Merge 77705 - 2011-02-04 Charlie Reis <creis@chromium.org>...

Merge 77705 - 2011-02-04  Charlie Reis  <creis@chromium.org>;

        Reviewed by Mihai Parparita.

        Crash in WebCore::HistoryController::itemsAreClones
        https://bugs.webkit.org/show_bug.cgi?id=52819

        Tests that navigating back and forward between hash items works.

        * fast/history/history-back-forward-within-subframe-hash.html: Added.
        * fast/history/history-back-forward-within-subframe-hash-expected.txt: Added.
2011-02-04  Charlie Reis  <creis@chromium.org>;

        Reviewed by Mihai Parparita.

        Crash in WebCore::HistoryController::itemsAreClones
        https://bugs.webkit.org/show_bug.cgi?id=52819

        Avoids deleting the current HistoryItem while it is still in use.
        Ensures that provisional items are committed for same document navigations.
        Ensures that error pages are committed on back/forward navigations.
        Also removes unneeded sanity checks used for diagnosing the problem.

        * loader/HistoryController.cpp:
        * loader/HistoryController.h:
2011-02-04  Charlie Reis  <creis@chromium.org>;

        Reviewed by Mihai Parparita.

        Crash in WebCore::HistoryController::itemsAreClones
        https://bugs.webkit.org/show_bug.cgi?id=52819

        Removes unneeded sanity checks used for diagnosing a memory error.

        * src/WebFrameImpl.cpp:

BUG=70315
TBR=creis@webkit.org

Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=77736