit.org/show_bug.cgi?id=80750

        Reviewed by Zoltan Herczeg.

        Introduce animVal support for generic SVGList types. This aligns SVGListProperty with SVGProperty
        in terms of animVal/baseVal support. Use this to turn on animVal support for SVGLengthList.

        Extend all existing SVGLengthList tests to correctly differentiate between baseVal/animVal.

        * svg/SVGAnimateElement.cpp:
        (WebCore::SVGAnimateElement::calculateAnimatedValue):
        * svg/SVGAnimateTransformElement.cpp:
        (WebCore::SVGAnimateTransformElement::resetToBaseValue):
        (WebCore::SVGAnimateTransformElement::calculateAnimatedValue):
        (WebCore::SVGAnimateTransformElement::applyResultsToTarget):
        * svg/SVGAnimatedLengthList.cpp:
        (WebCore::SVGAnimatedLengthListAnimator::constructFromCopy):
        (WebCore):
        * svg/SVGAnimatedLengthList.h:
        (WebCore):
        (SVGAnimatedLengthListAnimator):
        * svg/SVGAnimatedType.cpp:
        (WebCore::SVGAnimatedType::supportsAnimVal):
        (WebCore::SVGAnimatedType::setVariantValue):
        * svg/SVGAnimatedType.h:
        * svg/SVGAnimationElement.cpp:
        (WebCore::SVGAnimationElement::applyAnimatedValue):
        * svg/properties/SVGAnimatedListPropertyTearOff.h:
        (SVGAnimatedListPropertyTearOff):
        (WebCore::SVGAnimatedListPropertyTearOff::baseVal):
        (WebCore::SVGAnimatedListPropertyTearOff::animVal):
        (WebCore::SVGAnimatedListPropertyTearOff::removeItemFromList):
        (WebCore::SVGAnimatedListPropertyTearOff::detachListWrappers):
        (WebCore::SVGAnimatedListPropertyTearOff::currentAnimatedValue):
        (WebCore::SVGAnimatedListPropertyTearOff::currentBaseValue):
        (WebCore::SVGAnimatedListPropertyTearOff::animationStarted):
        (WebCore::SVGAnimatedListPropertyTearOff::animationEnded):
        (WebCore::SVGAnimatedListPropertyTearOff::synchronizeWrappersIfNeeded):
        (WebCore::SVGAnimatedListPropertyTearOff::animationValueWillChange):
        (WebCore::SVGAnimatedListPropertyTearOff::animationValueDidChange):
        * svg/properties/SVGAnimatedPathSegListPropertyTearOff.h:
        (WebCore::SVGAnimatedPathSegListPropertyTearOff::baseVal):
        (WebCore::SVGAnimatedPathSegListPropertyTearOff::animVal):
        * svg/properties/SVGAnimatedProperty.h:
        (WebCore::SVGAnimatedProperty::isAnimating):
        (SVGAnimatedProperty):
        (WebCore::SVGAnimatedProperty::animationValueWillChange):
        (WebCore::SVGAnimatedProperty::animationValueDidChange):
        (WebCore::SVGAnimatedProperty::~SVGAnimatedProperty):
        (WebCore::SVGAnimatedProperty::SVGAnimatedProperty):
        * svg/properties/SVGAnimatedPropertyTearOff.h:
        (SVGAnimatedPropertyTearOff):
        (WebCore::SVGAnimatedPropertyTearOff::baseVal):
        (WebCore::SVGAnimatedPropertyTearOff::animVal):
        (WebCore::SVGAnimatedPropertyTearOff::currentAnimatedValue):
        (WebCore::SVGAnimatedPropertyTearOff::animationStarted):
        (WebCore::SVGAnimatedPropertyTearOff::animationEnded):
        (WebCore::SVGAnimatedPropertyTearOff::animationValueWillChange):
        (WebCore::SVGAnimatedPropertyTearOff::animationValueDidChange):
        (WebCore::SVGAnimatedPropertyTearOff::SVGAnimatedPropertyTearOff):
        * svg/properties/SVGAnimatedTransformListPropertyTearOff.h:
        (WebCore::SVGAnimatedTransformListPropertyTearOff::baseVal):
        (WebCore::SVGAnimatedTransformListPropertyTearOff::animVal):
        * svg/properties/SVGListProperty.h:
        (WebCore::SVGListProperty::detachListWrappers):
        (SVGListProperty):
        (WebCore::SVGListProperty::setValuesAndWrappers):
        (WebCore::SVGListProperty::clearValues):
        (WebCore::SVGListProperty::clearValuesAndWrappers):
        (WebCore::SVGListProperty::numberOfItems):
        (WebCore::SVGListProperty::initializeValues):
        (WebCore::SVGListProperty::initializeValuesAndWrappers):
        (WebCore::SVGListProperty::canGetItem):
        (WebCore::SVGListProperty::getItemValues):
        (WebCore::SVGListProperty::getItemValuesAndWrappers):
        (WebCore::SVGListProperty::insertItemBeforeValues):
        (WebCore::SVGListProperty::insertItemBeforeValuesAndWrappers):
        (WebCore::SVGListProperty::canReplaceItem):
        (WebCore::SVGListProperty::replaceItemValues):
        (WebCore::SVGListProperty::replaceItemValuesAndWrappers):
        (WebCore::SVGListProperty::canRemoveItem):
        (WebCore::SVGListProperty::removeItemValues):
        (WebCore::SVGListProperty::removeItemValuesAndWrappers):
        (WebCore::SVGListProperty::appendItemValues):
        (WebCore::SVGListProperty::appendItemValuesAndWrappers):
        (WebCore::SVGListProperty::values):
        (WebCore::SVGListProperty::wrappers):
        (WebCore::SVGListProperty::SVGListProperty):
        * svg/properties/SVGListPropertyTearOff.h:
        (SVGListPropertyTearOff):
        (WebCore::SVGListPropertyTearOff::create):
        (WebCore::SVGListPropertyTearOff::removeItemFromList):
        (WebCore::SVGListPropertyTearOff::clear):
        (WebCore::SVGListPropertyTearOff::initialize):
        (WebCore::SVGListPropertyTearOff::insertItemBefore):
        (WebCore::SVGListPropertyTearOff::replaceItem):
        (WebCore::SVGListPropertyTearOff::appendItem):
        (WebCore::SVGListPropertyTearOff::SVGListPropertyTearOff):
        (WebCore::SVGListPropertyTearOff::commitChange):
        * svg/properties/SVGPathSegListPropertyTearOff.cpp:
        (WebCore::SVGPathSegListPropertyTearOff::clear):
        (WebCore::SVGPathSegListPropertyTearOff::getItem):
        (WebCore::SVGPathSegListPropertyTearOff::removeItem):
        * svg/properties/SVGPathSegListPropertyTearOff.h:
        (WebCore::SVGPathSegListPropertyTearOff::create):
        (WebCore::SVGPathSegListPropertyTearOff::removeItemFromList):
        (SVGPathSegListPropertyTearOff):
        (WebCore::SVGPathSegListPropertyTearOff::initialize):
        (WebCore::SVGPathSegListPropertyTearOff::insertItemBefore):
        (WebCore::SVGPathSegListPropertyTearOff::replaceItem):
        (WebCore::SVGPathSegListPropertyTearOff::appendItem):
        (WebCore::SVGPathSegListPropertyTearOff::SVGPathSegListPropertyTearOff):
        (WebCore::SVGPathSegListPropertyTearOff::commitChange):
        * svg/properties/SVGPropertyInfo.h:
        * svg/properties/SVGStaticListPropertyTearOff.h:
        (SVGStaticListPropertyTearOff):
        (WebCore::SVGStaticListPropertyTearOff::clear):
        (WebCore::SVGStaticListPropertyTearOff::initialize):
        (WebCore::SVGStaticListPropertyTearOff::getItem):
        (WebCore::SVGStaticListPropertyTearOff::insertItemBefore):
        (WebCore::SVGStaticListPropertyTearOff::replaceItem):
        (WebCore::SVGStaticListPropertyTearOff::removeItem):
        (WebCore::SVGStaticListPropertyTearOff::appendItem):
        (WebCore::SVGStaticListPropertyTearOff::SVGStaticListPropertyTearOff):
        (WebCore::SVGStaticListPropertyTearOff::commitChange):
        * svg/properties/SVGTransformListPropertyTearOff.h:
        (WebCore::SVGTransformListPropertyTearOff::create):
        (WebCore::SVGTransformListPropertyTearOff::createSVGTransformFromMatrix):
        (WebCore::SVGTransformListPropertyTearOff::consolidate):
        (WebCore::SVGTransformListPropertyTearOff::SVGTransformListPropertyTearOff):

2012-03-14  Chris Fleizach  <cfleizach@apple.com>

        AXDescription for HTML5 footer
        https://bugs.webkit.org/show_bug.cgi?id=78967

        Return a unique role description for the footer element.

        Reviewed by Beth Dakin.

        Test: platform/mac/accessibility/footer-roledescription.html

        * English.lproj/Localizable.strings:+
        * accessibility/AccessibilityObject.h:
        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::determineAccessibilityRole):
        * accessibility/mac/WebAccessibilityObjectWrapper.mm:
        (createAccessibilityRoleMap):
        (-[WebAccessibilityObjectWrapper subrole]):
        (-[WebAccessibilityObjectWrapper roleDescription]):
        * platform/LocalizedStrings.cpp:
        (WebCore::AXFooterRoleDescriptionText):
        (WebCore):
        * platform/LocalizedStrings.h:
        (WebCore):
        * platform/blackberry/LocalizedStringsBlackBerry.cpp:
        (WebCore::AXFooterRoleDescriptionText):
        (WebCore):
        * platform/efl/LocalizedStringsEfl.cpp:
        (WebCore::AXFooterRoleDescriptionText):
        (WebCore):
        * platform/gtk/LocalizedStringsGtk.cpp:
        (WebCore::AXFooterRoleDescriptionText):
        (WebCore):

2012-03-14  Mark Rowe  <mrowe@apple.com>

        <http://webkit.org/b/81193> Ensure libWebCoreTestSupport.dylib's library identifier is set appropriately for all configurations.

        Reviewed by Dan Bernstein.

        * Configurations/WebCoreTestSupport.xcconfig: Switch to setting DYLIB_INSTALL_NAME_BASE
        rather than LD_DYLIB_INSTALL_NAME. The latter is derived from the former. Ensure that
        DYLIB_INSTALL_NAME_BASE is also set for the Production configuration.

2012-03-14  Chris Fleizach  <cfleizach@apple.com>

        AXDescription for ARIA role contentinfo incorrect
        https://bugs.webkit.org/show_bug.cgi?id=78967

        Reviewed by Beth Dakin.

        Test: platform/mac/accessibility/aria-grouping-roles.html

        * English.lproj/Localizable.strings:
        * platform/LocalizedStrings.cpp:
        (WebCore::AXARIAContentGroupText):

2012-03-14  Chris Fleizach  <cfleizach@apple.com>

        AX: ARIA tables need to support selected rows attribute/select rows changed notification
        https://bugs.webkit.org/show_bug.cgi?id=79821

        Reviewed by Beth Dakin.

        Test: platform/mac/accessibility/selected-rows-table.html

        * accessibility/AccessibilityARIAGrid.h:
        (WebCore::AccessibilityARIAGrid::isMultiSelectable):
        (AccessibilityARIAGrid):
        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::ariaSelectedRows):
        * accessibility/AccessibilityTableRow.cpp:
        (WebCore::AccessibilityTableRow::observableObject):
        (WebCore):
        * accessibility/AccessibilityTableRow.h:
        (AccessibilityTableRow):
        * accessibility/mac/AXObjectCacheMac.mm:
        (WebCore::AXObjectCache::postPlatformNotification):

2012-03-14  James Robinson  <jamesr@chromium.org>

        Platforms without USE(REQUEST_ANIMATION_FRAME_DISPLAY_MONITOR) don't need to query the page's displayID
        https://bugs.webkit.org/show_bug.cgi?id=81187

        Reviewed by Simon Fraser.

        * dom/Document.cpp:
        (WebCore::Document::webkitRequestAnimationFrame):

2012-03-14  Chris Fleizach  <cfleizach@apple.com>

        AX: embedded attachments do not report their parents correctly
        https://bugs.webkit.org/show_bug.cgi?id=80132

        When a WebHTMLView has embedded attachments in it, the AXParent of those attachments is wrong.
        It usually points to the AXScrollView of the web area. That's because there has been no way for WebCore to
        communicate that this attachment view should actually make believe that it's parent is within the WebCore AX tree.

        We can fix that by overriding the AXParent in overriden attributes for items that are attachments.

        Reviewed by Beth Dakin.

        Not able to construct a layout test because the problem only manifests itself when an AX client connects to WebKit
        through the IPC mechanism.

        * accessibility/AccessibilityObject.cpp:
        (WebCore::AccessibilityObject::detachFromParent):
        * accessibility/AccessibilityObject.h:
        (AccessibilityObject):
        (WebCore::AccessibilityObject::overrideAttachmentParent):
        * accessibility/AccessibilityRenderObject.cpp:
        (WebCore::AccessibilityRenderObject::updateAttachmentViewParents):
        (WebCore::AccessibilityRenderObject::addChildren):
        * accessibility/AccessibilityRenderObject.h:
        (AccessibilityRenderObject):
        * accessibility/mac/AccessibilityObjectMac.mm:
        (WebCore::AccessibilityObject::overrideAttachmentParent):

2012-03-14  Ryosuke Niwa  <rniwa@webkit.org>

        Improve ContainerNode's collectNodes() performance
        https://bugs.webkit.org/show_bug.cgi?id=80706

        Reviewed by Antti Koivisto.

        Bump up the size of stack allocated buffer from 1 to 11. According to the rough study I conducted,
        this would cover 99.5% of all node collection.

        Note: the actual code change was made in r110797 but I somehow mangled my patches.

        * dom/ContainerNode.cpp:
        (WebCore):

2012-03-14  Seo Sanghyeon  <sh4.seo@samsung.com>

        Cleanup semicolons in IDLs
        https://bugs.webkit.org/show_bug.cgi?id=81129

        Reviewed by Kentaro Hara.

        No tests. No change in behavior.

        * svg/SVGAnimateColorElement.idl:
        * svg/SVGAnimateElement.idl:
        * svg/SVGAnimateTransformElement.idl:
        * svg/SVGAnimatedRect.idl:

2012-03-14  Hayato Ito  <hayato@chromium.org>

        Make ShadowRoot.activeElement return null if it does not contain a focused element.
        https://bugs.webkit.org/show_bug.cgi?id=81097

        Reviewed by Dimitri Glazkov.

        * dom/TreeScope.cpp:
        (WebCore::TreeScope::activeElement):

2012-03-14  Matt Falkenhagen  <falken@chromium.org>

        Allow per-script font settings to be specified in layout tests
        https://bugs.webkit.org/show_bug.cgi?id=78184

        Reviewed by Hajime Morita.

        This adds per-script font settings to InternalSettings, so it can be used in layout tests instead of
        the per-script font settings support in DumpRenderTree overridePreference, which has only been implemented
        for Chromium so far.

        Test: changed fast/text/international/locale-sensitive-fonts.html to use InternalSettings
        instead of overridePreference.

        * WebCore.exp.in: Added symbols.
        * platform/text/LocaleToScriptMapping.h: Added scriptNameToCode used by InternalSettings.
        (WebCore):
        * platform/text/LocaleToScriptMappingDefault.cpp:
        (WebCore::scriptNameToCode):
        (WebCore::localeToScriptCodeForFontSelection):
        * platform/text/LocaleToScriptMappingICU.cpp:
        (WebCore::scriptNameToCode):
        (WebCore):
        * testing/InternalSettings.cpp: Added per-script font settings.
        (WebCore):
        (WebCore::setFontFamily):
        (WebCore::InternalSettings::setStandardFontFamily):
        (WebCore::InternalSettings::setSerifFontFamily):
        (WebCore::InternalSettings::setSansSerifFontFamily):
        (WebCore::InternalSettings::setFixedFontFamily):
        (WebCore::InternalSettings::setCursiveFontFamily):
        (WebCore::InternalSettings::setFantasyFontFamily):
        (WebCore::InternalSettings::setPictographFontFamily):
        * testing/InternalSettings.h:
        (InternalSettings):
        * testing/InternalSettings.idl:

2012-03-14  Kwonjin Jeong  <gram@company100.net>

        Remove obsolete constructors of CSSPrimitiveValue class.
        https://bugs.webkit.org/show_bug.cgi?id=80971

        Remove constructors of CSSPrimitiveValue that can't be
        reached.

        Reviewed by Andreas Kling.

        * css/CSSPrimitiveValueMappings.h:

2012-03-14  Igor Oliveira  <igor.o@sisa.samsung.com>

        Split the extra logic out of RenderBlock::updateFirstLetter
        https://bugs.webkit.org/show_bug.cgi?id=80772

        Reviewed by Julien Chaffraix.

        No change in behavior expected.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::updateFirstLetterStyle):
        (WebCore::RenderBlock::createFirstLetterRenderer):
        (WebCore::RenderBlock::updateFirstLetter):
        (WebCore):
        * rendering/RenderBlock.h:
        (RenderBlock):

2012-03-14  Anders Carlsson  <andersca@apple.com>

        Fix build.

        * html/track/TextTrackList.cpp:

2012-03-14  Ryosuke Niwa  <rniwa@webkit.org>

        Build fix.

        * dom/DynamicNodeList.h:
        (DynamicSubtreeNodeList):

2012-03-14  Ryosuke Niwa  <rniwa@webkit.org>

        (register|unregister)DynamicSubtreeNodeList should be called only for labels and regions node lists
        https://bugs.webkit.org/show_bug.cgi?id=80900

        Reviewed by Andreas Kling.

        Cleaned up invalidation code for dynamic node lists. It seems like the existing code was utterly confused
        about the lifetime of node lists and caches within them. First, register/unregsiterDynamicSubtreeNodeList
        are called for all dynamic node lists even though it's only useful for labels and region node lists since
        it's a mechanism to allow node lists to be invalidated at a node to which the node list doesn't belong.

        Second, some node lists had dedicated member functions on Node to explicitly invalidate caches in
        parsedAttribute. However, this is redundant because invalidateNodeListsCacheAfterAttributeChanged should be
        able to invalidate caches when the attribute value changes. This patch gets rid of the last instance of such
        function in HTMLLabelElement.

        And finally, this patch restricts the callers of DynamicSubtreeNodeList::invalidateCache to be member
        functions of NodeListsNodeData (now friends of DynamicSubtreeNodeList) to allow futher refactoring.

        * dom/DynamicNodeList.cpp:
        (WebCore::DynamicSubtreeNodeList::DynamicSubtreeNodeList): Don't register the node list since it's only
        useful for labels and region node lists.
        (WebCore::DynamicSubtreeNodeList::~DynamicSubtreeNodeList): Ditto.
        * dom/DynamicNodeList.h:
        (DynamicSubtreeNodeList):
        * dom/Node.cpp:
        (WebCore):
        (WebCore::Node::registerDynamicSubtreeNodeList): The comment about now we have to invalidate caches
        when there had no caches is incorrect because registerDynamicSubtreeNodeList is called when a node list
        is initially created. Also, if the tree scope didn't have any caches, then this is the first node list
        to be added to the list, so there's no point in calling InvalidateCaches (no-op).
        (WebCore::Node::unregisterDynamicSubtreeNodeList):
        (WebCore::Node::invalidateNodeListsCacheAfterAttributeChanged): Take care of "for" content attribute.
        Also remove the redundant call to removeNodeListCacheIfPossible since we only invalidates node lists
        and never remove entries from NodeListsNodeData in this function.
        (WebCore::Node::invalidateNodeListsCacheAfterChildrenChanged): The call to removeNodeListCacheIfPossible
        is also redundant here. Also removed the invalidation of m_listsWithCaches since it's already done in
        invalidateCaches via invalidateCachesThatDependOnAttributes.
        (WebCore::NodeListsNodeData::invalidateCaches): Removed the invalidation of m_labelsNodeListCache. It's
        done in invalidateCachesThatDependOnAttributes.
        (WebCore::NodeListsNodeData::invalidateCachesThatDependOnAttributes): Invalidate
        m_listsInvalidatedAtDocument, which is renamed from m_listsWithCaches.
        (WebCore::NodeListsNodeData::isEmpty):
        * dom/Node.h:
        (Node):
        * dom/NodeRareData.h:
        (NodeListsNodeData):
        * html/HTMLLabelElement.cpp:
        (WebCore): Removed parseAttribute since the invalidation labels node list is now done by
        invalidateNodeListsCacheAfterAttributeChanged and invalidateNodeListsCacheAfterChildrenChanged.
        * html/HTMLLabelElement.h:
        (HTMLLabelElement):
        * html/LabelsNodeList.cpp:
        (WebCore::LabelsNodeList::LabelsNodeList):
        (WebCore::LabelsNodeList::~LabelsNodeList):

2012-03-14  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110565.
        http://trac.webkit.org/changeset/110565
        https://bugs.webkit.org/show_bug.cgi?id=81173

        chromium deps are now far enough along that the original cl
        should work (Requested by thakis on #webkit).

        * WebCore.gyp/mac/adjust_visibility.sh:

2012-03-14  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110641.
        http://trac.webkit.org/changeset/110641
        https://bugs.webkit.org/show_bug.cgi?id=81170

        Causes an ASAN failure (Requested by abarth on #webkit).

        * Target.pri:
        * UseV8.cmake:
        * WebCore.gypi:
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateHeader):
        (GenerateNamedConstructorCallback):
        (GenerateImplementation):
        * bindings/scripts/IDLAttributes.txt:
        * bindings/scripts/test/V8/V8Float64Array.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8Float64Array.h:
        (V8Float64Array):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.h:
        (V8TestActiveDOMObject):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.h:
        (V8TestCustomNamedGetter):
        * bindings/scripts/test/V8/V8TestEventConstructor.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestEventConstructor.h:
        (V8TestEventConstructor):
        * bindings/scripts/test/V8/V8TestEventTarget.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestEventTarget.h:
        (V8TestEventTarget):
        * bindings/scripts/test/V8/V8TestInterface.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestInterface.h:
        (V8TestInterface):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.h:
        (V8TestMediaQueryListListener):
        * bindings/scripts/test/V8/V8TestNamedConstructor.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestNamedConstructor.h:
        (V8TestNamedConstructor):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestObj.h:
        (V8TestObj):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.h:
        (V8TestSerializedScriptValueInterface):
        * bindings/v8/NPV8Object.cpp:
        (WebCore::npObjectTypeInfo):
        * bindings/v8/V8GCController.cpp:
        (WebCore::GrouperVisitor::visitDOMWrapper):
        * bindings/v8/WrapperTypeInfo.h:
        (WebCore):
        (WrapperTypeInfo):
        * bindings/v8/custom/V8CSSStyleSheetCustom.cpp: Copied from Source/WebCore/bindings/v8/custom/V8StyleSheetCustom.cpp.
        (WebCore):
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        (WebCore::toV8):
        (WebCore):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp: Copied from Source/WebCore/bindings/v8/custom/V8StyleSheetCustom.cpp.
        (WebCore):
        (WebCore::toV8):
        * bindings/v8/custom/V8HTMLImageElementConstructor.cpp:
        (WebCore):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        (WebCore::toV8):
        (WebCore):
        * bindings/v8/custom/V8StyleSheetCustom.cpp:
        (WebCore::toV8):
        * css/CSSStyleSheet.idl:
        * css/StyleSheet.idl:
        * dom/DOMStringMap.idl:
        * dom/NamedNodeMap.idl:
        * html/DOMTokenList.idl:
        * html/track/TextTrackList.cpp:
        * html/track/TextTrackList.idl:

2012-03-13  Jon Lee  <jonlee@apple.com>

        Separate NOTIFICATIONS and LEGACY_NOTIFICATIONS
        https://bugs.webkit.org/show_bug.cgi?id=80922
        <rdar://problem/11035082>

        Reviewed by Jian Li.

        You can include either NOTIFICATIONS or LEGACY_NOTIFICATIONS and have a complete API.
        LEGACY_NOTIFICATIONS should cover all of the previous functionality, and NOTIFICATIONS will cover the
        new API. Therefore, APIs that are common between the two will have:
        #if ENABLE(NOTIFICATIONS) || ENABLE(LEGACY_NOTIFICATIONS)

        This patch initially sets both to be exactly the same. As other bugs with patches begin to migrate to
        the new API, the defines will begin to split. This allows ports to decide which set of APIs to include.

        * bindings/scripts/InFilesCompiler.pm: Update the script to handle the "|" flag in a conditional.
        (preferredConditional):
        (conditionalStringFromAttributeValue):
        (generateInterfacesHeader):
        (generateHeadersHeader):

        Update everything to be #if ENABLE(NOTIFICATIONS) || ENABLE(LEGACY_NOTIFICATIONS)
        * WebCore.exp.in:
        * bindings/cpp/WebDOMEventTarget.cpp:
        (toWebKit):
        * bindings/js/JSDesktopNotificationsCustom.cpp:
        * bindings/v8/custom/V8NotificationCenterCustom.cpp:
        * dom/EventTargetFactory.in:
        * notifications/Notification.cpp:
        * notifications/Notification.h:
        * notifications/Notification.idl:
        * notifications/NotificationCenter.cpp:
        * notifications/NotificationCenter.h:
        * notifications/NotificationCenter.idl:
        * notifications/NotificationContents.h:
        * notifications/NotificationController.cpp:
        * notifications/NotificationController.h:
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::~DOMWindow):
        (WebCore::DOMWindow::willDetachPage):
        (WebCore::DOMWindow::disconnectDOMWindowProperties):
        (WebCore::DOMWindow::clearDOMWindowProperties):
        (WebCore):
        * page/DOMWindow.h:
        (DOMWindow):
        * page/DOMWindow.idl:
        * page/Frame.cpp:
        (WebCore::Frame::willDetachPage):
        (WebCore::Frame::transferChildFrameToNewDocument):
        * workers/WorkerContext.cpp:
        (WebCore::WorkerContext::~WorkerContext):
        (WebCore):
        * workers/WorkerContext.h:
        (WorkerContext):
        * workers/WorkerContext.idl:
        * workers/WorkerThread.cpp:
        (WebCore::WorkerThread::WorkerThread):
        * workers/WorkerThread.h:
        (WorkerThread):

2012-03-14  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110744.
        http://trac.webkit.org/changeset/110744
        https://bugs.webkit.org/show_bug.cgi?id=81168

        Causes many WebAudio tests to crash in debug (Requested by
        abarth on #webkit).

        * platform/audio/Biquad.cpp:
        (WebCore::Biquad::process):

2012-03-14  Brady Eidson  <beidson@apple.com>

        <rdar://problem/11045584> and https://bugs.webkit.org/show_bug.cgi?id=81166
        Repro crash in compositing/iframes/page-cache-layer-tree.html

        Reviewed by Sam Weinig.

        No new tests. (Discovered from and covered by existing test)

        ScriptCachedFrameData doesn't need to keep a DOMWindow:
        * bindings/js/ScriptCachedFrameData.cpp:
        (WebCore::ScriptCachedFrameData::ScriptCachedFrameData):
        * bindings/js/ScriptCachedFrameData.h:
        (ScriptCachedFrameData):

        CachedFrame should grab it off the Frame directly and store it locally:
        * history/CachedFrame.cpp:
        (WebCore::CachedFrame::CachedFrame):
        * history/CachedFrame.h:
        (WebCore::CachedFrameBase::domWindow):
        (CachedFrameBase):

2012-03-14  Tony Chang  <tony@chromium.org>

        fix negative flexing in auto sized columns
        https://bugs.webkit.org/show_bug.cgi?id=80069

        Reviewed by Ojan Vafai.

        New test cases in css3/flexbox/columns-auto-size.html.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore):
        (WebCore::RenderFlexibleBox::computeAvailableFreeSpace): Properly compute this for auto sizing columns. Previously, we would always return 0.
        (WebCore::RenderFlexibleBox::layoutFlexItems):
        (WebCore::RenderFlexibleBox::runFreeSpaceAllocationAlgorithm): Drop an unnecessary check against undefined. isSpecified covers this for us.
        * rendering/RenderFlexibleBox.h:
        (RenderFlexibleBox):

2012-03-14  Grace Ku  <gracek@codeaurora.org>

        Incorrect handling of sizes in "em" when first-line changes font size
        https://bugs.webkit.org/show_bug.cgi?id=79526

        Reviewed by Eric Seidel.

        When a first-line pseudo class changes the font size, the "em" unit is handled incorrectly.
        It uses the paragraph's original font size (the size of the rest of the paragraph) rather than
        the font-size of the first-line of the paragraph.

        This was corrected by checking if the InlineFlowBox was the first line using the existing
        InlineFlowBox::isFirstLineStyle() function. The corrected behaviour matches Gecko and Presto.
        Trident seems to get it half-wrong in the use case we are testing, painting the correct width for
        the border but leaving the wrong amount of space.

        The CSS specification doc at the time of this patch specifies that ':first-line' should only support
        certain properties, though UAs may choose to apply more properties. Furthermore, the spec does not
        define the exact rendering of all cases of ':first-line'. It notes that a more precise definition
        may appear in future revisions.

        Test: fast/css/pseudo-first-line-border-width.html

        * rendering/InlineFlowBox.cpp:
        (WebCore::InlineFlowBox::paintBoxDecorations):
        * rendering/InlineFlowBox.h:
        (WebCore::InlineFlowBox::borderLogicalLeft):
        (WebCore::InlineFlowBox::borderLogicalRight):
        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::paintBorder):
        (WebCore::RenderBoxModelObject::getBorderEdgeInfo):
        (WebCore::RenderBoxModelObject::borderObscuresBackgroundEdge):
        (WebCore::RenderBoxModelObject::borderObscuresBackground):
        * rendering/RenderBoxModelObject.h:
        (RenderBoxModelObject):

2012-03-14  Martin Robinson  <mrobinson@igalia.com>

        Fix the TextureMapper build for GTK+.

        No new tests. This is just a build fix.

        * platform/graphics/cairo/GraphicsContext3DPrivate.cpp:
        (WebCore::GraphicsContext3DPrivate::paintToTextureMapper):
        * platform/graphics/texmap/TextureMapper.h:

2012-03-12  Martin Robinson  <mrobinson@igalia.com>

        [GTK] Menulist buttons have separators even when the theme turns them off
        https://bugs.webkit.org/show_bug.cgi?id=80668

        Reviewed by Daniel Bates.

        No new tests. GTK+ theme differences are notoriously difficult
        to test, because consistent results depend on having certain themes
        and certain versions of themes installed.

        Instead of using the GTK_TYPE_BUTTON and GTK_TYPE_SEPARATOR tags to get the
        style context, use GTK_TYPE_COMBO_BOX which should provide more accurate theme settings.

        * platform/gtk/RenderThemeGtk3.cpp:
        (WebCore::getComboBoxMetrics): Get metrics from a GTK_TYPE_COMBO_BOX style context.
        (WebCore::RenderThemeGtk::paintMenuList): Get separator settings from the GTK_TYPE_COMBO_BOX style context.

2012-03-14  Levi Weintraub  <leviw@chromium.org>

        Implement proper sub-pixel support in RenderFileUploadControl
        https://bugs.webkit.org/show_bug.cgi?id=80881

        Reviewed by Dimitri Glazkov.

        Correcting improper usage of LayoutUnits when interacting with the graphics context
        and platform code. Specifically:
        - pixel snapping the clip rect and paint offsets before sending values to the
          graphics context in paintObject.
        - using on-screen (pixel snapped) values to pass off to platform code to determine
          the max length of the filename to be drawn.

        No new tests. No change in behavior.

        * rendering/RenderFileUploadControl.cpp:
        (WebCore::nodeWidth):
        (WebCore::RenderFileUploadControl::maxFilenameWidth):
        (WebCore::RenderFileUploadControl::paintObject):

2012-03-14  Joseph Pecoraro  <pecoraro@apple.com>

        [JSC] Web Inspector: CRASH running $0, $1, etc before they are set
        https://bugs.webkit.org/show_bug.cgi?id=81082

        Don't return an invalid JSValue. Check if the ScriptValue
        has no value and return undefined in that case.

        Reviewed by Pavel Feldman.

        Updated test: inspector/console/command-line-api.html

        * bindings/js/JSInjectedScriptHostCustom.cpp:
        (WebCore::JSInjectedScriptHost::inspectedObject):

2012-03-14  James Robinson  <jamesr@chromium.org>

        [chromium] Remove canRecoverFromContextLoss attribute, it's unused
        https://bugs.webkit.org/show_bug.cgi?id=81158

        Reviewed by Stephen White.

        Canvas accelerated no longer depends on the canRecoverFromContextLoss attribute after r110716.

        * platform/graphics/GraphicsContext3D.h:
        (WebCore::GraphicsContext3D::Attributes::Attributes):
        (Attributes):
        * platform/graphics/gpu/SharedGraphicsContext3D.cpp:
        (WebCore::SharedGraphicsContext3DImpl::get):

2012-03-14  Jer Noble  <jer.noble@apple.com>

        Opening a URL in a MediaDocument does not propagate MIME type info to media element
        https://bugs.webkit.org/show_bug.cgi?id=81148

        Reviewed by Eric Carlson.

        Test: http/tests/media/media-document.html

        Pass through the mime type from the DocumentLoader into the <source type=""> attribute of the
        generated video element. 

        * html/MediaDocument.cpp:
        (WebCore::MediaDocumentParser::createDocumentStructure):

2012-03-14  Stephen White  <senorblanco@chromium.org>

        [chromium] Fix accelerated Canvas2D with threaded compositing.
        https://bugs.webkit.org/show_bug.cgi?id=80998

        Reviewed by James Robinson.

        Covered by unit tests Canvas2DLayerChromiumTest and
        TreeSynchronizerTest.

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::paintContentsIfDirty):
        (WebCore):
        Delay creation of the front texture for double-buffering until the
        first call to paintContentsIfDirty().
        * platform/graphics/chromium/Canvas2DLayerChromium.h:
        (Canvas2DLayerChromium):
        Remove setTextureManager() and setLayerTreeHost(), since their job
        has been subsumed by paintContentsIfDirty().
        * platform/graphics/chromium/TreeSynchronizer.cpp:
        (WebCore::TreeSynchronizer::updateScrollbarLayerPointersRecursive):
        Perform an early-out if the passed-in layer is NULL.

2012-03-14  Mark Pilgrim  <pilgrim@chromium.org>

        Move EntriesCallback to Modules/filesystem/
        https://bugs.webkit.org/show_bug.cgi?id=81032

        Reviewed by Adam Barth.

        No new tests, all existing tests pass.

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.list.am:
        * Modules/filesystem/EntriesCallback.h: Copied from Source/WebCore/fileapi/EntriesCallback.h.
        * Modules/filesystem/EntriesCallback.idl: Copied from Source/WebCore/fileapi/EntriesCallback.idl.
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * fileapi/EntriesCallback.h: Removed.
        * fileapi/EntriesCallback.idl: Removed.

2012-03-14  Tony Chang  <tony@chromium.org>

        multiline column flexbox with auto height wrap too much
        https://bugs.webkit.org/show_bug.cgi?id=80929

        Reviewed by David Hyatt.

        Test: css3/flexbox/multiline-column-auto.html

        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::computeLogicalHeightUsing):
        (WebCore):
        (WebCore::RenderBox::computeContentLogicalHeightUsing): Pull out into a separate method.
        * rendering/RenderBox.h:
        (RenderBox):
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::lineBreakLength): Compute the value based on height & max-height for column layout.
        (WebCore):
        (WebCore::RenderFlexibleBox::computeNextFlexLine):
        * rendering/RenderFlexibleBox.h:
        (RenderFlexibleBox):

2012-03-14  Xingnan Wang  <xingnan.wang@intel.com>

        Optimize the multiply-add in Biquad.cpp::process
        https://bugs.webkit.org/show_bug.cgi?id=75528

        Reviewed by Chris Rogers.

        Pipeline the multiply-add with SSE2 instructions and get about 20% improvement for the function.

        * platform/audio/Biquad.cpp:
        (WebCore::Biquad::process):

2012-03-14  James Robinson  <jamesr@chromium.org>

        [Chromium] Layout Test compositing/repaint/opacity-between-absolute.html is flaky
        https://bugs.webkit.org/show_bug.cgi?id=79823

        Reviewed by Adrienne Walker.

        LayerRendererChromium was storing a weak pointer to the current render surface in m_currentRenderSurface and
        using this in useRenderSurface() to avoid rebinding if we called useRenderSurface() multiple times in a row on
        the same surface. This pointer was never cleared, so if any subsequent surface landed at the same address this
        caching would misbehave and we'd fail to correctly initialize the new render surface. The caching wasn't
        actually buying us anything anyway since we only call useRenderSurface() once per surface per frame and we
        always set the viewport for the default render surface.

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::beginDrawingFrame):
        (WebCore::LayerRendererChromium::useRenderSurface):

2012-03-14  Zalan Bujtas  <zbujtas@gmail.com>

        Frame flattening ASSERT(!needsLayout()) in FrameView::paintContents()
        https://bugs.webkit.org/show_bug.cgi?id=80155

        Reviewed by Antti Koivisto.

        This patch ensures that an iframe only schedules and calls parent's layout,
        when it is going to be flattened. Non-flattened iframe does not affect
        parent's layout, so normal layout flow applies. isInSubframeLayoutWithFrameFlattening()
        function has been added to test whether a particular child frame is changing
        parent's layout. This function also ensures that scheduleRelayout() and layout()
        are in sync of checking againts frame flattening.

        Test: fast/frames/flattening/iframe-flattening-fixed-width-and-height-no-scrolling-with-js-forced-layout.html

        * page/FrameView.cpp:
        (WebCore::FrameView::avoidScrollbarCreation):
        (WebCore::FrameView::layout):
        (WebCore::FrameView::scheduleRelayout):
        (WebCore::FrameView::isInChildFrameWithFrameFlattening):
        (WebCore):
        (WebCore::FrameView::updateLayoutAndStyleIfNeededRecursive):
        * page/FrameView.h:
        (FrameView):
        * rendering/RenderIFrame.h:
        (RenderIFrame):
        (WebCore::RenderIFrame::renderName):

2012-03-14  Anders Carlsson  <andersca@apple.com>

        Don't cap the scroll position if layout happens when a FrameView's overhangAmount is non-zero
        https://bugs.webkit.org/show_bug.cgi?id=81146
        <rdar://problem/10850075>

        Reviewed by Beth Dakin.

        If layout happens when a page has a non-zero overhang amount, we shouldn't cap the scroll position
        to be inside of the valid maximum/minimum scroll offsets because that will cause the page to jump back, which
        can look really bad if layout happens in response to the page being scrolled.

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::updateScrollbars):

2012-03-14  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API (JSEP): Introducing IceCandidate
        https://bugs.webkit.org/show_bug.cgi?id=80699

        Reviewed by Adam Barth.

        Patch #2 in a series of patches to change the PeerConnection from ROAP to JSEP,
        see bug 80589 for more information.
        Adding the JS object IceCandidate and its WebCore/platform sibling IceCandidateDescriptor.
        This object will be created both from JS and the embedder.

        Not possible to test until the entire JSEP feature is commited.

        * GNUmakefile.list.am:
        * Modules/mediastream/IceCandidate.cpp: Copied from Source/WebCore/platform/mediastream/MediaStreamCenter.cpp.
        (WebCore):
        (WebCore::IceCandidate::create):
        (WebCore::IceCandidate::IceCandidate):
        (WebCore::IceCandidate::~IceCandidate):
        (WebCore::IceCandidate::label):
        (WebCore::IceCandidate::candidateLine):
        (WebCore::IceCandidate::toSdp):
        (WebCore::IceCandidate::descriptor):
        * Modules/mediastream/IceCandidate.h: Copied from Source/WebCore/platform/mediastream/MediaStreamCenter.cpp.
        (WebCore):
        (IceCandidate):
        * Modules/mediastream/IceCandidate.idl: Added.
        * WebCore.gypi:
        * platform/mediastream/IceCandidateDescriptor.cpp: Copied from Source/WebCore/platform/mediastream/MediaStreamCenter.cpp.
        (WebCore):
        (WebCore::IceCandidateDescriptor::create):
        (WebCore::IceCandidateDescriptor::IceCandidateDescriptor):
        (WebCore::IceCandidateDescriptor::~IceCandidateDescriptor):
        (WebCore::IceCandidateDescriptor::toSdp):
        * platform/mediastream/IceCandidateDescriptor.h: Copied from Source/WebCore/platform/mediastream/MediaStreamCenter.cpp.
        (WebCore):
        (IceCandidateDescriptor):
        (WebCore::IceCandidateDescriptor::label):
        (WebCore::IceCandidateDescriptor::candidateLine):
        * platform/mediastream/MediaStreamCenter.cpp:
        (WebCore::MediaStreamCenter::constructSdp):
        (WebCore):
        * platform/mediastream/MediaStreamCenter.h:
        (WebCore):
        (MediaStreamCenter):

2012-03-14  Simon Fraser  <simon.fraser@apple.com>

        background-visibility:hidden should create a RenderLayer
        https://bugs.webkit.org/show_bug.cgi?id=81134

        Reviewed by Dean Jackson.
        
        Background-visibility:hidden has to create RenderLayers, because it's implemented
        via compositing and/or paint short-circuiting in RenderLayer code.

        Test: transforms/3d/general/background-visibility-layers.html

        * rendering/RenderBox.h:
        * rendering/RenderBoxModelObject.h:
        (WebCore::RenderBoxModelObject::requiresLayer):
        * rendering/RenderObject.h:
        (WebCore::RenderObject::hasHiddenBackface):
        * rendering/RenderTableRow.h:

2012-03-14  Raul Hudea  <rhudea@adobe.com>

        [CSSRegions][CSSOM] Implement regionLayoutEvent
        https://bugs.webkit.org/show_bug.cgi?id=78882

        Reviewed by David Hyatt.

        Adding the regionLayoutEvent that is dispatch for all regions after each flow-thread layout.

        Tests: fast/regions/region-event-add-to-flow.html
               fast/regions/region-event-remove-from-dom.html
               fast/regions/region-event-remove-from-flow.html
               fast/regions/region-event.html

        * dom/Document.cpp:
        (WebCore::Document::addListenerTypeIfNeeded): Added check for regionLayoutUpdate listeners
        * dom/Document.h:
        * dom/EventNames.h:
        (WebCore):
        * dom/Node.cpp:
        (WebCore::Node::dispatchRegionLayoutUpdateEvent):
        (WebCore):
        * dom/Node.h:
        (Node):
        * rendering/RenderFlowThread.cpp:
        (WebCore::RenderFlowThread::RenderFlowThread):
        (WebCore::RenderFlowThread::layout): Start the event dispatch timer but only if there are regionLayoutUpdate listeners and there is at least one region that had its layout updated.
        (WebCore::RenderFlowThread::computeOverflowStateForRegions): Mark regions that might had a layout update
        (WebCore::RenderFlowThread::regionLayoutUpdateEventTimerFired):
        (WebCore):
        * rendering/RenderFlowThread.h:
        * rendering/RenderRegion.cpp:
        (WebCore::RenderRegion::RenderRegion):
        * rendering/RenderRegion.h:
        (WebCore::RenderRegion::setDispatchRegionLayoutUpdateEvent):
        (WebCore::RenderRegion::shouldDispatchRegionLayoutUpdateEvent):
        (RenderRegion):

2012-03-14  Pierre Rossi  <pierre.rossi@gmail.com>

        [Qt] Add support for vertical sliders in mobile theme
        https://bugs.webkit.org/show_bug.cgi?id=80179

        This makes sliders using the "slider-vertical" appearance more sensible.

        Reviewed by Simon Hausmann.

        No new tests, since the mobile theme still isn't used in layout tests.

        * platform/qt/RenderThemeQtMobile.cpp:
        (WebCore):
        (WebCore::StylePainterMobile::drawProgress):
        (WebCore::RenderThemeQtMobile::paintSliderTrack):
        * platform/qt/RenderThemeQtMobile.h:
        (StylePainterMobile):

2012-03-14  Jer Noble  <jer.noble@apple.com>

        WebProcess spins beneath [QTMovie movieFileTypes:]
        https://bugs.webkit.org/show_bug.cgi?id=81133

        Reviewed by Eric Carlson.

        No new tests; speculative fix for top WebProcess spin.

        When checking to see if a given mime type is supported by QuickTime,
        immediately exclude all types that do not begin with 'audio/' or 'video/'.
        * platform/graphics/mac/MediaPlayerPrivateQTKit.mm:
        (WebCore::MediaPlayerPrivateQTKit::supportsType):

2012-03-14  Zalan Bujtas  <zbujtas@gmail.com>

        Make RenderIFrame::flattenFrame() return earlier, when frame flattening is disabled.
        https://bugs.webkit.org/show_bug.cgi?id=80301

        Reviewed by Antti Koivisto.

        Reorganize RenderIFrame flattenFrame() code, so that it returns
        earlier for the normal use case, when frame flattening is disabled.
        It also removes leftover null check.

        No new tests, since there's no new functionality.

        * rendering/RenderIFrame.cpp:
        (WebCore::RenderIFrame::flattenFrame):

2012-03-14  James Robinson  <jamesr@chromium.org>

        [chromium] Provide explicit polling API to check if the platform is capable of accelerated 2d canvas
        https://bugs.webkit.org/show_bug.cgi?id=80667

        Reviewed by Darin Fisher.

        Query the platform to see if we can instantiate a context suitable for accelerating 2d canvas. If we can't, for
        instance if we're on a system that can't preserve a context when the screensaver comes up, then immediately fall
        back to software.

        Covered by canvas layout tests in the virtual-gpu mode.

        * html/HTMLCanvasElement.cpp:
        (WebCore::HTMLCanvasElement::shouldAccelerate):
        * platform/chromium/PlatformSupport.h:

2012-03-14  Carlos Garcia Campos  <cgarcia@igalia.com>

        [GTK] Handle printing errors in WebKit2
        https://bugs.webkit.org/show_bug.cgi?id=77197

        Reviewed by Gustavo Noronha Silva.

        * platform/gtk/ErrorsGtk.cpp:
        (WebCore::printError): Create a generic print error.
        (WebCore::printerNotFoundError): Create a print error to notify
        that the selected printer could not be found.
        (WebCore::invalidPageRangeToPrint): Create a print error when the
        selected page range is invalid and there are no pages to print.
        * platform/gtk/ErrorsGtk.h:
        (WebCore): Add print error doamin.

2012-03-14  Nikolas Zimmermann  <nzimmermann@rim.com>

        Make SVGUseElement respect & support externalResourcesRequired
        https://bugs.webkit.org/show_bug.cgi?id=81109

        Reviewed by Rob Buis.

        Generalize the existing externalResourcesRequired support from SVGScriptElement
        into SVGExternalResourcesRequired, so it can be shared with SVGUseElement, which
        was lacking proper externalResourcesRequired support.

        <use xlink:href="external.svg" onload="alert('hi')" externalResourcesRequired="true"/>
        The onload handler now fires _after_ the external resources loaded, making it possible
        to write reliable tests that switch from internal to external resources or the other
        way around. Converted the new tests in svg/dynamic-updates/SVGUseElement* to listen
        to SVGLoad events, to make them reliable.

        We may be able to generalize this to cover SVGImageElement as well (the only other class which
        is currently supporting externalResourcesRequired - but that's more involved, so I left it TODO).

        Covered by existing tests and the changes to the new SVGUseElement tests.

        * svg/SVGElement.h:
        (SVGElement): Make haveLoadedRequiredResources() public so SVGExternalResourcesRequired can call it.
        * svg/SVGExternalResourcesRequired.cpp: Refactored code from SVGScriptElement, 1:1 copies w/o changes.
        (WebCore::SVGExternalResourcesRequired::handleAttributeChange):
        (WebCore::SVGExternalResourcesRequired::dispatchLoadEvent):
        (WebCore::SVGExternalResourcesRequired::insertedIntoDocument):
        (WebCore::SVGExternalResourcesRequired::finishParsingChildren):
        (WebCore::SVGExternalResourcesRequired::haveLoadedRequiredResources):
        * svg/SVGExternalResourcesRequired.h: Add new virtual functions, that must be available in classes that inherit from SVGExternalResourcesRequired.
        (WebCore::SVGExternalResourcesRequired::setHaveFiredLoadEvent):
        (WebCore::SVGExternalResourcesRequired::isParserInserted):
        (WebCore::SVGExternalResourcesRequired::haveFiredLoadEvent):
        * svg/SVGScriptElement.cpp: Refactored externalResourcesRequired handling into SVGExternalResourcesRequired.
        (WebCore::SVGScriptElement::svgAttributeChanged):
        (WebCore::SVGScriptElement::insertedIntoDocument):
        (WebCore::SVGScriptElement::finishParsingChildren):
        * svg/SVGScriptElement.h: Ditto.
        (WebCore::SVGScriptElement::haveLoadedRequiredResources):
        (WebCore::SVGScriptElement::dispatchLoadEvent):
        (WebCore::SVGScriptElement::setHaveFiredLoadEvent):
        (WebCore::SVGScriptElement::isParserInserted):
        (WebCore::SVGScriptElement::haveFiredLoadEvent):
        * svg/SVGTests.cpp: Fix obvious typo, that leads to an assertion. Always return true if we know the attributeName.
        (WebCore::SVGTests::handleAttributeChange):
        * svg/SVGTests.h:
        * svg/SVGTextPathElement.cpp:
        (WebCore::SVGTextPathElement::insertedIntoDocument): Remove ambigous call warning.
        * svg/SVGUseElement.cpp: Support externalResourcesRequired="true/false" + dynamic changes of it. Covered by existing tests.
        (WebCore::SVGUseElement::SVGUseElement):
        (WebCore::SVGUseElement::create):
        (WebCore::SVGUseElement::insertedIntoDocument):
        (WebCore::SVGUseElement::svgAttributeChanged):
        (WebCore::SVGUseElement::notifyFinished):
        (WebCore::SVGUseElement::finishParsingChildren):
        (WebCore):
        * svg/SVGUseElement.h: Ditto.
        (WebCore::SVGUseElement::haveLoadedRequiredResources):
        (WebCore::SVGUseElement::setHaveFiredLoadEvent):
        (WebCore::SVGUseElement::isParserInserted):
        (WebCore::SVGUseElement::haveFiredLoadEvent):
        * svg/svgtags.in: Pass "bool wasInsertedByParser" to SVGUseElement constructor.

2012-03-14  Andrew Lo  <anlo@rim.com>

        [BlackBerry] Implement REQUEST_ANIMATION_FRAME_DISPLAY_MONITOR using AnimationFrameRateController
        https://bugs.webkit.org/show_bug.cgi?id=81000

        Add BlackBerry port for DisplayRefreshMonitor using AnimationFrameRateController.
        Moved refreshDisplayOnMainThread to platform independant part of header.

        Reviewed by Antonio Gomes.

        requestAnimationFrame already covered by tests in LayoutTests/fast/animation.

        * PlatformBlackBerry.cmake:
        * platform/graphics/DisplayRefreshMonitor.cpp:
        (WebCore::DisplayRefreshMonitor::DisplayRefreshMonitor):
        * platform/graphics/DisplayRefreshMonitor.h:
        (WebCore):
        (DisplayAnimationClient):
        (WebCore::DisplayAnimationClient::~DisplayAnimationClient):
        (DisplayRefreshMonitor):
        * platform/graphics/blackberry/DisplayRefreshMonitorBlackBerry.cpp: Added.
        (WebCore):
        (WebCore::DisplayAnimationClient::DisplayAnimationClient):
        (WebCore::DisplayAnimationClient::animationFrameChanged):
        (WebCore::DisplayRefreshMonitor::~DisplayRefreshMonitor):
        (WebCore::DisplayRefreshMonitor::startAnimationClient):
        (WebCore::DisplayRefreshMonitor::stopAnimationClient):
        (WebCore::DisplayRefreshMonitor::requestRefreshCallback):
        (WebCore::DisplayRefreshMonitor::displayLinkFired):

2012-03-14  Yury Semikhatsky  <yurys@chromium.org>

        Web Inspector: use class name indexes instead of class names when evaluating aggregates
        https://bugs.webkit.org/show_bug.cgi?id=81100

        Class name and type name indexes are now used when calculating class aggregates
        in heap snapshots instead of string lookup followed by a string comparison.

        Class names like "Window / www.webkit.org" are now left as is in the UI (it used
        to be trimed to just "Window").

        Reviewed by Pavel Feldman.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshotNode.prototype.get classNameIndex):
        (WebInspector.HeapSnapshotNode.prototype.hasType):
        (WebInspector.HeapSnapshot.prototype._init):
        (WebInspector.HeapSnapshot.prototype._buildAggregates):

2012-03-14  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: add didCancelFrame timeline event
        https://bugs.webkit.org/show_bug.cgi?id=80994

        Reviewed by Pavel Feldman.

        - add an ability to cancel certain timeline events, unless they've been followed by other events.
        - implement didCancelFrame() event, fired when a platform decides not to render frame after didBeginFrame() was called.

        Test: inspector/timeline/timeline-frames.html

        * WebCore.exp.in:
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::didCancelFrameImpl):
        (WebCore):
        * inspector/InspectorInstrumentation.h:
        (InspectorInstrumentation):
        (WebCore::InspectorInstrumentation::didCancelFrame):
        (WebCore):
        * inspector/InspectorTimelineAgent.cpp:
        (WebCore::InspectorTimelineAgent::didBeginFrame):
        (WebCore):
        (WebCore::InspectorTimelineAgent::didCancelFrame):
        (WebCore::InspectorTimelineAgent::appendRecord):
        (WebCore::InspectorTimelineAgent::pushCurrentRecord):
        (WebCore::InspectorTimelineAgent::pushCancelableRecord):
        (WebCore::InspectorTimelineAgent::commitCancelableRecords):
        (WebCore::InspectorTimelineAgent::cancelRecord):
        * inspector/InspectorTimelineAgent.h:
        (InspectorTimelineAgent):
        (WebCore::InspectorTimelineAgent::TimelineRecordEntry::TimelineRecordEntry):
        (TimelineRecordEntry):
        * testing/Internals.cpp:
        (WebCore::Internals::emitInspectorDidBeginFrame):
        (WebCore):
        (WebCore::Internals::emitInspectorDidCancelFrame):
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-14  Dana Jansens  <danakj@chromium.org>

        Region can acquire an empty span by subtracting an empty Region
        https://bugs.webkit.org/show_bug.cgi?id=81074

        Reviewed by Anders Carlsson.

        Subtracting an empty Region B from a Region A can cause A to end
        up with an empty span. This violates the rule that two Regions
        that cover the exact same area should have equal spans and segments.

        Unit test: RegionTest.emptySpan

        * platform/graphics/Region.cpp:
        (WebCore::Region::subtract):

2012-03-14  Simon Hausmann  <simon.hausmann@nokia.com>

        [Textmap] Disable driver based BGRA swizzling for OpenGL/ES

        Reviewed by Noam Rosenthal.

        The current way of detecting swizzling support (check for GL_EXT_texture_format_BGRA8888)
        is unfortunately not reliable. We need a better way of detection that (filed bug 81103).
        In the meantime this patch reverts back to doing the swizzling in the texture mapper to
        get pixels back onto the screen.

        * platform/graphics/texmap/TextureMapperGL.cpp:
        (WebCore::driverSupportsBGRASwizzling):
        (WebCore::BitmapTextureGL::updateContents):

2012-03-14  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Upstream the BlackBerry change to platform/Cursor.h
        https://bugs.webkit.org/show_bug.cgi?id=81086

        Reviewed by Rob Buis.

        * platform/Cursor.h:
        (WebCore):
        (WebCore::Cursor::Cursor):
        Add the BlackBerry specific PlatformCursor.
        * platform/blackberry/PageClientBlackBerry.h:
        There was an alias named PlatformCursorHandle for PlatformCursor
        in the internal version of Cursor.h. But it's not necessary so it's
        not included in the upstreaming version of Cursor.h. As a result,
        use PlatformCursor directly in this file.
        (PageClientBlackBerry):

2012-03-14  Simon Hausmann  <simon.hausmann@nokia.com>

        [Qt] RunLoopQt is missing reentrancy guards
        https://bugs.webkit.org/show_bug.cgi?id=80982

        Reviewed by Tor Arne Vestbø.

        Avoid recursive calls to RunLoop::performWork() with a simple
        counting mechanism, to avoid out-of-order message dispatching.

        * platform/qt/RunLoopQt.cpp:
        (WebCore::RunLoop::TimerObject::TimerObject):
        (WebCore::RunLoop::TimerObject::performWork):
        (RunLoop::TimerObject):

2012-03-14  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: small improvement for HeapSnapshot performance ~12%.
        https://bugs.webkit.org/show_bug.cgi?id=81033

        Reviewed by Yury Semikhatsky.

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.HeapSnapshot.prototype.get nodeCount):
        (WebInspector.HeapSnapshot.prototype.get maxNodeId):
        (WebInspector.HeapSnapshot.prototype._buildReverseIndex):
        (WebInspector.HeapSnapshot.prototype.get nodeIndexes):
        (WebInspector.HeapSnapshot.prototype._buildNodeIndex):

2012-03-14  Kentaro Hara  <haraken@chromium.org>

        Return null when shouldAllowAccessToNode() fails
        https://bugs.webkit.org/show_bug.cgi?id=80205

        Reviewed by Adam Barth.

        shouldAllowAccessToNode() is used for window.frameElement, HTMLFrameElement.contentDocument,
        and getSVGDocument(). The spec of window.frameElement and HTMLFrameElement.contentDocument
        requires that they should return null when the security check fails.
        Thus this patch changes the return value from undefined to null.

        http://www.whatwg.org/specs/web-apps/current-work/multipage/browsers.html#navigating-nested-browsing-contexts-in-the-dom
        http://www.whatwg.org/specs/web-apps/current-work/multipage/the-iframe-element.html#dom-iframe-contentdocument

        Tests: http/tests/security/local-iFrame-from-remote.html
               http/tests/security/cross-frame-access-frameelement.html
               http/tests/security/cross-frame-access-put.html

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateNormalAttrGetter):
        (GenerateFunctionCallback):

        * bindings/scripts/test/JS/JSTestObj.cpp: Updated run-bindings-tests results.
        (WebCore::jsTestObjContentDocument):
        (WebCore::jsTestObjPrototypeFunctionGetSVGDocument):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::TestObjInternal::contentDocumentAttrGetter):
        (WebCore::TestObjInternal::getSVGDocumentCallback):

2012-03-14  Sudarsana Nagineni  <sudarsana.nagineni@linux.intel.com>

        Build error: DNSSoup.cpp:30: fatal error: CString.h: No such file or
        directory
        https://bugs.webkit.org/show_bug.cgi?id=81093

        Reviewed by Philippe Normand.

        Fix build error introduced by r110669.

        * platform/network/soup/DNSSoup.cpp:

2012-03-14  Marja Hölttä  <marja@google.com>

        WebHTTPBody: Keep track of whether the data includes passwords.
        https://bugs.webkit.org/show_bug.cgi?id=81003

        Reviewed by Darin Fisher.

        This change enables Chrome to save HTTP bodies selectively, only
        if they don't contain passwords.

        * loader/FormSubmission.cpp:
        (WebCore::FormSubmission::create): Check if the data contains passwords.
        * platform/network/FormData.cpp:
        (WebCore::FormData::FormData): Added containsPasswordData, setContainsPasswordData.
        * platform/network/FormData.h:
        (WebCore::FormData::containsPasswordData): Added.
        (WebCore::FormData::setHasPasswordData): Added.
        (FormData):

2012-03-14  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Add snippets tab to scripts navigator.
        https://bugs.webkit.org/show_bug.cgi?id=81018

        Reviewed by Pavel Feldman.

        * English.lproj/localizedStrings.js:
        * inspector/front-end/ScriptsNavigator.js:
        (WebInspector.ScriptsNavigator):
        (WebInspector.ScriptsNavigator.prototype.get defaultFocusedElement):
        (WebInspector.ScriptsNavigator.prototype.focus):
        (WebInspector.ScriptsNavigator.prototype._showScriptFoldersSettingChanged):
        (WebInspector.ScriptsNavigator.prototype.reset):
        (WebInspector.ScriptsNavigator.prototype._getOrCreateFolderTreeElement):
        (WebInspector.ScriptsNavigator.prototype._createFolderTreeElement):
        (WebInspector.ScriptsNavigator.prototype._getOrCreateSnippetEvaluationsFolderTreeElement):
        (WebInspector.ScriptsNavigator.prototype._scriptFolderIdentifier):
        (WebInspector.NavigatorTreeOutline):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._uiSourceCodeAdded):
        (WebInspector.ScriptsPanel.prototype._revealExecutionLine):
        * inspector/front-end/SnippetsModel.js:

2012-03-14  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: Copy on the Console gives a mangled result.
        https://bugs.webkit.org/show_bug.cgi?id=81091

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/ConsoleMessage.js:
        (WebInspector.ConsoleMessageImpl.prototype._formatMessage):
        (WebInspector.ConsoleMessageImpl.prototype._populateStackTraceTreeElement):

2012-03-14  Nikolas Zimmermann  <nzimmermann@rim.com>

        External <use> xlink:href references do not work
        https://bugs.webkit.org/show_bug.cgi?id=12499

        Reviewed by Zoltan Herczeg.

        Follow-up fix after r110676.
        Assertions are firing due last minute changes in isExternalURIReference.

        Fix detecting local resources properly, when the given iri contains a /complex/path.
        Use document->completeURL() instead, and compare with the document->url() to decide
        if its a local reference or not.

        If an external document load fails with an error (eg. file missing) don't assert
        in debug builds, instead handle it gracefully.

        I decided to clean the code up as well, to make it more safe & obvious.

        Test: svg/custom/use-external-crash.svg

        * svg/SVGURIReference.cpp:
        (WebCore::SVGURIReference::targetElementFromIRIString):
        * svg/SVGURIReference.h:
        (WebCore::SVGURIReference::isExternalURIReference):
        * svg/SVGUseElement.cpp:
        (WebCore::SVGUseElement::externalDocument):
        (WebCore::SVGUseElement::buildPendingResource):

2012-03-14  Lars Knudsen  <lars.knudsen@nokia.com>

        3D transformed surfaces with z>0 gets cropped
        https://bugs.webkit.org/show_bug.cgi?id=81009

        Reviewed by Noam Rosenthal.

        The scissor clipping in TextureMapperGL didn't take 3D transforms 
        into account when calculating the clipping region.
        Now, it will bail out early if the transform is not affine.

        No new tests. Tested by current compositing layout tests.

        * platform/graphics/texmap/TextureMapperGL.cpp:
        (WebCore::TextureMapperGL::beginScissorClip):

2012-03-14  Hajime Morrita  <morrita@chromium.org>

        Unreviewed build fix.

        * html/track/TextTrackList.cpp:
        (TextTrackList::append):
        (TextTrackList::remove):
        (TextTrackList::owner): Changed return type from HTMLMediaElement* to Node* and uninlined.
        * html/track/TextTrackList.h:
        (TextTrackList):

2012-03-13  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: [InspectorIndexedDB] Remote object should be released when data view is removed/updated.
        https://bugs.webkit.org/show_bug.cgi?id=81022

        Reviewed by Pavel Feldman.

        * inspector/front-end/IndexedDBViews.js:
        (WebInspector.IDBDataView):
        (WebInspector.IDBDataView.prototype._updateData.callback):
        (WebInspector.IDBDataView.prototype._updateData):
        (WebInspector.IDBDataView.prototype.get statusBarItems):
        (WebInspector.IDBDataView.prototype.clear):
        * inspector/front-end/ResourcesPanel.js:
        (WebInspector.IndexedDBTreeElement.prototype._indexedDBRemoved):
        (WebInspector.IDBDatabaseTreeElement.prototype.update):
        (WebInspector.IDBDatabaseTreeElement.prototype.onselect):
        (WebInspector.IDBDatabaseTreeElement.prototype._objectStoreRemoved):
        (WebInspector.IDBDatabaseTreeElement.prototype.clear):
        (WebInspector.IDBObjectStoreTreeElement.prototype.update):
        (WebInspector.IDBObjectStoreTreeElement.prototype.onselect):
        (WebInspector.IDBObjectStoreTreeElement.prototype._indexRemoved):
        (WebInspector.IDBObjectStoreTreeElement.prototype.clear):
        (WebInspector.IDBIndexTreeElement.prototype.onselect):
        (WebInspector.IDBIndexTreeElement.prototype.clear):

2012-03-12  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Introduce SnippetsScriptMapping.
        https://bugs.webkit.org/show_bug.cgi?id=80890

        Reviewed by Pavel Feldman.

