Merge 91249 - Fix microphone icon placement in speech input control for dir=rtl.

Source/WebCore/ChangeLog

Index: Source/WebCore/ChangeLog
===================================================================
--- Source/WebCore/ChangeLog	(revision 91253)
+++ Source/WebCore/ChangeLog	(working copy)
@@ -1,3 +1,6475 @@
+2011-07-19  Jeremy Moskovich  <jeremy@chromium.org>
+
+        Fix microphone icon placement in speech input control for dir=rtl.
+        https://bugs.webkit.org/show_bug.cgi?id=64668
+
+        Reviewed by Dimitri Glazkov.
+
+        Modify default stylesheet to propagate dir=rtl from the outer input
+        control to the shadow DOM container.  This makes the microphone
+        icon appear on the left for dir=rtl, which is the desired behavior.
+
+        Test: fast/speech/speech-bidi-rendering.html
+
+        * css/html.css:
+        (input[x-webkit-speech][dir=rtl]::-webkit-textfield-decoration-container):
+
+2011-07-19  Raphael Kubo da Costa  <kubo@profusion.mobi>
+
+        [EFL] Account for the invalid pointer case in WebCore::screenRect()
+        https://bugs.webkit.org/show_bug.cgi?id=64543
+
+        Reviewed by Antonio Gomes.
+
+        Fix a regression introduced in r88245: it assumes the pointer passed
+        to screenRect() is always valid.
+        fast/frames/crash-removed-iframe.html proves this is not always true,
+        so we need to do some sanity check on the pointer before using it.
+        No new tests as this has been caught by the current test suite.
+
+        * platform/efl/PlatformScreenEfl.cpp:
+        (WebCore::screenRect):
+
+2011-07-19  Robin Qiu  <robin.qiu@torchmobile.com.cn>
+
+        Reviewed by Antonio Gomes.
+
+        ScrollBar should initialize current position in constructor.
+        https://bugs.webkit.org/show_bug.cgi?id=39284
+
+        When ScrollBar is created, m_currentPos should be initialized to
+        m_scrollableArea's current scrollPosition. Because scrollbars may
+        be created after the content of m_scrollableArea has been scrolled.
+
+        Test: scrollbars/scrollbar-initial-position.html
+
+        * platform/Scrollbar.cpp:
+        (WebCore::Scrollbar::Scrollbar):
+
+2011-07-19  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Implement hybi framing
+        https://bugs.webkit.org/show_bug.cgi?id=64522
+
+        Reviewed by Kent Tamura.
+
+        Implement WebSocket framing protocol which is mainly described in
+        <http://tools.ietf.org/html/draft-ietf-hybi-thewebsocketprotocol-10#section-4> and
+        <http://tools.ietf.org/html/draft-ietf-hybi-thewebsocketprotocol-10#section-6>.
+
+        Hybi protocol introduces a new frame format which is drastically different from
+        the old one. Notable differences are:
+        - Binary data support.
+        - Fragmentation support: a single message can be fragmented to multiple frames.
+        - Ping-pong support.
+        - Masking: frame content of a client must be masked to prevent cross-protocol attacks.
+
+        This patch covers the following features:
+        - Send a pong frame when a ping frame is received.
+        - Receive fragmented frames.
+        - Receive masked frames. (Servers do not have to mask frames, but they may if they wish.)
+
+        The following features are NOT implemented yet:
+        - Send or receive binary messages.
+        - Send a ping message.
+        - Send fragmented frames. (It is unclear whether this is necessary.)
+        - Rewrite the frame content by WebSocket protocol extensions (like frame compression).
+
+        New tests: http/tests/websocket/tests/hybi/broken-utf8.html
+                   http/tests/websocket/tests/hybi/fragmented-control-frame.html
+                   http/tests/websocket/tests/hybi/fragmented-frames.html
+                   http/tests/websocket/tests/hybi/interleaved-fragments.html
+                   http/tests/websocket/tests/hybi/long-control-frame.html
+                   http/tests/websocket/tests/hybi/masked-frames.html
+                   http/tests/websocket/tests/hybi/pong.html
+                   http/tests/websocket/tests/hybi/reserved-bits.html
+                   http/tests/websocket/tests/hybi/reserved-opcodes.html
+                   http/tests/websocket/tests/hybi/too-long-payload.html
+
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::WebSocketChannel):
+        (WebCore::WebSocketChannel::send):
+        The original content of send() was moved to a private method sendFrameHixie76().
+        (WebCore::WebSocketChannel::fail):
+        Stop handling incoming data after the WebSocket connection is failed.
+        It was unclear to me whether we should do the same thing for hixie-76 connection;
+        for now, I kept the original behavior.
+        (WebCore::WebSocketChannel::processBuffer):
+        (WebCore::WebSocketChannel::resumeTimerFired):
+        (WebCore::WebSocketChannel::startClosingHandshake):
+        (WebCore::WebSocketChannel::closingTimerFired):
+        (WebCore::WebSocketChannel::parseFrame):
+        (WebCore::WebSocketChannel::processFrame):
+        (WebCore::WebSocketChannel::processFrameHixie76):
+        (WebCore::WebSocketChannel::sendFrame):
+        (WebCore::WebSocketChannel::sendFrameHixie76):
+        * websockets/WebSocketChannel.h:
+        (WebCore::WebSocketChannel::isNonControlOpCode):
+        (WebCore::WebSocketChannel::isControlOpCode):
+        (WebCore::WebSocketChannel::isReservedOpCode):
+
+2011-07-19  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        REGRESSION (r88913): Preview in Safari's snippet editor has a fixed height instead of filling the entire pane
+        https://bugs.webkit.org/show_bug.cgi?id=64059
+
+        REGRESSION (r88913): <object> has wrong computed height
+        https://bugs.webkit.org/show_bug.cgi?id=62769
+
+        Reviewed by Rob Buis.
+
+        Fix misinterpretation of CSS 2.1 - "10.5 Content height: the 'height' property".
+        It says "If the height of the containing block is not specified explicitelz (i.e. it depends on the
+        content height), and this element is not absolutely positioned, the value computes to 'auto'".
+
+        Checking whether the containing block height depends on the content height is not equal to checking
+        whether the height property is set on the containing block, there are other ways to implicitly specify
+        the height by setting top & bottom. Fix that by checking whether the containing block has a height
+        property or top & bottom set.
+
+        While I was at it, make computeReplacedLogicalWidth/Height a bit more explicit to make it easier to compare
+        the code with the spec quoatations - this doesn't change the functionality only the readability.
+        
+        Test: fast/css/replaced-element-implicit-size.html
+
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::computeReplacedLogicalWidth): Cleanup comment, make code more explicit.
+        (WebCore::RenderReplaced::logicalHeightIsAuto): Add helper method used by computeReplacedLogicalHeight.
+        (WebCore::RenderReplaced::computeReplacedLogicalHeight): Fix height=auto detection.
+        * rendering/RenderReplaced.h:
+
+2011-07-18  Ryosuke Niwa  <rniwa@webkit.org>
+
+        REGRESSION(91209?): fast/css/custom-font-xheight.html is failing on Leopard
+        https://bugs.webkit.org/show_bug.cgi?id=64767
+
+        Add a runtime check for font cascading optimization.
+
+        It's a constant value in Mac port so hopefully gcc will constant-propagate the value
+        and eliminate the function altogether.
+
+        * platform/graphics/cocoa/FontPlatformDataCocoa.mm:
+        (WebCore::canSetCascadeListForCustomFont): Added.
+        (WebCore::FontPlatformData::ctFont):
+
+2011-07-18  MORITA Hajime  <morrita@google.com>
+
+        [ShadowContentElement] forwarded node should be able to access its hosting content element.
+        https://bugs.webkit.org/show_bug.cgi?id=64251
+        
+        Reviewed by Dimitri Glazkov.
+
+        - Introduced ShadowInclusionSet to manage included nodes to its includer content element.
+          ShadowInclusionSet instance is owned by ShadowRoot.
+        - Updated the set on inclusion list changes.
+        - Used the set to retrieve the content element of NodeRenderingContext.
+        
+        There are also related refactoring and cleanup:
+        - Renamed NodeRenderingContext::m_contentElement to m_includer
+        - ShadowContentSelector::m_activeElement is no longer used, thus removed.
+        
+        Test: fast/dom/shadow/content-element-includer.html
+
+        * WebCore.exp.in:
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRenderingContext::NodeRenderingContext):
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+        * dom/NodeRenderingContext.h:
+        (WebCore::NodeRenderingContext::includer):
+        * dom/ShadowContentElement.cpp:
+        (WebCore::removeFromSet):
+        (WebCore::addToSet):
+        (WebCore::ShadowContentElement::attach):
+        (WebCore::ShadowContentElement::detach):
+        * dom/ShadowContentElement.h:
+        (WebCore::ShadowInclusionSet::add):
+        (WebCore::ShadowInclusionSet::remove):
+        (WebCore::ShadowInclusionSet::isEmpty):
+        (WebCore::ShadowInclusionSet::Translator::hash):
+        (WebCore::ShadowInclusionSet::Translator::equal):
+        (WebCore::ShadowInclusionSet::Hash::hash):
+        (WebCore::ShadowInclusionSet::Hash::equal):
+        (WebCore::ShadowInclusionSet::find):
+        * dom/ShadowContentSelector.cpp:
+        (WebCore::ShadowContentSelector::ShadowContentSelector):
+        (WebCore::ShadowContentSelector::selectInclusion):
+        * dom/ShadowContentSelector.h:
+        * dom/ShadowRoot.cpp:
+        (WebCore::ShadowRoot::~ShadowRoot):
+        (WebCore::ShadowRoot::includerFor):
+        (WebCore::ShadowRoot::inclusions):
+        (WebCore::ShadowRoot::ensureInclusions):
+        * dom/ShadowRoot.h:
+        (WebCore::toShadowRoot):
+        * testing/Internals.cpp:
+        (WebCore::Internals::includerFor):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-18  Dean Jackson  <dino@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=64742
+        Expose WebPreferences for media playback requiring user gestures and inline playback
+
+        Reviewed by Simon Fraser.
+
+        Media playback already tested if it should require user gestures, but
+        no setting was ever exposed to clients. Also, some ports only allow media
+        playback to be fullscreen, so exposing a new setting for them.
+
+        * html/HTMLMediaElement.cpp:
+        (WebCore::HTMLMediaElement::HTMLMediaElement): Examine the new Setting
+        for user gestures.
+        * page/Settings.cpp:
+        (WebCore::Settings::Settings):
+        * page/Settings.h: Two new settings.
+        (WebCore::Settings::setMediaPlaybackRequiresUserGesture):
+        (WebCore::Settings::mediaPlaybackRequiresUserGesture):
+        (WebCore::Settings::setMediaPlaybackAllowsInline):
+        (WebCore::Settings::mediaPlaybackAllowsInline):
+
+2011-07-18  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Leopard build fix after r91229.
+
+        * platform/graphics/cocoa/FontPlatformDataCocoa.mm:
+        (WebCore::FontPlatformData::ctFont):
+
+2011-07-18  Dan Bernstein  <mitz@apple.com>
+
+        REGRESSION(91209?): fast/css/custom-font-xheight.html is failing on Leopard
+        https://bugs.webkit.org/show_bug.cgi?id=64767
+
+        Reviewed by Sam Weinig.
+
+        * platform/graphics/Font.h:
+        * platform/graphics/cocoa/FontPlatformDataCocoa.mm:
+        (WebCore::FontPlatformData::ctFont): Undo the cascade list optimization on Leopard for custom
+        fonts, because adding a cascade list apparently breaks the font.
+
+2011-07-18  Matthew Delaney  <mdelaney@apple.com>
+
+        Remove drawsUsingCopy now that all ports handle the copying
+        https://bugs.webkit.org/show_bug.cgi?id=64768
+        
+        Introduced in https://bugs.webkit.org/show_bug.cgi?id=43507, ImageBuffer::drawsUsingCopy
+        was used to know whether or not an ImageBuffer should be explicitly copied before being
+        painted into a context (as was used in HTMLCanvasElement::paint). All platforms now
+        handle the logic of copying or not in their ImageBuffer::draw() implementations, so
+        drawsUsingCopy() is no longer needed. This patch removes it.
+
+        Reviewed by Dan Bernstein.
+
+        No new tests; does not affect behavior.
+
+        * html/HTMLCanvasElement.cpp:
+        (WebCore::HTMLCanvasElement::paint):
+        * platform/graphics/ImageBuffer.h:
+        (WebCore::ImageBuffer::isAccelerated):
+        * platform/graphics/cairo/ImageBufferCairo.cpp:
+        * platform/graphics/cg/ImageBufferCG.cpp:
+        * platform/graphics/qt/ImageBufferQt.cpp:
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        * platform/graphics/wince/ImageBufferWinCE.cpp:
+        * platform/graphics/wx/ImageBufferWx.cpp:
+
+2011-07-18  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] Resource preserving fails when frameNavigated event is dispatched on NetworkPanel.
+        https://bugs.webkit.org/show_bug.cgi?id=64748
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._frameNavigated):
+
+2011-07-18  Brian Weinstein  <bweinstein@apple.com>
+
+        Prep work for: Crash under WebPage::platformDragEnded when dragging on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=64766
+        <rdar://problem/9548174>
+        
+        Reviewed by Darin Adler.
+
+        Add a DragClient function that is called when a drag is ended, and call it from DragController::dragEnded.
+        This isn't used yet, but will be used by WebKit2 on Mac.
+        
+        This patch also cleans up style in DragClient.h.
+
+        No change in behavior, no tests needed.
+
+        * page/DragClient.h:
+        (WebCore::DragClient::dragEnded): Stub virtual implementation for now, this will be used by
+            WebKit2 on Mac.
+        * page/DragController.cpp:
+        (WebCore::DragController::dragEnded): Call DragClient::dragEnded.
+
+2011-07-18  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        Focus and selection events are not fired when a <select>'s selection
+        changes
+        https://bugs.webkit.org/show_bug.cgi?id=64504
+        <rdar://problem/9319881>
+
+        Reviewed by Alice Liu.
+
+        Test: platform/win/accessibility/option-element-selection-and-focus-events.html
+
+        * accessibility/chromium/AXObjectCacheChromium.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        Add new notification type to the section of unhandled notifications.
+
+        * accessibility/AXObjectCache.h:
+        Declare a new notification, AXMenuListItemSelected.
+
+        * accessibility/AccessibilityMenuList.cpp:
+        (WebCore::AccessibilityMenuList::didUpdateActiveOption):
+        Tell our child popup that the active option changed, and post a
+        notification that our value changed.
+
+        * accessibility/AccessibilityMenuList.h:
+        Declare didUpdateActiveOption().
+
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        (WebCore::AccessibilityMenuListPopup::didUpdateActiveOption):
+        Get the child <option> element that is selected, and fire focus and
+        selection events for it.
+
+        * accessibility/AccessibilityMenuListPopup.h:
+        Declare didUpdateActiveOption().
+
+        * accessibility/win/AXObjectCacheWin.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        Map AXMenuListItemSelected -> EVENT_OBJECT_SELECTION.
+
+        * dom/SelectElement.cpp:
+        (WebCore::SelectElement::setSelectedIndex):
+        Pass the newly-selected index.
+
+        * rendering/RenderMenuList.cpp:
+        (WebCore::RenderMenuList::RenderMenuList):
+        Update the initialization list for the renamed m_lastActiveIndex.
+        (WebCore::RenderMenuList::setTextFromOption):
+        A new selection has been made in the popup; call
+        didUpdateActiveOption().
+        (WebCore::RenderMenuList::didSetSelectedIndex):
+        Call didUpdateActiveOption(), passing the index of the newly-selected
+        <option>.
+        (WebCore::RenderMenuList::didUpdateActiveOption):
+        If accessibility is disabled, or if the active option has not changed,
+        return early. Check whether the option index is in the range of list
+        items, and assert that the item at that index is an <option> element.
+        Tell the AccessibilityMenuList for this element that we updated the
+        active option.
+
+        * rendering/RenderMenuList.h:
+        Updated the declaration of didSetSelectedIndex() to take the selected
+        index. Declared didUpdateActiveOption(). Renamed m_lastSelectedIndex to
+        m_lastActiveIndex.
+
+2011-07-18  Dan Bernstein  <mitz@apple.com>
+
+        Specify a cascade list consisting of the last resort font for Core Text
+        https://bugs.webkit.org/show_bug.cgi?id=64747
+
+        Reviewed by Sam Weinig.
+
+        No new tests, because this does not affect behavior.
+
+        This prevents Core Text from taking its default, longer fallback list when the primary font does
+        not include a character. This is OK to do because WebKit never uses the results of Core Text
+        fallback anyway.
+
+        * platform/graphics/cocoa/FontPlatformDataCocoa.mm:
+        (WebCore::cascadeToLastResortFontDescriptor): Added. Returns a CTFontDescriptor with a cascade
+        list consisting of the last resort font.
+        (WebCore::FontPlatformData::ctFont): Changed to include the cascadeToLastResortFontDescriptor
+        in the returned font.
+
+2011-07-18  James Robinson  <jamesr@chromium.org>
+
+        Timer scheduling should be based off the monotonic clock
+        https://bugs.webkit.org/show_bug.cgi?id=64544
+
+        Reviewed by Darin Adler.
+
+        Changes the Timer scheduling logic from using absolute values in terms of currentTime() to using relative
+        intervals in terms of monotonicallyIncreasingTime().  This provides better standards compliance, compatibility,
+        and predictability when the system clock is adjusted.
+
+        No automated tests since there is no way to modify the system clock from DRT.
+
+        * platform/SharedTimer.h:
+        (WebCore::MainThreadSharedTimer::setFireInterval):
+        * platform/ThreadTimers.cpp:
+        (WebCore::ThreadTimers::updateSharedTimer):
+        (WebCore::ThreadTimers::sharedTimerFiredInternal):
+        * platform/Timer.cpp:
+        (WebCore::TimerBase::start):
+        (WebCore::TimerBase::nextFireInterval):
+        * platform/android/SharedTimerAndroid.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/brew/SharedTimerBrew.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/chromium/PlatformBridge.h:
+        * platform/chromium/SharedTimerChromium.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/efl/SharedTimerEfl.cpp:
+        (WebCore::addNewTimer):
+        (WebCore::setSharedTimerFireInterval):
+        * platform/gtk/SharedTimerGtk.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/haiku/SharedTimerHaiku.cpp:
+        (WebCore::SharedTimerHaiku::start):
+        (WebCore::setSharedTimerFireInterval):
+        * platform/mac/SharedTimerMac.mm:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/qt/SharedTimerQt.cpp:
+        (WebCore::SharedTimerQt::start):
+        (WebCore::setSharedTimerFireInterval):
+        * platform/win/SharedTimerWin.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/wince/SharedTimerWinCE.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/wx/SharedTimerWx.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * workers/WorkerRunLoop.cpp:
+        (WebCore::WorkerSharedTimer::setFireInterval):
+
+2011-07-18  Pratik Solanki  <psolanki@apple.com>
+
+        Unreviewed. Fix Windows build. Move static function defaultSessionCookieStorage() to before
+        its use in defaultCookieStorage().
+
+        * platform/network/cf/CookieStorageCFNet.cpp:
+        (WebCore::defaultSessionCookieStorage):
+
+2011-07-18  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        Get coookie storage code to work with USE(CFNETWORK) enabled on Mac.
+
+        No new tests because no change in functionality.
+
+        * platform/network/cf/CookieStorageCFNet.cpp:
+        (WebCore::defaultCookieStorage):
+        (WebCore::defaultSessionCookieStorage):
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::ResourceHandle::createPrivateBrowsingStorageSession):
+        * platform/network/mac/CookieStorageMac.mm:
+
+2011-07-18  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        * WebCore.exp.in:
+
+2011-07-18  Gavin Barraclough  <barraclough@apple.com>
+
+        Speculative fix for Leopard assertions caused by 91095.
+
+        Rubber stamped by Sam Weinig.
+
+        * bridge/NP_jsobject.cpp:
+        (_NPN_Invoke):
+            - ensure we pass the window shell, not the global object.
+
+2011-07-18  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Refactor JSC to replace JSCell::operator new with static create method
+        https://bugs.webkit.org/show_bug.cgi?id=64466
+
+        Reviewed by Oliver Hunt (oliver@apple.com) and Darin Adler (darin@apple.com).
+
+        First step in a longer refactoring process to remove the use of
+        operator new overloading in order to allocate GC objects and to replace
+        this method with static create methods for each individual type of heap-allocated
+        JS object.  This particular patch only deals with replacing uses of
+        operator new within JSC proper.  Future patches will remove it from the
+        parts that interface with the DOM.  Due to the DOM's continued dependence
+        on it, operator new has not actually been removed from JSCell.
+
+        * bindings/js/JSDOMBinding.cpp:
+        (WebCore::jsDateOrNull):
+        (WebCore::objectToStringFunctionGetter):
+        * bindings/js/JSDOMWindowCustom.cpp:
+        (WebCore::nonCachingStaticFunctionGetter):
+        * bindings/js/JSHistoryCustom.cpp:
+        (WebCore::nonCachingStaticBackFunctionGetter):
+        (WebCore::nonCachingStaticForwardFunctionGetter):
+        (WebCore::nonCachingStaticGoFunctionGetter):
+        * bindings/js/JSLocationCustom.cpp:
+        (WebCore::nonCachingStaticReplaceFunctionGetter):
+        (WebCore::nonCachingStaticReloadFunctionGetter):
+        (WebCore::nonCachingStaticAssignFunctionGetter):
+        * bindings/js/SerializedScriptValue.cpp:
+        (WebCore::CloneDeserializer::readTerminal):
+        * bridge/qt/qt_runtime.cpp:
+        (JSC::Bindings::convertQVariantToValue):
+
+2011-07-18  Viatcheslav Ostapenko  <ostapenko.viatcheslav@nokia.com>
+
+        [Texmap] [Qt] [WK2] Unsync in TextureMapperNode between parent and child lists cause crashes on WK2.
+        https://bugs.webkit.org/show_bug.cgi?id=62587
+
+        Reviewed by Noam Rosenthal.
+
+        Fix unsync between m_parent and m_children list in child and parent texture mapper nodes 
+        in syncCompositingStateSelf.
+
+        * platform/graphics/texmap/TextureMapperNode.cpp:
+        (WebCore::TextureMapperNode::syncCompositingStateSelf):
+
+2011-07-18  Rob Buis  <rbuis@rim.com>
+
+        Stroking of zero-length paths in SVG should change according to erratum
+        https://bugs.webkit.org/show_bug.cgi?id=18356
+
+        Reviewed by Nikolas Zimmermann.