        * inspector/front-end/ScriptMapping.js:
        (WebInspector.MainScriptMapping):
        (WebInspector.MainScriptMapping.prototype.addScript):
        (WebInspector.MainScriptMapping.prototype._mappingForScript):
        * inspector/front-end/SnippetsModel.js:
        (WebInspector.SnippetsModel.prototype.snippetForId):
        (WebInspector.SnippetsModel.prototype.snippetForSourceURL):
        (WebInspector.SnippetsScriptMapping):
        (WebInspector.SnippetsScriptMapping.prototype.uiSourceCodeList):
        (WebInspector.SnippetsScriptMapping.prototype.addScript):
        (WebInspector.SnippetsScriptMapping.prototype._snippetAdded):
        (WebInspector.SnippetsScriptMapping.prototype._releaseSnippetScript.get if):
        (WebInspector.SnippetsScriptMapping.prototype._releaseSnippetScript):
        (WebInspector.SnippetsScriptMapping.prototype._snippetDeleted.get this):
        (WebInspector.SnippetsScriptMapping.prototype._snippetDeleted):
        (WebInspector.SnippetsScriptMapping.prototype.reset):
        (WebInspector.SnippetContentProvider):

2012-03-14  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110673.
        http://trac.webkit.org/changeset/110673
        https://bugs.webkit.org/show_bug.cgi?id=81090

        "Qt minimal build broken" (Requested by yurys on #webkit).

        * inspector/CodeGeneratorInspector.py:
        (CommandReturnPassModel.ByPointer.get_set_return_condition):
        (TypeModel.Enum.get_optional.EnumOptional.get_command_return_pass_model):
        (TypeModel.ValueType.ValueOptional.get_command_return_pass_model):
        (Generator.process_event):
        (Generator.process_command):
        * inspector/ContentSearchUtils.cpp:
        (WebCore::ContentSearchUtils::buildObjectForSearchMatch):
        (WebCore::ContentSearchUtils::searchInTextByLines):
        * inspector/ContentSearchUtils.h:
        (ContentSearchUtils):
        * inspector/InjectedScript.cpp:
        (WebCore::InjectedScript::evaluate):
        (WebCore::InjectedScript::callFunctionOn):
        (WebCore::InjectedScript::evaluateOnCallFrame):
        (WebCore::InjectedScript::makeEvalCall):
        * inspector/InjectedScript.h:
        (InjectedScript):
        * inspector/InspectorDOMDebuggerAgent.cpp:
        (WebCore::InspectorDOMDebuggerAgent::didInvalidateStyleAttr):
        (WebCore::InspectorDOMDebuggerAgent::willInsertDOMNode):
        (WebCore::InspectorDOMDebuggerAgent::willRemoveDOMNode):
        (WebCore::InspectorDOMDebuggerAgent::willModifyDOMAttr):
        (WebCore::InspectorDOMDebuggerAgent::pauseOnNativeEventIfNeeded):
        (WebCore::InspectorDOMDebuggerAgent::willSendXMLHttpRequest):
        * inspector/InspectorDebuggerAgent.cpp:
        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):
        (WebCore::InspectorDebuggerAgent::setBreakpoint):
        (WebCore::InspectorDebuggerAgent::searchInContent):
        (WebCore::InspectorDebuggerAgent::setScriptSource):
        (WebCore::InspectorDebuggerAgent::getFunctionDetails):
        (WebCore::InspectorDebuggerAgent::schedulePauseOnNextStatement):
        (WebCore::InspectorDebuggerAgent::evaluateOnCallFrame):
        (WebCore::InspectorDebuggerAgent::didPause):
        (WebCore::InspectorDebuggerAgent::breakProgram):
        (WebCore::InspectorDebuggerAgent::clearBreakDetails):
        * inspector/InspectorDebuggerAgent.h:
        (InspectorDebuggerAgent):
        * inspector/InspectorPageAgent.cpp:
        (WebCore::buildObjectForCookie):
        (WebCore::buildArrayForCookies):
        (WebCore::InspectorPageAgent::getCookies):
        (WebCore::InspectorPageAgent::getResourceTree):
        (WebCore::InspectorPageAgent::searchInResource):
        (WebCore::InspectorPageAgent::searchInResources):
        (WebCore::InspectorPageAgent::buildObjectForFrame):
        (WebCore::InspectorPageAgent::buildObjectForFrameTree):
        * inspector/InspectorPageAgent.h:
        * inspector/InspectorRuntimeAgent.cpp:
        (WebCore::InspectorRuntimeAgent::evaluate):
        (WebCore::InspectorRuntimeAgent::callFunctionOn):

2012-03-14  Renata Hodovan  <reni@webkit.org>

        External <use> xlink:href references do not work
        https://bugs.webkit.org/show_bug.cgi?id=12499

        Reviewed by Nikolas Zimmermann.

        This is a follow-up patch after r108785.
        In this patch we bind the previously introduced CachedSVGDocument class
        into the caching mechanism of SVGUseElement. The mode how external resources
        are handled is similar to the processing of internal ones. We build the instance
        and shadow tree the same way but we have to keep in mind that the requested resources
        maybe not loaded yet. We can check it with cachedDocumentIsStillLoading() function.

        SVGURIReference::targetElementFromIRIString() also need to be extended. The baseURI
        computation needs to take the referenced documents URL into account, instead of the current documents.

        The patch affects a lot of tests which have external resources especially in svg/batik. Because
        of the size of that test refactor they will be commited in a follow-up patch.

        Tests: svg/W3C-SVG-1.2-Tiny/struct-use-recursion-01-t.svg
               svg/W3C-SVG-1.2-Tiny/struct-use-recursion-02-t.svg
               svg/W3C-SVG-1.2-Tiny/struct-use-recursion-03-t.svg
               svg/custom/use-extern-href.svg
               svg/custom/use-referencing-an-image-expected.svg
               svg/custom/use-referencing-an-image.svg
               svg/custom/use-referencing-indirectly-itself-expected.svg
               svg/custom/use-referencing-indirectly-itself.svg
               svg/custom/use-referencing-itself-expected.svg
               svg/custom/use-referencing-itself.svg
               svg/dynamic-updates/SVGUseElement-dom-href1-attr.html
               svg/dynamic-updates/SVGUseElement-dom-href2-attr.html
               svg/dynamic-updates/SVGUseElement-svgdom-href1-prop.html
               svg/dynamic-updates/SVGUseElement-svgdom-href2-prop.html

        * loader/cache/CachedResourceLoader.cpp:
        (WebCore):
        (WebCore::CachedResourceLoader::requestSVGDocument):
        * loader/cache/CachedResourceLoader.h:
        (WebCore):
        (CachedResourceLoader):
        * page/ContentSecurityPolicy.h:
        * platform/KURL.cpp:
        (WebCore::equalIgnoringFragmentIdentifier):
        * platform/network/chromium/ResourceRequest.h:
        * svg/SVGURIReference.cpp:
        (WebCore::urlFromIRIStringWithFragmentIdentifier):
        (WebCore):
        (WebCore::SVGURIReference::targetElementFromIRIString):
        * svg/SVGURIReference.h:
        (SVGURIReference):
        (WebCore::SVGURIReference::isExternalURIReference):
        * svg/SVGUseElement.cpp:
        (WebCore::SVGUseElement::SVGUseElement):
        (WebCore::SVGUseElement::~SVGUseElement):
        (WebCore):
        (WebCore::SVGUseElement::referencedDocument):
        (WebCore::SVGUseElement::externalDocument):
        (WebCore::SVGUseElement::svgAttributeChanged):
        (WebCore::dumpInstanceTree):
        (WebCore::SVGUseElement::buildPendingResource):
        (WebCore::SVGUseElement::buildShadowAndInstanceTree):
        (WebCore::SVGUseElement::hasCycleUseReferencing):
        (WebCore::SVGUseElement::expandUseElementsInShadowTree):
        (WebCore::SVGUseElement::expandSymbolElementsInShadowTree):
        (WebCore::SVGUseElement::notifyFinished):
        (WebCore::SVGUseElement::cachedDocumentIsStillLoading):
        (WebCore::SVGUseElement::instanceTreeIsLoading):
        * svg/SVGUseElement.h:
        (WebCore):
        (SVGUseElement):

2012-03-14  Peter Rybin  <peter.rybin@gmail.com>

        Web Inspector: TypeBuilder: Introduce OptOutput class for optional output parameters
        https://bugs.webkit.org/show_bug.cgi?id=80789

        Reviewed by Yury Semikhatsky.

        OptOutput class is added for optional return parameters.

        Strict mode added to Generator that makes all parameter types strict
        and drop pre-set default values for return parameters.

        Debugger and Page domain is switched to strict mode.


        * inspector/CodeGeneratorInspector.py:
        (CommandReturnPassModel.ByPointer):
        (CommandReturnPassModel):
        (CommandReturnPassModel.OptOutput):
        (CommandReturnPassModel.OptOutput.__init__):
        (CommandReturnPassModel.OptOutput.get_return_var_type):
        (CommandReturnPassModel.OptOutput.get_output_argument_prefix):
        (CommandReturnPassModel.OptOutput.get_output_to_raw_expression):
        (CommandReturnPassModel.OptOutput.get_output_parameter_type):
        (CommandReturnPassModel.OptOutput.get_set_return_condition):
        (TypeModel.Enum.get_optional.EnumOptional.get_command_return_pass_model):
        (TypeModel.ValueType.ValueOptional.get_command_return_pass_model):
        (OptOutput):
        (Generator.process_event):
        (Generator.process_command):
        * inspector/ContentSearchUtils.cpp:
        (WebCore::ContentSearchUtils::buildObjectForSearchMatch):
        (WebCore::ContentSearchUtils::searchInTextByLines):
        * inspector/ContentSearchUtils.h:
        (ContentSearchUtils):
        * inspector/InjectedScript.cpp:
        (WebCore::InjectedScript::evaluate):
        (WebCore::InjectedScript::callFunctionOn):
        (WebCore::InjectedScript::evaluateOnCallFrame):
        (WebCore::InjectedScript::makeEvalCall):
        * inspector/InjectedScript.h:
        (InjectedScript):
        * inspector/InspectorDOMDebuggerAgent.cpp:
        (WebCore):
        * inspector/InspectorDebuggerAgent.cpp:
        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):
        (WebCore::InspectorDebuggerAgent::setBreakpoint):
        (WebCore::InspectorDebuggerAgent::searchInContent):
        (WebCore::InspectorDebuggerAgent::setScriptSource):
        (WebCore::InspectorDebuggerAgent::getFunctionDetails):
        (WebCore::InspectorDebuggerAgent::schedulePauseOnNextStatement):
        (WebCore::InspectorDebuggerAgent::evaluateOnCallFrame):
        (WebCore::InspectorDebuggerAgent::didPause):
        (WebCore::InspectorDebuggerAgent::breakProgram):
        (WebCore::InspectorDebuggerAgent::clearBreakDetails):
        * inspector/InspectorDebuggerAgent.h:
        (InspectorDebuggerAgent):
        * inspector/InspectorPageAgent.cpp:
        (WebCore::buildObjectForCookie):
        (WebCore::buildArrayForCookies):
        (WebCore::InspectorPageAgent::getCookies):
        (WebCore::InspectorPageAgent::getResourceTree):
        (WebCore::InspectorPageAgent::searchInResource):
        (WebCore::InspectorPageAgent::searchInResources):
        (WebCore::InspectorPageAgent::buildObjectForFrame):
        (WebCore::InspectorPageAgent::buildObjectForFrameTree):
        * inspector/InspectorPageAgent.h:
        * inspector/InspectorRuntimeAgent.cpp:
        (WebCore::InspectorRuntimeAgent::evaluate):
        (WebCore::InspectorRuntimeAgent::callFunctionOn):

2012-03-14  Sergio Villar Senin  <svillar@igalia.com>

        Unreviewed. Build fix for EFL after r110669.

        * PlatformEfl.cmake: added DNSSoup.cpp

2012-03-13  Sergio Villar Senin  <svillar@igalia.com>

        [GTK] Use the same DNS prefetching path than the other ports.
        https://bugs.webkit.org/show_bug.cgi?id=80997

        Reviewed by Martin Robinson.

        This patch basically reverts r56128. There is no need to add an
        special code path for GTK+ DNS pre-fetching because the main
        reason to do that (some potential changes in libsoup) is not
        going to happen. It also reduces the amount of DNS queries by
        adding a NULL hostname check.

        No need for new tests as this just moves code around.

        * GNUmakefile.list.am:
        * html/HTMLAnchorElement.cpp:
        (WebCore::HTMLAnchorElement::parseAttribute):
        * html/HTMLLinkElement.cpp:
        * loader/LinkLoader.cpp:
        (WebCore::LinkLoader::loadLink):
        * page/Chrome.cpp:
        (WebCore::Chrome::mouseDidMoveOverElement):
        * platform/network/DNS.h:
        (WebCore):
        * platform/network/ResourceHandle.cpp:
        * platform/network/ResourceHandle.h:
        (ResourceHandle):
        * platform/network/chromium/DNSChromium.cpp:
        * platform/network/soup/DNSSoup.cpp: restored.
        (WebCore):
        (WebCore::prefetchDNS):
        * platform/network/soup/ResourceHandleSoup.cpp:

2012-03-14  Kentaro Hara  <haraken@chromium.org>

        Return null when shouldAllowAccessToNode() fails
        https://bugs.webkit.org/show_bug.cgi?id=80205

        Reviewed by Adam Barth.

        shouldAllowAccessToNode() is used for window.frameElement, HTMLFrameElement.contentDocument,
        and getSVGDocument(). The spec of window.frameElement and HTMLFrameElement.contentDocument
        requires that they should return null when the security check fails.
        Thus this patch changes the return value from undefined to null.

        http://www.whatwg.org/specs/web-apps/current-work/multipage/browsers.html#navigating-nested-browsing-contexts-in-the-dom
        http://www.whatwg.org/specs/web-apps/current-work/multipage/the-iframe-element.html#dom-iframe-contentdocument

        Tests: http/tests/security/local-iFrame-from-remote.html
               http/tests/security/cross-frame-access-frameelement.html
               http/tests/security/cross-frame-access-put.html

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateNormalAttrGetter):
        (GenerateFunctionCallback):

        * bindings/scripts/test/JS/JSTestObj.cpp: Updated run-bindings-tests results.
        (WebCore::jsTestObjContentDocument):
        (WebCore::jsTestObjPrototypeFunctionGetSVGDocument):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::TestObjInternal::contentDocumentAttrGetter):
        (WebCore::TestObjInternal::getSVGDocumentCallback):

2012-03-13  Yosifumi Inoue  <yosin@chromium.org>

        [Forms] Hidden input element should not have labels. 
        https://bugs.webkit.org/show_bug.cgi?id=80403

        Reviewed by Kent Tamura.

        This patch changes "labels" attribute behavior for hidden input type.
        It returns null instead of NodeList of labels or empty node list.

        Note: The HTML5 specification isn't clear for non-labelable element's "labels"
        attribute return value. Firefox and Opera return empty node list. IE returns null.

        No new tests. Existing tests are updated.

        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::isLabelable): Added. Dispatch to InputType.
        * html/HiddenInputType.h:  Added isLabelable returning false.
        * html/InputType.cpp:
        (WebCore::InputType::isLabelable): Added. Returning true for all input types except for "hidden" type.
        (WebCore):
        * html/InputType.h:
        (InputType): Added isLabelable declaration.

2012-03-13  Yosifumi Inoue  <yosin@chromium.org>

        [Forms] The "output" element should have labels.
        https://bugs.webkit.org/show_bug.cgi?id=80466

        Reviewed by Kent Tamura.

        This patch enables functionality of "labels" attribute for
        HTMLOutputElement implemented in LabelableElement which use
        isLabelable predicate whether an element can have label or not.

        Update existing tests in fast/forms/label/ directory to cover
        the "output" element with the "labels" attribute.

        * html/HTMLOutputElement.h: Implement virtual method isLabelable.

2012-03-13  Luke Macpherson   <macpherson@chromium.org>

        Move opacity clamping into RenderStyle setter.
        https://bugs.webkit.org/show_bug.cgi?id=76966

        Reviewed by Eric Seidel.

        Covered by existing tests.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::applyProperty):
        * rendering/style/RenderStyle.h:
        (WebCore::RenderStyleBitfields::setOpacity):

2012-03-12  Igor Oliveira  <igor.o@sisa.samsung.com>

        Split the extra logic out of RenderObjectChildList::updateBeforeAfterContent
        https://bugs.webkit.org/show_bug.cgi?id=80856

        Extra part of the generated content handling logic out of RenderObjectChildList::updateBeforeAfterContent

        Reviewed by Julien Chaffraix.

        No change in behavior expected.

        * rendering/RenderObjectChildList.cpp:
        (WebCore::RenderObjectChildList::updateBeforeAfterStyle):
        (WebCore::createRenderForBeforeAfterContent):
        (WebCore::RenderObjectChildList::updateBeforeAfterContent):
        * rendering/RenderObjectChildList.h:
        (WebCore):
        (RenderObjectChildList):

2012-03-13  Simon Fraser  <simon.fraser@apple.com>

        Fix potential crash when loading test results
        https://bugs.webkit.org/show_bug.cgi?id=81062
        <rdar://problem/11041732>
        
        Reviewed by Dean Jackson.

        If RenderLayerBacking::isSimpleContainerCompositingLayer() is called early,
        before the document has a documentElement(), then it crashes. Fix with
        a null check on documentElement().
        
        No test because it's timing dependent.

        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::isSimpleContainerCompositingLayer):

2012-03-13  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/11025225> Assertion failure in RenderView::computeRectForRepaint() (!repaintContainer || repaintContainer == this) at store.apple.com
        https://bugs.webkit.org/show_bug.cgi?id=81051

        Reviewed by Simon Fraser.

        Test: ManualTests/inline-repaint-container.html.

        * rendering/RenderInline.cpp:
        (WebCore::RenderInline::clippedOverflowRectForRepaint): This function was not handling the
        case of the repaint container being a descendant of the containing block correctly, leading
        to the assertion failure, but also to a correctness bug seen in the new test. If the repaint
        container is a descendant of the containing block, just return the rect in the repaint
        container coordinates.

2012-03-13  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/11025217> [Mac] Assertion failure in collectComplexTextRunsForCharactersCoreText
        https://bugs.webkit.org/show_bug.cgi?id=77044

        Reviewed by Sam Weinig.

        Test: platform/mac/fast/text/core-text-fallback-to-unknown-font.html

        Handle the case of Core Text choosing a fallback font that NSFontManager cannot find by name.

        * platform/graphics/FontCache.h:
        (FontCache): Made ComplexTextController a friend class.
        * platform/graphics/mac/ComplexTextControllerCoreText.mm:
        (WebCore::ComplexTextController::collectComplexTextRunsForCharactersCoreText): Removed the
        failing assertion, which was not true, and added code to handle the case where a font
        cannot be found by name by using the font as returned from Core Text.

2012-03-13  Erik Arvidsson  <arv@chromium.org>

        [V8] Use v8::V8::AddImplicitReferences instead of SetHiddenValue
        https://bugs.webkit.org/show_bug.cgi?id=80880

        Reviewed by Adam Barth.

        We used to add a hidden property in the getter to the returned wrapper.
        With this patch we instead handle the liveness of the wrapper in the GC phase by
        calling v8::V8::AddHiddenReference.

        To reduce the amount of custom code we need, the V8 code generator now supports
        GenerateIsReachable (as well as CustomIsReachable) which, even though different
        from the JSC attribute, is used in the same cases and takes the same values (even though
        at the moment not all JSC values are supported by V8). Interfaces that have *IsReachable
        also have a dependent life time (just like if V8DependentLifetime was present).

        Second try. This time with an added include in TextTrackList.cpp.

        No new tests. Covered by existing tests.

        * Target.pri:
        * UseV8.cmake:
        * WebCore.gypi:
        * bindings/scripts/CodeGeneratorJS.pm:
        (GetGenerateIsReachable):
        (GetCustomIsReachable):
        (GenerateHeader):
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorV8.pm:
        (NeedsToVisitDOMWrapper):
        (GetGenerateIsReachable):
        (GetCustomIsReachable):
        (GenerateVisitDOMWrapper):
        (GenerateHeader):
        (GenerateNamedConstructorCallback):
        (GenerateImplementation):
        * bindings/scripts/IDLAttributes.txt:
        * bindings/scripts/test/V8/V8Float64Array.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8Float64Array.h:
        (V8Float64Array):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.h:
        (V8TestActiveDOMObject):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.h:
        (V8TestCustomNamedGetter):
        * bindings/scripts/test/V8/V8TestEventConstructor.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestEventConstructor.h:
        (V8TestEventConstructor):
        * bindings/scripts/test/V8/V8TestEventTarget.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestEventTarget.h:
        (V8TestEventTarget):
        * bindings/scripts/test/V8/V8TestInterface.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestInterface.h:
        (V8TestInterface):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.h:
        (V8TestMediaQueryListListener):
        * bindings/scripts/test/V8/V8TestNamedConstructor.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestNamedConstructor.h:
        (V8TestNamedConstructor):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestObj.h:
        (V8TestObj):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.h:
        (V8TestSerializedScriptValueInterface):
        * bindings/v8/NPV8Object.cpp:
        (WebCore::npObjectTypeInfo):
        * bindings/v8/V8GCController.cpp:
        (WebCore::GrouperVisitor::visitDOMWrapper):
        * bindings/v8/WrapperTypeInfo.h:
        (WebCore):
        (WrapperTypeInfo):
        * bindings/v8/custom/V8CSSStyleSheetCustom.cpp: Removed.
        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        * bindings/v8/custom/V8DOMTokenListCustom.cpp: Removed.
        * bindings/v8/custom/V8HTMLImageElementConstructor.cpp:
        (WebCore):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        * bindings/v8/custom/V8StyleSheetCustom.cpp:
        (WebCore::toV8):
        * css/CSSStyleSheet.idl:
        * css/StyleSheet.idl:
        * dom/DOMStringMap.idl:
        * dom/NamedNodeMap.idl:
        * html/DOMTokenList.idl:
        * html/track/TextTrackList.cpp:
        * html/track/TextTrackList.idl:

2012-03-13  Jacky Jiang  <zhajiang@rim.com>

        MathML crash in WebCore::Node::previousSibling()
        https://bugs.webkit.org/show_bug.cgi?id=80773

        Reviewed by Julien Chaffraix.

        When adding child for msub render, if the child is mtr or mtd render,
        we will creat an anonymous render as the container. As the anonymous
        render's node is 0, accessing it directly can cause crash.
        We should do a valid check of the node before using. In addition to
        that, for msub, attach the anonymous render and it's children to render
        tree. For msubsup, such kind of situation should never happen based on
        the current codebase.

        Test: mathml/msub-anonymous-child-render-crash.html

        * rendering/mathml/RenderMathMLSubSup.cpp:
        (WebCore::RenderMathMLSubSup::addChild):

2012-03-13  Mihnea Ovidenie  <mihnea@adobe.com>

        [CSSRegions]NamedFlow::getRegionsByContentNode should not return a live NodeList
        https://bugs.webkit.org/show_bug.cgi?id=81021

        Reviewed by Ryosuke Niwa.

        Reverting the original patch as we need a better solution.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * dom/Node.cpp:
        (WebCore::NodeListsNodeData::invalidateCaches):
        (WebCore::NodeListsNodeData::isEmpty):
        * dom/Node.h:
        (Node):
        * dom/NodeRareData.h:
        (NodeListsNodeData):
        * dom/RegionNodeList.cpp: Removed.
        * dom/RegionNodeList.h: Removed.
        * dom/WebKitNamedFlow.cpp:
        * dom/WebKitNamedFlow.h:
        (WebKitNamedFlow):
        * dom/WebKitNamedFlow.idl:
        * rendering/RenderFlowThread.cpp:
        * rendering/RenderFlowThread.h:
        * rendering/RenderRegion.h:
        (RenderRegion):

2012-03-13  Shawn Singh  <shawnsingh@chromium.org>

        [chromium] wrong transform causing incorrect culling
        https://bugs.webkit.org/show_bug.cgi?id=80471

        Reviewed by James Robinson.

        Unit test added to CCRenderSurfaceTest.cpp

        In addition to using originTransform() instead of drawTransform(),
        this patch shuffles a bit of code so that a unit test can be
        easily added.

        * platform/graphics/chromium/cc/CCRenderPass.cpp:
        (WebCore::CCRenderPass::appendQuadsForRenderSurfaceLayer):
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::createSharedQuadState):
        (WebCore):
        * platform/graphics/chromium/cc/CCRenderSurface.h:
        (CCRenderSurface):

2012-03-13  Dave Tharp  <dtharp@codeaurora.org>

        Alternate xml-stylesheets with no title are loaded, in violation of the CSSOM draft
        https://bugs.webkit.org/show_bug.cgi?id=77549

        Reviewed by David Hyatt.

        Amended code to ignore alternate stylesheets that do not have a title attribute.

        Test: fast/css/xml-stylesheet-alternate-no-title.xhtml

        * dom/ProcessingInstruction.cpp:
        (WebCore::ProcessingInstruction::checkStyleSheet):

2012-03-13  Levi Weintraub  <leviw@chromium.org>

        Revert RenderLayer::absoluteBoundingBox to an IntRect
        https://bugs.webkit.org/show_bug.cgi?id=81017

        Reviewed by Eric Seidel.

        Reverting RenderLayer::absoluteBoundingBox to an (pixel snapped) IntRect. Whenever
        possible, we use integers representing for absolute coordinates. This is especially
        relevant for methods, such as this one, that are exported and used in platform code.

        No new tests. No change in behavior.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::absoluteBoundingBox):
        * rendering/RenderLayer.h:
        (RenderLayer):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::requiresCompositingForPosition): This intersects
        the absolute bounding box with the FrameView, which uses all integer values. It's
        the only use of absoluteBoundingBox in WebCore.

2012-03-13  Nat Duca  <nduca@chromium.org>

        [chromium] vsync ticks are needed in invisible tabs when we are still updating resources
        https://bugs.webkit.org/show_bug.cgi?id=80910

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCSchedulerStateMachine.cpp:
        (WebCore::CCSchedulerStateMachine::vsyncCallbackNeeded):

2012-03-13  Dave Tharp  <dtharp@codeaurora.org>

        Alternate stylesheets (without title attribute) are loaded on refresh
        https://bugs.webkit.org/show_bug.cgi?id=24354

        Reviewed by David Hyatt.

        Alternate stylesheets are now ignored in <link> tags if 
        they have no title attribute (per spec).

        Tests: fast/css/link-alternate-stylesheet-1.html
               fast/css/link-alternate-stylesheet-2.html
               fast/css/link-alternate-stylesheet-3.html
               fast/css/link-alternate-stylesheet-4.html
               fast/css/link-alternate-stylesheet-5.html

        * dom/Document.cpp:
        (WebCore::Document::collectActiveStylesheets):

2012-03-13  Dana Jansens  <danakj@chromium.org>

        Region::contains(IntPoint) is slow
        https://bugs.webkit.org/show_bug.cgi?id=81008

        Reviewed by Anders Carlsson.

        Speed up Region::contains(IntPoint) by directly testing if the point
        is inside the Region's shape, rather than using a temporary 1x1 Region
        for the test.

        Unit test: RegionTest.containsPoint

        * platform/graphics/Region.cpp:
        (WebCore::Region::contains):

2012-03-13  Adrienne Walker  <enne@google.com>

        [chromium] Mark root layer scrollbars as always opaque to disable blending
        https://bugs.webkit.org/show_bug.cgi?id=79951

        Reviewed by James Robinson.

        Now that scrollbar layers exist, mark non-overlay root scrollbars as
        opaque. This disables blending for correctness and performance.

        * page/scrolling/chromium/ScrollingCoordinatorChromium.cpp:
        (WebCore::scrollbarLayerDidChange):
        (WebCore::ScrollingCoordinator::frameViewHorizontalScrollbarLayerDidChange):
        (WebCore::ScrollingCoordinator::frameViewVerticalScrollbarLayerDidChange):
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::drawTileQuad):

2012-03-13  Gavin Peters  <gavinp@chromium.org>

        Remove vestigal abortEvent from image attribute.
        https://bugs.webkit.org/show_bug.cgi?id=80795

        Reviewed by Adam Barth.

        It seems we installed a listener for the abort event on images,
        but never ever raised them.  So this patch removes it.  This could
        cause different behaviour if the user sends abort events directly
        at an image element, although addEventListener will still work.

        * html/HTMLImageElement.cpp:
        (WebCore::HTMLImageElement::parseAttribute):

2012-03-13  Nate Chapin  <japhet@chromium.org>

        Rework how a CachedRawResource decides if it can be reused
        for a given ResourceRequest. Ensure method, body, cookie policy,
        and all headers match.
        http://bugs.webkit.org/show_bug.cgi?id=79325

        Reviewed by Oliver Hunt.

        Test: http/tests/cache/xhr-body.html

        * loader/cache/CachedRawResource.cpp:
        (WebCore::CachedRawResource::canReuse):
        * loader/cache/CachedRawResource.h: Take a ResourceRequest in canReuse().
        * loader/cache/CachedResourceLoader.cpp:
        (WebCore::CachedResourceLoader::determineRevalidationPolicy): Remove Range header
            check, since it is now redundant.

2012-03-13  Rob Buis  <rbuis@rim.com>

        Fix cast-align GCC warning
        https://bugs.webkit.org/show_bug.cgi?id=80790

        Reviewed by Dan Bates.

        This touches unpackOneRowOfBGRA8ToRGBA8.

        * platform/graphics/GraphicsContext3D.cpp:
        (WebCore):

2012-03-12  Simon Fraser  <simon.fraser@apple.com>

        Refactor some code that is used to check whether a layer needs backing store
        https://bugs.webkit.org/show_bug.cgi?id=80917

        Reviewed by Dean Jackson.

        Move some code out of isSimpleContainerCompositingLayer() in two new
        methods to make the code more self-descriptive.
        
        No behavior change, so no tests.

        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::paintsBoxDecorations):
        (WebCore::RenderLayerBacking::paintsChildren):
        (WebCore::RenderLayerBacking::isSimpleContainerCompositingLayer):
        * rendering/RenderLayerBacking.h:
        (RenderLayerBacking):

2012-03-13  Daniel Bates  <dbates@webkit.org>

        REGRESSION(r99369): File input button doesn't highlight when pressed
        https://bugs.webkit.org/show_bug.cgi?id=79385

        Reviewed by Kent Tamura.

        Fixes an issue where the file input button doesn't highlight on mouse press.

        Currently we always override the active state of the button with whether
        a dragged file is being hovered over the file input control (i.e. can the control
        receive a dropped file; HTMLInputElement::canReceiveDroppedFiles()).
        Instead, we should only override the active state of the button when the state
        changes for whether we can receive dropped files (e.g. during a drag) so that
        we honor the active state of the button when it is pressed.

        Test: fast/forms/file/file-input-pressed-state.html

        * rendering/RenderFileUploadControl.cpp:
        (WebCore::RenderFileUploadControl::RenderFileUploadControl):
        (WebCore::RenderFileUploadControl::updateFromElement):
        * rendering/RenderFileUploadControl.h:
        (RenderFileUploadControl):

2012-03-13  Dana Jansens  <danakj@chromium.org>

        [chromium] Use CCOcclusionTracker for draw culling
        https://bugs.webkit.org/show_bug.cgi?id=80743

        Reviewed by Adrienne Walker.

        In this CL we enable the use of CCOcclusionTracker for draw-side
        culling. This means moving from a per-quad culling model to a
        per-layer model.

        When calculating RenderPasses, we construct the set of passes,
        then iterate over layers in front-to-back order. We make
        CCQuadCuller instantiable, and pass it to the layer
        appendQuads() methods instead of the bare list, where it can
        filter quads before the end up in the list.

        Covered by existing tests.

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::drawRenderPass):
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
        (WebCore::CCCanvasLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
        (CCCanvasLayerImpl):
        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::appendQuads):
        (WebCore::CCLayerImpl::appendGutterQuads):
        (WebCore::CCLayerImpl::appendDebugBorderQuad):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (WebCore):
        (CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::calculateRenderPasses):
        (WebCore::CCLayerTreeHostImpl::drawLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
        (WebCore::CCPluginLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
        (CCPluginLayerImpl):
        * platform/graphics/chromium/cc/CCQuadCuller.cpp:
        (WebCore::CCQuadCuller::CCQuadCuller):
        (WebCore::CCQuadCuller::append):
        * platform/graphics/chromium/cc/CCQuadCuller.h:
        (WebCore):
        (CCQuadCuller):
        * platform/graphics/chromium/cc/CCRenderPass.cpp:
        (WebCore::CCRenderPass::appendQuadsForLayer):
        * platform/graphics/chromium/cc/CCRenderPass.h:
        (WebCore):
        (CCQuadList):
        (WebCore::CCQuadList::backToFrontBegin):
        (WebCore::CCQuadList::backToFrontEnd):
        (CCRenderPass):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.cpp:
        (WebCore::CCScrollbarLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.h:
        (CCScrollbarLayerImpl):
        * platform/graphics/chromium/cc/CCSolidColorLayerImpl.cpp:
        (WebCore::CCSolidColorLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCSolidColorLayerImpl.h:
        (CCSolidColorLayerImpl):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (WebCore::CCTiledLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
        (CCTiledLayerImpl):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
        (WebCore::CCVideoLayerImpl::appendQuads):
        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
        (CCVideoLayerImpl):

2012-03-13  Adam Barth  <abarth@webkit.org> && Benjamin Poulain  <bpoulain@apple.com>

        Always enable ENABLE(CLIENT_BASED_GEOLOCATION)
        https://bugs.webkit.org/show_bug.cgi?id=78853

        Reviewed by Adam Barth.

        * CMakeLists.txt:
        * Configurations/FeatureDefines.xcconfig:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * Modules/geolocation/Geolocation.cpp:
        (WebCore):
        (WebCore::createPositionError):
        (WebCore::Geolocation::Geolocation):
        (WebCore::Geolocation::stop):
        (WebCore::Geolocation::lastPosition):
        (WebCore::Geolocation::requestPermission):
        (WebCore::Geolocation::startUpdating):
        (WebCore::Geolocation::stopUpdating):
        * Modules/geolocation/Geolocation.h:
        (WebCore):
        (Geolocation):
        * Modules/geolocation/GeolocationController.cpp:
        * Modules/geolocation/GeolocationController.h:
        * Modules/geolocation/GeolocationError.h:
        * Modules/geolocation/GeolocationPosition.h:
        * Target.pri:
        * WebCore.exp.in:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * bindings/js/JSGeolocationCustom.cpp:
        * loader/EmptyClients.h:
        (EmptyChromeClient):
        * page/ChromeClient.h:
        (ChromeClient):
        * page/Page.cpp:
        (WebCore::Page::Page):
        * page/Page.h:
        (Page):
        * platform/GeolocationService.cpp: Removed.
        * platform/GeolocationService.h: Removed.
        * platform/mock/GeolocationClientMock.cpp:
        * platform/mock/GeolocationClientMock.h:
        * platform/mock/GeolocationServiceMock.cpp: Removed.
        * platform/mock/GeolocationServiceMock.h: Removed.

2012-03-12  Antonio Gomes  <agomes@rim.com>

        Convert nodesFromRect tests to use Internals interface
        https://bugs.webkit.org/show_bug.cgi?id=80886

        Reviewed by Ryosuke Niwa.

        Add Internals::nodesFromRect implementation to unify
        the codepath for testing Document::nodesFromRect in a
        cross port way.

        No new tests, since we are improving here the infra-structure
        for testing a specific method.

        * testing/Internals.cpp:
        (WebCore::Internals::nodesFromRect):
        (WebCore):
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-13  Philip Rogers  <pdr@google.com>

        Fix the use of stale text fragments
        https://bugs.webkit.org/show_bug.cgi?id=80729

        Reviewed by Nikolas Zimmermann.

        Previously, we were allowing SVGTextFragments to get out of sync with the
        actual text in RenderSVGInlineTextBox. This patch reuses the dirty line
        box code in RenderText::setTextWithOffset to force
        clearTextFragments() when setTextWithOffset is called, preventing the use
        of stale SVGTextFragments.

        Test: svg/custom/delete-text-crash.html

        * rendering/InlineBox.h:
        (InlineBox):
        * rendering/svg/SVGInlineTextBox.cpp:
        (WebCore::SVGInlineTextBox::dirtyLineBoxes):
        (WebCore):
        * rendering/svg/SVGInlineTextBox.h:
        (SVGInlineTextBox):

2012-03-13  Nikolas Zimmermann  <nzimmermann@rim.com>

        SVG Animations update baseVal instead of animVal
        https://bugs.webkit.org/show_bug.cgi?id=12437

        Reviewed by Dirk Schulze.

        Blind fix for some GC related assertions firing on v8.

        Assure that animationStarted/animationEnded calls are happening
        on the same SVGAnimatedProperty. Always call animationEnded(),
        even if we shouldn't do anything for the target element, as its
        destructed, as we still have to reset m_isAnimating.

        * svg/SVGAnimateElement.cpp:
        (WebCore::SVGAnimateElement::SVGAnimateElement):
        (WebCore::SVGAnimateElement::resetToBaseValue):
        (WebCore::SVGAnimateElement::targetElementWillChange):
        * svg/SVGAnimateElement.h:
        (SVGAnimateElement):
        * svg/properties/SVGAnimatedPropertyTearOff.h:
        (WebCore::SVGAnimatedPropertyTearOff::animationEnded):

2012-03-13  Mark Pilgrim  <pilgrim@chromium.org>

        Move DirectoryEntry and DirectoryReader to new Modules/filesystem/ directory
        https://bugs.webkit.org/show_bug.cgi?id=80625

        Reviewed by Adam Barth.

        No new tests, all existing tests pass.

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * Modules/filesystem: Added.
        * Modules/filesystem/DirectoryEntry.cpp: Copied from Source/WebCore/fileapi/DirectoryEntry.cpp.
        * Modules/filesystem/DirectoryEntry.h: Copied from Source/WebCore/fileapi/DirectoryEntry.h.
        * Modules/filesystem/DirectoryEntry.idl: Copied from Source/WebCore/fileapi/DirectoryEntry.idl.
        * Modules/filesystem/DirectoryEntrySync.cpp: Copied from Source/WebCore/fileapi/DirectoryEntrySync.cpp.
        * Modules/filesystem/DirectoryEntrySync.h: Copied from Source/WebCore/fileapi/DirectoryEntrySync.h.
        * Modules/filesystem/DirectoryEntrySync.idl: Copied from Source/WebCore/fileapi/DirectoryEntrySync.idl.
        * Modules/filesystem/DirectoryReader.cpp: Copied from Source/WebCore/fileapi/DirectoryReader.cpp.
        * Modules/filesystem/DirectoryReader.h: Copied from Source/WebCore/fileapi/DirectoryReader.h.
        * Modules/filesystem/DirectoryReader.idl: Copied from Source/WebCore/fileapi/DirectoryReader.idl.
        * Modules/filesystem/DirectoryReaderBase.h: Copied from Source/WebCore/fileapi/DirectoryReaderBase.h.
        * Modules/filesystem/DirectoryReaderSync.cpp: Copied from Source/WebCore/fileapi/DirectoryReaderSync.cpp.
        * Modules/filesystem/DirectoryReaderSync.h: Copied from Source/WebCore/fileapi/DirectoryReaderSync.h.
        * Modules/filesystem/DirectoryReaderSync.idl: Copied from Source/WebCore/fileapi/DirectoryReaderSync.idl.
        * Target.pri:
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * WebCore.pri:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * fileapi/DirectoryEntry.cpp: Removed.
        * fileapi/DirectoryEntry.h: Removed.
        * fileapi/DirectoryEntry.idl: Removed.
        * fileapi/DirectoryEntrySync.cpp: Removed.
        * fileapi/DirectoryEntrySync.h: Removed.
        * fileapi/DirectoryEntrySync.idl: Removed.
        * fileapi/DirectoryReader.cpp: Removed.
        * fileapi/DirectoryReader.h: Removed.
        * fileapi/DirectoryReader.idl: Removed.
        * fileapi/DirectoryReaderBase.h: Removed.
        * fileapi/DirectoryReaderSync.cpp: Removed.
        * fileapi/DirectoryReaderSync.h: Removed.
        * fileapi/DirectoryReaderSync.idl: Removed.

2012-03-13  Igor Oliveira  <igor.o@sisa.samsung.com>

        animation-iteration-count does not handle floating point values correctly.
        https://bugs.webkit.org/show_bug.cgi?id=69531

        Implements support for non-integers animation-iteration-count numbers.
        Non-integer numbers will cause the animation to end part-way through a cycle.

        Reviewed by Dean Jackson.

        Tests: animations/fill-mode-iteration-count-non-integer.html
               animations/keyframes-iteration-count-non-integer.html

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
        * css/CSSParser.cpp:
        (WebCore::CSSParser::parseAnimationIterationCount):
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * page/animation/AnimationBase.cpp:
        (WebCore::AnimationBase::fractionalTime):
        (WebCore::AnimationBase::progress):
        * page/animation/CompositeAnimation.cpp:
        (WebCore::CompositeAnimation::pauseAnimationAtTime):
        * platform/animation/Animation.h:
        (WebCore::Animation::iterationCount):
        (WebCore::Animation::setIterationCount):
        (Animation):
        (WebCore::Animation::initialAnimationIterationCount):

2012-03-13  Tommy Widenflycht  <tommyw@google.com>

        MediaStream API: Rename PeerConnection to DeprecatedPeerConnection
        https://bugs.webkit.org/show_bug.cgi?id=80692

        Reviewed by Adam Barth.

        First patch in a series of patches to change the PeerConnection from ROAP to JSEP,
        see bug 80589 for more information.

        Patch covered by modified existing tests.

        * GNUmakefile.list.am:
        * Modules/mediastream/DOMWindowMediaStream.idl:
        * Modules/mediastream/DeprecatedPeerConnection.cpp: Renamed from Source/WebCore/Modules/mediastream/PeerConnection.cpp.
        (WebCore):
        (WebCore::DeprecatedPeerConnection::create):
        (WebCore::DeprecatedPeerConnection::DeprecatedPeerConnection):
        (WebCore::DeprecatedPeerConnection::~DeprecatedPeerConnection):
        (WebCore::DeprecatedPeerConnection::processSignalingMessage):
        (WebCore::DeprecatedPeerConnection::readyState):
        (WebCore::DeprecatedPeerConnection::send):
        (WebCore::DeprecatedPeerConnection::addStream):
        (WebCore::DeprecatedPeerConnection::removeStream):
        (WebCore::DeprecatedPeerConnection::localStreams):
        (WebCore::DeprecatedPeerConnection::remoteStreams):
        (WebCore::DeprecatedPeerConnection::close):
        (WebCore::DeprecatedPeerConnection::didCompleteICEProcessing):
        (WebCore::DeprecatedPeerConnection::didGenerateSDP):
        (WebCore::DeprecatedPeerConnection::didReceiveDataStreamMessage):
        (WebCore::DeprecatedPeerConnection::didAddRemoteStream):
        (WebCore::DeprecatedPeerConnection::didRemoveRemoteStream):
        (WebCore::DeprecatedPeerConnection::interfaceName):
        (WebCore::DeprecatedPeerConnection::scriptExecutionContext):
        (WebCore::DeprecatedPeerConnection::stop):
        (WebCore::DeprecatedPeerConnection::eventTargetData):
        (WebCore::DeprecatedPeerConnection::ensureEventTargetData):
        (WebCore::DeprecatedPeerConnection::scheduleInitialNegotiation):
        (WebCore::DeprecatedPeerConnection::initialNegotiationTimerFired):
        (WebCore::DeprecatedPeerConnection::ensureStreamChangeScheduled):
        (WebCore::DeprecatedPeerConnection::streamChangeTimerFired):
        (WebCore::DeprecatedPeerConnection::scheduleReadyStateChange):
        (WebCore::DeprecatedPeerConnection::readyStateChangeTimerFired):
        (WebCore::DeprecatedPeerConnection::changeReadyState):
        * Modules/mediastream/DeprecatedPeerConnection.h: Renamed from Source/WebCore/Modules/mediastream/PeerConnection.h.
        (WebCore):
        (DeprecatedPeerConnection):
        (WebCore::DeprecatedPeerConnection::didChangeState):
        (WebCore::DeprecatedPeerConnection::refEventTarget):
        (WebCore::DeprecatedPeerConnection::derefEventTarget):
        * Modules/mediastream/DeprecatedPeerConnection.idl: Renamed from Source/WebCore/Modules/mediastream/PeerConnection.idl.
        * Modules/mediastream/SignalingCallback.h:
        (WebCore):
        (SignalingCallback):
        * Modules/mediastream/SignalingCallback.idl:
        * WebCore.gypi:
        * bindings/generic/RuntimeEnabledFeatures.h:
        (WebCore::RuntimeEnabledFeatures::webkitDeprecatedPeerConnectionEnabled):
        * bindings/js/JSDeprecatedPeerConnectionCustom.cpp: Renamed from Source/WebCore/bindings/js/JSPeerConnectionCustom.cpp.
        (WebCore):
        (WebCore::JSDeprecatedPeerConnectionConstructor::constructJSDeprecatedPeerConnection):
        * dom/EventTarget.h:
        (WebCore):
        * dom/EventTargetFactory.in:
        * platform/mediastream/DeprecatedPeerConnectionHandler.h: Renamed from Source/WebCore/platform/mediastream/PeerConnectionHandler.h.
        (WebCore):
        (DeprecatedPeerConnectionHandler):
        * platform/mediastream/DeprecatedPeerConnectionHandlerClient.h: Renamed from Source/WebCore/platform/mediastream/PeerConnectionHandlerClient.h.
        (WebCore):
        (DeprecatedPeerConnectionHandlerClient):
        (WebCore::DeprecatedPeerConnectionHandlerClient::~DeprecatedPeerConnectionHandlerClient):
        * platform/mediastream/gstreamer/DeprecatedPeerConnectionHandler.cpp: Renamed from Source/WebCore/platform/mediastream/gstreamer/PeerConnectionHandler.cpp.
        (WebCore):
        (WebCore::DeprecatedPeerConnectionHandler::create):
        (WebCore::DeprecatedPeerConnectionHandler::DeprecatedPeerConnectionHandler):
        (WebCore::DeprecatedPeerConnectionHandler::~DeprecatedPeerConnectionHandler):
        (WebCore::DeprecatedPeerConnectionHandler::produceInitialOffer):
        (WebCore::DeprecatedPeerConnectionHandler::handleInitialOffer):
        (WebCore::DeprecatedPeerConnectionHandler::processSDP):
        (WebCore::DeprecatedPeerConnectionHandler::processPendingStreams):
        (WebCore::DeprecatedPeerConnectionHandler::sendDataStreamMessage):
        (WebCore::DeprecatedPeerConnectionHandler::stop):

2012-03-13  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: front-end compilation was broken while supporting large arrays.
        https://bugs.webkit.org/show_bug.cgi?id=81013

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/ExtensionPanel.js:
        * inspector/front-end/ObjectPropertiesSection.js:
        (WebInspector.ArrayGroupingTreeElement._populateNonIndexProperties.buildObjectFragment):
        * inspector/front-end/RemoteObject.js:

2012-03-13  Tony Chang  <tony@chromium.org>

        flexbox's computePreferredLogicalWidth needs to take multiline into account
        https://bugs.webkit.org/show_bug.cgi?id=80931

        Reviewed by Ojan Vafai.

        Tests: css3/flexbox/multiline-shrink-to-fit-expected.html
               css3/flexbox/multiline-shrink-to-fit.html

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::computePreferredLogicalWidths): Set min/max preferredLogicalWidth based on always breaking or never breaking.
        (WebCore::RenderFlexibleBox::computeNextFlexLine): Add a FIXME.
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildren): Don't change the width after computePreferredWidth has been called.

2012-03-13  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110469.
        http://trac.webkit.org/changeset/110469
        https://bugs.webkit.org/show_bug.cgi?id=81010

        This patch still appears to crash (Requested by abarth on
        #webkit).

        * page/FrameView.cpp:
        (WebCore::FrameView::FrameView):
        (WebCore::FrameView::reset):
        (WebCore::FrameView::repaintContentRectangle):
        (WebCore):
        (WebCore::FrameView::endDeferredRepaints):
        (WebCore::FrameView::doDeferredRepaints):
        (WebCore::FrameView::deferredRepaintTimerFired):
        * page/FrameView.h:
        (FrameView):
        * rendering/RenderView.cpp:
        (WebCore::RenderView::shouldRepaint):
        * svg/graphics/SVGImage.cpp:
        (WebCore::SVGImage::drawSVGToImageBuffer):
        (WebCore::SVGImage::draw):
        * svg/graphics/SVGImage.h:
        * svg/graphics/SVGImageCache.cpp:
        (WebCore::SVGImageCache::imageContentChanged):
        (WebCore::SVGImageCache::redrawTimerFired):
        * svg/graphics/SVGImageCache.h:
        (SVGImageCache):

2012-03-13  Max Vujovic  <mvujovic@adobe.com>

        Add a method to window.internals to enable testing of inspector highlight rects
        https://bugs.webkit.org/show_bug.cgi?id=80338

        Reviewed by Pavel Feldman.

        Add window.internals.inspectorHighlightRects, a method which makes it possible to test the
        positions and sizes of inspector highlight rects.

        Test: inspector/elements/highlight-node.html

        * WebCore.exp.in: Export symbols.
        * testing/Internals.cpp:
        (WebCore::Internals::inspectorHighlightRects): Call InspectorController::getHighlight and
        return the highlight's quads as a ClientRectList.
        (WebCore):
        * testing/Internals.h:
        (WebCore):
        (Internals):
        * testing/Internals.idl:

            Add inspectorHighlightRects to the window.internals interface.

2012-03-13  Konrad Piascik  <kpiascik@rim.com>

        [BlackBerry] Remove sublayers before clamping just in case the layer already exists
        https://bugs.webkit.org/show_bug.cgi?id=80989

        Reviewed by Antonio Gomes.

        Discovered when trying to add a highlight sublayer for web inspector.  Since that layer
        may already exist in the tree we need to see if it will be pruned before we clamp on the
        size.

        This was manually tested during the writing of another patch to add web inspector highlights
        to accelrated compositing.

        * platform/graphics/blackberry/LayerWebKitThread.cpp:
        (WebCore::LayerWebKitThread::insertSublayer):

2012-03-13  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Add snippets model.
        https://bugs.webkit.org/show_bug.cgi?id=80863

        Reviewed by Yury Semikhatsky.

        Test: inspector/debugger/snippets-model.html

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/compile-front-end.py:
        * inspector/front-end/Settings.js:
        (WebInspector.ExperimentsSettings):
        * inspector/front-end/SnippetsModel.js: Added.
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/inspector.html:
        * inspector/front-end/inspector.js:

2012-03-13  'Pavel Feldman'  <pfeldman@chromium.org>

        Not reviewed: chromium build fix.

        * history/CachedFrame.cpp:

2012-03-13  Peter Rybin  <peter.rybin@gmail.com>

        Web Inspector: CodeGeneratorInspector.py: refactor copy-paste getter methods
        https://bugs.webkit.org/show_bug.cgi?id=80923

        Reviewed by Yury Semikhatsky.

        Several methods are combined in one using C++ templates.

        * inspector/CodeGeneratorInspector.py:

2012-03-13  Rob Buis  <rbuis@rim.com>

        [BlackBerry] Fix cast-align warning in QuotesData.cpp
        https://bugs.webkit.org/show_bug.cgi?id=80601

        Reviewed by Nikolas Zimmermann.

        Fix warning by adding variable of correct return type.

        * rendering/style/QuotesData.cpp:
        (WebCore::QuotesData::create):

2012-03-12  Brady Eidson  <beidson@apple.com>

        <rdar://problem/7908830> and https://bugs.webkit.org/show_bug.cgi?id=34679
        Location and other objects are dysfunctional after a document gets restored from page cache

        Reviewed by Adam Barth.

        Test: fast/loader/window-properties-restored-from-page-cache.html

        Give DOMWindowProperties the ability to reconnect to their Frame:
        * page/DOMWindowProperty.cpp:
        (WebCore::DOMWindowProperty::reconnectFrame):
        * page/DOMWindowProperty.h:
        (DOMWindowProperty):

        Let ApplicationCache do some extra work when reconnecting:
        * loader/appcache/DOMApplicationCache.cpp:
        (WebCore::DOMApplicationCache::reconnectFrame):
        (WebCore):
        * loader/appcache/DOMApplicationCache.h:
        (DOMApplicationCache):

        Let IndexDB do some extra work when reconnecting:
        * Modules/indexeddb/DOMWindowIndexedDatabase.cpp:
        (WebCore::DOMWindowIndexedDatabase::disconnectFrame):
        (WebCore::DOMWindowIndexedDatabase::reconnectFrame):
        (WebCore::DOMWindowIndexedDatabase::webkitIndexedDB):
        * Modules/indexeddb/DOMWindowIndexedDatabase.h:
        (DOMWindowIndexedDatabase):

        Tell the DOMWindow to suspend to the page cache:
        * history/CachedFrame.cpp:
        (WebCore::CachedFrame::CachedFrame):

        Tell the DOMWindow to resume from the page cache:
        * loader/FrameLoader.cpp:
        (WebCore::FrameLoader::open):

        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::DOMWindow):
        (WebCore::DOMWindow::~DOMWindow): Call clearDOMWindowProperties directly instead of clear()
        (WebCore::DOMWindow::frameDestroyed): Ditto.
        (WebCore::DOMWindow::clear): Only clear if the DOMWindow is not suspended for the page cache.
        (WebCore::DOMWindow::suspendForPageCache): Disconnect properties and set the page cache flag.
        (WebCore::DOMWindow::resumeFromPageCache): Reconnect properties and revert the page cache flag.
        (WebCore::DOMWindow::disconnectDOMWindowProperties): Only disconnect the registered properties.
        (WebCore::DOMWindow::reconnectDOMWindowProperties):
        (WebCore::DOMWindow::clearDOMWindowProperties): Disconnect the registered properties then clear them out.

        For all of the following, if the DOMWindow is not displayed in a frame (i.e., it is suspended), do nothing:
        (WebCore::DOMWindow::screen):
        (WebCore::DOMWindow::history):
        (WebCore::DOMWindow::crypto):
        (WebCore::DOMWindow::locationbar):
        (WebCore::DOMWindow::menubar):
        (WebCore::DOMWindow::personalbar):
        (WebCore::DOMWindow::scrollbars):
        (WebCore::DOMWindow::statusbar):
        (WebCore::DOMWindow::toolbar):
        (WebCore::DOMWindow::console):
        (WebCore::DOMWindow::applicationCache):
        (WebCore::DOMWindow::navigator):
        (WebCore::DOMWindow::performance):
        (WebCore::DOMWindow::location):
        (WebCore::DOMWindow::sessionStorage):
        (WebCore::DOMWindow::localStorage):
        (WebCore::DOMWindow::webkitNotifications):
        (WebCore::DOMWindow::postMessageTimerFired):
        (WebCore::DOMWindow::getSelection):
        (WebCore::DOMWindow::styleMedia):
        (WebCore::DOMWindow::webkitStorageInfo):
        * page/DOMWindow.h:

2012-03-13  Dana Jansens  <danakj@chromium.org>

        [chromium] Use projectQuad to apply inverse mapRect
        https://bugs.webkit.org/show_bug.cgi?id=80741

        Reviewed by Adrienne Walker.

        Unit test: CCOcclusionTrackerTest3dTransform
                   CCOcclusionTrackerTestPerspectiveTransform
                   CCOcclusionTrackerTestPerspectiveTransformBehindCamera

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::projectQuad):
        (WebCore):
        (WebCore::computeUnoccludedContentRect):

2012-03-13  Gavin Peters  <gavinp@chromium.org>

        New PageCache histogram which counts failures ignoring Settings.
        https://bugs.webkit.org/show_bug.cgi?id=80864

        Reviewed by Brady Eidson.

        Chrome has a command line switch to turn on the page cache.
        Currently it doesn't work, but it can cause the PageCache reasons
        for failure count to read lower than it should.  Add a new
        histogram to report the corrected value.

        * history/PageCache.cpp:
        (WebCore::logCanCachePageDecision):

2012-03-13  George Staikos  <staikos@webkit.org>

        Fix signed/unsigned mismatch compiler warnings.
        https://bugs.webkit.org/show_bug.cgi?id=80790

        Reviewed by Alexey Proskuryakov.

        * loader/icon/IconDatabase.cpp:
        (WebCore::IconDatabase::synchronousLoadDecisionForIconURL):
        * platform/network/MIMESniffing.cpp:

2012-03-13  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110510.
        http://trac.webkit.org/changeset/110510
        https://bugs.webkit.org/show_bug.cgi?id=80987

        depends on chromium r 125700, which isn't rolled into webkit
        yet :-/ (Requested by thakis_ on #webkit).

        * WebCore.gyp/mac/adjust_visibility.sh:

2012-03-13  Gavin Peters  <gavinp@chromium.org>

        Make ApplicationCacheHost::canCacheInPageCache() non-const.
        https://bugs.webkit.org/show_bug.cgi?id=80904

        Reviewed by Alexey Proskuryakov.

        A const pointer to a large object like ApplicationCacheHost is not our standard
        practice; so remove this (implicit) one.  See also https://bugs.webkit.org/show_bug.cgi?id=80898

        * loader/appcache/ApplicationCacheHost.cpp:
        (WebCore::ApplicationCacheHost::canCacheInPageCache):
        * loader/appcache/ApplicationCacheHost.h:
        (ApplicationCacheHost):

2012-03-13  Stephen Chenney  <schenney@chromium.org>

        Crash in WebCore::GraphicsContext::paintingDisabled
        https://bugs.webkit.org/show_bug.cgi?id=80669

        Reviewed by Nikolas Zimmermann.

        The SVGImageBufferTools::clipToImageBuffer method deletes the clip
        image when it thinks it is not needed. However, there are cases when
        it is in fact still needed, particularly when the clip buffer is
        coming from higher up in the stack where it may be needed again.

        So this patch adds a flag to only allow deletion of the image buffer
        if it was created at the most recent call site.

        Tests: svg/custom/circular-clip-path-references-crash-expected.svg
               svg/custom/circular-clip-path-references-crash.svg

        * rendering/svg/RenderSVGResourceClipper.cpp:
        (WebCore::RenderSVGResourceClipper::applyClippingToContext):
        * rendering/svg/RenderSVGResourceGradient.cpp:
        (WebCore::clipToTextMask):
        * rendering/svg/RenderSVGResourceMasker.cpp:
        (WebCore::RenderSVGResourceMasker::applyResource):
        * rendering/svg/SVGImageBufferTools.cpp:
        (WebCore::SVGImageBufferTools::clipToImageBuffer):
        * rendering/svg/SVGImageBufferTools.h:
        (SVGImageBufferTools):

2012-03-13  Gavin Peters  <gavinp@chromium.org>

        Fix an enumeration name in ReasonsFrameCannotBeInPageCache.
        https://bugs.webkit.org/show_bug.cgi?id=80849

        Reviewed by Brady Eidson.

        It seems that somebody goofed, and named one of the
        ReasonsFrameCannotBeInPageCache antonymically.

        * history/PageCache.cpp:
        (WebCore::logCanCacheFrameDecision):

2012-03-12  Kinuko Yasuda  <kinuko@chromium.org>

        File upload control should use File.name() rather than File.path() to show chosen filenames
        https://bugs.webkit.org/show_bug.cgi?id=80970

        In some rare cases (e.g. files from FileSystem API or files created
        using the newly added WebKit API) File.name has different displayName
        from the basename of file.path, and in the file uploader controller we
        should use File.name rather than File.path.

        Reviewed by Kent Tamura.

        No new tests: existing tests should pass as this should not change
        behavior in regular use cases.  (New behavior where File.name differs
        from File.path can be only tested in chromeos environment, therefore
        not adding new tests for that)

        * platform/gtk/RenderThemeGtk.cpp:
        (WebCore::RenderThemeGtk::fileListNameForWidth): Updated to handle FileList.
        * platform/gtk/RenderThemeGtk.h:
        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::fileListNameForWidth): Updated to handle FileList.
        * platform/qt/RenderThemeQt.h:
        * rendering/RenderFileUploadControl.cpp:
        (WebCore::RenderFileUploadControl::fileTextValue): Changed to pass FileList rather than FileList->paths().
        * rendering/RenderTheme.cpp:
        (WebCore::RenderTheme::fileListNameForWidth): Updated to handle FileList and use File.name for displaying the file name.
        * rendering/RenderTheme.h:
        * rendering/RenderThemeMac.h:
        * rendering/RenderThemeMac.mm:
        (WebCore::RenderThemeMac::fileListNameForWidth): Updated to handle FileList.

2012-03-13  Kinuko Yasuda  <kinuko@chromium.org>

        Allow WebFileChooser to return extra file info (like displayName) in addition to mere file paths
        https://bugs.webkit.org/show_bug.cgi?id=80719

        Reviewed by Kent Tamura.

        No new tests: this change itself shouldn't change existing behavior.

        * fileapi/File.cpp:
        (WebCore::createBlobDataForFileWithName): Renamed from createBlobDataForFileSystemFile.
        * fileapi/File.h:
        * html/FileInputType.cpp:
        (WebCore::FileInputType::saveFormControlState): Updated to handle File.name.
        (WebCore::FileInputType::restoreFormControlState): Ditto.
        (WebCore::FileInputType::setFileList): Changed the signature to take
        FileChooserFileInfo.
        (WebCore::FileInputType::filesChosen): Ditto.
        (WebCore::FileInputType::receiveDroppedFiles):
        * html/FileInputType.h:
        (FileInputType):
        * platform/FileChooser.cpp:
        (WebCore::FileChooser::chooseFiles): Added an overloaded method that
        takes FileChooserFileInfo.
        (WebCore):
        * platform/FileChooser.h:
        (WebCore::FileChooserFileInfo::FileChooserFileInfo): Added.
        * platform/MIMETypeRegistry.cpp:
        (WebCore::MIMETypeRegistry::getWellKnownMIMETypeForExtension): Removed surrouonding ifdefs as this function is now used even if FILE_SYSTEM is not enabled.
        * platform/MIMETypeRegistry.h:
        (MIMETypeRegistry):

2012-03-13  Vsevolod Vlasov  <vsevik@chromium.org>

        Unreviewed inspector compilation module name fix after r110550.

        * inspector/compile-front-end.py:

2012-03-12  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Changes to the list of scripts for front-end compilation should not require update of number of scripts in module.
        https://bugs.webkit.org/show_bug.cgi?id=80872

        Reviewed by Pavel Feldman.

        * inspector/compile-front-end.py: Added.
        * inspector/compile-front-end.sh:

2012-03-12  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: move ResourceScriptMapping to a separate file.
        https://bugs.webkit.org/show_bug.cgi?id=80859

        Reviewed by Vsevolod Vlasov.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/compile-front-end.sh:
        * inspector/front-end/ResourceScriptMapping.js: Copied from Source/WebCore/inspector/front-end/ScriptMapping.js.
        (WebInspector.ResourceScriptMapping):
        (WebInspector.ResourceScriptMapping.prototype.rawLocationToUILocation):
        (WebInspector.ResourceScriptMapping.prototype.uiSourceCodeList):
        (WebInspector.ResourceScriptMapping.prototype._handleUISourceCodeListChanged):
        (WebInspector.ResourceScriptMapping.prototype._uiSourceCodeListChanged):
        (WebInspector.ResourceScriptMapping.prototype._bindScriptToRawSourceCode):
        (WebInspector.ResourceScriptMapping.prototype.setFormatSource):
        (WebInspector.ResourceScriptMapping.prototype.forceUpdateSourceMapping):
        (WebInspector.ResourceScriptMapping.prototype.reset):
        * inspector/front-end/ScriptMapping.js:
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/inspector.html:

2012-03-12  Kentaro Hara  <haraken@chromium.org>

        Rename OptionsObject to Dictionary
        https://bugs.webkit.org/show_bug.cgi?id=80802

        Reviewed by Adam Barth.

        For clarification, rename OptionsObject.{h,cpp} to Dictionary.{h,cpp}.
        This patch just renames and sorts alphabetically.

        No tests. No change in behavior.

        * GNUmakefile.list.am:
        * Modules/indexeddb/IDBDatabase.cpp:
        (WebCore::IDBDatabase::createObjectStore):
        * Modules/indexeddb/IDBDatabase.h:
        (WebCore::IDBDatabase::createObjectStore):
        (IDBDatabase):
        * Modules/indexeddb/IDBDatabase.idl:
        * Modules/indexeddb/IDBKeyRange.h:
        * Modules/indexeddb/IDBObjectStore.cpp:
        (WebCore::IDBObjectStore::createIndex):
        * Modules/indexeddb/IDBObjectStore.h:
        (WebCore::IDBObjectStore::createIndex):
        (IDBObjectStore):
        * Modules/indexeddb/IDBObjectStore.idl:
        * Target.pri:
        * UseV8.cmake:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * bindings/js/Dictionary.h: Renamed from Source/WebCore/bindings/js/OptionsObject.h.
        (WebCore):
        (Dictionary):
        (WebCore::Dictionary::Dictionary):
        (WebCore::Dictionary::isObject):
        (WebCore::Dictionary::isUndefinedOrNull):
        (WebCore::Dictionary::get):
        (WebCore::Dictionary::getWithUndefinedOrNullCheck):
        * bindings/js/IDBBindingUtilities.cpp:
        (WebCore::createDictionaryFromValue):
        * bindings/js/IDBBindingUtilities.h:
        (WebCore):
        * bindings/scripts/CodeGeneratorJS.pm:
        (JSValueToNative):
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateHeader):
        (GenerateParametersCheck):
        (GenerateEventConstructorCallback):
        (GetNativeType):
        (JSValueToNative):
        * bindings/scripts/test/CPP/WebDOMTestObj.cpp:
        (WebDOMTestObj::optionsObject):
        * bindings/scripts/test/CPP/WebDOMTestObj.h:
        * bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
        (webkit_dom_test_obj_options_object):
        * bindings/scripts/test/GObject/WebKitDOMTestObj.h:
        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore::jsTestObjPrototypeFunctionIdbKey):
        (WebCore::jsTestObjPrototypeFunctionOptionsObject):
        * bindings/scripts/test/ObjC/DOMTestObj.h:
        * bindings/scripts/test/ObjC/DOMTestObj.mm:
        (-[DOMTestObj optionsObject:ooo:]):
        * bindings/scripts/test/TestObj.idl:
        * bindings/scripts/test/V8/V8TestEventConstructor.cpp:
        (WebCore::V8TestEventConstructor::constructorCallback):
        (WebCore::fillTestEventConstructorInit):
        * bindings/scripts/test/V8/V8TestEventConstructor.h:
        (WebCore):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::TestObjInternal::optionsObjectCallback):
        * bindings/v8/Dictionary.cpp: Renamed from Source/WebCore/bindings/v8/OptionsObject.cpp.
        (WebCore):
        (WebCore::Dictionary::Dictionary):
        (WebCore::Dictionary::~Dictionary):
        (WebCore::Dictionary::operator=):
        (WebCore::Dictionary::isObject):
        (WebCore::Dictionary::isUndefinedOrNull):
        (WebCore::Dictionary::getKey):
        (WebCore::Dictionary::get):
        (WebCore::Dictionary::getWithUndefinedOrNullCheck):
        * bindings/v8/Dictionary.h: Renamed from Source/WebCore/bindings/v8/OptionsObject.h.
        (WebCore):
        (Dictionary):
        * bindings/v8/custom/V8WebKitMutationObserverCustom.cpp:
        (WebCore::V8WebKitMutationObserver::observeCallback):

2012-03-12  Nikolas Zimmermann  <nzimmermann@rim.com>

        SVG Animations update baseVal instead of animVal
        https://bugs.webkit.org/show_bug.cgi?id=12437

        Reviewed by Dirk Schulze.

        Begin implementing the last missing core piece of the SVG DOM: proper animVal support.
        Most SVG DOM interfaces exposing eg. lengths use SVGAnimatedLength. eg. from SVGRectElement:
        "readonly attribute SVGAnimatedLength x;" SVGAnimatedXXX contains following methods:
        "readonly attribute SVGLength baseVal; readonly attribute SVGLength animVal;"
        From SVG DOM perspective, animVal and baseVal are two distinctive objects, animVal != baseVal.
        Its underlying value is the same though, if no animation is running on that attribute.

        As soon as a SMIL animation starts animating an SVGAnimated* target attribute, its
        baseVal and animVal may begin to differ. The animVal always reflect the current animated
        value (including all effects of additive/accumulated animations) which is shown on screen
        when eg animating the width of a <rect>. The baseVal is is equal to the underlying XML
        property value / SVG DOM value, but may be influenced through dynamic changes.
        (Consider changing rect1.width.baseVal.value while 'width' is animated)

        During the last year we prepared our animation code to turn on animVal support.
        This patch adds the last missing pieces to turn on animVal support for the SVGLength.
        SVGLengthList and all other types will follow, one after the other.

        I've decided to write an exhaustive ChangeLog, as this as the base for any future
        work in this area - hopefully making this more reviewable.

        Tests: svg/animations/additive-from-to-width-animation.html
               svg/animations/additive-values-width-animation.html
               svg/animations/change-baseVal-while-animating-fill-freeze-2.html
               svg/animations/change-baseVal-while-animating-fill-freeze.html
               svg/animations/change-baseVal-while-animating-fill-remove-2.html
               svg/animations/change-baseVal-while-animating-fill-remove.html
               svg/animations/change-target-while-animating-SVG-property.html
               svg/animations/multiple-animations-fill-freeze.html
               svg/animations/remove-animation-element-while-animation-is-running.html
               svg/repaint/repainting-after-animation-element-removal.svg

        * svg/SVGAnimateElement.cpp: Remove unnecessary std namespace inclusion.
        (WebCore::SVGAnimateElement::SVGAnimateElement): Remove now-obsolete m_aboutToStopAnimation.
        (WebCore::SVGAnimateElement::calculateAnimatedValue): Swap assertion order, to test hasTagName() _before_ casting.
        (WebCore::SVGAnimateElement::resetToBaseValue):
            Stop relying on the cached baseValue (breaking additive="sum"+values animation) for SVG DOM primitive animations.
            Avoid any string roundtrips previously needed to reset the SVGAnimatedType to the base value. Just grab the
            currentBaseValue() from the associated SVGAnimatedProperty, which includes all dynamic changes to the baseVal
            either by SVG DOM or setAttribute() calls - this way we don't need to utilize the buggy cache in SMILTimeContainer,
            which can be removed once all SVG DOM primitive types switched to the new animVal concept.

            NOTE: When multiple animations of the same attribute are applied to a target element, resetToBaseValue() will be called
            for the highest priority SVGSMILElement, on every animation step! Consider two <animate> elements, applied to a target
            <rect> which both animate the 'x' attribute, one from 0s to 2s, the other from 4s to 6s. The last <animate> element
            will reuse the SVGAnimatedType m_animatedType from the first <animate> element, and never create an own m_animatedType.
            When the animation starts the first time at 0s, we update the rect.x.animVals SVGLength* pointer, to point to the
            SVGAnimatedType of the first <animate> element, owning the m_animatedType. From that point on each call to rect.x.animVal
            will always return the same value as the SVGAnimatedType of the first <animate> element holds. Now after 2s the first
            <animate> element becomes inactive, but its m_animatedType remains alive. The bindings don't notice this change at all.
            Now at 4s, the second animation element gets active. It reuses the SVGAnimatedType of the first <animate> element, and
            applies its animation changes to that SVGAnimatedType, which is immediately reflected in the bindings w/o any additional
            work. It's very important for the understanding when animationStarted/animationEnded need to be called.

        (WebCore::SVGAnimateElement::applyResultsToTarget): Remove now-obsolete m_aboutToStopAnimation logic. No need to know it at this point.
        (WebCore::SVGAnimateElement::targetElementWillChange):
            Renamed from targetElementDidChange(). This method is called from SVGSMILElement for following conditions:
            - animation element is destructed
            - animation element is removed from document
            - target element of animation is destructed
            - target element of animation is removed from document
            - target element of animation changes id

            Whenever any of this happens, we need to reset the animVal. Resetting the animVal involves resetting the PropertyType* pointer,
            eg. SVGLength*, from the animVal property tear off, belonging to a certain SVGAnimatedProperty (eg. rect.x) to the initial
            value again, which is the 'm_x' of the SVGRectElement. This is needed as the SVGAnimatedType the animVal currently points to,
            if an animation is/was running, is destructed in targetElementWillChange(), to reset the SVGAnimateElement to the initial
            state before it received a target. This is the only place which destructed the m_animatedType, and thus the only place that
            needs to take care of resetting the animVal pointers.

        * svg/SVGAnimatedLength.cpp:
        (WebCore::SVGAnimatedLengthAnimator::constructFromCopy):
            Add a new constructFromCopy(SVGGenericAnimatedType) function to SVGAnimatedLengthAnimator.
            It takes a type-unsafe SVGGenericAnimatedType - the caller has to guarantee the type matches.
            This is strictly enforced for the single caller of constructFromCopy, and guaranteed to be safe.

        * svg/SVGAnimatedLength.h: Add new constructFromCopy method, which is used to avoid string-roundtrips when resetting to base values.
        * svg/SVGAnimatedType.cpp:
        (WebCore::SVGAnimatedType::supportsAnimVal): Only returns true for AnimatedLength, for now.
        (WebCore::SVGAnimatedType::setVariantValue): Takes a SVGGenericAnimatedType, assuming the type matches. Callers have to guarantee type-safety!
        * svg/SVGAnimatedType.h:
        (SVGAnimatedType): Add new static supportsAnimVal(AnimatedPropertyType) function.
        (WebCore::SVGAnimatedType::variantValue): Add a generic accessor for all animated types, called variant(). Only one place uses this.
        * svg/SVGAnimatedTypeAnimator.h:
        (WebCore::SVGAnimatedTypeAnimator::constructFromCopy):
            New method to construct an eg. SVGAnimatedLengthAnimator right from a SVGLength, instead of a String.
            In that case the SVGAnimatedType just stores a pointer to the underlying SVGLength, no copying and or other roundtrips involved.

        * svg/SVGAnimationElement.cpp:
        (WebCore::SVGAnimationElement::svgAttributeChanged):
            Implement this instead of attributeChanged. The previous implementation reset the animation state to Inactive, causing a full
            rebuild, whenever any attribute changes, even though it might not be related for the animation element, eg.
            animate.setAttribute("stdDeviationX", "foobar"). Fix that by checking if we support the attribute (keyTimes/keySplines/etc..)
            , if not pass it on to SVGSMILElement (which supports begin/end/etc..) to check if it can handle that.

        (WebCore::SVGAnimationElement::animationAttributeChanged):
            Called from our svgAttributeChanged, and/or from SVGSMILElement::svgAttributeChanged, whenever a _known_ attribute has changed.
            This sledgehammer should be used with care, instead of each time attributeChanged() is called :-)

        (WebCore::setTargetAttributeAnimatedCSSValue):
            Remove support for removing properties from the override style sheet. I've added this optimization too early, we should reevaluate
            this once more types support animVal. It currently complexifies the logic too much, requiring setAttributeAnimatedValue to know
            if the animation ends (and that's not easy to figure out, at least not using started/endedActiveInterval, as I anticipated).

        (WebCore::findMatchingAnimatedProperty):
            Add helper functions which retrieves a SVGAnimatedProperty* for a given SVGElement* targetElement, an attributeName, and an attribute
            type. eg. findMatchingAnimatedProperty(myRectElement, SVGNames::xAttr, AnimatedLength) returns the SVGAnimatedProperty which is
            exposed to JS, that holds: SVGProperty* baseVal, and SVGProperty* animVal. (Lazily created if they got accessed from JS.). This is
            used to update the animVal pointing to a new eg. SVGLength* value, once animation has started, to make rect->x() return that new
            SVGLength* value (internally), and to reflect the current animated value in rect.x.animVal.value from JS.

        (WebCore::SVGAnimationElement::applyAnimatedValue): Refactored from setTargetAttributeAnimatedValue, to simplify the code.
        (WebCore::notifyAnimatedPropertyAboutAnimationBeginEnd):
            Helper function to share code betweeen animationStarted/animationEnded.
            It takes a SVGAnimatedProperty* and a SVGAnimatedType* which may be zero, indicating that the animation ended.
            It calls animationStarted/animationEnded on the given SVGAnimatedProperty, to update the animVal state.
            It also figures out all instances of the target element, and their SVGAnimatedProperties that may need updating.

        (WebCore::SVGAnimationElement::animationStarted): Uses the helper above, passing on the given animatedType.
        (WebCore::SVGAnimationElement::animationEnded): Uses the helper above, passing 0 as animatedType.
        (WebCore::InstanceUpdateBlocker::InstanceUpdateBlocker):
            Added new helper struct, doing element->setInstancesUpdatedBlock(true) on construction and setInstancesUpdatesBlocked(false) on
            destruction, making it impossible to forget one. If we ever rewrite svgAttributeChanged & co to auto-update the cloned instances,
            this can go away.

        (WebCore::SVGAnimationElement::setTargetAttributeAnimatedValue):
            Now takes an SVGAnimatedType* instead of a String parameter. In order to avoid string-roundtrips for animVal support, let us
            decide if we need to construct a String out of it, or not. For animations supporting animVal (only SVGLength) we don't need
            to update any attribute or animVal pointer here, that happens automatically! We only need to notify the targetElement eg,
            that its xAttr changed! Previously we had to call targetElement->setAttribute("x", "...") on every animation step for
            SVGLength animations - that's gone now! The SVGAnimatedType pointers remains the same during the whole animation, so there's
            no need to call animationStarted() at each animated step!

        (WebCore::SVGAnimationElement::animatedPropertyForType):
            Helper function returning a SVGAnimatedProperty* for the current target element & current target attribute, if the
            current animation is running on a type supporting animVal (SVGLength), or returning 0. This is needed for SVGAnimateElement.
            Reuses the existing findMatchingAnimatedProperty code.

        * svg/SVGAnimationElement.h:
        * svg/animation/SMILTimeContainer.cpp:
        (WebCore::SMILTimeContainer::updateAnimations):
            Add comment to clarify why caching baseValues is just wrong. For SVGLength animations the problem is now gone.
            This is exercised using the new additive-from-to-width-animation.html & additive-values-width-animation.html tests.

        * svg/animation/SVGSMILElement.cpp:
        (WebCore::SVGSMILElement::removedFromDocument):
            Since animVal requires that the SVGAnimatedProperties are correctly reset if an animation element is removed from the document,
            we have to call targetElementWillChange(0) from here. That requires to move the "m_attributeName = anyQName()" line down,
            otherwise targetElementWillChange() would early exit, as no valid attributeName was specified.
            
            This is verified using the new svg/animations/remove-animation-element-while-animation-is-running.html
            and svg/repaint/repainting-after-animation-element-removal.svg tests.

        (WebCore::SVGSMILElement::isSupportedAttribute): Add function like all SVG*Elements have identifying their supported attributes.
        (WebCore::SVGSMILElement::svgAttributeChanged):
            Implement svgAttributeChanged instead of attributeChanged. Only take action if the attribute is actually supported.
            If one of the common attributes like begin/end/etc. changed, be sure to call animationAttributeChanged() so that our
            ancestor-classes get notified about this and can take action as well. NOTE: This is not about animating begin/end attributes,
            but about pure DOM changes. begin/end/et.. are not exposed to the SVG DOM, we still reuse the svgAttributeChanged logic
            for consistency. (This does NOT make those attributes animatable, nothing this here as it came up while reviewing).
    
        (WebCore::SVGSMILElement::targetElement): Adapt logic to targetElementDidChange -> targetElementWillChange change.
        (WebCore::SVGSMILElement::targetElementWillChange):
            Renamed from targetElementDidChange. Added "oldTarget" as parameter as well. Our ancestor-classes like SVGAnimateElement
            use this to properly deregister the animVal in the old target, before resetting the SVGAnimatedType, otherwise we'd leave
            dangling pointers around (verified manually by guard malloc runs, that none of this happens).

            Also add a default implementation here in targetElementWillChange, that ancestor classes have to call.
            Now we properly call endedActiveInterval() if the m_activeState is currently Active, so that animations are shut-down
            just like if the animation properly ends (use the same cleanup routines, etc.). Not doing that now leads to assertions.

        (WebCore::SVGSMILElement::resetTargetElement):
            Instead of forcing m_activeState to be inactive, use the standard methods to end the animation.
            targetElementWillChange(m_targetElement, 0) and animationAttributeChanged().

            resetTargetElement() is only called by SVGDocumentExtensions::removeAllAnimationElementsFromTarget() for following conditions:
            - targetElement gets destructed
            - targetElement gets removed from the document
            - targetElement id changes

            If the targetElement gets destructed or removed, no actions need to be taken, as the SVGAnimatedPropertys are teared down
            as well. But if only the id changes, we still have to properly disconnect the animVals - this is all handled through
            targetElementWillChange now - that's why this has to be called from here as well.
            That explains why targetElementWillChange() now needs to check if the targetElement is destructing or not.

        * svg/properties/SVGAnimatedEnumerationPropertyTearOff.h:
            Pass the AnimatedPropertyType from the SVGPropertyInfo to the SVGAnimatedProperties.
            Requires mechanic changes in all SVGAnimated* classes. We need acccess to the AnimatedPropertyType
            to verify the SVGAnimatedType objects, passed to animationStarted, match our type. This is to enforce
            strict type-checking, whenever SVGGenericAnimatedTypes are passed around.

        (WebCore::SVGAnimatedEnumerationPropertyTearOff::create):
        (WebCore::SVGAnimatedEnumerationPropertyTearOff::SVGAnimatedEnumerationPropertyTearOff):
        * svg/properties/SVGAnimatedListPropertyTearOff.h: Ditto.
        (WebCore::SVGAnimatedListPropertyTearOff::create):
        (WebCore::SVGAnimatedListPropertyTearOff::SVGAnimatedListPropertyTearOff):
        * svg/properties/SVGAnimatedPathSegListPropertyTearOff.h: Ditto.
        (WebCore::SVGAnimatedPathSegListPropertyTearOff::create):
        (WebCore::SVGAnimatedPathSegListPropertyTearOff::SVGAnimatedPathSegListPropertyTearOff):
        * svg/properties/SVGAnimatedProperty.h: Store AnimatedPropertyType, add accessors.
        (WebCore::SVGAnimatedProperty::animatedPropertyType): Add accessor.
        (WebCore::SVGAnimatedProperty::animationValueChanged): New animVal related functions to be implemented in the animated tear offs.
        (WebCore::SVGAnimatedProperty::animationStarted): Ditto.
        (WebCore::SVGAnimatedProperty::animationEnded): Ditto.
        (WebCore::SVGAnimatedProperty::currentBaseValue):
            Generic accessor for the baseVal: returns a SVGGenericAnimatedType.
            It takes an AnimatedPropertyType as input, that's only needed to verify that the type we're returning matches
            the expectation of the caller. If not, return 0 to avoid any potential casting mistakes, which would lead to crashes.

        (WebCore::SVGAnimatedProperty::SVGAnimatedProperty): Store m_animatedPropertyType.
        * svg/properties/SVGAnimatedPropertyTearOff.h:
        (WebCore::SVGAnimatedPropertyTearOff::create): Same changes as in the other tear offs: pass around AnimatedPropertyType.
        (WebCore::SVGAnimatedPropertyTearOff::currentBaseValue): Returns &m_property, if the type matches (see above).
        (SVGAnimatedPropertyTearOff): Pass around AnimatedPropertyType.
        (WebCore::SVGAnimatedPropertyTearOff::animationValueChanged): No-op for non list types, don't need to do anything here.
        (WebCore::SVGAnimatedPropertyTearOff::animationStarted):
        (WebCore::SVGAnimatedPropertyTearOff::animationEnded):
            Store the currently animated value in the animVal() property tear off, that's also re-used as-is for the JS bindings.
            As this is important, here's an example of how this affects methods like rect->x() used in the renderers.

            Setting m_isAnimating to true, redirects any rect->x() calls that previously returned rect->m_x, to
            rect->xAnimated()->animVal()->propertyReference() (which returns the same SVGLength& that the SVGAnimatedElement
            m_animatedType contains). Calling rect->setXBaseValue() still modifies rect->m_x, and is used by all parseAttribute()
            methods in svg/ as setAttribute() calls only ever modify the "baseValue", never the current animated value.
            rect.x.baseVal will return a SVGLength object corresponding to rect->m_x.
            rect.x.animVal will return a SVGLength object corresponding to rect->xAnimated()->animVal()->propertyReference().

            These implementation details are all hidden in the SVGAnimatedPropertyMacros. Here's an example from SVGRectElement:
            DECLARE_ANIMATED_LENGTH(X, x) -> Replace PropertyType with 'SVGLength', LowerProperty with 'x', and UpperProperty with 'X'.

            PropertyType& LowerProperty() const
            {
                if (TearOffType* wrapper = SVGAnimatedProperty::lookupWrapper<UseOwnerType, TearOffType, IsDerivedFromSVGElement<UseOwnerType>::value>(this, LowerProperty##PropertyInfo())) {
                    if (wrapper->isAnimating())
                        return wrapper->currentAnimatedValue();
                }
                return m_##LowerProperty.value;
            }

            PropertyType& LowerProperty##BaseValue() const
            {
                return m_##LowerProperty.value;
            }

            void set##UpperProperty##BaseValue(const PropertyType& type)
            {
                m_##LowerProperty.value = type;
            }

            Any code outside of svg/, eg. in rendering/svg, does not need to care about any baseVal/animVal differences.
            During layout eg. RenderSVGRect calls rect->x().value(someLengthContext) to get the current 'x' as float. If an animation
            is running on that rect element it will automatically retrieve the last set animated value here - all under the hood.
            I hope that sheds some light in those myserious functions, they were designed with animVal in mind, but we never had that until now :-)

        (WebCore::SVGAnimatedPropertyTearOff::SVGAnimatedPropertyTearOff): Pass around AnimatedPropertyType.
        (WebCore::SVGAnimatedPropertyTearOff::~SVGAnimatedPropertyTearOff): Add destructor to debug builds veryifing that m_isAnimating is false.
        * svg/properties/SVGAnimatedStaticPropertyTearOff.h: Ditto.
        (WebCore::SVGAnimatedStaticPropertyTearOff::create):
        (WebCore::SVGAnimatedStaticPropertyTearOff::SVGAnimatedStaticPropertyTearOff):
        * svg/properties/SVGAnimatedTransformListPropertyTearOff.h: Ditto.
        (WebCore::SVGAnimatedTransformListPropertyTearOff::create):
        (WebCore::SVGAnimatedTransformListPropertyTearOff::SVGAnimatedTransformListPropertyTearOff):
        * svg/properties/SVGPropertyInfo.h: Add SVGGenericAnimatedType definition.
        * svg/properties/SVGPropertyTearOff.h: Remove obsolete updateAnimVal method - switched to using setValue directly.

2012-03-13  Luke Macpherson   <macpherson@chromium.org>

        Implement CSSPropertyTextOverflow in CSSStyleApplyProperty.
        https://bugs.webkit.org/show_bug.cgi?id=80934

        Reviewed by Andreas Kling.

        No new tests / refactoring only.

        * css/CSSStyleApplyProperty.cpp:
        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):

2012-03-12  Matt Falkenhagen  <falken@chromium.org>

        Switch Chromium from LocaleToScriptMappingICU.cpp to LocaleToScriptMappingDefault.cpp
        https://bugs.webkit.org/show_bug.cgi?id=80935

        Reviewed by Kent Tamura.

        ICU seems to have issues with non-well-formed locale strings.
        Currently, the only port that uses LocaleToScriptMappingICU.cpp is
        Chromium.

        No new tests. LocaleToScriptMappingDefault.cpp is already used by
        other ports and covered by existing tests.

        * WebCore.gyp/WebCore.gyp:

2012-03-12  Benjamin Poulain  <bpoulain@apple.com>

        Fix IndexedDB build with JSC
        https://bugs.webkit.org/show_bug.cgi?id=80207

        Reviewed by Adam Barth.

        This fixes the build of WebKit when IndexedDB is enabled. Most functions were added
        empty implementation, it compiles but IndexedDB is not working.

        * DerivedSources.make: Added missing IDL files.
        * Modules/indexeddb/IDBDatabaseBackendImpl.h: Fix warnings and build errors.
        (IDBDatabaseBackendImpl):
        * Modules/indexeddb/IDBDatabaseCallbacksImpl.cpp: ditto.
        (WebCore::IDBDatabaseCallbacksImpl::unregisterDatabase): ditto.
        * Modules/indexeddb/IDBFactoryBackendImpl.cpp: ditto.
        (WebCore::IDBFactoryBackendImpl::openBackingStore):
        * Modules/indexeddb/IDBIndexBackendImpl.cpp: ditto.
        (WebCore::IDBIndexBackendImpl::countInternal):
        * Modules/indexeddb/IDBKeyPathBackendImpl.cpp: Fix the method signature and add
        an empty implementation.
        (WebCore):
        (WebCore::IDBKeyPathBackendImpl::createIDBKeysFromSerializedValuesAndKeyPath):
        (WebCore::IDBKeyPathBackendImpl::injectIDBKeyIntoSerializedValue):
        * Modules/indexeddb/IDBObjectStoreBackendImpl.cpp: Fix warnings.
        (WebCore::IDBObjectStoreBackendImpl::countInternal):
        * Modules/indexeddb/IDBPendingTransactionMonitor.cpp: ditto.
        (WebCore::transactions):
        * Modules/indexeddb/IDBRequest.cpp: ditto.
        (WebCore::IDBRequest::resetReadyState):
        * Modules/indexeddb/IDBRequest.h: ditto.
        (WebCore::IDBRequest::onSuccessWithPrefetch):
        (WebCore):
        (WebCore::JSIDBVersionChangeRequest::visitChildren):
        * WebCore.xcodeproj/project.pbxproj:
        * bindings/js/IDBBindingUtilities.cpp:
        (WebCore::createIDBKeyFromValue): Fix the creation of IDBKeys.
        (WebCore::createOptionsObjectFromValue): Add an empty implementation of
        the handling of database options (IDBObjectStoreParameters).
        (WebCore):
        * bindings/js/IDBBindingUtilities.h:
        (WebCore):
        * bindings/js/JSIDBAnyCustom.cpp:
        (WebCore::toJS): Add the missing IDBAny's types.
        * bindings/js/JSIDBKeyCustom.cpp:
        (WebCore::toJS): Add the missing IDBKey's types.
        * bindings/js/JSIDBVersionChangeRequestCustom.cpp: Added.
        IDBVersionChangeRequest has the attribute EventTarget so it requires
        the visitChildren() function. An empty implementation was added.
        * bindings/js/OptionsObject.h: Add an empty implementation.
        (WebCore):
        (OptionsObject):
        (WebCore::OptionsObject::OptionsObject):
        (WebCore::OptionsObject::isObject):
        (WebCore::OptionsObject::isUndefinedOrNull):
        (WebCore::OptionsObject::get):
        (WebCore::OptionsObject::getWithUndefinedOrNullCheck):
        * bindings/js/SerializedScriptValue.cpp: Add the missing functions needed by IndexedDB.
        (WebCore):
        (WebCore::SerializedScriptValue::create):
        (WebCore::SerializedScriptValue::toWireString):
        (WebCore::SerializedScriptValue::createFromWire):
        (WebCore::SerializedScriptValue::numberValue):
        (WebCore::SerializedScriptValue::deserialize):
        * bindings/js/SerializedScriptValue.h:
        (SerializedScriptValue):
        * bindings/scripts/CodeGeneratorJS.pm: Modify the code generator to:
        -Support the IDBKey type correctly.
        -Support the OptionsObject type.
        -Generate valid function call for static functions.
        (GenerateImplementationFunctionCall):
        (JSValueToNative):
        (NativeToJSValue):
        * inspector/InspectorIndexedDBAgent.cpp:
        (WebCore):

2012-03-12  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110529.
        http://trac.webkit.org/changeset/110529
        https://bugs.webkit.org/show_bug.cgi?id=80969

        breaks mac build (Requested by morrita on #webkit).

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::computeUnoccludedContentRect):

2012-03-12  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110524.
        http://trac.webkit.org/changeset/110524
        https://bugs.webkit.org/show_bug.cgi?id=80936

        breaks chromium win build. (Requested by morrita on #webkit).

        * Target.pri:
        * UseV8.cmake:
        * WebCore.gypi:
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateHeader):
        (GenerateNamedConstructorCallback):
        (GenerateImplementation):
        * bindings/scripts/IDLAttributes.txt:
        * bindings/scripts/test/V8/V8Float64Array.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8Float64Array.h:
        (V8Float64Array):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.h:
        (V8TestActiveDOMObject):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.h:
        (V8TestCustomNamedGetter):
        * bindings/scripts/test/V8/V8TestEventConstructor.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestEventConstructor.h:
        (V8TestEventConstructor):
        * bindings/scripts/test/V8/V8TestEventTarget.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestEventTarget.h:
        (V8TestEventTarget):
        * bindings/scripts/test/V8/V8TestInterface.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestInterface.h:
        (V8TestInterface):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.h:
        (V8TestMediaQueryListListener):
        * bindings/scripts/test/V8/V8TestNamedConstructor.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestNamedConstructor.h:
        (V8TestNamedConstructor):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestObj.h:
        (V8TestObj):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.h:
        (V8TestSerializedScriptValueInterface):
        * bindings/v8/NPV8Object.cpp:
        (WebCore::npObjectTypeInfo):
        * bindings/v8/V8GCController.cpp:
        (WebCore::GrouperVisitor::visitDOMWrapper):
        * bindings/v8/WrapperTypeInfo.h:
        (WebCore):
        (WrapperTypeInfo):
        * bindings/v8/custom/V8CSSStyleSheetCustom.cpp: Copied from Source/WebCore/bindings/v8/custom/V8StyleSheetCustom.cpp.
        (WebCore):
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        (WebCore::toV8):
        (WebCore):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp: Copied from Source/WebCore/bindings/v8/custom/V8StyleSheetCustom.cpp.
        (WebCore):
        (WebCore::toV8):
        * bindings/v8/custom/V8HTMLImageElementConstructor.cpp:
        (WebCore):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        (WebCore::toV8):
        (WebCore):
        * bindings/v8/custom/V8StyleSheetCustom.cpp:
        (WebCore::toV8):
        * css/CSSStyleSheet.idl:
        * css/StyleSheet.idl:
        * dom/DOMStringMap.idl:
        * dom/NamedNodeMap.idl:
        * html/DOMTokenList.idl:
        * html/track/TextTrackList.idl:

2012-03-12  Kentaro Hara  <haraken@chromium.org>

        [V8][Refactoring] Remove getCachedWrapperSlow() from V8Bindings.cpp
        https://bugs.webkit.org/show_bug.cgi?id=80924

        Reviewed by Adam Barth.

        getCachedWrapperSlow() is called by getCachedWrapper() only,
        and getCachedWrapperSlow() just calls getCachedWrapperInline().
        Thus, this patch expands getCachedWrapperInline() into getCachedWrapper(),
        and removes getCachedWrapperSlow().

        No tests. No change in behavior.

        * bindings/v8/V8DOMWrapper.cpp:
        * bindings/v8/V8DOMWrapper.h:
        (WebCore::V8DOMWrapper::getCachedWrapper):

2012-03-12  Kentaro Hara  <haraken@chromium.org>

        [V8][Refactoring] Remove existingWrapper() from generated code
        https://bugs.webkit.org/show_bug.cgi?id=80927

        Reviewed by Adam Barth.

        Currently wrap() calls existingWrapper(), and existingWrapper()
        just calls getCachedWrapper(). We can remove existingWrapper() from the generated code.

        Test: bindings/scripts/test/*

        * bindings/scripts/CodeGeneratorV8.pm: Removed existingWrapper().
        (GenerateHeader):
        (GenerateNormalAttrGetter):

        * bindings/scripts/test/V8/V8Float64Array.h: Updated run-bindings-tests results.
        (V8Float64Array):
        (WebCore::V8Float64Array::wrap):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.h:
        (V8TestActiveDOMObject):
        (WebCore::V8TestActiveDOMObject::wrap):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.h:
        (V8TestCustomNamedGetter):
        (WebCore::V8TestCustomNamedGetter::wrap):
        * bindings/scripts/test/V8/V8TestEventConstructor.h:
        (V8TestEventConstructor):
        (WebCore::V8TestEventConstructor::wrap):
        * bindings/scripts/test/V8/V8TestEventTarget.h:
        (V8TestEventTarget):
        (WebCore::V8TestEventTarget::wrap):
        * bindings/scripts/test/V8/V8TestInterface.h:
        (V8TestInterface):
        (WebCore::V8TestInterface::wrap):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.h:
        (V8TestMediaQueryListListener):
        (WebCore::V8TestMediaQueryListListener::wrap):
        * bindings/scripts/test/V8/V8TestNamedConstructor.h:
        (V8TestNamedConstructor):
        (WebCore::V8TestNamedConstructor::wrap):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::TestObjInternal::readOnlyTestObjAttrAttrGetter):
        (WebCore::TestObjInternal::cachedAttribute1AttrGetter):
        (WebCore::TestObjInternal::cachedAttribute2AttrGetter):
        * bindings/scripts/test/V8/V8TestObj.h:
        (V8TestObj):
        (WebCore::V8TestObj::wrap):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.h:
        (V8TestSerializedScriptValueInterface):
        (WebCore::V8TestSerializedScriptValueInterface::wrap):

2012-03-12  Dana Jansens  <danakj@chromium.org>

        [chromium] Use tileRect instead of pointer derefs
        https://bugs.webkit.org/show_bug.cgi?id=80919

        Reviewed by Adrienne Walker.

        Covered by existing tests.

        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::drawTileQuad):

2012-03-12  Hans Muller  <hmuller@adobe.com>

        SVG should support transform-origin and relative values
        https://bugs.webkit.org/show_bug.cgi?id=79068

        Reviewed by Dirk Schulze.

        Added SVG support for the CSS 'transform-origin' property and for percentage
        values in the transform translate function.  The changes conform to
        http://dev.w3.org/csswg/css3-transforms/.

        Tests: svg/transforms/percent-transform-values.xhtml
               svg/transforms/transform-origin-css-property.xhtml

        * css/svg.css:
        (*):
        (html|* > svg):
        Default transform-origin for SVG elements is 0 0.

        * platform/Length.h:
        (WebCore::Length::calcFloatValue):
        Added a calcFloatValue overload whose max parameter (for percent lengths) is a float.
        The original version will be obsolete when the sub-pixel layout support is completed.

        * rendering/style/RenderStyle.cpp:
        * rendering/style/RenderStyle.h:
        (WebCore):
        (WebCore::requireTransformOrigin):
        Transforms that only include translations don't depend on the transform-origin.

        (WebCore::RenderStyle::applyTransform):
        SVG elements interpret non-percentage/keyword transform-origin values relative to their viewport,
        unlike HTML which interprets all transform-origin values relative to the element's origin.
        The new FloatRect applyTransform() function handles SVG semantics. Similarly, SVG elements interpret
        percentage/keyword transform-origin values relative to the origin of their objectBoundingBox(), HTML
        uses the borderBox.  All this per http://dev.w3.org/csswg/css3-transforms/.

        * svg/SVGStyledTransformableElement.cpp:
        (WebCore::SVGStyledTransformableElement::animatedLocalTransform):

2012-03-12  Dana Jansens  <danakj@chromium.org>

        [chromium] Use projectQuad to apply inverse mapRect
        https://bugs.webkit.org/show_bug.cgi?id=80741

        Reviewed by Adrienne Walker.

        Unit test: CCOcclusionTrackerTest3dTransform
                   CCOcclusionTrackerTestPerspectiveTransform
                   CCOcclusionTrackerTestPerspectiveTransformBehindCamera

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::projectQuad):
        (WebCore):
        (WebCore::computeUnoccludedContentRect):

2012-03-12  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Upstream the BlackBerry change to platform/graphics/FontPlatformData.h
        https://bugs.webkit.org/show_bug.cgi?id=80820

        Reviewed by Rob Buis.

        The BlackBerry is using the FontPlatformData from Chromium porting.

        * platform/graphics/FontPlatformData.h:

2012-03-12  Zhenyao Mo  <zmo@google.com>

        After webgl canvas resize, bindings might be lost
        https://bugs.webkit.org/show_bug.cgi?id=80895

        Reviewed by Stephen White.

        Test: fast/canvas/webgl/texture-bindings-uneffected-on-resize.html

        * html/canvas/WebGLRenderingContext.cpp:
        (WebCore):
        (WebCore::WebGLRenderingContext::reshape): recover bindings after reshape.

2012-03-12  Kentaro Hara  <haraken@chromium.org>

        [V8][Refactoring] Remove getWrapper() and getWrapperSlow()
        https://bugs.webkit.org/show_bug.cgi?id=80920

        Reviewed by Adam Barth.

        Now getWrapper() is the same as getExistingWrapper().
        getWrapperSlow() is the same as getExistingWrapperSlow().
        This patch removes getWrapper() and getWrapperSlow().
        Also this patch renames getExistingWrapper() to getCachedWrapper().

        No tests. No change in behavior.

        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateHeader):
        * bindings/v8/V8DOMWrapper.cpp:
        (WebCore::V8DOMWrapper::getWrapperSlow):
        * bindings/v8/V8DOMWrapper.h:
        (WebCore::V8DOMWrapper::getWrapper):
        (V8DOMWrapper):
        * bindings/v8/custom/V8NodeCustom.cpp:
        (WebCore::toV8Slow):

2012-03-12  Erik Arvidsson  <arv@chromium.org>

        [V8] Use v8::V8::AddHiddenReferences instead of SetHiddenValue
        https://bugs.webkit.org/show_bug.cgi?id=80880

        Reviewed by Adam Barth.

        We used to add a hidden property in the getter to the returned wrapper.
        With this patch we instead handle the liveness of the wrapper in the GC phase by
        calling v8::V8::AddHiddenReference.

        To reduce the amount of custom code we need, the V8 code generator now supports
        GenerateIsReachable (as well as CustomIsReachable) which, even though different
        from the JSC attribute, is used in the same cases and takes the same values (even though
        at the moment not all JSC values are supported by V8).

        No new tests. Covered by existing tests.

        * Target.pri:
        * UseV8.cmake:
        * WebCore.gypi:
        * bindings/scripts/CodeGeneratorJS.pm:
        (GetGenerateIsReachable):
        (GetCustomIsReachable):
        (GenerateHeader):
        (GenerateImplementation):
        * bindings/scripts/CodeGeneratorV8.pm:
        (NeedsToVisitDOMWrapper):
        (GetGenerateIsReachable):
        (GetCustomIsReachable):
        (GenerateVisitDOMWrapper):
        (GenerateHeader):
        (GenerateNamedConstructorCallback):
        (GenerateImplementation):
        * bindings/scripts/IDLAttributes.txt:
        * bindings/scripts/test/V8/V8Float64Array.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8Float64Array.h:
        (V8Float64Array):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestActiveDOMObject.h:
        (V8TestActiveDOMObject):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestCustomNamedGetter.h:
        (V8TestCustomNamedGetter):
        * bindings/scripts/test/V8/V8TestEventConstructor.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestEventConstructor.h:
        (V8TestEventConstructor):
        * bindings/scripts/test/V8/V8TestEventTarget.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestEventTarget.h:
        (V8TestEventTarget):
        * bindings/scripts/test/V8/V8TestInterface.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestInterface.h:
        (V8TestInterface):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestMediaQueryListListener.h:
        (V8TestMediaQueryListListener):
        * bindings/scripts/test/V8/V8TestNamedConstructor.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestNamedConstructor.h:
        (V8TestNamedConstructor):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestObj.h:
        (V8TestObj):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.cpp:
        (WebCore):
        * bindings/scripts/test/V8/V8TestSerializedScriptValueInterface.h:
        (V8TestSerializedScriptValueInterface):
        * bindings/v8/NPV8Object.cpp:
        (WebCore::npObjectTypeInfo):
        * bindings/v8/V8GCController.cpp:
        (WebCore::GrouperVisitor::visitDOMWrapper):
        * bindings/v8/WrapperTypeInfo.h:
        (WebCore):
        (WrapperTypeInfo):
        * bindings/v8/custom/V8CSSStyleSheetCustom.cpp: Removed.
        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        * bindings/v8/custom/V8DOMTokenListCustom.cpp: Removed.
        * bindings/v8/custom/V8HTMLImageElementConstructor.cpp:
        (WebCore):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        * bindings/v8/custom/V8StyleSheetCustom.cpp:
        (WebCore::toV8):
        * css/CSSStyleSheet.idl:
        * css/StyleSheet.idl:
        * dom/DOMStringMap.idl:
        * dom/NamedNodeMap.idl:
        * html/DOMTokenList.idl:
        * html/track/TextTrackList.idl:

2012-03-12  Kentaro Hara  <haraken@chromium.org>

        [V8][Refactoring] Make getWrapperSlow() and getExistingWrapperSlow() same
        https://bugs.webkit.org/show_bug.cgi?id=80916

        Reviewed by Adam Barth.

        This is one of the steps for fixing bug 80841.
        This patch makes getWrapperSlow() and getExistingWrapperSlow() same.
        In the next patch, we will remove getExistingWrapper() and getExistingWrapperSlow().

        No tests. No change in behavior.

        * bindings/scripts/CodeGeneratorV8.pm:
        (GenerateHeader):
        * bindings/v8/V8DOMWrapper.cpp:
        (WebCore::V8DOMWrapper::getWrapperSlow):

2012-03-12  Kentaro Hara  <haraken@chromium.org>

        [V8] Refactor some header includes in V8 bindings
        https://bugs.webkit.org/show_bug.cgi?id=80913

        Reviewed by Adam Barth.

        This patch refactors some header includes in V8 bindings
        required for fixing bug 80841.

        No tests. No change in behavior.

        * bindings/v8/DOMDataStore.h:
        (DOMDataStore):
        * bindings/v8/V8DOMMap.h:
        * bindings/v8/V8DOMWrapper.cpp:
        * bindings/v8/V8IsolatedContext.cpp:
        (WebCore::V8IsolatedContext::isolatedContext):
        * bindings/v8/V8IsolatedContext.h:
        (WebCore::V8IsolatedContext::getEntered):
        (V8IsolatedContext):
        * bindings/v8/WorldContextHandle.cpp:

2012-03-12  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110501.
        http://trac.webkit.org/changeset/110501
        https://bugs.webkit.org/show_bug.cgi?id=80908

        Broke the Apple-Win build (Requested by abarth on #webkit).

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * WebCore.pri:
        * WebCore.xcodeproj/project.pbxproj:
        * fileapi/DirectoryEntry.cpp: Renamed from Source/WebCore/Modules/filesystem/DirectoryEntry.cpp.
        (WebCore):
        (WebCore::DirectoryEntry::DirectoryEntry):
        (WebCore::DirectoryEntry::createReader):
        (WebCore::DirectoryEntry::getFile):
        (WebCore::DirectoryEntry::getDirectory):
        (WebCore::DirectoryEntry::removeRecursively):
        * fileapi/DirectoryEntry.h: Renamed from Source/WebCore/Modules/filesystem/DirectoryEntry.h.
        (WebCore):
        (DirectoryEntry):
        (WebCore::DirectoryEntry::create):
        (WebCore::DirectoryEntry::isDirectory):
        * fileapi/DirectoryEntry.idl: Renamed from Source/WebCore/Modules/filesystem/DirectoryEntry.idl.
        * fileapi/DirectoryEntrySync.cpp: Renamed from Source/WebCore/Modules/filesystem/DirectoryEntrySync.cpp.
        (WebCore):
        (WebCore::DirectoryEntrySync::DirectoryEntrySync):
        (WebCore::DirectoryEntrySync::createReader):
        (WebCore::DirectoryEntrySync::getFile):
        (WebCore::DirectoryEntrySync::getDirectory):
        (WebCore::DirectoryEntrySync::removeRecursively):
        * fileapi/DirectoryEntrySync.h: Renamed from Source/WebCore/Modules/filesystem/DirectoryEntrySync.h.
        (WebCore):
        (DirectoryEntrySync):
        (WebCore::DirectoryEntrySync::create):
        (WebCore::DirectoryEntrySync::isDirectory):
        * fileapi/DirectoryEntrySync.idl: Renamed from Source/WebCore/Modules/filesystem/DirectoryEntrySync.idl.
        * fileapi/DirectoryReader.cpp: Renamed from Source/WebCore/Modules/filesystem/DirectoryReader.cpp.
        (WebCore):
        (WebCore::DirectoryReader::DirectoryReader):
        (WebCore::DirectoryReader::readEntries):
        * fileapi/DirectoryReader.h: Renamed from Source/WebCore/Modules/filesystem/DirectoryReader.h.
        (WebCore):
        (DirectoryReader):
        (WebCore::DirectoryReader::create):
        (WebCore::DirectoryReader::filesystem):
        * fileapi/DirectoryReader.idl: Renamed from Source/WebCore/Modules/filesystem/DirectoryReader.idl.
        * fileapi/DirectoryReaderBase.h: Renamed from Source/WebCore/Modules/filesystem/DirectoryReaderBase.h.
        (WebCore):
        (DirectoryReaderBase):
        (WebCore::DirectoryReaderBase::filesystem):
        (WebCore::DirectoryReaderBase::setHasMoreEntries):
        (WebCore::DirectoryReaderBase::DirectoryReaderBase):
        * fileapi/DirectoryReaderSync.cpp: Renamed from Source/WebCore/Modules/filesystem/DirectoryReaderSync.cpp.
        (WebCore):
        (WebCore::DirectoryReaderSync::DirectoryReaderSync):
        (WebCore::DirectoryReaderSync::readEntries):
        * fileapi/DirectoryReaderSync.h: Renamed from Source/WebCore/Modules/filesystem/DirectoryReaderSync.h.
        (WebCore):
        (DirectoryReaderSync):
        (WebCore::DirectoryReaderSync::create):
        * fileapi/DirectoryReaderSync.idl: Renamed from Source/WebCore/Modules/filesystem/DirectoryReaderSync.idl.

2012-03-12  Nico Weber  <thakis@chromium.org>

        [chromium/mac] Make sure libWebKitSystemInterface.a doesn't contain ppc object files.
        https://bugs.webkit.org/show_bug.cgi?id=80902

        Reviewed by Adam Barth.

        Follow-up to http://codereview.chromium.org/9638015/

        No intended behavior change.

        * WebCore.gyp/mac/adjust_visibility.sh:

2012-03-12  Jer Noble  <jer.noble@apple.com>

        WebCore: Add support for AudioNode "tailTime()" and "latencyTime()"
        https://bugs.webkit.org/show_bug.cgi?id=74750

        Reviewed by Chris Rogers.

        No new tests; optimization of existing code path, so covered by existing tests.

        To account for AudioNodes which may generate non-silent audio when fed silent input
        for a certain amount of time after the last non-silent audio data, add two new virtual
        functions tailTime() and latencyTime().

        * webaudio/AudioNode.h:
        (WebCore::AudioNode::tailTime): Added. Pure virtual.
        (WebCore::AudioNode::latencyTime): Added. Pure virtual.
        * platform/audio/AudioProcessor.h:
        (WebCore::AudioProcessor::tailTime): Added. Pure virtual.
        (WebCore::AudioProcessor::latencyTime): Added. Pure virtual.
        * platform/audio/AudioDSPKernel.h:
        (WebCore::AudioDSPKernel::tailTime): Added. Pure virtual.
        (WebCore::AudioDSPKernel::latencyTime): Added. Pure virtual.

        Added tailTime() and latencyTime() overrides to the following classes:
        * platform/audio/AudioDSPKernelProcessor.cpp:
        (WebCore::AudioDSPKernelProcessor::tailTime):
        (WebCore::AudioDSPKernelProcessor::latencyTime):
        * platform/audio/AudioDSPKernelProcessor.h:
        * platform/audio/DynamicsCompressor.h:
        (WebCore::DynamicsCompressor::tailTime):
        (WebCore::DynamicsCompressor::latencyTime):
        * platform/audio/EqualPowerPanner.h:
        * platform/audio/HRTFPanner.cpp:
        (WebCore::HRTFPanner::tailTime):
        (WebCore::HRTFPanner::latencyTime):
        * platform/audio/HRTFPanner.h:
        * platform/audio/Panner.h:
        * webaudio/AudioBasicProcessorNode.cpp:
        (WebCore::AudioBasicProcessorNode::tailTime):
        (WebCore::AudioBasicProcessorNode::latencyTime):
        * webaudio/AudioBasicProcessorNode.h:
        * webaudio/AudioChannelMerger.h:
        * webaudio/AudioChannelSplitter.h:
        * webaudio/AudioDestinationNode.h:
        * webaudio/AudioGainNode.h:
        * webaudio/AudioPannerNode.h:
        * webaudio/AudioSourceNode.h:
        * webaudio/BiquadDSPKernel.cpp:
        (WebCore::BiquadDSPKernel::tailTime):
        (WebCore::BiquadDSPKernel::latencyTime):
        * webaudio/BiquadDSPKernel.h:
        * webaudio/BiquadFilterNode.h:
        * webaudio/ConvolverNode.cpp:
        (WebCore::ConvolverNode::tailTime):
        (WebCore::ConvolverNode::latencyTime):
        * webaudio/ConvolverNode.h:
        * webaudio/DelayDSPKernel.cpp:
        (WebCore::DelayDSPKernel::tailTime):
        (WebCore::DelayDSPKernel::latencyTime):
        * webaudio/DelayDSPKernel.h:
        * webaudio/DelayProcessor.h:
        * webaudio/DynamicsCompressorNode.cpp:
        (WebCore::DynamicsCompressorNode::tailTime):
        (WebCore::DynamicsCompressorNode::latencyTime):
        * webaudio/DynamicsCompressorNode.h:
        * webaudio/JavaScriptAudioNode.cpp:
        (WebCore::JavaScriptAudioNode::tailTime):
        (WebCore::JavaScriptAudioNode::latencyTime):
        * webaudio/JavaScriptAudioNode.h:
        * webaudio/RealtimeAnalyserNode.h:
        * webaudio/WaveShaperDSPKernel.h:

        The following functions were added as support for the new AudioNode and AudioProcessor functions:
        * platform/audio/Biquad.cpp:
        (WebCore::Biquad::latencyFrames):
        * platform/audio/Biquad.h:
        * platform/audio/Reverb.cpp:
        (WebCore::Reverb::latencyFrames):
        * platform/audio/ReverbConvolver.h:
        (WebCore::ReverbConvolver::latencyFrames):

        The following functions were made const-correct:
        * platform/audio/HRTFPanner.h:
        (WebCore::HRTFPanner::fftSize):
        * platform/audio/Reverb.h:
        (WebCore::Reverb::impulseResponseLength):

2012-03-12  Anders Carlsson  <andersca@apple.com>

        WebTileLayers should be opaque
        https://bugs.webkit.org/show_bug.cgi?id=80907
        <rdar://problem/11034390>

        Reviewed by Andreas Kling.

        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::createTileLayer):
        Call -[CALayer setOpaque:] on the newly created WebTileLayer.

2012-03-12  Emil A Eklund  <eae@chromium.org>

        Fix rounding in scrollbar rect calculations
        https://bugs.webkit.org/show_bug.cgi?id=80894

        Reviewed by Eric Seidel.

        Fix usage of subpixel units in RenderScrollbar::buttonRect and
        RenderScrollbar::trackRect.

        No new tests, no new functionality.

        * rendering/LayoutTypes.h:
        (WebCore::isIntegerValue):
        Add dummy isIntegerValue function, will be replaced with actual
        implementation once LayoutUnit is remapped to FractionalLayoutUnit.
        
        * rendering/RenderScrollbar.cpp:
        (WebCore::RenderScrollbar::buttonRect):
        (WebCore::RenderScrollbar::trackRect):
        Change rect calculations to use pixel snapped values.

        * rendering/RenderScrollbarPart.h:
        (RenderScrollbarPart):
        (WebCore::RenderScrollbarPart::marginTop):
        (WebCore::RenderScrollbarPart::marginBottom):
        (WebCore::RenderScrollbarPart::marginLeft):
        (WebCore::RenderScrollbarPart::marginRight):
        Add ASSERT to ensure that scrollbar parts are always aligned to device
        pixels.

2012-03-12  C Anthony Risinger  <anthony@xtfx.me>

        [GObject IDL Parser] STRING argument should be HASHREF
        https://bugs.webkit.org/show_bug.cgi?id=78877

        Reviewed by Kentaro Hara.

        * bindings/scripts/CodeGeneratorGObject.pm:
        (GenerateFunctions): extendedAttributes are hashes, not strings

2012-03-12  Jessie Berlin  <jberlin@apple.com>

        More Windows build fixing.

        Use fully qualified paths for WTF headers.

        * platform/graphics/cg/ImageSourceCGWin.cpp:
        * platform/graphics/win/UniscribeController.h:
        * platform/win/DragImageCGWin.cpp:
        * platform/win/DragImageCairoWin.cpp:
        * platform/win/DragImageWin.cpp:
        * rendering/RenderThemeSafari.cpp:

2012-03-12  Mark Pilgrim  <pilgrim@chromium.org>

        Move DirectoryEntry and DirectoryReader to new Modules/filesystem/ directory
        https://bugs.webkit.org/show_bug.cgi?id=80625

        Reviewed by Adam Barth.

        No new tests, all existing tests pass.

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * Modules/filesystem: Added.
        * Modules/filesystem/DirectoryEntry.cpp: Copied from Source/WebCore/fileapi/DirectoryEntry.cpp.
        * Modules/filesystem/DirectoryEntry.h: Copied from Source/WebCore/fileapi/DirectoryEntry.h.
        * Modules/filesystem/DirectoryEntry.idl: Copied from Source/WebCore/fileapi/DirectoryEntry.idl.
        * Modules/filesystem/DirectoryEntrySync.cpp: Copied from Source/WebCore/fileapi/DirectoryEntrySync.cpp.
        * Modules/filesystem/DirectoryEntrySync.h: Copied from Source/WebCore/fileapi/DirectoryEntrySync.h.
        * Modules/filesystem/DirectoryEntrySync.idl: Copied from Source/WebCore/fileapi/DirectoryEntrySync.idl.
        * Modules/filesystem/DirectoryReader.cpp: Copied from Source/WebCore/fileapi/DirectoryReader.cpp.
        * Modules/filesystem/DirectoryReader.h: Copied from Source/WebCore/fileapi/DirectoryReader.h.
        * Modules/filesystem/DirectoryReader.idl: Copied from Source/WebCore/fileapi/DirectoryReader.idl.
        * Modules/filesystem/DirectoryReaderBase.h: Copied from Source/WebCore/fileapi/DirectoryReaderBase.h.
        * Modules/filesystem/DirectoryReaderSync.cpp: Copied from Source/WebCore/fileapi/DirectoryReaderSync.cpp.
        * Modules/filesystem/DirectoryReaderSync.h: Copied from Source/WebCore/fileapi/DirectoryReaderSync.h.
        * Modules/filesystem/DirectoryReaderSync.idl: Copied from Source/WebCore/fileapi/DirectoryReaderSync.idl.
        * Target.pri:
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * WebCore.pri:
        * WebCore.xcodeproj/project.pbxproj:
        * fileapi/DirectoryEntry.cpp: Removed.
        * fileapi/DirectoryEntry.h: Removed.
        * fileapi/DirectoryEntry.idl: Removed.
        * fileapi/DirectoryEntrySync.cpp: Removed.
        * fileapi/DirectoryEntrySync.h: Removed.
        * fileapi/DirectoryEntrySync.idl: Removed.
        * fileapi/DirectoryReader.cpp: Removed.
        * fileapi/DirectoryReader.h: Removed.
        * fileapi/DirectoryReader.idl: Removed.
        * fileapi/DirectoryReaderBase.h: Removed.
        * fileapi/DirectoryReaderSync.cpp: Removed.
        * fileapi/DirectoryReaderSync.h: Removed.
        * fileapi/DirectoryReaderSync.idl: Removed.

2012-03-12  Brady Eidson  <beidson@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=80903
        InspectorDOMStorageAgent creates a Storage object which is a DOMWindowProperty - Should use the StorageArea directly

        Reviewed by Tim Hatcher.

        No new tests. (No behavior change)

        Changed to hold the StorageArea directly and added a Frame* accessor:
        * inspector/InspectorDOMStorageResource.h:
        (WebCore::InspectorDOMStorageResource::create):
        (WebCore::InspectorDOMStorageResource::storageArea):
        (WebCore::InspectorDOMStorageResource::frame):
        (InspectorDOMStorageResource):

        * inspector/InspectorDOMStorageResource.cpp:
        (WebCore::InspectorDOMStorageResource::InspectorDOMStorageResource):

        * inspector/InspectorDOMStorageAgent.cpp:
        (WebCore::InspectorDOMStorageAgent::getDOMStorageEntries):
        (WebCore::InspectorDOMStorageAgent::setDOMStorageItem):
        (WebCore::InspectorDOMStorageAgent::removeDOMStorageItem):
        (WebCore::InspectorDOMStorageAgent::didUseDOMStorage):

2012-03-12  Brian Salomon  <bsalomon@google.com>

        [Skia] Release CGImage used to apply color space conversion to SkBitmap
        https://bugs.webkit.org/show_bug.cgi?id=80892

        Reviewed by Adam Barth.

        Regressions should be covered by any test that does image decode on the mac.

        * platform/image-decoders/skia/ImageDecoderSkia.cpp:
        (WebCore::resolveColorSpace):

2012-03-12  Levi Weintraub  <leviw@chromium.org>

        Update LayoutUnit usage in RenderMathML* classes
        https://bugs.webkit.org/show_bug.cgi?id=77916

        Reviewed by Eric Seidel.

        The purpose of this patch is to ensure MathML rendering does not regress when
        we switch to sub-pixel layout. A subsequent patch can likely improve MathML's
        rendering when zoom is applied.

        To accomplish this without changing the current heuristics for positioning,
        we continue to use integers for sizes and locations, using pixel snapping
        when communicating with other Rendering classes.

        No new tests. No change in behavior.

        * rendering/mathml/RenderMathMLBlock.cpp:
        (WebCore::RenderMathMLBlock::paint): Cleaning up debug painting to be on
        pixel boundaries instead of subpixel.
        * rendering/mathml/RenderMathMLFraction.cpp:
        (WebCore::RenderMathMLFraction::paint): Reverting to integers for determining
        the vertical offset.
        (WebCore::RenderMathMLFraction::baselinePosition):
        * rendering/mathml/RenderMathMLRoot.cpp:
        (WebCore::RenderMathMLRoot::paint): Using integers for height and width
        and only accumulating pixel snapped values.
        (WebCore::RenderMathMLRoot::layout): Setting padding with integers to
        avoid inconsistent rounding based on the root's location.
        * rendering/mathml/RenderMathMLRow.cpp:
        (WebCore::RenderMathMLRow::layout):
        * rendering/mathml/RenderMathMLSquareRoot.cpp:
        (WebCore::RenderMathMLSquareRoot::paint): See RenderMathMLRoot.
        (WebCore::RenderMathMLSquareRoot::layout): Ditto.
        * rendering/mathml/RenderMathMLUnderOver.cpp:
        (WebCore::getOffsetHeight):
        (WebCore::RenderMathMLUnderOver::layout):

2012-03-12  Anders Carlsson  <andersca@apple.com>

        Use smaller tiles for right and bottom edges
        https://bugs.webkit.org/show_bug.cgi?id=80893
        <rdar://problem/11032873>

        Reviewed by Sam Weinig.

        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::rectForTileIndex):
        Intersect the rect with the tile cache bounds.

        (WebCore::TileCache::revalidateTiles):
        Resize already existing tiles if needed.

        (WebCore::TileCache::createTileLayer):
        This now takes a tile rect. Use setFrame instead of setting the bounds and position separately.

2012-03-12  Enrica Casucci  <enrica@apple.com>

        WebKit2: remove NSPasteboard access for promised data from the WebProcess
        https://bugs.webkit.org/show_bug.cgi?id=80073
        
        Reviewed by Alexey Proskuryakov.

        * WebCore.exp.in: Added two exported methods.
        * platform/mac/FileSystemMac.mm:
        (WebCore::setMetaData): Last parameter in the call to wkSetMetadataURL
        needs to be wrapped in String before casting to NSString.

2012-03-12  Alexey Proskuryakov  <ap@apple.com>

        clang build fix

        * css/CSSPrimitiveValueMappings.h: (WebCore::CSSPrimitiveValue::convertToLength): Reorder
        boolean operators, so that a warning about "use of logical || with constant operand" doesn't
        appear.

2012-03-12  Abhishek Arya  <inferno@chromium.org>

        Crash in Text::splitText due to mutation events.
        https://bugs.webkit.org/show_bug.cgi?id=80828

        Reviewed by Ryosuke Niwa.

        Test: fast/text/split-text-crash.xhtml

        * dom/Range.cpp:
        (WebCore::Range::insertNode): replace m_start.container() calls with ref protected node.

2012-03-12  Kenneth Russell  <kbr@google.com>

        Null argument to texSubImage2D crashes
        https://bugs.webkit.org/show_bug.cgi?id=80778

        Reviewed by Dean Jackson.

        Generate INVALID_VALUE OpenGL error upon receiving null argument.
        Final behavior still being decided on public-webgl mailing list.

        * html/canvas/WebGLRenderingContext.cpp:
        (WebCore):
        (WebCore::WebGLRenderingContext::texImage2D):
        (WebCore::WebGLRenderingContext::texSubImage2D):
        (WebCore::WebGLRenderingContext::validateTexFuncData):
        * html/canvas/WebGLRenderingContext.h:

2012-03-12  Luke Macpherson   <macpherson@chromium.org>

        Remove CSSStyleSelector's convertToLength method and use CSSPrimitiveValue's version directly.
        https://bugs.webkit.org/show_bug.cgi?id=80484

        Reviewed by Julien Chaffraix.

        No new tests / code cleanup only.

        * css/CSSPrimitiveValueMappings.h:
        (WebCore::CSSPrimitiveValue::convertToLength):
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyClip::convertToLength):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):

2012-03-12  Stephen White  <senorblanco@chromium.org>

        [chromium] Restore canvas2D acceleration after context loss.
        https://bugs.webkit.org/show_bug.cgi?id=80629

        Reviewed by James Robinson.

        Covered by existing canvas tests, and manual testing (killing the GPU
        process).

        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
        (WebCore::Canvas2DLayerChromium::create):
        (WebCore::Canvas2DLayerChromium::Canvas2DLayerChromium):
        (WebCore::Canvas2DLayerChromium::setNeedsDisplayRect):
        (WebCore::Canvas2DLayerChromium::drawsContent):
        (WebCore::Canvas2DLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/Canvas2DLayerChromium.h:
        (Canvas2DLayerChromium):
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::applyFilters):
        * platform/graphics/gpu/SharedGraphicsContext3D.cpp:
        (SharedGraphicsContext3DImpl):
        (WebCore::SharedGraphicsContext3DImpl::SharedGraphicsContext3DImpl):
        (WebCore::SharedGraphicsContext3DImpl::get):
        (WebCore):
        (WebCore::SharedGraphicsContext3D::get):
        * platform/graphics/gpu/SharedGraphicsContext3D.h:
        (SharedGraphicsContext3D):
        * platform/graphics/skia/ImageBufferSkia.cpp:
        (WebCore::createAcceleratedCanvas):
        * platform/graphics/skia/PlatformContextSkia.cpp:
        (WebCore::PlatformContextSkia::PlatformContextSkia):
        (WebCore):
        * platform/graphics/skia/PlatformContextSkia.h:
        (WebCore):
        (WebCore::PlatformContextSkia::isAccelerated):
        (WebCore::PlatformContextSkia::setAccelerated):
        (PlatformContextSkia):

2012-03-12  George Staikos  <staikos@webkit.org>

        It doesn't make sense to return const unsigned, and GCC warns about it.
        Remove const.
        https://bugs.webkit.org/show_bug.cgi?id=80790

        Reviewed by Antonio Gomes.

        * platform/graphics/harfbuzz/ComplexTextControllerHarfBuzz.h:
        (WebCore::ComplexTextController::length):
        (WebCore::ComplexTextController::numCodePoints):
        (WebCore::ComplexTextController::offsetX):

2012-03-12  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=80888
        Clear background for NSTextFieldCell is unreliable and not necessary
        -and corresponding-
        <rdar://problem/10663710>

        Reviewed by Dan Bernstein.

        With http://trac.webkit.org/changeset/104240 I thought it was necessary to 
        make NSTextFieldCells draw with a clear background in order to allow styled 
        text fields. That is not actually necessary; we just had a different bug 
        where isControlStyled() was only checking for styled borders on text fields. 
        Text fields can also be styled with backgrounds, so they need the full check.
        * rendering/RenderThemeMac.mm:
        (WebCore::RenderThemeMac::isControlStyled):
        (WebCore::RenderThemeMac::textField):

2012-03-12  Scott Byer  <scottbyer@chromium.org>

        Cleanup obsolete files.
        https://bugs.webkit.org/show_bug.cgi?id=80737

        Reviewed by James Robinson.

        No new code.

        * GNUmakefile.list.am:
        * PlatformWinCE.cmake:
        * Target.pri:
        * WebCore.vcproj/WebCore.vcproj:
        * platform/ScrollAnimatorWin.cpp: Removed.
        * platform/ScrollAnimatorWin.h: Removed.

2012-03-12  Gregg Tavares  <gman@google.com>

        Make texImage2D error for wrong size ArrayBufferView more helpful
        https://bugs.webkit.org/show_bug.cgi?id=80868
        
        It took me about 30 minutes to figure out my texImage2D was failing
        not because my ArrayBufferView was too small but because the default
        alignment is 4. A better error message might help devs find this issue
        faster.

        Reviewed by Kenneth Russell.

        No new tests as no new functionality.

        * html/canvas/WebGLRenderingContext.cpp:
        (WebCore):
        (WebCore::WebGLRenderingContext::validateTexFuncData):

2012-03-12  Tim Horton  <timothy_horton@apple.com>

        Infinite repaint loop with SVGImageCache and deferred repaint timers
        https://bugs.webkit.org/show_bug.cgi?id=78315
        <rdar://problem/10651634>

        Reviewed by Nikolas Zimmermann.

        Only defer image redraw on a timer if we're in layout. This breaks
        the repaint loop while still preventing us from drawing inside layout.

        Completely disable repaint during relayout inside SVGImage::drawSVGToImageBuffer,
        preventing deferred repaint timers from being started during that process.

        No new tests, as the problem only occurs in a nonstandard configuration.