+
+        Do not rely on toolkits to correctly render zero-length path with stroke-linecap=round, render
+        it ourselves just like for stroke-linecap=square.
+
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::shouldStrokeZeroLengthSubpath):
+        (WebCore::RenderSVGPath::setupSquareCapPath):
+
+2011-07-18  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [REGRESSION] Value 'none' breaks multiple background-image display
+        https://bugs.webkit.org/show_bug.cgi?id=59274
+
+        Reviewed by Simon Fraser.
+
+        When taking fast path for simple color background, we should draw
+        the background only if it is the last in the list of backgrounds.
+        Otherwise, it will obscure the previously drawn backgrounds.
+
+        Test: fast/backgrounds/background-fast-path-simple-color.html
+
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::paintFillLayerExtended):
+
+2011-07-18  Yi Shen  <yi.4.shen@nokia.com>
+
+        [Qt] ASSERTION FAILED in ResourceHandle::setDefersLoading causes crash
+        https://bugs.webkit.org/show_bug.cgi?id=62808
+
+        The assertion in ResourceHandle::setDefersLoading assumes asynchronous
+        content delivery -- To resume a page, first, its main resource loader
+        calls setDefersLoading to resume loading the main content; then all the
+        sub-resource loaders calls setDefersLoading to resume sub-contents.
+        However, since QNetworkReplyHandler delivers content synchronously,
+        some new sub-resource loaders get created as soon as the main resource
+        loader resumed, and all these new sub-resource loaders set their
+        defersLoading flag to false. Then, the assertion fails for these new
+        sub-resource loaders when calling setDefersLoading on them. As a fix,
+        this path makes QNetworkReplyHandler deliver content asynchronously
+        when its load type is set to SynchronousLoad.
+
+        Reviewed by Benjamin Poulain.
+
+        Test: loader/load-defer-resume-crash.html
+
+        * platform/network/qt/QNetworkReplyHandler.cpp:
+        (WebCore::QNetworkReplyHandlerCallQueue::setDeferSignals):
+        * platform/network/qt/QNetworkReplyHandler.h:
+        (WebCore::QNetworkReplyHandler::setLoadingDeferred):
+
+2011-07-18  Young Han Lee  <joybro@company100.net>
+
+        AnimationBase asserts if a test tries to pause during the delay phase
+        https://bugs.webkit.org/show_bug.cgi?id=59475
+
+        Reviewed by Simon Fraser.
+
+        There is no more assertion failure after r90765, but the testcase still fails due to
+        the miscalculation of the pauseTime. This patch pauses the animation at its startTime
+        if a test tries to pause it during the delay phase.
+
+        Test: transitions/transition-in-delay-phase.html
+
+        * page/animation/AnimationBase.cpp:
+        (WebCore::AnimationBase::freezeAtTime):
+
+2011-07-18  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Web Inspector: provide unique identifiers for loaders
+        https://bugs.webkit.org/show_bug.cgi?id=64599
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::loaderDetachedFromFrameImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::frameDestroyed):
+        (WebCore::InspectorInstrumentation::loaderDetachedFromFrame):
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::InspectorPageAgent::loaderId):
+        (WebCore::InspectorPageAgent::loaderDetachedFromFrame):
+        * inspector/InspectorPageAgent.h:
+        * loader/DocumentLoader.cpp:
+        (WebCore::DocumentLoader::detachFromFrame):
+
+2011-07-18  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: "Reveal in Elements Panel" is broken.
+        https://bugs.webkit.org/show_bug.cgi?id=64688
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeOutline):
+        (WebInspector.ElementsTreeOutline.prototype._contextMenuEventFired.focusElement):
+        (WebInspector.ElementsTreeOutline.prototype._contextMenuEventFired):
+        (WebInspector.ElementsTreeOutline.prototype.populateContextMenu):
+
+2011-07-18  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        Remove RenderObject::addLayers second argument
+        https://bugs.webkit.org/show_bug.cgi?id=64649
+
+        Reviewed by Benjamin Poulain.
+
+        No change in behavior.
+
+        The code was always passing |this| as the second argument. Thus just
+        removed the argument for clarity.
+
+        * rendering/RenderObject.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::addLayers): Removed the argument, replaced
+        by |this|.
+
+        * rendering/RenderObjectChildList.cpp:
+        (WebCore::RenderObjectChildList::appendChildNode):
+        (WebCore::RenderObjectChildList::insertChildNode):
+        Removed the second argument at those 2 call sites.
+
+2011-07-18  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: do not pause on caught exceptions while typing in the console.
+        https://bugs.webkit.org/show_bug.cgi?id=64379
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::InspectorController):
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::InspectorRuntimeAgent):
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        (WebCore::InspectorRuntimeAgent::setScriptDebugServer):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/WorkerInspectorController.cpp:
+        (WebCore::WorkerInspectorController::WorkerInspectorController):
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype.evalInInspectedWindow):
+        * inspector/front-end/WatchExpressionsSidebarPane.js:
+        (WebInspector.WatchExpressionsSection.prototype.update):
+
+2011-07-18  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91132 and r91135.
+        http://trac.webkit.org/changeset/91132
+        http://trac.webkit.org/changeset/91135
+        https://bugs.webkit.org/show_bug.cgi?id=64681
+
+        Broke GTK and Chromium debug bots (Requested by rniwa on
+        #webkit).
+
+        * accessibility/AXObjectCache.h:
+        * accessibility/AccessibilityMenuList.cpp:
+        * accessibility/AccessibilityMenuList.h:
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        * accessibility/AccessibilityMenuListPopup.h:
+        * accessibility/chromium/AXObjectCacheChromium.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        * accessibility/win/AXObjectCacheWin.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        * dom/SelectElement.cpp:
+        (WebCore::SelectElement::setSelectedIndex):
+        * rendering/RenderMenuList.cpp:
+        (WebCore::RenderMenuList::RenderMenuList):
+        (WebCore::RenderMenuList::setTextFromOption):
+        (WebCore::RenderMenuList::didSetSelectedIndex):
+        * rendering/RenderMenuList.h:
+
+2011-07-17  Luke Macpherson   <macpherson@chromium.org>
+
+        Implement CSSPropertyCursor in CSSStyleApplyProperty
+        https://bugs.webkit.org/show_bug.cgi?id=64432
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests / refectoring only.
+
+        * css/CSSStyleApplyProperty.cpp:
+        Add handler for CSSPropertyCursor.
+        * css/CSSStyleSelector.cpp:
+        Remove current handler of CSSPropertyCursor.
+        * css/CSSStyleSelector.h:
+        Make styleImage and cachedOrPendingFromValue public.
+
+2011-07-16  Simon Fraser  <simon.fraser@apple.com>
+
+        Add code to attempt to align compositing layers to pixel boundaries when page scale changes
+        https://bugs.webkit.org/show_bug.cgi?id=64658
+
+        Reviewed by Dan Bernstein.
+        
+        Implemented a new behavior on GraphicsLayerCA which attempts to keep layers pixel
+        aligned as page scale changes.
+        
+        This requires denoting which layer has the page scale on it (it is assumed to be
+        already aligned), via setAppliesPageScale(). We also now pass a scale and offset
+        down through the GraphicsLayer commits, which are used to map layer bounds to display
+        coordinates for rounding.
+
+        * platform/graphics/GraphicsLayer.h: New flags and getters/setters for pixel alignment,
+        and the layer that is the applier of the scale.
+        (WebCore::GraphicsLayer::setMaintainsPixelAlignment):
+        (WebCore::GraphicsLayer::maintainsPixelAlignment):
+        (WebCore::GraphicsLayer::setAppliesPageScale):
+        (WebCore::GraphicsLayer::appliesPageScale):
+
+        * platform/graphics/GraphicsLayer.cpp:
+        (WebCore::GraphicsLayer::GraphicsLayer): Initialize the new flags.
+        (WebCore::GraphicsLayer::backingScaleFactor): Utility method that calls the client if there is one.
+        (WebCore::GraphicsLayer::pageScaleFactor): Ditto.
+
+        * platform/graphics/GraphicsLayerClient.h:
+        (WebCore::GraphicsLayerClient::backingScaleFactor): Provide default implementation.
+        (WebCore::GraphicsLayerClient::pageScaleFactor): Ditto.
+
+        * platform/graphics/ca/GraphicsLayerCA.h: Pass scale and base-relative offset around
+        to methods that need to update geometry during commit.
+        Some new methods related to pixel alignment.
+        
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::computePositionRelativeToBase): For single-layer commits,
+        we have to compute the base-relative offset, and whether we're under the layer
+        applying the scale by walking up the tree.
+        
+        (WebCore::GraphicsLayerCA::syncCompositingStateForThisLayerOnly): Call
+        computePositionRelativeToBase() to get scaling parameters for the target layer.
+        
+        (WebCore::GraphicsLayerCA::recursiveCommitChanges): Pass flags related to scaling.
+        positionRelativeToBase is an offset relative to the ancestor layer known to be pixel
+        aligned. affectedByPageScale is true for layers which are descendants of the layer
+        which applies the scale.
+        
+        (WebCore::GraphicsLayerCA::commitLayerChangesBeforeSublayers): Pass scale and offset.
+        (WebCore::GraphicsLayerCA::updateGeometry): Call computePixelAlignment() to get
+        pixel-aligned geometry. This only needs to be applied to layers which render content,
+        so re-organize the code to use the unchanged layer geometry for the structural layer,
+        but to apply the adjusted geometry to the m_layer.
+        
+        (WebCore::GraphicsLayerCA::updateStructuralLayer): Pass scale and offset.
+        (WebCore::GraphicsLayerCA::ensureStructuralLayer): Ditto.
+        (WebCore::GraphicsLayerCA::updateLayerDrawsContent): Ditto.
+        (WebCore::GraphicsLayerCA::updateContentsScale): Ditto.
+        (WebCore::GraphicsLayerCA::requiresTiledLayer): Ditto.
+        (WebCore::GraphicsLayerCA::swapFromOrToTiledLayer): Ditto.
+        (WebCore::GraphicsLayerCA::setKeepPixelAligned): When set, dirties flags
+        for properties that need to be recomputed.
+        (WebCore::GraphicsLayerCA::noteChangesForScaleSensitiveProperties):
+        (WebCore::isIntegral):
+        (WebCore::GraphicsLayerCA::computePixelAlignment): Map our bounds to screen
+        scale, round out to an integral rect, then map it back, adding a fudge factor
+        so that CA backing stores don't end up being smaller than we expect because
+        of integer truncation.
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::createGraphicsLayer): Turn on pixel alignment if
+        the compositor says so.
+        (WebCore::RenderLayerBacking::createPrimaryGraphicsLayer): Set the RenderView's
+        layer as the one applying the scale, for the main frame.
+
+        * rendering/RenderLayerCompositor.h: New method.
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::keepLayersPixelAligned): Master switch for
+        pixel alignment. Default to on.
+        (WebCore::RenderLayerCompositor::ensureRootLayer): Give the two root-ish layers
+        a client so they can ask for page scale if necessary.
+
+2011-07-16  Enrica Casucci  <enrica@apple.com>
+
+        REGRESSION: Pressing return in a particular document sends the cursor to the end of the document.
+        https://bugs.webkit.org/show_bug.cgi?id=64140
+        <rdar://problem/9737491>
+
+        Inserting a paragraph separator at a break element, inside an inline, generates redundant markup
+        and moves the selection at the end of the inserted block.
+        The fix consists in detecting that the insertion point is a break element and simply inserting another
+        break element. This solves the problem of the wrong final selection and also produces less redundant
+        markup.
+
+        Reviewed by Simon Fraser.
+
+        Test: editing/inserting/insert-paragraph-separator-at-break.html
+
+        * editing/InsertParagraphSeparatorCommand.cpp:
+        (WebCore::InsertParagraphSeparatorCommand::doApply): Modified logic for insertion at a break
+        element.
+
+2011-07-16  Pratik Solanki  <psolanki@apple.com>
+
+        SubresourceLoader::didReceiveDataArray can crash when calling m_client->didReceiveData()
+        https://bugs.webkit.org/show_bug.cgi?id=64656
+        <rdar://problem/9754425>
+
+        Reviewed by Alexey Proskuryakov.
+
+        * loader/cf/SubresourceLoaderCF.cpp:
+        (WebCore::SubresourceLoader::didReceiveDataArray): Check for m_client before calling
+        m_client->didReceiveData().
+
+2011-07-16  Dinu Jacob  <dinu.jacob@nokia.com>
+
+        [Qt] Compilation fails on disabling TextureMapper
+        https://bugs.webkit.org/show_bug.cgi?id=64408
+
+        Fix compilation error due to API name change in GraphicsLayer
+
+        Reviewed by Noam Rosenthal.
+
+        * platform/graphics/qt/GraphicsLayerQt.cpp:
+        (WebCore::GraphicsLayerQt::setContentsToBackgroundColor):
+        * platform/graphics/qt/GraphicsLayerQt.h:
+
+2011-07-15  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        New WebKitSystemInterface functions for CFNetwork-based loader.
+
+        * WebCore.exp.in:
+        * platform/mac/WebCoreSystemInterface.h:
+        * platform/mac/WebCoreSystemInterface.mm:
+
+2011-07-16  Jessie Berlin  <jberlin@apple.com>
+
+        Work towards determining the cause of frequent crashes due to null frame below
+        ApplicationCacheHost::scheduleLoadFallbackResourceFromApplicationCache.
+        https://bugs.webkit.org/show_bug.cgi?id=62764
+
+        Reviewed by Darin Adler.
+
+        No loads should be going on for a DocumentLoader that has been detached from its frame, but
+        that appears to be what is happening in this bug.
+
+        Add assertions with the hope that someone will run into this while debugging and thereby find
+        a reproducible case.
+
+        * loader/ResourceLoader.cpp:
+        (WebCore::ResourceLoader::willSendRequest):
+        (WebCore::ResourceLoader::didSendData):
+        (WebCore::ResourceLoader::didReceiveResponse):
+        (WebCore::ResourceLoader::didReceiveData):
+        (WebCore::ResourceLoader::didFinishLoading):
+        (WebCore::ResourceLoader::didFail):
+        (WebCore::ResourceLoader::wasBlocked):
+        (WebCore::ResourceLoader::cannotShowURL):
+        (WebCore::ResourceLoader::shouldUseCredentialStorage):
+        (WebCore::ResourceLoader::willCacheResponse):
+
+2011-07-16  Sergey Glazunov  <serg.glazunov@gmail.com>
+
+        DOMWindow::open performs a security check on a wrong window
+        https://bugs.webkit.org/show_bug.cgi?id=64651
+
+        Reviewed by Adam Barth.
+
+        Test: http/tests/security/xss-DENIED-window-open-parent.html
+
+        * page/DOMWindow.cpp:
+        (WebCore::DOMWindow::open):
+
+2011-07-16  Sam Weinig  <sam@webkit.org>
+
+        Attribute selectors don't handle glob namespaces (e.g. *|E)
+        https://bugs.webkit.org/show_bug.cgi?id=64567
+
+        Reviewed by Anders Carlsson.
+
+        Change checking of attribute selectors to match CSS 3 Selectors in
+        the presence of namespaces. This entails changing the algorithm to
+        check each attribute on an element as a match for the attribute selector
+        and taking into account a prefix of *.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::attributeQualifiedNameMatches):
+        Checks if the a particular attributes qualified name matches
+        the attribute selector, taking into account a prefix of *.
+
+        (WebCore::attributeValueMatches):
+        Checks if a particular attribute on an element, matches
+        the attribute selector.
+
+        (WebCore::anyAttributeMatches):
+        Top level attribute check. Checks if any of an elements attributes
+        match the attribute selector.
+        
+        (WebCore::CSSStyleSelector::SelectorChecker::checkOneSelector):
+        Factor out attribute checking code into the above functions.
+
+2011-07-16  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        WinCE build fix. Unreviewed.
+
+        * dom/SelectElement.cpp:
+
+2011-07-16  Kulanthaivel Palanichamy  <kulanthaivel@codeaurora.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVG animation API crashes on SVGAnimateTransform
+        https://bugs.webkit.org/show_bug.cgi?id=64104
+
+        This patch ensures the update in AnimatedTransform list in
+        SVGAnimateTransformElement.cpp is in sync with its wrapper list.
+
+        Test: svg/animations/svgtransform-animation-discrete.html
+
+        * svg/SVGAnimateTransformElement.cpp:
+        (WebCore::animatedTransformListFor):
+        (WebCore::SVGAnimateTransformElement::resetToBaseValue):
+        (WebCore::SVGAnimateTransformElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateTransformElement::applyResultsToTarget):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Fix the build.
+
+        * platform/mac/ScrollbarThemeMac.mm:
+        (WebCore::ScrollbarThemeMac::updateEnabledState):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Another Windows build fix; make this method non-pure virtual.
+
+        * platform/graphics/GraphicsLayerClient.h:
+        (WebCore::GraphicsLayerClient::didCommitChangesForLayer):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Fix build error in 32-bit builds.
+
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::zeroLengthSubpathRect):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Fix Windows build.
+
+        * platform/graphics/win/MediaPlayerPrivateQuickTimeWin.h:
+        (WebCore::MediaPlayerPrivate::backingScaleFactor):
+        (WebCore::MediaPlayerPrivate::pageScaleFactor):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Have GraphicsLayer pull their contentsScale, rather than pushing it onto them
+        https://bugs.webkit.org/show_bug.cgi?id=64643
+
+        Reviewed by Darin Adler.
+
+        RenderLayerBacking would set the contentsScale on GraphicsLayers
+        on creation, and update it when the pageScaleFactor changed. However,
+        RenderLayerBacking doesn't really know what contentsScale is best
+        for a layer, so instead, have GraphicsLayers call back through the
+        GraphicsLayerClient to get the two relevant scale factors, and do
+        their own computation of contentsScale.
+
+        No testable behavior changes.
+
+        * page/Frame.cpp:
+        (WebCore::Frame::pageScaleFactorChanged): No need to pass the scale.
+
+        * platform/graphics/GraphicsLayer.cpp:
+        (WebCore::GraphicsLayer::notePageScaleFactorChangedIncludingDescendants):
+        Recurse through the GraphicsLayer tree, calling pageScaleFactorChanged() on 
+        each layer.
+
+        * platform/graphics/GraphicsLayer.h:
+        (WebCore::GraphicsLayer::pageScaleFactorChanged):
+        Remove contentsScale/setContentsScale
+        
+        * platform/graphics/GraphicsLayerClient.h:
+        Add methods to fetch the backingScaleFactor() and pageScaleFactor().
+        
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::GraphicsLayerCA): m_uncommittedChanges
+        defaults to ContentsScaleChanged so we update contentsScale on
+        the first flush.
+        
+        (WebCore::GraphicsLayerCA::setContentsToBackgroundColor):
+        This was the wrong time to call updateContentsRect() and setupContentsLayer();
+        those should be done at commit time, so moved to updateLayerBackgroundColor().
+        (WebCore::GraphicsLayerCA::recursiveCommitChanges): Note whether we
+        have any changes, and call didCommitChangesForLayer() on the client.
+        (WebCore::GraphicsLayerCA::updateLayerBackgroundColor): Code moved to here.
+        (WebCore::clampedContentsScaleForScale): No longer has any hysteresis
+        on the scale, and now just clamps.
+        (WebCore::GraphicsLayerCA::updateContentsScale): Fetch the scales
+        from the client, and multiply them, then clamp.
+        (WebCore::GraphicsLayerCA::requiresTiledLayer): This now takes
+        contentsScale into account when deciding to use tiled layer,
+        so that zooming in will cause layers to start tiling.
+        (WebCore::GraphicsLayerCA::swapFromOrToTiledLayer): Don't call
+        setContentsScale(), but rather updateContentsScale().
+        (WebCore::GraphicsLayerCA::pageScaleFactorChanged): Set the bits
+        for properties that depend on the scale.
+        (WebCore::GraphicsLayerCA::noteChangesForScaleSensitiveProperties):
+        Note that contentsScale needs to be updated. At some point we might also
+        need to dirty other properties.
+        * platform/graphics/ca/GraphicsLayerCA.h: Moved the m_allowTiledLayer
+        bool for better packing. No need for a m_contentsScale member now.
+        * rendering/RenderLayer.cpp: Removed pageScaleFactorChanged().
+        * rendering/RenderLayer.h: Ditto.
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::createPrimaryGraphicsLayer): No need
+        to push the contents scale.
+        (WebCore::RenderLayerBacking::updateForegroundLayer): Ditto.
+        (WebCore::RenderLayerBacking::updateMaskLayer): Ditto.
+        (WebCore::RenderLayerBacking::pageScaleFactor): GraphicsLayerClient method.
+        (WebCore::RenderLayerBacking::backingScaleFactor): GraphicsLayerClient method.
+        (WebCore::RenderLayerBacking::didCommitChangesForLayer): Send through
+        to the compositor.
+        * rendering/RenderLayerBacking.h: GraphicsLayerClient methods.
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::didFlushChangesForLayer): We'll use
+        this later.
+        (WebCore::RenderLayerCompositor::backingScaleFactor): GraphicsLayerClient method.
+        (WebCore::RenderLayerCompositor::pageScaleFactor): Ditto.
+        (WebCore::RenderLayerCompositor::didCommitChangesForLayer): Ditto.
+        (WebCore::RenderLayerCompositor::ensureRootLayer): No need to push the contents scale.
+        (WebCore::RenderLayerCompositor::pageScaleFactorChanged): Just call notePageScaleFactorChangedIncludingDescendants()
+        on the root GraphicsLayer.
+        * rendering/RenderLayerCompositor.h: Added GraphicsLayerClient methods.
+
+2011-07-15  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        Build fix. Unreviewed.
+
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        (WebCore::AccessibilityMenuListPopup::didUpdateActiveOption):
+        Cast size_t to int for comparison.
+
+2011-07-15  Andy Estes  <aestes@apple.com>
+
+        Rename applicationIsSolarWalk() to applicationIsSolarWalkMac().
+        https://bugs.webkit.org/show_bug.cgi?id=64641
+
+        Reviewed by Brian Weinstein.
+
+        * WebCore.exp.in: Update to new symbol.
+        * platform/RuntimeApplicationChecks.cpp:
+        (WebCore::applicationIsSolarWalkMac): Renamed from applicationIsSolarWalk.
+        * platform/RuntimeApplicationChecks.h: Ditto.
+
+2011-07-15  Mark Rowe  <mrowe@apple.com>
+
+        Fix the build.
+
+        * platform/graphics/GraphicsContext.h:
+        (WebCore::GraphicsContextStateSaver::context): Remove a bogus type qualifier.
+
+2011-07-13  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        Focus and selection events are not fired when a <select>'s selection
+        changes
+        https://bugs.webkit.org/show_bug.cgi?id=64504
+        <rdar://problem/9319881>
+
+        Reviewed by Alice Liu.
+
+        Test: platform/win/accessibility/option-element-selection-and-focus-events.html
+
+        * accessibility/chromium/AXObjectCacheChromium.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        Add new notification type to the section of unhandled notifications.
+
+        * accessibility/AXObjectCache.h:
+        Declare a new notification, AXMenuListItemSelected.
+
+        * accessibility/AccessibilityMenuList.cpp:
+        (WebCore::AccessibilityMenuList::didUpdateActiveOption):
+        Tell our child popup that the active option changed, and post a
+        notification that our value changed.
+
+        * accessibility/AccessibilityMenuList.h:
+        Declare didUpdateActiveOption().
+
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        (WebCore::AccessibilityMenuListPopup::didUpdateActiveOption):
+        Get the child <option> element that is selected, and fire focus and
+        selection events for it.
+
+        * accessibility/AccessibilityMenuListPopup.h:
+        Declare didUpdateActiveOption().
+
+        * accessibility/win/AXObjectCacheWin.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        Map AXMenuListItemSelected -> EVENT_OBJECT_SELECTION.
+
+        * dom/SelectElement.cpp:
+        (WebCore::SelectElement::setSelectedIndex):
+        Pass the newly-selected index.
+
+        * rendering/RenderMenuList.cpp:
+        (WebCore::RenderMenuList::RenderMenuList):
+        Update the initialization list for the renamed m_lastActiveIndex.
+        (WebCore::RenderMenuList::setTextFromOption):
+        A new selection has been made in the popup; call
+        didUpdateActiveOption().
+        (WebCore::RenderMenuList::didSetSelectedIndex):
+        Call didUpdateActiveOption(), passing the index of the newly-selected
+        <option>.
+        (WebCore::RenderMenuList::didUpdateActiveOption):
+        If accessibility is disabled, or if the active option has not changed,
+        return early. Check whether the option index is in the range of list
+        items, and assert that the item at that index is an <option> element.
+        Tell the AccessibilityMenuList for this element that we updated the
+        active option.
+
+        * rendering/RenderMenuList.h:
+        Updated the declaration of didSetSelectedIndex() to take the selected
+        index. Declared didUpdateActiveOption(). Renamed m_lastSelectedIndex to
+        m_lastActiveIndex.
+
+2011-07-13  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        ALT + DOWN arrow key does not open select
+
+        https://bugs.webkit.org/show_bug.cgi?id=14407
+        <rdar://problem/5319507>
+
+        Reviewed by Alexey Proskuryakov.
+
+        No test, because eventSender sends events to the WebView, rather than
+        the popup menu, so the popup isn't closed.
+
+        * WebCore.vcproj/WebCore.vcproj:
+        Add SelectElementWin.cpp to project.
+
+        * dom/SelectElement.cpp:
+        (WebCore::SelectElement::platformHandleKeydownEvent):
+        Moved ARROW_KEYS_POP_MENU code here. Updated to return whether the
+        function has handled the key, or whether the caller needs to process it
+        further.
+        (WebCore::SelectElement::menuListDefaultEventHandler):
+        Allow the platform the first chance at handling the keyboard event.
+
+        * dom/SelectElement.h:
+        Declare platformHandleKeydownEvent().
+        * dom/SelectElementWin.cpp: Added.
+        (WebCore::SelectElement::platformHandleKeyboardEvent):
+        Allow (Shift) F4 and (Ctrl/Shift) Alt/AltGr + Up/Down
+        arrow to show the popup. After the popup is dismissed, call
+        setSelectedIndex(), and report that we handled the event.
+
+        * platform/win/PopupMenuWin.cpp:
+        Declare HIGH_BIT_MASK_SHORT.
+        (WebCore::PopupMenuWin::show):
+        Forward WM_SYSKEYDOWN to the popup's HWND.
+        (WebCore::PopupMenuWin::wndProc):
+        Allow the same shortcuts that show the menu to hide it, matching
+        Firefox.
+
+2011-07-12  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        Ensure that a single select element's child option elements are
+        reported correctly to accessibility clients if the children are
+        changed.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64500
+        <rdar://problem/9773066>
+
+        Reviewed by Beth Dakin.
+
+        Test: platform/win/accessibility/single-select-children-changed.html
+
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        (WebCore::AccessibilityMenuListPopup::addChildren):
+        Remove a comment about WML, which we no longer support.
+        (WebCore::AccessibilityMenuListPopup::childrenChanged):
+        Don't just remove children that were detached - this will miss childen
+        that were dynamically added. Clear the children and re-add them.
+
+2011-07-15  Rob Buis  <rbuis@rim.com>
+
+        Stroking of zero-length paths in SVG should change according to erratum
+        https://bugs.webkit.org/show_bug.cgi?id=18356
+
+        Reviewed by Nikolas Zimmermann.
+
+        Ensure rendering of zero-length paths with stroke-linecap=square works by
+        creating the square rectangle manually.
+
+        Tests: svg/W3C-SVG-1.1-SE/painting-control-04-f.svg
+               svg/custom/zero-path-square-cap-rendering.svg
+
+        * platform/graphics/GraphicsContext.h:
+        (WebCore::GraphicsContextStateSaver::context):
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::strokeContains):
+        (WebCore::RenderSVGPath::shouldStrokeZeroLengthSubpath):
+        (WebCore::RenderSVGPath::zeroLengthSubpathRect):
+        (WebCore::RenderSVGPath::setupSquareCapPath):
+        (WebCore::RenderSVGPath::setupNonScalingStrokePath):
+        (WebCore::RenderSVGPath::fillAndStrokePath):
+        (WebCore::RenderSVGPath::updateCachedBoundaries):
+        * rendering/svg/RenderSVGPath.h:
+
+2011-06-27  Adrienne Walker  <enne@google.com>
+
+        Reviewed by Simon Fraser.
+
+        Overlap map for compositing needs to consider clipping
+        https://bugs.webkit.org/show_bug.cgi?id=63493
+
+        Test: compositing/layer-creation/overlap-clipping.html
+
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::addToOverlapMap):
+        * rendering/RenderLayerCompositor.h:
+
+2011-07-15  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r90592.
+        http://trac.webkit.org/changeset/90592
+        https://bugs.webkit.org/show_bug.cgi?id=64627
+
+        Causes crashes with the web audio async decoding API
+        (Requested by jamesr on #webkit).
+
+        * html/canvas/ArrayBuffer.cpp:
+        (WebCore::ArrayBuffer::~ArrayBuffer):
+        (WebCore::ArrayBuffer::tryAllocate):
+        * manual-tests/array-buffer-memory.html: Removed.
+
+2011-07-15  Kenneth Russell  <kbr@google.com>
+
+        Don't restore WebGL context if it was guilty of a graphics reset
+        https://bugs.webkit.org/show_bug.cgi?id=64497
+
+        Reviewed by Stephen White.
+
+        Use getGraphicsResetStatusARB already defined in Extensions3D to
+        determine why the context was lost, and respond to guilty context
+        notifications by forbidding restoration of the context.
+
+        It isn't currently possible to write an automated test for this.
+        We might consider extending the WEBKIT_lose_context extension to
+        allow a reason to be provided why the context was lost. It was
+        tested manually in Chromium on Windows and Linux with some test
+        cases that provoke actual graphics card resets.
+
+        * html/canvas/WebGLRenderingContext.cpp:
+        (WebCore::WebGLRenderingContext::WebGLRenderingContextRestoreTimer::fired):
+        (WebCore::WebGLRenderingContext::forceLostContext):
+        (WebCore::WebGLRenderingContext::maybeRestoreContext):
+        * html/canvas/WebGLRenderingContext.h:
+
+2011-07-15  Chris Marrin  <cmarrin@apple.com>
+
+        Move TransformState to platform/graphics and give it the option to transform just a FloatQuad
+        https://bugs.webkit.org/show_bug.cgi?id=64542
+
+        Reviewed by Simon Fraser.
+
+        This is to make it possible to use TransformState in some GraphicsLayer work. HitTestingTransformState
+        was split out and left in rendering since it's not needed in the platform code. Also added a FIXME
+        because HitTestingTransformState should eventually be replaced by TransformState.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * platform/graphics/transforms/TransformState.cpp: Copied from Source/WebCore/rendering/TransformState.cpp.
+        (WebCore::TransformState::move):
+        (WebCore::TransformState::flattenWithTransform):
+        * platform/graphics/transforms/TransformState.h: Copied from Source/WebCore/rendering/TransformState.h.
+        (WebCore::TransformState::TransformState):
+        (WebCore::TransformState::setQuad):
+        * rendering/HitTestingTransformState.cpp: Copied from Source/WebCore/rendering/TransformState.cpp.
+        * rendering/HitTestingTransformState.h: Copied from Source/WebCore/rendering/TransformState.h.
+        * rendering/RenderLayer.cpp:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::localToContainerQuad):
+        * rendering/RenderingAllInOne.cpp:
+        * rendering/TransformState.cpp: Removed.
+        * rendering/TransformState.h: Removed.
+
+2011-07-15  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        Minor changes needed to keep the compiler happy.
+
+        No new tests because no change in functionality.
+
+        * platform/network/cf/FormDataStreamCFNet.cpp:
+        * platform/network/cf/ResourceErrorCF.cpp:
+        (WebCore::ResourceError::platformCopy):
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::WebCoreSynchronousLoaderClient::willSendRequest):
+        * platform/network/cf/ResourceResponseCFNet.cpp:
+        (WebCore::toTimeT):
+
+2011-07-15  Dan Bernstein  <mitz@apple.com>
+
+        REGRESSION: Mouse cursor doesn’t hide when full screen video HUD hides
+        https://bugs.webkit.org/show_bug.cgi?id=64615
+
+        Reviewed by Anders Carlsson.
+
+        * html/shadow/MediaControlRootElement.cpp:
+        (WebCore::MediaControlRootElement::enteredFullscreen): Hide the mouse cursor immediately when
+        entering full screen.
+        (WebCore::MediaControlRootElement::hideFullscreenControlsTimerFired): Hide the mouse cursor when
+        hiding the HUD.
+        * loader/EmptyClients.h:
+        (WebCore::EmptyChromeClient::setCursorHiddenUntilMouseMoves): Added empty implementation.
+        * page/Chrome.cpp:
+        (WebCore::Chrome::setCursorHiddenUntilMouseMoves): Added. Calls through to the client.
+        * page/Chrome.h:
+        * page/ChromeClient.h:
+        * platform/HostWindow.h:
+
+2011-07-14  Gavin Barraclough  <barraclough@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=64250
+        Global strict mode function leaking global object as "this".
+
+        Reviewed by Oliver Hunt.
+
+        * bindings/js/JSMainThreadExecState.h:
+        (WebCore::JSMainThreadExecState::call):
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateHeader):
+            - Change call to pass DOM Window shell, instead of the global varaible object.
+
+2011-07-15  Brian Salomon  <bsalomon@google.com>
+
+        [SKIA] Must make skia's GL context current before drawing in GraphicsContext::clearRect
+        https://bugs.webkit.org/show_bug.cgi?id=64612
+
+        Reviewed by Stephen White.
+
+        Tested by compositing/shadows/shadow-drawing.html
+
+        * platform/graphics/skia/GraphicsContextSkia.cpp:
+        (WebCore::GraphicsContext::clearRect):
+
+2011-07-15  Ian Henderson  <ianh@apple.com>
+
+        Avoid rounded rect corner-drawing overhead if no corners are visible
+        https://bugs.webkit.org/show_bug.cgi?id=64584
+
+        Reviewed by Simon Fraser.
+
+        No new tests, rendering is visually identical.
+
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::paintBoxDecorations): Pass PaintInfo into
+        paintBorder.
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintBoxDecorations): Ditto.
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::unroundClippedCorners):
+        (WebCore::RenderBoxModelObject::paintBorder):
+        Any invisible corner may be replaced with a corner of radius zero, as
+        long as the stroke style is solid.  Change the GraphicsContext
+        parameter into a PaintInfo parameter so we can get the rect to be
+        drawn.
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderFieldset.cpp:
+        (WebCore::RenderFieldset::paintBoxDecorations): Pass PaintInfo into
+        paintBorder.
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::paintBoxDecorations): Ditto.
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::paintBoxDecorations): Ditto.
+
+2011-07-15  Jeff Miller  <jeffm@apple.com>
+
+        Add UserAgentStyleSheetsData.cpp to WebCore.vcproj
+        https://bugs.webkit.org/show_bug.cgi?id=64609
+        
+        Add UserAgentStyleSheetsData.cpp to WebCore.vcproj for convenient access, but don't compile it.
+        This matches what we do with other generated DerivedSources.
+
+        Reviewed by Brian Weinstein.
+        
+        No new tests, just adding a file.
+
+        * WebCore.vcproj/WebCore.vcproj: Add UserAgentStyleSheetsData.cpp.
+
+2011-07-15  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        No new tests because no change in functionality and option is not enabled on Mac.
+
+        * platform/network/cf/AuthenticationCF.h: Just use AuthenticationMac.h instead of having
+        Mac-specific declarations here.
+        * platform/network/cf/CredentialStorageCFNet.cpp:
+        * platform/network/mac/AuthenticationMac.h:
+
+2011-07-15  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        Get LoaderRunLoop to work on Mac when USE(CFNETWORK) is enabled. Although we could use the
+        main run loop, it's better to have a separate thread handling the loads so that it can work
+        in parallel to the main thread. This is similar to what NSURLConnection does for us
+        internally when we use the NS APIs.
+
+        No new tests because no change in functionality and option is not enabled on Mac.
+
+        * platform/network/cf/LoaderRunLoopCF.cpp:
+        (WebCore::runLoaderThread): Create an autorelease pool for objc code that might be called in
+        the run loop.
+        (WebCore::loaderRunLoop):
+        * platform/network/cf/LoaderRunLoopCF.h:
+
+2011-07-15  Xiaomei Ji  <xji@chromium.org>
+
+        --webkit-visual-word crash on mixed editability
+        https://bugs.webkit.org/show_bug.cgi?id=61978
+
+        --webkit-visual-word crashes (VisiblePosition.getInlineBoxAndOffset could return null box)
+        https://bugs.webkit.org/show_bug.cgi?id=62814
+
+        Reviewed by Ryosuke Niwa.
+
+        Replace previousWordPosition/nextWordPosition with previousBoundary/nextBoundary which do
+        not honor editable bounary. Honor editable boundary as the last stage of leftWordPosition
+        and rightWordPosition.
+
+        Check previousBoundary/nextBoundary against NULL.  Have a static function to encapsulate the
+        usage of getInlineBoxAndOffset and check the visible position is not NULL before passing to 
+        getInlineBoxAndOffset. Check the box returned from getInlineBoxAndOffset is not NULL before
+        accessing.
+
+        Test: editing/selection/move-by-word-visually-null-box.html
+
+        * editing/visible_units.cpp:
+        (WebCore::positionIsInBox):
+        (WebCore::previousWordBreakInBoxInsideBlockWithSameDirectionality):
+        (WebCore::lastWordBreakInBox):
+        (WebCore::positionIsVisuallyOrderedInBoxInBlockWithDifferentDirectionality):
+        (WebCore::nextWordBreakInBoxInsideBlockWithDifferentDirectionality):
+        (WebCore::positionIsInsideBox):
+        (WebCore::leftWordPositionAcrossBoundary):
+        (WebCore::rightWordPositionAcrossBoundary):
+        (WebCore::leftWordPosition):
+        (WebCore::rightWordPosition):
+
+2011-07-15  Pratik Solanki  <psolanki@apple.com>
+
+        Remove unncessary creation of connectionProperties dictionary
+        https://bugs.webkit.org/show_bug.cgi?id=63958
+
+        Reviewed by Alexey Proskuryakov.
+
+        No new tests because no change in functionality.
+
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::ResourceHandle::loadResourceSynchronously):
+
+2011-07-15  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Focusing on another node while editing CSS property does not update styles
+        https://bugs.webkit.org/show_bug.cgi?id=64283
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/styles/styles-change-node-while-editing.html
+
+        * inspector/front-end/CSSStyleModel.js:
+        (WebInspector.CSSProperty.prototype.setText):
+        (WebInspector.CSSProperty.prototype.setText.callback):
+        * inspector/front-end/DOMAgent.js:
+        (WebInspector.DOMAgent.prototype._inlineStyleInvalidated):
+        (WebInspector.DOMDispatcher.prototype.inlineStyleInvalidated):
+        * inspector/front-end/ElementsPanel.js:
+        (WebInspector.ElementsPanel):
+        (WebInspector.ElementsPanel.prototype._attributesUpdated):
+        (WebInspector.ElementsPanel.prototype.updateStyles):
+        * inspector/front-end/MetricsSidebarPane.js:
+        (WebInspector.MetricsSidebarPane):
+        (WebInspector.MetricsSidebarPane.prototype.update):
+        (WebInspector.MetricsSidebarPane.prototype._innerUpdate.callback):
+        (WebInspector.MetricsSidebarPane.prototype._innerUpdate.inlineStyleCallback):
+        (WebInspector.MetricsSidebarPane.prototype._innerUpdate):
+        (WebInspector.MetricsSidebarPane.prototype._styleSheetChanged):
+        (WebInspector.MetricsSidebarPane.prototype._attributesUpdated):
+        (WebInspector.MetricsSidebarPane.prototype.startEditing):
+        (WebInspector.MetricsSidebarPane.prototype.editingEnded):
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane):
+        (WebInspector.StylesSidebarPane.prototype.update):
+        (WebInspector.StylesSidebarPane.prototype._innerUpdate.stylesCallback):
+        (WebInspector.StylesSidebarPane.prototype._innerUpdate.computedStyleCallback):
+        (WebInspector.StylesSidebarPane.prototype._innerUpdate):
+        (WebInspector.StylesSidebarPane.prototype._styleSheetChanged):
+        (WebInspector.StylesSidebarPane.prototype._attributesUpdated):
+        (WebInspector.StylesSidebarPane.prototype._refreshUpdate):
+        (WebInspector.StylesSidebarPane.prototype._rebuildUpdate):
+        (WebInspector.StylesSidebarPane.prototype._nodeStylesUpdatedForTest):
+        (WebInspector.StylesSidebarPane.prototype._toggleElementStatePane):
+        (WebInspector.StylesSidebarPane.prototype._createElementStatePane.clickListener):
+        (WebInspector.StylePropertyTreeElement.prototype):
+        (WebInspector.StylePropertyTreeElement.prototype.event):
+        (WebInspector.StylePropertyTreeElement.prototype.element.userInput.previousContent.context.moveDirection):
+        (WebInspector.StylePropertyTreeElement.prototype.styleText.updateInterface.majorChange.isRevert):
+
+2011-07-15  Mike Reed  <reed@google.com>
+
+        [skia] remove legacy draw-text-as-paths code, as skia now draws all text as text
+        https://bugs.webkit.org/show_bug.cgi?id=64368
+
+        Reviewed by James Robinson.
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        * platform/graphics/chromium/FontPlatformDataChromiumWin.cpp:
+        (WebCore::FontPlatformData::RefCountedHFONT::~RefCountedHFONT):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::skiaDrawText):
+        (WebCore::setupPaintForFont):
+        (WebCore::paintSkiaText):
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-07-15  Piroska András  <Piroska.Andras@stud.u-szeged.hu>
+
+        Pixel difference in FEMorphology effect
+        https://bugs.webkit.org/show_bug.cgi?id=63930
+
+        Reviewed by Zoltan Herczeg.
+
+        Using short-circuit evaluation in the setFilterEffectAttribute function
+        was wrong. We should call both setRadius functions and evaluate the
+        changes separately.
+
+        * svg/SVGFEMorphologyElement.cpp:
+        (WebCore::SVGFEMorphologyElement::setFilterEffectAttribute):
+
+2011-07-15  Jeff Miller  <jeffm@apple.com>
+
+        Fullscreen content doesn't use fullscreen controller on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=64540
+        <rdar://problem/9510455>
+
+        Reviewed by Darin Adler.
+
+        RenderThemeWin needs to override extraFullScreenStyleSheet() to return
+        the fullscreenQuickTime stylesheet.
+
+        Test added to fullscreen/video-controls-override.html.
+
+        * rendering/RenderThemeWin.cpp:
+        (WebCore::RenderThemeWin::extraFullScreenStyleSheet): Added.
+        * rendering/RenderThemeWin.h: Override extraFullScreenStyleSheet().
+
+2011-07-15  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Not reviewed. Fix build failure introduced in r91061.
+
+        * page/Console.cpp:
+        (WebCore::Console::markTimeline): Remove argument name from unused parameter.
+
+2011-07-15  Kenneth Rohde Christiansen  <kenneth@webkit.org>
+
+        Upstream QtWebKit/N9 changes related to visibleContentRect
+        https://bugs.webkit.org/show_bug.cgi?id=64589
+
+        Reviewed by Simon Hausmann.
+
+        Rename setActualVisibleContentRect to setFixedVisibleContentRect
+        as that makes it more obvious that it is an override. It is also
+        consistent with the setFixedLayout which is often used in
+        conjunction with it.
+
+        Make visibleContentRect return the fixed value if set, and remove
+        all calls to actualVisibleContentRect.
+
+        Also updated the documentation.
+
+        This is similar to what we have on our QtWebKit/N9 branch and is
+        pretty well tested.
+
+        * platform/ScrollView.cpp:
+        (WebCore::ScrollView::visibleContentRect):
+        If a fixed visibleContentRect is set, return that.
+        Remove the code returning the contents size when in
+        paintsEntireContents mode as that is wrong and already
+        ifdeffed out for EFL.
+        (WebCore::ScrollView::setScrollPosition):
+        Do not try to be smart and update the fixed visibleContentsRect
+        automatically, as the embedder might ignore the scroll request
+        for various reasons.
+        * platform/ScrollView.h:
+        (WebCore::ScrollView::setFixedVisibleContentRect):
+        (WebCore::ScrollView::fixedVisibleContentRect):
+
+2011-07-15  Mike West  <mkwst@chromium.org>
+
+        Web Inspector: Rename console.markTimeline() to console.timeStamp() for Firebug compatibility.