        * page/FrameView.cpp:
        (WebCore::FrameView::FrameView):
        (WebCore::FrameView::reset):
        (WebCore::FrameView::repaintContentRectangle):
        (WebCore::FrameView::endDeferredRepaints):
        (WebCore::FrameView::startDeferredRepaintTimer):
        (WebCore):
        (WebCore::FrameView::doDeferredRepaints):
        (WebCore::FrameView::deferredRepaintTimerFired):
        (WebCore::FrameView::beginDisableRepaints):
        (WebCore::FrameView::endDisableRepaints):
        * page/FrameView.h:
        (FrameView):
        (WebCore::FrameView::repaintsDisabled):
        * rendering/RenderView.cpp:
        (WebCore::RenderView::shouldRepaint):
        * svg/graphics/SVGImage.cpp:
        (WebCore::SVGImage::drawSVGToImageBuffer):
        (WebCore::SVGImage::draw):
        (WebCore::SVGImage::frameView):
        (WebCore):
        * svg/graphics/SVGImage.h:
        (WebCore):
        * svg/graphics/SVGImageCache.cpp:
        (WebCore::SVGImageCache::imageContentChanged):
        (WebCore::SVGImageCache::redraw):
        (WebCore::SVGImageCache::redrawTimerFired):
        (WebCore):
        * svg/graphics/SVGImageCache.h:
        (SVGImageCache):

2012-03-12  Adam Klein  <adamk@chromium.org>

        [MutationObservers] Enforce a consistent order of MutationRecord delivery
        https://bugs.webkit.org/show_bug.cgi?id=80549

        Reviewed by Ojan Vafai.

        Mutations should be delivered in order of creation.

        Tests: fast/mutation/create-during-delivery.html
               fast/mutation/delivery-order.html
               fast/mutation/mutate-during-delivery.html

        * dom/WebKitMutationObserver.cpp:
        (WebCore):
        (WebCore::WebKitMutationObserver::ObserverLessThan::operator()): Functor for use with std::sort.
        (WebCore::WebKitMutationObserver::create):
        (WebCore::WebKitMutationObserver::WebKitMutationObserver):
        (WebCore::WebKitMutationObserver::deliverAllMutations): Move observers into a sorted vector before delivery.
        * dom/WebKitMutationObserver.h: Add a "priority" member which monotonically increases with each construction.

2012-03-12  Nat Duca  <nduca@chromium.org>

        [Chromium] Force compositeAndReadback through regular scheduling flow
        https://bugs.webkit.org/show_bug.cgi?id=77049

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCFrameRateController.cpp:
        (WebCore::CCFrameRateController::onTimerTick):
        * platform/graphics/chromium/cc/CCFrameRateController.h:
        (CCFrameRateControllerClient):
        * platform/graphics/chromium/cc/CCScheduler.cpp:
        (WebCore::CCScheduler::setNeedsForcedCommit):
        (WebCore):
        (WebCore::CCScheduler::vsyncTick):
        * platform/graphics/chromium/cc/CCScheduler.h:
        (CCScheduler):
        * platform/graphics/chromium/cc/CCSchedulerStateMachine.cpp:
        (WebCore::CCSchedulerStateMachine::CCSchedulerStateMachine):
        (WebCore::CCSchedulerStateMachine::nextAction):
        (WebCore::CCSchedulerStateMachine::updateState):
        (WebCore::CCSchedulerStateMachine::setNeedsForcedCommit):
        (WebCore):
        * platform/graphics/chromium/cc/CCSchedulerStateMachine.h:
        (CCSchedulerStateMachine):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::CCThreadProxy):
        (WebCore::CCThreadProxy::compositeAndReadback):
        (WebCore::CCThreadProxy::requestReadbackOnImplThread):
        (WebCore::CCThreadProxy::forceBeginFrameOnImplThread):
        (WebCore::CCThreadProxy::scheduledActionBeginFrame):
        (WebCore::CCThreadProxy::beginFrame):
        * platform/graphics/chromium/cc/CCThreadProxy.h:
        (CCThreadProxy):
        (WebCore::CCThreadProxy::BeginFrameAndCommitState::BeginFrameAndCommitState):
        (BeginFrameAndCommitState):

2012-03-12  Joshua Bell  <jsbell@chromium.org>

        IndexedDB: Handle LevelDB database corruption
        https://bugs.webkit.org/show_bug.cgi?id=79413

        Add LevelDBDatabase::destroy() method so that clients can retry if open() fails.

        Reviewed by Tony Chang.

        Test: webkit_unit_tests --gtest_filter='LevelDBDatabaseTest.CorruptionTest'

        * Modules/indexeddb/IDBLevelDBBackingStore.cpp: Implement open/destroy/open strategy.
        (WebCore::IDBLevelDBBackingStore::open):
        * platform/leveldb/LevelDBDatabase.cpp:
        (WebCore::LevelDBDatabase::destroy):
        (WebCore):
        * platform/leveldb/LevelDBDatabase.h:
        (LevelDBDatabase):

2012-03-11  Shawn Singh  <shawnsingh@chromium.org>

        Fix regression on fast/table/table-row-compositing-repaint-crash.html
        https://bugs.webkit.org/show_bug.cgi?id=80804

        Reviewed by Simon Fraser.

        Covered by existing tests.

        http://trac.webkit.org/changeset/110401/ accidentally caused
        fast/table/table-row-compositing-repaint-crash.html to fail.

        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::updateBacking):

2012-03-12  Mike Lawther  <mikelawther@chromium.org>

        CSS3 calc: enable mixed percent/absolute for font
        https://bugs.webkit.org/show_bug.cgi?id=80813

        Reviewed by Ojan Vafai.

        Add support for mixed percent/absolute expressions to the font handling class.

        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyFontSize::applyValue):

2012-03-12  Andreas Kling  <awesomekling@apple.com>

        Restore Attr::style() functionality.
        <http://webkit.org/b/80678>
        <rdar://problem/10933904>

        Reviewed by Antti Koivisto.

        The neutering of Attr::style() in r106740 broke some internal clients of the Obj-C API,
        so this was definitely premature.

        Since we no longer have a per-Attribute style object, synthesize one in style() and
        hang it off of the Attr. This grows Attr by one pointer, but it's a low-volume object
        so it shouldn't matter much.

        We recreate the StylePropertySet object on every call to style(), to avoid complicating
        things with custom invalidation code.

        * dom/Attr.cpp:
        (WebCore::Attr::style):
        * dom/Attr.h:
        * dom/StyledElement.h:
        (WebCore::StyledElement::collectStyleForAttribute):

2012-03-12  Ryosuke Niwa  <rniwa@webkit.org>

        REGRESSION(r109285): Crash in WebCore::Document::nodeChildrenWillBeRemoved
        https://bugs.webkit.org/show_bug.cgi?id=80578

        Reviewed by Andreas Kling.

        Test: svg/css/style-change-crash.html

        * dom/Element.cpp:
        (WebCore::Element::setAttribute):
        (WebCore::Element::setAttributeInternal):
        * dom/Element.h:
        (Element):
        * dom/ElementAttributeData.cpp:
        (WebCore::ElementAttributeData::addAttribute):
        (WebCore::ElementAttributeData::removeAttribute):
        * dom/ElementAttributeData.h:
        (ElementAttributeData):
        * dom/StyledElement.cpp:
        (WebCore::StyledElement::updateStyleAttribute):

2012-03-12  Sadrul Habib Chowdhury  <sadrul@chromium.org>

        Touch event handler count is not updated when adding handlers to the window.
        https://bugs.webkit.org/show_bug.cgi?id=80756

        Touch event handlers added to the window needs to be included when counting the number of touch event
        handlers. This makes touch event handler counting identical to wheel event handler counting.

        Reviewed by Anders Carlsson.

        Test: fast/events/touch/touch-handler-count.html

        * dom/EventNames.h:
        (EventNames):
        (WebCore::EventNames::isTouchEventType):
        * dom/Node.cpp:
        (WebCore):
        (WebCore::tryAddEventListener):
        (WebCore::tryRemoveEventListener):
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::addEventListener):
        (WebCore::DOMWindow::removeEventListener):
        * testing/Internals.cpp:
        (WebCore::Internals::touchEventHandlerCount):
        (WebCore):
        * testing/Internals.h:
        (Internals):
        * testing/Internals.idl:

2012-03-12  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: extract ResourceScriptMapping from MainScriptMapping.
        https://bugs.webkit.org/show_bug.cgi?id=80834

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/ScriptMapping.js:
        (WebInspector.ResourceScriptMapping):
        (WebInspector.ResourceScriptMapping.prototype._uiSourceCodeListChanged):
        (WebInspector.ResourceScriptMapping.prototype.reset):
        (WebInspector.MainScriptMapping):
        (WebInspector.MainScriptMapping.prototype.rawLocationToUILocation):
        (WebInspector.MainScriptMapping.prototype.createLiveLocation):
        (WebInspector.MainScriptMapping.prototype._registerLiveLocation):
        (WebInspector.MainScriptMapping.prototype._unregisterLiveLocation):
        (WebInspector.MainScriptMapping.prototype._updateLiveLocations):
        (WebInspector.MainScriptMapping.prototype.uiSourceCodeList):
        (WebInspector.MainScriptMapping.prototype.addScript):
        (WebInspector.MainScriptMapping.prototype._handleUISourceCodeListChanged):
        (WebInspector.MainScriptMapping.prototype.setFormatSource):
        (WebInspector.MainScriptMapping.prototype.forceUpdateSourceMapping):
        (WebInspector.MainScriptMapping.prototype.reset):

2012-03-12  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: recognize Float*Array and Int*Array as arrays.
        https://bugs.webkit.org/show_bug.cgi?id=80850

        Reviewed by Vsevolod Vlasov.

        Test: inspector/console/console-external-array.html

        * bindings/js/JSInjectedScriptHostCustom.cpp:
        (WebCore::JSInjectedScriptHost::type):
        * bindings/v8/custom/V8InjectedScriptHostCustom.cpp:
        (WebCore::V8InjectedScriptHost::typeCallback):

2012-03-12  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        [TexMapGL] Pixel-align the transform of textures that fit pixel-for-pixel on the frame buffer.
        https://bugs.webkit.org/show_bug.cgi?id=80848

        Reviewed by Noam Rosenthal.

        When rendering a transformed texture on the screen with a fractional
        coordinate with linear filtering, the resulting pixel will be blended from
        the texels around this fractional position according to their cover ratio.
        This produces a slight blur of pixels which give no benefit when rendering
        a texture that isn't scaled.

        This patch offsets the transform by rounding the translation part of the
        layer's transform to align the result to integer coordinates.
        Applying the adjustment on the layer transform makes sure that all the tiles
        get the same adjustment.

        * platform/graphics/qt/GraphicsContext3DQt.cpp:
        (WebCore::GraphicsContext3DPrivate::paintToTextureMapper):
        * platform/graphics/texmap/TextureMapperGL.cpp:
        (WebCore::TextureMapperGL::drawTexture):
        * platform/graphics/texmap/TextureMapperGL.h:
        (WebCore::BitmapTextureGL::textureSize):

2012-03-12  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        [TexMapGL] Use textures sized exactly to their contents.
        https://bugs.webkit.org/show_bug.cgi?id=80845

        Reviewed by Noam Rosenthal.

        This fixes a regression introduced in r108273 as well as the bug it fixed.
        The regressing behavior was that textures were rendered shrunk by 1 pixel
        and thus would appear blurry on the screen.
        The original problem was that garbage contents would appear on filtered
        textures since we would reuse textures of different sizes by giving them
        a slightly bigger size.

        This patch will reuse the texture only if the size matches exactly to allow
        edge clamping to work properly when redering with linear filtering.
        Reusing textures would only saves us the allocation of graphic memory
        anyway, which is negligeable compared to texture upload.

        * platform/graphics/qt/GraphicsContext3DQt.cpp:
        (WebCore::GraphicsContext3DPrivate::paintToTextureMapper):
        * platform/graphics/texmap/TextureMapperGL.cpp:
        (WebCore::TextureMapperGL::drawTexture):
        (WebCore::BitmapTextureGL::didReset):
        * platform/graphics/texmap/TextureMapperGL.h:
        (BitmapTextureGL):
        * platform/graphics/texmap/TextureMapperShaderManager.cpp:
        (WebCore::TextureMapperShaderProgramOpacityAndMask::TextureMapperShaderProgramOpacityAndMask):
        (WebCore::TextureMapperShaderProgramOpacityAndMask::prepare):
        * platform/graphics/texmap/TextureMapperShaderManager.h:
        (TextureMapperShaderProgramOpacityAndMask):

2012-03-12  Jocelyn Turcotte  <jocelyn.turcotte@nokia.com>

        [TexMap] Remove BitmapTexture::destroy.
        https://bugs.webkit.org/show_bug.cgi?id=80844

        Reviewed by Noam Rosenthal.

        Use the destructor directly instead.

        * platform/graphics/texmap/TextureMapper.h:
        * platform/graphics/texmap/TextureMapperGL.cpp:
        (WebCore::BitmapTextureGL::~BitmapTextureGL):
        * platform/graphics/texmap/TextureMapperGL.h:
        (BitmapTextureGL):
        * platform/graphics/texmap/TextureMapperImageBuffer.h:
        (WebCore::BitmapTextureImageBuffer::~BitmapTextureImageBuffer):

2012-03-12  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: DebuggerModel.Location should have scriptId property.
        https://bugs.webkit.org/show_bug.cgi?id=80830

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/CompilerSourceMapping.js:
        (WebInspector.ClosureCompilerSourceMapping.prototype.sourceLocationToCompiledLocation):
        * inspector/front-end/ConsoleMessage.js:
        (WebInspector.ConsoleMessageImpl.prototype.location):
        * inspector/front-end/DebuggerModel.js:
        (WebInspector.DebuggerModel.Location):
        (WebInspector.DebuggerModel.prototype._failedToParseScriptSource):
        (WebInspector.DebuggerModel.prototype.createRawLocation):
        (WebInspector.DebuggerModel.prototype.createRawLocationByURL):
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype._consoleMessageAdded):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessageToScript):
        (WebInspector.DebuggerPresentationModel.prototype._addPendingConsoleMessagesToScript):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype._uiSourceCodeForResource):
        (WebInspector.DebuggerPresentationModel.Linkifier.prototype.linkifyLocation):
        * inspector/front-end/RawSourceCode.js:
        (WebInspector.RawSourceCode.PlainSourceMapping.prototype.uiLocationToRawLocation):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.rawLocationToUILocation):
        (WebInspector.RawSourceCode.FormattedSourceMapping.prototype.uiLocationToRawLocation):
        (WebInspector.RawSourceCode.CompilerSourceMapping.prototype.uiLocationToRawLocation):
        * inspector/front-end/ScriptFormatter.js:
        (WebInspector.ScriptFormatter.locationToPosition):
        (WebInspector.ScriptFormatter.positionToLocation):
        (WebInspector.FormattedSourceMapping.prototype.originalToFormatted):
        (WebInspector.FormattedSourceMapping.prototype.formattedToOriginal):

2012-03-12  Dana Jansens  <danakj@chromium.org>

        [chromium] A couple early-outs for occlusion tracker
        https://bugs.webkit.org/show_bug.cgi?id=80742

        Reviewed by Adrienne Walker.

        Covered by existing tests.

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::::occluded):
        (WebCore::::unoccludedContentRect):

2012-03-12  Zeno Albisser  <zeno@webkit.org>

        [Qt][Mac] Build fails after adding WebCoreCFAutorelease(CFTypeRef) (r110360).
        https://bugs.webkit.org/show_bug.cgi?id=80840

        CoreFoundation/CFBase.h needs to be included to define the type CFTypeRef.

        Reviewed by Tor Arne Vestbø.

        * platform/mac/WebCoreObjCExtras.h:

2012-03-12  George Staikos  <staikos@webkit.org>

        Remove unused global static variable for BlackBerry.
        https://bugs.webkit.org/show_bug.cgi?id=80790

        Reviewed by Alexey Proskuryakov.

        * platform/graphics/gpu/DrawingBuffer.cpp:
        (WebCore):

2012-03-12  George Staikos  <staikos@webkit.org>

        Correct usage of NDEBUG to fix warnings on BlackBerry.
        https://bugs.webkit.org/show_bug.cgi?id=80790

        Reviewed by Alexey Proskuryakov.

        * platform/blackberry/CookieDatabaseBackingStore/CookieDatabaseBackingStore.cpp:
        (WebCore::CookieDatabaseBackingStore::sendChangesToDatabase):
        * platform/blackberry/CookieManager.cpp:
        (WebCore::CookieManager::initiateCookieLimitCleanUp):

2012-03-12  Ilya Tikhonovsky  <loislo@chromium.org>

        Re-apply the patch after v8 roll to r11000.

        Web Inspector: move heap snapshot nodes data to external array.
        https://bugs.webkit.org/show_bug.cgi?id=79911

        Reviewed by Vsevolod Vlasov.

        Tests:
        heap-shapshot.html
        heap-shapshot-loader.html

        * inspector/front-end/HeapSnapshot.js:
        (WebInspector.Int32Array):
        (WebInspector.Int32Array.prototype.get array):
        (WebInspector.HeapSnapshotLoader.prototype._parseNodes):
        (WebInspector.HeapSnapshotLoader.prototype.pushJSONChunk):
        (WebInspector.HeapSnapshot):
        (WebInspector.HeapSnapshot.prototype._init):

2012-03-12  Simon Hausmann  <simon.hausmann@nokia.com>

        [Qt] Fix build with newer Qt 5.

        Reviewed by Tor Arne Vestbø.

        * platform/qt/RenderThemeQt.cpp:
        (WebCore::RenderThemeQt::fileListNameForWidth): Use DefaultCodec instead of the
        deprecated CodecForTR.

2012-03-12  Hans Wennborg  <hans@chromium.org>

        Speech JavaScript API: SpeechRecognitionEvent
        https://bugs.webkit.org/show_bug.cgi?id=80513

        Reviewed by Adam Barth.

        Implement SpeechRecognitionEvent.
        (Spec: http://speech-javascript-api-spec.googlecode.com/git/speechapi.html)

        Test: fast/events/constructors/speech-recognition-event-constructor.html

        * Modules/speech/DOMWindowSpeech.idl:
        * Modules/speech/SpeechRecognitionEvent.cpp: Added.
        (WebCore):
        (WebCore::SpeechRecognitionEventInit::SpeechRecognitionEventInit):
        (WebCore::SpeechRecognitionEvent::create):
        (WebCore::SpeechRecognitionEvent::createResult):
        (WebCore::SpeechRecognitionEvent::createNoMatch):
        (WebCore::SpeechRecognitionEvent::createResultDeleted):
        (WebCore::SpeechRecognitionEvent::createError):
        (WebCore::SpeechRecognitionEvent::interfaceName):
        (WebCore::SpeechRecognitionEvent::SpeechRecognitionEvent):
        * Modules/speech/SpeechRecognitionEvent.h: Added.
        (WebCore):
        (SpeechRecognitionEventInit):
        (SpeechRecognitionEvent):
        (WebCore::SpeechRecognitionEvent::result):
        (WebCore::SpeechRecognitionEvent::error):
        (WebCore::SpeechRecognitionEvent::resultIndex):
        (WebCore::SpeechRecognitionEvent::resultHistory):
        * Modules/speech/SpeechRecognitionEvent.idl:
        * WebCore.gypi:
        * bindings/generic/RuntimeEnabledFeatures.h:
        (WebCore::RuntimeEnabledFeatures::webkitSpeechRecognitionEventEnabled):
        * bindings/v8/OptionsObject.cpp:
        (WebCore::OptionsObject::get):
        (WebCore):
        * bindings/v8/OptionsObject.h:
        (WebCore):
        (OptionsObject):
        * dom/EventNames.h:
        (WebCore):
        * dom/EventNames.in:

2012-03-12  Kent Tamura  <tkent@chromium.org>

        Use ICU C API instead of C++ API in LocalizedNumberICU
        https://bugs.webkit.org/show_bug.cgi?id=80815
        https://bugs.gentoo.org/show_bug.cgi?id=407401

        Reviewed by Hajime Morita.

        ICU 4.8 doesn't have kNumberStyle. We had better to use ICU C API in
        general to avoid such issues.

        This patch should not make any behavior change.

        * platform/text/LocalizedNumberICU.cpp:
        (WebCore::ICULocale::ICULocale):
        Change the argument type: icu::Locale -> const char*
        (WebCore::ICULocale::~ICULocale): Delete m_numberFormat with unum_close().
        (WebCore::ICULocale::create): Do not create icu::Locale.
        (WebCore::ICULocale::createForCurrentLocale): ditto.
        (WebCore::ICULocale::setDecimalSymbol):
        Use unum_getSymbol() instead of DecimalFormatSymbols::getSymbol().
        (WebCore::ICULocale::setDecimalTextAttribute):
        Added. A utility function to store prefixes and suffixes.
        (WebCore::ICULocale::initializeDecimalFormat):
        - unum_open(), instead of NumberFormat::createInstance().
        - Use C API symbols.
        - Cache positive/negative prefixes/suffixes.
        (WebCore::ICULocale::convertToLocalizedNumber): Use cached prefixes and suffixes.
        (WebCore::matches): Stop using template because we don't use UString anymore.
        (WebCore::ICULocale::detectSignAndGetDigitRange):
        - Use cached prefixes and suffixes.
        - Use String::startsWith() and endsWith().
        (WebCore::ICULocale::convertFromLocalizedNumber):
        * platform/text/LocalizedNumberICU.h:
        (ICULocale):

2012-03-11  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: decouple LiveLocation from RawSourceCode.
        https://bugs.webkit.org/show_bug.cgi?id=80785

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype.createPlacard):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerPaused):
        (WebInspector.PresentationCallFrame):
        (WebInspector.PresentationCallFrame.prototype.uiLocation):
        (WebInspector.DebuggerPresentationModel.CallFramePlacard):
        * inspector/front-end/RawSourceCode.js:
        * inspector/front-end/ScriptMapping.js:
        (WebInspector.MainScriptMapping):
        (WebInspector.MainScriptMapping.prototype.createLiveLocation):
        (WebInspector.MainScriptMapping.prototype._registerLiveLocation):
        (WebInspector.MainScriptMapping.prototype._unregisterLiveLocation):
        (WebInspector.MainScriptMapping.prototype._updateLiveLocations):
        (WebInspector.MainScriptMapping.prototype._uiSourceCodeListChanged):
        (WebInspector.MainScriptMapping.prototype.reset):
        (WebInspector.LiveLocation):
        (WebInspector.LiveLocation.prototype.init):
        (WebInspector.LiveLocation.prototype.dispose):
        (WebInspector.LiveLocation.prototype._update):

2012-03-11  Victor Carbune  <vcarbune@adobe.com>

        The main code structure for placing future text track cue rendering
        code and main outer rendering steps.
        https://bugs.webkit.org/show_bug.cgi?id=79746

        Reviewed by Eric Carlson.

        No new tests. Only refactoring, but some chromium tests require rebaselining
        and have been marked accordingly.

        * css/mediaControls.css:
        (::-webkit-media-controls): Changed the default display to -webkit-box, as
        captions need to always be rendered on top of the controls, if they are visible.
        (audio::-webkit-media-controls-panel, video::-webkit-media-controls-panel):
        Default position attribute is now relative, handled by the parent -webkit-box
        (video::-webkit-media-text-track-container): The position of the container is
        now relative, handled by -webkit-box.
        (video::-webkit-media-text-track-display): Adjusted text color to match
        the color required in the WebVTT spec (section 3.5.1 'color' property)
        * css/mediaControlsChromium.css:
        (audio::-webkit-media-controls-panel, video::-webkit-media-controls-panel):
        Default position attribute is now relative, handled by the parent -webkit-box

        * html/shadow/MediaControlElements.cpp:
        (WebCore::MediaControlPanelElement::MediaControlPanelElement): Added a timer
        for the webkit fade out transition event. This timer is required for setting
        the display property to 'none', when the fade out transition is over. Otherwise,
        captions would not be displayed at the bottom of the video.
        (WebCore::MediaControlPanelElement::startTimer): Added.
        (WebCore):
        (WebCore::MediaControlPanelElement::stopTimer): Added.
        (WebCore::MediaControlPanelElement::transitionTimerFired): Added. If the current
        state of the controls is transparent, the display property is set to 'none'.
        (WebCore::MediaControlPanelElement::makeOpaque): The inline display:'none' property
        is removed before the fade in transition.
        (WebCore::MediaControlPanelElement::makeTransparent): Added the timer start.
        (WebCore::MediaControlTextTrackContainerElement::MediaControlTextTrackContainerElement):
        Removed m_bottom as it is not needed anymore.
        (WebCore::MediaControlTextTrackContainerElement::updateDisplay): Added. Main
        function for the rendering rules.
        (WebCore::MediaControlTextTrackContainerElement::updateSizes): The bottom position
        needs not to be set anymore.
        * html/shadow/MediaControlElements.h:
        (MediaControlPanelElement): Added timer internals.
        (MediaControlTextTrackContainerElement): Added updateDisplay() and removed unused
        variables.

        (WebCore):
        * html/shadow/MediaControlRootElement.cpp: Removed m_textTrackDisplay
        and duplicated code with MediaControlRootElementChromium (only minimum
        function calls to the main text track container)
        (WebCore::MediaControlRootElement::MediaControlRootElement):
        (WebCore::MediaControlRootElement::setMediaController):
        (WebCore::MediaControlRootElement::createTextTrackDisplay):
        (WebCore::MediaControlRootElement::updateTextTrackDisplay):

        * html/shadow/MediaControlRootElementChromium.cpp: Removed m_textTrackDisplay
        and duplicate code with MediaControlRootElement (only minimum function calls
        to the main text track container remained)
        (WebCore::MediaControlRootElementChromium::MediaControlRootElementChromium):
        (WebCore::MediaControlRootElementChromium::setMediaController):
        (WebCore::MediaControlRootElementChromium::createTextTrackDisplay):
        (WebCore::MediaControlRootElementChromium::updateTextTrackDisplay):

        (WebCore):
        * html/track/TextTrackCue.cpp: Enhanced structure for supporting more complex
        rendering required by the WebVTT spec.
        (WebCore::TextTrackCue::TextTrackCue):
        (WebCore::TextTrackCue::cueDidChange): Mark the display tree as obsolete, so that
        it needs to be re-computed.
        (WebCore::TextTrackCue::setIsActive): The display tree needs to be removed as
        soon as the cue becomes inactive. Adjusted this method to support the functionality.
        (WebCore):
        (WebCore::TextTrackCue::determineDisplayParameters): Added. This method will hold
        main positioning parameter computations for a TextTrackCue
        (WebCore):
        (WebCore::TextTrackCue::getDisplayTree): Added. This method returns the root node
        of the CSS boxes that need to be displayed on top of the video, for the current
        instance.
        * html/track/TextTrackCue.h:
        (WebCore):
        (TextTrackCue):

2012-03-11  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110359.
        http://trac.webkit.org/changeset/110359
        https://bugs.webkit.org/show_bug.cgi?id=80799

        SelectPopupMenuTest.ClickItem failure (Requested by ukai on
        #webkit).

        * platform/chromium/PopupListBox.cpp:
        (WebCore::PopupListBox::paint):
        (WebCore::PopupListBox::paintRow):
        (WebCore::PopupListBox::getRowHeight):
        * platform/chromium/PopupListBox.h:
        (PopupContainerSettings):
        * platform/chromium/PopupMenuChromium.cpp:
        (WebCore):
        (WebCore::PopupMenuChromium::show):
        * platform/chromium/PopupMenuChromium.h:
        (PopupMenuChromium):
        * rendering/RenderMenuList.cpp:
        (WebCore::RenderMenuList::showPopup):

2012-03-11  Timothy Hatcher  <timothy@apple.com>

        Fix a crash opening the Web Inspector in WebKit1 clients.

        The call to InspectorFrontendClientLocal::setAttachedWindow is preformed really early in the process,
        causing it to crash almost every time. It should use evaluateOnLoad instead of evaluateAsBoolean.

        <rdar://problem/10951109> Crash when bringing up Web Inspector in WebKit1 client
        https://bugs.webkit.org/show_bug.cgi?id=80796

        Reviewed by Brian Weinstein.

        * inspector/InspectorFrontendClientLocal.cpp:
        (WebCore::InspectorFrontendClientLocal::setAttachedWindow): Use evaluateOnLoad instead of evaluateAsBoolean.

2012-03-11  Shawn Singh  <shawnsingh@chromium.org>

        REGRESSION (r93614): scrolling div does not repaint
        https://bugs.webkit.org/show_bug.cgi?id=80641

        Reviewed by Simon Fraser.

        Test: compositing/repaint/newly-composited-repaint-rect.html

        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::updateBacking): When a layer
        becomes newly composited and creates its backing, the repaintRect
        may become invalid. This patch recomputes repaintRects in this
        case.

2012-03-11  George Staikos  <staikos@webkit.org>

        Enable JPEG encoding for BlackBerry.
        https://bugs.webkit.org/show_bug.cgi?id=80792

        Reviewed by Antonio Gomes.

        * PlatformBlackBerry.cmake:

2012-03-11  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: console.log attempts to substitute any "%" character in the message.
        https://bugs.webkit.org/show_bug.cgi?id=80504

        Reviewed by Vsevolod Vlasov.

        Test: inspector/console/console-string-format.html

        * inspector/front-end/AuditRules.js:
        (WebInspector.AuditRules.UnusedCssRule.prototype.doRun.evalCallback.selectorsCallback):
        * inspector/front-end/ProfileDataGridTree.js:
        * inspector/front-end/ProfilesPanel.js:
        (WebInspector.ProfilesPanel.prototype._reportHeapSnapshotProgress):
        * inspector/front-end/utilities.js:

2012-03-11  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: use monotonically increasing time in timeline agent
        https://bugs.webkit.org/show_bug.cgi?id=80786

        Reviewed by Pavel Feldman.

        * bindings/v8/ScriptGCEvent.cpp:
        (WebCore::ScriptGCEvent::gcPrologueCallback):
        (WebCore::ScriptGCEvent::gcEpilogueCallback):
        * inspector/InspectorTimelineAgent.cpp:
        (WebCore::InspectorTimelineAgent::pushGCEventRecords):
        (WebCore::InspectorTimelineAgent::willSendResourceRequest):
        (WebCore::InspectorTimelineAgent::didCompleteCurrentRecord):
        (WebCore::InspectorTimelineAgent::appendRecord):
        (WebCore::InspectorTimelineAgent::pushCurrentRecord):
        (WebCore::InspectorTimelineAgent::timestamp):
        (WebCore):
        * inspector/InspectorTimelineAgent.h:
        (InspectorTimelineAgent):
        (WebCore::InspectorTimelineAgent::timestamp):

2012-03-11  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Network panel does not show responses for application/json data
        https://bugs.webkit.org/show_bug.cgi?id=80684

        Reviewed by Pavel Feldman.

        Test: http/tests/inspector/network/async-xhr-json-mime-type.html

        * inspector/InspectorPageAgent.cpp:
        (WebCore::createXHRTextDecoder):
        (WebCore::InspectorPageAgent::cachedResourceContent):
        * inspector/InspectorPageAgent.h:
        * inspector/NetworkResourcesData.cpp:
        (WebCore::createOtherResourceTextDecoder):
        (WebCore):
        (WebCore::NetworkResourcesData::responseReceived):

2012-03-11  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: CSS content is not shown when stylesheet is loaded with invalid mime type in quirks mode.
        https://bugs.webkit.org/show_bug.cgi?id=80528

        Reviewed by Pavel Feldman.

        Test: http/tests/inspector/resource-tree/resource-tree-invalid-mime-type-css-content.html

        * inspector/InspectorPageAgent.cpp:
        (WebCore::InspectorPageAgent::cachedResourceContent):

2012-03-11  Viatcheslav Ostapenko  <ostapenko.viatcheslav@nokia.com>

        [Qt] [WK2] Support threaded renderer in WK2
        https://bugs.webkit.org/show_bug.cgi?id=76661

        Reviewed by Noam Rosenthal.

        Add TransformationMatrix conversions from/to Qt QMatrix4x4. Used by Qt WebKit2
        rendering and tested by Qt WebKit2 API tests.

        * platform/graphics/qt/TransformationMatrixQt.cpp:
        (WebCore::TransformationMatrix::operator QMatrix4x4):
        (WebCore):
        (WebCore::TransformationMatrix::TransformationMatrix):
        * platform/graphics/transforms/TransformationMatrix.h:
        (TransformationMatrix):

2012-03-09  Jon Lee  <jonlee@apple.com>

        Rename NotificationPresenter to NotificationClient
        https://bugs.webkit.org/show_bug.cgi?id=80488
        <rdar://problem/10965558>

        Reviewed by Kentaro Hara.

        * notifications/NotificationCenter.h: Renamed from notifications/NotificationPresenter.h.

        Refactor to use renamed WebCore::NotificationClient.
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.exp.in:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * notifications/Notification.cpp:
        (WebCore::Notification::Notification):
        (WebCore::Notification::show):
        (WebCore::Notification::cancel):
        (WebCore::Notification::contextDestroyed):
        (WebCore::Notification::finishLoading):
        * notifications/NotificationCenter.cpp:
        (WebCore::NotificationCenter::create):
        (WebCore::NotificationCenter::NotificationCenter):
        (WebCore::NotificationCenter::checkPermission):
        (WebCore::NotificationCenter::requestPermission):
        (WebCore::NotificationCenter::disconnectFrame):
        * notifications/NotificationController.cpp:
        (WebCore::NotificationController::NotificationController):
        (WebCore::NotificationController::create):
        (WebCore::NotificationController::clientFrom):
        (WebCore::provideNotification):
        * notifications/NotificationController.h:
        (WebCore):
        (NotificationController):
        (WebCore::NotificationController::client):
        * page/DOMWindow.cpp:
        (WebCore::DOMWindow::webkitNotifications):
        * page/DOMWindow.h:
        (DOMWindow):
        * workers/WorkerContext.cpp:
        (WebCore::WorkerContext::webkitNotifications):
        * workers/WorkerThread.cpp:
        (WebCore::WorkerThread::WorkerThread):
        * workers/WorkerThread.h:
        (WebCore):
        (WebCore::WorkerThread::getNotificationClient):
        (WebCore::WorkerThread::setNotificationClient):
        (WorkerThread):

2012-03-10  Julien Chaffraix  <jchaffraix@webkit.org>

        RenderObject with 'resize' different from 'none' should have a RenderLayer
        https://bugs.webkit.org/show_bug.cgi?id=80738

        Reviewed by James Robinson.

        Covered by fast/css/resize-single-axis.html.

        * rendering/RenderBox.h:
        (WebCore::RenderBox::requiresLayerForOverflowClip):
        The resizer logic is tied to RenderLayer so force a RenderLayer to be allocated if resize() != RESIZE_NONE.

2012-03-10  Stephen White  <senorblanco@chromium.org>

        Unreviewed, rolling out r110358.
        http://trac.webkit.org/changeset/110358
        https://bugs.webkit.org/show_bug.cgi?id=80706

        No improvement on specified benchmarks.

        * dom/ContainerNode.cpp:
        (WebCore::collectNodes):
        (WebCore::collectTargetNodes):

2012-03-10  MORITA Hajime  <morrita@google.com>

        ShadowTree uses weak iteration patterns
        https://bugs.webkit.org/show_bug.cgi?id=80572

        Reviewed by Dimitri Glazkov.

        Patch by Adam Barth.

        This patch moves various ShadowTree to using a better iteration pattern
        in which we collect all the ShadowRoots we're planning to iterate into
        a vector and then iterate over them.

        * dom/ShadowTree.cpp:
        (ShadowRootVector):
        (WebCore::ShadowRootVector::ShadowRootVector):
        (WebCore):
        (WebCore::ShadowTree::removeAllShadowRoots):
        (WebCore::ShadowTree::insertedIntoDocument):
        (WebCore::ShadowTree::removedFromDocument):
        (WebCore::ShadowTree::insertedIntoTree):
        (WebCore::ShadowTree::removedFromTree):
        (WebCore::ShadowTree::willRemove):

2012-03-10  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110363.
        http://trac.webkit.org/changeset/110363
        https://bugs.webkit.org/show_bug.cgi?id=80757

        link error in chromium: unresolved external symbol
        webkit_support::CreateScopedTempDirectory(void) (Requested by
        ukai_home on #webkit).

        * Modules/indexeddb/IDBLevelDBBackingStore.cpp:
        (WebCore::IDBLevelDBBackingStore::open):
        * platform/leveldb/LevelDBDatabase.cpp:
        * platform/leveldb/LevelDBDatabase.h:
        (LevelDBDatabase):

2012-03-09  Robert Kroeger  <rjkroege@chromium.org>

        Handle more Gesture* events by performing scrolls on the correct target ScrollableArea 
        https://bugs.webkit.org/show_bug.cgi?id=80311

        Implement GestureScroll* events via re-use of WheelEvent dispatch.

        Reviewed by James Robinson.

        Layout tests previously submited as https://bugs.webkit.org/show_bug.cgi?id=80201 and unit
        test added as part of this patch.

        * page/EventHandler.cpp:
        (WebCore::wheelGranularityToScrollGranularity): Refactoring.
        (WebCore):
        (WebCore::scrollNode):
        (WebCore::EventHandler::EventHandler):
        (WebCore::EventHandler::clear):
        (WebCore::EventHandler::handleWheelEvent):
        (WebCore::EventHandler::defaultWheelEventHandler):
        (WebCore::EventHandler::handleGestureEvent): Added GestureScrollBegin & End.
        (WebCore::EventHandler::handleGestureTap):
        (WebCore::EventHandler::handleGestureScrollUpdate):
        (WebCore::EventHandler::handleGestureScrollCore): Refactoring.
        * page/EventHandler.h:
        (EventHandler):
        * platform/PlatformWheelEvent.h: Added additional scroll type.
        * platform/ScrollAnimator.cpp:
        (WebCore::ScrollAnimator::handleWheelEvent): Forward additional scroll type.
        * platform/ScrollAnimator.h:
        (WebCore):
        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::ScrollAnimatorNone): Handle additional scroll type.
        (WebCore::ScrollAnimatorNone::fireUpAnAnimation): 
        (WebCore):
        (WebCore::ScrollAnimatorNone::scroll):
        * platform/ScrollAnimatorNone.h:
        (ScrollAnimatorNone):
        * platform/ScrollTypes.h: Added an additional scroll type.
        * platform/ScrollableArea.cpp:
        (WebCore::ScrollableArea::scroll):

2012-03-09  Erik Arvidsson  <arv@chromium.org>

        [V8] Fix a fixme in v8 bindings
        https://bugs.webkit.org/show_bug.cgi?id=80734

        Reviewed by Kentaro Hara.

        No new tests. Covered by existing tests.

        * bindings/v8/V8Binding.cpp:
        (WebCore::toInt32):
        (WebCore::toUInt32):

2012-03-09  Lauro Neto  <lauro.neto@openbossa.org>

        [Qt] WebCore/Target.pri contains obsolete FileStreamProxy.h reference.
        https://bugs.webkit.org/show_bug.cgi?id=80730

        Reviewed by Tor Arne Vestbø.

        Build fix. Target.pri was still including old FileStreamProxy.h.

        * Target.pri:

2012-03-05 Cem Kocagil  <cem.kocagil@gmail.com>

        Pan scroll icon is painted at incorrect coordinates in frames
        https://bugs.webkit.org/show_bug.cgi?id=79378

        Convert client coordinates to parent ScrollView coordinates

        Reviewed by Antonio Gomes

        * platform/ScrollView.cpp:
        (WebCore::ScrollView::paintPanScrollIcon):

2012-03-09  Joshua Bell  <jsbell@chromium.org>

        IndexedDB: Handle LevelDB database corruption
        https://bugs.webkit.org/show_bug.cgi?id=79413

        Add LevelDBDatabase::destroy() method so that clients can retry if open() fails.

        Reviewed by Tony Chang.

        Test: webkit_unit_tests --gtest_filter='LevelDBDatabaseTest.CorruptionTest'

        * Modules/indexeddb/IDBLevelDBBackingStore.cpp: Implement open/destroy/open strategy.
        (WebCore::IDBLevelDBBackingStore::open):
        * platform/leveldb/LevelDBDatabase.cpp:
        (WebCore::LevelDBDatabase::destroy):
        (WebCore):
        * platform/leveldb/LevelDBDatabase.h:
        (LevelDBDatabase):

2012-03-09  Jessie Berlin  <jberlin@apple.com>

        Fix one of the Windows build warnings.

        * html/track/TextTrackCueList.idl:
        Add a newline to the end of the file.

2012-03-09  Tyler Abbott  <tabbott@rim.com>

        BlackBerry PlayBook doesn't sniff mime types
        https://bugs.webkit.org/show_bug.cgi?id=73869

        Reviewed by Rob Buis.

        Hook up MIMESniffing for BlackBerry. Override Content-Types will
        not be overriden. File extensions will be trusted when content
        is loaded from disk.

        No tests, BlackBerry tests are not yet present in webkit.org codebase.

        * PlatformBlackBerry.cmake:
        * platform/network/blackberry/NetworkJob.cpp:
        (WebCore::NetworkJob::NetworkJob):
        (WebCore::NetworkJob::initialize):
        (WebCore::NetworkJob::handleNotifyDataReceived):
        (WebCore::NetworkJob::sendResponseIfNeeded):
        * platform/network/blackberry/NetworkJob.h:
        (NetworkJob):

2012-03-09  Enrica Casucci  <enrica@apple.com>

        Move WebNSURLExtras code down to WebCore.
        https://bugs.webkit.org/show_bug.cgi?id=80611

        Reviewed by Alexey Proskuryakov.

        * WebCore.exp.in: Added new exported functions.
        * WebCore.xcodeproj/project.pbxproj: Added WebCoreNSURLExtras.*
        * platform/FileSystem.h: Added setMetadataURL.
        * platform/mac/FileSystemMac.mm:
        (WebCore::setMetaData): Added.
        (WebCore::setMetadataURL): Added.
        * platform/mac/WebCoreNSStringExtras.h:
        * platform/mac/WebCoreNSStringExtras.mm:
        (hasCaseInsensitivePrefix): Added.
        * platform/mac/WebCoreNSURLExtras.h: Added.
        * platform/mac/WebCoreNSURLExtras.mm: Added.
        * platform/mac/WebCoreObjCExtras.h:
        * platform/mac/WebCoreSystemInterface.h:
        * platform/mac/WebCoreSystemInterface.mm:

2012-03-09  Tim Dresser  <tdresser@chromium.org>

        [chromium] Increase size of Combo Box Options for touch and high DPI devices
        https://bugs.webkit.org/show_bug.cgi?id=80027

        Reviewed by Darin Fisher.

        Scale Combo box popups by defaultDeviceScaleFactor, and add padding to
        <option> elements when touch is enabled.

        Manually tested with --default-device-scale-factor=1,2 and unset.
        Each of these were tested with RuntimeEnabledFeatures::touchEnabled
        set to true and false.

        * platform/chromium/PopupListBox.cpp:
        (WebCore::PopupListBox::paint):
        (WebCore::PopupListBox::paintRow):
        (WebCore::PopupListBox::getRowHeight):
        * platform/chromium/PopupListBox.h:
        (PopupContainerSettings):
        * platform/chromium/PopupMenuChromium.cpp:
        (WebCore):
        (WebCore::PopupMenuChromium::show):
        * platform/chromium/PopupMenuChromium.h:
        (WebCore::PopupMenuChromium::optionPaddingForTouch):
        (WebCore::PopupMenuChromium::setOptionPaddingForTouch):
        (PopupMenuChromium):
        * rendering/RenderMenuList.cpp:
        (WebCore::RenderMenuList::showPopup):

2012-03-09  Stephen White  <senorblanco@chromium.org>

        Improve ContainerNode collectNode() performance by reserving vector
        capacity up front.
        https://bugs.webkit.org/show_bug.cgi?id=80706

        Reviewed by Ryosuke Niwa.

        Covered by existing tests.  Performance will be evaluated based on
        Chromium's page_cycler_bloat-http, page_cycler_intl1, and
        dromaeo_domcore suites.

        * dom/ContainerNode.cpp:
        (WebCore::collectNodes):

2012-03-09  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/11018851> Crash in DisplayRefreshMonitor::notifyClients()
        https://bugs.webkit.org/show_bug.cgi?id=80740

        Reviewed by Sam Weinig.

        No test, since this race condition cannot be reproduced reliably.

        * platform/graphics/mac/DisplayRefreshMonitorMac.cpp:
        (WebCore::DisplayRefreshMonitor::~DisplayRefreshMonitor): Changed to stop the display link
        first, then cancel any outstanding calls to refreshDisplayOnMainThread(). When doing things
        the other way around, the display link can fire after outstanding calls have been canceled,
        and enqueue new calls on the main thread, which will be dispatched after monitor destruction.

2012-03-09  Pratik Solanki  <psolanki@apple.com>

        Assertion failure in ResourceHandle::setDefersLoading(): d->m_defersLoading != defers
        https://bugs.webkit.org/show_bug.cgi?id=80543

        Reviewed by Geoffrey Garen.

        Reset m_defersLoading flag to the value from Page::defersCallbacks() in
        ResourceLoader::init(). This is because the resource could have been in the pending requests
        queue in ResourceLoadScheduler and would have missed out on state changes to this flag
        happening from DocumentLoader::setDefersCallbacks().

        * loader/ResourceLoader.cpp:
        (WebCore::ResourceLoader::init):

2012-03-09  Emil A Eklund  <eae@chromium.org>

        Add roundedPoint to HitTestResult and change platform code to use it
        https://bugs.webkit.org/show_bug.cgi?id=80715

        Reviewed by James Robinson.

        Change ports to use roundedPoint to avoid exposing subpixel types to
        platform code.

        No new tests.

        * rendering/HitTestResult.h:
        (WebCore::HitTestResult::roundedPoint):

2012-03-09  Kentaro Hara  <haraken@chromium.org>

        [V8][Performance] Inline hot methods in V8Bindings.h
        https://bugs.webkit.org/show_bug.cgi?id=80685

        Reviewed by Adam Barth.

        This patch slightly improves DOM binding performance by inlining hot
        methods in V8Binding.cpp, e.g. isUndefinedOrNull(), v8StringOrNull(), v8Boolean().
        For example, this patch improves div.nodeName by 5.0%, and div.nodeValue by 4.1%.

        Performance tests: https://bugs.webkit.org/attachment.cgi?id=131006

        The performance test results in my Mac environment are as follows:

        Chromium/V8 without this patch:
        div.nodeName : 3417.4 ms
        div.nodeValue : 2069.6 ms

        Chromium/V8 with this patch:
        div.nodeName : 3245.6 ms
        div.nodeValue : 1983.1 ms

        No tests. No change in behavior.

        * bindings/v8/V8Binding.cpp:
        * bindings/v8/V8Binding.h:
        (WebCore::toWebCoreString):
        (WebCore::isUndefinedOrNull):
        (WebCore::isHostObject):
        (WebCore::v8Boolean):
        (WebCore::toWebCoreStringWithNullCheck):
        (WebCore::toAtomicWebCoreStringWithNullCheck):
        (WebCore::toWebCoreStringWithNullOrUndefinedCheck):
        (WebCore::v8UndetectableString):
        (WebCore::v8StringOrNull):
        (WebCore::v8StringOrUndefined):
        (WebCore::v8StringOrFalse):
        (WebCore::toWebCoreDate):
        (WebCore::v8DateOrNull):

2012-03-09  W. James MacLean  <wjmaclean@chromium.org>

        [chromium] Implement scroll physics architecture for impl/main thread
        https://bugs.webkit.org/show_bug.cgi?id=79827

        Reviewed by James Robinson.

        Unittests added, plus follow-on patch from rjkroege will add layout tests.

        PlatformGestureCurve is a framework to separate the physical simulation from for gesture
        animation from control concerns. This allows the physics to be reused in alternate places.
        At present, the framework will be applied in ScrollAnimatorNone and the Chrome Compositor.

        * WebCore.gypi:
        * platform/ActivePlatformGestureAnimation.cpp: Added.
        (WebCore):
        (WebCore::ActivePlatformGestureAnimation::create):
        (WebCore::ActivePlatformGestureAnimation::~ActivePlatformGestureAnimation):
        (WebCore::ActivePlatformGestureAnimation::ActivePlatformGestureAnimation):
        (WebCore::ActivePlatformGestureAnimation::animate):
        * platform/ActivePlatformGestureAnimation.h: Added.
        (WebCore):
        (ActivePlatformGestureAnimation):
        * platform/PlatformGestureCurve.h: Added.
        (WebCore):
        (PlatformGestureCurve):
        (WebCore::PlatformGestureCurve::~PlatformGestureCurve):
        * platform/PlatformGestureCurveTarget.h: Added.
        (WebCore):
        (PlatformGestureCurveTarget):
        (WebCore::PlatformGestureCurveTarget::~PlatformGestureCurveTarget):
        * platform/TouchFlingPlatformGestureCurve.cpp: Added.
        (WebCore):
        (WebCore::TouchFlingPlatformGestureCurve::create):
        (WebCore::TouchFlingPlatformGestureCurve::TouchFlingPlatformGestureCurve):
        (WebCore::TouchFlingPlatformGestureCurve::~TouchFlingPlatformGestureCurve):
        (WebCore::TouchFlingPlatformGestureCurve::apply):
        * platform/TouchFlingPlatformGestureCurve.h: Added.
        (WebCore):
        (TouchFlingPlatformGestureCurve):
        * platform/WheelFlingPlatformGestureCurve.cpp: Added.
        (WebCore):
        (WebCore::WheelFlingPlatformGestureCurve::create):
        (WebCore::WheelFlingPlatformGestureCurve::WheelFlingPlatformGestureCurve):
        (WebCore::WheelFlingPlatformGestureCurve::~WheelFlingPlatformGestureCurve):
        (WebCore::WheelFlingPlatformGestureCurve::apply):
        * platform/WheelFlingPlatformGestureCurve.h: Added.
        (WebCore):
        (WheelFlingPlatformGestureCurve):
        * platform/graphics/chromium/cc/CCActiveGestureAnimation.cpp: Added.
        (WebCore):
        (WebCore::CCActiveGestureAnimation::create):
        (WebCore::CCActiveGestureAnimation::CCActiveGestureAnimation):
        (WebCore::CCActiveGestureAnimation::~CCActiveGestureAnimation):
        (WebCore::CCActiveGestureAnimation::animate):
        * platform/graphics/chromium/cc/CCActiveGestureAnimation.h: Added.
        (WebCore):
        (CCActiveGestureAnimation):
        * platform/graphics/chromium/cc/CCGestureCurve.h: Added.
        (WebCore):
        (CCGestureCurveTarget):
        (WebCore::CCGestureCurveTarget::~CCGestureCurveTarget):
        (CCGestureCurve):
        (WebCore::CCGestureCurve::~CCGestureCurve):

2012-03-09  Alexis Menard  <alexis.menard@openbossa.org>

        Implement selectedOptions attribute of <select>.
        https://bugs.webkit.org/show_bug.cgi?id=80631

        Reviewed by Benjamin Poulain.

        Add a new collection as a member of HTMLSelectElement which is
        used to store the selected elements. Extend HTMLCollection to
        support the new collection type needed by this feature.

        Reference : http://www.whatwg.org/specs/web-apps/current-work/multipage/the-button-element.html#dom-select-selectedoptions

        Test: fast/dom/select-selectedOptions.html

        * html/CollectionType.h:
        * html/HTMLCollection.cpp:
        (WebCore::HTMLCollection::shouldIncludeChildren):
        (WebCore::HTMLCollection::isAcceptableElement):
        * html/HTMLSelectElement.cpp:
        (WebCore::HTMLSelectElement::selectedOptions):
        (WebCore):
        * html/HTMLSelectElement.h:
        (HTMLSelectElement):
        * html/HTMLSelectElement.idl:

2012-03-09  Tien-Ren Chen  <trchen@chromium.org>

        [chromium] ScrollbarLayerChromium/CCScrollbarLayerImpl for CC-side scrollbar painting
        https://bugs.webkit.org/show_bug.cgi?id=78872

        Reviewed by James Robinson.

        New test ScrollbarLayerChromiumTest.resolveScrollLayerPointer

        * WebCore.gypi:
        * page/scrolling/chromium/ScrollingCoordinatorChromium.cpp:
        (WebCore::scrollLayerForFrameView):
        (WebCore::scrollbarLayerDidChange):
        (WebCore):
        (WebCore::ScrollingCoordinator::frameViewHorizontalScrollbarLayerDidChange):
        (WebCore::ScrollingCoordinator::frameViewVerticalScrollbarLayerDidChange):
        * platform/ScrollableArea.cpp:
        (WebCore::ScrollableArea::invalidateScrollbar):
        * platform/graphics/chromium/GraphicsLayerChromium.h:
        (WebCore::GraphicsLayerChromium::hasContentsLayer):
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore):
        (WebCore::LayerChromium::toScrollbarLayerChromium):
        (LayerChromium):
        * platform/graphics/chromium/ScrollbarLayerChromium.cpp: Added.
        (WebCore):
        (WebCore::ScrollbarLayerChromium::createCCLayerImpl):
        (WebCore::ScrollbarLayerChromium::create):
        (WebCore::ScrollbarLayerChromium::ScrollbarLayerChromium):
        (WebCore::ScrollbarLayerChromium::pushPropertiesTo):
        * platform/graphics/chromium/ScrollbarLayerChromium.h: Added.
        (WebCore):
        (ScrollbarLayerChromium):
        (WebCore::ScrollbarLayerChromium::scrollLayerId):
        (WebCore::ScrollbarLayerChromium::toScrollbarLayerChromium):
        * platform/graphics/chromium/TreeSynchronizer.cpp:
        (WebCore::TreeSynchronizer::synchronizeTrees):
        (WebCore::TreeSynchronizer::collectExistingCCLayerImplRecursive):
        (WebCore::TreeSynchronizer::reuseOrCreateCCLayerImpl):
        (WebCore::TreeSynchronizer::synchronizeTreeRecursive):
        (WebCore::TreeSynchronizer::updateScrollbarLayerPointersRecursive):
        (WebCore):
        * platform/graphics/chromium/TreeSynchronizer.h:
        (TreeSynchronizer):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::updateMaxScrollPosition):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.cpp: Added.
        (WebCore):
        (WebCore::CCScrollbarLayerImpl::create):
        (WebCore::CCScrollbarLayerImpl::CCScrollbarLayerImpl):
        (WebCore::CCScrollbarLayerImpl::willDraw):
        (WebCore::CCScrollbarLayerImpl::appendQuads):
        (WebCore::CCScrollbarLayerImpl::didDraw):
        (WebCore::CCScrollbarLayerImpl::paint):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::x):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::y):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::width):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::height):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::size):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::location):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::parent):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::root):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::setFrameRect):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::frameRect):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::invalidate):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::invalidateRect):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::scrollbarOverlayStyle):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::getTickmarks):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::isScrollableAreaActive):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::isScrollViewScrollbar):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::convertFromContainingWindow):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::isCustomScrollbar):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::orientation):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::value):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::currentPos):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::visibleSize):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::totalSize):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::maximum):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::controlSize):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::lineStep):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::pageStep):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::pressedPart):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::hoveredPart):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::styleChanged):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::enabled):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::setEnabled):
        * platform/graphics/chromium/cc/CCScrollbarLayerImpl.h: Added.
        (WebCore):
        (CCScrollbarLayerImpl):
        (WebCore::CCScrollbarLayerImpl::setScrollbarOverlayStyle):
        (WebCore::CCScrollbarLayerImpl::setTickmarks):
        (WebCore::CCScrollbarLayerImpl::setIsScrollableAreaActive):
        (WebCore::CCScrollbarLayerImpl::setIsScrollViewScrollbar):
        (WebCore::CCScrollbarLayerImpl::setOrientation):
        (WebCore::CCScrollbarLayerImpl::setControlSize):
        (WebCore::CCScrollbarLayerImpl::setPressedPart):
        (WebCore::CCScrollbarLayerImpl::setHoveredPart):
        (WebCore::CCScrollbarLayerImpl::setEnabled):
        (WebCore::CCScrollbarLayerImpl::scrollLayer):
        (WebCore::CCScrollbarLayerImpl::setScrollLayer):
        (CCScrollbar):
        (WebCore::CCScrollbarLayerImpl::CCScrollbar::CCScrollbar):

2012-03-09  Julien Chaffraix  <jchaffraix@webkit.org>

        Split the extra logical height distribution logic out of RenderTableSection::layoutRows
        https://bugs.webkit.org/show_bug.cgi?id=80671

        Reviewed by Adrienne Walker.

        Refactoring only, no change in behavior expected.

        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::layoutRows):
        Split the logic from here...

        (WebCore::RenderTableSection::distributeExtraLogicalHeightToPercentRows):
        (WebCore::RenderTableSection::distributeExtraLogicalHeightToAutoRows):
        (WebCore::RenderTableSection::distributeRemainingExtraLogicalHeight):
        (WebCore::RenderTableSection::distributeExtraLogicalHeightToRows):
        ... to those functions. Cleaned up the variable naming while at it and
        made them follow the same signature as this may be useful to fix another
        bug I have.

        * rendering/RenderTableSection.h:
        (RenderTableSection):
        Added the previous 4 new functions.

2012-03-09  Rob Buis  <rbuis@rim.com>

        Remove unused file FrameBlackBerry.cpp
        https://bugs.webkit.org/show_bug.cgi?id=80731

        Reviewed by Antonio Gomes.

        This is not needed anymore since there is an implementation elsewhere.

        * PlatformBlackBerry.cmake:
        * page/blackberry/FrameBlackBerry.cpp: Removed.

2012-03-09  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110309.
        http://trac.webkit.org/changeset/110309
        https://bugs.webkit.org/show_bug.cgi?id=80732

        Seems to have caused a number of SVG crashes (thorton will
        investigate further) (Requested by abarth|gardener on
        #webkit).

        * page/FrameView.cpp:
        (WebCore::FrameView::FrameView):
        (WebCore::FrameView::reset):
        (WebCore::FrameView::repaintContentRectangle):
        (WebCore::FrameView::deferredRepaintTimerFired):
        * page/FrameView.h:
        (FrameView):
        * rendering/RenderView.cpp:
        (WebCore::RenderView::shouldRepaint):
        * svg/graphics/SVGImage.cpp:
        (WebCore::SVGImage::drawSVGToImageBuffer):
        (WebCore::SVGImage::draw):
        * svg/graphics/SVGImage.h:
        * svg/graphics/SVGImageCache.cpp:
        (WebCore::SVGImageCache::imageContentChanged):
        (WebCore::SVGImageCache::redrawTimerFired):
        * svg/graphics/SVGImageCache.h:
        (SVGImageCache):

2012-03-09  Ken Buchanan  <kenrb@chromium.org>

        Crash due to inserting letter into div with first-letter
        https://bugs.webkit.org/show_bug.cgi?id=78534

        Reviewed by David Hyatt.

        This fixes an issue in RenderTextFragment with setTextInternal
        getting called with different intents. While most calls to it
        are intended to change the underlying DOM node string, it can
        also be called as a result of styleDidChange just for transforms
        on the substring text fragment. This adds a mechanism for internal
        callers to specify if the internal text is being updated without
        a DOM node text change.

        * rendering/RenderTextFragment.cpp:
        (WebCore::RenderTextFragment::styleDidChange)
        (WebCore::RenderTextFragment::setTextInternal)
        * rendering/RenderTextFragment.h:
        (WebCore::RenderTextFragment)

2012-03-09  Chris Rogers  <crogers@google.com>

        Fix uninitialized variable in DynamicsCompressor
        https://bugs.webkit.org/show_bug.cgi?id=80724

        Reviewed by James Robinson.

        * platform/audio/DynamicsCompressor.cpp:
        (WebCore::DynamicsCompressor::DynamicsCompressor):

2012-03-09  Erik Arvidsson  <arv@chromium.org>

        [V8] Undo text position adjustment for attribute event handlers
        https://bugs.webkit.org/show_bug.cgi?id=80725

        Reviewed by Adam Barth.

        No new tests. Needs rebaseline.

        * bindings/v8/V8LazyEventListener.cpp:
        (WebCore::V8LazyEventListener::prepareListenerObject):

2012-03-09  Tom Sepez  <tsepez@chromium.org>

        Hold cached images with a CachedResourceHandle rather than a raw pointer for CSSCrossfadeValue
        https://bugs.webkit.org/show_bug.cgi?id=80186

        Reviewed by Simon Fraser.

        Test: http/tests/css/cross-fade-reload.html

        * css/CSSCrossfadeValue.h:
        (CSSCrossfadeValue):

2012-03-09  Abhishek Arya  <inferno@chromium.org>

        Crash when splitting an anonymous block in multi-column layout.
        https://bugs.webkit.org/show_bug.cgi?id=80432

        Reviewed by David Hyatt.

        Calculating currChild->nextSibling() is risky after destroying :after content
        because it can blow away currChild if it is a left over empty anonymous block.
        We need to calculate next sibling upfront, using the same trick, we do in
        RenderBlock::addChildIgnoringAnonymousColumnBlock to reset beforeChild (check
        out the line before splitFlow call).

        Test: fast/multicol/anonymous-block-split-crash.html

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::splitBlocks):

2012-03-09  Abhishek Arya  <inferno@chromium.org>

        Crash due to accessing removed parent lineboxes when clearing selection.
        https://bugs.webkit.org/show_bug.cgi?id=79264

        Reviewed by Dave Hyatt.

        Test: editing/selection/first-letter-selection-crash.html

        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::setSelectionState):
        1. No need of checking if we are being set to same selection state.
        Now tested by setSelectionStateIfNeeded. Rename 's' with 'state' and
        'cb' with 'containingBlock'.
        * rendering/RenderListMarker.cpp:
        (WebCore::RenderListMarker::setSelectionState):
        1. Add check to canUpdateSelectionOnRootLineBoxes to make sure our
        root line boxes are still valid before setting them.
        2. No need of calling setSelectionState on containing block since our base
        class call to RenderBox::setSelectionState covers it. Added a comment to indicate that.
        3. Use m_inlineBoxWrapper variable directly to simplify the ifs.
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::canUpdateSelectionOnRootLineBoxes):
        (WebCore): helper function to tell if we can update selection information
        on our root line boxes. This returns false if our containing block is pending layout.
        * rendering/RenderObject.h:
        (RenderObject):
        (WebCore::RenderObject::setSelectionStateIfNeeded):
        (WebCore): helper to set selection state only if it is different from our
        current selection state.
        * rendering/RenderReplaced.cpp:
        (WebCore::RenderReplaced::setSelectionState):
        1. Rename 's' to 'state', 'line' to 'root' and use m_inlineBoxWrapper directly
        to simplify ifs.
        2. Add check to canUpdateSelectionOnRootLineBoxes to make sure our
        root line boxes are still valid before setting them.
        * rendering/RenderText.cpp:
        (WebCore::RenderText::setSelectionState):
        1. Add check to canUpdateSelectionOnRootLineBoxes to make sure our
        root line boxes are still valid before setting them.
        2. Rename 'cb' to 'containingBlock', 'line' to 'root', move InlineTextBox
        declaration to local.
        * rendering/RenderView.cpp:
        (WebCore::RenderView::setSelection): Replace all calls to setSelectionState
        with setSelectionStateIfNeeded.
        * rendering/RenderWidget.cpp:
        (WebCore::RenderWidget::setSelectionState):
        1. No need of checking if we are being set to same selection state.
        Now tested by setSelectionStateIfNeeded.

2012-03-09  Levi Weintraub  <leviw@chromium.org>

        Move TransformationMatrix and TransformState to LayoutUnits.
        https://bugs.webkit.org/show_bug.cgi?id=80632

        Reviewed by Simon Fraser.

        When we move layout to sub-pixel precision, we want to preserve that precision through
        transformations. This change readies TransformState and TransformationMatrix to make
        use of this additional precision in accumulating transforms, and in returning rects that
        preserve it.

        No new tests. No change in behavior.

        * platform/graphics/transforms/TransformState.cpp:
        (WebCore::TransformState::move): Changed to pass along LayoutUnits to the contained
        TransformationMatrix. The values of the LayoutUnits will be implicitly converted to
        floats to be applied.
        * platform/graphics/transforms/TransformState.h:
        (WebCore::TransformState::move): Ditto.
        (TransformState):
        * platform/graphics/transforms/TransformationMatrix.cpp:
        (WebCore::clampEdgeValue): Limiting edges to the maximum LayoutUnit value to prevent
        overflow..
        (WebCore::TransformationMatrix::clampedBoundsOfProjectedQuad): Same as above, but also
        returning a LayoutRect which preserves additional precision than the previous IntRect.
        (WebCore::TransformationMatrix::mapRect): Adding a version of this method that operates
        specifically on FractionalLayoutRects.
        (WebCore):
        * platform/graphics/transforms/TransformationMatrix.h:
        (WebCore):
        (TransformationMatrix):
        * rendering/LayoutTypes.h:
        (WebCore::clampToLayoutUnit):
        (WebCore):

2012-03-09  Ryosuke Niwa  <rniwa@webkit.org>

        Remove a bogus assertion. This condition is no longer true for non-document tree scopes.

        * dom/TreeScope.cpp:
        (WebCore::TreeScope::activeElement):

2012-03-09  Ryosuke Niwa  <rniwa@webkit.org>

        Cleanup incDOMTreeVersion callers
        https://bugs.webkit.org/show_bug.cgi?id=80452

        Reviewed by Andreas Kling.