+        https://bugs.webkit.org/show_bug.cgi?id=63317
+
+        Reviewed by Pavel Feldman.
+
+        Test: inspector/timeline/timeline-time-stamp.html
+
+        * inspector/InspectorConsoleInstrumentation.h:
+        (WebCore::InspectorInstrumentation::consoleTimeStamp):
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::consoleTimeStampImpl):
+        * inspector/InspectorInstrumentation.h:
+        * inspector/InspectorTimelineAgent.cpp:
+        (WebCore::InspectorTimelineAgent::didTimeStamp):
+        * inspector/InspectorTimelineAgent.h:
+        * inspector/TimelineRecordFactory.cpp:
+        (WebCore::TimelineRecordFactory::createTimeStampData):
+        * inspector/TimelineRecordFactory.h:
+        * inspector/front-end/TimelineAgent.js:
+        * inspector/front-end/TimelineOverviewPane.js:
+        (WebInspector.TimelineOverviewPane.prototype.update.markPercentagesForRecord):
+        (WebInspector.TimelineOverviewPane.prototype.update):
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel):
+        (WebInspector.TimelinePanel.prototype.get _recordStyles):
+        (WebInspector.TimelinePanel.prototype._updateEventDividers):
+        (WebInspector.TimelinePanel.prototype._createEventDivider):
+        (WebInspector.TimelinePanel.prototype._innerAddRecordToTimeline):
+        (WebInspector.TimelinePanel.prototype._clearPanel):
+        (WebInspector.TimelinePanel.FormattedRecord.prototype._getRecordDetails):
+        * page/Console.cpp:
+        (WebCore::Console::markTimeline):
+        (WebCore::Console::timeStamp):
+        * page/Console.h:
+        * page/Console.idl:
+
+2011-07-15  Jonathan Dong  <jonathan.dong@torchmobile.com.cn>
+
+        LocalStorage: Changed the value type of ItemTable from TEXT to BLOB
+        to avoid string truncation.
+        This patch will also convert the exsisting ItemTable and perform
+        the DATA MIGRATION job.
+        https://bugs.webkit.org/show_bug.cgi?id=58762
+
+        Reviewed by Jeremy Orlow.
+
+        Tests: manual-tests/localstorage-value-truncation.html
+
+        * manual-tests/localstorage-value-truncation.html: Added.
+        Demostrate the testcase shown in bug 58762.
+        * platform/sql/SQLiteStatement.cpp:
+        (WebCore::SQLiteStatement::isColumnDeclearedAsBlob):
+        Test if the pre-defined type of column is BLOB.
+        * platform/sql/SQLiteStatement.h:
+        * storage/StorageAreaSync.cpp:
+        Change the localStorage value type from Text to BLOB to avoid the
+        value string truncation at \x00.
+        (WebCore::StorageAreaSync::openDatabase):
+        Change the database structure, use BLOB to replace the TEXT type of
+        value segment in ItemTable.
+        (WebCore::StorageAreaSync::migrateItemTableIfNeeded):
+        Migrate the ItemTable if the pre-defined type of value is TEXT.
+        (WebCore::StorageAreaSync::performImport):
+        Use getColumnBlobAsString() to import the BLOB value.
+        (WebCore::StorageAreaSync::sync):
+        Use bindBlob() to bind value string to the SQLiteStatement for the
+        database execution.
+        * storage/StorageAreaSync.h:
+
+2011-07-15  Kentaro Hara  <haraken@google.com>
+
+        Clear the content of a search input form when 'Escape' is pressed.
+        https://bugs.webkit.org/show_bug.cgi?id=51897
+
+        This change added handleKeydownEvent() to a search input form,
+        which clears the form and triggers a 'search' event when 'Escape' is pressed.
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/forms/input-search-press-escape-key.html
+
+        * html/SearchInputType.cpp:
+        (WebCore::SearchInputType::handleKeydownEvent):
+        * html/SearchInputType.h:
+
+2011-07-15  Alexandru Chiculita  <achicu@adobe.com>
+
+        Move useRepaintBounds from RenderBlock::layoutRunsAndFloats to LineLayoutState
+        https://bugs.webkit.org/show_bug.cgi?id=64360
+
+        Reviewed by Hajime Morita.
+
+        No new tests needed because the patch is just a refactor.
+
+        * rendering/RenderBlock.h:
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::LineLayoutState::LineLayoutState):
+        (WebCore::LineLayoutState::usesRepaintBounds):
+        (WebCore::LineLayoutState::setRepaintRange):
+        (WebCore::LineLayoutState::updateRepaintRangeFromBox):
+        (WebCore::RenderBlock::layoutRunsAndFloats):
+        (WebCore::RenderBlock::determineStartPosition):
+
+2011-07-14  MORITA Hajime  <morrita@google.com>
+
+        ExceptionCodePlaceholder should have its own ExceptionCodePlaceholder.cpp file
+        https://bugs.webkit.org/show_bug.cgi?id=64503
+
+        Reviewed by Darin Adler.
+
+        No new tests. Just a file reorg.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/DOMAllInOne.cpp:
+        * dom/ExceptionCodePlaceholder.cpp: Added.
+        (WebCore::NoExceptionAssertionChecker::NoExceptionAssertionChecker):
+        (WebCore::NoExceptionAssertionChecker::~NoExceptionAssertionChecker):
+        * dom/ExceptionCodePlaceholder.h: Removed NoExceptionAssertionChecker::m_function, which is loonger used.
+
+2011-07-14  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from WebGL
+        https://bugs.webkit.org/show_bug.cgi?id=64549
+
+        Reviewed by Kenneth Russell.
+
+        * html/canvas/WebGLRenderingContext.idl:
+
+2011-07-14  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Introduce pywebsocket-0.6b2
+        https://bugs.webkit.org/show_bug.cgi?id=64534
+
+        Reviewed by Kent Tamura.
+
+        pywebsocket now accepts "Sec-WebSocket-Version: 8" as required in hybi-10 specification.
+
+        No new functionality is added, thus no new tests. Existing WebSocket tests should keep passing.
+
+        * websockets/WebSocketHandshake.cpp:
+        (WebCore::WebSocketHandshake::clientHandshakeMessage):
+        (WebCore::WebSocketHandshake::clientHandshakeRequest):
+
+2011-07-14  SravanKumar S  <sravan.ken@gmail.com>
+
+        Replaced isChecked() with shouldAppearChecked() in HTMLInputElement.cpp along with all the corresponding function calls.
+        https://bugs.webkit.org/show_bug.cgi?id=54476
+
+        Reviewed by Darin Adler.
+
+        No new tests, since existing fast/dom/HTMLInputElement/checked-pseudo-selector.html verifies the patch.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::isChecked):
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::canShareStyleWithControl):
+        (WebCore::CSSStyleSelector::SelectorChecker::checkOneSelector):
+        * dom/CheckedRadioButtons.cpp:
+        (WebCore::CheckedRadioButtons::removeButton):
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::shouldAppearChecked):
+        * html/HTMLInputElement.h: Removed virtual declaration from shouldAppearChecked().
+        * rendering/RenderTheme.cpp:
+        (WebCore::RenderTheme::isChecked):
+
+2011-07-14  Kenichi Ishibashi  <bashi@chromium.org>
+
+        <input form="x"> should not associate the input with any forms when there is no  form with id="x"
+        https://bugs.webkit.org/show_bug.cgi?id=64509
+
+        Don't set form owner when a form associated element has the form attribute but there is no such form element.
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/forms/form-attribute-nonexistence-form-id.html
+
+        * dom/Document.cpp:
+        (WebCore::Document::resetFormElementsOwner): Removed the argument which is no longer needed.
+        * dom/Document.h: Ditto.
+        * html/FormAssociatedElement.cpp:
+        (WebCore::FormAssociatedElement::insertedIntoTree): Resets m_form whenever the element has the form attribute.
+        (WebCore::FormAssociatedElement::resetFormOwner): Don't set m_form when there is no form element which has the given id.
+        (WebCore::FormAssociatedElement::formAttributeChanged): Removed the argument of resetFormOwner().
+        * html/FormAssociatedElement.h: Ditto.
+        * html/HTMLFormElement.cpp: Ditto.
+        (WebCore::HTMLFormElement::insertedIntoDocument):
+        (WebCore::HTMLFormElement::removedFromDocument):
+
+2011-07-14  Kent Tamura  <tkent@chromium.org>
+
+        REGRESSION (r90809): Setting a checkbox's checked property, doesn't render as checked until app window loses focus
+        https://bugs.webkit.org/show_bug.cgi?id=64537
+
+        Reviewed by Darin Adler.
+
+        We stopped to call updateCheckedRadioButtons() for checkboxes
+        since r90809, but we need to call RenderTheme::stateChanged(),
+        which was in updateCheckedRadioButtons(), for checkboxes.
+
+        Tests: fast/forms/checkbox-appearance-change-by-checked-expected.html
+               fast/forms/checkbox-appearance-change-by-checked.html
+
+        * html/HTMLInputElement.cpp: Move the RenderTheme::stateChanged() call
+        from updateCheckedRadioButtons() to setChecked().
+        (WebCore::HTMLInputElement::updateCheckedRadioButtons):
+        (WebCore::HTMLInputElement::setChecked):
+
+2011-07-14  Adam Barth  <abarth@webkit.org>
+
+        The beforeload event allows tracking URI changes in a frame
+        https://bugs.webkit.org/show_bug.cgi?id=64482
+
+        Reviewed by Nate Chapin.
+
+        Tests: http/tests/security/beforeload-iframe-client-redirect.html
+               http/tests/security/beforeload-iframe-server-redirect.html
+
+        Only dispatch the beforeload event for a frame if we haven't yet
+        committed our first real load.  The URL that we send to our parent will
+        be the same URL the parent seens in the src attribute.
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadWithDocumentLoader):
+
+2011-07-14  Dan Bernstein  <mitz@apple.com>
+
+        LLVM Compiler build fix.
+
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::ApplyPropertyComputeLength::applyValue):
+
+2011-07-14  Darin Adler  <darin@apple.com>
+
+        [Mac] Use [NSCursor operationNotAllowedCursor] for CSS no-drop as well as CSS not-allowed
+        https://bugs.webkit.org/show_bug.cgi?id=64570
+
+        Reviewed by Alexey Proskuryakov.
+
+        Mac OS X documentation and usage makes it clear that this cursor is usually used for no-drop,
+        and that it's also reasonable to use it for not-allowed.
+
+        * platform/mac/CursorMac.mm:
+        (WebCore::Cursor::ensurePlatformCursor): Use [NSCursor operationNotAllowedCursor] for
+        Cursor::NoDrop.
+
+2011-07-14  Luke Macpherson   <macpherson@chromium.org>
+
+        Reviewed by Dimitri Glazkov.
+
+        Introduce templated compute length class in CSSStyleApplyProperty, and use to handle several CSS properties.
+        https://bugs.webkit.org/show_bug.cgi?id=62957
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::computeLength):
+        Add computeLength function that returns unsigned short.
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::ApplyPropertyComputeLength::ApplyPropertyComputeLength):
+        Added class to handle computeLength based properties.
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        Initialize ApplyPropertyComputeLength for appropriate properties.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::useSVGZoomRules):
+        Make this a public member function instead of a private static function.
+        (WebCore::CSSStyleSelector::applyProperty):
+        Removed code now implemented in CSSStyleApplyProperty.
+        (WebCore::CSSStyleSelector::setFontSize):
+        Use new useSVGZoomRules function.
+        * css/CSSStyleSelector.h:
+        Add interface for useSVGZoomRules.
+
+2011-07-14  Antti Koivisto  <antti@apple.com>
+
+        REGRESSION: Should not dispatch didFirstVisuallyNonEmptyLayout for the initial empty document
+        https://bugs.webkit.org/show_bug.cgi?id=64557
+
+        Reviewed by Kenneth Rohde Christiansen.
+
+        Avoid sending didFirstVisuallyNonEmptyLayout for the initial empty document of the frame. The
+        clients may not expect it and it doesn't make much sense in any case.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::performPostLayoutTasks):
+
+2011-07-14  Jeffrey Pfau  <jpfau@apple.com>
+
+        Character reference parser for new XML parser
+        https://bugs.webkit.org/show_bug.cgi?id=64398
+
+        Reviewed by Adam Barth.
+
+        Refactored out the HTML entity parser and added a common template for parsing character references.
+
+        * WebCore.xcodeproj/project.pbxproj:
+        * html/parser/HTMLEntityParser.cpp:
+        (WebCore::consumeHTMLEntity):
+        * xml/parser/CharacterReferenceParserInlineMethods.h: Copied from Source/WebCore/html/parser/HTMLEntityParser.cpp.
+        (WebCore::isHexDigit):
+        (WebCore::unconsumeCharacters):
+        (WebCore::consumeCharacterReference):
+        * xml/parser/XMLCharacterReferenceParser.cpp: Added.
+        (WebCore::consumeXMLCharacterReference):
+        * xml/parser/XMLCharacterReferenceParser.h: Added.
+
+2011-07-14  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: panel switching is too slow.
+        https://bugs.webkit.org/show_bug.cgi?id=60959
+
+        * inspector/front-end/inspector.css:
+        (.panel):
+        (.panel.visible):
+
+2011-07-14  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: remove more unused CSS from inspector.css
+        https://bugs.webkit.org/show_bug.cgi?id=64529
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/inspector.css:
+
+2011-07-14  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Move subtreeHasChanged from RenderTextControl to HTMLTextFormControlElement
+        https://bugs.webkit.org/show_bug.cgi?id=64476
+
+        Reviewed by Kent Tamura.
+
+        Moved subtreeHasChanged from RenderTextControl, RenderTextControlSingleLine, and
+        RenderTextControlMultiLine to HTMLTextFormControlElement, HTMLInputElement, and
+        HTMLTextAreaElement. Also moved m_searchEventTimer and related functions from
+        RenderTextSingleLine to SearchInputType.
+
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::subtreeHasChanged): Moved from RenderTextControlSingleLine.
+        (WebCore::HTMLInputElement::onSearch): Calls stopSearchEventTimer.
+        * html/HTMLInputElement.h:
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::subtreeHasChanged): Moved from RenderTextMultiLine.
+        * html/HTMLTextAreaElement.h:
+        * html/HTMLTextFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::defaultEventHandler): Calls subtreeHasChanged.
+        (WebCore::HTMLTextFormControlElement::subtreeHasChanged): Added; calls respondToChangeByUser.
+        * html/HTMLTextFormControlElement.h:
+        * html/SearchInputType.cpp:
+        (WebCore::SearchInputType::SearchInputType): Initializes m_searchEventTimer.
+        (WebCore::SearchInputType::startSearchEventTimer): Moved from RenderTextControlSingleLine.
+        (WebCore::SearchInputType::stopSearchEventTimer): Ditto.
+        (WebCore::SearchInputType::searchEventTimerFired): Ditto.
+        * html/SearchInputType.h:
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::handleBeforeTextInsertedEvent): Updated comment.
+        * rendering/RenderTextControl.cpp:
+        * rendering/RenderTextControl.h:
+        (WebCore::RenderTextControl::respondToChangeByUser): Renamed from subtreeHasChanged.
+        * rendering/RenderTextControlMultiLine.cpp:
+        * rendering/RenderTextControlMultiLine.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::RenderTextControlSingleLine): No longer initializes
+        m_searchEventTimer.
+        * rendering/RenderTextControlSingleLine.h:
+
+2011-07-14  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Move XML errors handling out from XMLDocumentParser (refactoring).
+        https://bugs.webkit.org/show_bug.cgi?id=64305
+
+        XML errors handling logic is moved out from XMLDocumentParser to allow using it for XSLT error handling as well.
+
+        Reviewed by Adam Barth.
+
+        No tests needed as there is no new functionality added.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * xml/XMLErrors.cpp: Added.
+        (WebCore::XMLErrors::XMLErrors):
+        (WebCore::XMLErrors::handleError):
+        (WebCore::XMLErrors::appendErrorMessage):
+        (WebCore::createXHTMLParserErrorHeader):
+        (WebCore::XMLErrors::insertErrorMessageBlock):
+        * xml/XMLErrors.h: Added.
+        * xml/parser/XMLDocumentParser.cpp:
+        (WebCore::XMLDocumentParser::pushCurrentNode):
+        (WebCore::XMLDocumentParser::handleError):
+        (WebCore::XMLDocumentParser::insertErrorMessageBlock):
+        * xml/parser/XMLDocumentParser.h:
+        * xml/parser/XMLDocumentParserLibxml2.cpp:
+        (WebCore::PendingCallbacks::appendErrorCallback):
+        (WebCore::XMLDocumentParser::XMLDocumentParser):
+        (WebCore::XMLDocumentParser::doWrite):
+        (WebCore::XMLDocumentParser::error):
+        (WebCore::warningHandler):
+        (WebCore::fatalErrorHandler):
+        (WebCore::normalErrorHandler):
+        * xml/parser/XMLDocumentParserQt.cpp:
+        (WebCore::XMLDocumentParser::XMLDocumentParser):
+        (WebCore::XMLDocumentParser::doWrite):
+        (WebCore::XMLDocumentParser::doEnd):
+        (WebCore::XMLDocumentParser::parse):
+        (WebCore::XMLDocumentParser::parseStartElement):
+        (WebCore::XMLDocumentParser::parseDtd):
+
+2011-07-14  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: InspectorResourceAgent should generate unique identifier and save cachedResource for resources from memory cache.
+        https://bugs.webkit.org/show_bug.cgi?id=64356
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::didLoadResourceFromMemoryCacheImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::didLoadResourceFromMemoryCache):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::didLoadResourceFromMemoryCache):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkManager.prototype.requestContent):
+        (WebInspector.NetworkDispatcher):
+        (WebInspector.NetworkDispatcher.prototype.resourceLoadedFromMemoryCache):
+        (WebInspector.NetworkDispatcher.prototype._appendRedirect):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._frameNavigated):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadedResourceFromMemoryCache):
+        * loader/FrameLoader.h:
+
+2011-07-14  Tim Horton  <timothy_horton@apple.com>
+
+        Clear SVGElementInstance's children immediately upon detachment
+        https://bugs.webkit.org/show_bug.cgi?id=63739
+        <rdar://problem/9705708>
+
+        Reviewed by Nikolas Zimmermann.
+
+        In addition to clearing the instance's children in the destructor,
+        clear them when the instance is detached from its <use>. This way,
+        we won't attempt to use them after we're detached but before the
+        destructor has been called.
+
+        Test: svg/custom/use-crash-using-children-before-destroy.svg
+
+        * svg/SVGElementInstance.cpp:
+        (WebCore::SVGElementInstance::~SVGElementInstance):
+        (WebCore::SVGElementInstance::clearChildren):
+        * svg/SVGElementInstance.h:
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::detachInstance):
+
+2011-07-14  Nate Chapin  <japhet@chromium.org>
+
+        Don't skip custom cursors if an Image* is null,
+        since this can lead to a non-custom Cursor flickering 
+        back in when the custom cursor hasn't finished loading yet.
+        https://bugs.webkit.org/show_bug.cgi?id=64321
+
+        Reviewed by Darin Fisher.
+
+        Manual test, since we're testing visual flickering.
+
+        * manual-tests/canvas-cursor.html: Added.
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::selectCursor):
+        * platform/Cursor.cpp:
+        (WebCore::determineHotSpot):
+
+2011-07-14  Young Han Lee  <joybro@company100.net>
+
+        Reviewed by Dirk Schulze.
+
+        REGRESSION (r89774): svg/W3C-SVG-1.1/animate-elem-82-t.svg hits assertion failure.
+        https://bugs.webkit.org/show_bug.cgi?id=63911
+
+        Some functions assumed calculateKeyTimesIndex() does not return the last index of
+        the keyTimes, but it would be right behavior for calculateKeyTimesIndex() when it
+        accepts 1 as the percent argument.
+
+        To avoid the assumption, and for more efficiency, this patch allows the functions
+        using calculateKeyTimesIndex() to return early when it accepts 1 as the percent argument.
+        These functions have always returned the last element of the corresponding vector
+        in that situation.
+
+        * svg/SVGAnimationElement.cpp:
+        (WebCore::SVGAnimationElement::calculatePercentFromKeyPoints):
+        (WebCore::SVGAnimationElement::currentValuesForValuesAnimation):
+
+2011-07-14  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: remove more dead code
+        https://bugs.webkit.org/show_bug.cgi?id=64524
+
+        Reviewed by Yury Semikhatsky.
+
+        * WebCore.gypi:
+        * inspector/front-end/SummaryBar.js: Removed.
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/inspector.css:
+        * inspector/front-end/inspector.html:
+
+2011-07-14  Peter Varga  <pvarga@webkit.org>
+
+        [Qt][V8] Build fix after r90830.
+
+        Reviewed by Csaba Osztrogonác.
+
+        The histogramEnumeration() function isn't available from the Qt port's
+        PlatformBridge.h because this function is Chromium specific.
+        Since the http://trac.webkit.org/changeset/90830 change we need to
+        guard the usage of the histogramEnumeration() function.
+
+        No new tests needed.
+
+        * bindings/v8/custom/V8InspectorFrontendHostCustom.cpp:
+        (WebCore::V8InspectorFrontendHost::recordActionTakenCallback):
+        (WebCore::V8InspectorFrontendHost::recordPanelShownCallback):
+        (WebCore::V8InspectorFrontendHost::recordSettingChangedCallback):
+
+2011-07-14  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: show only Console and Scripts panels in shared worker inspector front-end
+        https://bugs.webkit.org/show_bug.cgi?id=64519
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/WorkerManager.js:
+        (WebInspector.WorkerManager):
+        (WebInspector.WorkerManager.isWorkerFrontend):
+        (WebInspector.WorkerManager.isSharedWorkerFrontend):
+        (WebInspector.WorkerManager.prototype._openInspectorWindow):
+        (WebInspector.DedicatedWorkerMessageForwarder):
+
+2011-07-14  MORITA Hajime  <morrita@google.com>
+
+        Unreviewed, rolling out r90976, r90981, and r90985.
+        http://trac.webkit.org/changeset/90976
+        http://trac.webkit.org/changeset/90981
+        http://trac.webkit.org/changeset/90985
+        https://bugs.webkit.org/show_bug.cgi?id=64251
+
+        build break
+
+        * WebCore.exp.in:
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRenderingContext::NodeRenderingContext):
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+        * dom/NodeRenderingContext.h:
+        * dom/ShadowContentElement.cpp:
+        (WebCore::ShadowContentElement::attach):
+        (WebCore::ShadowContentElement::detach):
+        * dom/ShadowContentElement.h:
+        * dom/ShadowContentSelector.cpp:
+        (WebCore::ShadowContentSelector::ShadowContentSelector):
+        (WebCore::ShadowContentSelector::selectInclusion):
+        (WebCore::ShadowContentSelector::willAttachContentFor):
+        (WebCore::ShadowContentSelector::didAttachContent):
+        (WebCore::ShadowContentSelector::activeElement):
+        * dom/ShadowContentSelector.h:
+        * dom/ShadowRoot.cpp:
+        (WebCore::ShadowRoot::~ShadowRoot):
+        (WebCore::ShadowRoot::activeContentElement):
+        * dom/ShadowRoot.h:
+        * testing/Internals.cpp:
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-13  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Move forwardEvent from RenderTextControl to HTMLTextFormControlElement
+        https://bugs.webkit.org/show_bug.cgi?id=64475
+
+        Reviewed by Kent Tamura.
+
+        Moved forwardEvent from RenderTextControl, RenderTextControlSingleLine, and RenderTextControlMultiLine
+        to HTMLTextFormControlElement, HTMLInputElement, and HTMLTextAreaElement.
+
+        This removes the last dependency on Event.h and EventNames.h in the cpp files for the above render
+        objects classes.
+
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::defaultEventHandler):
+        * html/HTMLTextFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::forwardEvent):
+        * html/HTMLTextFormControlElement.h:
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::forwardEvent):
+        * rendering/RenderTextControl.cpp:
+        * rendering/RenderTextControl.h:
+        * rendering/RenderTextControlMultiLine.cpp:
+        * rendering/RenderTextControlMultiLine.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        * rendering/RenderTextControlSingleLine.h:
+
+2011-07-13  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: if you rename an element into the INPUT element the browser will crash.
+        https://bugs.webkit.org/show_bug.cgi?id=64292
+
+        Reviewed by Joseph Pecoraro.
+
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::setNodeName):
+        Unnecessary function call copyNonAttributeProperties was removed.
+
+2011-07-13  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Implement hybi handshake
+        https://bugs.webkit.org/show_bug.cgi?id=64344
+
+        Reviewed by Kent Tamura.
+
+        Implement WebSocket handshake which is described at
+        <http://tools.ietf.org/html/draft-ietf-hybi-thewebsocketprotocol-10#section-5.1>.
+
+        Notable differences from hixie-76 protocol are:
+        - Challenge-response scheme has been changed dramatically.
+        - Servers do not send Sec-WebSocket-Location and Sec-WebSocket-Origin anymore.
+        - The value of "Upgrade" header has been changed to "websocket" (lower-case only).
+        - "Origin" header in client's request is renamed to "Sec-WebSocket-Origin".
+
+        New tests: http/tests/websocket/tests/hybi/handshake-fail-by-extensions-header.html
+                   http/tests/websocket/tests/hybi/handshake-fail-by-no-accept-header.html
+                   http/tests/websocket/tests/hybi/handshake-fail-by-wrong-accept-header.html
+
+        Note: Tests under hybi/ directory (including the new ones) are skipped and cannot be enabled
+        yet, because pywebsocket does not accept requests from half-baked client implementation
+        (i.e. hybi handshake + hixie-76 framing). They will be unskipped when hybi framing is landed
+        in WebCore.
+
+        * websockets/WebSocketHandshake.cpp:
+        Functions and members only used for hixie-76 handshake are renamed so that they are not confused
+        with hybi-10's ones.
+        (WebCore::generateHixie76SecWebSocketKey):
+        (WebCore::generateHixie76Key3):
+        (WebCore::generateHixie76ExpectedChallengeResponse):
+        (WebCore::generateSecWebSocketKey):
+        Generates a value for Sec-WebSocket-Key as stated in hybi-10.
+        (WebCore::getExpectedWebSocketAccept):
+        Calculates the expected value of Sec-WebSocket-Accept.
+        (WebCore::WebSocketHandshake::WebSocketHandshake):
+        (WebCore::WebSocketHandshake::clientHandshakeMessage):
+        (WebCore::WebSocketHandshake::clientHandshakeRequest):
+        (WebCore::WebSocketHandshake::readServerHandshake):
+        (WebCore::WebSocketHandshake::serverWebSocketAccept):
+        (WebCore::WebSocketHandshake::serverWebSocketExtensions):
+        (WebCore::WebSocketHandshake::checkResponseHeaders):
+        * websockets/WebSocketHandshake.h:
+
+2011-07-13  MORITA Hajime  <morrita@google.com>
+
+        [ShadowContentElement] forwarded node should be able to access its hosting content element.
+        https://bugs.webkit.org/show_bug.cgi?id=64251
+        
+        Reviewed by Dimitri Glazkov.
+
+        - Introduced ShadowInclusionSet to manage included nodes to its includer content element.
+          ShadowInclusionSet instance is owned by ShadowRoot.
+        - Updated the set on inclusion list changes.
+        - Used the set to retrieve the content element of NodeRenderingContext.
+        
+        There are also related refactoring and cleanup:
+        - Renamed NodeRenderingContext::m_contentElement to m_includer
+        - ShadowContentSelector::m_activeElement is no longer used, thus removed.
+        
+        Test: fast/dom/shadow/content-element-includer.html
+
+        * WebCore.exp.in:
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRenderingContext::NodeRenderingContext):
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+        * dom/NodeRenderingContext.h:
+        (WebCore::NodeRenderingContext::includer): 
+        * dom/ShadowContentElement.cpp:
+        (WebCore::removeFromSet): Added
+        (WebCore::addToSet): Added
+        (WebCore::ShadowContentElement::attach):
+        (WebCore::ShadowContentElement::detach):
+        * dom/ShadowContentElement.h:
+        (WebCore::ShadowInclusionSet::add):
+        (WebCore::ShadowInclusionSet::remove):
+        (WebCore::ShadowInclusionSet::isEmpty):
+        (WebCore::ShadowInclusionSet::Translator::hash):
+        (WebCore::ShadowInclusionSet::Translator::equal):
+        (WebCore::ShadowInclusionSet::Hash::hash):
+        (WebCore::ShadowInclusionSet::Hash::equal):
+        (WebCore::ShadowInclusionSet::find):
+        * dom/ShadowContentSelector.cpp:
+        (WebCore::ShadowContentSelector::ShadowContentSelector):
+        (WebCore::ShadowContentSelector::selectInclusion):
+        * dom/ShadowContentSelector.h:
+        * dom/ShadowRoot.cpp:
+        (WebCore::ShadowRoot::~ShadowRoot):
+        (WebCore::ShadowRoot::includerFor): Replaced activeElement()
+        (WebCore::ShadowRoot::inclusions): Added
+        (WebCore::ShadowRoot::ensureInclusions): Added
+        * dom/ShadowRoot.h:
+        (WebCore::toShadowRoot):
+        * testing/Internals.cpp:
+        (WebCore::Internals::includerFor):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-12  Dominic Cooney  <dominicc@chromium.org>
+
+        Raise if dispatchEvent dispatches an event that is being dispatched
+        https://bugs.webkit.org/show_bug.cgi?id=64150
+
+        Reviewed by Dimitri Glazkov.
+
+        Spec: http://www.w3.org/TR/DOM-Level-3-Events/#events-EventTarget-dispatchEvent
+
+        Test: fast/events/dispatch-event-being-dispatched.html
+
+        * dom/Event.h:
+        (WebCore::Event::isBeingDispatched): Added.
+        * dom/EventException.h:
+        * dom/EventException.idl: Add DISPATCH_REQUEST_ERR.
+        * dom/EventTarget.cpp:
+        (WebCore::EventTarget::dispatchEvent): Raise if being dispatched.
+        * dom/ExceptionCode.cpp: Add gunk for DISPATCH_REQUEST_ERR.
+
+2011-07-13  Kent Tamura  <tkent@chromium.org>
+
+        Implement text field placeholders using shadow DOM
+        https://bugs.webkit.org/show_bug.cgi?id=64253
+
+        Reviewed by Dimitri Glazkov.
+
+        Represents a placeholder text as a shadow element, and its
+        visibility is controlled by 'visibility' CSS property.
+
+        This patch removes all of existing code about placeholder from
+        RenderTextControl*. RenderTextControl* have only small code about
+        placeholder layout.
+
+        Also, this patch removes INPUT_PLACEHOLDER legacy pseudo ID, and
+        the placeholder style uses Element::shadowPseudoId().
+
+        This fixes the following regressions:
+        - https://bugs.webkit.org/show_bug.cgi?id=51290
+        - https://bugs.webkit.org/show_bug.cgi?id=54797
+        - https://bugs.webkit.org/show_bug.cgi?id=54814
+        - https://bugs.webkit.org/show_bug.cgi?id=63367
+
+        Test: fast/forms/textarea-placeholder-wrapping.html
+
+        * css/CSSSelector.cpp: Remove INPUT_PLACEHOLDER legacy pseudo ID.
+        (WebCore::CSSSelector::pseudoId):
+        (WebCore::nameToPseudoTypeMap):
+        (WebCore::CSSSelector::extractPseudoType):
+        * css/CSSSelector.h: ditto.
+        * css/html.css:
+        (::-webkit-input-placeholder): Added. This contains properties
+        common in <input> and <textarea>. Some properties have !important
+        so that a stylesheet specified by a page author won't break
+        WebKit's assumption.
+        (input::-webkit-input-placeholder, isindex::-webkit-input-placeholder):
+         Added the default style for <input> placeholders.
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::placeholderElement): Delegate to an InputType.
+        (WebCore::HTMLInputElement::updatePlaceholderText): ditto.
+        * html/HTMLInputElement.h: Declare placeholderElement() and updatePlaceholderText().
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::createRenderer):
+        Remove the 'placeholderVisible' argument.
+        (WebCore::HTMLTextAreaElement::placeholderElement): Added.
+        (WebCore::HTMLTextAreaElement::updatePlaceholderText):
+         Added. This creates, deletes, or updates the placeholder element.
+        * html/HTMLTextAreaElement.h:
+        - Declare placeholderElement() and updatePlaceholderText().
+        - Add m_placeholder.
+        * html/HTMLTextFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::updatePlaceholderVisibility):
+        Update the placeholder element and 'visibility' CSS property,
+        instead of delegating the job to a renderer.
+        * html/HTMLTextFormControlElement.h:
+        Declare two pure virtual functions: placeholderElement() and updatePlaceholderText().
+        * html/InputType.cpp:
+        (WebCore::InputType::placeholderElement): Add an empty implementation.
+        (WebCore::InputType::updatePlaceholderText): Add an empty implementation.
+        * html/InputType.h: Declare placeholderElement() and updatePlaceholderText().
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::createRenderer):
+        Remove the 'placeholderVisible' argument.
+        (WebCore::TextFieldInputType::placeholderElement): Added.
+        (WebCore::TextFieldInputType::destroyShadowSubtree): Deletes m_placeholder.
+        (WebCore::TextFieldInputType::updatePlaceholderText):
+         Added. This creates, deletes, or updates the placeholder element.
+        * html/TextFieldInputType.h:
+        - Declare placeholderElement() and updatePlaceholderText().
+        - Add m_placeholder.
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::RenderTextControl):
+        Remove the 'placeholderVisible' argument.
+        (WebCore::RenderTextControl::layoutSpecialExcludedChild):
+        Excludes the placeholder renderer in order to avoid to secure a box for
+        the placeholder.
+        * rendering/RenderTextControl.h:
+        - Remove declarations of removed functions.
+        - Update the RenderTextControl signature.
+        - Add layoutSpecialExcludedChild().
+        * rendering/RenderTextControlMultiLine.cpp:
+        (WebCore::RenderTextControlMultiLine::RenderTextControlMultiLine):
+        Remove the 'placeholderVisible' argument.
+        (WebCore::RenderTextControlMultiLine::layoutSpecialExcludedChild):
+        Laying out the placeholder box so that it has correct width and location.
+        * rendering/RenderTextControlMultiLine.h:
+        - Remove declarations of removed functions.
+        - Update the RenderTextControlMultiLine signature.
+        - Add layoutSpecialExcludedChild().
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::RenderTextControlSingleLine):
+        Remove the 'placeholderVisible' argument.
+        (WebCore::RenderTextControlSingleLine::layout):
+        Laying out the placeholder box so that it has correct width and location.
+        * rendering/RenderTextControlSingleLine.h:
+        - Remove declarations of removed functions.
+        - Update the RenderTextControlSingleLine signature.
+        * rendering/style/RenderStyleConstants.h: Remove INPUT_PLACEHOLDER.
+
+2011-07-13  James Simonsen  <simonjam@chromium.org>
+
+        Remove hack that forcefully prevents scripts from running in shadow SVG
+        https://bugs.webkit.org/show_bug.cgi?id=64419
+
+        This hack was put in to prevent scripts from running in shadow SVG. This should never have
+        happened, but did because we didn't parse <script> tags in SVG properly. This was fixed in
+        r88584, so the hack is no longer needed.
+
+        No new tests since there is no change in functionality.
+
+        Reviewed by Tony Gentilcore.
+
+        * dom/ScriptElement.cpp:
+        (WebCore::ScriptElement::prepareScript):
+
+2011-07-13  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions] Parse -webkit-content-order property
+        https://bugs.webkit.org/show_bug.cgi?id=63897
+
+        Reviewed by David Hyatt.
+
+        Test: fast/regions/webkit-content-order-parsing.html
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        * css/CSSPropertyNames.in:
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::regionIndex):
+        (WebCore::InheritedFlags::setRegionIndex):
+        (WebCore::InheritedFlags::initialRegionIndex):
+        * rendering/style/StyleRareNonInheritedData.cpp:
+        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
+        (WebCore::StyleRareNonInheritedData::operator==):
+        * rendering/style/StyleRareNonInheritedData.h:
+
+2011-07-13  James Robinson  <jamesr@chromium.org>
+
+        Reviewed by Kenneth Russell.
+
+        [chromium] Move draw implementation for ContentLayerChromium/ImageLayerChromium to the appropriate CCLayerImpl subclass
+        https://bugs.webkit.org/show_bug.cgi?id=58833
+
+        Adds a TiledLayerChromium class to handle the tiling logic shared by ContentLayerChromium and ImageLayerChromium
+        so that they can be siblings in the class hierarchy instead of children. Also adds a CCTiledLayerImpl to handle
+        the drawing responsibilities for tiled layers.
+
+        TiledLayerChromium maintains a tiler, tiling options, and calculates the tiling transform. Subclasses are
+        responsible for providing an appropriate texture updater implementation. CCTiledLayerImpl takes the tiler,
+        tiling transform and layer properties and draws the layer.  Longer term it'd be better of the CCTiledLayerImpl
+        owned the tiler and the TiledLayerChromium only owned an updater, but getting there will require changing the
+        way tile eviction works.
+
+        * WebCore.gypi:
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerChromium::ContentLayerChromium):
+        (WebCore::ContentLayerChromium::paintContentsIfDirty):
+        (WebCore::ContentLayerChromium::drawsContent):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        (WebCore::ContentLayerChromium::textureUpdater):
+        * platform/graphics/chromium/ImageLayerChromium.cpp:
+        (WebCore::ImageLayerChromium::ImageLayerChromium):
+        (WebCore::ImageLayerChromium::cleanupResources):
+        (WebCore::ImageLayerChromium::paintContentsIfDirty):
+        (WebCore::ImageLayerChromium::textureUpdater):
+        (WebCore::ImageLayerChromium::contentBounds):
+        (WebCore::ImageLayerChromium::drawsContent):
+        (WebCore::ImageLayerChromium::createTextureUpdaterIfNeeded):
+        * platform/graphics/chromium/ImageLayerChromium.h:
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::pushPropertiesTo):
+        (WebCore::LayerChromium::ccLayerImpl):
+        * platform/graphics/chromium/LayerChromium.h:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawRootLayer):
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::updateRect):
+        (WebCore::LayerTilerChromium::draw):
+        (WebCore::LayerTilerChromium::drawTiles):
+        * platform/graphics/chromium/LayerTilerChromium.h:
+        * platform/graphics/chromium/TiledLayerChromium.cpp: Added.
+        (WebCore::TiledLayerChromium::TiledLayerChromium):
+        (WebCore::TiledLayerChromium::~TiledLayerChromium):
+        (WebCore::TiledLayerChromium::createCCLayerImpl):
+        (WebCore::TiledLayerChromium::cleanupResources):
+        (WebCore::TiledLayerChromium::setLayerRenderer):
+        (WebCore::TiledLayerChromium::updateTileSizeAndTilingOption):
+        (WebCore::TiledLayerChromium::drawsContent):
+        (WebCore::TiledLayerChromium::createTilerIfNeeded):
+        (WebCore::TiledLayerChromium::updateCompositorResources):
+        (WebCore::TiledLayerChromium::setTilingOption):
+        (WebCore::TiledLayerChromium::setIsMask):
+        (WebCore::TiledLayerChromium::tilingTransform):
+        (WebCore::TiledLayerChromium::pushPropertiesTo):
+        (WebCore::writeIndent):
+        (WebCore::TiledLayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/TiledLayerChromium.h: Added.
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        (WebCore::CCLayerImpl::draw):
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        (WebCore::CCLayerImpl::setDrawsContent):
+        (WebCore::CCLayerImpl::drawsContent):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp: Added.
+        (WebCore::CCTiledLayerImpl::CCTiledLayerImpl):
+        (WebCore::CCTiledLayerImpl::~CCTiledLayerImpl):
+        (WebCore::CCTiledLayerImpl::draw):
+        (WebCore::CCTiledLayerImpl::bindContentsTexture):
+        (WebCore::CCTiledLayerImpl::dumpLayerProperties):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.h: Added.
+        (WebCore::CCTiledLayerImpl::create):
+        (WebCore::CCTiledLayerImpl::setTilingTransform):
+        (WebCore::CCTiledLayerImpl::setTiler):
+
+2011-07-13  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        Remove an unused bit in RenderObject
+        https://bugs.webkit.org/show_bug.cgi?id=64485
+
+        Reviewed by Darin Adler.
+
+        No change in behavior so no new test.
+
+        * rendering/RenderObject.h: Removed a bit that was duplicated from RenderTableCell.
+        However it was not used in RenderObject and RenderTableCell already packed this bit.
+        We were lying in the number of used bits in RenderObject which was 33. This change
+        brings us back to what was advertised.
+
+2011-07-13  Simon Fraser  <simon.fraser@apple.com>
+
+        Fix non-debug builds.
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::createGraphicsLayer):
+
+2011-07-13  Vitaly Repeshko  <vitalyr@chromium.org>
+
+        [chromium] Fix mac build after r90949.
+
+        * bindings/v8/V8HiddenPropertyName.cpp:
+        (WebCore::V8HiddenPropertyName::hiddenReferenceName):
+        * bindings/v8/custom/V8WebGLRenderingContextCustom.cpp:
+        (WebCore::toV8Object):
+
+2011-07-13  Emil A Eklund  <eae@chromium.org>
+
+        Switch table rendering to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64478
+
+        Reviewed by Eric Seidel.
+
+        No new tests, no new functionality.
+
+        * rendering/AutoTableLayout.cpp:
+        * rendering/AutoTableLayout.h:
+        * rendering/HitTestResult.cpp:
+        * rendering/HitTestResult.h:
+        * rendering/LayoutTypes.h:
+        * rendering/RenderBlock.h:
+        * rendering/RenderBoxModelObject.cpp:
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderObject.h:
+        * rendering/RenderTable.cpp:
+        * rendering/RenderTable.h:
+        * rendering/RenderTableCell.cpp:
+        * rendering/RenderTableCell.h:
+
+2011-07-13  Simon Fraser  <simon.fraser@apple.com>
+
+        Factor some GraphicsLayer creation code in RenderLayerBacking
+        https://bugs.webkit.org/show_bug.cgi?id=64487
+
+        Reviewed by Sam Weinig.
+
+        Move the GraphicsLayer::create() calls into once place so that we
+        don't have lots of #ifndef NDEBUG in various places, and can share
+        more code in future.
+        
+        No behavior change, so no new tests.
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::RenderLayerBacking):
+        (WebCore::RenderLayerBacking::~RenderLayerBacking):
+        (WebCore::RenderLayerBacking::createGraphicsLayer):
+        (WebCore::RenderLayerBacking::createPrimaryGraphicsLayer):
+        (WebCore::RenderLayerBacking::destroyGraphicsLayers):
+        (WebCore::RenderLayerBacking::updateLayerTransform):
+        (WebCore::RenderLayerBacking::updateClippingLayers):
+        (WebCore::RenderLayerBacking::updateOverflowControlsLayers):
+        (WebCore::RenderLayerBacking::updateForegroundLayer):
+        (WebCore::RenderLayerBacking::updateMaskLayer):
+        * rendering/RenderLayerBacking.h:
+
+2011-07-13  Xan Lopez  <xlopez@igalia.com>
+
+        [GTK] Fix distcheck.
+
+        Reviewed by Martin Robinson.
+
+        * GNUmakefile.list.am: add missing files.
+
+2011-07-13  James Robinson  <jamesr@chromium.org>
+
+        [chromium] No implementation defined for WTF::monotonicallyIncreasingTime
+        https://bugs.webkit.org/show_bug.cgi?id=64420
+
+        Reviewed by Tony Gentilcore.
+
+        Removes some redundant time related code.
+
+        * platform/chromium/PlatformBridge.h:
+        * platform/chromium/SystemTimeChromium.cpp:
+        (WebCore::userIdleTime):
+
+2011-07-13  Vitaly Repeshko  <vitalyr@chromium.org>
+
+        [V8] Avoid memory leaks with hidden references.
+        https://bugs.webkit.org/show_bug.cgi?id=64467
+
+        Reviewed by Adam Barth.
+
+        We used to have growing arrays of hidden references associated
+        with objects. The entries in this array had no keys and were never
+        removed. This patch changes the interface to require a reference
+        name. This way it's harder to leak an unbounded number of
+        objects. Also it makes our wrapper objects one machine word
+        smaller.
+
+        * bindings/scripts/CodeGeneratorV8.pm:
+        (GenerateNormalAttrGetter): Started using new interface.
+
+        Interface changes:
+        * bindings/v8/V8DOMWrapper.cpp:
+        (WebCore::V8DOMWrapper::setNamedHiddenReference):
+        (WebCore::V8DOMWrapper::setNamedHiddenWindowReference):
+        * bindings/v8/V8DOMWrapper.h:
+
+        Added a helper to compute hidden reference names as V8 strings:
+        * bindings/v8/V8HiddenPropertyName.cpp:
+        (WebCore::V8HiddenPropertyName::hiddenReferenceName):
+        * bindings/v8/V8HiddenPropertyName.h:
+
+        * bindings/v8/WrapperTypeInfo.h: Removed the hidden reference
+        array internal field.