        Unify various calls to incDOMTreeVersion and namely remove the call inside dispatchSubtreeModifiedEvent.
        There should be no behavioral change and therefore there is no new test.

        * dom/CharacterData.cpp:
        (WebCore::CharacterData::parserAppendData):
        (WebCore::CharacterData::setDataAndUpdate):
        * dom/ContainerNode.cpp:
        (WebCore::willRemoveChild):
        (WebCore::willRemoveChildren):
        (WebCore::ContainerNode::removeChild):
        (WebCore::ContainerNode::removeChildren):
        (WebCore::ContainerNode::childrenChanged):
        (WebCore::notifyChildInserted):
        * dom/Element.cpp:
        (WebCore::Element::attributeChanged):
        (WebCore::Element::parserSetAttributes):
        (WebCore::Element::willModifyAttribute):
        * dom/Node.cpp:
        (WebCore::Node::dispatchSubtreeModifiedEvent):
        * html/HTMLOutputElement.cpp:
        (WebCore::HTMLOutputElement::childrenChanged):
        * html/HTMLScriptElement.cpp:
        (WebCore::HTMLScriptElement::childrenChanged):
        * html/HTMLStyleElement.cpp:
        (WebCore::HTMLStyleElement::childrenChanged):
        * html/HTMLTextAreaElement.cpp:
        (WebCore::HTMLTextAreaElement::childrenChanged):
        * html/HTMLTitleElement.cpp:
        (WebCore::HTMLTitleElement::childrenChanged):
        * svg/SVGScriptElement.cpp:
        (WebCore::SVGScriptElement::childrenChanged):
        * svg/SVGStyleElement.cpp:
        (WebCore::SVGStyleElement::childrenChanged):

2012-03-09  Patrick Gansterer  <paroga@webkit.org>

        Build fix for !ENABLE(FILTERS) after r110285.

        * rendering/svg/SVGRenderingContext.h:
        (WebCore::SVGRenderingContext::SVGRenderingContext):

2012-03-09  Dana Jansens  <danakj@chromium.org>

        [chromium] Use opaque paints in CCOcclusionTracker
        https://bugs.webkit.org/show_bug.cgi?id=80173

        Reviewed by Adrienne Walker.

        Use tracked opaque paints in the tiles when tracking occlusion in
        CCOcclusionTracker. Moves the Tile::m_opaqueRect up to the super-
        class in CCLayerTilingData rather than having it declared in both
        TiledLayerChromium and CCTiledLayerImpl. This lets the CCLayerTilingData
        class compute the opaque region for its tiles, sharing code between the
        two tiled layer implementations.

        Use of this feature is guarded behind a runtime flag and turned off for
        paint culling. We will enable it in the future once we're comfortable
        with the paint culling.

        Unit test: CCOcclusionTrackerTest.opaqueContentsRegionEmpty
                   CCOcclusionTrackerTest.opaqueContentsRegionNonEmpty
                   TiledLayerChromiumTest.opaqueContentsRegion

        All existing CCOcclusionTrackerTest.* duplicated with opaque painted
        rects.

        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::opaqueContentsRegion):
        (LayerChromium):
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (UpdatableTile):
        (WebCore::TiledLayerChromium::pushPropertiesTo):
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):
        (WebCore::TiledLayerChromium::addSelfToOccludedScreenSpace):
        (WebCore::TiledLayerChromium::opaqueContentsRegion):
        (WebCore):
        * platform/graphics/chromium/TiledLayerChromium.h:
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (WebCore::CCLayerImpl::opaqueContentsRegion):
        (CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTilingData.cpp:
        (WebCore::CCLayerTilingData::opaqueRegionInLayerRect):
        (WebCore):
        * platform/graphics/chromium/cc/CCLayerTilingData.h:
        (WebCore):
        (Tile):
        (WebCore::CCLayerTilingData::Tile::opaqueRect):
        (WebCore::CCLayerTilingData::Tile::setOpaqueRect):
        (CCLayerTilingData):
        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::::CCOcclusionTrackerBase):
        (WebCore::computeOcclusionBehindLayer):
        (WebCore::::markOccludedBehindLayer):
        * platform/graphics/chromium/cc/CCOcclusionTracker.h:
        (CCOcclusionTrackerBase):
        (WebCore::CCOcclusionTrackerBase::setUsePaintTracking):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
        (DrawableTile):
        (WebCore::CCTiledLayerImpl::opaqueContentsRegion):
        (WebCore):
        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
        (CCTiledLayerImpl):

2012-03-09  Antti Koivisto  <antti@apple.com>

        Presentation attribute cache
        https://bugs.webkit.org/show_bug.cgi?id=80707
        
        Reviewed by Andreas Kling.

        It is common for the same presentation attribute values repeat. We should introduce a cache that uses 
        presentation attribute names and values as key. This will help to avoid repeated parsing of the 
        same attribute values, reduce memory consumption and speed up the style resolve.
        
        This patch introduces a simple and small (128 entries) global cache. In general web browsing it seems
        to give sharing rate of >75% (an average presentation attribute property set is shared between >4 elements).

        * dom/StyledElement.cpp:
        (WebCore::PresentationAttributeCacheKey::PresentationAttributeCacheKey):
        (PresentationAttributeCacheKey):
        (WebCore):
        (WebCore::operator!=):
        (PresentationAttributeCacheEntry):
        (WebCore::presentationAttributeCache):
        (WebCore::attributeNameSort):
        (WebCore::StyledElement::makePresentationAttributeCacheKey):
        (WebCore::computePresentationAttributeCacheHash):
        (WebCore::StyledElement::updateAttributeStyle):
        * dom/StyledElement.h:
        (WebCore):
        (StyledElement):

2012-03-08  Erik Arvidsson  <arv@chromium.org>

        [V8] Fix object scope for inline event attribute handlers
        https://bugs.webkit.org/show_bug.cgi?id=80329

        Reviewed by Ojan Vafai.

        We now create the funciton inside the with-statements with the current scope objects.
        This is important for a few reasons:

        - We need to use the real objects and not just lookup the JS properties because these might have been overridden.
        - We need to use the node, form and document at the time of the preparation and not at the time of calling.
        - We need to ensure that event/evt is bound closer than a property with the same name in the object environment
          created by the with-statements.

        Tests: fast/dom/inline-event-attributes-lookup-removed-form.html
               fast/dom/inline-event-attributes-lookup-removed.html
               fast/dom/inline-event-attributes-lookup.html

        * bindings/v8/ScriptEventListener.cpp:
        (WebCore::eventParameterName):
        (WebCore):
        (WebCore::createAttributeEventListener):
        * bindings/v8/V8LazyEventListener.cpp:
        (WebCore::V8LazyEventListener::V8LazyEventListener):
        (WebCore):
        (WebCore::toObjectWrapper):
        (WebCore::V8LazyEventListener::callListenerFunction):
        (WebCore::V8LazyEventListener::prepareListenerObject):
        * bindings/v8/V8LazyEventListener.h:
        (WebCore):
        (WebCore::V8LazyEventListener::create):
        (V8LazyEventListener):

2012-03-09  Stephen Chenney  <schenney@chromium.org>

        Crash in WebCore::SVGUseElement::instanceForShadowTreeElement
        https://bugs.webkit.org/show_bug.cgi?id=80406

        Reviewed by Nikolas Zimmermann.

        Code assumes that an object that is an SVG Element and in a shadow
        tree must be in an SVG use shadow tree, and casts the shadow host with
        a static_cast. It may be that an SVG element appears in a non-use
        shadow tree, in which case bad things happen. While it appears that
        the current code prevents such a situation from arising (checks are
        made within the shadow tree code to prevent it) there are also
        indications that the situation may change.

        No new tests. I believe that the problem here cannot currently be
        reproduced. That is, other code prevents SVG elements from appearing
        in non-svg shadow trees.

        * dom/EventDispatcher.cpp:
        (WebCore::eventTargetRespectingSVGTargetRules):
        * svg/SVGStyledElement.cpp:
        (WebCore::SVGStyledElement::title):

2012-03-09  Jon Lee  <jonlee@apple.com>

        Add support for ENABLE(LEGACY_NOTIFICATIONS)
        https://bugs.webkit.org/show_bug.cgi?id=80497

        Reviewed by Adam Barth.

        Prep for b80472: Update API for Web Notifications
        * Configurations/FeatureDefines.xcconfig:
        * GNUmakefile.am:

2012-03-09  Kaustubh Atrawalkar  <kaustubh@motorola.com>

        ShadowRoot should implement activeElement.
        https://bugs.webkit.org/show_bug.cgi?id=79886

        Reviewed by Ryosuke Niwa.

        Implement the activeElement attribute for ShadowRoot to return the
        currently focused element in the shadow DOM subtree.

        Test: fast/dom/shadow/shadow-root-activeElement.html

        * dom/ShadowRoot.cpp:
        (WebCore::ShadowRoot::activeElement):
        (WebCore):
        * dom/ShadowRoot.h:
        (ShadowRoot):
        * dom/ShadowRoot.idl:
        * dom/TreeScope.cpp:
        (WebCore::TreeScope::adoptIfNeeded):
        (WebCore):
        (WebCore::focusedFrameOwnerElement):
        (WebCore::TreeScope::activeElement):
        * dom/TreeScope.h:
        (TreeScope):
        * html/HTMLDocument.cpp:
        (WebCore):
        (WebCore::HTMLDocument::activeElement):

2012-03-09  Tim Horton  <timothy_horton@apple.com>

        Infinite repaint loop with SVGImageCache and deferred repaint timers
        https://bugs.webkit.org/show_bug.cgi?id=78315
        <rdar://problem/10651634>

        Reviewed by Nikolas Zimmermann.

        Only defer image redraw on a timer if we're in layout. This breaks
        the repaint loop while still preventing us from drawing inside layout.

        Completely disable repaint during relayout inside SVGImage::drawSVGToImageBuffer,
        preventing deferred repaint timers from being started during that process.

        No new tests, as the problem only occurs in a nonstandard configuration.

        * svg/graphics/SVGImage.cpp:
        (WebCore::SVGImage::draw):
        (WebCore::SVGImage::frameView):
        (WebCore):
        * svg/graphics/SVGImage.h:
        (WebCore):
        * svg/graphics/SVGImageCache.cpp:
        (WebCore::SVGImageCache::imageContentChanged):
        (WebCore::SVGImageCache::redraw):
        (WebCore::SVGImageCache::redrawTimerFired):
        (WebCore):
        * svg/graphics/SVGImageCache.h:
        (SVGImageCache):

2012-03-09  Victor Carbune  <vcarbune@adobe.com>

        The method TextTrackCue::getCueAsHTML() should return different
        fragments on different calls.

        https://bugs.webkit.org/show_bug.cgi?id=80701

        Reviewed by Eric Carlson.

        Test: media/track/track-cue-mutable-fragment.html

        * html/track/TextTrackCue.cpp: Removed setCueHTML(), since it is sufficient
        to create apply the DOM rules only when the fragment is first requested.
        (WebCore::TextTrackCue::getCueAsHTML): Changed the method such that a
        a clone of the cached document fragment is returned.
        * html/track/TextTrackCue.h: Removed setCueHTML() as the document fragment
        of the cue should be created only within the class, from the cue text.
        (TextTrackCue):
        * html/track/WebVTTParser.cpp:
        (WebCore::WebVTTParser::createNewCue): removed usage of setCueHTML()

2012-03-09  Tim Horton  <timothy_horton@apple.com>

        Crash in SVGTextLayoutAttributesBuilder::fillCharacterDataMap
        https://bugs.webkit.org/show_bug.cgi?id=78949
        <rdar://problem/10889440>

        Reviewed by Nikolas Zimmermann.

        Invalidate the text positioning cache when the children of an SVGAElement change,
        so that we regenerate the list the next time it's needed instead of using stale values.

        Test: svg/text/text-positioning-remove-child-crash.svg

        * rendering/svg/SVGAElement.cpp:
        (WebCore::SVGAElement::childrenChanged):

2012-03-09  Ashod Nakashian  <ashodnakashian@yahoo.com>

        Bash scripts should support LF endings only
        https://bugs.webkit.org/show_bug.cgi?id=79509

        Reviewed by David Kilzer.

        * WebCore.gyp/mac/adjust_visibility.sh: Added property svn:eol-style.
        * WebCore.vcproj/build-generated-files.sh: Added property svn:executable.
        * WebCore.vcproj/migrate-scripts.sh: Added property svn:executable.
        * gyp/copy-forwarding-and-icu-headers.sh: Added property svn:eol-style.
        * gyp/copy-inspector-resources.sh: Added property svn:eol-style.
        * gyp/generate-derived-sources.sh: Added property svn:eol-style.
        * gyp/generate-webcore-export-file-generator.sh: Added property svn:eol-style.
        * gyp/run-if-exists.sh: Added property svn:eol-style.
        * gyp/streamline-inspector-source.sh: Added property svn:eol-style.
        * gyp/update-info-plist.sh: Added property svn:eol-style.

2012-03-09  Andreas Kling  <awesomekling@apple.com>

        CSSParser: Use Vector for intermediate property storage.
        <http://webkit.org/b/80653>

        Reviewed by Antti Koivisto.

        Remove the custom memory management for intermediate CSSProperties in CSSParser
        and replace it by a Vector<CSSProperty, 256>.
        This avoids heap allocations and removes a bunch of unnecessary complexity.

        Remove WTF_MAKE_FAST_ALLOCATED from CSSProperty since they are only created on
        the stack now.

        * css/CSSGrammar.y:
        * css/CSSParser.cpp:
        (WebCore::CSSParser::CSSParser):
        (WebCore::CSSParser::~CSSParser):
        (WebCore::CSSParser::parseValue):
        (WebCore::CSSParser::parseColor):
        (WebCore::CSSParser::parseDeclaration):
        (WebCore::CSSParser::addProperty):
        (WebCore::CSSParser::rollbackLastProperties):
        (WebCore::CSSParser::clearProperties):
        (WebCore::CSSParser::parse4Values):
        (WebCore::CSSParser::parseFlowThread):
        (WebCore::CSSParser::createStyleRule):
        (WebCore::CSSParser::createFontFaceRule):
        (WebCore::CSSParser::createPageRule):
        (WebCore::CSSParser::createMarginAtRule):
        (WebCore::CSSParser::startDeclarationsForMarginBox):
        (WebCore::CSSParser::endDeclarationsForMarginBox):
        (WebCore::CSSParser::deleteFontFaceOnlyValues):
        (WebCore::CSSParser::createKeyframeRule):
        * css/CSSParser.h:
        (WebCore::CSSParser::hasProperties):
        (CSSParser):
        * css/CSSProperty.h:
        * css/SVGCSSParser.cpp:
        (WebCore::CSSParser::parseSVGValue):
        * css/StylePropertySet.cpp:
        (WebCore::StylePropertySet::StylePropertySet):
        (WebCore::StylePropertySet::addParsedProperties):
        * css/StylePropertySet.h:
        (WebCore::StylePropertySet::create):
        (StylePropertySet):

2012-03-09  Nate Chapin  <japhet@chromium.org>

        CachedRawResource breaks when trying to load
        a resource with an empty response body from cache.

        Reviewed by Alexey Proskuryakov.

        Test: http/tests/cache/zero-length-xhr.html

        * loader/cache/CachedRawResource.cpp:
        (WebCore::CachedRawResource::didAddClient): Don't exit early
            if m_data is empty, we may still need to notifyFinished().

2012-03-09  Robin Cao  <robin.cao@torchmobile.com.cn>

        [BlackBerry] Upstream classes that handle layer tiling
        https://bugs.webkit.org/show_bug.cgi?id=79875

        Reviewed by Rob Buis.

        Initial upstreaming, no new tests.

        * platform/graphics/blackberry/LayerTile.cpp: Added.
        (WebCore):
        (WebCore::LayerTile::LayerTile):
        (WebCore::LayerTile::~LayerTile):
        (WebCore::LayerTile::setContents):
        (WebCore::LayerTile::setContentsToColor):
        (WebCore::LayerTile::updateContents):
        (WebCore::LayerTile::discardContents):
        (WebCore::LayerTile::setVisible):
        (WebCore::LayerTile::setTexture):
        * platform/graphics/blackberry/LayerTile.h: Added.
        (WebCore):
        (LayerTileData):
        (WebCore::LayerTileData::LayerTileData):
        (WebCore::LayerTileData::isVisible):
        (LayerTile):
        (WebCore::LayerTile::texture):
        (WebCore::LayerTile::isVisible):
        (WebCore::LayerTile::isDirty):
        (WebCore::LayerTile::hasTexture):
        (WebCore::LayerTile::setContentsDirty):
        * platform/graphics/blackberry/LayerTileIndex.h: Added.
        (WebCore):
        (TileIndex):
        (WebCore::TileIndex::TileIndex):
        (WebCore::TileIndex::~TileIndex):
        (WebCore::TileIndex::i):
        (WebCore::TileIndex::j):
        (WebCore::TileIndex::setIndex):
        (WebCore::operator==):
        (WebCore::operator!=):
        (WTF):
        * platform/graphics/blackberry/LayerTiler.cpp: Added.
        (WebCore):
        (WebCore::transformPoint):
        (WebCore::defaultTileSize):
        (WebCore::LayerTiler::LayerTiler):
        (WebCore::LayerTiler::~LayerTiler):
        (WebCore::LayerTiler::layerWebKitThreadDestroyed):
        (WebCore::LayerTiler::layerCompositingThreadDestroyed):
        (WebCore::LayerTiler::setNeedsDisplay):
        (WebCore::LayerTiler::updateTextureContentsIfNeeded):
        (WebCore::LayerTiler::shouldPerformRenderJob):
        (WebCore::LayerTiler::addTextureJob):
        (WebCore::LayerTiler::clearTextureJobs):
        (WebCore::LayerTiler::commitPendingTextureUploads):
        (WebCore::LayerTiler::layerVisibilityChanged):
        (WebCore::LayerTiler::uploadTexturesIfNeeded):
        (WebCore::LayerTiler::processTextureJob):
        (WebCore::LayerTiler::addTileJob):
        (WebCore::LayerTiler::performTileJob):
        (WebCore::LayerTiler::drawTextures):
        (WebCore::LayerTiler::drawMissingTextures):
        (WebCore::LayerTiler::drawTexturesInternal):
        (WebCore::LayerTiler::addRenderJob):
        (WebCore::LayerTiler::removeRenderJob):
        (WebCore::LayerTiler::deleteTextures):
        (WebCore::LayerTiler::pruneTextures):
        (WebCore::LayerTiler::updateTileSize):
        (WebCore::LayerTiler::disableTiling):
        (WebCore::LayerTiler::shouldPrefillTile):
        (WebCore::LayerTiler::indexOfTile):
        (WebCore::LayerTiler::originOfTile):
        (WebCore::LayerTiler::rectForTile):
        (WebCore::LayerTiler::hasDirtyTiles):
        (WebCore::LayerTiler::bindContentsTexture):
        * platform/graphics/blackberry/LayerTiler.h: Added.
        (WebCore):
        (LayerTiler):
        (WebCore::LayerTiler::create):
        (WebCore::LayerTiler::layer):
        (WebCore::LayerTiler::hasMissingTextures):
        (WebCore::LayerTiler::TextureJob::TextureJob):
        (TextureJob):
        (WebCore::LayerTiler::TextureJob::setContents):
        (WebCore::LayerTiler::TextureJob::setContentsToColor):
        (WebCore::LayerTiler::TextureJob::updateContents):
        (WebCore::LayerTiler::TextureJob::discardContents):
        (WebCore::LayerTiler::TextureJob::resizeContents):
        (WebCore::LayerTiler::TextureJob::dirtyContents):
        (WebCore::LayerTiler::TextureJob::isNull):
        (WebCore::LayerTiler::tileSize):
        (WebCore::LayerTiler::removeUpdateContentsJobs):

2012-03-09  Ian Vollick  <vollick@chromium.org>

        [chromium] Ensure we use the correct time when notifying animation started
        https://bugs.webkit.org/show_bug.cgi?id=79537

        Reviewed by James Robinson

        Tested in CCLayerTreeHostTestAddAnimation

        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::setAnimationEvent):
        * platform/graphics/chromium/LayerChromium.h:
        (LayerChromium):
        * platform/graphics/chromium/cc/CCAnimationEvents.cpp:
        (WebCore::CCAnimationStartedEvent::create):
        (WebCore::CCAnimationStartedEvent::CCAnimationStartedEvent):
        * platform/graphics/chromium/cc/CCAnimationEvents.h:
        (CCAnimationEvent):
        (CCAnimationStartedEvent):
        * platform/graphics/chromium/cc/CCInputHandler.h:
        (CCInputHandler):
        * platform/graphics/chromium/cc/CCLayerAnimationControllerImpl.cpp:
        (WebCore::CCLayerAnimationControllerImpl::animate):
        (WebCore::CCLayerAnimationControllerImpl::startAnimationsWaitingForNextTick):
        (WebCore::CCLayerAnimationControllerImpl::startAnimationsWaitingForStartTime):
        (WebCore::CCLayerAnimationControllerImpl::startAnimationsWaitingForTargetAvailability):
        (WebCore::CCLayerAnimationControllerImpl::resolveConflicts):
        (WebCore::CCLayerAnimationControllerImpl::tickAnimations):
        * platform/graphics/chromium/cc/CCLayerAnimationControllerImpl.h:
        (CCLayerAnimationControllerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::setAnimationEvents):
        (WebCore::CCLayerTreeHost::setAnimationEventsRecursive):
        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
        (CCLayerTreeHost):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::animate):
        (WebCore::CCLayerTreeHostImpl::startPageScaleAnimation):
        (WebCore::CCLayerTreeHostImpl::animateLayersRecursive):
        (WebCore::CCLayerTreeHostImpl::animatePageScale):
        (WebCore::CCLayerTreeHostImpl::animateLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImplClient):
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCPageScaleAnimation.cpp:
        (WebCore::CCPageScaleAnimation::create):
        (WebCore::CCPageScaleAnimation::CCPageScaleAnimation):
        (WebCore::CCPageScaleAnimation::zoomTo):
        (WebCore::CCPageScaleAnimation::zoomWithAnchor):
        (WebCore::CCPageScaleAnimation::scrollOffsetAtTime):
        (WebCore::CCPageScaleAnimation::pageScaleAtTime):
        (WebCore::CCPageScaleAnimation::isAnimationCompleteAtTime):
        (WebCore::CCPageScaleAnimation::progressRatioForTime):
        * platform/graphics/chromium/cc/CCPageScaleAnimation.h:
        (CCPageScaleAnimation):
        (WebCore::CCPageScaleAnimation::startTime):
        (WebCore::CCPageScaleAnimation::duration):
        (WebCore::CCPageScaleAnimation::endTime):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::startPageScaleAnimation):
        (WebCore::CCSingleThreadProxy::postAnimationEventsToMainThreadOnImplThread):
        (WebCore::CCSingleThreadProxy::doComposite):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.h:
        (CCSingleThreadProxy):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::startPageScaleAnimation):
        (WebCore::CCThreadProxy::requestStartPageScaleAnimationOnImplThread):
        (WebCore::CCThreadProxy::postAnimationEventsToMainThreadOnImplThread):
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwap):
        (WebCore::CCThreadProxy::setAnimationEvents):
        * platform/graphics/chromium/cc/CCThreadProxy.h:
        (CCThreadProxy):

2012-03-09  Zoltan Herczeg  <zherczeg@webkit.org>

        Add SVGRenderingContext and move there the context related code from SVGRenderSupport
        https://bugs.webkit.org/show_bug.cgi?id=80413

        Reviewed by Nikolas Zimmermann.

        This is the first step of refactoring the rendering context for SVG. The
        previous context was stateless before, which means the cleanup phase
        needed to do a lot of checks to revert the initialization part and
        was unaware of failed inititalization. Future code can also add
        new local variables to the context.

        This patch add a new SVGRenderingContext class, and moves there the context
        initialization / cleanup code from SVGRenderSupport. All build systems were
        updated.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * rendering/svg/RenderSVGAllInOne.cpp:
        * rendering/svg/RenderSVGContainer.cpp:
        (WebCore::RenderSVGContainer::paint):
        * rendering/svg/RenderSVGForeignObject.cpp:
        (WebCore::RenderSVGForeignObject::paint):
        * rendering/svg/RenderSVGImage.cpp:
        (WebCore::RenderSVGImage::paint):
        * rendering/svg/RenderSVGRoot.cpp:
        (WebCore::RenderSVGRoot::paintReplaced):
        * rendering/svg/RenderSVGShape.cpp:
        (WebCore::RenderSVGShape::paint):
        * rendering/svg/SVGInlineFlowBox.cpp:
        (WebCore::SVGInlineFlowBox::paint):
        * rendering/svg/SVGRenderSupport.cpp:
        * rendering/svg/SVGRenderSupport.h:
        * rendering/svg/SVGRenderingContext.cpp: Added.
        (WebCore):
        (WebCore::isRenderingMaskImage):
        (WebCore::SVGRenderingContext::~SVGRenderingContext):
        (WebCore::SVGRenderingContext::prepareToRenderSVGContent):
        * rendering/svg/SVGRenderingContext.h: Added.
        (WebCore):
        (SVGRenderingContext):
        (WebCore::SVGRenderingContext::SVGRenderingContext):
        (WebCore::SVGRenderingContext::isRenderingPrepared):
        * rendering/svg/SVGRootInlineBox.cpp:
        (WebCore::SVGRootInlineBox::paint):

2012-03-09  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110191, r110202, and r110279.
        http://trac.webkit.org/changeset/110191
        http://trac.webkit.org/changeset/110202
        http://trac.webkit.org/changeset/110279
        https://bugs.webkit.org/show_bug.cgi?id=80694

        They broke !ENABLE(INSPECTOR) builds (Requested by Ossy on
        #webkit).

        * WebCore.exp.in:
        * testing/Internals.cpp:
        * testing/Internals.h:
        (WebCore):
        (Internals):
        * testing/Internals.idl:

2012-03-09  Hans Wennborg  <hans@chromium.org>

        Speech JavaScript API: add SpeechGrammar and SpeechGrammarList
        https://bugs.webkit.org/show_bug.cgi?id=80417

        Reviewed by Adam Barth.

        Implement SpeechGrammar and SpeechGrammarList.
        (Spec: http://speech-javascript-api-spec.googlecode.com/git/speechapi.html)

        Test: fast/speech/scripted/speechgrammar-basics.html

        * Modules/speech/DOMWindowSpeech.idl:
        * Modules/speech/SpeechGrammar.cpp:
        (WebCore):
        (WebCore::SpeechGrammar::create):
        (WebCore::SpeechGrammar::SpeechGrammar):
        * Modules/speech/SpeechGrammar.h:
        (WebCore):
        (SpeechGrammar):
        (WebCore::SpeechGrammar::src):
        (WebCore::SpeechGrammar::setSrc):
        (WebCore::SpeechGrammar::weight):
        (WebCore::SpeechGrammar::setWeight):
        * Modules/speech/SpeechGrammar.idl:
        * Modules/speech/SpeechGrammarList.cpp:
        (WebCore):
        (WebCore::SpeechGrammarList::create):
        (WebCore::SpeechGrammarList::item):
        (WebCore::SpeechGrammarList::addFromUri):
        (WebCore::SpeechGrammarList::addFromString):
        (WebCore::SpeechGrammarList::SpeechGrammarList):
        * Modules/speech/SpeechGrammarList.h:
        (WebCore):
        (SpeechGrammarList):
        (WebCore::SpeechGrammarList::length):
        * Modules/speech/SpeechGrammarList.idl:
        * WebCore.gypi:

2012-03-09  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110269.
        http://trac.webkit.org/changeset/110269
        https://bugs.webkit.org/show_bug.cgi?id=80688

        It made inspector/elements/highlight-node.html fail everywhere
        (Requested by Ossy on #webkit).

        * testing/Internals.idl:

2012-03-07  Alexander Pavlov  <apavlov@chromium.org>

        Web Inspector: [Styles] Click in the first line of rule while editing property starts a new property
        https://bugs.webkit.org/show_bug.cgi?id=80507

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/StylesSidebarPane.js:
        (WebInspector.StylePropertiesSection):
        (WebInspector.StylePropertiesSection.prototype._checkWillCancelEditing):
        (WebInspector.StylePropertiesSection.prototype._handleSelectorContainerClick):
        (WebInspector.StylePropertiesSection.prototype._handleEmptySpaceClick):
        (WebInspector.StylePropertyTreeElement.prototype.onattach):
        (WebInspector.StylePropertyTreeElement.prototype):

2012-03-09  Mark Rowe  <mrowe@apple.com>

        <rdar://problem/11012024> Fix the build by working around <rdar://problem/10710970>.

        * platform/mac/RunLoopMac.mm:
        (WebCore::RunLoop::stop):

2012-03-09  Marja Hölttä  <marja@google.com>

        FileInputType doesn't support (save|restore)FormControlState
        https://bugs.webkit.org/show_bug.cgi?id=80145

        Reviewed by Kent Tamura.

        This enables saving and restoring the state of file upload elements in
        unsubmitted forms.

        Test: fast/forms/file/recover-file-input-in-unposted-form.html

        * html/BaseCheckableInputType.cpp:
        (WebCore::BaseCheckableInputType::restoreFormControlState): non-const
        * html/BaseCheckableInputType.h:
        (BaseCheckableInputType): restoreFormControlState non-const
        * html/FileInputType.cpp:
        (WebCore::FileInputType::saveFormControlState): save chosen files
        (WebCore):
        (WebCore::FileInputType::restoreFormControlState): restore chosen files
        * html/FileInputType.h:
        (FileInputType): overwrite (save|restore)FormControlState
        * html/HiddenInputType.cpp:
        (WebCore::HiddenInputType::restoreFormControlState): non-const
        * html/HiddenInputType.h:
        (HiddenInputType): restoreFormControlState non-const
        * html/InputType.cpp:
        (WebCore::InputType::restoreFormControlState): non-const
        * html/InputType.h:
        (InputType): restoreFormControlState non-const
        * html/PasswordInputType.cpp:
        (WebCore::PasswordInputType::restoreFormControlState): non-const
        * html/PasswordInputType.h:
        (PasswordInputType): restoreFormControlState non-const

2012-03-08  Benjamin Poulain  <bpoulain@apple.com>

        Base the access to CSSStyleDeclaration on the CSSPropertyID instead of the PropertyName
        https://bugs.webkit.org/show_bug.cgi?id=80461

        Reviewed by Geoffrey Garen.

        Previously, the acces to CSS Style properties was done through a NamedGetter. This caused
        the (slow) mapping between CSSPropertyName and CSSPropertyID to be done twice for every acess:
        1) canGetItemsForName() prior to the definition of the slot.
        2) nameGetter() called from the slot with CSSPropertyName to get the actual value.

        This patch changes the access to be based on CSSPropertyID. The slot is defined with the
        CSSPropertyID as the customIndex, and the value can be accessed directly when the slot is
        called.

        To handle the differences create by hadPixelOrPosPrefix, two nearly identical callback are defined,
        one for hadPixelOrPosPrefix, the other for !hadPixelOrPosPrefix.

        The performance gain is about 19% when accessing CSS properties.

        * bindings/js/JSCSSStyleDeclarationCustom.cpp:
        (WebCore::getPropertyValueFallback):
        (WebCore::cssPropertyGetterPixelOrPosPrefix):
        (WebCore):
        (WebCore::cssPropertyGetterPixelOrPosPrefixCallback):
        (WebCore::cssPropertyGetter):
        (WebCore::cssPropertyGetterCallback):
        (WebCore::JSCSSStyleDeclaration::getOwnPropertySlotDelegate):
        (WebCore::JSCSSStyleDeclaration::getOwnPropertyDescriptorDelegate):
        * css/CSSStyleDeclaration.idl:

2012-03-08  Tor Arne Vestbø  <tor.arne.vestbo@nokia.com>

        [Qt] Fix Qt minimal build

        * testing/Internals.idl:

2012-03-08  James Robinson  <jamesr@chromium.org>

        [chromium] Remove dead CoreGraphics code from chromium compositor implementation
        https://bugs.webkit.org/show_bug.cgi?id=80470

        Reviewed by Adam Barth.

        We haven't supported CoreGraphics as a raster backend in chromium for a few months and do not plan to do so, so
        it's time to remove the USE(CG) #ifdefs from our compositor and just rely on USE(SKIA) being set.  This also
        slightly simplifies how PlatformCanvas works.

        * platform/graphics/chromium/BitmapSkPictureCanvasLayerTextureUpdater.cpp:
        * platform/graphics/chromium/BitmapSkPictureCanvasLayerTextureUpdater.h:
        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::createTextureUpdaterIfNeeded):
        * platform/graphics/chromium/FrameBufferSkPictureCanvasLayerTextureUpdater.cpp:
        (WebCore::FrameBufferSkPictureCanvasLayerTextureUpdater::updateTextureRect):
        * platform/graphics/chromium/FrameBufferSkPictureCanvasLayerTextureUpdater.h:
        * platform/graphics/chromium/ImageLayerChromium.h:
        * platform/graphics/chromium/LayerChromium.cpp:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::initialize):
        * platform/graphics/chromium/LayerRendererChromium.h:
        * platform/graphics/chromium/PlatformCanvas.cpp:
        (WebCore::PlatformCanvas::createBackingCanvas):
        (WebCore::PlatformCanvas::AutoLocker::AutoLocker):
        (WebCore::PlatformCanvas::AutoLocker::~AutoLocker):
        (WebCore):
        (WebCore::PlatformCanvas::AutoLocker::pixels):
        (WebCore::PlatformCanvas::Painter::Painter):
        * platform/graphics/chromium/PlatformCanvas.h:
        (WebCore):
        (AutoLocker):
        (Painter):
        (PlatformCanvas):
        * platform/graphics/chromium/SkPictureCanvasLayerTextureUpdater.cpp:
        * platform/graphics/chromium/SkPictureCanvasLayerTextureUpdater.h:

2012-03-08  Ryosuke Niwa  <rniwa@webkit.org>

        Get rid of itemTypeAttributeChanged
        https://bugs.webkit.org/show_bug.cgi?id=80666

        Reviewed by Adam Barth.

        This function is unnecessay as we can invalidate m_microDataItemListCaches
        in invalidateCachesThatDependOnAttributes as done for other node lists.

        * dom/Node.cpp:
        (WebCore::Node::invalidateNodeListsCacheAfterAttributeChanged):
        (WebCore::NodeListsNodeData::invalidateCachesThatDependOnAttributes):
        * dom/Node.h:
        * dom/NodeRareData.h:
        (NodeListsNodeData):
        * html/HTMLElement.cpp:
        (WebCore::HTMLElement::parseAttribute):

2012-03-08  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r108616.
        http://trac.webkit.org/changeset/108616
        https://bugs.webkit.org/show_bug.cgi?id=80676

        breaks animation on Safari welcome page (Requested by smfr on
        #webkit).

        * page/animation/AnimationController.cpp:
        (WebCore::AnimationController::updateAnimations):
        * page/animation/AnimationControllerPrivate.h:
        (AnimationControllerPrivate):

2012-03-08  Benjamin Poulain  <benjamin@webkit.org>

        Fix the build of WebKit with WTFURL following the removal of ForwardingHeaders/wtf
        https://bugs.webkit.org/show_bug.cgi?id=80652

        Reviewed by Eric Seidel.

        The fowarding headers have been removed, we must now use the full path to the header.

        * platform/KURLWTFURLImpl.h:

2012-03-08  Emil A Eklund  <eae@chromium.org>

        Change calcRadiiFor to IntSize
        https://bugs.webkit.org/show_bug.cgi?id=80655

        Reviewed by Simon Fraser.

        Borders and RoundedRect are both represented with pixel precision. As
        such it doesn't make sense for calcRadiiFor to use subpixel units, it
        just adds unnecessary type conversions.

        No new tests, no new functionality.

        * rendering/style/RenderStyle.cpp:
        (WebCore::calcRadiiFor):

2012-03-08  Adrienne Walker  <enne@google.com>

        [chromium] Encapsulate mask layer settings in LayerChromium
        https://bugs.webkit.org/show_bug.cgi?id=80646

        Reviewed by James Robinson.

        If a WebLayer sets a mask layer, the setIsMask flag will not get set
        properly and the mask layer will not turn off tiling. This was only
        being set through GraphicsLayerChromium. Move this flag into
        LayerChromium so that it always gets set.

        Test: LayoutTests/compositing/

        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
        (WebCore::GraphicsLayerChromium::setMaskLayer):
        * platform/graphics/chromium/LayerChromium.cpp:
        (WebCore::LayerChromium::setMaskLayer):

2012-03-08  Tony Chang  <tony@chromium.org>

        margins on flex-align: baseline are double counted
        https://bugs.webkit.org/show_bug.cgi?id=80645

        Reviewed by Ojan Vafai.

        Fix a bug where we're counting the margins on baseline aligned
        children twice. Also add some test cases to make sure we handle
        wrap-reverse baseline alignment properly.

        Tests: css3/flexbox/multiline-reverse-wrap-baseline-expected.html
               css3/flexbox/multiline-reverse-wrap-baseline.html

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildren):

2012-03-08  Nat Duca  <nduca@chromium.org>

        [chromium] Pass setVisibility to CCLayerTreeHostImpl regardless of LRC initialization status
        https://bugs.webkit.org/show_bug.cgi?id=80584

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::setVisible):
        (WebCore::CCLayerTreeHost::didBecomeInvisibleOnImplThread):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::setVisible):
        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):

2012-03-08  Ian Vollick  <vollick@chromium.org>

        [chromium] Ensure that the cc thread animation framework continues to tick when the tab is backgrounded
        https://bugs.webkit.org/show_bug.cgi?id=77668

        Reviewed by James Robinson.

        Tested in CCLayerTreeHostTestTickAnimationWhileBackgrounded

        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (CCLayerTreeHostImplTimeSourceAdapter):
        (WebCore::CCLayerTreeHostImplTimeSourceAdapter::create):
        (WebCore::CCLayerTreeHostImplTimeSourceAdapter::~CCLayerTreeHostImplTimeSourceAdapter):
        (WebCore::CCLayerTreeHostImplTimeSourceAdapter::onTimerTick):
        (WebCore::CCLayerTreeHostImplTimeSourceAdapter::setActive):
        (WebCore::CCLayerTreeHostImplTimeSourceAdapter::CCLayerTreeHostImplTimeSourceAdapter):
        (WebCore):
        (WebCore::CCLayerTreeHostImpl::CCLayerTreeHostImpl):
        (WebCore::CCLayerTreeHostImpl::setVisible):
        (WebCore::CCLayerTreeHostImpl::animateLayers):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (WebCore):
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCProxy.cpp:
        (WebCore::CCProxy::currentThread):
        (WebCore):
        (WebCore::CCProxy::isMainThread):
        (WebCore::CCProxy::isImplThread):
        (WebCore::CCProxy::setCurrentThreadIsImplThread):
        * platform/graphics/chromium/cc/CCProxy.h:
        (CCProxy):

2012-03-08  Nico Weber  <thakis@chromium.org>

        [chromium] Only build NEON files if target_arch=="arm"
        https://bugs.webkit.org/show_bug.cgi?id=80626

        Currently, webcore_arm_neon will compile a bunch of files
        whose contents are completely ifdef'd away on non-arm, and
        then bundle all the generated empty .o files into a useless
        libwebcore_arm_neon.a. Don't do this.

        Reviewed by Tony Chang.

        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:

2012-03-08 Nima Ghanavatian <nghanavatian@rim.com>

        [BlackBerry] Fix warning in PlatformTouchEventBlackBerry.cpp
        https://bugs.webkit.org/show_bug.cgi?id=80621

        Fixes a warning seen when control reaches the end of a
        non-void function.  Return TouchCancel in the 'default' case.

        Reviewed by Rob Buis.

        * platform/blackberry/PlatformTouchEventBlackBerry.cpp:
        (WebCore::touchEventType):

2012-03-08  Dana Jansens  <danakj@chromium.org>

        [chromium] Using wrong scissor rect for draw culling
        https://bugs.webkit.org/show_bug.cgi?id=80624

        Reviewed by Adrienne Walker.

        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::optimizeRenderPasses):

2012-03-08  Andy Estes  <aestes@apple.com>

        REGRESSION (r105396): Dragging an iWork document into icloud.com opens it in the Mac app instead of uploading it to icloud.com
        https://bugs.webkit.org/show_bug.cgi?id=79443

        Reviewed by Ryosuke Niwa.

        icloud.com registers a drop event handler that sets display:none on the
        file input element receiving the drop. After dispatching the drop event,
        DragController hit tests the position under the mouse to see if it is a
        file input element in need of receiving files. Since the file input
        element has lost its renderer, it cannot be found by hit testing, so
        the dropped file is never attached to the file input element, no change
        event fires, and no upload commences. We want these things to happen
        even if the element is no longer visible.

        Since we already keep track of the file input element under the mouse
        via m_fileInputElementUnderMouse, this additional hit test is
        unnecessary. Use m_fileInputElementUnderMouse in concludeEditDrag()
        when dropping files.

        Test: fast/events/file-input-hidden-in-ondrop.html

        * page/DragController.cpp:
        (WebCore::DragController::concludeEditDrag): Use
        m_fileInputElementUnderMouse instead of the element returned by hit
        testing. Assert that m_fileInputElementUnderMouse equals the hit tested
        element unless m_fileInputElementUnderMouse doesn't have a renderer.

2012-03-08  Ryosuke Niwa  <rniwa@webkit.org>

        Mac build fix for micro data API.

        * Configurations/FeatureDefines.xcconfig:
        * WebCore.xcodeproj/project.pbxproj:
        * dom/Document.cpp:
        (WebCore::Document::removeCachedMicroDataItemList):
        * html/HTMLElement.idl:

2012-03-07  Jon Lee  <jonlee@apple.com>

        Support [Custom] for static functions
        https://bugs.webkit.org/show_bug.cgi?id=80573

        Reviewed by Kentaro Hara.

        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader): If the function is static, add static qualifier to cpp function.
        (GenerateImplementation): Reorganize the function to split out based on the static
        attribute, instead of checking for it at every line we output.
            If the function is static and not custom, the listed code should be the code in
        the rest of the function that did not have the static check. If it is custom, then
        we check the number of arguments, and then call the static impl function directly.
            If the function is not static, all of the "unless ($function->isStatic)" checks
        are removed since it is not necessary.

        * bindings/scripts/test/TestObj.idl: Added new test case.

        * bindings/scripts/test/JS/JSTestObj.cpp:
        (WebCore):
        (WebCore::jsTestObjConstructorFunctionClassMethod2):
        * bindings/scripts/test/JS/JSTestObj.h:
        (JSTestObj):
        (WebCore):
        * bindings/scripts/test/ObjC/DOMTestObj.h:
        * bindings/scripts/test/ObjC/DOMTestObj.mm:
        (-[DOMTestObj classMethod2]):
        * bindings/scripts/test/V8/V8TestObj.cpp:
        (WebCore::ConfigureV8TestObjTemplate):
        * bindings/scripts/test/V8/V8TestObj.h:
        (V8TestObj):

2012-03-08  Mark Pilgrim  <pilgrim@chromium.org>

        Collapse ENABLE(BLOB)|ENABLE(FILE_SYSTEM) to just ENABLE(BLOB)
        https://bugs.webkit.org/show_bug.cgi?id=80592

        Reviewed by Adam Barth.

        In anticipation of moving FILE_SYSTEM-related code to Modules/, we
        are collapsing combination BLOB/FILE_SYSTEM ifdefs to just
        BLOB. In other words, it is assumed from now on that you can not
        have FILE_SYSTEM support without BLOB support.
        
        No new tests, all existing tests pass.

        * CMakeLists.txt:
        * dom/ScriptExecutionContext.cpp:
        (WebCore::ScriptExecutionContext::~ScriptExecutionContext):
        (WebCore):
        (WebCore::ScriptExecutionContext::fileThread):
        * dom/ScriptExecutionContext.h:
        (WebCore):
        (ScriptExecutionContext):
        * fileapi/AsyncFileStream.cpp:
        * fileapi/AsyncFileStream.h:
        * fileapi/FileError.h:
        * fileapi/FileException.cpp:
        * fileapi/FileException.h:
        * fileapi/FileThread.cpp:
        * fileapi/FileThread.h:
        * fileapi/OperationNotAllowedException.cpp:
        * fileapi/OperationNotAllowedException.h:
        * platform/FileStream.cpp:
        * platform/FileStream.h:
        * platform/FileStreamClient.h:
        * platform/SchemeRegistry.cpp:
        (WebCore::canDisplayOnlyIfCanRequestSchemes):
        (WebCore::CORSEnabledSchemes):
        (WebCore::SchemeRegistry::registerURLSchemeAsNotAllowingJavascriptURLs):

2012-03-08  James Robinson  <jamesr@chromium.org>

        Use an explicit attribute to signal that a context prefers to use a discrete GPU
        https://bugs.webkit.org/show_bug.cgi?id=80639

        Reviewed by Stephen White.

        On platforms that support both integrated and discrete GPUs and can dynamically switch between the two, we
        sometimes have a specific preference for a given context. Specifically, contexts used for WebGL and canvas 2d
        acceleration should use the discrete GPU if available, but compositor contexts can run fine on an integrated
        GPU. Instead of attempting to infer the intent from examining other context attributes, this adds an explicit
        attribute to control this behavior.

        * html/canvas/WebGLRenderingContext.cpp:
        (WebCore):
        (WebCore::WebGLRenderingContext::create):
        * platform/graphics/GraphicsContext3D.h:
        (WebCore::GraphicsContext3D::Attributes::Attributes):
        (Attributes):
        * platform/graphics/gpu/SharedGraphicsContext3D.cpp:
        (WebCore::SharedGraphicsContext3D::get):

2012-03-08  Andy Estes  <aestes@apple.com>

        NULL renderer possible in WebCore::HTMLInputElement::setCanReceiveDroppedFiles()
        https://bugs.webkit.org/show_bug.cgi?id=80648

        Reviewed by Simon Fraser.

        Test: fast/events/input-element-display-none-in-dragleave-crash.html

        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::setCanReceiveDroppedFiles): NULL-check renderer().

2012-03-08  Jer Noble  <jer.noble@apple.com>

        Yet another unreviewed build fix.

        Remove an unneeded and Lion-defined window constant from WebCoreFullScreenWindow.

        * platform/mac/WebCoreFullScreenWindow.mm:
        (-[WebCoreFullScreenWindow initWithContentRect:styleMask:backing:defer:]):

2012-03-08  Levi Weintraub  <leviw@chromium.org>

        Switch absoluteRects, culledInlineAbsoluteRects, absoluteBoundingBoxRect, and addFocusRingRects back to integers
        https://bugs.webkit.org/show_bug.cgi?id=80545

        Reviewed by Simon Fraser.

        Converting the above functions, all of which return rects that represent on-screen rects, to IntRects from
        LayoutRects.

        addFocusRingsRects generates a vector of rects that is handed off directly to the GraphicsContext to be
        drawn. Snapping the rects before adding them to the vector saves an extra pass through the vector.

        absoluteRects and culledInlineAbsoluteRects are only used by addFocusRingRects, hasNonEmptyBoundingBox (only
        to check if they're empty), and absoluteBoundingBoxRect, which is exposed from WebCore and thus should be an
        IntRect anyways.

        No new tests. No change in behavior.

        * dom/Node.cpp:
        (WebCore::Node::hasNonEmptyBoundingBox):
        * dom/Range.cpp:
        (WebCore::Range::boundingBox):
        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::absoluteRects):
        (WebCore::RenderBlock::addFocusRingRects):
        * rendering/RenderBlock.h:
        (RenderBlock):
        * rendering/RenderInline.cpp:
        (WebCore::RenderInline::absoluteRects):
        (WebCore::RenderInline::culledInlineAbsoluteRects):
        (WebCore::RenderInline::addFocusRingRects):
        * rendering/RenderInline.h:
        (RenderInline):
        * rendering/RenderListBox.cpp:
        (WebCore::RenderListBox::addFocusRingRects):
        * rendering/RenderListBox.h:
        (RenderListBox):
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::paintFocusRing):
        (WebCore::RenderObject::absoluteBoundingBoxRect):
        (WebCore::RenderObject::absoluteFocusRingQuads):
        * rendering/RenderObject.h:
        (WebCore::RenderObject::absoluteRects):
        (RenderObject):
        (WebCore::RenderObject::absoluteBoundingBoxRectIgnoringTransforms):
        (WebCore::RenderObject::addFocusRingRects):
        * rendering/RenderText.cpp:
        (WebCore::RenderText::absoluteRects):
        (WebCore::RenderText::absoluteRectsForRange):
        * rendering/RenderText.h:
        (RenderText):
        * rendering/RenderTextControl.cpp:
        (WebCore::RenderTextControl::addFocusRingRects):
        * rendering/RenderTextControl.h:
        (RenderTextControl):
        * rendering/RenderView.cpp:
        (WebCore::RenderView::absoluteRects):
        * rendering/RenderView.h:
        (RenderView):
        * rendering/svg/RenderSVGBlock.cpp:
        (WebCore::RenderSVGBlock::absoluteRects):
        * rendering/svg/RenderSVGBlock.h:
        (RenderSVGBlock):
        * rendering/svg/RenderSVGContainer.cpp:
        (WebCore::RenderSVGContainer::addFocusRingRects):
        * rendering/svg/RenderSVGContainer.h:
        (RenderSVGContainer):
        * rendering/svg/RenderSVGImage.cpp:
        (WebCore::RenderSVGImage::addFocusRingRects):
        * rendering/svg/RenderSVGImage.h:
        (RenderSVGImage):
        * rendering/svg/RenderSVGModelObject.cpp:
        (WebCore::RenderSVGModelObject::absoluteRects):
        * rendering/svg/RenderSVGModelObject.h:
        (RenderSVGModelObject):
        * rendering/svg/RenderSVGShape.cpp:
        (WebCore::RenderSVGShape::addFocusRingRects):
        * rendering/svg/RenderSVGShape.h:
        (RenderSVGShape):

2012-03-08  Erik Arvidsson  <arv@chromium.org>

        [V8] Use EventNames instead of strings
        https://bugs.webkit.org/show_bug.cgi?id=80649

        Reviewed by Ojan Vafai.

        No new tests. Covered by existing tests.

        * bindings/v8/V8AbstractEventListener.cpp:
        (WebCore::V8AbstractEventListener::invokeEventHandler):

2012-03-08  Tim Horton  <timothy_horton@apple.com>

        No-op filter changes color output because of colorspace issues
        https://bugs.webkit.org/show_bug.cgi?id=72411
        <rdar://problem/10588374>

        Reviewed by Dean Jackson.

        Redefine "linear RGB" color space on Mac to mean linearized sRGB, instead of linear
        Generic RGB. This makes existing CG color matching equivalent to what other ports do via
        ImageBuffer::transformColorSpace (which only adjusts gamma, as we will now). Previously,
        we were also causing actual (non-gamma) color adjustments which were not reversible.

        No new tests, covered by all existing SVG and CSS filter tests.

        * Resources/linearSRGB.icc: Added.
        * WebCore.xcodeproj/project.pbxproj:
        * platform/graphics/cg/GraphicsContextCG.cpp:
        (WebCore::linearRGBColorSpaceRef):

2012-03-08  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=80463
        RenderImage is using the wrong origin when calling addRelevantRepaintedObject
        -and corresponding-
        <rdar://problem/10970221>

        Reviewed by Dan Bernstein.

        Use the exact same rect that we paint with instead of the 
        visualOverflowRect() which does not always have a correct x and y.
        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::paintReplaced):
        * rendering/RenderVideo.cpp:
        (WebCore::RenderVideo::paintReplaced):

2012-03-08  Jer Noble  <jer.noble@apple.com>

        Full Screen Refactor Part 3: Animate into Full Screen mode using new animation classes.
        https://bugs.webkit.org/show_bug.cgi?id=78928

        Reviewed by Anders Carlsson.

        Move WKFullScreenWindow from WebKit2 into WebCore to be shared by WebKit2 and WebKit.
        * WebCore.xcodeproj/project.pbxproj:
        * platform/mac/WebCoreFullScreenWindow.h:
        * platform/mac/WebCoreFullScreenWindow.mm:

        Add symbols for the following classes and functions to the export list:
            WebCoreFullScreenWindow
            WebWindowScaleAnimation
            WebWindowFadeAnimation
            ScrollView::contentsToScreen()
            RenderObject::localToContainerQuad()
            Document::setAnimatingFullScreen()
        * WebCore.exp.in:

2012-03-08  Jer Noble  <jer.noble@apple.com>

        Full Screen Refactor Part 1: Remove special-case rendering code for Full Screen animation.
        https://bugs.webkit.org/show_bug.cgi?id=78925

        Reviewed by John Sullivan.

        No new tests; no net change in functionality so covered by existing tests.

        The following functions had special case code for rendering full-screen elements removed:
        * dom/Document.cpp:
        (WebCore::Document::webkitWillEnterFullScreenForElement):
        (WebCore::Document::webkitDidEnterFullScreenForElement):
        (WebCore::Document::webkitWillExitFullScreenForElement):
        (WebCore::Document::webkitDidExitFullScreenForElement):
        (WebCore::Document::setAnimatingFullScreen):
        * page/FrameView.cpp:
        (WebCore):
        (WebCore::FrameView::updateCompositingLayers):
        (WebCore::FrameView::syncCompositingStateForThisFrame):
        * rendering/RenderLayerBacking.cpp:
        (WebCore::layerOrAncestorIsTransformed):
        (WebCore::RenderLayerBacking::updateCompositedBounds):
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::rebuildCompositingLayerTree):
        (WebCore::RenderLayerCompositor::requiresCompositingLayer):
        * rendering/RenderLayerCompositor.h:

2012-03-08  Matt Lilek  <mrl@apple.com>

        Don't enable VIDEO_TRACK on all OS X platforms
        https://bugs.webkit.org/show_bug.cgi?id=80635

        Reviewed by Eric Carlson.

        * Configurations/FeatureDefines.xcconfig:

2012-03-08  Tony Chang  <tony@chromium.org>

        implement flexbox wrap-reverse
        https://bugs.webkit.org/show_bug.cgi?id=80552

        Reviewed by Ojan Vafai.

        No new tests, but additional coverage in:
            css3/flexbox/multiline-align.html
            css3/flexbox/multiline-pack.html
            css3/flexbox/multiline.html

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::WrapReverseContext::WrapReverseContext): Helper struct to hold information needed for reversing
        the order of lines.
        (RenderFlexibleBox::WrapReverseContext):
        (WebCore::RenderFlexibleBox::WrapReverseContext::addCrossAxisOffset):
        (WebCore::RenderFlexibleBox::WrapReverseContext::addNumberOfChildrenOnLine):
        (WebCore::RenderFlexibleBox::WrapReverseContext::lineCrossAxisDelta): Computes the number of pixels to move a line.
        (WebCore):
        (WebCore::RenderFlexibleBox::layoutFlexItems): Call flipForWrapReverse if needed. This happens
        before flipForRightToLeftColumn because otherwise the crossAxisOffsets will be wrong.
        (WebCore::flexAlignForChild):
        (WebCore::RenderFlexibleBox::alignChildren): Flip alignment in wrap-reverse because the cross directions are flipped.
        (WebCore::RenderFlexibleBox::flipForWrapReverse): Flip each line.
        * rendering/RenderFlexibleBox.h:
        (RenderFlexibleBox):

2012-03-08  Adam Klein  <adamk@chromium.org>

        Remove InDocumentFlag manipulation methods from Node interface
        https://bugs.webkit.org/show_bug.cgi?id=80612

        Reviewed by Ryosuke Niwa.

        This is a first step towards tightening up Node::inDocument() to match
        the actual in-document-tree state (see r108152 for the sort of bug
        resulting from those not matching).

        No new tests, refactoring only.

        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::removedFromDocument): Remove duplicate call to clearInDocument:
        the call to Node::removedFromDocument three lines above will clear the flag.
        * dom/Document.cpp:
        (WebCore::Document::Document): Call ContainerNode constructor with InDocumentFlag always set
        instead of calling setInDocument.
        * dom/Node.cpp:
        (WebCore::Node::insertedIntoDocument): Inline setInDocument (now the only caller).
        (WebCore::Node::removedFromDocument): Inline clearInDocument (now the only caller).
        * dom/Node.h: Remove setInDocument & clearInDocument, add new CreateDocument ConstructionType.

2012-03-08  Tor Arne Vestbø  <tor.arne.vestbo@nokia.com>

        [Qt] Try to fix the Snow Leopard build

        If the build is running under sh, echo -n does not empty the file.

        * DerivedSources.pri:

2012-03-08  Tor Arne Vestbø  <tor.arne.vestbo@nokia.com>

        Prospective build fix for Qt minimal after r110191

        https://bugs.webkit.org/show_bug.cgi?id=80338

        * testing/Internals.cpp:
        (WebCore):
        * testing/Internals.h:
        (Internals):

2012-03-08  Tor Arne Vestbø  <tor.arne.vestbo@nokia.com>

        [Qt] Prospective Windows build fix

        Don't assume that windows-builds will always run inside a cmd.exe shell.

        * DerivedSources.pri:

2012-03-08  Vivek Galatage  <vivekgalatage@gmail.com>

        Web Inspector: Creating a selector for class names with trailing spaces results with two dots instead of one
        https://bugs.webkit.org/show_bug.cgi?id=80529

        Trim the className before replacing the whitespaces with dot "."

        Reviewed by Pavel Feldman.

        No new tests.

        * inspector/front-end/DOMAgent.js:
        (WebInspector.DOMNode.prototype.appropriateSelectorFor):

2012-03-08  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/10981173> Dashboard regions should not be in device space

        Reviewed by John Sullivan.

        Test: TestWebKitAPI/Tests/mac/DeviceScaleFactorInDashboardRegions.mm

        * rendering/RenderInline.cpp:
        (WebCore::RenderInline::addDashboardRegions): Stop applying the device scale factor to
        Dashboard regions.
        * rendering/RenderObject.cpp:
        (WebCore::RenderObject::addDashboardRegions): Ditto.

2012-03-08  Cem Kocagil  <cem.kocagil@gmail.com>

        Web Inspector: Cannot insert right curly bracket on some keyboards
        https://bugs.webkit.org/show_bug.cgi?id=80474

        Make sure other modifiers are not pressed

        Reviewed by Pavel Feldman

        * inspector/front-end/inspector.js:
        (WebInspector.documentKeyDown):

2012-03-08  Max Vujovic  <mvujovic@adobe.com>

        Add a method to window.internals to enable testing of inspector highlight rects
        https://bugs.webkit.org/show_bug.cgi?id=80338

        Reviewed by Pavel Feldman.

        Add window.internals.inspectorHighlightRects, a method which makes it possible to test the
        positions and sizes of inspector highlight rects.

        Test: inspector/elements/highlight-node.html

        * WebCore.exp.in: Export symbols.
        * testing/Internals.cpp:
        (WebCore::Internals::inspectorHighlightRects): Call InspectorController::getHighlight and
        return the highlight's quads as a ClientRectList.
        (WebCore):
        * testing/Internals.h:
        (WebCore):
        (Internals):
        * testing/Internals.idl:

            Add inspectorHighlightRects to the window.internals interface.

2012-03-08  Antti Koivisto  <antti@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=80370
        Enable matched declaration caching for elements with a style attribute

        Reviewed by Andreas Kling

        Make the property set for style attribute immutable as long as there is no CSSOM
        wrapper for it. If the style attribute changes we create a new property set instead
        of recycling the old one. This way the property sets can be made cacheable as long
        as there is no CSSOM wrapper that would allow uncontrolled modifications. Constructing
        the wrapper disables caching.
        
        Made StyledElement::inlineStyle() and StyledElement::ensureInlineStyle() return a const
        StylePropertySet so making accidental modifications difficult. Also dropped *Decl from
        the names.
        
        Fixed two unrelated bugs that this exposed.

        * css/CSSStyleSelector.cpp:
        
            Don't allow caching of document element style if writingModeSetOnDocumentElement() bit is set.
            Tested by fast/multicol/vertical-rl/break-properties.html.
        
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * css/StylePropertySet.h:
        (StylePropertySet):
        (WebCore::StylePropertySet::hasCSSOMWrapper):
        * dom/Element.cpp:
        (WebCore::Element::recalcStyle):
        
            Invalidate the matched properties cache if the document has rem units and the root font changes.
            Tested by fast/css/rem-dynamic-scaling.html.
        
        * dom/ElementAttributeData.cpp:
        (WebCore):
        (WebCore::ElementAttributeData::ensureInlineStyle):
        (WebCore::ElementAttributeData::ensureMutableInlineStyle):
        (WebCore::ElementAttributeData::updateInlineStyleAvoidingMutation):
        (WebCore::ElementAttributeData::destroyInlineStyle):
        * dom/ElementAttributeData.h:
        (WebCore::ElementAttributeData::inlineStyle):
        (ElementAttributeData):
        * dom/StyledElement.cpp:
        (WebCore::StyledElement::updateStyleAttribute):
        (WebCore::StyledElement::~StyledElement):
        (WebCore):
        (WebCore::StyledElement::style):
        (WebCore::StyledElement::parseAttribute):
        (WebCore::StyledElement::setInlineStyleProperty):
        (WebCore::StyledElement::removeInlineStyleProperty):
        (WebCore::StyledElement::addSubresourceAttributeURLs):
        * dom/StyledElement.h:
        (WebCore::StyledElement::inlineStyle):
        (WebCore::StyledElement::ensureInlineStyle):
        (StyledElement):
        (WebCore::StyledElement::destroyInlineStyle):
        * editing/ApplyStyleCommand.cpp:
        (WebCore::hasNoAttributeOrOnlyStyleAttribute):
        (WebCore::ApplyStyleCommand::applyRelativeFontStyleChange):
        (WebCore::ApplyStyleCommand::removeEmbeddingUpToEnclosingBlock):
        (WebCore::ApplyStyleCommand::applyInlineStyleToNodeRange):
        (WebCore::ApplyStyleCommand::removeCSSStyle):
        (WebCore::ApplyStyleCommand::applyInlineStyleToPushDown):
        (WebCore::ApplyStyleCommand::addBlockStyle):
        (WebCore::ApplyStyleCommand::addInlineStyleIfNeeded):
        * editing/EditingStyle.cpp:
        (WebCore::HTMLElementEquivalent::propertyExistsInStyle):
        (HTMLTextDecorationEquivalent):
        (WebCore::HTMLTextDecorationEquivalent::propertyExistsInStyle):
        (WebCore::EditingStyle::conflictsWithInlineStyleOfElement):
        (WebCore::EditingStyle::elementIsStyledSpanOrHTMLEquivalent):
        (WebCore::EditingStyle::mergeInlineStyleOfElement):
        (WebCore::elementMatchesAndPropertyIsNotInInlineStyleDecl):
        (WebCore::EditingStyle::mergeStyle):
        * editing/EditingStyle.h:
        (EditingStyle):
        * editing/RemoveCSSPropertyCommand.cpp:
        (WebCore::RemoveCSSPropertyCommand::doApply):
        * editing/ReplaceSelectionCommand.cpp:
        (WebCore::ReplaceSelectionCommand::removeRedundantStylesAndKeepStyleSpanInline):
        (WebCore::ReplaceSelectionCommand::handleStyleSpans):
        * editing/markup.cpp:
        (WebCore::StyledMarkupAccumulator::appendElement):
        (WebCore::styleFromMatchedRulesAndInlineDecl):
        * html/HTMLElement.cpp:
        (WebCore::StyledElement::copyNonAttributeProperties):
        * html/canvas/CanvasStyle.cpp:
        (WebCore::currentColor):
        * page/PageSerializer.cpp:
        (WebCore::PageSerializer::serializeFrame):
        (WebCore::PageSerializer::retrieveResourcesForProperties):
        * page/PageSerializer.h:
        (PageSerializer):
        * rendering/RenderTreeAsText.cpp:
        (WebCore::isEmptyOrUnstyledAppleStyleSpan):

2012-03-08  Scott Byer  <scottbyer@chromium.org>

        Have ScrollAnimatorNone use requestAnimationFrame
        https://bugs.webkit.org/show_bug.cgi?id=78938

        Reviewed by James Robinson.

        No new tests. Passes Chromium webkit_unit_tests.

        * page/FrameView.cpp:
        (WebCore::FrameView::serviceScriptedAnimations):
        * platform/ScrollAnimator.h:
        (WebCore::ScrollAnimator::serviceScrollAnimations):
        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::ScrollAnimatorNone):
        (WebCore::ScrollAnimatorNone::scroll):
        (WebCore::ScrollAnimatorNone::cancelAnimations):
        (WebCore):
        (WebCore::ScrollAnimatorNone::serviceScrollAnimations):
        (WebCore::ScrollAnimatorNone::animationTimerFired):
        (WebCore::ScrollAnimatorNone::startNextTimer):
        (WebCore::ScrollAnimatorNone::animationTimerActive):
        (WebCore::ScrollAnimatorNone::stopAnimationTimerIfNeeded):
        * platform/ScrollAnimatorNone.h:
        (ScrollAnimatorNone):
        * platform/ScrollableArea.cpp:
        (WebCore::ScrollableArea::serviceScrollAnimations):
        (WebCore):
        * platform/ScrollableArea.h:
        (WebCore):
        (ScrollableArea):
        * rendering/RenderLayer.h:
        (WebCore::RenderLayer::hostWindow):
        (RenderLayer):
        * rendering/RenderListBox.h:
        (WebCore::RenderListBox::hostWindow):
        (RenderListBox):

2012-03-08  Dan Bernstein  <mitz@apple.com>

        REGRESSION (r109964): Assertion failure (!isUndefined()) in Length::getIntValue() when a Dashboard region is specified without offsets
        https://bugs.webkit.org/show_bug.cgi?id=80614

        Reviewed by Beth Dakin.

        Test: fast/css/dashboard-regions-undefined-length-assertion.html

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList): Reverted to setting zero lengths,
        rather than Undefined ones, in the RenderStyle when offsets are not given.

2012-03-08  Mikkel Kruse Johnsen  <mikkel@linet.dk>

        WebKitGtk+ fails to build on win32 against GTK3
        https://bugs.webkit.org/show_bug.cgi?id=63919

        Reviewed by Gustavo Noronha Silva.

        * plugins/gtk/PluginViewGtk.cpp: Don't use gtk_socket_new with GTK3 on Win32
        (WebCore::PluginView::platformStart):

2012-03-08  Jason Liu  <jason.liu@torchmobile.com.cn>

        [BlackBerry]New feature: support about:cookie for internal build.
        https://bugs.webkit.org/show_bug.cgi?id=80367

        Reviewed by Antonio Gomes.

        No new tests.

        * platform/blackberry/CookieManager.cpp:
        (WebCore::CookieManager::generateHtmlFragmentForCookies):
        (WebCore):
        * platform/blackberry/CookieManager.h:
        * platform/network/blackberry/NetworkJob.cpp:
        (WebCore::NetworkJob::handleAbout):

2012-03-08  Caio Marcelo de Oliveira Filho  <caio.oliveira@openbossa.org>

        Make elements with attributes smaller by eliminating the m_element back pointer in NamedNodeMap
        https://bugs.webkit.org/show_bug.cgi?id=75069

        Reviewed by Ryosuke Niwa.

        NamedNodeMap is an exposed DOM representation of an element's attribute storage. As part of
        its implementation it keeps a pointer to its associated Element plus all the attribute
        storage.

        This commit separate the two things: NamedNodeMap is now a wrapper to Element, containing
        only the pointer, and the attribute storage is now owned by Element directly. Since usage
        of NamedNodeMap is not very common, it can be stored in ElementRareData. As a result, most
        elements with attributes now don't need to allocate memory for that extra pointer in
        NamedNodeMap.

        One consequence of this implementation is that now we explicitly don't support
        DocumentType.notations and DocumentType.entities. They weren't supported before, a
        NamedNodeMap was never created for those attributes -- and some NamedNodeMap functions
        wouldn't work correctly without an associated Element.

        NamedNodeMap itself was cleaned up, as well as unnecessary references to it removed in the
        code and comments.

        No new tests and should not change results for existing tests.

        * dom/Attribute.h:
        (WebCore):
        * dom/DocumentType.h:
        (DocumentType): Point out that we don't support does attributes yet.
        * dom/Element.cpp:
        (WebCore::Element::~Element): Detaching the NamedNodeMap is no longer necessary because it
        will be destroyed. We still detach the potential Attrs inside our Attributes by using
        clearAttributes().
        (WebCore::Element::attributes): Looks in ElementRareData now. Note we ensure the creation
        of the attribute storage.
        (WebCore):
        (WebCore::Element::getAttribute):
        (WebCore::Element::setAttributeInternal):
        (WebCore::Element::parserSetAttributes):
        (WebCore::Element::hasAttributes):
        (WebCore::Element::createAttributeData):
        (WebCore::Element::insertedIntoDocument):
        (WebCore::Element::removedFromDocument):
        (WebCore::Element::getURLAttribute):
        (WebCore::Element::getNonEmptyURLAttribute):
        (WebCore::Element::hasNamedNodeMap): Helper function for Node::dumpStatistics().
        * dom/Element.h:
        (Element):
        (WebCore::Element::attributeData):
        (WebCore::Element::ensureAttributeData):
        (WebCore::Element::fastHasAttribute):
        (WebCore::Element::fastGetAttribute):
        (WebCore::Element::hasAttributesWithoutUpdate):
        (WebCore::Element::idForStyleResolution):
        (WebCore::Element::attributeCount):
        (WebCore::Element::attributeItem):
        (WebCore::Element::getAttributeItem):
        * dom/ElementAttributeData.h:
        (WebCore::ElementAttributeData::create):
        (ElementAttributeData):
        * dom/ElementRareData.h:
        (ElementRareData):
        * dom/NamedNodeMap.cpp: Rewriting now that m_attributeData is not a member, using m_element
        methods when possible.
        (WebCore::NamedNodeMap::ref):
        (WebCore::NamedNodeMap::deref):
        (WebCore::NamedNodeMap::getNamedItem):
        (WebCore::NamedNodeMap::getNamedItemNS):
        (WebCore::NamedNodeMap::removeNamedItem):
        (WebCore::NamedNodeMap::removeNamedItemNS):
        (WebCore::NamedNodeMap::setNamedItem):
        (WebCore::NamedNodeMap::item):
        (WebCore::NamedNodeMap::length):
        * dom/NamedNodeMap.h:
        (WebCore):
        (WebCore::NamedNodeMap::create):
        (NamedNodeMap):
        (WebCore::NamedNodeMap::NamedNodeMap): Instead of asserting m_element in every function, we
        now assert only in the constructor.
        * dom/Node.cpp:
        (WebCore::Node::dumpStatistics): Add a counter for elements with rare data, this allows us
        compare more clearly the impact of moving NamedNodeMap there.
        (WebCore::Node::isEqualNode): Remove use of mapsEquivalent(). It was dead code, because
        both entities and notations were always NULL.
        (WebCore::Node::compareDocumentPosition):
        * inspector/DOMPatchSupport.h:
        (WebCore):
        * svg/SVGElement.cpp:
        (WebCore::SVGElement::attributeChanged):

2012-03-08  Robin Cao  <robin.cao@torchmobile.com.cn>

        [BlackBerry] Upstream WebGL related files from platform/graphics
        https://bugs.webkit.org/show_bug.cgi?id=79876

        Reviewed by Rob Buis.

        Initial upstream, no new tests.

        * platform/graphics/blackberry/DrawingBufferBlackBerry.cpp: Added.
        (WebCore):
        (DrawingBufferInternal):
        (WebCore::generateColorTexture):
        (WebCore::DrawingBuffer::DrawingBuffer):
        (WebCore::DrawingBuffer::~DrawingBuffer):
        (WebCore::DrawingBuffer::publishToPlatformLayer):
        (WebCore::DrawingBuffer::reset):
        (WebCore::DrawingBuffer::platformLayer):
        * platform/graphics/blackberry/GraphicsContext3DBlackBerry.cpp: Added.
        (WebCore):
        (WebCore::GraphicsContext3D::create):
        (WebCore::GraphicsContext3D::GraphicsContext3D):
        (WebCore::GraphicsContext3D::~GraphicsContext3D):
        (WebCore::GraphicsContext3D::paintsIntoCanvasBuffer):
        (WebCore::GraphicsContext3D::makeContextCurrent):
        (WebCore::GraphicsContext3D::isGLES2Compliant):
        (WebCore::GraphicsContext3D::isGLES2NPOTStrict):
        (WebCore::GraphicsContext3D::isErrorGeneratedOnOutOfBoundsAccesses):
        (WebCore::GraphicsContext3D::platformTexture):
        (WebCore::GraphicsContext3D::platformLayer):
        (WebCore::GraphicsContext3D::paintToCanvas):
        (WebCore::GraphicsContext3D::setContextLostCallback):
        * platform/graphics/blackberry/WebGLLayerWebKitThread.cpp: Added.
        (WebCore):
        (WebCore::WebGLLayerWebKitThread::WebGLLayerWebKitThread):
        (WebCore::WebGLLayerWebKitThread::~WebGLLayerWebKitThread):
        (WebCore::WebGLLayerWebKitThread::setNeedsDisplay):
        (WebCore::WebGLLayerWebKitThread::updateTextureContentsIfNeeded):
        * platform/graphics/blackberry/WebGLLayerWebKitThread.h: Added.
        (WebCore):
        (WebGLLayerWebKitThread):
        (WebCore::WebGLLayerWebKitThread::create):
        (WebCore::WebGLLayerWebKitThread::setWebGLContext):

2012-03-08  Yong Li  <yoli@rim.com>

        [BlackBerry] LayerRender should turn off stencil/scissor after drawing layers
        https://bugs.webkit.org/show_bug.cgi?id=80598

        Reviewed by Rob Buis.

        Turn off stencil/scissor after using them to avoid affecting later GL operation
        accidentally.

        * platform/graphics/blackberry/LayerRenderer.cpp:
        (WebCore::LayerRenderer::drawLayers):

2012-03-08  Simon Hausmann  <simon.hausmann@nokia.com>

        [Qt] Windows build fix.

        Reviewed by Tor Arne Vestbø.

        * DerivedSources.pri: Replace commandline that is too long for Windows with
        separate lines to be executed in the Makefile for the IDL preprocessing.

2012-03-08  Ilya Tikhonovsky  <loislo@chromium.org>

        Web Inspector: The function had to return a hash but it returned just address.
        https://bugs.webkit.org/show_bug.cgi?id=80591

        Reviewed by Yury Semikhatsky.

        * bindings/v8/RetainedDOMInfo.cpp:
        (WebCore::RetainedDOMInfo::GetHash):

2012-03-08  Ilya Tikhonovsky  <loislo@chromium.org>

        Unreviewed single line fix. The function had to return a hash but it returned just address.

        * bindings/v8/V8GCController.cpp:
        (WebCore::UnspecifiedGroup::GetHash):

2012-03-08  Shinya Kawanaka  <shinyak@chromium.org>

        <shadow> should be rendered correctly.
        https://bugs.webkit.org/show_bug.cgi?id=78596

        Reviewed by Hajime Morita.

        This patch supports <shadow> element rendering.

        When attaching <shadow> element, if it is in the oldest shadow tree, it runs a part of
        distribution algorithm. If it is in non-oldest shadow tree, it runs tree a part of
        tree composition algorithm to assign a older shadow root. In this patch, InsertionPonit
        try to treat the distributed host children and the assigned shadow children similarly.

        NodeRenderingContext supports rendering <shadow> element. Since the assigned shadow children
        are treated like distributed host children, that change is to consider non-youngest shadow
        tree basically also.

        Tests: fast/dom/shadow/shadow-element-rendering-multiple.html
               fast/dom/shadow/shadow-element-rendering-single.html

        * dom/NodeRenderingContext.cpp:
        (WebCore):
        (WebCore::NodeRenderingContext::NodeRenderingContext):
          Does not ignore non-youngest shadow tree.
        * dom/ShadowRoot.cpp:
        (WebCore::ShadowRoot::ShadowRoot):
        * dom/ShadowRoot.h:
        (ShadowRoot):
        (WebCore::ShadowRoot::assignedTo):
        (WebCore):
        (WebCore::ShadowRoot::setAssignedTo):
        (WebCore::ShadowRoot::isUsedForRendering):
          Returns true if ShadowRoot is youngest or assigned to some InsertionPoint.
        (WebCore::toShadowRoot):
        * dom/ShadowTree.cpp:
        (WebCore::ShadowTree::insertionPointFor):
          Returns InsertionPoint to which node is distributed.
        * dom/ShadowTree.h:
        (ShadowTree):
        * html/shadow/HTMLContentElement.h:
        (WebCore::HTMLContentElement::doesSelectFromHostChildren):
        (HTMLContentElement):
        * html/shadow/HTMLShadowElement.cpp:
        (WebCore::HTMLShadowElement::HTMLShadowElement):
        (WebCore::HTMLShadowElement::select):
        (WebCore::HTMLShadowElement::doesSelectFromHostChildren):
        (WebCore):
        * html/shadow/HTMLShadowElement.h:
        (HTMLShadowElement):
        * html/shadow/InsertionPoint.cpp:
        (WebCore::InsertionPoint::attach):
        (WebCore::InsertionPoint::detach):
        (WebCore::InsertionPoint::assignedFrom):
        (WebCore):
        (WebCore::InsertionPoint::assignShadowRoot):
        (WebCore::InsertionPoint::clearAssignment):
        * html/shadow/InsertionPoint.h:
        (InsertionPoint):

2012-03-06  Hans Wennborg  <hans@chromium.org>

        Speech JavaScript API: SpeechRecognitionAlternative, Result and ResultList
        https://bugs.webkit.org/show_bug.cgi?id=80424

        Reviewed by Adam Barth.

        Implement the SpeechRecognitionAlternative,
        SpeechRecognitionResult and SpeechRecognitionResultList.
        (Spec: http://speech-javascript-api-spec.googlecode.com/git/speechapi.html)

        No new tests because these interfaces don't have constructors.
        They will be tested as more of the API gets implemented.

        * Modules/speech/SpeechRecognitionAlternative.cpp: Added.
        (WebCore):
        (WebCore::SpeechRecognitionAlternative::create):
        (WebCore::SpeechRecognitionAlternative::SpeechRecognitionAlternative):
        * Modules/speech/SpeechRecognitionAlternative.h: Added.
        (WebCore):
        (SpeechRecognitionAlternative):
        (WebCore::SpeechRecognitionAlternative::transcript):
        (WebCore::SpeechRecognitionAlternative::confidence):
        * Modules/speech/SpeechRecognitionAlternative.idl: Added.
        * Modules/speech/SpeechRecognitionResult.cpp: Added.
        (WebCore):
        (WebCore::SpeechRecognitionResult::create):
        (WebCore::SpeechRecognitionResult::item):
        (WebCore::SpeechRecognitionResult::SpeechRecognitionResult):
        * Modules/speech/SpeechRecognitionResult.h: Added.
        (WebCore):
        (SpeechRecognitionResult):
        (WebCore::SpeechRecognitionResult::length):
        (WebCore::SpeechRecognitionResult::final):
        * Modules/speech/SpeechRecognitionResult.idl: Added.
        * Modules/speech/SpeechRecognitionResultList.cpp: Added.
        (WebCore):
        (WebCore::SpeechRecognitionResultList::create):
        (WebCore::SpeechRecognitionResultList::item):
        (WebCore::SpeechRecognitionResultList::SpeechRecognitionResultList):
        * Modules/speech/SpeechRecognitionResultList.h: Added.
        (WebCore):
        (SpeechRecognitionResultList):
        (WebCore::SpeechRecognitionResultList::length):
        * Modules/speech/SpeechRecognitionResultList.idl: Added.
        * WebCore.gypi:

2012-03-08  Robin Cao  <robin.cao@torchmobile.com.cn>

        [BlackBerry] Upstream GraphicsLayerBlackBerry.{h, cpp}
        https://bugs.webkit.org/show_bug.cgi?id=79867

        Reviewed by Rob Buis.

        Initial upstream, no new tests.

        * platform/graphics/blackberry/GraphicsLayerBlackBerry.cpp: Added.
        (WebCore):
        (WebCore::setLayerBorderColor):
        (WebCore::clearBorderColor):
        (WebCore::setLayerBackgroundColor):
        (WebCore::clearLayerBackgroundColor):
        (WebCore::GraphicsLayer::create):
        (WebCore::GraphicsLayerBlackBerry::GraphicsLayerBlackBerry):
        (WebCore::GraphicsLayerBlackBerry::~GraphicsLayerBlackBerry):
        (WebCore::GraphicsLayerBlackBerry::setName):
        (WebCore::GraphicsLayerBlackBerry::setChildren):
        (WebCore::GraphicsLayerBlackBerry::addChild):
        (WebCore::GraphicsLayerBlackBerry::addChildAtIndex):
        (WebCore::GraphicsLayerBlackBerry::addChildBelow):
        (WebCore::GraphicsLayerBlackBerry::addChildAbove):
        (WebCore::GraphicsLayerBlackBerry::replaceChild):
        (WebCore::GraphicsLayerBlackBerry::removeFromParent):
        (WebCore::GraphicsLayerBlackBerry::setPosition):
        (WebCore::GraphicsLayerBlackBerry::setAnchorPoint):
        (WebCore::GraphicsLayerBlackBerry::setSize):
        (WebCore::GraphicsLayerBlackBerry::setTransform):
        (WebCore::GraphicsLayerBlackBerry::setChildrenTransform):
        (WebCore::GraphicsLayerBlackBerry::setPreserves3D):
        (WebCore::GraphicsLayerBlackBerry::setMasksToBounds):
        (WebCore::GraphicsLayerBlackBerry::setDrawsContent):
        (WebCore::GraphicsLayerBlackBerry::setContentsVisible):
        (WebCore::GraphicsLayerBlackBerry::setMaskLayer):
        (WebCore::GraphicsLayerBlackBerry::setReplicatedByLayer):
        (WebCore::GraphicsLayerBlackBerry::setFixedPosition):
        (WebCore::GraphicsLayerBlackBerry::setHasFixedContainer):
        (WebCore::GraphicsLayerBlackBerry::setHasFixedAncestorInDOMTree):
        (WebCore::GraphicsLayerBlackBerry::setBackgroundColor):
        (WebCore::GraphicsLayerBlackBerry::clearBackgroundColor):
        (WebCore::GraphicsLayerBlackBerry::setContentsOpaque):
        (WebCore::GraphicsLayerBlackBerry::setBackfaceVisibility):
        (WebCore::GraphicsLayerBlackBerry::setOpacity):
        (WebCore::GraphicsLayerBlackBerry::setContentsNeedsDisplay):
        (WebCore::GraphicsLayerBlackBerry::setNeedsDisplay):
        (WebCore::GraphicsLayerBlackBerry::setNeedsDisplayInRect):
        (WebCore::GraphicsLayerBlackBerry::setContentsRect):
        (WebCore::removeAnimationByIdAndProperty):
        (WebCore::removeAnimationByName):
        (WebCore::GraphicsLayerBlackBerry::addAnimation):
        (WebCore::GraphicsLayerBlackBerry::pauseAnimation):
        (WebCore::GraphicsLayerBlackBerry::removeAnimation):
        (WebCore::GraphicsLayerBlackBerry::suspendAnimations):
        (WebCore::GraphicsLayerBlackBerry::resumeAnimations):
        (WebCore::GraphicsLayerBlackBerry::setContentsToImage):
        (WebCore::GraphicsLayerBlackBerry::updateContentsImage):
        (WebCore::GraphicsLayerBlackBerry::setContentsToCanvas):
        (WebCore::GraphicsLayerBlackBerry::setContentsToMedia):
        (WebCore::GraphicsLayerBlackBerry::hostLayerForSublayers):
        (WebCore::GraphicsLayerBlackBerry::layerForSuperlayer):
        (WebCore::GraphicsLayerBlackBerry::platformLayer):
        (WebCore::GraphicsLayerBlackBerry::setDebugBackgroundColor):
        (WebCore::GraphicsLayerBlackBerry::setDebugBorder):
        (WebCore::GraphicsLayerBlackBerry::updateSublayerList):
        (WebCore::GraphicsLayerBlackBerry::updateLayerPosition):
        (WebCore::GraphicsLayerBlackBerry::updateLayerSize):
        (WebCore::GraphicsLayerBlackBerry::updateAnchorPoint):
        (WebCore::GraphicsLayerBlackBerry::updateTransform):
        (WebCore::GraphicsLayerBlackBerry::updateChildrenTransform):
        (WebCore::GraphicsLayerBlackBerry::updateMasksToBounds):
        (WebCore::GraphicsLayerBlackBerry::updateContentsOpaque):
        (WebCore::GraphicsLayerBlackBerry::updateBackfaceVisibility):
        (WebCore::GraphicsLayerBlackBerry::updateLayerPreserves3D):
        (WebCore::GraphicsLayerBlackBerry::updateLayerIsDrawable):
        (WebCore::GraphicsLayerBlackBerry::updateFixedPosition):
        (WebCore::GraphicsLayerBlackBerry::updateHasFixedContainer):
        (WebCore::GraphicsLayerBlackBerry::updateHasFixedAncestorInDOMTree):
        (WebCore::GraphicsLayerBlackBerry::updateLayerBackgroundColor):
        (WebCore::GraphicsLayerBlackBerry::updateAnimations):
        (WebCore::GraphicsLayerBlackBerry::updateContentsVideo):
        (WebCore::GraphicsLayerBlackBerry::updateContentsRect):
        (WebCore::GraphicsLayerBlackBerry::setupContentsLayer):
        (WebCore::GraphicsLayerBlackBerry::updateOpacityOnLayer):
        (WebCore::GraphicsLayerBlackBerry::contentsVisible):
        * platform/graphics/blackberry/GraphicsLayerBlackBerry.h: Added.
        (WebCore):
        (GraphicsLayerBlackBerry):
        (WebCore::GraphicsLayerBlackBerry::notifySyncRequired):
        (WebCore::GraphicsLayerBlackBerry::notifyAnimationStarted):
        (WebCore::GraphicsLayerBlackBerry::primaryLayer):
        (WebCore::GraphicsLayerBlackBerry::contentsLayer):

2012-03-07  Shinya Kawanaka  <shinyak@chromium.org>

        Refactoring: Remove Node::isContentElement and Node::isShadowElement.
        https://bugs.webkit.org/show_bug.cgi?id=80501

        Reviewed by Hajime Morita.

        Removes Node::isContentElement and Node::isShadowElement. These methods are replaced
        by hasTagName. However the tag name of HTMLContentElement was not consistent,
        this patch make them consistent.

        No new tests. Should be covered by existing tests.

        * dom/Node.h:
        * html/HTMLElement.h:
        (WebCore::HTMLElement::isInsertionPoint):
        (HTMLElement):
        * html/HTMLSummaryElement.cpp:
        (WebCore::SummaryContentElement::SummaryContentElement):
          It uses HTMLNames::divTag as tagname. It should use HTMLNames::webkitShadowTagName.
        * html/shadow/HTMLContentElement.h:
        (HTMLContentElement):
        * html/shadow/InsertionPoint.h:
        (InsertionPoint):
        (WebCore::InsertionPoint::isInsertionPoint):
        (WebCore::isInsertionPoint):
        * testing/Internals.cpp:
        (WebCore::Internals::isValidContentSelect):
        * testing/Internals.h:
        (Internals):

2012-03-07  Adam Barth  <abarth@webkit.org>

        ContainerNode::insertedIntoDocument and removedFromDocument use weak iteration patterns
        https://bugs.webkit.org/show_bug.cgi?id=80569

        Reviewed by Ryosuke Niwa.

        This patch moves ContainerNode::insertedIntoDocument and
        removedFromDocument to using a better iteration pattern in which we
        collect all the nodes we're planning to iterate into a vector and then
        iterate over them.

        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::insertedIntoDocument):
        (WebCore::ContainerNode::removedFromDocument):

2012-03-07  Ami Fischman  <fischman@chromium.org>

        [Chromium] Allow CCLayerTreeHost::context() to be called even with the threaded compositor enabled.
        https://bugs.webkit.org/show_bug.cgi?id=80565

        Reviewed by James Robinson.

        This gets triggered by the video HW decode+render path when threaded compositor is enabled
        (https://chromiumcodereview.appspot.com/9639005/)

        No new tests.

        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::context):

2012-03-07  Mike Lawther  <mikelawther@chromium.org>

        CSS3 calc: mixed absolute/percentages work for width, height, margin and padding
        https://bugs.webkit.org/show_bug.cgi?id=79621

        Reviewed by Andreas Kling.

        ApplyPropertyLength in CSSStyleApplyPropery now handles mixed absolute/percentage
        length expressions. All property handlers using this template now work with
        mixed expressions.

        This patch adds a new expression evaluator in CalculationValue.cpp. This is because
        Length.[cpp|h] (in platform) cannot refer to CSSCalculationValue.[cpp|h] (in css) 
        due to layering restrictions.

        Lengths can be copied, and so the expressions are stored in a hashmap, and only their
        ids are copied along with Length. The expressions are RefCounted, and will get 
        cleaned up when the last referring Length is destructed.

        * WebCore.exp.in:
        * css/CSSCalculationValue.cpp:
        (WebCore::CSSCalcPrimitiveValue::toCalcValue):
        (CSSCalcPrimitiveValue):
        (WebCore::CSSCalcBinaryOperation::toCalcValue):
        (CSSCalcBinaryOperation):
        * css/CSSCalculationValue.h:
        (WebCore):
        (CSSCalcExpressionNode):
        (CSSCalcValue):
        (WebCore::CSSCalcValue::toCalcValue):
        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyLength::applyValue):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * css/CSSStyleSelector.h:
        (CSSStyleSelector):
        * platform/CalculationValue.cpp:
        (WebCore::CalcExpressionBinaryOperation::evaluate):
        (WebCore):
        (WebCore::CalculationValue::create):
        (WebCore::CalculationValue::evaluate):
        * platform/CalculationValue.h:
        (CalcExpressionNode):
        (WebCore::CalcExpressionNode::~CalcExpressionNode):
        (WebCore):
        (CalculationValue):
        (WebCore::CalculationValue::CalculationValue):
        (CalcExpressionNumber):
        (WebCore::CalcExpressionNumber::CalcExpressionNumber):
        (WebCore::CalcExpressionNumber::evaluate):
        (CalcExpressionLength):
        (WebCore::CalcExpressionLength::CalcExpressionLength):
        (WebCore::CalcExpressionLength::evaluate):
        (CalcExpressionBinaryOperation):
        (WebCore::CalcExpressionBinaryOperation::CalcExpressionBinaryOperation):
        * platform/Length.cpp:
        (WebCore):
        (WebCore::Length::~Length):
        (CalculationValueHandleMap):
        (WebCore::CalculationValueHandleMap::CalculationValueHandleMap):
        (WebCore::CalculationValueHandleMap::insert):
        (WebCore::CalculationValueHandleMap::remove):
        (WebCore::CalculationValueHandleMap::get):
        (WebCore::calcHandles):
        (WebCore::Length::Length):
        (WebCore::Length::calculationValue):
        (WebCore::Length::calculatedValue):
        (WebCore::Length::calculatedMinValue):
        (WebCore::Length::calculatedFloatValue):
        (WebCore::Length::incrementCalculatedRef):
        (WebCore::Length::decrementCalculatedRef):
        (WebCore::Length::nonNanCalculatedValue):
        * platform/Length.h:
        (Length):
        (WebCore::Length::Length):
        (WebCore::Length::operator=):
        (WebCore::Length::operator*=):
        (WebCore::Length::value):
        (WebCore::Length::setValue):
        (WebCore::Length::calcValue):
        (WebCore::Length::calcMinValue):
        (WebCore::Length::calcFloatValue):
        (WebCore::Length::isZero):
        (WebCore::Length::isPositive):
        (WebCore::Length::isNegative):
        (WebCore::Length::isPercent):
        (WebCore::Length::isSpecified):
        (WebCore::Length::isCalculated):
        (WebCore::Length::initFromLength):
        (WebCore::Length::calculationHandle):

2012-03-07  Kent Tamura  <tkent@chromium.org>

        Do not refer to resutlsButtonElement and cancelButtonElement to compute paddings of search popups
        https://bugs.webkit.org/show_bug.cgi?id=80564

        Reviewed by Hajime Morita.

        We'd like to reduce dependency of resultsButtonElement and
        cancelButtonElement from RenderTextControlSingleLine.

        No behavior change.

        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::clientPaddingLeft):
        Use the left position of innerBlockElement, instead of the width of resultsButtonElement.
        They are equivalent.
        (WebCore::RenderTextControlSingleLine::clientPaddingRight):
        Use <the container width - right position of innerBlockElement>,
        instead of the width of the cancelButtonElement. They are
        equivalent.

2012-03-07  Mike Lawther  <mikelawther@chromium.org>

        use DEFINE_STATIC_LOCAL on Lengths to avoid exit time destructors
        https://bugs.webkit.org/show_bug.cgi?id=80561

        Reviewed by Eric Seidel.

        This is in preparation for http://wkb.ug/79621 where a destructor is added to Length.

        No new tests as this is not a behaviour change.

        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyPageSize::getPageSizeFromName):

2012-03-07  Adam Barth  <abarth@webkit.org>

        ContainerNode::willRemove uses a weak iteration pattern
        https://bugs.webkit.org/show_bug.cgi?id=80530

        Reviewed by Ryosuke Niwa.

        This patch moves ContainerNode::willRemove to using a better iteration
        pattern in which we collect all the nodes we're planning to iterate
        into a vector and then iterate over them.

        * dom/ContainerNode.cpp:
        (WebCore::ContainerNode::willRemove):

2012-03-07  Kentaro Hara  <haraken@chromium.org>

        [V8][Performance] Optimize V8 bindings for HTMLElement.classList,
        Element.dataset and Node.attributes
        https://bugs.webkit.org/show_bug.cgi?id=80376

        Reviewed by Adam Barth.

        This patch improves the performance of HTMLElement.classList, Element.dataset
        and Node.attributes by 6.4 times, 7.1 times and 10.9 times, respectively.

        Previously, a 'hiddenReferenceName' string was allocated on v8::Handle and
        created every time the DOM attribute is accessed, in spite of the fact that
        the 'hiddenReferenceName' string is static.

        This patch moves the 'hiddenReferenceName' string to v8::Persistent and makes it static.
        Also, this patch removes 'if (!elementValue.IsEmpty() && elementValue->IsObject())',
        since if 'element' exists, it is guaranteed that 'elementValue' is not empty
        and is an Object.

        Performance tests: https://bugs.webkit.org/attachment.cgi?id=130283

        AppleWebKit/JavaScriptCore:
        div.classList : 382ms
        div.classList.foo = 123 : 335ms
        div.dataset : 403ms
        div.dataset.foo = 123 : 5250ms
        div.attributes : 183ms

        Chromium/V8 (without this patch):
        div.classList : 9140ms
        div.classList.foo = 123 : 9086ms
        div.dataset : 9930ms
        div.dataset.foo = 123 : 49698ms
        div.attributes : 13489ms

        Chromium/V8 (with this patch):
        div.classList : 1435ms
        div.classList.foo = 123 : 1470ms
        div.dataset : 1400ms
        div.dataset.foo = 123 : 30396ms
        div.attributes : 1242ms

        No tests. No change in behavior.

        * bindings/v8/custom/V8DOMStringMapCustom.cpp: Modified as described above.
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp: Ditto.
        (WebCore::toV8):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp: Ditto.
        (WebCore::toV8):

        * bindings/v8/V8HiddenPropertyName.cpp: Defined a hidden property name string statically
        to optimize the macro.
        (WebCore):
        (WebCore::V8HiddenPropertyName::hiddenReferenceName):
        * bindings/v8/V8HiddenPropertyName.h: Modified to switch two prefixes "WebCore::HiddenProperty::"
        and "WebCore::HiddenReference::", depending on whether a given name represents a hidden property
        or a hidden reference.
        (WebCore):
        (V8HiddenPropertyName):

2012-03-07  Kent Tamura  <tkent@chromium.org>

        Add RenderBoxModelObject::marginWidth() and marginHeight()
        https://bugs.webkit.org/show_bug.cgi?id=80556

        Reviewed by Kentaro Hara.

        They make some code shorter.

        No behavior change.

        * rendering/RenderBoxModelObject.h:
        (WebCore::RenderBoxModelObject::marginHeight): Added.
        (WebCore::RenderBoxModelObject::marginWidth): Added.
        * inspector/DOMNodeHighlighter.cpp: Use marginHeight() and/or marginWidth().
        * rendering/RenderBlock.h:
        (WebCore::RenderBlock::FloatWithRect::FloatWithRect): ditto.
        * rendering/RenderBlockLineLayout.cpp:
        (WebCore::RenderBlock::checkFloatsInCleanLine): ditto.
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::repaintLayerRectsForImage): ditto.
        * rendering/RenderDeprecatedFlexibleBox.cpp:
        (WebCore::RenderDeprecatedFlexibleBox::layoutHorizontalBox): ditto.
        (WebCore::RenderDeprecatedFlexibleBox::layoutVerticalBox): ditto.
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::crossAxisMarginExtentForChild): ditto.
        (WebCore::RenderFlexibleBox::computeNextFlexLine): ditto.
        * rendering/RenderInline.cpp:
        (WebCore::RenderInline::culledInlineAbsoluteRects): ditto.
        (WebCore::RenderInline::culledInlineAbsoluteQuads): ditto.
        (WebCore::RenderInline::culledInlineBoundingBox): ditto.
        * rendering/RenderScrollbar.cpp:
        (WebCore::RenderScrollbar::trackPieceRectWithMargins): ditto.
        * rendering/RenderTextControl.cpp:
        (WebCore::RenderTextControl::computeLogicalHeight): ditto.
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::computeControlHeight): ditto.

2012-03-07  Jessie Berlin  <jberlin@apple.com>

        Clean Windows build fails after r110033
        https://bugs.webkit.org/show_bug.cgi?id=80553

        Rubber-stamped by Jon Honeycutt and Eric Seidel.

        * WebCore.vcproj/WebCore.vcproj:
        Update the expected location of the copied JSC WTF string implementation files.

2012-03-07  Michael Nordman  <michaeln@google.com>

        [Chromium] Don't be so CRASH() happy in the bindings layer.
        https://bugs.webkit.org/show_bug.cgi?id=75111
        - change the v8 bindings generated code to check for the 'worker is terminating'
          condition prior to committing a suicidal CRASH()
        - fixup custom v8 bindings accordingly
        - simplify bindings/generic/ActiveDOMCallback, there is no need for it to support
          destruction on a different thread

        Reviewed by David Levin.

        No new tests, existing tests apply.

        * bindings/generic/ActiveDOMCallback.cpp: Simplified in general.
        (WebCore):
        (WebCore::ActiveDOMCallback::ActiveDOMCallback):
        (WebCore::ActiveDOMCallback::~ActiveDOMCallback):
        (WebCore::ActiveDOMCallback::canInvokeCallback):
        (WebCore::ActiveDOMCallback::isScriptControllerTerminating): New method to avoid CRASH()ing in exceptional conditions in v8 bindings.
        * bindings/generic/ActiveDOMCallback.h: Derive from ContextDestructionObserver.
        * bindings/js/WorkerScriptController.cpp:
        (WebCore::WorkerScriptController::scheduleExecutionTermination): Use a mutex to provide a memory barrier.
        (WebCore::WorkerScriptController::isExecutionTerminating): New supporting method to avoid CRASH()ing in exceptional conditions.
        * bindings/js/WorkerScriptController.h:
        (WorkerScriptController):
        * bindings/scripts/CodeGeneratorV8.pm: Generates v8 bindding code that uses isScriptControllerTerminating to avoid CRASH()ing.
        (GenerateCallbackImplementation):
        * bindings/scripts/test/V8/V8TestCallback.cpp: Fixup expected outputs of the modified CodeGeneratorV8.pm script.
        (WebCore::V8TestCallback::callbackWithClass1Param):
        (WebCore::V8TestCallback::callbackWithClass2Param):
        (WebCore::V8TestCallback::callbackWithStringList):
        * bindings/v8/WorkerScriptController.cpp:
        (WebCore::WorkerScriptController::WorkerScriptController): Initialize a new data member.
        (WebCore::WorkerScriptController::scheduleExecutionTermination): Use a mutex to provide a memory barrier.
        (WebCore::WorkerScriptController::isExecutionTerminating): New supporting method to avoid CRASH()ing in exceptional conditions.
        * bindings/v8/WorkerScriptController.h: Add a pair of new data members, bool + mutex.
        (WorkerScriptController):
        * bindings/v8/custom/V8CustomSQLStatementErrorCallback.cpp:
        (WebCore::V8SQLStatementErrorCallback::handleEvent):
        * bindings/v8/custom/V8MutationCallbackCustom.cpp:
        (WebCore::V8MutationCallback::handleEvent):
        * dom/ScriptExecutionContext.cpp:
        (WebCore::ScriptExecutionContext::ScriptExecutionContext): Initilaize data members.
        (WebCore::ScriptExecutionContext::stopActiveDOMObjects): Set m_activeDOMObjectsAreStopped.
        * dom/ScriptExecutionContext.h: Add m_activeDOMObjectsAreStopped data member.
        (WebCore::ScriptExecutionContext::activeDOMObjectsAreStopped): Simple getter.
        (ScriptExecutionContext):

2012-03-07  Kent Tamura  <tkent@chromium.org>

        Remove meaningless code in RenderTextControlSingleLine::preferredContentWidth()
        https://bugs.webkit.org/show_bug.cgi?id=80493

        Reviewed by Hajime Morita.

        preferredContentWidth() added border+padding widths of the search result
        button, search cancel button, and speech input button. It makes no sense
        to make the intrinsic width wider by only their border+padding width,
        not their content width.

        The default borders and paddings of these buttons are 0 in all
        platforms, and adding border or padding to these elements by page
        authors made unreasonable behavior. So we had better remove this
        code.

        Tests: fast/forms/search/intrinsic-search-width-with-decoration-border-padding.html
               fast/speech/intrinsic-input-width-with-speech-border-padding.html

        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::preferredContentWidth):
         Remove the meaningless code.
        * rendering/RenderTextControlSingleLine.h:
        (RenderTextControlSingleLine): Remove speechButtonElement(). It's unnecessary.

2012-03-07  Sheriff Bot  <webkit.review.bot@gmail.com>

        Unreviewed, rolling out r110126.
        http://trac.webkit.org/changeset/110126
        https://bugs.webkit.org/show_bug.cgi?id=80558

        compile failed on AppleMac (Requested by ukai on #webkit).

        * WebCore.exp.in:
        * css/CSSCalculationValue.cpp:
        * css/CSSCalculationValue.h:
        (WebCore):
        (CSSCalcExpressionNode):
        (CSSCalcValue):
        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyLength::applyValue):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * css/CSSStyleSelector.h:
        * platform/CalculationValue.cpp:
        * platform/CalculationValue.h:
        * platform/Length.cpp:
        (WebCore::newLengthArray):
        * platform/Length.h:
        (WebCore::Length::operator*=):
        (WebCore::Length::value):
        (WebCore::Length::setValue):
        (Length):
        (WebCore::Length::calcValue):
        (WebCore::Length::calcMinValue):
        (WebCore::Length::calcFloatValue):
        (WebCore::Length::isZero):
        (WebCore::Length::isPositive):
        (WebCore::Length::isNegative):
        (WebCore::Length::isPercent):
        (WebCore::Length::isSpecified):

2012-03-05  Caio Marcelo de Oliveira Filho  <caio.oliveira@openbossa.org>

        Make Node::dumpStatistics() work again
        https://bugs.webkit.org/show_bug.cgi?id=80327

        Reviewed by Ryosuke Niwa.

        Update the code in dumpStatistics() to the latest attribute storage changes. Also
        move the DUMP_NODE_STATISTICS define here from the Node.cpp, since its also used
        by Document.h.

        * dom/Node.cpp:
        (WebCore::Node::dumpStatistics): Use more self-describing variable names.
        * dom/Node.h:

2012-03-07  Mike Lawther  <mikelawther@chromium.org>

        CSS3 calc: mixed absolute/percentages work for width, height, margin and padding
        https://bugs.webkit.org/show_bug.cgi?id=79621

        Reviewed by Andreas Kling.

        ApplyPropertyLength in CSSStyleApplyPropery now handles mixed absolute/percentage
        length expressions. All property handlers using this template now work with
        mixed expressions.

        This patch adds a new expression evaluator in CalculationValue.cpp. This is because
        Length.[cpp|h] (in platform) cannot refer to CSSCalculationValue.[cpp|h] (in css) 
        due to layering restrictions.

        Lengths can be copied, and so the expressions are stored in a hashmap, and only their
        ids are copied along with Length. The expressions are RefCounted, and will get 
        cleaned up when the last referring Length is destructed.

        * WebCore.exp.in:
        * css/CSSCalculationValue.cpp:
        (WebCore::CSSCalcPrimitiveValue::toCalcValue):
        (CSSCalcPrimitiveValue):
        (WebCore::CSSCalcBinaryOperation::toCalcValue):
        (CSSCalcBinaryOperation):
        * css/CSSCalculationValue.h:
        (WebCore):
        (CSSCalcExpressionNode):
        (CSSCalcValue):
        (WebCore::CSSCalcValue::toCalcValue):
        * css/CSSPrimitiveValue.cpp:
        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
        * css/CSSStyleApplyProperty.cpp:
        (WebCore::ApplyPropertyLength::applyValue):
        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):
        * css/CSSStyleSelector.h:
        (CSSStyleSelector):
        * platform/CalculationValue.cpp:
        (WebCore::CalcExpressionBinaryOperation::evaluate):
        (WebCore):
        (WebCore::CalculationValue::create):
        (WebCore::CalculationValue::evaluate):
        * platform/CalculationValue.h:
        (CalcExpressionNode):
        (WebCore::CalcExpressionNode::~CalcExpressionNode):
        (WebCore):
        (CalculationValue):
        (WebCore::CalculationValue::CalculationValue):
        (CalcExpressionNumber):
        (WebCore::CalcExpressionNumber::CalcExpressionNumber):
        (WebCore::CalcExpressionNumber::evaluate):
        (CalcExpressionLength):
        (WebCore::CalcExpressionLength::CalcExpressionLength):
        (WebCore::CalcExpressionLength::evaluate):
        (CalcExpressionBinaryOperation):
        (WebCore::CalcExpressionBinaryOperation::CalcExpressionBinaryOperation):
        * platform/Length.cpp:
        (WebCore):
        (WebCore::Length::~Length):
        (CalculationValueHandleMap):
        (WebCore::CalculationValueHandleMap::CalculationValueHandleMap):
        (WebCore::CalculationValueHandleMap::insert):
        (WebCore::CalculationValueHandleMap::remove):
        (WebCore::CalculationValueHandleMap::get):
        (WebCore::calcHandles):
        (WebCore::Length::Length):
        (WebCore::Length::calculationValue):
        (WebCore::Length::calculatedValue):
        (WebCore::Length::calculatedMinValue):
        (WebCore::Length::calculatedFloatValue):
        (WebCore::Length::incrementCalculatedRef):
        (WebCore::Length::decrementCalculatedRef):
        (WebCore::Length::nonNanCalculatedValue):
        * platform/Length.h:
        (Length):
        (WebCore::Length::Length):
        (WebCore::Length::operator=):
        (WebCore::Length::operator*=):
        (WebCore::Length::value):
        (WebCore::Length::setValue):
        (WebCore::Length::calcValue):
        (WebCore::Length::calcMinValue):
        (WebCore::Length::calcFloatValue):
        (WebCore::Length::isZero):
        (WebCore::Length::isPositive):
        (WebCore::Length::isNegative):
        (WebCore::Length::isPercent):
        (WebCore::Length::isSpecified):
        (WebCore::Length::isCalculated):
        (WebCore::Length::initFromLength):
        (WebCore::Length::calculationHandle):

2012-03-07  Emil A Eklund  <eae@chromium.org>

        Change remaining scroll methods to integers
        https://bugs.webkit.org/show_bug.cgi?id=80539

        Reviewed by Eric Seidel.

        No new tests, no new functionality.

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::scrollByRecursively):
        (WebCore::RenderLayer::scrollToOffset):
        (WebCore::RenderLayer::scrollRectToVisible):
        (WebCore::RenderLayer::scrollToXOffset):
        (WebCore::RenderLayer::scrollToYOffset):
        Change scrollTo methods to take integer x and y values as the actual
        scrolling is done in increments of full pixels.
        
        (WebCore::cornerStart):
        (WebCore::RenderLayer::scrollWidth):
        (WebCore::RenderLayer::scrollHeight):
        Change scrollWidth/Height to return pixel snapped values and remove
        pixelSnapped versions of same as all callers either used snapped the
        values or used the pixelSnapped versions of these methods.

        * rendering/RenderListBox.cpp:
        (WebCore::RenderListBox::scrollWidth):
        Change scrollWidth to return snapped client width.
        
        * rendering/RenderListBox.h:
        Change scrollSize, scrollPosition and setScrollOffset methods to use
        integers in accordance with the interface defined by ScrollableArea.
        
        * rendering/RenderTreeAsText.cpp:
        (WebCore::write):

2012-03-07  Caio Marcelo de Oliveira Filho  <caio.oliveira@openbossa.org>

        Implement getAttributeNode() in terms of ElementAttributeData instead of NamedNodeMap
        https://bugs.webkit.org/show_bug.cgi?id=80541

        Reviewed by Ryosuke Niwa.

        DOM methods exposed in Element and NamedNodeMap are now implemented in terms of
        ElementAttributeData. The difference between them is that Element methods can early
        return if there's no attribute storage.

        * dom/Element.cpp:
        (WebCore::Element::getAttributeNode):
        Removed the manual lowercasing letting our existing mechanism in
        ElementAttributeData::getAttributeItemIndex() take care of it. I considered that
        this could be an optimization, but testing a few Dromaeo tests (dom-attr,
        jslib-attr-jquery, jslib-attr-prototype) the difference isn't significant. It
        shouldn't affect correctness either.

        (WebCore::Element::getAttributeNodeNS):
        * dom/ElementAttributeData.cpp:
        * dom/ElementAttributeData.h:
        (ElementAttributeData):
        (WebCore::ElementAttributeData::getAttributeNode):
        (WebCore):
        * dom/NamedNodeMap.cpp:
        (WebCore::NamedNodeMap::getNamedItem):
        (WebCore::NamedNodeMap::getNamedItemNS):
        * dom/NamedNodeMap.h:
        (NamedNodeMap):

2012-03-07  James Robinson  <jamesr@chromium.org>

        [chromium] Support printing WebGL content in threaded compositor
        https://bugs.webkit.org/show_bug.cgi?id=80464

        Reviewed by Kenneth Russell.

        Do the readback on the WebGL context instead of the compositor's context since we cannot use the latter from the
        main thread. Since we're on the WebGL context, we have to be careful to restore any state we change.

        Tested printing manually with threaded compositing enabled.

        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::paintRenderedResultsToCanvas):
        * platform/graphics/chromium/WebGLLayerChromium.h:
        (WebGLLayerChromium):

2012-03-07  Adam Barth  <abarth@webkit.org>

        Remove #define private public from WebCache.cpp
        https://bugs.webkit.org/show_bug.cgi?id=80520

        Reviewed by Eric Seidel.

        Add some accessors for state used by WebCache.cpp.

        * loader/cache/MemoryCache.h:
        (WebCore::MemoryCache::minDeadCapacity):
        (WebCore::MemoryCache::maxDeadCapacity):
        (WebCore::MemoryCache::capacity):
        (WebCore::MemoryCache::liveSize):
        (WebCore::MemoryCache::deadSize):
        (MemoryCache):

2012-03-07  Kentaro Hara  <haraken@chromium.org>

        [V8][Performance] Optimize Element.firstElementChild, Element.lastElementChild,
        Element.previousElementSibling, Element.nextElementSibling, Node.parentElement
        https://bugs.webkit.org/show_bug.cgi?id=80506

        Reviewed by Adam Barth.

        This patch improves the performance of Element.firstElementChild by 5.8 times,
        Element.lastElementChild by 6.2 times, Element.previousElementSibling by 7.1 times,
        Element.nextElementSibling by 7.1 times, and Node.parentElement by 6.7 times.

        Previously, while toV8(Node*) caches a wrapper object on a node object
        (i.e. node->wrapper(), node->setWrapper()), toV8(Element*) does not
        cache a wrapper object.

        This patch removes toV8(Element*), so that DOM attribute getters that return
        Element* use toV8(Node*). This change makes these DOM attribute getters
        cache the wrapper object on a node object. This optimization is already
        implemented in JavaScriptCore.

        Performance tests: https://bugs.webkit.org/attachment.cgi?id=130594

        The test results in my local Mac environment are as follows:

        AppleWebKit/JavaScriptCore:
        div.firstElementChild : 1162ms
        div.lastElementChild : 1016ms
        div.previousElementSibling : 918ms
        div.nextElementSibling : 900ms
        div.parentElement : 901ms

        Chromium/V8 (without this patch):
        div.firstElementChild : 9515ms
        div.lastElementChild : 9449ms
        div.previousElementSibling : 9254ms
        div.nextElementSibling : 9315ms
        div.parentElement : 9380ms

        Chromium/V8 (with this patch):
        div.firstElementChild : 1628ms
        div.lastElementChild : 1527ms
        div.previousElementSibling : 1310ms
        div.nextElementSibling : 1310ms
        div.parentElement : 1410ms

        No tests. No change in behavior.

        * dom/Element.idl: Removed toV8(Element*)
        * bindings/v8/custom/V8NodeCustom.cpp: Ditto.
        (WebCore::toV8Slow):
        * bindings/scripts/CodeGeneratorV8.pm: Ditto.
        (GenerateHeader):

        * bindings/v8/custom/V8ElementCustom.cpp: Removed.
        * Target.pri: Removed V8ElementCustom.cpp.
        * UseV8.cmake: Ditto.
        * WebCore.gypi: Ditto.

2012-03-07  Joshua Bell  <jsbell@chromium.org>

        [Chromium] IndexedDB: V8LocalContext creation in IDBKey extraction/injection is slow
        https://bugs.webkit.org/show_bug.cgi?id=80358

        Cache a re-usable context (per isolate) for cases like IDB's key/SSV extraction/injection,
        where no user script is run. This yields a 3x-4x performance improvement in basic IDB
        operations.

        Reviewed by Tony Chang.

        No new tests - no behavior changes.

        * bindings/v8/IDBBindingUtilities.cpp:
        (WebCore::createIDBKeyFromSerializedValueAndKeyPath):
        (WebCore::injectIDBKeyIntoSerializedValue):
        * bindings/v8/V8Binding.h:
        (WebCore::V8BindingPerIsolateData::auxiliaryContext):
        (V8BindingPerIsolateData):
        * bindings/v8/V8Utilities.cpp:
        (WebCore::V8AuxiliaryContext::V8AuxiliaryContext):
        (WebCore::V8AuxiliaryContext::~V8AuxiliaryContext):
        (WebCore::V8AuxiliaryContext::auxiliaryContext):
        * bindings/v8/V8Utilities.h:
        (V8AuxiliaryContext):

2012-03-07  Nat Duca  <nduca@chromium.org>

        [chromium] Remove unused wasRecreate variable
        https://bugs.webkit.org/show_bug.cgi?id=80533

        Reviewed by Adrienne Walker.

        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::initializeLayerRenderer):

2012-03-07  Ryan Sleevi  <rsleevi@chromium.org>

        [chromium] Update GYP files to reflect file deletes/renames
        https://bugs.webkit.org/show_bug.cgi?id=80525

        Reviewed by Ryosuke Niwa.

        No change in functionality, so no tests.

        * WebCore.gypi:
        Updated AppleMac private headers due to r109877
        Updated platform/qt references due to r109542
        Updated platform/mac references due to r109147
        Updated platform/mac references due to r108956

2012-03-07  Eric Carlson  <eric.carlson@apple.com>

        Html5 video element Useragent string is Quicktime
        https://bugs.webkit.org/show_bug.cgi?id=46241

        Reviewed by Daniel Bates.

        Test: http/tests/media/video-useragent.html

        * html/HTMLMediaElement.cpp:
        (WebCore::HTMLMediaElement::mediaPlayerUserAgent): Return the UA string for the current source.
        * html/HTMLMediaElement.h:

        * platform/graphics/MediaPlayer.cpp:
        (WebCore::MediaPlayer::userAgent):  New, return the client's mediaPlayerUserAgent.
        * platform/graphics/MediaPlayer.h:
        (WebCore::MediaPlayerClient::mediaPlayerUserAgent):

        * platform/graphics/avfoundation/objc/MediaPlayerPrivateAVFoundationObjC.mm:
        (WebCore::MediaPlayerPrivateAVFoundationObjC::createAVAssetForURL): Tell AVFoundation to set
            the UA header.

2012-03-07  Scott Byer  <scottbyer@chromium.org>

        Get ScrollAnimatorNone to handle the stop and reverse cases.
        https://bugs.webkit.org/show_bug.cgi?id=80455

        Reviewed by James Robinson.

        Chromium webkit_unit_tests ScrollAnimatorNoneTest.ScrollStopInMiddle and
        ScrollAnimatorNoneTest.ReverseInMiddle.

        * platform/ScrollAnimatorNone.cpp:
        (WebCore::ScrollAnimatorNone::PerAxisData::updateDataFromParameters):

2012-03-07  Yong Li  <yoli@rim.com>

        RenderImage ignores its percent width/height when setContainerSizeForRenderer
        https://bugs.webkit.org/show_bug.cgi?id=80431

        Reviewed by George Staikos.

        Not only respect fixed width/height explicitly specified in img element, but also
        respect percent width/height when determining container size for images.

        No new tests because there is no functional change but only internal buffer sizes.

        * rendering/RenderImage.cpp:
        (WebCore::RenderImage::computeReplacedLogicalWidth):

2012-03-06  Benjamin Poulain  <bpoulain@apple.com>

        [Mac] Update the configuration files for iOS
        https://bugs.webkit.org/show_bug.cgi?id=80435

        Reviewed by David Kilzer.

        * Configurations/WebCore.xcconfig:

2012-03-07  Dana Jansens  <danakj@chromium.org>

        [chromium] Cull occluded tiles during paint
        https://bugs.webkit.org/show_bug.cgi?id=76838

        Reviewed by Adrienne Walker.

        Using CCOcclusionTracker instead of the old custom paint occlusion
        tracking. Stops painting tiles when the tile is not visible.

        CCOcclusionTracker only uses Layer::opaque() for determining
        occlusion so far. The Layer::addSelfToOccludedRegion is being
        replaced by a superior method in CCOcclusionTracker that will
        work for both threads, so removing that support here.

        Unit test: TiledLayerChromiumTest.cpp

        * platform/graphics/chromium/ContentLayerChromium.cpp:
        (WebCore::ContentLayerChromium::paintContentsIfDirty):
        (WebCore::ContentLayerChromium::idlePaintContentsIfDirty):
        * platform/graphics/chromium/ContentLayerChromium.h:
        (ContentLayerChromium):
        * platform/graphics/chromium/ImageLayerChromium.cpp:
        (WebCore::ImageLayerChromium::paintContentsIfDirty):
        * platform/graphics/chromium/LayerChromium.cpp:
        * platform/graphics/chromium/LayerChromium.h:
        (WebCore::LayerChromium::idlePaintContentsIfDirty):
        (LayerChromium):
        * platform/graphics/chromium/TiledLayerChromium.cpp:
        (WebCore):
        (WebCore::contentToLayerTransform):
        (WebCore::TiledLayerChromium::prepareToUpdateTiles):
        (WebCore::TiledLayerChromium::prepareToUpdate):
        (WebCore::TiledLayerChromium::prepareToUpdateIdle):
        * platform/graphics/chromium/TiledLayerChromium.h:
        (TiledLayerChromium):
        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
        (WebCore::CCLayerTreeHost::paintContentsIfDirty):
        (WebCore::CCLayerTreeHost::paintLayerContents):

2012-03-07  Caio Marcelo de Oliveira Filho  <caio.oliveira@openbossa.org>

        Implement removeAttributeNode() in terms of ElementAttributeData instead of NamedNodeMap
        https://bugs.webkit.org/show_bug.cgi?id=80522

        Reviewed by Andreas Kling.

        DOM methods exposed in Element and NamedNodeMap are now implemented in terms of
        ElementAttributeData. A helper function takeAttribute() was added to increase
        code sharing. Also removed some unneeded methods.

        * dom/Element.cpp:
        (WebCore::Element::removeAttribute): Use ElementAttributeData function directly.
        (WebCore::Element::removeAttributeNode): Get the index manually and use new
        takeAttribute() directly.
        * dom/Element.h:
        (Element): Remove unused removeAttribute(unsigned index).
        * dom/ElementAttributeData.cpp:
        (WebCore::ElementAttributeData::takeAttribute): Like removeAttribute() but
        returns a reference to old Attr.
        (WebCore):
        * dom/ElementAttributeData.h:
        (ElementAttributeData):
        * dom/NamedNodeMap.cpp:
        (WebCore::NamedNodeMap::removeNamedItem): Avoid looking up the property twice by
        getting the index directly from the name, instead of going through the qualified name.
        * dom/NamedNodeMap.h: Remove now unused internal methods for removing attributes.

2012-03-07  Alexey Proskuryakov  <ap@apple.com>

        Merge AsyncFileStream with FileStreamProxy
        https://bugs.webkit.org/show_bug.cgi?id=80325

        Build fix.

        * WebCore.xcodeproj/project.pbxproj: Removed files that got mysteriously added to the project
        with a merge.

2012-03-07  Julien Chaffraix  <jchaffraix@webkit.org>

        Unreviewed ASSERT failure fix.
        https://bugs.webkit.org/show_bug.cgi?id=75568

        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::styleDidChange):
        Fix a bad merge of the patch, we should call updateCachedSizeForOverflowClip if we lose
        our layer.

2012-03-07  ChangSeok Oh  <shivamidow@gmail.com>

        [EFL] Revise PlatformKeyboardEventEfl and EflKeyboardUtilities
        https://bugs.webkit.org/show_bug.cgi?id=80511

        Reviewed by Gustavo Noronha Silva.

        Added 'const' keyword in front of argument of keyIdentifiersForEvasKeyName/windowsKeyCodeForEvasKeyName.
        Since they should not be changed while processing each function.
        And initialized missing member variables of PlatformKeyboardEventEfl.

        No new tests, since no new feature.

        * platform/efl/EflKeyboardUtilities.cpp:
        (WebCore::keyIdentifierForEvasKeyName): Added const keyword
        (WebCore::windowsKeyCodeForEvasKeyName): Added const keyword
        * platform/efl/EflKeyboardUtilities.h:
        (WebCore):
        * platform/efl/PlatformKeyboardEventEfl.cpp:
        (WebCore::PlatformKeyboardEvent::PlatformKeyboardEvent):

2012-03-07  Hironori Bono  <hbono@chromium.org>

        [Chromium] Mirror the resizer image of an RTL element when WTF_USE_RTL_SCROLLBAR is 1
        https://bugs.webkit.org/show_bug.cgi?id=9223

        Reviewed by Tony Chang.

        This change mirrors a resizer image of an RTL element horizontall as Firefox
        does. This change also mirrors its dragging behavior, i.e. draging the resizer
        of an RTL element to the left side increases its width. (This feature is enabled
        only when WTF_USE_RTL_SCROLLBAR is 1.)

        Test: platform/chromium/scrollbars/drag-rtl-resizer.html

        * rendering/RenderLayer.cpp:
        (WebCore::RenderLayer::resize): Mirrored the x coordinate of mouse positions
        when mirroring a resizer.
        (WebCore::RenderLayer::offsetFromResizeCorner): Returned the offset from the
        bottom-left corner when rendering a resizer there.
        (WebCore::RenderLayer::drawPlatformResizerImage): Mirrored the resizer bitmap
        horizontally when rendering a resizer to the bottom-left corner.

2012-03-07  Julien Chaffraix  <jchaffraix@webkit.org>

        Lazily allocate overflow: hidden layers if we have overflowing content
        https://bugs.webkit.org/show_bug.cgi?id=75568

        Reviewed by David Hyatt.

        Change covered by the existing tests and the tons of rebaselines.

        This change makes us lazily allocate our RenderLayer for overflow: hidden layers only.

        Apart from saving some memory, it will also speed up the rendering as we don't need to
        go through the layer's machinery when painting and hit testing.

        On http://dglazkov.github.com/performance-tests/biggrid.html benchmark, this puts the
        overflow: hidden case in par with the overflow: visible case when scrolling that is a
        very-smooth scrolling vs a jerky one currently (mostly due to the painting speedup).

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::updateScrollInfoAfterLayout):
        Changed this method to update our size cache if needed.

        * rendering/RenderBlock.cpp:
        (WebCore::RenderBlock::layoutBlock):
        (WebCore::RenderBlock::paint):
        (WebCore::RenderBlock::isPointInOverflowControl):
        * rendering/RenderBlock.h:
        (RenderBlock):
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::willBeDestroyed):
        (WebCore::RenderBox::styleDidChange):
        (WebCore::RenderBox::layout):
        (WebCore::RenderBox::scrollWidth):
        (WebCore::RenderBox::scrollHeight):
        (WebCore::RenderBox::scrollLeft):
        (WebCore::RenderBox::scrollTop):
        (WebCore::RenderBox::setScrollLeft):
        (WebCore::RenderBox::setScrollTop):
        (WebCore::RenderBox::includeVerticalScrollbarSize):
        (WebCore::RenderBox::includeHorizontalScrollbarSize):
        (WebCore::RenderBox::scrolledContentOffset):
        (WebCore::RenderBox::pushContentsClip):
        (WebCore::RenderBox::popContentsClip):
        (WebCore::RenderBox::addLayoutOverflow):
        Added layer() check to the previous call sites.

        (WebCore::cachedSizeForOverflowClipMap):
        (WebCore::RenderBox::cachedSizeForOverflowClip):
        (WebCore::RenderBox::updateCachedSizeForOverflowClip):
        (WebCore::RenderBox::clearCachedSizeForOverflowClip):
        This logic stores the size information for later repainting.
        It is in practice replicating what RenderLayer is doing.
        I had to disable an ASSERT here as it would trigger in NRWT but
        not under DRT. I haven't found by code inspection what was wrong.

        * rendering/RenderBox.h:
        (WebCore::RenderBox::hasOverflowClipWithLayer):
        Helper function.

        (WebCore::RenderBox::requiresLayerForOverflowClip):
        This determines if we can survive without a RenderLayer. For the moment,
        it is very conservative.

        (WebCore::RenderBox::requiresLayer):
        Updated to call requiresLayerForOverflowClip.

        * rendering/RenderBoxModelObject.cpp:
        (WebCore::RenderBoxModelObject::ensureLayer):
        Added this function to create and add a new layer.

        (WebCore::RenderBoxModelObject::willBeDestroyed):
        (WebCore::RenderBoxModelObject::styleDidChange):
        Patched those method to handle updating / removing
        cached size entries.

        * rendering/RenderBoxModelObject.h:
        (WebCore::RenderBoxModelObject::requiresLayer):
        Pushed the overflowClip check down to RenderBox as only RenderBoxes can have
        overflow clips.

        * rendering/RenderTableRow.h:
        (WebCore::RenderTableRow::requiresLayer):
        Added a comment about why we need a layout for table rows.

        * rendering/RenderDeprecatedFlexibleBox.cpp:
        (WebCore::RenderDeprecatedFlexibleBox::layoutBlock):
        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::layoutBlock):
        * rendering/RenderTableSection.cpp:
        (WebCore::RenderTableSection::layout):
        Updated those call sites to use RenderBlock::updateScrollInfoAfterLayout
        or RenderBox::updateCachedSizeForOverflowClip. The current logic is really
        not tight proof and would need to be rethought to not avoid cases.

2012-03-07  Konrad Piascik  <kpiascik@rim.com>

        [BlackBerry] Fix warnings in CookieMap
        https://bugs.webkit.org/show_bug.cgi?id=80512

        Reviewed by Rob Buis.

        No new tests. No behavioural changes.

        * platform/blackberry/CookieMap.cpp:
        (WebCore::CookieMap::addOrReplaceCookie):
        (WebCore::CookieMap::removeCookie):
        (WebCore::CookieMap::getAllCookies):
        (WebCore::CookieMap::updateOldestCookie):

2012-03-07  Levi Weintraub  <leviw@chromium.org>

        Update usage of LayoutUnits in InlineBox and InlineFlowBox
        https://bugs.webkit.org/show_bug.cgi?id=80051

        Reviewed by Eric Seidel.

        Updating LayoutUnit vs Integer usage in InlineBox and InlineFlowBox. While the
        line box tree remains floating point, margins are now subpixel, and rects from
        the render tree use LayoutUnits. For more information, see the LayoutUnit wiki
        page: https://trac.webkit.org/wiki/LayoutUnit

        No new tests. No change in behavior.

        * rendering/InlineBox.cpp:
        (WebCore::InlineBox::flipForWritingMode): Changing over to LayoutUnits.
        * rendering/InlineBox.h:
        (InlineBox):
        * rendering/InlineFlowBox.cpp:
        (WebCore::InlineFlowBox::getFlowSpacingLogicalWidth): Returning a LayoutUnit
        instead of an integer, as it uses margin which is a LayoutUnit.
        (WebCore::InlineFlowBox::placeBoxesInInlineDirection): Using a LayoutUnit for
        margin.
        (WebCore::InlineFlowBox::placeBoxesInBlockDirection): Build fixes for when
        LayoutUnits are subpixel.
        (WebCore::InlineFlowBox::paintFillLayer): Ditto.
        * rendering/InlineFlowBox.h:
        (WebCore::InlineFlowBox::marginBorderPaddingLogicalLeft): Returning a LayoutUnit
        instead of an integer since margin is a LayoutUnit.
        (WebCore::InlineFlowBox::marginBorderPaddingLogicalRight): Ditto.
        (InlineFlowBox):
        (WebCore::InlineFlowBox::logicalLeftLayoutOverflow): Adding a static_cast that's
        redundant now, but required when we switch to subpixel LayoutUnits.
        (WebCore::InlineFlowBox::logicalRightLayoutOverflow): Ditto.
        (WebCore::InlineFlowBox::logicalLeftVisualOverflow): Ditto.
        (WebCore::InlineFlowBox::logicalRightVisualOverflow): Ditto.