+
+        Update usages of hidden references:
+        * bindings/v8/custom/V8CSSStyleSheetCustom.cpp:
+        (WebCore::toV8):
+        * bindings/v8/custom/V8DOMStringMapCustom.cpp:
+        (WebCore::toV8):
+        * bindings/v8/custom/V8DOMTokenListCustom.cpp:
+        (WebCore::toV8):
+        * bindings/v8/custom/V8LocationCustom.cpp:
+        (WebCore::toV8):
+        * bindings/v8/custom/V8MessageChannelConstructor.cpp:
+        (WebCore::V8MessageChannel::constructorCallback):
+        * bindings/v8/custom/V8NamedNodeMapCustom.cpp:
+        (WebCore::toV8):
+        * bindings/v8/custom/V8StyleSheetCustom.cpp:
+        (WebCore::toV8):
+        * bindings/v8/custom/V8WebGLRenderingContextCustom.cpp:
+        (WebCore::toV8Object):
+
+        * bindings/scripts/test/V8/V8TestObj.cpp:
+        (WebCore::TestObjInternal::readOnlyTestObjAttrAttrGetter): Updated.
+
+2011-07-13  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Improve names of some ApplicationCacheStorage accessor methods
+        https://bugs.webkit.org/show_bug.cgi?id=64433
+
+        Reviewed by Alexey Proskuryakov.
+
+        Some methods returned a bool for success/failure and
+        actually returned a value as an out parameter so their
+        name was confusing. Rename these methods to make them
+        more clear.
+
+        (WebCore::ApplicationCache::diskUsageForOrigin):
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        (WebCore::ApplicationCacheGroup::recalculateAvailableSpaceInQuota):
+        * loader/appcache/ApplicationCacheStorage.cpp:
+        (WebCore::ApplicationCacheStorage::calculateQuotaForOrigin):
+        (WebCore::ApplicationCacheStorage::calculateUsageForOrigin):
+        (WebCore::ApplicationCacheStorage::calculateRemainingSizeForOriginExcludingCache):
+        (WebCore::ApplicationCacheStorage::checkOriginQuota):
+        * loader/appcache/ApplicationCacheStorage.h:
+        * loader/appcache/ApplicationCache.cpp:
+        Rename the methods.
+
+        * WebCore.exp.in:
+        Replaced old versions. Also, calculateRemaining wasn't needed
+        outside WebCore, so no longer export it.
+
+2011-07-13  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Some ApplicationCache Origin Cleanup
+        https://bugs.webkit.org/show_bug.cgi?id=64431
+
+        Reviewed by Alexey Proskuryakov.
+
+        - m_loadedSize is inaccurate. This just replaces it with
+        calls to ApplicationCache::estimatedSizeInStorage.
+
+        - m_availableSpaceInQuota can get out of date, so we just
+        recalculate it at the start of appcache downloads.
+
+        * loader/appcache/ApplicationCacheGroup.h:
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        (WebCore::ApplicationCacheGroup::ApplicationCacheGroup):
+        (WebCore::ApplicationCacheGroup::didReceiveData):
+        Remove references to m_loadedSize.
+
+        (WebCore::ApplicationCacheGroup::didFinishLoading):
+        Replace m_loadedSize with estimatedSizeInStorage after we
+        add the new cached resource to the cache. The calculation
+        already happened so this check is fast.
+
+        (WebCore::ApplicationCacheGroup::didFinishLoadingManifest):
+        When we start the Downloading phase, recalculate the quota
+        so that we have an up to date quota value so that we can
+        break early if needed.
+
+2011-07-12  Brent Fulgham  <bfulgham@webkit.org>
+
+        Standardize WinCairo conditionalized code under PLATFORM macro.
+        https://bugs.webkit.org/show_bug.cgi?id=64377
+
+        Reviewed by Maciej Stachowiak.
+
+        Update compile-time conditions that had previously used #ifdef
+        of WIN_CAIRO to consistently use PLATFORM(WIN_CAIRO).
+
+        * WebCore.vcproj/WebCoreCairo.vsprops: Remove redundant declaration
+          of WIN_CAIRO.
+        * WebCore.vcproj/WebCoreDebugCairoCFLite.vsprops: Update to use
+          the existing WinCairo.vsprops file.
+        * WebCorePrefix.h: Update for new WTF_PLATFORM_WIN_CAIRO define.
+        * config.h: Update to use PLATFORM(WIN_CAIRO).
+
+2011-07-13  Alexandru Chiculita  <achicu@adobe.com>
+
+        [CSS Exclusions] Fix for comment #23 on wrap-shape parsing bug 61726
+        https://bugs.webkit.org/show_bug.cgi?id=64464
+
+        Reviewed by Tony Chang.
+
+        No new tests needed.
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseWrapShapeRect): Removed the "valid" local.
+        (WebCore::CSSParser::parseWrapShapeCircle): Removed the "valid" local.
+        (WebCore::CSSParser::parseWrapShapeEllipse): Removed the "valid" local.
+        * css/CSSPrimitiveValue.cpp:
+        * css/CSSWrapShapes.h:
+        (WebCore::CSSWrapShapePolygon::getXAt): Replaced bit shift with multiplication.
+        (WebCore::CSSWrapShapePolygon::getYAt): Replaced bit shift with multiplication.
+        * rendering/style/RenderStyle.cpp:
+        * rendering/style/StyleRareNonInheritedData.h:
+
+2011-07-13  Abhishek Arya  <inferno@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Issue with Frame lifetime due to deletion in beforeload event.
+        https://bugs.webkit.org/show_bug.cgi?id=64457
+
+        Copy the Frame protector higher in the stack from loadWithDocumentLoader
+        to loadFrameRequest since any of loadPostRequest or loadURL can call
+        loadWithDocumentLoader, thereby dispatching the beforeload event and
+        blowing away the frame. This deleted frame will be later accessed in
+        the loadFrameRequest function causing a crash.       
+ 
+        Test: fast/events/form-iframe-target-before-load-crash2.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadFrameRequest):
+        (WebCore::FrameLoader::loadWithDocumentLoader):
+
+2011-07-13  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions]content:-webkit-from-flow not applied correctly
+        https://bugs.webkit.org/show_bug.cgi?id=64438
+
+        Reviewed by Tony Chang.
+
+        Forgot to modify getStringValue(), i was modifying only getStringValue(ExceptionCode&).
+
+        Test: fast/regions/content-webkit-from-flow-parsing.html (existing).
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::getStringValue):
+
+2011-07-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Don't reuse the last InsertTextCommand
+        https://bugs.webkit.org/show_bug.cgi?id=64416
+
+        Reviewed by Justin Garcia.
+
+        This patch makes the interface of InsertTextCommand less foreign. It now takes arguments in
+        its constructor and executes the command in doApply like other edit commands.
+
+        * editing/CompositeEditCommand.cpp:
+        (WebCore::CompositeEditCommand::applyCommandToComposite): Added.
+        * editing/CompositeEditCommand.h:
+        * editing/InsertTextCommand.cpp:
+        (WebCore::InsertTextCommand::InsertTextCommand): Takes arguments input used to take.
+        (WebCore::InsertTextCommand::doApply): Renamed from input.
+        * editing/InsertTextCommand.h:
+        (WebCore::InsertTextCommand::create): Takes arguments input used to take.
+        * editing/TypingCommand.cpp:
+        (WebCore::TypingCommand::insertTextRunWithoutNewlines): Creates InsertTextCommand.
+
+2011-07-12  Dmitry Lomov  <dslomov@google.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=63041
+        [Chromium][V8] Make DOMDataStore per-isolate
+        This patch:
+         - makes DOMData class an utility class with static members only
+         - adds an isolate-specific DOMDataStore in V8BindingPerIsolateData.
+        Dromaeo benchmarks are not affected.
+
+        Reviewed by Adam Barth.
+
+        * bindings/v8/DOMData.cpp:
+        (WebCore::getDefaultStore):
+        (WebCore::DOMData::getCurrentStore):
+        * bindings/v8/DOMData.h:
+        * bindings/v8/DOMDataStore.cpp:
+        (WebCore::DOMDataStore::DOMDataStore):
+        (WebCore::DOMDataStore::allStores):
+        * bindings/v8/DOMDataStore.h:
+        * bindings/v8/ScopedDOMDataStore.cpp:
+        (WebCore::ScopedDOMDataStore::ScopedDOMDataStore):
+        * bindings/v8/ScopedDOMDataStore.h:
+        * bindings/v8/StaticDOMDataStore.cpp:
+        (WebCore::StaticDOMDataStore::StaticDOMDataStore):
+        * bindings/v8/StaticDOMDataStore.h:
+        * bindings/v8/V8Binding.h:
+        (WebCore::V8BindingPerIsolateData::allStores):
+        (WebCore::V8BindingPerIsolateData::getDOMDataStore):
+        (WebCore::V8BindingPerIsolateData::setDOMDataStore):
+        * bindings/v8/V8Binding.cpp:
+        (WebCore::V8BindingPerIsolateData::V8BindingPerIsolateData):
+        * bindings/v8/V8DOMMap.cpp:
+        (WebCore::DOMDataStoreHandle::DOMDataStoreHandle):
+        (WebCore::getDOMDataStore):
+        (WebCore::enableFasterDOMStoreAccess):
+
+2011-07-12  Simon Fraser  <simon.fraser@apple.com>
+
+        Rename compositing-related updateContentsScale() methods
+        https://bugs.webkit.org/show_bug.cgi?id=64430
+
+        Reviewed by Joseph Pecoraro.
+
+        Rename updateContentsScale() to something less presumptuous; layers may choose
+        to do something other than update their contents scale when the page scale factor
+        changes. pageScaleFactorChanged() is a better name.
+
+        * page/Frame.cpp:
+        (WebCore::Frame::pageScaleFactorChanged):
+        (WebCore::Frame::scalePage):
+        * page/Frame.h:
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::pageScaleFactorChanged):
+        * rendering/RenderLayer.h:
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::pageScaleFactorChanged):
+        * rendering/RenderLayerBacking.h:
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::pageScaleFactorChanged):
+        * rendering/RenderLayerCompositor.h:
+
+2011-07-13  Pierre Rossi  <pierre.rossi@gmail.com>
+
+        Fix compile for QRawFont.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64453
+
+        Reviewed by Andreas Kling.
+
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/qt/FontQt.cpp:
+        (WebCore::Font::drawGlyphs):
+
+2011-07-13  John Knottenbelt  <jknotten@chromium.org>
+
+        Reference Geolocation object from GeoNotifier and Geolocation::setIsAllowed.
+        https://bugs.webkit.org/show_bug.cgi?id=64363
+
+        Reviewed by Tony Gentilcore.
+
+        Test: fast/dom/Geolocation/remove-remote-context-in-error-callback-crash.html
+
+        * page/Geolocation.cpp:
+        (WebCore::Geolocation::setIsAllowed):
+        * page/Geolocation.h:
+
+2011-07-13  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Network panel search needs each resource to have unique identifier.
+        https://bugs.webkit.org/show_bug.cgi?id=64287
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkManager.prototype.requestContent):
+        (WebInspector.NetworkDispatcher):
+        (WebInspector.NetworkDispatcher.prototype.requestWillBeSent):
+        (WebInspector.NetworkDispatcher.prototype.resourceLoadedFromMemoryCache):
+        (WebInspector.NetworkDispatcher.prototype._appendRedirect):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkPanel.prototype._appendResource):
+        (WebInspector.NetworkPanel.prototype._frameNavigated):
+        (WebInspector.NetworkPanel.prototype._updateSearchMatchedListAfterResourceIdentifierChanged):
+
+2011-07-13  Alexandru Chiculita  <achicu@adobe.com>
+
+        Bridge RenderBoxModelObject::calculateBackgroundImageGeometry parameters into a class
+        https://bugs.webkit.org/show_bug.cgi?id=63987
+
+        Reviewed by Hajime Morita.
+
+        Change doesn't add new functionality. No test needed.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::maskClipRect):
+        (WebCore::RenderBox::repaintLayerRectsForImage):
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::paintFillLayerExtended):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setNoRepeatX):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setNoRepeatY):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::useFixedAttachment):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::clip):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::relativePhase):
+        (WebCore::RenderBoxModelObject::calculateBackgroundImageGeometry):
+        * rendering/RenderBoxModelObject.h:
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::destOrigin):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setDestOrigin):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::destRect):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setDestRect):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::phase):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setPhase):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::tileSize):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setTileSize):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setPhaseX):
+        (WebCore::RenderBoxModelObject::BackgroundImageGeometry::setPhaseY):
+
+2011-07-13  MORITA Hajime  <morrita@google.com>
+
+        Refactoring: Ignored ExceptionCode value should be less annoying.
+        https://bugs.webkit.org/show_bug.cgi?id=63688
+
+        - Introduced ExceptionCodePlaceholder class for the default parameter of ExceptionCode.
+        - Introduced ASSERT_NO_EXCEPTION to check ExceptionCode not set to non-zero after the call.
+        - Adopted ASSERT_NO_EXCEPTION in Range.cpp
+
+        No new tests. No behaviour change.
+
+        Reviewed by Darin Adler.
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/ExceptionCodePlaceholder.h: Added.
+        (WebCore::ExceptionCodePlaceholder::ExceptionCodePlaceholder):
+        (WebCore::ExceptionCodePlaceholder::operator ExceptionCode& ):
+        (WebCore::IgnorableExceptionCode::IgnorableExceptionCode):
+        (WebCore::CheckedExceptionCode::CheckedExceptionCode):
+        (WebCore::CheckedExceptionCode::~CheckedExceptionCode):
+        * dom/Range.cpp:
+        (WebCore::Range::Range):
+        (WebCore::Range::editingStartPosition):
+        * dom/Range.h:        
+
+2011-07-13  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Regression: OOB read in svg text run
+        https://bugs.webkit.org/show_bug.cgi?id=63627
+
+        Not reviewed.
+
+        Fixed last minute typo leading to assertions.
+
+        * rendering/InlineTextBox.cpp:
+        (WebCore::InlineTextBox::paintSelection):
+
+2011-07-12  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: factor NetworkLogView out of Network panel
+        https://bugs.webkit.org/show_bug.cgi?id=64366
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView):
+        (WebInspector.NetworkLogView.prototype.get useLargeRows):
+        (WebInspector.NetworkLogView.prototype.set allowPopover):
+        (WebInspector.NetworkLogView.prototype.elementsToRestoreScrollPositionsFor):
+        (WebInspector.NetworkLogView.prototype.resize):
+        (WebInspector.NetworkLogView.prototype._createTable):
+        (WebInspector.NetworkLogView.prototype.show):
+        (WebInspector.NetworkLogView.prototype.hide):
+        (WebInspector.NetworkLogView.prototype._reset):
+        (WebInspector.NetworkLogView.prototype.switchToDetailedView):
+        (WebInspector.NetworkLogView.prototype.switchToBriefView):
+        (WebInspector.NetworkLogView.prototype.get _setLargerResources):
+        (WebInspector.NetworkLogView.prototype._getPopoverAnchor):
+        (WebInspector.NetworkPanel):
+        (WebInspector.NetworkPanel.prototype.get toolbarItemLabel):
+        (WebInspector.NetworkPanel.prototype.get statusBarItems):
+        (WebInspector.NetworkPanel.prototype.elementsToRestoreScrollPositionsFor):
+        (WebInspector.NetworkPanel.prototype.resize):
+        (WebInspector.NetworkPanel.prototype._reset):
+        (WebInspector.NetworkPanel.prototype.updateSidebarWidth):
+        (WebInspector.NetworkPanel.prototype.updateMainViewWidth):
+        (WebInspector.NetworkPanel.prototype.handleShortcut):
+        (WebInspector.NetworkPanel.prototype.show):
+        (WebInspector.NetworkPanel.prototype.hide):
+        (WebInspector.NetworkPanel.prototype.get resources):
+        (WebInspector.NetworkPanel.prototype.resourceById):
+        (WebInspector.NetworkPanel.prototype.canShowAnchorLocation):
+        (WebInspector.NetworkPanel.prototype.showAnchorLocation):
+        (WebInspector.NetworkPanel.prototype._onViewCleared):
+        (WebInspector.NetworkPanel.prototype._onRowSizeChanged):
+        (WebInspector.NetworkPanel.prototype._onResourceSelected):
+        (WebInspector.NetworkPanel.prototype._showResource):
+        (WebInspector.NetworkPanel.prototype._closeVisibleResource):
+        (WebInspector.NetworkPanel.prototype._toggleGridMode):
+        (WebInspector.NetworkPanel.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkPanel.prototype.performSearch):
+        (WebInspector.NetworkPanel.prototype.jumpToPreviousSearchResult):
+        (WebInspector.NetworkPanel.prototype.jumpToNextSearchResult):
+        (WebInspector.NetworkPanel.prototype.searchCanceled):
+        (WebInspector.NetworkDataGridNode):
+        (WebInspector.NetworkDataGridNode.prototype.isFilteredOut):
+        (WebInspector.NetworkDataGridNode.prototype.select):
+        (WebInspector.NetworkDataGridNode.prototype.get selectable):
+
+2011-07-13  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r90634.
+        http://trac.webkit.org/changeset/90634
+        https://bugs.webkit.org/show_bug.cgi?id=64448
+
+        Qt HTTP Pipelining is not robust enough to be used in that
+        generic way. (Requested by benjaminp on #webkit).
+
+        * platform/network/qt/ResourceRequestQt.cpp:
+        (WebCore::ResourceRequest::toNetworkRequest):
+
+2011-07-13  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Regression: OOB read in svg text run
+        https://bugs.webkit.org/show_bug.cgi?id=63627
+
+        Reviewed by Zoltan Herczeg.
+
+        A TextRun is constructed for a portion of a string [a,b] whose original length is c (0 < a < b < c).
+        The TextRun charactersLength variable stores the length of the remaining text from (b..c) in order
+        to support ligatures in SVG Fonts. Example: <text>ffl</text>. When measuring the advance from char 0
+        to char 1 the whole 'ffl' text must be passed to the SVG glyph selection code, as the SVG Font may
+        define a single glyph for the characters 'ffl' thus leading to a single character long text
+        pointing to the ffl ligature, not three individual 'f' / 'f' / 'l' characters anymore.
+
+        constructTextRun(..const UChar*, int length, ..) did not correctly calculate the maximum length (b..c).
+        The passed in UChar buffer starts at eg. textRenderer->characters() + start(), and following condition
+        holds true for 'length': start() + length <= textRenderer->textLength() (which denotes the maximum length
+        of the textRenderer->characters() buffer). We have to keep track of the start() offset, so that we
+        can calculate the charactersLength for the TextRun correctly: textRenderer->textLength() - start().
+
+        There are also other cases like RenderCombinedText and/or the presence of hyphens that were incorrectly
+        tracked. Only InlineTextBox had to be fixed, the other callsites in eg. RenderBlockLineLayout already
+        computed the maximum length correctly - I assured this by valgrind runs on all SVG Font tests.
+
+        * rendering/InlineTextBox.cpp:
+        (WebCore::InlineTextBox::paint):
+        (WebCore::InlineTextBox::paintSelection):
+        (WebCore::InlineTextBox::constructTextRun): Add maximumLength parameter to constructTextRun.
+        * rendering/InlineTextBox.h: Ditto.
+
+2011-07-12  Antti Koivisto  <antti@apple.com>
+
+        didFirstVisuallyNonEmptyLayout dispatched too early
+        https://bugs.webkit.org/show_bug.cgi?id=64412
+
+        Reviewed by Darin Adler and Sam Weinig.
+
+        Improve the mechanism that dispatches didFirstVisuallyNonEmptyLayout
+
+        - Wait until a threshold of characters and pixels has been exceeded before dispatching.
+        - Wait until stylesheets are loaded (painting is disabled in this case).
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        (WebCore::FrameView::performPostLayoutTasks):
+        * page/FrameView.h:
+        (WebCore::FrameView::incrementVisuallyNonEmptyCharacterCount):
+        (WebCore::FrameView::incrementVisuallyNonEmptyPixelCount):
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::RenderImage):
+        (WebCore::RenderImage::imageChanged):
+        * rendering/RenderImage.h:
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::RenderText):
+
+2011-07-12  MORITA Hajime  <morrita@google.com>
+
+        [Refactoring][ShadowContentElement] Forwarded node list should be a linked-list.
+        https://bugs.webkit.org/show_bug.cgi?id=64252
+
+        Reviewed by Dimitri Glazkov.
+
+        Introduced ShadowInclusionList and ShadowInclusion for maintaining
+        forwarded content children. ShadowInclusion is doubly-linked list.
+        ShadowContentElement::m_inclusions is replaced by ShadowInclusionList.
+        
+        This change is a prepration for bug 64251, which will introduce
+        forwarded-children to content-element table.
+        
+        No new tests. No behavioral change.
+
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::nextRendererOf):
+        (WebCore::previousRendererOf):
+        (WebCore::firstRendererOf):
+        (WebCore::lastRendererOf):
+        * dom/ShadowContentElement.cpp:
+        (WebCore::ShadowInclusion::append):
+        (WebCore::ShadowInclusion::unlink):
+        (WebCore::ShadowInclusionList::ShadowInclusionList):
+        (WebCore::ShadowInclusionList::~ShadowInclusionList):
+        (WebCore::ShadowInclusionList::find):
+        (WebCore::ShadowInclusionList::clear):
+        (WebCore::ShadowInclusionList::append):
+        (WebCore::ShadowContentElement::attach):
+        * dom/ShadowContentElement.h:
+        (WebCore::ShadowInclusion::includer):
+        (WebCore::ShadowInclusion::content):
+        (WebCore::ShadowInclusion::next):
+        (WebCore::ShadowInclusion::previous):
+        (WebCore::ShadowInclusion::ShadowInclusion):
+        (WebCore::ShadowInclusion::create):
+        (WebCore::ShadowInclusionList::first):
+        (WebCore::ShadowInclusionList::last):
+        (WebCore::ShadowInclusionList::isEmpty):
+        (WebCore::ShadowInclusionList::append):
+        (WebCore::ShadowContentElement::inclusions):
+        * dom/ShadowContentSelector.cpp:
+        (WebCore::ShadowContentSelector::selectInclusion):
+        * dom/ShadowContentSelector.h:
+
+2011-07-12  David Reveman  <reveman@chromium.org>
+
+        [Chromium] Use nearest filter method with pixel aligned transforms.