2012-03-07  Qi Zhang  <qi.2.zhang@nokia.com>

        [Qt] Unskip http/tests/websocket/tests/hixie76/long-invalid-header.html
        https://bugs.webkit.org/show_bug.cgi?id=80516

        Reviewed by Csaba Osztrogonác.

        Missed some files related to websocket, take them in.

        * Target.pri:

2012-03-05  Alexey Proskuryakov  <ap@apple.com>

        Merge AsyncFileStream with FileStreamProxy
        https://bugs.webkit.org/show_bug.cgi?id=80325

        Reviewed by Filip Pizlo.

        AsyncFileStream sounds like a platform concept, but the implementation is web specific.
        Better to just keep it in one place.

        This is a step toward decoupling blob scheme support from ResourceHandle, which is supposed
        to be an interface to platform networking APIs only, and definitely shouldn't know about
        Web concepts.

        No change in functionality, so no tests.

        * CMakeLists.txt:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        Updated for moved and removed files. Namely, platform/AsyncFileStream is dead, and
        fileapi/FileStreamProxy is now fileapi/AsyncFileStream.

        * fileapi/AsyncFileStream.cpp: Copied from Source/WebCore/fileapi/FileStreamProxy.cpp.
        (WebCore::AsyncFileStream::AsyncFileStream):
        (WebCore::AsyncFileStream::create):
        (WebCore::AsyncFileStream::~AsyncFileStream):
        (WebCore::AsyncFileStream::fileThread):
        (WebCore::didStart):
        (WebCore::AsyncFileStream::startOnFileThread):
        (WebCore::AsyncFileStream::stop):
        (WebCore::derefProxyOnContext):
        (WebCore::AsyncFileStream::stopOnFileThread):
        (WebCore::didGetSize):
        (WebCore::AsyncFileStream::getSize):
        (WebCore::AsyncFileStream::getSizeOnFileThread):
        (WebCore::didOpen):
        (WebCore::AsyncFileStream::openForRead):
        (WebCore::AsyncFileStream::openForReadOnFileThread):
        (WebCore::AsyncFileStream::openForWrite):
        (WebCore::AsyncFileStream::openForWriteOnFileThread):
        (WebCore::AsyncFileStream::close):
        (WebCore::AsyncFileStream::closeOnFileThread):
        (WebCore::didRead):
        (WebCore::AsyncFileStream::read):
        (WebCore::AsyncFileStream::readOnFileThread):
        (WebCore::didWrite):
        (WebCore::AsyncFileStream::write):
        (WebCore::AsyncFileStream::writeOnFileThread):
        (WebCore::didTruncate):
        (WebCore::AsyncFileStream::truncate):
        (WebCore::AsyncFileStream::truncateOnFileThread):
        * fileapi/AsyncFileStream.h: Copied from Source/WebCore/fileapi/FileStreamProxy.h.
        (WebCore):
        (AsyncFileStream):
        (WebCore::AsyncFileStream::client):
        (WebCore::AsyncFileStream::setClient):
        * fileapi/FileStreamProxy.cpp: Removed.
        * fileapi/FileStreamProxy.h: Removed.
        * loader/ResourceLoader.cpp:
        (WebCore::ResourceLoader::createAsyncFileStream):
        * platform/AsyncFileStream.h: Removed.
        Fewer files!

        * platform/network/BlobRegistry.h: Removed createResourceHandle(). It's logically a method
        on in-process BlobRegistryImpl only, and we no longer need to call this from platform code.

        * platform/network/BlobRegistryImpl.cpp:
        (WebCore::createResourceHandle):
        (WebCore::registerBlobResourceHandleConstructor):
        (WebCore::BlobRegistryImpl::registerBlobURL):
        * platform/network/BlobRegistryImpl.h:
        Except for chromium, "blob" is a scheme that's handled internally. Added hooks for that.

        * platform/network/ResourceHandle.cpp:
        (WebCore::builtinResourceHandleConstructorMap):
        (WebCore::ResourceHandle::registerBuiltinConstructor):
        (WebCore::ResourceHandle::create):
        * platform/network/ResourceHandle.h:
        Added a way for other code to register handlers for URL schemes. Non-Chromium platforms
        use this for blob: now.

2012-03-07  Dan Bernstein  <mitz@apple.com>

        <rdar://problem/10923294> REGRESSION (r100847): Entries are clipped out in Day One
        https://bugs.webkit.org/show_bug.cgi?id=80494

        Reviewed by Sam Weinig.

        Test: fast/dom/HTMLDocument/width-and-height.html

        * html/HTMLDocument.idl: Reverted r100847 by re-enabling the width and height properties
        in the JavaScript bindings.

2012-03-07  Philippe Normand  <pnormand@igalia.com>

        [GTK] media/audio-garbage-collect.html is flaky
        https://bugs.webkit.org/show_bug.cgi?id=72698

        Reviewed by Xan Lopez.

        Call ::hasPendingActivity() instead of ::paused() when checking if
        the audio element is still active. This is similar to what the
        image element (another ActiveDOMObject implementation) does just
        above. This contributes to fixing the audio-garbage-collect.html
        test.

        * bindings/js/JSNodeCustom.cpp:
        (WebCore::isReachableFromDOM):

2012-03-07  Adele Peterson  <adele@apple.com>

        REGRESSION(r96566): Cursor is I-beam upon dragging an attachment in mail
        https://bugs.webkit.org/show_bug.cgi?id=80458
        <rdar://problem/10873195>

        Reviewed by Dan Bernstein.

        No tests because we currently don't have any test machinery for cursors.

        Make sure the shortcut to always use an iBeam cursor during selection isn't used during dragging.
        Before r96566, we handled plugin cursors as a special case before calling into selectCursor, so we never hit this code path.

        * page/EventHandler.cpp: (WebCore::EventHandler::selectCursor):

2012-03-07  ChangSeok Oh  <shivamidow@gmail.com>

        [EFL] Key press event is not processed properly.
        https://bugs.webkit.org/show_bug.cgi?id=80491

        Reviewed by Gustavo Noronha Silva.

        This issue is related with mutation observer feature.
        If enter key is pressed, then a keyboard event should be processed
        and reach to the mutation observer, but it doesn't.
        Some special keys like Enter, Backspace and Tab key should be processed
        and change to a single character code, but EFL port hasn't handled like that.

        At least we can verify this with following two tests as I know. but they require another
        functionality for bug79601. I'm going to submit the patch for it after this one.

        Test: fast/mutation/end-of-task-delivery.html
              fast/mutation/inline-event-listener.html

        * platform/efl/EflKeyboardUtilities.cpp:
        (WebCore::singleCharacterString):
        (WebCore):
        * platform/efl/EflKeyboardUtilities.h:
        (WebCore):
        * platform/efl/PlatformKeyboardEventEfl.cpp:
        (WebCore::PlatformKeyboardEvent::PlatformKeyboardEvent):

2012-03-07  Gavin Peters  <gavinp@chromium.org>

        Add Histograms for reporting on PageCache reject reasons
        https://bugs.webkit.org/show_bug.cgi?id=80187

        Enhance the PageCache debug mode so that it uses Histograms to
        report on causes of failure.  Turn on the debug printing path
        even in non-debug Chromium builds, so these histograms will
        update.

        Reviewed by Brady Eidson.

        No new tests, does not change behaviour.

        * history/PageCache.cpp:
        (WebCore):
        (WebCore::logCanCacheFrameDecision):
        (WebCore::logCanCachePageDecision):
        (WebCore::PageCache::canCache):

2012-03-07  Elliot Poger  <epoger@google.com>

        [Chromium] Remove use_skia option from GYP
        https://bugs.webkit.org/show_bug.cgi?id=75811

        Reviewed by Tony Chang.

        * WebCore.gyp/WebCore.gyp:

2012-03-07  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] Introduce LabelableElement to share "labels" attribute implementation
        https://bugs.webkit.org/show_bug.cgi?id=80392

        Reviewed by Kent Tamura.

        This patch introduces new class LabelableElement as base class of
        HTMLFormControlElement for sharing implementation of "labels" 
        attribute among form-associate elements, "meter" element, and 
        "progress" element.

        This patch allows us to change base class of HTMLMeterElement and
        HTMLProgressElement dervied from HTMLFormControlElement to 
        HTMLElement for remove them from HTMLFormElement::m_associatedFormElements
        where we don't need to put "meter" and "progress" elements(bug 80381.)

        This patch also changes implementation of isLabelable using virtual
        method rather than sequence of hasTagName for execution speed and
        better readability.

        No new tests are required. No behavior changes.

        * CMakeLists.txt: Add LabelableElement.cpp and .h
        * GNUmakefile.list.am:  Add LabelableElement.cpp and .h
        * Target.pri: Add LabelableElement.cpp and .h
        * WebCore.gypi: Add LabelableElement.cpp and .h
        * WebCore.vcproj/WebCore.vcproj: Add LabelableElement.cpp and .h
        * WebCore.xcodeproj/project.pbxproj: Add LabelableElement.cpp and .h
        * html/HTMLButtonElement.h: Implement isLabelable.
        * html/HTMLFormControlElement.cpp:
        (WebCore::HTMLFormControlElement::HTMLFormControlElement): Change direct base class.
        * html/HTMLFormControlElement.h:
        (HTMLFormControlElement): Change direct base class.
        * html/HTMLInputElement.cpp:
        (WebCore::HTMLInputElement::isLabelable): Removed to use virtual method instead of hasTagName.
        (WebCore):
        * html/HTMLInputElement.h: Declaration of isLabelable.
        * html/HTMLKeygenElement.h: Implement isLabelable.
        * html/HTMLMeterElement.h: Implement isLabelable.
        * html/HTMLProgressElement.h: Implement isLabelable.
        * html/HTMLSelectElement.h: Implement isLabelable.
        * html/HTMLTextAreaElement.h: Implement isLabelable.
        * html/LabelableElement.cpp: Added.
        (WebCore):
        (WebCore::LabelableElement::LabelableElement):
        (WebCore::LabelableElement::~LabelableElement):
        (WebCore::LabelableElement::labels): Moved from HTMLFormControlElement.
        * html/LabelableElement.h: Added.
        (WebCore):
        (LabelableElement):

2012-03-07  Arun Patole  <bmf834@motorola.com>

        HTMLTrackElement.idl doesn't have default attribute.
        https://bugs.webkit.org/show_bug.cgi?id=80116

        Reviewed by Kentaro Hara.

        Renamed isDefault to 'default' so that in JS, it will be track.default instead of track.isDefault.
        * html/HTMLTrackElement.idl:

2012-03-07  Zoltan Horvath  <zoltan@webkit.org>

        [Qt] Add qmake config tests for JPEG and PNG library
        https://bugs.webkit.org/show_bug.cgi?id=80398

        Reviewed by Tor Arne Vestbø.

        Add JPEG and PNG library tests to config.tests and
        add error() abort to WebCore.pri if tests don't work.

        * WebCore.pri:

2012-03-06  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: extract source mapping logic from DebuggerPresentationModel to ScriptMappingImpl.
        https://bugs.webkit.org/show_bug.cgi?id=80412

        Reviewed by Vsevolod Vlasov.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/compile-front-end.sh:
        * inspector/front-end/ScriptMapping.js:
        (WebInspector.ScriptMappingImpl):
        (WebInspector.ScriptMappingImpl.prototype.rawLocationToUILocation):
        (WebInspector.ScriptMappingImpl.prototype.createLiveLocation):
        (WebInspector.ScriptMappingImpl.prototype.uiSourceCodeList):
        (WebInspector.ScriptMappingImpl.prototype._handleUISourceCodeListChanged):
        (WebInspector.ScriptMappingImpl.prototype._uiSourceCodeListChanged):
        (WebInspector.ScriptMappingImpl.prototype._bindScriptToRawSourceCode):
        (WebInspector.ScriptMappingImpl.prototype.setFormatSource):
        (WebInspector.ScriptMappingImpl.prototype.forceUpdateSourceMapping):
        (WebInspector.ScriptMappingImpl.prototype.reset):

2012-03-07  Mark Rowe  <mrowe@apple.com>

        Fix DerivedSources.make to not assume that WTF and WebCore build in to the same build directory.

        We can't assume that wtf/Platform.h can be found inside BUILT_PRODUCTS_DIR as
        that won't be the case if WTF and WebCore are building in to different build
        directories. We should instead look for wtf/Platform.h in the header search path.
        
        Unreviewed due to being a build fix.

        * DerivedSources.make: Set up the header search path, and invoke the compiler in
        such a manner that it looks for wtf/Platform.h in that search path.

2012-03-07  Robin Cao  <robin.cao@torchmobile.com.cn>

        [BlackBerry] Upstream Texture and TextureCache
        https://bugs.webkit.org/show_bug.cgi?id=80121

        Reviewed by Rob Buis.

        Initial upstream, no new tests.

        * platform/graphics/blackberry/Texture.cpp: Added.
        (WebCore):
        (WebCore::copyImageData):
        (WebCore::Texture::Texture):
        (WebCore::Texture::~Texture):
        (WebCore::Texture::updateContents):
        (WebCore::Texture::setContentsToColor):
        (WebCore::Texture::protect):
        * platform/graphics/blackberry/Texture.h: Added.
        (WebCore):
        (Texture):
        (WebCore::Texture::create):
        (WebCore::Texture::textureId):
        (WebCore::Texture::isDirty):
        (WebCore::Texture::hasTexture):
        (WebCore::Texture::isColor):
        (WebCore::Texture::isOpaque):
        (WebCore::Texture::isProtected):
        (WebCore::Texture::protect):
        (WebCore::Texture::unprotect):
        (WebCore::Texture::size):
        (WebCore::Texture::width):
        (WebCore::Texture::height):
        (WebCore::Texture::bytesPerPixel):
        (WebCore::Texture::setTextureId):
        * platform/graphics/blackberry/TextureCacheCompositingThread.cpp: Added.
        (WebCore):
        (TextureProtector):
        (WebCore::TextureProtector::TextureProtector):
        (WebCore::TextureProtector::~TextureProtector):
        (WebCore::TextureCacheCompositingThread::TextureCacheCompositingThread):
        (WebCore::TextureCacheCompositingThread::allocateTextureId):
        (WebCore::TextureCacheCompositingThread::freeTextureId):
        (WebCore::TextureCacheCompositingThread::collectGarbage):
        (WebCore::TextureCacheCompositingThread::textureResized):
        (WebCore::TextureCacheCompositingThread::textureDestroyed):
        (WebCore::TextureCacheCompositingThread::install):
        (WebCore::TextureCacheCompositingThread::evict):
        (WebCore::TextureCacheCompositingThread::textureAccessed):
        (WebCore::textureCacheCompositingThread):
        (WebCore::TextureCacheCompositingThread::prune):
        (WebCore::TextureCacheCompositingThread::clear):
        (WebCore::TextureCacheCompositingThread::setMemoryUsage):
        (WebCore::TextureCacheCompositingThread::textureForTiledContents):
        (WebCore::TextureCacheCompositingThread::textureForColor):
        (WebCore::TextureCacheCompositingThread::updateContents):
        (WebCore::TextureCacheCompositingThread::key):
        * platform/graphics/blackberry/TextureCacheCompositingThread.h: Added.
        (WebCore):
        (TextureCacheCompositingThread):
        (WebCore::TextureCacheCompositingThread::createTexture):
        (WebCore::TextureCacheCompositingThread::memoryUsage):
        (WebCore::TextureCacheCompositingThread::memoryLimit):
        (WebCore::TextureCacheCompositingThread::setMemoryLimit):
        (WebCore::TextureCacheCompositingThread::prune):
        (WebCore::TextureCacheCompositingThread::ZombieTexture::ZombieTexture):
        (ZombieTexture):
        (WebCore::TextureCacheCompositingThread::incMemoryUsage):
        (WebCore::TextureCacheCompositingThread::decMemoryUsage):
        (WebCore::TextureCacheCompositingThread::ColorHash::hash):
        (WebCore::TextureCacheCompositingThread::ColorHash::equal):
        (ColorHash):
        (ColorHashTraits):
        (WebCore::TextureCacheCompositingThread::ColorHashTraits::constructDeletedValue):
        (WebCore::TextureCacheCompositingThread::ColorHashTraits::isDeletedValue):

2012-03-07  Kenichi Ishibashi  <bashi@chromium.org>

        [WebSocket] Should raise SYNTAX_ERR when message contains unpaired surrogates
        https://bugs.webkit.org/show_bug.cgi?id=80103

        Reviewed by Kent Tamura.

        Add UTF8 validation checks for WebSocket message and close reason.

        Tests: http/tests/websocket/tests/hybi/unpaired-surrogates-in-close-reason.html
               http/tests/websocket/tests/hybi/unpaired-surrogates-in-message.html

        * Modules/websockets/WebSocket.cpp:
        (WebCore::WebSocket::send): Raise SYNTAX_ERR if the message is invalid.
        (WebCore::WebSocket::close):Raise SYNTAX_ERR if the reason is invalid.
        * Modules/websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send): Check whether message is a valid UTF8 string.

2012-03-07  Byungwoo Lee  <bw80.lee@samsung.com>

        [EFL] Build warning: Fix warn_unused_result warnings.
        https://bugs.webkit.org/show_bug.cgi?id=79194

        Reviewed by Filip Pizlo.

        Fixed build warning which is getting generated when not using return
        value of a fuction, especially declared with warn_unused_result
        attribute.

        * platform/efl/SharedBufferEfl.cpp:
        (WebCore::SharedBuffer::createWithContentsOfFile):

2012-03-07  Kent Tamura  <tkent@chromium.org>

        Cleanup of RenderTextControl::adjustControlHeightBasedOnLineHeight()
        https://bugs.webkit.org/show_bug.cgi?id=80480

        Reviewed by Hajime Morita.

        The callsite of adjustControlHeightBasedOnLineHeight() stored
        padding+border+margin height of the inner text in height(), and
        adjustControlHeightBasedOnLineHeight() implementations refered it. It
        was unreasonable and hard to understand.

        The purpose of adjustControlHeightBasedOnLineHeight() is to compute
        - the maximum height of line-heights of the inner text and decorations
        - the maximum height of padding+border+margin heights of the inner text and decorations,
        and to sum them up. This patch rewrites the code to make it understood easily.

        adjustControlHeightBasedOnLineHeight() is renamed to
        computeControlheight(), it takes additional parameter of
        padding+boder+margin height, and returns the sum of them.

        No behavior change.

        * rendering/RenderTextControl.cpp:
        (WebCore::RenderTextControl::computeLogicalHeight):
        * rendering/RenderTextControl.h:
        (RenderTextControl):
        * rendering/RenderTextControlMultiLine.cpp:
        (WebCore::RenderTextControlMultiLine::computeControlHeight):
        * rendering/RenderTextControlMultiLine.h:
        (RenderTextControlMultiLine):
        * rendering/RenderTextControlSingleLine.cpp:
        (WebCore::RenderTextControlSingleLine::computeControlHeight):
        * rendering/RenderTextControlSingleLine.h:
        (RenderTextControlSingleLine):

2012-03-06  Eric Seidel  <eric@webkit.org>

        Make WTF public headers use fully-qualified include paths and remove ForwardingHeaders/wtf
        https://bugs.webkit.org/show_bug.cgi?id=80363

        Reviewed by Mark Rowe.

        ForwardingHeaders/wtf is no longer needed (or functional) now that
        JavaScriptCore no longer includes the WTF headers as private headers.

        * DerivedSources.make:
        * ForwardingHeaders/wtf/ASCIICType.h: Removed.
        * ForwardingHeaders/wtf/AVLTree.h: Removed.
        * ForwardingHeaders/wtf/Alignment.h: Removed.
        * ForwardingHeaders/wtf/AlwaysInline.h: Removed.
        * ForwardingHeaders/wtf/ArrayBuffer.h: Removed.
        * ForwardingHeaders/wtf/ArrayBufferView.h: Removed.
        * ForwardingHeaders/wtf/Assertions.h: Removed.
        * ForwardingHeaders/wtf/Atomics.h: Removed.
        * ForwardingHeaders/wtf/Bitmap.h: Removed.
        * ForwardingHeaders/wtf/BloomFilter.h: Removed.
        * ForwardingHeaders/wtf/BumpPointerAllocator.h: Removed.
        * ForwardingHeaders/wtf/ByteArray.h: Removed.
        * ForwardingHeaders/wtf/CheckedArithmetic.h: Removed.
        * ForwardingHeaders/wtf/CheckedBoolean.h: Removed.
        * ForwardingHeaders/wtf/Compiler.h: Removed.
        * ForwardingHeaders/wtf/Complex.h: Removed.
        * ForwardingHeaders/wtf/CryptographicallyRandomNumber.h: Removed.
        * ForwardingHeaders/wtf/CurrentTime.h: Removed.
        * ForwardingHeaders/wtf/DataLog.h: Removed.
        * ForwardingHeaders/wtf/DateInstanceCache.h: Removed.
        * ForwardingHeaders/wtf/DateMath.h: Removed.
        * ForwardingHeaders/wtf/DecimalNumber.h: Removed.
        * ForwardingHeaders/wtf/Decoder.h: Removed.
        * ForwardingHeaders/wtf/Deque.h: Removed.
        * ForwardingHeaders/wtf/DisallowCType.h: Removed.
        * ForwardingHeaders/wtf/DoublyLinkedList.h: Removed.
        * ForwardingHeaders/wtf/DynamicAnnotations.h: Removed.
        * ForwardingHeaders/wtf/Encoder.h: Removed.
        * ForwardingHeaders/wtf/ExportMacros.h: Removed.
        * ForwardingHeaders/wtf/FastAllocBase.h: Removed.
        * ForwardingHeaders/wtf/FastMalloc.h: Removed.
        * ForwardingHeaders/wtf/FixedArray.h: Removed.
        * ForwardingHeaders/wtf/Float32Array.h: Removed.
        * ForwardingHeaders/wtf/Float64Array.h: Removed.
        * ForwardingHeaders/wtf/Forward.h: Removed.
        * ForwardingHeaders/wtf/Functional.h: Removed.
        * ForwardingHeaders/wtf/GetPtr.h: Removed.
        * ForwardingHeaders/wtf/HashCountedSet.h: Removed.
        * ForwardingHeaders/wtf/HashFunctions.h: Removed.
        * ForwardingHeaders/wtf/HashMap.h: Removed.
        * ForwardingHeaders/wtf/HashSet.h: Removed.
        * ForwardingHeaders/wtf/HashTable.h: Removed.
        * ForwardingHeaders/wtf/HashTraits.h: Removed.
        * ForwardingHeaders/wtf/HexNumber.h: Removed.
        * ForwardingHeaders/wtf/Int16Array.h: Removed.
        * ForwardingHeaders/wtf/Int32Array.h: Removed.
        * ForwardingHeaders/wtf/Int8Array.h: Removed.
        * ForwardingHeaders/wtf/ListHashSet.h: Removed.
        * ForwardingHeaders/wtf/ListRefPtr.h: Removed.
        * ForwardingHeaders/wtf/Locker.h: Removed.
        * ForwardingHeaders/wtf/MD5.h: Removed.
        * ForwardingHeaders/wtf/MainThread.h: Removed.
        * ForwardingHeaders/wtf/MathExtras.h: Removed.
        * ForwardingHeaders/wtf/MessageQueue.h: Removed.
        * ForwardingHeaders/wtf/MetaAllocator.h: Removed.
        * ForwardingHeaders/wtf/MetaAllocatorHandle.h: Removed.
        * ForwardingHeaders/wtf/NonCopyingSort.h: Removed.
        * ForwardingHeaders/wtf/Noncopyable.h: Removed.
        * ForwardingHeaders/wtf/NotFound.h: Removed.
        * ForwardingHeaders/wtf/OSAllocator.h: Removed.
        * ForwardingHeaders/wtf/OwnArrayPtr.h: Removed.
        * ForwardingHeaders/wtf/OwnPtr.h: Removed.
        * ForwardingHeaders/wtf/OwnPtrCommon.h: Removed.
        * ForwardingHeaders/wtf/PageAllocation.h: Removed.
        * ForwardingHeaders/wtf/PageAllocationAligned.h: Removed.
        * ForwardingHeaders/wtf/PageBlock.h: Removed.
        * ForwardingHeaders/wtf/PageReservation.h: Removed.
        * ForwardingHeaders/wtf/ParallelJobs.h: Removed.
        * ForwardingHeaders/wtf/PassOwnArrayPtr.h: Removed.
        * ForwardingHeaders/wtf/PassOwnPtr.h: Removed.
        * ForwardingHeaders/wtf/PassRefPtr.h: Removed.
        * ForwardingHeaders/wtf/Platform.h: Removed.
        * ForwardingHeaders/wtf/PossiblyNull.h: Removed.
        * ForwardingHeaders/wtf/RandomNumber.h: Removed.
        * ForwardingHeaders/wtf/RedBlackTree.h: Removed.
        * ForwardingHeaders/wtf/RefCounted.h: Removed.
        * ForwardingHeaders/wtf/RefCountedLeakCounter.h: Removed.
        * ForwardingHeaders/wtf/RefPtr.h: Removed.
        * ForwardingHeaders/wtf/RetainPtr.h: Removed.
        * ForwardingHeaders/wtf/SHA1.h: Removed.
        * ForwardingHeaders/wtf/SegmentedVector.h: Removed.
        * ForwardingHeaders/wtf/SimpleStats.h: Removed.
        * ForwardingHeaders/wtf/Spectrum.h: Removed.
        * ForwardingHeaders/wtf/StackBounds.h: Removed.
        * ForwardingHeaders/wtf/StaticConstructors.h: Removed.
        * ForwardingHeaders/wtf/StdLibExtras.h: Removed.
        * ForwardingHeaders/wtf/StringExtras.h: Removed.
        * ForwardingHeaders/wtf/StringHasher.h: Removed.
        * ForwardingHeaders/wtf/TemporaryChange.h: Removed.
        * ForwardingHeaders/wtf/ThreadRestrictionVerifier.h: Removed.
        * ForwardingHeaders/wtf/ThreadSafeRefCounted.h: Removed.
        * ForwardingHeaders/wtf/ThreadSpecific.h: Removed.
        * ForwardingHeaders/wtf/Threading.h: Removed.
        * ForwardingHeaders/wtf/ThreadingPrimitives.h: Removed.
        * ForwardingHeaders/wtf/TypeTraits.h: Removed.
        * ForwardingHeaders/wtf/Uint16Array.h: Removed.
        * ForwardingHeaders/wtf/Uint32Array.h: Removed.
        * ForwardingHeaders/wtf/Uint8Array.h: Removed.
        * ForwardingHeaders/wtf/Uint8ClampedArray.h: Removed.
        * ForwardingHeaders/wtf/UnusedParam.h: Removed.
        * ForwardingHeaders/wtf/VMTags.h: Removed.
        * ForwardingHeaders/wtf/ValueCheck.h: Removed.
        * ForwardingHeaders/wtf/Vector.h: Removed.
        * ForwardingHeaders/wtf/VectorTraits.h: Removed.
        * ForwardingHeaders/wtf/WTFThreadData.h: Removed.
        * ForwardingHeaders/wtf/dtoa.h: Removed.
        * ForwardingHeaders/wtf/dtoa/double-conversion.h: Removed.
        * ForwardingHeaders/wtf/text/ASCIIFastPath.h: Removed.
        * ForwardingHeaders/wtf/text/AtomicString.h: Removed.
        * ForwardingHeaders/wtf/text/AtomicStringHash.h: Removed.
        * ForwardingHeaders/wtf/text/AtomicStringImpl.h: Removed.
        * ForwardingHeaders/wtf/text/CString.h: Removed.
        * ForwardingHeaders/wtf/text/StringBuffer.h: Removed.
        * ForwardingHeaders/wtf/text/StringBuilder.h: Removed.
        * ForwardingHeaders/wtf/text/StringConcatenate.h: Removed.
        * ForwardingHeaders/wtf/text/StringHash.h: Removed.
        * ForwardingHeaders/wtf/text/StringImpl.h: Removed.
        * ForwardingHeaders/wtf/text/TextPosition.h: Removed.
        * ForwardingHeaders/wtf/text/WTFString.h: Removed.
        * ForwardingHeaders/wtf/unicode/CharacterNames.h: Removed.
        * ForwardingHeaders/wtf/unicode/Collator.h: Removed.
        * ForwardingHeaders/wtf/unicode/UTF8.h: Removed.
        * ForwardingHeaders/wtf/unicode/Unicode.h: Removed.
        * ForwardingHeaders/wtf/unicode/icu/UnicodeIcu.h: Removed.
        * ForwardingHeaders/wtf/unicode/wince/UnicodeWince.h: Removed.
        * ForwardingHeaders/wtf/url/ParsedURL.h: Removed.

2012-03-07  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] The "legend" element should not be a form-associated element.
        https://bugs.webkit.org/show_bug.cgi?id=80239

        Reviewed by Kent Tamura.

        This patch changes base class of HTMLLegendElement to HTMLElement from
        HTMLFormControlElement for saving memory space and iteration time of
        extra "legend" elements in HTMLFormElement::m_formAssociatedElements
        and matching the HTML5 specification for ease of maintenance.

        Changes of TextIterator is lead by usage of isFormControlElement. This
        changes will be replaced with more meaningful predicate as part of
        https://bugs.webkit.org/show_bug.cgi?id=80381

        No new tests are required. No behavior changes.

        * editing/TextIterator.cpp:
        (WebCore::TextIterator::advance): Check HTMLLegendElement in addition to isFormControlElement. This change is for text dump in LayoutTests implemented by document.innerText attribute.
        * html/HTMLLegendElement.cpp:
        (WebCore::HTMLLegendElement::HTMLLegendElement): Remove form parameter.
        (WebCore::HTMLLegendElement::create): Remove form parameter.
        (WebCore::HTMLLegendElement::associatedControl): Stop checking legend element, because HTMLLegendElement is no longer HTMLFormControlElement.
        (WebCore::HTMLLegendElement::supportFocus): Removed. It called HTMLElement::supportFocus.
        (WebCore::HTMLLegendElement::formControlType): Remove implementation of virtual method declared in HTMLFormControlElement.
        * html/HTMLLegendElement.h:
        (HTMLLegendElement): Change base class to HTMLElement.
        * html/HTMLTagNames.in: Remove "constructorNeedsFormElement" for not passing "form" parameter in HTMLElementFactory.

2012-03-06  Raphael Kubo da Costa  <kubo@profusion.mobi>

        [CMake] Make the removal of transitive library dependencies work with CMake < 2.8.7.
        https://bugs.webkit.org/show_bug.cgi?id=80469

        Reviewed by Antonio Gomes.

        No new tests, this is a buildsystem change.

        * CMakeLists.txt: Manually set the LINK_INTERFACE_LIBRARIES target
        property on the library being created.

2012-03-06  Lianghui Chen  <liachen@rim.com>

        [BlackBerry] Set correct ResourceRequest target type.
        https://bugs.webkit.org/show_bug.cgi?id=80430

        Reviewed by Rob Buis.

        For loads started by AppCache, they are based on the manifest file,
        it is not definitely sure what target it is for, so we just guess
        based on its mimetype or file extension.

        * loader/appcache/ApplicationCacheGroup.cpp:
        (WebCore::ApplicationCacheGroup::createResourceHandle):
        * loader/cache/CachedResource.cpp:
        (WebCore):
        (WebCore::CachedResource::load):
        * platform/network/blackberry/ResourceRequest.h:
        (ResourceRequest):
        * platform/network/blackberry/ResourceRequestBlackBerry.cpp:
        (WebCore):
        (WebCore::mimeTypeRequestTypeMap):
        (WebCore::ResourceRequest::targetTypeFromMimeType):
        * workers/DefaultSharedWorkerRepository.cpp:
        (WebCore::SharedWorkerScriptLoader::load):
        * workers/Worker.cpp:
        (WebCore::Worker::create):
        * workers/WorkerContext.cpp:
        (WebCore::WorkerContext::importScripts):
        * workers/WorkerScriptLoader.cpp:
        (WebCore::WorkerScriptLoader::createResourceRequest):
        * workers/WorkerScriptLoader.h:
        (WorkerScriptLoader):

2012-03-06  Dana Jansens  <danakj@chromium.org>

        [chromium] Add clipping to scissor rect to CCOcclusionTracker
        https://bugs.webkit.org/show_bug.cgi?id=79927

        Reviewed by Adrienne Walker.

        Adds logic to CCOcclusionTracker to occlude anything outside of the
        current screen and target surface scissor rects. When tracking
        damage for partial swaps, the scissor rects are bounded by the
        tracked damage rects.

        Unit tests: CCOcclusionTrackerTest.cpp

        * platform/graphics/chromium/cc/CCOcclusionTracker.cpp:
        (WebCore::::CCOcclusionTrackerBase):
        (WebCore):
        (WebCore::::markOccludedBehindLayer):
        (WebCore::testContentRectOccluded):
        (WebCore::::occluded):
        (WebCore::computeUnoccludedContentRect):
        (WebCore::::unoccludedContentRect):
        (WebCore::::layerScissorRect):
        * platform/graphics/chromium/cc/CCOcclusionTracker.h:
        (WebCore):
        (CCOcclusionTrackerDamageClientBase):
        (CCOcclusionTrackerBase):

2012-03-06  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, rolling out r110011.
        http://trac.webkit.org/changeset/110011
        https://bugs.webkit.org/show_bug.cgi?id=80376

        layout tests crash

        * bindings/v8/V8HiddenPropertyName.cpp:
        (WebCore):
        (WebCore::V8HiddenPropertyName::hiddenReferenceName):
        * bindings/v8/V8HiddenPropertyName.h:
        (WebCore):
        (V8HiddenPropertyName):
        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp:
        (WebCore::toV8):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        (WebCore::toV8):

2012-03-06  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, rolling out r110016.
        http://trac.webkit.org/changeset/110016

        layout tests crash

        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        (WebCore::toV8):

2012-03-06  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, fixed test crashes.

        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        (WebCore::toV8):

2012-03-06  Hajime Morrita  <morrita@chromium.org>

        https://bugs.webkit.org/show_bug.cgi?id=79935
        REGRESSION: <content> element is not HTMLUnknownElement when Shadow DOM API is disabled

        Reviewed by Adam Barth.

        This change introduced "runtimeConditional" keyword to make_name.pl sources,
        which allows HTMLElementFactory and HTMLElementWrapperFactory to check RuntimeEnabledFeatures
        and treat any tag name as HTMLUnknownElement if its definition has runtimeConditional and
        the flag given is turned off.

        Test: fast/dom/shadow/content-shadow-unknown.html

        * WebCore.exp.in:
        * dom/make_names.pl:
        (defaultTagPropertyHash):
        (printConstructorInterior):
        (printFactoryCppFile):
        (printWrapperFunctions):
        (printWrapperFactoryCppFile):
        * html/HTMLTagNames.in:
        * html/shadow/HTMLContentElement.cpp:
        (WebCore::contentTagName):
        * testing/InternalSettings.cpp:
        (WebCore::InternalSettings::InternalSettings):
        (WebCore::InternalSettings::restoreTo):
        (WebCore::InternalSettings::setShadowDOMEnabled):
        (WebCore):
        * testing/InternalSettings.h:
        (InternalSettings):
        * testing/InternalSettings.idl:

2012-03-06  Kenichi Ishibashi  <bashi@chromium.org>

        [WebSocket] Introduce ThreadableWebSocketChannel::SendResult
        https://bugs.webkit.org/show_bug.cgi?id=80356

        Reviewed by Kent Tamura.

        Introduced ThreadableWebSocketChannel::SendResult type so that
        WebSocketChannel can pass the validation result.

        No new test. No changes in behavior.

        * Modules/websockets/ThreadableWebSocketChannel.h: Added SendResult.
        * Modules/websockets/ThreadableWebSocketChannelClientWrapper.cpp:
        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
        (WebCore::ThreadableWebSocketChannelClientWrapper::sendRequestResult): Use ThreadableWebSocketChannel::SendResult instead of bool.
        (WebCore::ThreadableWebSocketChannelClientWrapper::setSendRequestResult): Ditto.
        * Modules/websockets/ThreadableWebSocketChannelClientWrapper.h:
        (ThreadableWebSocketChannelClientWrapper):
        * Modules/websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send): Use ThreadableWebSocketChannel::SendResult instead of bool. Pass Cstring to enqueTextFrame instead of String.
        (WebCore::WebSocketChannel::enqueueTextFrame): Ditto.
        (WebCore::WebSocketChannel::processOutgoingFrameQueue): Ditto.
        * Modules/websockets/WebSocketChannel.h:
        (WebSocketChannel):
        (QueuedFrame): Changed the type of stringData from String to CString.
        * Modules/websockets/WorkerThreadableWebSocketChannel.cpp:
        (WebCore::WorkerThreadableWebSocketChannel::send): Use ThreadableWebSocketChannel::SendResult instead of bool.
        (WebCore::workerContextDidSend): Ditto.
        (WebCore::WorkerThreadableWebSocketChannel::Peer::send): Ditto.
        (WebCore::WorkerThreadableWebSocketChannel::Bridge::send): Ditto.
        * Modules/websockets/WorkerThreadableWebSocketChannel.h:
        (WorkerThreadableWebSocketChannel): ditto.
        (Bridge): Ditto.

2012-03-06  Kentaro Hara  <haraken@chromium.org>

        [V8][Performance] Optimize V8 bindings for HTMLElement.classList,
        Element.dataset and Node.attributes
        https://bugs.webkit.org/show_bug.cgi?id=80376

        Reviewed by Adam Barth.

        This patch improves the performance of HTMLElement.classList, Element.dataset
        and Node.attributes by 6.4 times, 7.1 times and 10.9 times, respectively.

        Previously, a 'hiddenReferenceName' string was allocated on v8::Handle and
        created every time the DOM attribute is accessed, in spite of the fact that
        the 'hiddenReferenceName' string is static.

        This patch moves the 'hiddenReferenceName' string to v8::Persistent and makes it static.
        Also, this patch removes 'if (!elementValue.IsEmpty() && elementValue->IsObject())',
        since if 'element' exists, it is guaranteed that 'elementValue' is not empty
        and is an Object.

        Performance tests: https://bugs.webkit.org/attachment.cgi?id=130283

        AppleWebKit/JavaScriptCore:
        div.classList : 382ms
        div.classList.foo = 123 : 335ms
        div.dataset : 403ms
        div.dataset.foo = 123 : 5250ms
        div.attributes : 183ms

        Chromium/V8 (without this patch):
        div.classList : 9140ms
        div.classList.foo = 123 : 9086ms
        div.dataset : 9930ms
        div.dataset.foo = 123 : 49698ms
        div.attributes : 13489ms

        Chromium/V8 (with this patch):
        div.classList : 1435ms
        div.classList.foo = 123 : 1470ms
        div.dataset : 1400ms
        div.dataset.foo = 123 : 30396ms
        div.attributes : 1242ms

        No tests. No change in behavior.

        * bindings/v8/custom/V8DOMStringMapCustom.cpp: Modified as described above.
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp: Ditto.
        (WebCore::toV8):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp: Ditto.
        (WebCore::toV8):

        * bindings/v8/V8HiddenPropertyName.cpp: Defined a hidden property name string statically
        to optimize the macro.
        (WebCore):
        (WebCore::V8HiddenPropertyName::hiddenReferenceName):
        * bindings/v8/V8HiddenPropertyName.h: Modified to switch two prefixes "WebCore::HiddenProperty::"
        and "WebCore::HiddenReference::", depending on whether a given name represents a hidden property
        or a hidden reference.
        (WebCore):
        (V8HiddenPropertyName):

2012-03-06  Nat Duca  <nduca@chromium.org>

        [chromium] CCThreadProxy context lost support
        https://bugs.webkit.org/show_bug.cgi?id=80100

        Reviewed by James Robinson.

        * platform/graphics/chromium/cc/CCScheduler.cpp:
        (WebCore::CCScheduler::didLoseContext):
        (WebCore):
        (WebCore::CCScheduler::didRecreateContext):
        (WebCore::CCScheduler::processScheduledActions):
        * platform/graphics/chromium/cc/CCScheduler.h:
        (CCSchedulerClient):
        (CCScheduler):
        * platform/graphics/chromium/cc/CCSchedulerStateMachine.cpp:
        (WebCore::CCSchedulerStateMachine::CCSchedulerStateMachine):
        (WebCore::CCSchedulerStateMachine::nextAction):
        (WebCore::CCSchedulerStateMachine::updateState):
        (WebCore::CCSchedulerStateMachine::vsyncCallbackNeeded):
        (WebCore::CCSchedulerStateMachine::didLoseContext):
        (WebCore):
        (WebCore::CCSchedulerStateMachine::didRecreateContext):
        * platform/graphics/chromium/cc/CCSchedulerStateMachine.h:
        (CCSchedulerStateMachine):
        * platform/graphics/chromium/cc/CCThreadProxy.cpp:
        (WebCore::CCThreadProxy::recreateContext):
        (WebCore::CCThreadProxy::loseContext):
        (WebCore::CCThreadProxy::scheduledActionBeginContextRecreation):
        (WebCore):
        (WebCore::CCThreadProxy::scheduledActionDrawAndSwap):
        (WebCore::CCThreadProxy::setAnimationEvents):
        (WebCore::CCThreadProxy::beginContextRecreation):
        (WebCore::CCThreadProxy::recreateContextOnImplThread):
        (WebCore::CCThreadProxy::loseContextOnImplThread):
        * platform/graphics/chromium/cc/CCThreadProxy.h:
        (CCThreadProxy):

2012-03-06  Tony Chang  <tony@chromium.org>

        refactor method names in RenderFlexibleBox to make them more consistent
        https://bugs.webkit.org/show_bug.cgi?id=80446

        Reviewed by Ojan Vafai.

        No new tests, just renaming internal methods.

        * rendering/RenderFlexibleBox.cpp:
        (WebCore::RenderFlexibleBox::flowAwareBorderAfter): New, used by layoutAndPlaceChildren
        (WebCore::RenderFlexibleBox::flowAwarePaddingAfter): New, used by layoutAndPlaceChildren
        (WebCore::RenderFlexibleBox::marginBoxAscentForChild): Add ForChild for consistency.
        (WebCore::RenderFlexibleBox::layoutAndPlaceChildren): We were adding the before padding+border twice (it's in the offset and
        crossAxisBorderAndPaddingExtent() and subtracting it once.  Instead, just add the after padding+border.
        (WebCore::RenderFlexibleBox::alignChildren):
        * rendering/RenderFlexibleBox.h:
        (RenderFlexibleBox): Reorder methods to match the .cpp file.

2012-03-06  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, rolling out r109969.
        http://trac.webkit.org/changeset/109969
        https://bugs.webkit.org/show_bug.cgi?id=80376

        layout tests crash

        * bindings/v8/V8HiddenPropertyName.cpp:
        (WebCore):
        (WebCore::V8HiddenPropertyName::hiddenReferenceName):
        * bindings/v8/V8HiddenPropertyName.h:
        (WebCore):
        (V8HiddenPropertyName):
        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp:
        (WebCore::toV8):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
        (WebCore::toV8):

2012-03-06  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, rolling out r109999.
        http://trac.webkit.org/changeset/109999

        layout tests crash

        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp:
        (WebCore::toV8):

2012-03-06  Kentaro Hara  <haraken@chromium.org>

        Unreviewed, fix crashes.

        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp:
        (WebCore::toV8):

2012-03-06  James Robinson  <jamesr@chromium.org>

        [chromium] Fix threaded compositing issues in WebGLLayerChromium (except for printing)
        https://bugs.webkit.org/show_bug.cgi?id=80459

        Reviewed by Kenneth Russell.

        This fixes a few wrong-thread issues in WebGLLayerChromium for threaded compositing.  The key requirements that
        threaded compositing imposes on LayerChromium subclasses are that the compositor's context can only be used from
        the compositor thread, meaning inside of updateCompositorResources() and pushPropertiesTo(), and that
        non-compositor contexts can only be used from the main thread. This means specifically that we can't use the
        DrawingBuffer's context in either of these two functions.

        Summary of changes:
        *) Move the publishToPlatformLayer() call and related logic inside of paintContentsIfDirty(), which is called
        on the main thread.
        *) Move lost context tracking outside of drawsContent(), since that function is called from both threads, to a
        separate bool that is updated after each WebGL composite and setDrawingBuffer call.

        Printing still doesn't work in threaded mode with this patch, I'll address that separately. Printing and lost
        context recovery still work as they did in the single-threaded path.

        * platform/graphics/chromium/WebGLLayerChromium.cpp:
        (WebCore::WebGLLayerChromium::WebGLLayerChromium):
        (WebCore::WebGLLayerChromium::drawsContent):
        (WebCore::WebGLLayerChromium::paintContentsIfDirty):
        (WebCore::WebGLLayerChromium::updateCompositorResources):
        (WebCore::WebGLLayerChromium::setDrawingBuffer):
        * platform/graphics/chromium/WebGLLayerChromium.h:
        (WebGLLayerChromium):

2012-03-06  Anders Carlsson  <andersca@apple.com>

        Cracks between tiles when zoomed in
        https://bugs.webkit.org/show_bug.cgi?id=80460
        <rdar://problem/10996688>

        Use enclosingIntRect instead of enclosedIntRect when converting from FloatRect to IntRect.

        * platform/graphics/mac/WebLayer.mm:
        (drawLayerContents):

2012-03-06  Anders Carlsson  <andersca@apple.com>

        Tile cache layers should always be clipped to the view's bounds
        https://bugs.webkit.org/show_bug.cgi?id=80456
        <rdar://problem/10996174>

        Reviewed by Simon Fraser.

        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::shouldClipCompositedBounds):
        Factor this code out into a separate function for better clarity. Always return true if we have a tile cache layer.

        (WebCore::RenderLayerBacking::updateCompositedBounds):
        Call shouldClipCompositedBounds directly.

2012-03-06  James Robinson  <jamesr@chromium.org>

        [chromium] Null-check m_layerRenderer in CCLayerTreeHostImpl::finishAllRendering()
        https://bugs.webkit.org/show_bug.cgi?id=80445

        Reviewed by Adrienne Walker.

        Null-check CCLayerTreeHostImpl::m_layerRenderer since it won't be set if context initialiation failed for any
        reason.

        Covered by new unit test in CCLayerTreeHostImplTest.

        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::finishAllRendering):

2012-03-06  Ryosuke Niwa  <rniwa@webkit.org>

        Can't select a line of RTL text on Facebook
        https://bugs.webkit.org/show_bug.cgi?id=59435

        Reviewed by Eric Seidel.

        Deploy prevLeafChildIgnoringLineBreak and nextLeafChildIgnoringLineBreak
        in RenderedPosition::leftBoundaryOfBidiRun and RenderedPosition::rightBoundaryOfBidiRun.

        Without this patch, WebKit extends selection from right to left when the user selects
        <span dir="rtl">ABC<br></span> from left to right by a mouse drag.

        Test: editing/selection/select-bidi-run.html

        * editing/RenderedPosition.cpp:
        (WebCore::RenderedPosition::leftBoundaryOfBidiRun):
        (WebCore::RenderedPosition::rightBoundaryOfBidiRun):

2012-03-06  Raphael Kubo da Costa  <kubo@profusion.mobi>

        undefined reference to JSC::IdentifierTable::~IdentifierTable() on EFL port
        https://bugs.webkit.org/show_bug.cgi?id=80282

        Reviewed by Antonio Gomes.

        No new tests, this is a buildsystem change.

        Remove transitive library dependencies; they are especially
        dangerous when one ends up linking against WTF, JSC and then WTF
        again, since some symbols will not be defined.

        Passing --no-copy-dt-needed-entries and --as-needed to the linker
        (which some recent Linux distros do by default) makes the issue
        even more evident.

        * CMakeLists.txt: Explicitly link to WTF as WebCore uses symbols
        from it.
        * PlatformEfl.cmake: Explicitly link against libjpeg and libpng.

2012-03-06  James Robinson  <jamesr@chromium.org>

        [chromium] REGRESSION(109469): WebGL printing busted
        https://bugs.webkit.org/show_bug.cgi?id=80450

        Reviewed by Kenneth Russell.

        Avoid marking layers as needing display in setContentsTo...() since this breaks WebGL's damage tracking and is
        unnecessary.

        Tested WebGL printing manually.

        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
        (WebCore::GraphicsLayerChromium::setContentsToCanvas):
        (WebCore::GraphicsLayerChromium::setContentsToMedia):

2012-03-06  Adrienne Walker  <enne@google.com>

        Overlap map for compositing should ignore empty layers
        https://bugs.webkit.org/show_bug.cgi?id=63499

        Reviewed by Simon Fraser.

        Test: compositing/layer-creation/overlap-empty-layer.html

        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::addToOverlapMap):
        (WebCore::RenderLayerCompositor::computeCompositingRequirements):

2012-03-06  Vangelis Kokkevis  <vangelis@chromium.org>

        [chromium] Increase the accelerated canvas min size to 256 * 256
        https://bugs.webkit.org/show_bug.cgi?id=80451

        Reviewed by Stephen White.

        Test: Manually

        * page/Settings.cpp:
        (WebCore::Settings::Settings):

2012-03-06  Kentaro Hara  <haraken@chromium.org>

        [V8][Performance] Optimize V8 bindings for HTMLElement.classList,
        Element.dataset and Node.attributes
        https://bugs.webkit.org/show_bug.cgi?id=80376

        Reviewed by Adam Barth.

        This patch improves the performance of HTMLElement.classList, Element.dataset
        and Node.attributes by 6.4 times, 7.1 times and 10.9 times, respectively.

        Previously, a 'hiddenReferenceName' string was allocated on v8::Handle and
        created every time the DOM attribute is accessed, in spite of the fact that
        the 'hiddenReferenceName' string is static.

        This patch moves the 'hiddenReferenceName' string to v8::Persistent and makes it static.
        Also, this patch removes 'if (!elementValue.IsEmpty() && elementValue->IsObject())',
        since if 'element' exists, it is guaranteed that 'elementValue' is not empty
        and is an Object.

        Performance tests: https://bugs.webkit.org/attachment.cgi?id=130283

        AppleWebKit/JavaScriptCore:
        div.classList : 382ms
        div.classList.foo = 123 : 335ms
        div.dataset : 403ms
        div.dataset.foo = 123 : 5250ms
        div.attributes : 183ms

        Chromium/V8 (without this patch):
        div.classList : 9140ms
        div.classList.foo = 123 : 9086ms
        div.dataset : 9930ms
        div.dataset.foo = 123 : 49698ms
        div.attributes : 13489ms

        Chromium/V8 (with this patch):
        div.classList : 1435ms
        div.classList.foo = 123 : 1470ms
        div.dataset : 1400ms
        div.dataset.foo = 123 : 30396ms
        div.attributes : 1242ms

        No tests. No change in behavior.

        * bindings/v8/custom/V8DOMStringMapCustom.cpp: Modified as described above.
        (WebCore::toV8):
        * bindings/v8/custom/V8DOMTokenListCustom.cpp: Ditto.
        (WebCore::toV8):
        * bindings/v8/custom/V8NamedNodeMapCustom.cpp: Ditto.
        (WebCore::toV8):

        * bindings/v8/V8HiddenPropertyName.cpp: Defined a hidden property name string statically
        to optimize the macro.
        (WebCore):
        (WebCore::V8HiddenPropertyName::hiddenReferenceName):
        * bindings/v8/V8HiddenPropertyName.h: Modified to switch two prefixes "WebCore::HiddenProperty::"
        and "WebCore::HiddenReference::", depending on whether a given name represents a hidden property
        or a hidden reference.
        (WebCore):
        (V8HiddenPropertyName):

2012-03-06  Alexis Menard  <alexis.menard@openbossa.org>

        getComputedStyle returns incorrect values for the width and height of pseudo-elements
        https://bugs.webkit.org/show_bug.cgi?id=37835

        Reviewed by Tony Chang.

        In case we are querying the computed style of an element with a pseudo-element we can't use
        the renderer of the element as this one is not the one used to render the pseudo-element. We need
        to use the one created to render the pseudo-element.

        No new tests : Extend the existing getComputedStyle-with-pseudo-element.

        * css/CSSComputedStyleDeclaration.cpp:
        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):

2012-03-06  Shawn Singh  <shawnsingh@chromium.org>

        [chromium] Make compositeAndReadback and damage tracking play nicely together
        https://bugs.webkit.org/show_bug.cgi?id=80199

        Reviewed by James Robinson.

        Requires system-level testing (pixels on front-buffer should be
        observed for correct behavior) that cannot be done by layout tests
        or unit tests, have to rely on manual testing.

        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::compositeAndReadback):

2012-03-06  Luke Macpherson   <macpherson@chromium.org>

        Make CSSStyleSelector::convertToLength() behave more like CSSPrimitiveValue::convertToLength().
        https://bugs.webkit.org/show_bug.cgi?id=80375

        Reviewed by Eric Seidel.

        No new tests / cleanup only.

        This patch removes the bool* ok parameter from CSSStyleSelector's convertToLength,
        and instead uses the recently added Length(Undefined) value to indicate failure.
        This paves the way for a future patch that will call primitiveValue->convertToLength directly.

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::collectMatchingRulesForList):

2012-03-06  Raymes Khoury  <raymes@chromium.org>

        Add state variable and ASSERTs to DocumentWriter to help track down
        https://bugs.webkit.org/show_bug.cgi?id=80427 and prevent illegal usage
        of DocumentWriter. This also makes endIfNotLoadingMainResource() private
        as there is no external usage.

        Reviewed by Adam Barth.

        This only adds ASSERT/CRASH and does not change existing behaviour.

        * loader/DocumentWriter.cpp:
        (WebCore::DocumentWriter::DocumentWriter):
        (WebCore::DocumentWriter::begin):
        (WebCore::DocumentWriter::addData):
        (WebCore::DocumentWriter::endIfNotLoadingMainResource):
        (WebCore::DocumentWriter::setDocumentWasLoadedAsPartOfNavigation):
        * loader/DocumentWriter.h:
        (DocumentWriter):

2012-03-06  Mihnea Ovidenie  <mihnea@adobe.com>

        [CSSRegions][CSSOM]Restrict parsing of named flow name
        https://bugs.webkit.org/show_bug.cgi?id=80359

        Reviewed by Andreas Kling.

        The function that does the parsing for flow thread name should restrict the
        number of parsed properties to 1, otherwise it would allow parsing of
        "-webkit-flow-into: flow; color: red;" constructions.

        Modified fast/regions/webkit-named-flow-invalid-name.html to include the above case.

        * css/CSSParser.cpp:
        (WebCore::validFlowName):
        (WebCore::CSSParser::parseFlowThread):

2012-03-06  Joseph Pecoraro  <pecoraro@apple.com>

        Unreviewed build fix for minimal build after r109939.

        Guard access to page->inspectorController with ENABLE(INSPECTOR).

        * page/FrameView.cpp:
        (WebCore::FrameView::performPostLayoutTasks):

2012-03-05  Dean Jackson  <dino@apple.com>

        Enable compositing when a CSS filter is animating
        https://bugs.webkit.org/show_bug.cgi?id=79048

        Reviewed by Simon Fraser.

        Now that some systems (e.g. OS X) have both hardware accelerated
        CSS filters, and the ability to animate them via the hardware
        compositor, all CSS filters should be composited when animating.

        Tests: css3/filters/composited-during-animation-layertree.html
               css3/filters/composited-during-animation.html
               css3/filters/composited-during-transition-layertree.html

        * platform/graphics/ca/GraphicsLayerCA.cpp:
        (WebCore):
        (WebCore::supportsAcceleratedFilterAnimations):
            new method that returns true if the platform supports
            hardware animations of filters.
        (WebCore::GraphicsLayerCA::addAnimation):
        (WebCore::GraphicsLayerCA::createAnimationFromKeyframes):
            only create layer-animations if the platform supports it.
        * rendering/RenderLayerCompositor.cpp:
        (WebCore::RenderLayerCompositor::requiresCompositingForAnimation):
            create a compositing layer if animating a filter on a
            supported platform.

2012-03-06  Stephen White  <senorblanco@chromium.org>

        Unreviewed, rolling out r109825.
        http://trac.webkit.org/changeset/109825
        https://bugs.webkit.org/show_bug.cgi?id=79413

        Broke webkit_unit_tests on Chromium Win

        * Modules/indexeddb/IDBLevelDBBackingStore.cpp:
        (WebCore::IDBLevelDBBackingStore::open):
        * platform/leveldb/LevelDBDatabase.cpp:
        (WebCore):
        * platform/leveldb/LevelDBDatabase.h:
        (LevelDBDatabase):

2012-03-06  Beth Dakin  <bdakin@apple.com>

        https://bugs.webkit.org/show_bug.cgi?id=80351
        InlineTextBox is using the wrong origin when calling 
        addRelevantRepaintedObject
        -and corresponding-
        <rdar://problem/10970221>

        Reviewed by Sam Weinig.

        boxOrigin represents the actual location of the text. The adjustedPaintOffset 
        (which I was using previously) will only correspond to the first line in a 
        block of lines.
        * rendering/InlineTextBox.cpp:
        (WebCore::InlineTextBox::paint):

2012-03-06  Filip Spacek  <fspacek@rim.com>

        [BlackBerry] Disable border radius clips (r95239) for BlackBerry
        https://bugs.webkit.org/show_bug.cgi?id=80416

        Reviewed by Antonio Gomes

        The BlackBerry port suffers from the same performance
        degradation when border radius clip is enabled as Chromium.

        * rendering/RenderLayer.cpp:

2012-03-06  Stephen White  <senorblanco@chromium.org>

        Unreviewed, rolling out r109832.
        http://trac.webkit.org/changeset/109832
        https://bugs.webkit.org/show_bug.cgi?id=80356

        Broke WebSocket tests on Chrome Mac and Linux

        * Modules/websockets/ThreadableWebSocketChannel.h:
        (ThreadableWebSocketChannel):
        * Modules/websockets/ThreadableWebSocketChannelClientWrapper.cpp:
        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
        (WebCore::ThreadableWebSocketChannelClientWrapper::sendRequestResult):
        (WebCore::ThreadableWebSocketChannelClientWrapper::setSendRequestResult):
        * Modules/websockets/ThreadableWebSocketChannelClientWrapper.h:
        (ThreadableWebSocketChannelClientWrapper):
        * Modules/websockets/WebSocket.cpp:
        (WebCore::WebSocket::send):
        * Modules/websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send):
        (WebCore::WebSocketChannel::enqueueTextFrame):
        (WebCore::WebSocketChannel::processOutgoingFrameQueue):
        * Modules/websockets/WebSocketChannel.h:
        (WebSocketChannel):
        (QueuedFrame):
        * Modules/websockets/WorkerThreadableWebSocketChannel.cpp:
        (WebCore::WorkerThreadableWebSocketChannel::send):
        (WebCore::workerContextDidSend):
        (WebCore::WorkerThreadableWebSocketChannel::Peer::send):
        (WebCore::WorkerThreadableWebSocketChannel::Bridge::send):
        * Modules/websockets/WorkerThreadableWebSocketChannel.h:
        (WorkerThreadableWebSocketChannel):
        (Bridge):

2012-03-06  Stephen White  <senorblanco@chromium.org>

        Unreviewed, rolling out r109840.
        http://trac.webkit.org/changeset/109840
        https://bugs.webkit.org/show_bug.cgi?id=80103

        Broke WebSocket tests on Chrome Mac and Linux

        * Modules/websockets/WebSocket.cpp:
        (WebCore::WebSocket::send):
        (WebCore::WebSocket::close):
        * Modules/websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send):

2012-03-05  Joseph Pecoraro  <pecoraro@apple.com>

        <http://webkit.org/b/78575> Web Inspector: Disable dock button when not allowed to dock

        There are times when an undocked inspector frontend is not allowed to
        attach to the main window. We can disable the dock button in those cases.

        Reviewed by Pavel Feldman.

        No new tests. This functionality is port specific right now.

        * page/FrameView.cpp:
        (WebCore::FrameView::performPostLayoutTasks):
        When the main frame is resized we let the inspector client know,
        so that it can react to it as needed.

        * WebCore.exp.in:
        * inspector/InspectorClient.h:
        (WebCore::InspectorClient::didResizeMainFrame):
        * inspector/InspectorController.cpp:
        * inspector/InspectorController.h:
        (WebCore::InspectorController::inspectorClient):
        Call up to the port though to the InspectorClient.

        * inspector/InspectorFrontendClientLocal.cpp:
        (WebCore::InspectorFrontendClientLocal::frontendLoaded):
        (WebCore::InspectorFrontendClientLocal::setDockingUnavailable):
        * inspector/InspectorFrontendClientLocal.h:
        On ports where the inspector frontend client is local, provide a 
        setDockingUnavailable InspectorFrontendAPI to update the docking state.
        Automatically update availability when the frontend completes loading.

        * inspector/front-end/InspectorFrontendAPI.js:
        (InspectorFrontendAPI.setDockingUnavailable):
        * inspector/front-end/inspector.js:
        (WebInspector._createGlobalStatusBarItems):
        (WebInspector.setAttachedWindow):
        (WebInspector.setDockingUnavailable):
        (WebInspector.updateDockToggleButton):
        Update the dock button's enabled/disabled state when its created,
        when the attached state changes, when get a frontend API notification
        that we cannot attach.

        * inspector/front-end/InspectorFrontendHostStub.js:
        Remove unused canAttachWindow method.

2012-03-06  Hans Wennborg  <hans@chromium.org>

        Speech JavaScript API: add SpeechRecognitionError
        https://bugs.webkit.org/show_bug.cgi?id=80410

        Reviewed by Adam Barth.

        Add SpeechRecognitionError.

        Test: fast/speech/scripted/speechrecognitionerror-basics.html

        * Modules/speech/DOMWindowSpeech.idl: Added.
        * Modules/speech/SpeechRecognitionError.cpp: Added.
        (WebCore):
        (WebCore::SpeechRecognitionError::create):
        (WebCore::SpeechRecognitionError::SpeechRecognitionError):
        * Modules/speech/SpeechRecognitionError.h: Added.
        (WebCore):
        (SpeechRecognitionError):
        (WebCore::SpeechRecognitionError::code):
        (WebCore::SpeechRecognitionError::message):
        * Modules/speech/SpeechRecognitionError.idl: Added.
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:

2012-03-06  David Corvoysier  <david.corvoysier@orange.com>

        Unreleased gst_object_reference to audio sink in MediaPlayerPrivateGStreamer
        https://bugs.webkit.org/show_bug.cgi?id=79795

        Bug fix: Used a GRefPtr to hold the reference to the audio sink instead of a GstElement*.
        Code cleanup: Used the same pattern for webkit web source and removed explicit gst_unref in destructor.

        Reviewed by Philippe Normand.

        No new tests. No change in behavior.

        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        (WebCore::MediaPlayerPrivateGStreamer::~MediaPlayerPrivateGStreamer):
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.h:
        (MediaPlayerPrivateGStreamer):

2012-03-06  Patrick Gansterer  <paroga@webkit.org>

        [CMake] Build fix for !ENABLE(WORKERS) after r109556 and r109833.

        * CMakeLists.txt:

2012-03-06  Allan Sandfeld Jensen  <allan.jensen@nokia.com>

        [Qt][WK2] Crash in Frame.cpp when loading index.hu
        https://bugs.webkit.org/show_bug.cgi?id=80165

        Guard against possible null document, which can happen
        when unsetting a document in a frame.

        Reviewed by Kenneth Rohde Christiansen.

        * page/Frame.cpp:
        (WebCore::Frame::setDocument):

2012-03-06  Lucas Forschler  <lforschler@apple.com>

        WebCore build exceeds address space on 32-bit Windows builds.
        https://bugs.webkit.org/show_bug.cgi?id=80346

        Reviewed by Jessie Berlin.

        Patch by Lucas Forschler, landed by Jessie Berlin.

        Add AllInOne.cpp files for a few projects.
        This will only affect Production and Release builds.
        Let VS rebuild the project file.

        * WebCore.vcproj/WebCore.vcproj:
        * css/MediaAllInOne.cpp: Added.
        * loader/appcache/ApplicationCacheAllInOne.cpp: Added.
        * mathml/MathMLAllInOne.cpp: Added.
        * platform/text/TextAllInOne.cpp: Added.

2012-03-06  Pavel Feldman  <pfeldman@chromium.org>

        Web Inspector: add support for inspection of huge (1M elements) arrays.
        https://bugs.webkit.org/show_bug.cgi?id=80421

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/ConsoleView.js:
        (WebInspector.ConsoleView.prototype.completionsForExpression.evaluated):
        * inspector/front-end/ElementsPanel.js:
        * inspector/front-end/ObjectPropertiesSection.js:
        (WebInspector.ObjectPropertiesSection.prototype.update.callback):
        (WebInspector.ObjectPropertiesSection.prototype.update):
        (WebInspector.ObjectPropertiesSection.prototype.updateProperties):
        (WebInspector.ObjectPropertyTreeElement.prototype.onpopulate.callback):
        (WebInspector.ObjectPropertyTreeElement.prototype.onpopulate):
        (WebInspector.ArrayGroupingTreeElement):
        (WebInspector.ArrayGroupingTreeElement._populateArray):
        (WebInspector.ArrayGroupingTreeElement._populateRanges):
        (WebInspector.ArrayGroupingTreeElement._populateRanges.callback):
        (WebInspector.ArrayGroupingTreeElement._populateAsFragment):
        (WebInspector.ArrayGroupingTreeElement._populateAsFragment.processArrayFragment):
        (WebInspector.ArrayGroupingTreeElement._populateAsFragment.processProperties):
        (WebInspector.ArrayGroupingTreeElement._populateNonIndexProperties.buildObjectFragment):
        (WebInspector.ArrayGroupingTreeElement._populateNonIndexProperties.processObjectFragment):
        (WebInspector.ArrayGroupingTreeElement._populateNonIndexProperties.processProperties):
        (WebInspector.ArrayGroupingTreeElement._populateNonIndexProperties):
        (WebInspector.ArrayGroupingTreeElement.prototype.onpopulate):
        (WebInspector.ArrayGroupingTreeElement.prototype.onattach):
        * inspector/front-end/PropertiesSidebarPane.js:
        (WebInspector.PropertiesSidebarPane.prototype.update.nodeResolved):
        * inspector/front-end/RemoteObject.js:
        (WebInspector.RemoteObject.prototype.callFunction):
        (WebInspector.RemoteObject.prototype.callFunctionJSON):

2012-03-06  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: Open link in resources panel only works the second time
        https://bugs.webkit.org/show_bug.cgi?id=80407

        Reviewed by Pavel Feldman.