+        https://bugs.webkit.org/show_bug.cgi?id=64338
+
+        Reviewed by James Robinson.
+
+        Check for integer translation and use nearest texture filter when
+        possible to avoid filter precisions problems at the layer edges.
+
+        Test: compositing/iframes/nested-iframe-scrolling.html (existing)
+
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::drawTiles):
+        * platform/graphics/transforms/TransformationMatrix.cpp:
+        (WebCore::TransformationMatrix::isIntegerTranslation):
+        * platform/graphics/transforms/TransformationMatrix.h:
+
+2011-07-12  David Reveman  <reveman@chromium.org>
+
+        Removed unnecessary function parameters from TilingData::textureOffset.
+        https://bugs.webkit.org/show_bug.cgi?id=64245
+
+        Reviewed by Brent Fulgham.
+
+        No new tests, no functionality changes.
+
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::drawTiles):
+        * platform/graphics/gpu/TilingData.cpp:
+        (WebCore::TilingData::textureOffset):
+        * platform/graphics/gpu/TilingData.h:
+
+2011-07-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Move RenderTextControl::indexForVisiblePosition to HTMLTextFormControlElement
+        https://bugs.webkit.org/show_bug.cgi?id=64403
+
+        Reviewed by Hajime Morita.
+
+        Moved indexForVisiblePosition from RenderTextControl to HTMLTextFormControlElement.
+
+        Also replaced the call to RenderTextControl::isSelectableElement by a call to enclosingTextFormControl
+        (moved from htmlediting to HTMLTextFormControlElement) because we are only interested in checking
+        whether the given position is inside the current text form control or not.
+
+        In addition, modernized the code in indexForVisiblePosition by calling parentAnchoredEquivalent on the
+        given position and replacing calls to deprecateNode and deprecatedEditingOffset by calls to containerNode
+        and offsetInContainer.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::indexForVisiblePosition): Calls indexForVisiblePosition.
+        * editing/htmlediting.cpp: Removed enclosingTextFromControl.
+        * editing/htmlediting.h: Removed enclosingTextFromControl.
+        * html/HTMLTextFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::indexForVisiblePosition): Moved from RenderTextControl.
+        (WebCore::HTMLTextFormControlElement::computeSelectionStart): Calls indexForVisiblePosition.
+        (WebCore::HTMLTextFormControlElement::computeSelectionEnd): Calls indexForVisiblePosition.
+        (WebCore::enclosingTextFormControl): Moved from htmlediting.cpp
+        * html/HTMLTextFormControlElement.h:
+        * rendering/RenderTextControl.cpp:
+        * rendering/RenderTextControl.h:
+
+2011-07-12  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        Make RenderObject::containingBlock virtual for better speed and clarity
+        https://bugs.webkit.org/show_bug.cgi?id=64318
+
+        Reviewed by Darin Adler.
+
+        No new tests, performance refactoring.
+
+        On some of my test cases, this method takes between 3 and 5% of the time spend.
+        The method makes 2 calls to virtual methods which could be moved to their overriden
+        version of containingBlock if we made it virtual.
+
+        That's what this patch does. It saves between 1 and 2% on some synthetic test cases
+        as well as made the current method shorter.
+
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::containingBlock): Removed code for RenderView and RenderTableCell,
+        replaced by ASSERTs.
+
+        * rendering/RenderObject.h: Made containingBlock virtual.
+
+        * rendering/RenderTableCell.h:
+        (WebCore::RenderTableCell::containingBlock):
+        * rendering/RenderView.h:
+        (WebCore::RenderView::containingBlock):
+        The code moved from RenderObject is inlined in those 2 methods.
+
+2011-07-12  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Chromium win build fix.
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::drawGlyphsWin):
+
+2011-07-12  Pratik Solanki  <psolanki@apple.com>
+
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=63674
+
+        Reviewed by David Kilzer.
+
+        Changes to ResourceHandle class to get it to compile with USE(CFNETWORK).
+
+        No new tests because no change in functionality and option is not enabled on Mac.
+
+        * platform/network/ResourceHandle.h:
+        * platform/network/ResourceHandleInternal.h:
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::didReceiveResponse):
+        (WebCore::ResourceHandleInternal::~ResourceHandleInternal):
+        (WebCore::ResourceHandle::start):
+        (WebCore::WebCoreSynchronousLoaderClient::willSendRequest): Call adjustMIMETypeIfNecessary
+        on Mac. Also port over fix for <rdar://problem/6901522> added in r43993 which forces the
+        MIME type to text/html if the request is annotated with a "ForceHTMLMIMEType" property.
+
+2011-07-12  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Delete the unused legacy accelerated canvas 2d code
+        https://bugs.webkit.org/show_bug.cgi?id=64214
+
+        Reviewed by Stephen White.
+
+        This removes the legacy accelerated canvas 2d path and support logic since we (chromium) are no longer using
+        this codepath and it seems clear that no other port is interested.
+
+        Refactoring and removing unused code, so no new tests.
+
+        * WebCore.gypi:
+        * WebCore.xcodeproj/project.pbxproj:
+        * html/canvas/CanvasRenderingContext2D.cpp:
+        (WebCore::CanvasRenderingContext2D::CanvasRenderingContext2D):
+        (WebCore::CanvasRenderingContext2D::setGlobalCompositeOperation):
+        (WebCore::CanvasRenderingContext2D::didDraw):
+        * html/canvas/CanvasRenderingContext2D.h:
+        * loader/EmptyClients.h:
+        * page/ChromeClient.h:
+        * page/Page.cpp:
+        (WebCore::Page::sharedGraphicsContext3D):
+        * page/Page.h:
+        * platform/graphics/GraphicsContext.cpp:
+        (WebCore::GraphicsContext::setSharedGraphicsContext3D):
+        (WebCore::GraphicsContext::syncSoftwareCanvas):
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/GraphicsContext3D.h:
+        * platform/graphics/chromium/DrawingBufferChromium.cpp:
+        (WebCore::DrawingBuffer::setGrContext):
+        * platform/graphics/chromium/FontLinux.cpp:
+        (WebCore::Font::drawGlyphs):
+        * platform/graphics/chromium/cc/CCLayerSorter.cpp:
+        (WebCore::pointInTriangle):
+        * platform/graphics/gpu/BicubicShader.cpp: Removed.
+        * platform/graphics/gpu/BicubicShader.h: Removed.
+        * platform/graphics/gpu/ConvolutionShader.cpp: Removed.
+        * platform/graphics/gpu/ConvolutionShader.h: Removed.
+        * platform/graphics/gpu/GraphicsContextGPU.cpp: Removed.
+        * platform/graphics/gpu/GraphicsContextGPU.h: Removed.
+        * platform/graphics/gpu/SharedGraphicsContext3D.cpp: Removed.
+        * platform/graphics/gpu/SharedGraphicsContext3D.h: Removed.
+        * platform/graphics/gpu/SolidFillShader.cpp: Removed.
+        * platform/graphics/gpu/SolidFillShader.h: Removed.
+        * platform/graphics/gpu/TexShader.cpp: Removed.
+        * platform/graphics/gpu/TexShader.h: Removed.
+        * platform/graphics/skia/GraphicsContextSkia.cpp:
+        (WebCore::GraphicsContext::savePlatformState):
+        (WebCore::GraphicsContext::restorePlatformState):
+        (WebCore::GraphicsContext::addInnerRoundedRectClip):
+        (WebCore::GraphicsContext::clearRect):
+        (WebCore::GraphicsContext::clip):
+        (WebCore::GraphicsContext::canvasClip):
+        (WebCore::GraphicsContext::clipOut):
+        (WebCore::GraphicsContext::clipPath):
+        (WebCore::GraphicsContext::concatCTM):
+        (WebCore::GraphicsContext::setCTM):
+        (WebCore::GraphicsContext::drawConvexPolygon):
+        (WebCore::GraphicsContext::drawEllipse):
+        (WebCore::GraphicsContext::drawFocusRing):
+        (WebCore::GraphicsContext::drawLine):
+        (WebCore::GraphicsContext::drawLineForTextChecking):
+        (WebCore::GraphicsContext::drawLineForText):
+        (WebCore::GraphicsContext::drawRect):
+        (WebCore::GraphicsContext::fillPath):
+        (WebCore::GraphicsContext::fillRect):
+        (WebCore::GraphicsContext::fillRoundedRect):
+        (WebCore::GraphicsContext::scale):
+        (WebCore::GraphicsContext::setAlpha):
+        (WebCore::GraphicsContext::setPlatformCompositeOperation):
+        (WebCore::GraphicsContext::setPlatformFillColor):
+        (WebCore::GraphicsContext::setPlatformShadow):
+        (WebCore::GraphicsContext::strokeArc):
+        (WebCore::GraphicsContext::strokePath):
+        (WebCore::GraphicsContext::strokeRect):
+        (WebCore::GraphicsContext::rotate):
+        (WebCore::GraphicsContext::translate):
+        (WebCore::GraphicsContext::setSharedGraphicsContext3D):
+        (WebCore::GraphicsContext::syncSoftwareCanvas):
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::copyImage):
+        (WebCore::ImageBuffer::draw):
+        (WebCore::ImageBuffer::getUnmultipliedImageData):
+        (WebCore::ImageBuffer::getPremultipliedImageData):
+        (WebCore::ImageBuffer::putUnmultipliedImageData):
+        (WebCore::ImageBuffer::putPremultipliedImageData):
+        * platform/graphics/skia/ImageSkia.cpp:
+        (WebCore::BitmapImage::draw):
+        (WebCore::BitmapImageSingleFrameSkia::draw):
+        * platform/graphics/skia/NativeImageSkia.cpp:
+        (WebCore::NativeImageSkia::~NativeImageSkia):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        (WebCore::PlatformContextSkia::PlatformContextSkia):
+        (WebCore::PlatformContextSkia::~PlatformContextSkia):
+        (WebCore::PlatformContextSkia::setSharedGraphicsContext3D):
+        (WebCore::PlatformContextSkia::makeGrContextCurrent):
+        * platform/graphics/skia/PlatformContextSkia.h:
+
+2011-07-12  Emil A Eklund  <eae@chromium.org>
+
+        Switch InlineFlowBox to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64399
+
+        Reviewed by Eric Seidel.
+
+        First step in moving floats over to the new layout abstraction.
+
+        No new tests, no new functionality.
+
+        * rendering/InlineBox.cpp:
+        (WebCore::InlineBox::logicalHeight):
+        * rendering/InlineBox.h:
+        (WebCore::InlineBox::logicalTop):
+        (WebCore::InlineBox::logicalBottom):
+        (WebCore::InlineBox::setLogicalTop):
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::adjustMaxAscentAndDescent):
+        (WebCore::InlineFlowBox::computeLogicalBoxHeights):
+        (WebCore::InlineFlowBox::placeBoxesInBlockDirection):
+        (WebCore::InlineFlowBox::addBoxShadowVisualOverflow):
+        (WebCore::InlineFlowBox::addTextBoxVisualOverflow):
+        (WebCore::InlineFlowBox::addReplacedChildOverflow):
+        (WebCore::InlineFlowBox::constrainToLineTopAndBottomIfNeeded):
+        (WebCore::InlineFlowBox::computeOverAnnotationAdjustment):
+        (WebCore::InlineFlowBox::computeUnderAnnotationAdjustment):
+        * rendering/InlineFlowBox.h:
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::logicalRightSelectionGap):
+        * rendering/RenderBlock.h:
+        * rendering/RootInlineBox.cpp:
+        (WebCore::RootInlineBox::alignBoxesInBlockDirection):
+        (WebCore::RootInlineBox::lineSelectionGap):
+        (WebCore::RootInlineBox::ascentAndDescentForBox):
+        (WebCore::RootInlineBox::verticalPositionForBox):
+        * rendering/RootInlineBox.h:
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::getShadowExtent):
+        (WebCore::RenderStyle::getShadowHorizontalExtent):
+        (WebCore::RenderStyle::getShadowVerticalExtent):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::getTextShadowExtent):
+        (WebCore::InheritedFlags::getTextShadowHorizontalExtent):
+        (WebCore::InheritedFlags::getTextShadowVerticalExtent):
+        (WebCore::InheritedFlags::getTextShadowInlineDirectionExtent):
+        (WebCore::InheritedFlags::getTextShadowBlockDirectionExtent):
+        (WebCore::InheritedFlags::getBoxShadowExtent):
+        (WebCore::InheritedFlags::getBoxShadowHorizontalExtent):
+        (WebCore::InheritedFlags::getBoxShadowVerticalExtent):
+        (WebCore::InheritedFlags::getBoxShadowInlineDirectionExtent):
+        (WebCore::InheritedFlags::getBoxShadowBlockDirectionExtent):
+        (WebCore::InheritedFlags::getShadowInlineDirectionExtent):
+        (WebCore::InheritedFlags::getShadowBlockDirectionExtent):
+        * rendering/style/ShadowData.cpp:
+        (WebCore::calculateShadowExtent):
+        (WebCore::ShadowData::adjustRectForShadow):
+        * rendering/style/ShadowData.h:
+        (WebCore::ShadowData::ShadowData):
+        (WebCore::ShadowData::x):
+        (WebCore::ShadowData::y):
+
+2011-07-12  Kenichi Ishibashi  <bashi@chromium.org>
+
+        [Chromium] SVG text is not rendered sometimes with geometricPrecision
+        https://bugs.webkit.org/show_bug.cgi?id=64341
+
+        Changing the type of x and y offsets of ComplexTextControllerLinux to make it possible to treat negative offsets.
+
+        Reviewed by Tony Chang.
+
+        Test: platform/chromium-linux/svg/text/text-with-geometric-precision.svg
+
+        * platform/graphics/chromium/ComplexTextControllerLinux.cpp: Changed the type of m_offsetX and m_startingY from unsigned to int.
+        (WebCore::ComplexTextController::ComplexTextController): Changed the type of the argument.
+        (WebCore::ComplexTextController::reset): Ditto.
+        * platform/graphics/chromium/ComplexTextControllerLinux.h:
+
+2011-07-12  Alexandru Chiculita  <achicu@adobe.com>
+
+        Reviewed by David Hyatt.
+
+        [CSS Exclusions] Parse wrap-shape property
+        https://bugs.webkit.org/show_bug.cgi?id=61726
+
+        Parsing wrap-shape: rect, circle, ellipse and polygon.
+        Moved WindRule from Path.h to it's own file.
+
+        Test: fast/exclusions/parsing-wrap-shape.html
+
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        (WebCore::CSSParser::parseWrapShapeRect):
+        (WebCore::CSSParser::parseWrapShapeCircle):
+        (WebCore::CSSParser::parseWrapShapeEllipse):
+        (WebCore::CSSParser::parseWrapShapePolygon):
+        (WebCore::CSSParser::parseWrapShape):
+        * css/CSSParser.h:
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::init):
+        (WebCore::CSSPrimitiveValue::cleanup):
+        (WebCore::CSSPrimitiveValue::cssText):
+        * css/CSSPrimitiveValue.h:
+        (WebCore::CSSPrimitiveValue::getShapeValue):
+        * css/CSSPropertyNames.in:
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        * css/CSSValueKeywords.in:
+        * css/CSSWrapShapes.cpp: Added.
+        (WebCore::CSSWrapShapeRect::cssText):
+        (WebCore::CSSWrapShapeCircle::cssText):
+        (WebCore::CSSWrapShapeEllipse::cssText):
+        (WebCore::CSSWrapShapePolygon::cssText):
+        * css/CSSWrapShapes.h: Added.
+        (WebCore::CSSWrapShape::~CSSWrapShape):
+        (WebCore::CSSWrapShape::CSSWrapShape):
+        (WebCore::CSSWrapShapeRect::create):
+        (WebCore::CSSWrapShapeRect::left):
+        (WebCore::CSSWrapShapeRect::top):
+        (WebCore::CSSWrapShapeRect::width):
+        (WebCore::CSSWrapShapeRect::height):
+        (WebCore::CSSWrapShapeRect::radiusX):
+        (WebCore::CSSWrapShapeRect::radiusY):
+        (WebCore::CSSWrapShapeRect::setLeft):
+        (WebCore::CSSWrapShapeRect::setTop):
+        (WebCore::CSSWrapShapeRect::setWidth):
+        (WebCore::CSSWrapShapeRect::setHeight):
+        (WebCore::CSSWrapShapeRect::setRadiusX):
+        (WebCore::CSSWrapShapeRect::setRadiusY):
+        (WebCore::CSSWrapShapeRect::type):
+        (WebCore::CSSWrapShapeRect::CSSWrapShapeRect):
+        (WebCore::CSSWrapShapeCircle::create):
+        (WebCore::CSSWrapShapeCircle::left):
+        (WebCore::CSSWrapShapeCircle::top):
+        (WebCore::CSSWrapShapeCircle::radius):
+        (WebCore::CSSWrapShapeCircle::setLeft):
+        (WebCore::CSSWrapShapeCircle::setTop):
+        (WebCore::CSSWrapShapeCircle::setRadius):
+        (WebCore::CSSWrapShapeCircle::type):
+        (WebCore::CSSWrapShapeCircle::CSSWrapShapeCircle):
+        (WebCore::CSSWrapShapeEllipse::create):
+        (WebCore::CSSWrapShapeEllipse::left):
+        (WebCore::CSSWrapShapeEllipse::top):
+        (WebCore::CSSWrapShapeEllipse::radiusX):
+        (WebCore::CSSWrapShapeEllipse::radiusY):
+        (WebCore::CSSWrapShapeEllipse::setLeft):
+        (WebCore::CSSWrapShapeEllipse::setTop):
+        (WebCore::CSSWrapShapeEllipse::setRadiusX):
+        (WebCore::CSSWrapShapeEllipse::setRadiusY):
+        (WebCore::CSSWrapShapeEllipse::type):
+        (WebCore::CSSWrapShapeEllipse::CSSWrapShapeEllipse):
+        (WebCore::CSSWrapShapePolygon::create):
+        (WebCore::CSSWrapShapePolygon::appendPoint):
+        (WebCore::CSSWrapShapePolygon::getXAt):
+        (WebCore::CSSWrapShapePolygon::getYAt):
+        (WebCore::CSSWrapShapePolygon::setWindRule):
+        (WebCore::CSSWrapShapePolygon::windRule):
+        (WebCore::CSSWrapShapePolygon::type):
+        (WebCore::CSSWrapShapePolygon::CSSWrapShapePolygon):
+        * css/SVGCSSValueKeywords.in:
+        * platform/graphics/Path.h:
+        * platform/graphics/WindRule.h: Added.
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::setWrapShape):
+        (WebCore::InheritedFlags::wrapShape):
+        (WebCore::InheritedFlags::initialWrapShape):
+        * rendering/style/StyleRareNonInheritedData.cpp:
+        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
+        (WebCore::StyleRareNonInheritedData::operator==):
+        * rendering/style/StyleRareNonInheritedData.h:
+
+2011-07-12  Simon Fraser  <simon.fraser@apple.com>
+
+        Clean up some RenderLayerCompositor code relating to scroll and root layers
+        https://bugs.webkit.org/show_bug.cgi?id=64400
+
+        Reviewed by James Robinson.
+
+        There was no need for FrameView::syncCompositingStateForThisFrame()
+        to call syncCompositingStateForThisLayerOnly() on the various
+        scrollbar-related layers, because the subsequent call to 
+        compositor()->flushPendingLayerChanges() starts to flush at
+        m_overflowControlsHostLayer if one exists, and it's an ancestor
+        of the scrollbar layers.
+        
+        Also clean up terminology in RenderLayerCompositor.
+            m_rootPlatformLayer -> m_rootContentLayer
+            rootPlatformLayer() -> rootGraphicsLayer()
+        
+        No behavior change, so no new tests.
+        
+        * page/FrameView.cpp:
+        (WebCore::FrameView::syncCompositingStateForThisFrame):
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::enableCompositingMode):
+        (WebCore::RenderLayerCompositor::flushPendingLayerChanges):
+        (WebCore::RenderLayerCompositor::updateCompositingLayers):
+        (WebCore::RenderLayerCompositor::layerTreeAsText):
+        (WebCore::RenderLayerCompositor::parentFrameContentLayers):
+        (WebCore::RenderLayerCompositor::rootGraphicsLayer):
+        (WebCore::RenderLayerCompositor::didMoveOnscreen):
+        (WebCore::RenderLayerCompositor::willMoveOffscreen):
+        (WebCore::RenderLayerCompositor::updateRootLayerPosition):
+        (WebCore::RenderLayerCompositor::ensureRootLayer):
+        (WebCore::RenderLayerCompositor::destroyRootLayer):
+        (WebCore::RenderLayerCompositor::attachRootLayer):
+        (WebCore::RenderLayerCompositor::detachRootLayer):
+        (WebCore::RenderLayerCompositor::updateRootLayerAttachment):
+        * rendering/RenderLayerCompositor.h:
+
+2011-07-12  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r90842.
+        http://trac.webkit.org/changeset/90842
+        https://bugs.webkit.org/show_bug.cgi?id=64401
+
+        Causes crash in debug on compositing/overflow/content-gains-
+        scrollbars.html (Requested by jamesr on #webkit).
+
+        * WebCore.gypi:
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerChromium::ContentLayerChromium):
+        (WebCore::ContentLayerChromium::paintContentsIfDirty):
+        (WebCore::ContentLayerChromium::cleanupResources):
+        (WebCore::ContentLayerChromium::setLayerRenderer):
+        (WebCore::ContentLayerChromium::tilingTransform):
+        (WebCore::ContentLayerChromium::contentBounds):
+        (WebCore::ContentLayerChromium::updateLayerSize):
+        (WebCore::ContentLayerChromium::draw):
+        (WebCore::ContentLayerChromium::drawsContent):
+        (WebCore::ContentLayerChromium::createTilerIfNeeded):
+        (WebCore::ContentLayerChromium::updateCompositorResources):
+        (WebCore::ContentLayerChromium::setTilingOption):
+        (WebCore::ContentLayerChromium::bindContentsTexture):
+        (WebCore::ContentLayerChromium::setIsMask):
+        (WebCore::writeIndent):
+        (WebCore::ContentLayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        * platform/graphics/chromium/ImageLayerChromium.cpp:
+        (WebCore::ImageLayerChromium::ImageLayerChromium):
+        (WebCore::ImageLayerChromium::paintContentsIfDirty):
+        (WebCore::ImageLayerChromium::updateCompositorResources):
+        (WebCore::ImageLayerChromium::contentBounds):
+        * platform/graphics/chromium/ImageLayerChromium.h:
+        (WebCore::ImageLayerChromium::drawsContent):
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::pushPropertiesTo):
+        (WebCore::LayerChromium::ccLayerImpl):
+        * platform/graphics/chromium/LayerChromium.h:
+        (WebCore::LayerChromium::draw):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawRootLayer):
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::updateRect):
+        (WebCore::LayerTilerChromium::draw):
+        (WebCore::LayerTilerChromium::drawTiles):
+        * platform/graphics/chromium/LayerTilerChromium.h:
+        * platform/graphics/chromium/TiledLayerChromium.cpp: Removed.