        * inspector/front-end/inspector.js:
        (WebInspector.openResource):

2012-03-02  Yury Semikhatsky  <yurys@chromium.org>

        Web Inspector: InspectorCounters mechanism should be thread-safe
        https://bugs.webkit.org/show_bug.cgi?id=80166

        Make InspectorCounters instance thread local so that it can be safely accessed
        in workers.

        Reviewed by Pavel Feldman.

        * bindings/js/JSEventListener.cpp:
        (WebCore::JSEventListener::JSEventListener):
        (WebCore::JSEventListener::~JSEventListener):
        * bindings/v8/V8AbstractEventListener.cpp:
        (WebCore::V8AbstractEventListener::V8AbstractEventListener):
        (WebCore::V8AbstractEventListener::~V8AbstractEventListener):
        * dom/Document.cpp:
        (WebCore::Document::Document):
        (WebCore::Document::~Document):
        * dom/Document.h:
        (WebCore::Node::Node):
        * dom/Node.cpp:
        (WebCore::Node::~Node):
        * inspector/InspectorCounters.cpp:
        (WebCore::InspectorCounters::InspectorCounters):
        (WebCore::InspectorCounters::counterValue):
        (WebCore):
        (WebCore::InspectorCounters::current):
        * inspector/InspectorCounters.h:
        (WebCore::InspectorCounters::incrementCounter):
        (WebCore::InspectorCounters::decrementCounter):
        (InspectorCounters):
        * inspector/InspectorTimelineAgent.cpp:
        (WebCore::InspectorTimelineAgent::setHeapSizeStatistic):
        * platform/ThreadGlobalData.cpp:
        (WebCore::ThreadGlobalData::ThreadGlobalData):
        (WebCore::ThreadGlobalData::destroy):
        * platform/ThreadGlobalData.h:
        (WebCore):
        (ThreadGlobalData):
        (WebCore::ThreadGlobalData::inspectorCounters):

2012-03-06  Leo Yang  <leo.yang@torchmobile.com.cn>

        [BlackBerry] Upstream typedef of NativeImageSourcePtr and NativeImagePtr
        https://bugs.webkit.org/show_bug.cgi?id=80388

        Reviewed by Antonio Gomes.

        These are the BlackBerry typdefs of NativeImageSourcePtr and NativeImagePtr.

        * platform/graphics/ImageSource.h:
        (WebCore):

2012-03-06  Hans Muller  <hmuller@adobe.com>

        SVG transform-origin presentation attribute
        https://bugs.webkit.org/show_bug.cgi?id=79678

        Reviewed by Nikolas Zimmermann.

        Added the SVG transform-origin presentation attribute.  Currently WebCore::mapAttributeToCSSProperty()
        just maps it to -webkit-transform-origin.  When the transform-origin CSS property is supported, this
        part of the change can be removed.

        Test: svg/transforms/transform-origin-presentation-attribute.xhtml

        * svg/SVGStyledElement.cpp:
        (WebCore::mapAttributeToCSSProperty):
        (WebCore::SVGStyledElement::cssPropertyIdForSVGAttributeName):
        * svg/svgattrs.in:

2012-01-26  Philippe Normand  <pnormand@igalia.com>

        [GStreamer] disable GStreamerGWorld when building against 0.11
        https://bugs.webkit.org/show_bug.cgi?id=77088

        Reviewed by Martin Robinson.

        Don't build GStreamerGWorld and PlatformVideoWindow under
        GStreamer 0.11. It's supposed to be removed soon anyway.

        * platform/graphics/gstreamer/GStreamerGWorld.cpp:
        * platform/graphics/gstreamer/GStreamerGWorld.h:
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp:
        (WebCore::MediaPlayerPrivateGStreamer::totalBytes):
        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.h:
        (MediaPlayerPrivateGStreamer):
        * platform/graphics/gstreamer/PlatformVideoWindow.h:
        * platform/graphics/gstreamer/PlatformVideoWindowEfl.cpp:
        * platform/graphics/gstreamer/PlatformVideoWindowGtk.cpp:
        * platform/graphics/gstreamer/PlatformVideoWindowMac.mm:
        * platform/graphics/gstreamer/PlatformVideoWindowQt.cpp:

2012-03-06  Alexander Færøy  <alexander.faeroy@nokia.com>

        Rename m_tileCreationTimer in the tiled backing store
        https://bugs.webkit.org/show_bug.cgi?id=80414

        Patch by Kenneth Rohde Christiansen and Alexander Færøy.

        Reviewed by Tor Arne Vestbø.

        The m_tileCreationTimer member is currently being used to represent a
        timer that is fired when the backing store has been updated which is
        confusing with its current name.  This patch fixes this by renaming
        the m_tileCreationTimer to m_backingStoreUpdateTimer.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::TiledBackingStore):
        (WebCore::TiledBackingStore::setTileSize):
        (WebCore::TiledBackingStore::coverWithTilesIfNeeded):
        (WebCore::TiledBackingStore::createTiles):
        (WebCore::TiledBackingStore::startBackingStoreUpdateTimer):
        (WebCore::TiledBackingStore::backingStoreUpdateTimerFired):
        (WebCore::TiledBackingStore::setContentsFrozen):
        * platform/graphics/TiledBackingStore.h:
        (TiledBackingStore):

2012-03-06  Alexander Færøy  <alexander.faeroy@nokia.com>

        Remove TileTimer typedef from the tiled backing store
        https://bugs.webkit.org/show_bug.cgi?id=80408

        Patch by Kenneth Rohde Christiansen and Alexander Færøy.

        Reviewed by Tor Arne Vestbø.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::tileBufferUpdateTimerFired):
        (WebCore::TiledBackingStore::tileCreationTimerFired):
        * platform/graphics/TiledBackingStore.h:
        (TiledBackingStore):

2012-03-06  Robin Cao  <robin.cao@torchmobile.com.cn>

        [BlackBerry] Upstream LayerRenderer.{h, cpp}
        https://bugs.webkit.org/show_bug.cgi?id=79874

        Reviewed by Antonio Gomes.

        Initial upstream, no new tests.

        * platform/graphics/blackberry/LayerRenderer.cpp: Added.
        (WebCore):
        (WebCore::checkGLError):
        (WebCore::loadShader):
        (WebCore::loadShaderProgram):
        (WebCore::orthoMatrix):
        (WebCore::rawPtrVectorFromRefPtrVector):
        (WebCore::LayerRenderer::create):
        (WebCore::LayerRenderer::LayerRenderer):
        (WebCore::LayerRenderer::~LayerRenderer):
        (WebCore::LayerRenderer::releaseLayerResources):
        (WebCore::compareLayerZ):
        (WebCore::LayerRenderer::drawLayers):
        (WebCore::LayerRenderer::useSurface):
        (WebCore::LayerRenderer::drawLayersOnSurfaces):
        (WebCore::LayerRenderer::setRootLayer):
        (WebCore::LayerRenderer::addLayer):
        (WebCore::LayerRenderer::removeLayer):
        (WebCore::LayerRenderer::addLayerToReleaseTextureResourcesList):
        (WebCore::LayerRenderer::toOpenGLWindowCoordinates):
        (WebCore::LayerRenderer::toWebKitWindowCoordinates):
        (WebCore::LayerRenderer::toWebKitDocumentCoordinates):
        (WebCore::LayerRenderer::drawDebugBorder):
        (WebCore::LayerRenderer::drawHolePunchRect):
        (WebCore::LayerRenderer::updateLayersRecursive):
        (WebCore::hasRotationalComponent):
        (WebCore::LayerRenderer::layerAlreadyOnSurface):
        (WebCore::collect3DPreservingLayers):
        (WebCore::LayerRenderer::compositeLayersRecursive):
        (WebCore::LayerRenderer::updateScissorIfNeeded):
        (WebCore::LayerRenderer::makeContextCurrent):
        (WebCore::LayerRenderer::bindCommonAttribLocation):
        (WebCore::LayerRenderer::initializeSharedGLObjects):
        (WebCore::LayerRenderingResults::holePunchRect):
        (WebCore::LayerRenderingResults::addHolePunchRect):
        (WebCore::LayerRenderingResults::addDirtyRect):
        (WebCore::LayerRenderingResults::isEmpty):
        * platform/graphics/blackberry/LayerRenderer.h: Added.
        (WebCore):
        (LayerRenderingResults):
        (WebCore::LayerRenderingResults::LayerRenderingResults):
        (WebCore::LayerRenderingResults::holePunchRectSize):
        (WebCore::LayerRenderingResults::dirtyRect):
        (LayerRenderer):
        (WebCore::LayerRenderer::rootLayer):
        (WebCore::LayerRenderer::hardwareCompositing):
        (WebCore::LayerRenderer::setClearSurfaceOnDrawLayers):
        (WebCore::LayerRenderer::clearSurfaceOnDrawLayers):
        (WebCore::LayerRenderer::context):
        (WebCore::LayerRenderer::lastRenderingResults):
        (WebCore::LayerRenderer::setNeedsCommit):

2012-03-06  Roland Steiner  <rolandsteiner@chromium.org>

        r109563 caused perf regression
        https://bugs.webkit.org/show_bug.cgi?id=80404

        Add test for Element or ShadowRoot.

        Reviewed by Antti Koivisto.

        No new tests. (fix)

        * css/CSSStyleSelector.cpp:
        (WebCore::CSSStyleSelector::pushParentElement):

2012-03-06  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: prepare for extracting ScriptMapping implementation from DebuggerPresentationModel.
        https://bugs.webkit.org/show_bug.cgi?id=80396

        Limit RawSourceCode usages to a subset of methods. This subset will be moved to ScriptMapping implementation in a separate change.

        Reviewed by Vsevolod Vlasov.

        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype.createPlacard):
        (WebInspector.DebuggerPresentationModel.prototype.createLiveLocation):
        (WebInspector.DebuggerPresentationModel.prototype._parsedScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype._failedToParseScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource.didEditScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype._forceUpdateSourceMapping):
        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessageToScript):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerPaused):
        (WebInspector.DebuggerPresentationModel.prototype.set selectedCallFrame):
        (WebInspector.PresentationCallFrame):
        (WebInspector.PresentationCallFrame.prototype.uiLocation):
        (WebInspector.DebuggerPresentationModel.CallFramePlacard):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype.canSetContent):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype.setContent):
        (WebInspector.DebuggerPresentationModelResourceBinding.prototype._uiSourceCodeForResource):
        (WebInspector.DebuggerPresentationModel.Linkifier.prototype.linkifyRawLocation):

2012-03-06  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: [Regression] Execution line is not revealed when debugger is stopped if scripts panel was not yet shown.
        https://bugs.webkit.org/show_bug.cgi?id=80306

        Reviewed by Pavel Feldman.

        Test: inspector/debugger/reveal-execution-line.html

        * inspector/front-end/ConsoleView.js:
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel.prototype._debuggerPaused):
        * inspector/front-end/JavaScriptSourceFrame.js:
        (WebInspector.JavaScriptSourceFrame.prototype.afterTextChanged):
        (WebInspector.JavaScriptSourceFrame.prototype.setExecutionLine):
        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._executionLineChanged):
        (WebInspector.ScriptsPanel.prototype._revealExecutionLine):
        (WebInspector.ScriptsPanel.prototype._callFrameSelected):
        * inspector/front-end/SourceFrame.js:
        (WebInspector.SourceFrame.prototype.willHide):
        (WebInspector.SourceFrame.prototype.highlightLine):
        (WebInspector.SourceFrame.prototype.revealLine):
        (WebInspector.SourceFrame.prototype._clearLineToReveal):
        (WebInspector.SourceFrame.prototype.setContent):

2012-03-06  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: remove reference to RawSourceCode from UISourceCode.
        https://bugs.webkit.org/show_bug.cgi?id=80395

        Reviewed by Vsevolod Vlasov.

        * inspector/compile-front-end.sh:
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        (WebInspector.DebuggerPresentationModel.prototype._handleUISourceCodeListChanged):
        (WebInspector.DebuggerPresentationModel.prototype._uiSourceCodeListChanged):
        (WebInspector.DebuggerPresentationModel.prototype._restoreBreakpoints):
        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource.didEditScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource):
        (WebInspector.DebuggerPresentationModel.prototype.continueToLine):
        (WebInspector.DebuggerPresentationModel.prototype._debuggerReset):
        * inspector/front-end/RawSourceCode.js:
        (WebInspector.RawSourceCode.prototype._createUISourceCode):
        * inspector/front-end/UISourceCode.js:
        (WebInspector.UISourceCode):

2012-03-06  Andrey Kosyakov  <caseq@chromium.org>

        Web Inspector: move timeline panel overview mode toggle buttons to overview sidebar tree
        https://bugs.webkit.org/show_bug.cgi?id=80304

        Reviewed by Pavel Feldman.

        * inspector/front-end/Images/statusbarButtonGlyphs.png:
        * inspector/front-end/Settings.js:
        (WebInspector.ExperimentsSettings):
        * inspector/front-end/TimelineOverviewPane.js:
        (WebInspector.TimelineOverviewPane):
        (WebInspector.TimelineOverviewPane.prototype._showTimelines):
        (WebInspector.TimelineOverviewPane.prototype._showMemoryGraph):
        (WebInspector.TimelineOverviewPane.prototype._setVerticalOverview):
        (WebInspector.TimelineOverviewPane.prototype._onOverviewModeChanged):
        (WebInspector.TimelineOverviewPane.prototype.update):
        (WebInspector.TimelineOverviewPane.prototype.reset):
        (WebInspector.TimelineOverviewPane.prototype._onWindowChanged):
        (WebInspector.TimelineVerticalOverview):
        (WebInspector.TimelineOverviewModeSelector):
        (WebInspector.TimelineOverviewModeSelector.prototype.addButton):
        (WebInspector.TimelineOverviewModeSelector.prototype.get value):
        (WebInspector.TimelineOverviewModeSelector.prototype._createButton):
        (WebInspector.TimelineOverviewModeSelector.prototype._select):
        (WebInspector.TimelineOverviewModeSelector.prototype._onClick):
        * inspector/front-end/TimelinePanel.js:
        (WebInspector.TimelinePanel):
        (WebInspector.TimelinePanel.prototype.get statusBarItems):
        (WebInspector.TimelinePanel.prototype._createStatusbarButtons):
        (WebInspector.TimelinePanel.prototype._updateEventDividers):
        (WebInspector.TimelinePanel.prototype._glueParentButtonClicked):
        (WebInspector.TimelinePanel.prototype.revealRecordAt):
        * inspector/front-end/inspector.css:
        * inspector/front-end/timelinePanel.css:
        (.timeline-vertical-overview #timeline-overview-grid):
        (.timeline-vertical-overview .timeline-overview-window):
        (.timeline-vertical-overview .timeline-overview-dividers-background):
        (.timeline-vertical-overview #timeline-overview-memory):
        (.timeline-vertical-overview-status-bar-item.toggled-on .glyph):
        (.timeline-vertical-overview-bars):
        (.timeline-vertical-overview-bars .padding):
        (.timeline-vertical-overview-bars .timeline-bar-vertical):
        (.timeline.timeline-vertical-overview .resources-divider):
        (.sidebar-tree-item .timeline-vertical-overview-status-bar-item):
        (.timeline-overview-mode-selector):
        (.timeline-overview-mode-selector .glyph):
        (.timeline-overview-mode-selector button):
        (.timeline-overview-mode-selector button.toggled):
        (.timeline-overview-mode-selector button:active):
        (.sidebar-tree-item:not(.selected) .timeline-overview-mode-selector button):
        (.sidebar-tree-item:not(.selected) .timeline-overview-mode-selector button.toggled):
        (.timeline-overview-mode-selector button:first-of-type):
        (.timeline-overview-mode-selector button:last-of-type):
        (.timeline-mode-vertical-bars .glyph):
        (.timeline-mode-horizontal-bars .glyph):

2012-03-05  Alexander Færøy  <alexander.faeroy@nokia.com>

        Make it explicit when we are allowing updates to the actual backing store or the tile buffers
        https://bugs.webkit.org/show_bug.cgi?id=80288

        Patch by Kenneth Rohde Christiansen and Alexander Færøy.

        Reviewed by Noam Rosenthal.

        * platform/graphics/TiledBackingStore.cpp:
        (WebCore::TiledBackingStore::createTiles):
        (WebCore::TiledBackingStore::isBackingStoreUpdatesSuspended):
        (WebCore):
        (WebCore::TiledBackingStore::isTileBufferUpdatesSuspended):
        (WebCore::TiledBackingStore::startTileBufferUpdateTimer):
        (WebCore::TiledBackingStore::startTileCreationTimer):
        * platform/graphics/TiledBackingStore.h:
        (TiledBackingStore):

2012-03-06  Mark Rowe  <mrowe@apple.com>

        Build fix after r109877.

        * WebCore.xcodeproj/project.pbxproj: Ensure that headers are copied in to WebCore.framework so that
        WebKit can still find them.

2012-03-06  Andreas Kling  <awesomekling@apple.com>

        Remove incorrect WTF::Vector traits for CSSProperty.
        <http://webkit.org/b/53285>
        <rdar://problem/10161286>

        Reviewed by Antti Koivisto.

        We shouldn't allow copying Vector<CSSProperty> contents around with memcpy()
        as CSSProperty has a RefPtr member and this would muck up the refcount.
        This was added to facilitate fast comparison of property vectors, and we no
        longer use that, so there shouldn't be any performance concerns here.

        * css/CSSProperty.h:

2012-03-06  Adam Barth  <abarth@webkit.org>

        Attempt to fix the Qt minimal build.

        * Target.pri:

2012-03-06  Roland Steiner  <rolandsteiner@chromium.org>

        :scope should behave as :root outside scoped style sheet
        https://bugs.webkit.org/show_bug.cgi?id=80389

        Fall through to :root implementation if no scope is used.

        Reviewed by Antti Koivisto.

        Test: fast/css/style-scoped/scope-pseudo.html

        * css/SelectorChecker.cpp:
        (WebCore::SelectorChecker::checkOneSelector):

2012-03-05  Vsevolod Vlasov  <vsevik@chromium.org>

        Web Inspector: [Regression] Message bubbles are not removed from scripts panel source frames after console was cleared.
        https://bugs.webkit.org/show_bug.cgi?id=80275

        Reviewed by Pavel Feldman.

        * inspector/front-end/ScriptsPanel.js:
        (WebInspector.ScriptsPanel.prototype._consoleMessagesCleared):
        * inspector/front-end/utilities.js:

2012-03-06  Adam Barth  <abarth@webkit.org>

        Move SQLDatabase code into Modules/webdatabase
        https://bugs.webkit.org/show_bug.cgi?id=80393

        Reviewed by Kentaro Hara.

        There are still a couple (minor) SQLDatabase references from WebCore
        proper, but we've gotten this code to the point where it makes sense to
        move it into the Modules directory.  (This patch just moves code---no
        behavior change.)

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.am:
        * GNUmakefile.list.am:
        * Modules/webdatabase: Added.
        * Modules/webdatabase/AbstractDatabase.cpp: Copied from Source/WebCore/storage/AbstractDatabase.cpp.
        * Modules/webdatabase/AbstractDatabase.h: Copied from Source/WebCore/storage/AbstractDatabase.h.
        * Modules/webdatabase/ChangeVersionWrapper.cpp: Copied from Source/WebCore/storage/ChangeVersionWrapper.cpp.
        * Modules/webdatabase/ChangeVersionWrapper.h: Copied from Source/WebCore/storage/ChangeVersionWrapper.h.
        * Modules/webdatabase/DOMWindowSQLDatabase.cpp: Copied from Source/WebCore/storage/DOMWindowSQLDatabase.cpp.
        * Modules/webdatabase/DOMWindowSQLDatabase.h: Copied from Source/WebCore/storage/DOMWindowSQLDatabase.h.
        * Modules/webdatabase/DOMWindowSQLDatabase.idl: Copied from Source/WebCore/storage/DOMWindowSQLDatabase.idl.
        * Modules/webdatabase/Database.cpp: Copied from Source/WebCore/storage/Database.cpp.
        * Modules/webdatabase/Database.h: Copied from Source/WebCore/storage/Database.h.
        * Modules/webdatabase/Database.idl: Copied from Source/WebCore/storage/Database.idl.
        * Modules/webdatabase/DatabaseAuthorizer.cpp: Copied from Source/WebCore/storage/DatabaseAuthorizer.cpp.
        * Modules/webdatabase/DatabaseAuthorizer.h: Copied from Source/WebCore/storage/DatabaseAuthorizer.h.
        * Modules/webdatabase/DatabaseCallback.h: Copied from Source/WebCore/storage/DatabaseCallback.h.
        * Modules/webdatabase/DatabaseCallback.idl: Copied from Source/WebCore/storage/DatabaseCallback.idl.
        * Modules/webdatabase/DatabaseContext.cpp: Copied from Source/WebCore/storage/DatabaseContext.cpp.
        * Modules/webdatabase/DatabaseContext.h: Copied from Source/WebCore/storage/DatabaseContext.h.
        * Modules/webdatabase/DatabaseDetails.h: Copied from Source/WebCore/storage/DatabaseDetails.h.
        * Modules/webdatabase/DatabaseSync.cpp: Copied from Source/WebCore/storage/DatabaseSync.cpp.
        * Modules/webdatabase/DatabaseSync.h: Copied from Source/WebCore/storage/DatabaseSync.h.
        * Modules/webdatabase/DatabaseSync.idl: Copied from Source/WebCore/storage/DatabaseSync.idl.
        * Modules/webdatabase/DatabaseTask.cpp: Copied from Source/WebCore/storage/DatabaseTask.cpp.
        * Modules/webdatabase/DatabaseTask.h: Copied from Source/WebCore/storage/DatabaseTask.h.
        * Modules/webdatabase/DatabaseThread.cpp: Copied from Source/WebCore/storage/DatabaseThread.cpp.
        * Modules/webdatabase/DatabaseThread.h: Copied from Source/WebCore/storage/DatabaseThread.h.
        * Modules/webdatabase/DatabaseTracker.cpp: Copied from Source/WebCore/storage/DatabaseTracker.cpp.
        * Modules/webdatabase/DatabaseTracker.h: Copied from Source/WebCore/storage/DatabaseTracker.h.
        * Modules/webdatabase/DatabaseTrackerClient.h: Copied from Source/WebCore/storage/DatabaseTrackerClient.h.
        * Modules/webdatabase/OriginQuotaManager.cpp: Copied from Source/WebCore/storage/OriginQuotaManager.cpp.
        * Modules/webdatabase/OriginQuotaManager.h: Copied from Source/WebCore/storage/OriginQuotaManager.h.
        * Modules/webdatabase/OriginUsageRecord.cpp: Copied from Source/WebCore/storage/OriginUsageRecord.cpp.
        * Modules/webdatabase/OriginUsageRecord.h: Copied from Source/WebCore/storage/OriginUsageRecord.h.
        * Modules/webdatabase/SQLCallbackWrapper.h: Copied from Source/WebCore/storage/SQLCallbackWrapper.h.
        * Modules/webdatabase/SQLError.h: Copied from Source/WebCore/storage/SQLError.h.
        * Modules/webdatabase/SQLError.idl: Copied from Source/WebCore/storage/SQLError.idl.
        * Modules/webdatabase/SQLException.cpp: Copied from Source/WebCore/storage/SQLException.cpp.
        * Modules/webdatabase/SQLException.h: Copied from Source/WebCore/storage/SQLException.h.
        * Modules/webdatabase/SQLException.idl: Copied from Source/WebCore/storage/SQLException.idl.
        * Modules/webdatabase/SQLResultSet.cpp: Copied from Source/WebCore/storage/SQLResultSet.cpp.
        * Modules/webdatabase/SQLResultSet.h: Copied from Source/WebCore/storage/SQLResultSet.h.
        * Modules/webdatabase/SQLResultSet.idl: Copied from Source/WebCore/storage/SQLResultSet.idl.
        * Modules/webdatabase/SQLResultSetRowList.cpp: Copied from Source/WebCore/storage/SQLResultSetRowList.cpp.
        * Modules/webdatabase/SQLResultSetRowList.h: Copied from Source/WebCore/storage/SQLResultSetRowList.h.
        * Modules/webdatabase/SQLResultSetRowList.idl: Copied from Source/WebCore/storage/SQLResultSetRowList.idl.
        * Modules/webdatabase/SQLStatement.cpp: Copied from Source/WebCore/storage/SQLStatement.cpp.
        * Modules/webdatabase/SQLStatement.h: Copied from Source/WebCore/storage/SQLStatement.h.
        * Modules/webdatabase/SQLStatementCallback.h: Copied from Source/WebCore/storage/SQLStatementCallback.h.
        * Modules/webdatabase/SQLStatementCallback.idl: Copied from Source/WebCore/storage/SQLStatementCallback.idl.
        * Modules/webdatabase/SQLStatementErrorCallback.h: Copied from Source/WebCore/storage/SQLStatementErrorCallback.h.
        * Modules/webdatabase/SQLStatementErrorCallback.idl: Copied from Source/WebCore/storage/SQLStatementErrorCallback.idl.
        * Modules/webdatabase/SQLStatementSync.cpp: Copied from Source/WebCore/storage/SQLStatementSync.cpp.
        * Modules/webdatabase/SQLStatementSync.h: Copied from Source/WebCore/storage/SQLStatementSync.h.
        * Modules/webdatabase/SQLTransaction.cpp: Copied from Source/WebCore/storage/SQLTransaction.cpp.
        * Modules/webdatabase/SQLTransaction.h: Copied from Source/WebCore/storage/SQLTransaction.h.
        * Modules/webdatabase/SQLTransaction.idl: Copied from Source/WebCore/storage/SQLTransaction.idl.
        * Modules/webdatabase/SQLTransactionCallback.h: Copied from Source/WebCore/storage/SQLTransactionCallback.h.
        * Modules/webdatabase/SQLTransactionCallback.idl: Copied from Source/WebCore/storage/SQLTransactionCallback.idl.
        * Modules/webdatabase/SQLTransactionClient.cpp: Copied from Source/WebCore/storage/SQLTransactionClient.cpp.
        * Modules/webdatabase/SQLTransactionClient.h: Copied from Source/WebCore/storage/SQLTransactionClient.h.
        * Modules/webdatabase/SQLTransactionCoordinator.cpp: Copied from Source/WebCore/storage/SQLTransactionCoordinator.cpp.
        * Modules/webdatabase/SQLTransactionCoordinator.h: Copied from Source/WebCore/storage/SQLTransactionCoordinator.h.
        * Modules/webdatabase/SQLTransactionErrorCallback.h: Copied from Source/WebCore/storage/SQLTransactionErrorCallback.h.
        * Modules/webdatabase/SQLTransactionErrorCallback.idl: Copied from Source/WebCore/storage/SQLTransactionErrorCallback.idl.
        * Modules/webdatabase/SQLTransactionSync.cpp: Copied from Source/WebCore/storage/SQLTransactionSync.cpp.
        * Modules/webdatabase/SQLTransactionSync.h: Copied from Source/WebCore/storage/SQLTransactionSync.h.
        * Modules/webdatabase/SQLTransactionSync.idl: Copied from Source/WebCore/storage/SQLTransactionSync.idl.
        * Modules/webdatabase/SQLTransactionSyncCallback.h: Copied from Source/WebCore/storage/SQLTransactionSyncCallback.h.
        * Modules/webdatabase/SQLTransactionSyncCallback.idl: Copied from Source/WebCore/storage/SQLTransactionSyncCallback.idl.
        * Modules/webdatabase/WorkerContextSQLDatabase.cpp: Copied from Source/WebCore/storage/WorkerContextSQLDatabase.cpp.
        * Modules/webdatabase/WorkerContextSQLDatabase.h: Copied from Source/WebCore/storage/WorkerContextSQLDatabase.h.
        * Modules/webdatabase/WorkerContextSQLDatabase.idl: Copied from Source/WebCore/storage/WorkerContextSQLDatabase.idl.
        * Modules/webdatabase/chromium: Added.
        * Modules/webdatabase/chromium/DatabaseObserver.h: Copied from Source/WebCore/storage/chromium/DatabaseObserver.h.
        * Modules/webdatabase/chromium/DatabaseTrackerChromium.cpp: Copied from Source/WebCore/storage/chromium/DatabaseTrackerChromium.cpp.
        * Modules/webdatabase/chromium/QuotaTracker.cpp: Copied from Source/WebCore/storage/chromium/QuotaTracker.cpp.
        * Modules/webdatabase/chromium/QuotaTracker.h: Copied from Source/WebCore/storage/chromium/QuotaTracker.h.
        * Modules/webdatabase/chromium/SQLTransactionClientChromium.cpp: Copied from Source/WebCore/storage/chromium/SQLTransactionClientChromium.cpp.
        * Target.pri:
        * WebCore.gyp/WebCore.gyp:
        * WebCore.gypi:
        * WebCore.pri:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.vcproj/WebCoreCommon.vsprops:
        * WebCore.vcproj/copyForwardingHeaders.cmd:
        * WebCore.xcodeproj/project.pbxproj:
        * storage/AbstractDatabase.cpp: Removed.
        * storage/AbstractDatabase.h: Removed.
        * storage/ChangeVersionWrapper.cpp: Removed.
        * storage/ChangeVersionWrapper.h: Removed.
        * storage/DOMWindowSQLDatabase.cpp: Removed.
        * storage/DOMWindowSQLDatabase.h: Removed.
        * storage/DOMWindowSQLDatabase.idl: Removed.
        * storage/Database.cpp: Removed.
        * storage/Database.h: Removed.
        * storage/Database.idl: Removed.
        * storage/DatabaseAuthorizer.cpp: Removed.
        * storage/DatabaseAuthorizer.h: Removed.
        * storage/DatabaseCallback.h: Removed.
        * storage/DatabaseCallback.idl: Removed.
        * storage/DatabaseContext.cpp: Removed.
        * storage/DatabaseContext.h: Removed.
        * storage/DatabaseDetails.h: Removed.
        * storage/DatabaseSync.cpp: Removed.
        * storage/DatabaseSync.h: Removed.
        * storage/DatabaseSync.idl: Removed.
        * storage/DatabaseTask.cpp: Removed.
        * storage/DatabaseTask.h: Removed.
        * storage/DatabaseThread.cpp: Removed.
        * storage/DatabaseThread.h: Removed.
        * storage/DatabaseTracker.cpp: Removed.
        * storage/DatabaseTracker.h: Removed.
        * storage/DatabaseTrackerClient.h: Removed.
        * storage/OriginQuotaManager.cpp: Removed.
        * storage/OriginQuotaManager.h: Removed.
        * storage/OriginUsageRecord.cpp: Removed.
        * storage/OriginUsageRecord.h: Removed.
        * storage/SQLCallbackWrapper.h: Removed.
        * storage/SQLError.h: Removed.
        * storage/SQLError.idl: Removed.
        * storage/SQLException.cpp: Removed.
        * storage/SQLException.h: Removed.
        * storage/SQLException.idl: Removed.
        * storage/SQLResultSet.cpp: Removed.
        * storage/SQLResultSet.h: Removed.
        * storage/SQLResultSet.idl: Removed.
        * storage/SQLResultSetRowList.cpp: Removed.
        * storage/SQLResultSetRowList.h: Removed.
        * storage/SQLResultSetRowList.idl: Removed.
        * storage/SQLStatement.cpp: Removed.
        * storage/SQLStatement.h: Removed.
        * storage/SQLStatementCallback.h: Removed.
        * storage/SQLStatementCallback.idl: Removed.
        * storage/SQLStatementErrorCallback.h: Removed.
        * storage/SQLStatementErrorCallback.idl: Removed.
        * storage/SQLStatementSync.cpp: Removed.
        * storage/SQLStatementSync.h: Removed.
        * storage/SQLTransaction.cpp: Removed.
        * storage/SQLTransaction.h: Removed.
        * storage/SQLTransaction.idl: Removed.
        * storage/SQLTransactionCallback.h: Removed.
        * storage/SQLTransactionCallback.idl: Removed.
        * storage/SQLTransactionClient.cpp: Removed.
        * storage/SQLTransactionClient.h: Removed.
        * storage/SQLTransactionCoordinator.cpp: Removed.
        * storage/SQLTransactionCoordinator.h: Removed.
        * storage/SQLTransactionErrorCallback.h: Removed.
        * storage/SQLTransactionErrorCallback.idl: Removed.
        * storage/SQLTransactionSync.cpp: Removed.
        * storage/SQLTransactionSync.h: Removed.
        * storage/SQLTransactionSync.idl: Removed.
        * storage/SQLTransactionSyncCallback.h: Removed.
        * storage/SQLTransactionSyncCallback.idl: Removed.
        * storage/WorkerContextSQLDatabase.cpp: Removed.
        * storage/WorkerContextSQLDatabase.h: Removed.
        * storage/WorkerContextSQLDatabase.idl: Removed.
        * storage/chromium/DatabaseObserver.h: Removed.
        * storage/chromium/DatabaseTrackerChromium.cpp: Removed.
        * storage/chromium/QuotaTracker.cpp: Removed.
        * storage/chromium/QuotaTracker.h: Removed.
        * storage/chromium/SQLTransactionClientChromium.cpp: Removed.

2012-03-05  Kent Tamura  <tkent@chromium.org>

        Do not reformat strings in <input type=number> on platforms using LocalizedNumberICU.
        https://bugs.webkit.org/show_bug.cgi?id=78326

        Reviewed by Hajime Morita.

        We had bugs such as stripping leading zeros, dropping lower digits
        of large numbers because we parse a user-input string to a double
        value, and generate a string from the double value.

        In order to avoid such reformatting, we converts number strings by
        replacing standard digits to corresponding localized digits.

        * WebCore.gypi: Added LocalizedNumberICU.h
        * platform/text/LocalizedNumberICU.cpp:
        (WebCore::ICULocale::ICULocale): Added.
        (WebCore::ICULocale::create): A testing factory function.
        (WebCore::ICULocale::createForCurrentLocale): A practical factory function.
        (WebCore::ICULocale::setDecimalSymbol): Initialize a symbol table.
        (WebCore::ICULocale::initializeDecimalFormat): Initialize ICU DecimalFormat.
        (WebCore::ICULocale::convertToLocalizedNumber):
         Replace characters to corresponding localized characters.
        (WebCore::matches): A helper function for convertFromLocalizedNumber.
        (WebCore::endsWith): ditto.
        (WebCore::ICULocale::determineStartPosition): ditto.
        (WebCore::ICULocale::matchedDecimalSymbolIndex): ditto.
        (WebCore::ICULocale::convertFromLocalizedNumber):
         Replace characters to corresponding standard characters.
        (WebCore::currentLocale): Added.
        (WebCore::convertToLocalizedNumber): Uses ICULocale::convertToLocalizedNumber.
        (WebCore::convertFromLocalizedNumber): Uses ICULocale::convertFromLocalizedNumber.
        * platform/text/LocalizedNumberICU.h: Added.
        (ICULocale): Added. This is exposed to WebKit/chromium/tests/LocalizedNumberICUTest.cpp.

2012-03-06  Adam Barth  <abarth@webkit.org>

        Attempt to fix the GTK minimal build
        https://bugs.webkit.org/show_bug.cgi?id=80390

        Reviewed by Csaba Osztrogonác.

        Add some missing ifdefs.

        * Modules/geolocation/NavigatorGeolocation.cpp:
        * Modules/geolocation/NavigatorGeolocation.h:

2012-03-05  Pavel Podivilov  <podivilov@chromium.org>

        Web Inspector: stop using RawSourceCode in BreakpointManager.
        https://bugs.webkit.org/show_bug.cgi?id=80286

        Reviewed by Vsevolod Vlasov.

        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * inspector/front-end/BreakpointManager.js:
        (WebInspector.BreakpointManager.prototype.uiSourceCodeAdded):
        (WebInspector.BreakpointManager.prototype.setBreakpoint):
        (WebInspector.BreakpointManager.prototype._materializeBreakpoint):
        (WebInspector.BreakpointManager.prototype._breakpointDebuggerLocationChanged):
        * inspector/front-end/DebuggerPresentationModel.js:
        (WebInspector.DebuggerPresentationModel):
        * inspector/front-end/ScriptMapping.js: Added.
        (WebInspector.ScriptMapping):
        (WebInspector.ScriptMapping.prototype.rawLocationToUILocation):
        (WebInspector.ScriptMapping.prototype.uiLocationToRawLocation):
        (WebInspector.ScriptMapping.prototype.createLiveLocation):
        (WebInspector.ScriptMapping.prototype.uiSourceCodeList):
        * inspector/front-end/WebKit.qrc:
        * inspector/front-end/inspector.html:

2012-03-05  Philippe Normand  <pnormand@igalia.com>

        WebAudio JSC-related fixes
        https://bugs.webkit.org/show_bug.cgi?id=80299

        Reviewed by Adam Barth.

        * bindings/js/JSAudioContextCustom.cpp:
        (WebCore::JSAudioContextConstructor::constructJSAudioContext):
        Wrap the audio context in a DOM wrapper.
        * webaudio/AudioContext.idl: No need to protect EventTarget by V8
        guards, I think.
        * webaudio/JavaScriptAudioNode.idl: Ditto.

2012-03-05  Kishore Bolisetty  <kbolisetty@innominds.com>

        Element not fully repainted after application and removal of transform
        https://bugs.webkit.org/show_bug.cgi?id=61338

        Reviewed by Simon Fraser.
        RenderLayer is created and removed when a transform is applied and removed to element.
        To render the element properly after removal of transform on it, preferred widths and dimensions of
        the element and its containing block needs to be recalculated.

        Test: fast/repaint/transform-rotate-and-remove.html

        * rendering/RenderBoxModelObject.cpp:
        (WebCore):
        (WebCore::RenderBoxModelObject::styleWillChange):
        (WebCore::RenderBoxModelObject::styleDidChange):
        * rendering/RenderBoxModelObject.h:
        (RenderBoxModelObject):

2012-03-05  Gavin Barraclough  <barraclough@apple.com>

        putByIndex should throw in strict mode
        https://bugs.webkit.org/show_bug.cgi?id=80335

        Reviewed by Filip Pizlo.

        Make the MethodTable PutByIndex trap take a boolean 'shouldThrow' parameter.

        * bindings/js/SerializedScriptValue.cpp:
        (WebCore::CloneDeserializer::putProperty):
        * bindings/objc/WebScriptObject.mm:
        (-[WebScriptObject setWebScriptValueAtIndex:value:]):
        * bindings/scripts/CodeGeneratorJS.pm:
        (GenerateHeader):
        (GenerateImplementation):
        * bridge/NP_jsobject.cpp:
        (_NPN_SetProperty):
        * bridge/jni/jni_jsobject.mm:
        (JavaJSObject::setSlot):
        * bridge/runtime_array.cpp:
        (JSC::RuntimeArray::putByIndex):
        * bridge/runtime_array.h:
        (RuntimeArray):

2012-03-05  Shinya Kawanaka  <shinyak@chromium.org>

        InsertionPoint::attach should be consistent with Element.
        https://bugs.webkit.org/show_bug.cgi?id=80373

        Reviewed by Hajime Morita.

        This patch is preparation for coming <shadow> patches.

        InsertionPoint used to attach fallback elements before attaching distributed elements.
        To be consistent with Element::attach behavior, attaching distributed elements first is
        natural, because Element attaches a shadow tree first.

        Also, this patch extracts a few methods form InsretionPoint::attach() and detach()
        to keep code clean. They will become messy without this refactoring when adding
        <shadow> patch.

        No new tests. Should be covered by existing tests.

        * html/shadow/InsertionPoint.cpp:
        (WebCore::InsertionPoint::attach):
        (WebCore::InsertionPoint::detach):
        (WebCore::InsertionPoint::distributeHostChildren):
        (WebCore):
        (WebCore::InsertionPoint::clearDistribution):
        (WebCore::InsertionPoint::attachDistributedNode):
        * html/shadow/InsertionPoint.h:
        (InsertionPoint):

2012-03-05  Adam Barth  <abarth@webkit.org>

        Attempt to fix a number of GTK tests.

        * GNUmakefile.list.am:

2012-03-05  Joseph Pecoraro  <pecoraro@apple.com>

        Unreviewed rollout of r109858 for restructuring.

2012-03-05  Joseph Pecoraro  <pecoraro@apple.com>

        <http://webkit.org/b/78575> Web Inspector: Hide dock button when not allowed to dock

        There are times when an undocked inspector frontend is not allowed to
        attach to the main window. We can remove the dock button in those cases.

        Reviewed by Timothy Hatcher.

        No new tests. This functionality is port specific right now.

        * page/FrameView.cpp:
        (WebCore::FrameView::performPostLayoutTasks):
        When the main frame is resized we let the inspector frontend client
        update its docked availablility.

        * WebCore.exp.in:
        * inspector/InspectorInstrumentation.h:
        * inspector/InspectorInstrumentation.cpp:
        (WebCore::InspectorInstrumentation::didResizeMainFrameImpl):
        (WebCore::InspectorInstrumentation::didResizeMainFrame):
        * inspector/InspectorClient.h:
        (WebCore::InspectorClient::updateDockingAvailability):
        * inspector/InspectorController.h:
        * inspector/InspectorController.cpp:
        (WebCore::InspectorController::resume):
        (WebCore::InspectorController::updateDockingAvailability):
        When the main frame is resized call up to the InspectorClient to let
        it update docking availability of the inspector frontend.

        * inspector/InspectorFrontendClient.h:
        * inspector/InspectorFrontendClientLocal.h:
        * inspector/InspectorFrontendClientLocal.cpp:
        (WebCore::InspectorFrontendClientLocal::frontendLoaded):
        (WebCore::InspectorFrontendClientLocal::setDockingUnavailable):
        On ports where the inspector frontend client is local, provide a 
        setDockingUnavailable InspectorFrontendAPI to update the docking state.
        Automatically update availablity when the frontend completes loading.

        * inspector/front-end/InspectorFrontendAPI.js:
        (InspectorFrontendAPI.setDockingUnavailable):
        * inspector/front-end/inspector.js:
        (WebInspector._createGlobalStatusBarItems):
        (WebInspector.setAttachedWindow):
        (WebInspector.setDockingUnavailable):
        (WebInspector.updateDockToggleButtonVisibility):
        Update the dock button's visibility when its created, when the attached
        state changes, when get a frontend API notification that we cannot attach.

2012-03-05  Adrienne Walker  <enne@google.com>

        Compositing overlap testing can throw layers into compositing when they should not be.
        https://bugs.webkit.org/show_bug.cgi?id=50192

        Reviewed by Simon Fraser.

        The previous overlap map behavior was that a non-composited query
        layer would become composited due to overlap if and only if the query
        layer's absolute bounds overlapped the absolute bounds of some other
        layer which:
            - draws before the query layer
            - is or has a compositing ancestor

        This behavior, while correct, was too permissive in throwing layers
        into compositing, causing many layers to get their own backing when
        they could have just gone into their compositing ancestor's backing.

        The correct logic is that non-composited query layer needs to be
        composited due to overlap if and only if the query layer's absolute
        bounds overlap the absolute bounds of some other layer which:
            - draws before the query layer
            - has a different compositing ancestor than the query layer
            - is or has a compositing ancestor that is a descendent of the
              query layer's compositing ancestor

        This patch changes the semantics of the overlap map to enable this
        behavior.

        Rather than having one global overlap map, there is now a stack of
        overlap maps. New (empty) overlap maps are pushed onto the stack
        whenever a layer becomes a compositing ancestor and popped after all
        of the compositing requirements for that layer's children have been
        computed.

        The compositing ancestor and all of its non-composited children of a
        compositing ancestor do not get considered for overlap until their
        composited ancestor has been popped off the stack. If a compositing
        ancestor has a compositing subtree, then any descendents of that
        compositing ancestor that draw after that subtree will consider
        everything in the compositing subtree for overlap.

        Test: compositing/layer-creation/stacking-context-overlap.html

        * platform/graphics/Region.cpp:
        (WebCore::Region::intersects):
        (WebCore):
        * platform/graphics/Region.h:
        (Region):
        * rendering/RenderLayerCompositor.cpp:
        (RenderLayerCompositor::OverlapMap):
        (WebCore::RenderLayerCompositor::OverlapMap::OverlapMap):
        (WebCore::RenderLayerCompositor::OverlapMap::add):
        (WebCore::RenderLayerCompositor::OverlapMap::contains):
        (WebCore::RenderLayerCompositor::OverlapMap::overlapsLayers):
        (WebCore::RenderLayerCompositor::OverlapMap::isEmpty):
        (WebCore::RenderLayerCompositor::OverlapMap::popCompositingContainer):
        (WebCore::RenderLayerCompositor::OverlapMap::pushCompositingContainer):
        (WebCore::RenderLayerCompositor::addToOverlapMapRecursive):
        (WebCore::RenderLayerCompositor::computeCompositingRequirements):
        * rendering/RenderLayerCompositor.h:
        (RenderLayerCompositor):

2012-03-05  Anders Carlsson  <andersca@apple.com>

        Address review comments from https://bugs.webkit.org/show_bug.cgi?id=80368

        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::setNeedsDisplayInRect):

2012-03-05  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] HTMLFieldSetForms.idl doesn't have type attribute.
        https://bugs.webkit.org/show_bug.cgi?id=80109

        Reviewed by Hajime Morita.

        Test: fast/forms/fieldset/fieldset-type.html

        * html/HTMLFieldSetElement.idl: Add attribute "type"

2012-03-05  Anders Carlsson  <andersca@apple.com>

        Fix build.

        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::setScale):

2012-03-05  Anders Carlsson  <andersca@apple.com>

        pinch-to-zoom and double-tap flicker when using the new scrolling model
        https://bugs.webkit.org/show_bug.cgi?id=80368
        <rdar://problem/10866221>

        Reviewed by Sam Weinig.

        In order to work better with zooming, make the tile cache undo the scale transformation
        and handle the scaling manually. This avoids creating huge tile backing stores when zoomed in.

        * platform/graphics/ca/mac/TileCache.mm:
        (WebCore::TileCache::TileCache):
        Initialize m_scale to 1.

        (WebCore::TileCache::setNeedsDisplayInRect):
        Scale the given rect appropriately.

        (WebCore::TileCache::drawLayer):
        Apply a scale context transform.

        (WebCore::TileCache::setScale):
        No longer set the contents scale. Instead, update the scale and revalidate the tiles.

        (WebCore::TileCache::revalidateTiles):
        Return early if the bounds are empty. This avoids showing a single tile if that happens due to a race condition.

        (WebCore::TileCache::getTileIndexRangeForRect):
        Apply the scale to the bounds.

        (WebCore::TileCache::createTileLayer):
        Don't set the contents scale.

        * platform/graphics/ca/mac/WebTileCacheLayer.mm:
        (-[WebTileCacheLayer setContentsScale:]):
        Call TileCache::setScale.

        * rendering/RenderLayerBacking.cpp:
        (WebCore::RenderLayerBacking::updateCompositedBounds):
        Make sure to give the tile cache layer sane composited bounds, even if the page has absolutely positioned
        elements that are outside of the page.

2012-03-05  Leo Yang  <leo.yang@torchmobile.com.cn>

        GraphicsContext3D.h should include RefCounted.h explicitly
        https://bugs.webkit.org/show_bug.cgi?id=80251

        Reviewed by Rob Buis.

        GraphicsContext3D.h was using RefCounted but including RefCounted.h indirectly
        through GraphicsLayer.h through Animation.h. However Animation.h is included
        by GraphicsLayer.h only when ACCELERATED_COMPOSITING is on. For some configurations
        that don't use ACCELERATED_COMPOSITING but use GraphicsContext3D, like the
        BlackBerry x86 configuration, the indirect inclusion will fail.

        This patch is adding explicit inclusion of RefCounted.h to avoid that kind of
        problem.

        * platform/graphics/GraphicsContext3D.h:

2012-03-05  Kenichi Ishibashi  <bashi@chromium.org>

        [WebSocket] Should raise SYNTAX_ERR when message contains unpaired surrogates
        https://bugs.webkit.org/show_bug.cgi?id=80103

        Reviewed by Kent Tamura.

        Add UTF8 validation checks for WebSocket message and close reason.

        Tests: http/tests/websocket/tests/hybi/unpaired-surrogates-in-close-reason.html
               http/tests/websocket/tests/hybi/unpaired-surrogates-in-message.html

        * Modules/websockets/WebSocket.cpp:
        (WebCore::WebSocket::send): Raise SYNTAX_ERR if the message is invalid.
        (WebCore::WebSocket::close):Raise SYNTAX_ERR if the reason is invalid.
        * Modules/websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send): Check whether message is a valid UTF8 string.

2012-03-05  Kenneth Russell  <kbr@google.com>

        [chromium] Notify CCLayerImpl tree of context loss and restoration
        https://bugs.webkit.org/show_bug.cgi?id=80339

        Reviewed by James Robinson.

        Tested by manually killing GPU process while playing Flash video.
        Video continues to play after compositor restores its context.

        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
        (WebCore::CCLayerImpl::didLoseAndRecreateGraphicsContext):
        (WebCore):
        * platform/graphics/chromium/cc/CCLayerImpl.h:
        (CCLayerImpl):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp:
        (WebCore::CCLayerTreeHostImpl::sendContextLostAndRestoredNotification):
        (WebCore):
        (WebCore::CCLayerTreeHostImpl::sendContextLostAndRestoredNotificationRecursive):
        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h:
        (CCLayerTreeHostImpl):
        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
        (WebCore::CCPluginLayerImpl::didLoseAndRecreateGraphicsContext):
        (WebCore):
        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
        (CCPluginLayerImpl):
        * platform/graphics/chromium/cc/CCSingleThreadProxy.cpp:
        (WebCore::CCSingleThreadProxy::recreateContext):

2012-03-05  Changhun Kang  <temoochin@company100.net>

        Change the argument orders to match OpenGL's in GraphicsContext3D functions
        https://bugs.webkit.org/show_bug.cgi?id=80120

        Reviewed by Kenneth Russell.

        No new tests because this patch just change the order of arguments.

        * html/canvas/WebGLRenderingContext.cpp:
        (WebCore):
        (WebCore::WebGLRenderingContext::uniform1fv):
        (WebCore::WebGLRenderingContext::uniform1iv):
        (WebCore::WebGLRenderingContext::uniform2fv):
        (WebCore::WebGLRenderingContext::uniform2iv):
        (WebCore::WebGLRenderingContext::uniform3fv):
        (WebCore::WebGLRenderingContext::uniform3iv):
        (WebCore::WebGLRenderingContext::uniform4fv):
        (WebCore::WebGLRenderingContext::uniform4iv):
        (WebCore::WebGLRenderingContext::uniformMatrix2fv):
        (WebCore::WebGLRenderingContext::uniformMatrix3fv):
        (WebCore::WebGLRenderingContext::uniformMatrix4fv):
        * platform/graphics/GraphicsContext3D.h:
        * platform/graphics/chromium/LayerRendererChromium.cpp:
        (WebCore::LayerRendererChromium::drawDebugBorderQuad):
        (WebCore::LayerRendererChromium::drawTileQuad):
        (WebCore::LayerRendererChromium::drawYUV):
        (WebCore::LayerRendererChromium::drawStreamTexture):
        (WebCore::LayerRendererChromium::drawTexturedQuad):
        * platform/graphics/chromium/cc/CCRenderSurface.cpp:
        (WebCore::CCRenderSurface::drawSurface):
        * platform/graphics/efl/GraphicsContext3DEfl.cpp:
        (WebCore::GraphicsContext3D::uniform1fv):
        (WebCore::GraphicsContext3D::uniform1iv):
        (WebCore::GraphicsContext3D::uniform2fv):
        (WebCore::GraphicsContext3D::uniform2iv):
        (WebCore::GraphicsContext3D::uniform3fv):
        (WebCore::GraphicsContext3D::uniform3iv):
        (WebCore::GraphicsContext3D::uniform4fv):
        (WebCore::GraphicsContext3D::uniform4iv):
        (WebCore::GraphicsContext3D::uniformMatrix2fv):
        (WebCore::GraphicsContext3D::uniformMatrix3fv):
        (WebCore::GraphicsContext3D::uniformMatrix4fv):
        * platform/graphics/filters/FECustomFilter.cpp:
        (WebCore::FECustomFilter::bindProgramAndBuffers):
        * platform/graphics/opengl/GraphicsContext3DOpenGLCommon.cpp:
        (WebCore::GraphicsContext3D::uniform1fv):
        (WebCore::GraphicsContext3D::uniform2fv):
        (WebCore::GraphicsContext3D::uniform3fv):
        (WebCore::GraphicsContext3D::uniform4fv):
        (WebCore::GraphicsContext3D::uniform1iv):
        (WebCore::GraphicsContext3D::uniform2iv):
        (WebCore::GraphicsContext3D::uniform3iv):
        (WebCore::GraphicsContext3D::uniform4iv):
        (WebCore::GraphicsContext3D::uniformMatrix2fv):
        (WebCore::GraphicsContext3D::uniformMatrix3fv):
        (WebCore::GraphicsContext3D::uniformMatrix4fv):
        * platform/graphics/qt/GraphicsContext3DQt.cpp:
        (WebCore::GraphicsContext3D::uniform1fv):
        (WebCore::GraphicsContext3D::uniform2fv):
        (WebCore::GraphicsContext3D::uniform3fv):
        (WebCore::GraphicsContext3D::uniform4fv):
        (WebCore::GraphicsContext3D::uniform1iv):
        (WebCore::GraphicsContext3D::uniform2iv):
        (WebCore::GraphicsContext3D::uniform3iv):
        (WebCore::GraphicsContext3D::uniform4iv):
        (WebCore::GraphicsContext3D::uniformMatrix2fv):
        (WebCore::GraphicsContext3D::uniformMatrix3fv):
        (WebCore::GraphicsContext3D::uniformMatrix4fv):

2012-03-05  Yoshifumi Inoue  <yosin@chromium.org>

        [Forms] HTMLFieldSetForms.idl doesn't have name attribute.
        https://bugs.webkit.org/show_bug.cgi?id=80108

        Reviewed by Hajime Morita.

        Test: fast/forms/fieldset/fieldset-name.html

        * html/HTMLFieldSetElement.idl: Add "name" attribute.

2012-03-05  Levi Weintraub  <leviw@chromium.org>

        Update usage of LayoutUnits in RenderBox
        https://bugs.webkit.org/show_bug.cgi?id=80039

        Reviewed by Julien Chaffraix.

        Updating the usage of integers versus LayoutUnits in RenderBox to mirror the
        subpixellayout branch. This reverts absoluteRects, intrinsicSize, and focusRingRects
        methods to use integers, and flipForWritingMode functions to LayoutUnits.

        No new tests. No change in behavior.

        * platform/graphics/FractionalLayoutRect.h:
        (WebCore::FractionalLayoutRect::pixelSnappedX): Convenience methods that only calculate
        the needed values. This requires less computation than pixelSnappedIntRect(r).x().
        (WebCore::FractionalLayoutRect::pixelSnappedY): Ditto.
        (WebCore::FractionalLayoutRect::pixelSnappedWidth): Ditto.
        (WebCore::FractionalLayoutRect::pixelSnappedHeight): Ditto.
        (WebCore::FractionalLayoutRect::pixelSnappedMaxX): Ditto.
        (WebCore::FractionalLayoutRect::pixelSnappedMaxY): Ditto.
        (FractionalLayoutRect):
        * platform/graphics/IntRect.h:
        (IntRect):
        (WebCore::IntRect::pixelSnappedX): Stub methods to allow us to use IntRects like we do
        FractionalLayoutRects.
        (WebCore::IntRect::pixelSnappedY): Ditto.
        (WebCore::IntRect::pixelSnappedMaxX): Ditto.
        (WebCore::IntRect::pixelSnappedMaxY): Ditto.
        (WebCore::IntRect::pixelSnappedWidth): Ditto.
        (WebCore::IntRect::pixelSnappedHeight): Ditto.
        * rendering/LayoutTypes.h:
        (WebCore::pixelSnappedIntRect): Convenience method for building a pixelSnappedIntRect from
        a LayoutPoint and LayoutSize without constructing an intermediate LayoutRect.
        (WebCore):
        (WebCore::snapSizeToPixel): Stub method for snapping a LayoutUnit representing a size to
        its pixel value using its location.
        * rendering/RenderBox.cpp:
        (WebCore::RenderBox::pixelSnappedClientWidth): Changing to actually call snapSizeToPixel.
        (WebCore::RenderBox::pixelSnappedClientHeight): Ditto.
        (WebCore::RenderBox::absoluteRects): Switching to return IntRects that represent the actual
        rendered location on screen.
        (WebCore::RenderBox::addFocusRingRects): Ditto.
        (WebCore::RenderBox::paintFillLayer): One-liner switching an IntSize() to LayoutSize() to
        avoid unnecessary conversion.
        (WebCore::RenderBox::shrinkLogicalWidthToAvoidFloats): Preparing for the conversion by
        replacing 0 with zeroLayoutUnit.
        (WebCore::RenderBox::positionLineBox): Preparing for conversion by replacing lroundf
        with roundedLayoutUnit.
        (WebCore::RenderBox::flipForWritingMode): Switching to use LayoutUnits.
        * rendering/RenderBox.h:
        (RenderBox):
        (WebCore::RenderBox::pixelSnappedBorderBoxRect): Convenience method.
        (WebCore::RenderBox::borderBoundingBox): Converting to a pixelSnappedIntRect.
        (WebCore::RenderBox::intrinsicSize): Intrinsic sizes should always be integers.

2012-03-05  Adam Barth  <abarth@webkit.org>

        WorkerContext shouldn't need to know about SQLDatabase
        https://bugs.webkit.org/show_bug.cgi?id=80352

        Reviewed by Eric Seidel.

        This patch removes the SQLDatabase functions from WorkerContext in
        preparation for moving the SQLDatabase code into a module.  These
        functions don't interact with the rest of WorkerContext.

        * CMakeLists.txt:
        * DerivedSources.make:
        * DerivedSources.pri:
        * GNUmakefile.list.am:
        * Target.pri:
        * WebCore.gypi:
        * WebCore.vcproj/WebCore.vcproj:
        * WebCore.xcodeproj/project.pbxproj:
        * storage/DOMWindowSQLDatabase.cpp:
        * storage/WorkerContextSQLDatabase.cpp: Added.
        (WebCore):
        (WebCore::WorkerContextSQLDatabase::openDatabase):
        (WebCore::WorkerContextSQLDatabase::openDatabaseSync):
        * storage/WorkerContextSQLDatabase.h: Added.
        (WebCore):
        (WorkerContextSQLDatabase):
        (WebCore::WorkerContextSQLDatabase::WorkerContextSQLDatabase):
        (WebCore::WorkerContextSQLDatabase::~WorkerContextSQLDatabase):
        * storage/WorkerContextSQLDatabase.idl: Added.
        * workers/WorkerContext.cpp:
        (WebCore):
        * workers/WorkerContext.h:
        (WebCore):
        (WorkerContext):
        * workers/WorkerContext.idl:

2012-03-05  Kenichi Ishibashi  <bashi@chromium.org>

        [WebSocket] Introduce ThreadableWebSocketChannel::SendResult
        https://bugs.webkit.org/show_bug.cgi?id=80356

        Reviewed by Kent Tamura.

        Introduced ThreadableWebSocketChannel::SendResult type so that
        WebSocketChannel can pass the validation result.

        No new test. No changes in behavior.

        * Modules/websockets/ThreadableWebSocketChannel.h: Added SendResult.
        * Modules/websockets/ThreadableWebSocketChannelClientWrapper.cpp:
        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
        (WebCore::ThreadableWebSocketChannelClientWrapper::sendRequestResult): Use ThreadableWebSocketChannel::SendResult instead of bool.
        (WebCore::ThreadableWebSocketChannelClientWrapper::setSendRequestResult): Ditto.
        * Modules/websockets/ThreadableWebSocketChannelClientWrapper.h:
        (ThreadableWebSocketChannelClientWrapper):
        * Modules/websockets/WebSocketChannel.cpp:
        (WebCore::WebSocketChannel::send): Use ThreadableWebSocketChannel::SendResult instead of bool. Pass Cstring to enqueTextFrame instead of String.
        (WebCore::WebSocketChannel::enqueueTextFrame): Ditto.
        (WebCore::WebSocketChannel::processOutgoingFrameQueue): Ditto.
        * Modules/websockets/WebSocketChannel.h:
        (WebSocketChannel):
        (QueuedFrame): Changed the type of stringData from String to CString.
        * Modules/websockets/WorkerThreadableWebSocketChannel.cpp:
        (WebCore::WorkerThreadableWebSocketChannel::send): Use ThreadableWebSocketChannel::SendResult instead of bool.
        (WebCore::workerContextDidSend): Ditto.
        (WebCore::WorkerThreadableWebSocketChannel::Peer::send): Ditto.
        (WebCore::WorkerThreadableWebSocketChannel::Bridge::send): Ditto.
        * Modules/websockets/WorkerThreadableWebSocketChannel.h:
        (WorkerThreadableWebSocketChannel): ditto.
        (Bridge): Ditto.

2012-03-05  Kentaro Hara  <haraken@chromium.org>

        [JSC] Cache the CSSPropertyID in JSCSSStyleDeclaration
        https://bugs.webkit.org/show_bug.cgi?id=80250

        Reviewed by Benjamin Poulain.

        V8CSSStyleDeclaration caches the calculated CSSPropertyID.
        Similarly, we can implement the cache in JSCSSStyleDeclaration.

        In my local Mac environment, this optimization improves the performance
        of CSS property getters by 35%, and the performance of CSS property setters
        by 8%.

        CSS property getter: for (var i = 0; i < 1000000; i++) span.style.fontWeight;
        CSS property setter: for (var i = 0; i < 1000000; i++) span.style.fontWeight = "bold";

        Tests: fast/dom/CSSStyleDeclaration/* (No change in test results)

        * bindings/js/JSCSSStyleDeclarationCustom.cpp:
        (CSSPropertyInfo):
        (WebCore):
        (WebCore::cssPropertyIDForJSCSSPropertyName):
        (WebCore::JSCSSStyleDeclaration::nameGetter):
        (WebCore::JSCSSStyleDeclaration::putDelegate):

2012-03-05  Joshua Bell  <jsbell@chromium.org>

        IndexedDB: Handle LevelDB database corruption
        https://bugs.webkit.org/show_bug.cgi?id=79413

        Add LevelDBDatabase::destroy() method so that clients can retry if open() fails.

        Reviewed by Tony Chang.

        Test: webkit_unit_tests --gtest_filter='LevelDBDatabaseTest.CorruptionTest'

        * Modules/indexeddb/IDBLevelDBBackingStore.cpp: Implement open/destroy/open strategy.
        (WebCore::IDBLevelDBBackingStore::open):
        * platform/leveldb/LevelDBDatabase.cpp:
        (WebCore::LevelDBDatabase::destroy):
        (WebCore):
        * platform/leveldb/LevelDBDatabase.h:
        (LevelDBDatabase):

2012-03-05  Stephen Chenney  <schenney@chromium.org>

        [Chromium] SVG Composite of Offset crashes
        https://bugs.webkit.org/show_bug.cgi?id=77245

        Reviewed by Stephen White.

        The feComposite arithmetic mode filter could readily be made to
        generate invalid pre-multiplied pixel values which would then go on to
        pollute other filters and cause invalid final output pixels. This
        patch checks for filters that require valid inputs, and checks that a
        result is valid, and corrects the result if necessary. This matches
        the behavior of FF and Opera while preventing crashes or other
        undesirable behavior.

        Test: svg/filters/feComposite-arithmetic-invalid-rgba.svg

        * platform/graphics/filters/FEComposite.h: Override the default validity checks and image cleanup methods.
        * platform/graphics/filters/FEComposite.cpp:
        (WebCore::FEComposite::correctFilterResultIfNeeded): Force valid pixels if this is an arithmetic filter
        * platform/graphics/filters/FilterEffect.cpp:
        (WebCore::FilterEffect::apply): Check for validity status and correct
        (WebCore::FilterEffect::forceValidPremultipliedPixels): Make an image valid
        (WebCore):
        * platform/graphics/filters/FilterEffect.h: New virtual methods for image validity.
        (FilterEffect):
        (WebCore::FilterEffect::requiresValidPreMu