+        * platform/graphics/chromium/TiledLayerChromium.h: Removed.
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        (WebCore::CCLayerImpl::drawsContent):
+        (WebCore::CCLayerImpl::draw):
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp: Removed.
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.h: Removed.
+
+2011-07-12  Joseph Pecoraro  <joepeck@webkit.org>
+
+        ApplicationCache update should not immediately fail when reaching per-origin quota
+        https://bugs.webkit.org/show_bug.cgi?id=64177
+
+        Reviewed by Alexey Proskuryakov.
+
+        New behavior of handling ApplicationCache per-origin quotas. Previously,
+        if the quota was reached while downloading we would fail the download
+        and then prompt the user for a storage increase. This required a refresh,
+        a redownload of resources, and the total storage was not known so the
+        process could be repeated multiple times before an acceptable quota
+        was found or the user disallowed an increase.
+        
+        The new behavior is to complete the download of the entire appcache.
+        When the cache completes downloading and it is greater than the origin
+        quota, prompt the user to allow a quota increase with the known space
+        needed. If the quota is increased, the cache will succeed, otherwise
+        it will fail with the normal failure steps.
+
+        An alternative behavior is prompting while downloading immediately
+        when the origin quota is reached, however at that point the entire
+        space needed is unknown and so quota increases might not be enough
+        and could result in multiple prompts to the user.
+
+        Tests: http/tests/appcache/origin-quota-continued-download-multiple-manifests.html
+               http/tests/appcache/origin-quota-continued-download.html
+
+        * loader/appcache/ApplicationCacheGroup.h:
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        (WebCore::ApplicationCacheGroup::ApplicationCacheGroup):
+        Rename instance variable to be more clear on its intent.
+
+        (WebCore::ApplicationCacheGroup::didFinishLoading):
+        Check the quota limit while downloading so we can fail early
+        if the user already denied a quota increase.
+
+        (WebCore::ApplicationCacheGroup::didReachOriginQuota):
+        Pass the space needed information to the chrome client.
+
+        (WebCore::ApplicationCacheGroup::cacheUpdateFailedDueToOriginQuota):
+        Removed. Instead convert the callers to update state and console
+        log when the per-origin quota is reached. This allows us to follow
+        the normal failure steps if the quota is reached at the end of a
+        download, and the alternative short path when we fail during downloading.
+
+        (WebCore::ApplicationCacheGroup::recalculateAvailableSpaceInQuota):
+        Extract to a helper function.
+
+        (WebCore::ApplicationCacheGroup::checkIfLoadIsComplete):
+        Allow for a quota increase at the end of the download now that
+        we know the space needed. Then proceed to fail or succeed
+        as we normally would.
+
+        * loader/appcache/ApplicationCacheStorage.h:
+        * loader/appcache/ApplicationCacheStorage.cpp:
+        (WebCore::ApplicationCacheStorage::checkOriginQuota):
+        (WebCore::ApplicationCacheStorage::storeNewestCache):
+        Extract checking the origin quota for when an ApplicationCacheGroup
+        will be replacing an ApplicationCacheGroup into a helper function.
+        The helper also provides an out parameter for the space needed
+        to properly fit the new cache group if it wouldn't fit.
+
+        * page/ChromeClient.h:
+        * loader/EmptyClients.h:
+        (WebCore::EmptyChromeClient::reachedApplicationCacheOriginQuota):
+        Add a space needed parameter when reaching the per-origin quota.
+
+2011-07-12  Chris Rogers  <crogers@google.com>
+
+        AudioDevice::Stop can close NULL handle.
+        https://bugs.webkit.org/show_bug.cgi?id=64157
+
+        Reviewed by Kenneth Russell.
+
+        No new tests since audio API is not yet implemented.
+
+        * bindings/js/JSAudioContextCustom.cpp:
+        (WebCore::JSAudioContextConstructor::constructJSAudioContext):
+        * bindings/v8/custom/V8AudioContextCustom.cpp:
+        (WebCore::V8AudioContext::constructorCallback):
+        * webaudio/AudioContext.cpp:
+        (WebCore::AudioContext::create):
+        (WebCore::AudioContext::uninitialize):
+        * webaudio/AudioContext.h:
+
+2011-07-12  John Bates  <jbates@google.com>
+
+        Move call to syncCompositingLayers so that we do not trigger redundant draws.
+        https://bugs.webkit.org/show_bug.cgi?id=64224
+
+        doComposite was triggering two composites every time a canvas was dirtied.
+        By moving syncCompositingLayers call to layout, the client code can draw without triggering
+        a redundant frame. Also renamed WebViewImpl::updateLayers to
+        syncCompositingLayers, because it was confusing. CCLayerTreeHostImplProxy::updateLayers was
+        no longer needed, because animateAndLayout calls WebViewImpl::layout.
+
+        Reviewed by James Robinson.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::updateLayers):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp:
+        (WebCore::CCLayerTreeHost::syncCompositingLayers):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp:
+        (WebCore::CCLayerTreeHostImplProxy::requestFrameAndCommit):
+
+2011-07-12  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Isolate HTMLTextFormControlElement into a separate file
+        https://bugs.webkit.org/show_bug.cgi?id=64381
+
+        Reviewed by Dimitri Glazkov.
+
+        Extracted HTMLTextFormControlElement.h and HTMLTextFormControlElement.cpp out of
+        HTMLFormControlElement.h and HTMLFormControlElement.cpp.
+
+        Also moved defaultEventHandler from HTMLFormControlElementWithState to HTMLTextFormControlElement
+        because it was specific to HTMLTextFormControlElement, and replaced all references to
+        HTMLFormControlElementWithState in HTMLInputElement and HTMLTextAreaElement by ones to
+        HTMLTextFormControlElement.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * editing/TextIterator.cpp:
+        * editing/htmlediting.cpp:
+        * html/HTMLElementsAllInOne.cpp:
+        * html/HTMLFormControlElement.cpp:
+        (WebCore::HTMLFormControlElement::isFocusable):
+        * html/HTMLFormControlElement.h:
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::isKeyboardFocusable):
+        (WebCore::HTMLInputElement::isMouseFocusable):
+        (WebCore::HTMLInputElement::updateFocusAppearance):
+        (WebCore::HTMLInputElement::canStartSelection):
+        (WebCore::HTMLInputElement::parseMappedAttribute):
+        (WebCore::HTMLInputElement::finishParsingChildren):
+        (WebCore::HTMLInputElement::rendererIsNeeded):
+        (WebCore::HTMLInputElement::attach):
+        (WebCore::HTMLInputElement::detach):
+        (WebCore::HTMLInputElement::copyNonAttributeProperties):
+        (WebCore::HTMLInputElement::defaultEventHandler):
+        (WebCore::HTMLInputElement::willMoveToNewOwnerDocument):
+        (WebCore::HTMLInputElement::didMoveToNewOwnerDocument):
+        (WebCore::HTMLInputElement::addSubresourceAttributeURLs):
+        (WebCore::HTMLInputElement::recalcWillValidate):
+        * html/HTMLInputElement.h:
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::defaultEventHandler):
+        * html/HTMLTextAreaElement.h:
+        * html/HTMLTextFormControlElement.cpp: Copied from Source/WebCore/html/HTMLFormControlElement.cpp.
+        (WebCore::HTMLTextFormControlElement::defaultEventHandler):
+        * html/HTMLTextFormControlElement.h: Copied from Source/WebCore/html/HTMLFormControlElement.h.
+
+2011-07-12  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r90831.
+        http://trac.webkit.org/changeset/90831
+        https://bugs.webkit.org/show_bug.cgi?id=64389
+
+        Likely caused fast/canvas/DrawImageSinglePixelStretch.html to
+        start timing out on the chromium GPU bots (Requested by ojan
+        on #webkit).
+
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::getImageData):
+        (WebCore::putImageData):
+
+2011-07-12  James Robinson  <jamesr@chromium.org>
+
+        Reviewed by Kenneth Russell.
+
+        [chromium] Move draw implementation for ContentLayerChromium/ImageLayerChromium to the appropriate CCLayerImpl subclass
+        https://bugs.webkit.org/show_bug.cgi?id=58833
+
+        Adds a TiledLayerChromium class to handle the tiling logic shared by ContentLayerChromium and ImageLayerChromium
+        so that they can be siblings in the class hierarchy instead of children. Also adds a CCTiledLayerImpl to handle
+        the drawing responsibilities for tiled layers.
+
+        TiledLayerChromium maintains a tiler, tiling options, and calculates the tiling transform. Subclasses are
+        responsible for providing an appropriate texture updater implementation. CCTiledLayerImpl takes the tiler,
+        tiling transform and layer properties and draws the layer.  Longer term it'd be better of the CCTiledLayerImpl
+        owned the tiler and the TiledLayerChromium only owned an updater, but getting there will require changing the
+        way tile eviction works.
+
+        * WebCore.gypi:
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerChromium::ContentLayerChromium):
+        (WebCore::ContentLayerChromium::paintContentsIfDirty):
+        (WebCore::ContentLayerChromium::drawsContent):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        (WebCore::ContentLayerChromium::textureUpdater):
+        * platform/graphics/chromium/ImageLayerChromium.cpp:
+        (WebCore::ImageLayerChromium::ImageLayerChromium):
+        (WebCore::ImageLayerChromium::cleanupResources):
+        (WebCore::ImageLayerChromium::paintContentsIfDirty):
+        (WebCore::ImageLayerChromium::textureUpdater):
+        (WebCore::ImageLayerChromium::contentBounds):
+        (WebCore::ImageLayerChromium::drawsContent):
+        (WebCore::ImageLayerChromium::createTextureUpdaterIfNeeded):
+        * platform/graphics/chromium/ImageLayerChromium.h:
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::pushPropertiesTo):
+        (WebCore::LayerChromium::ccLayerImpl):
+        * platform/graphics/chromium/LayerChromium.h:
+        (WebCore::LayerChromium::contentBounds):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawRootLayer):
+        (WebCore::visibleLayerRect):
+        (WebCore::paintLayerContentsIfDirty):
+        (WebCore::LayerRendererChromium::paintLayerContents):
+        (WebCore::LayerRendererChromium::drawLayer):
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::updateRect):
+        (WebCore::LayerTilerChromium::draw):
+        (WebCore::LayerTilerChromium::drawTiles):
+        * platform/graphics/chromium/LayerTilerChromium.h:
+        * platform/graphics/chromium/TiledLayerChromium.cpp: Added.
+        (WebCore::TiledLayerChromium::TiledLayerChromium):
+        (WebCore::TiledLayerChromium::~TiledLayerChromium):
+        (WebCore::TiledLayerChromium::createCCLayerImpl):
+        (WebCore::TiledLayerChromium::cleanupResources):
+        (WebCore::TiledLayerChromium::setLayerRenderer):
+        (WebCore::TiledLayerChromium::updateTileSizeAndTilingOption):
+        (WebCore::TiledLayerChromium::drawsContent):
+        (WebCore::TiledLayerChromium::createTilerIfNeeded):
+        (WebCore::TiledLayerChromium::updateCompositorResources):
+        (WebCore::TiledLayerChromium::setTilingOption):
+        (WebCore::TiledLayerChromium::setIsMask):
+        (WebCore::TiledLayerChromium::tilingTransform):
+        (WebCore::TiledLayerChromium::pushPropertiesTo):
+        (WebCore::writeIndent):
+        (WebCore::TiledLayerChromium::dumpLayerProperties):
+        * platform/graphics/chromium/TiledLayerChromium.h: Copied from Source/WebCore/platform/graphics/chromium/ContentLayerChromium.h.
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        (WebCore::CCLayerImpl::draw):
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        (WebCore::CCLayerImpl::setDrawsContent):
+        (WebCore::CCLayerImpl::drawsContent):
+        (WebCore::CCLayerImpl::contentBounds):
+        (WebCore::CCLayerImpl::setContentBounds):
+        (WebCore::CCLayerImpl::doubleSided):
+        (WebCore::CCLayerImpl::setDoubleSided):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp: Added.
+        (WebCore::CCTiledLayerImpl::CCTiledLayerImpl):
+        (WebCore::CCTiledLayerImpl::~CCTiledLayerImpl):
+        (WebCore::CCTiledLayerImpl::draw):
+        (WebCore::CCTiledLayerImpl::bindContentsTexture):
+        (WebCore::CCTiledLayerImpl::dumpLayerProperties):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.h: Added.
+        (WebCore::CCTiledLayerImpl::create):
+        (WebCore::CCTiledLayerImpl::setTilingTransform):
+        (WebCore::CCTiledLayerImpl::setTiler):
+
+2011-07-12  Arno Renevier  <arno@renevier.net>
+
+        [GTK] DOM bindings do not have gir annotations
+        https://bugs.webkit.org/show_bug.cgi?id=45395
+
+        Reviewed by Xan Lopez.
+
+        * bindings/scripts/CodeGeneratorGObject.pm: generate introspection annotations.
+        * bindings/scripts/test/GObject/WebKitDOMTestCallback.h: update for new output.
+        * bindings/scripts/test/GObject/WebKitDOMTestObj.h: ditto.
+        * bindings/scripts/test/GObject/WebKitDOMTestSerializedScriptValueInterface.h: ditto.
+
+2011-07-12  Chris Rogers  <crogers@google.com>
+
+        webkitAudioContext does not do proper sanity checking on its arguments.
+        https://bugs.webkit.org/show_bug.cgi?id=64076
+
+        Reviewed by Kenneth Russell.
+
+        No new tests since audio API is not yet implemented.
+
+        * bindings/js/JSAudioContextCustom.cpp:
+        (WebCore::JSAudioContextConstructor::constructJSAudioContext):
+        (WebCore::JSAudioContext::createBuffer):
+        * bindings/v8/custom/V8AudioContextCustom.cpp:
+        (WebCore::V8AudioContext::constructorCallback):
+        (WebCore::V8AudioContext::createBufferCallback):
+        * platform/audio/HRTFDatabaseLoader.h:
+        (WebCore::HRTFDatabaseLoader::databaseSampleRate):
+        * webaudio/AudioContext.cpp:
+        (WebCore::AudioContext::create):
+        (WebCore::AudioContext::createOfflineContext):
+        (WebCore::AudioContext::createBuffer):
+        * webaudio/AudioContext.h:
+
+2011-07-12  Pratik Solanki  <psolanki@apple.com>
+
+        Implement didReceiveDataArray callback for CFNetwork based loader
+        https://bugs.webkit.org/show_bug.cgi?id=64130
+
+        Reviewed by David Kilzer.
+
+        Factor out the didReceiveDataArray code from ResourceHandleMac.mm into
+        a new method ResourceHandle::handleDataArray(). Implement the callback
+        in the CFNetwork loader code and call handleDataArray() to process
+        incoming data.
+
+        No new tests because the flag is not enabled for any bots.
+
+        * platform/network/ResourceHandle.h:
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::didReceiveDataArray):
+        (WebCore::ResourceHandle::createCFURLConnection):
+        (WebCore::ResourceHandle::handleDataArray):
+        * platform/network/mac/ResourceHandleMac.mm:
+        (-[WebCoreResourceHandleAsDelegate connection:didReceiveDataArray:]):
+
+2011-07-12  Emil A Eklund  <eae@chromium.org>
+
+        Switch preferred width/height and columns to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64329
+
+        Reviewed by Eric Seidel.
+
+        No new tests, no new functionality.
+
+        * rendering/LayoutTypes.h:
+        (WebCore::ceiledLayoutUnit):
+        Add ceiledLayoutUnit to go with the floored version.
+        
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::adjustRectForColumns):
+        (WebCore::RenderBlock::flipForWritingModeIncludingColumns):
+        (WebCore::RenderBlock::adjustStartEdgeForWritingModeIncludingColumns):
+        Rename rect version of flipForWritingModeIncludingColumns to
+        adjustStartEdgeForWritingModeIncludingColumns as it adjust the start edge
+        and does not flip the rect.
+       
+        (WebCore::RenderBlock::adjustForColumns):
+        (WebCore::updatePreferredWidth):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::minPreferredLogicalWidth):
+        (WebCore::RenderBox::maxPreferredLogicalWidth):
+        (WebCore::RenderBox::offsetFromContainer):
+        (WebCore::RenderBox::computePercentageLogicalHeight):
+        (WebCore::RenderBox::flipForWritingMode):
+        (WebCore::RenderBox::flipForWritingModeIncludingColumns):
+        * rendering/RenderBox.h:
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::itemBoundingBoxRect):
+        * rendering/RenderListBox.h:
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::minPreferredLogicalWidth):
+        (WebCore::RenderObject::maxPreferredLogicalWidth):
+        (WebCore::RenderObject::adjustForColumns):
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::computeReplacedLogicalWidth):
+        (WebCore::RenderReplaced::computeReplacedLogicalHeight):
+        * rendering/TableLayout.h:
+
+2011-07-12  Levi Weintraub  <leviw@chromium.org>
+
+        Change roundedIntRect to roundedRect
+        https://bugs.webkit.org/show_bug.cgi?id=64326
+
+        Reviewed by Eric Seidel.
+
+        Renaming RoundedIntRect to RoundedRect and moving the underlying type to Layout units from
+        integer-based versions.
+
+        No new tests, no new functionality
+
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * platform/graphics/GraphicsContext.cpp:
+        (WebCore::GraphicsContext::addRoundedRectClip):
+        (WebCore::GraphicsContext::clipOutRoundedRect):
+        (WebCore::GraphicsContext::fillRoundedRect):
+        (WebCore::GraphicsContext::fillRectWithRoundedHole):
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/Path.cpp:
+        (WebCore::Path::addRoundedRect):
+        * platform/graphics/Path.h:
+        * platform/graphics/RoundedIntRect.cpp: Removed.
+        * platform/graphics/RoundedIntRect.h: Removed.
+        * platform/graphics/RoundedRect.cpp: Copied from Source/WebCore/platform/graphics/RoundedIntRect.cpp.
+        (WebCore::RoundedRect::Radii::isZero):
+        (WebCore::RoundedRect::Radii::scale):
+        (WebCore::RoundedRect::Radii::expand):
+        (WebCore::RoundedRect::inflateWithRadii):
+        (WebCore::RoundedRect::Radii::includeLogicalEdges):
+        (WebCore::RoundedRect::Radii::excludeLogicalEdges):
+        (WebCore::RoundedRect::RoundedRect):
+        (WebCore::RoundedRect::includeLogicalEdges):
+        (WebCore::RoundedRect::excludeLogicalEdges):
+        (WebCore::RoundedRect::isRenderable):
+        * platform/graphics/RoundedRect.h: Copied from Source/WebCore/platform/graphics/RoundedIntRect.h.
+        (WebCore::RoundedRect::Radii::Radii):
+        (WebCore::RoundedRect::Radii::setTopLeft):
+        (WebCore::RoundedRect::Radii::setTopRight):
+        (WebCore::RoundedRect::Radii::setBottomLeft):
+        (WebCore::RoundedRect::Radii::setBottomRight):
+        (WebCore::RoundedRect::Radii::topLeft):
+        (WebCore::RoundedRect::Radii::topRight):
+        (WebCore::RoundedRect::Radii::bottomLeft):
+        (WebCore::RoundedRect::Radii::bottomRight):
+        (WebCore::RoundedRect::Radii::expand):
+        (WebCore::RoundedRect::Radii::shrink):
+        (WebCore::RoundedRect::rect):
+        (WebCore::RoundedRect::setRect):
+        (WebCore::RoundedRect::move):
+        (WebCore::RoundedRect::inflate):
+        (WebCore::RoundedRect::expandRadii):
+        (WebCore::RoundedRect::shrinkRadii):
+        (WebCore::operator==):
+        * platform/graphics/ShadowBlur.cpp:
+        (WebCore::ScratchBuffer::setLastShadowValues):
+        (WebCore::ScratchBuffer::setLastInsetShadowValues):
+        (WebCore::ScratchBuffer::matchesLastShadow):
+        (WebCore::ScratchBuffer::matchesLastInsetShadow):
+        (WebCore::computeSliceSizesFromRadii):
+        (WebCore::ShadowBlur::templateSize):
+        (WebCore::ShadowBlur::drawRectShadow):
+        (WebCore::ShadowBlur::drawInsetShadow):
+        (WebCore::ShadowBlur::drawRectShadowWithoutTiling):
+        (WebCore::ShadowBlur::drawInsetShadowWithoutTiling):
+        (WebCore::ShadowBlur::drawInsetShadowWithTiling):
+        (WebCore::ShadowBlur::drawRectShadowWithTiling):
+        (WebCore::ShadowBlur::drawLayerPieces):
+        * platform/graphics/ShadowBlur.h:
+        * platform/graphics/cg/GraphicsContextCG.cpp:
+        (WebCore::GraphicsContext::fillRect):
+        (WebCore::GraphicsContext::fillRoundedRect):
+        (WebCore::GraphicsContext::fillRectWithRoundedHole):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintBoxDecorations):
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::getBackgroundRoundedRect):
+        (WebCore::RenderBoxModelObject::paintFillLayerExtended):
+        (WebCore::RenderBoxModelObject::paintOneBorderSide):
+        (WebCore::RenderBoxModelObject::paintBorderSides):
+        (WebCore::RenderBoxModelObject::paintTranslucentBorderSides):
+        (WebCore::RenderBoxModelObject::paintBorder):
+        (WebCore::RenderBoxModelObject::drawBoxSideFromPath):
+        (WebCore::RenderBoxModelObject::clipBorderSidePolygon):
+        (WebCore::RenderBoxModelObject::paintBoxShadow):
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderThemeMac.mm:
+        (WebCore::RenderThemeMac::paintMenuListButtonGradients):
+        (WebCore::RenderThemeMac::paintSliderTrack):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::calcRadiiFor):
+        (WebCore::calcConstraintScaleFor):
+        (WebCore::RenderStyle::getRoundedBorderFor):
+        (WebCore::RenderStyle::getRoundedInnerBorderFor):
+        * rendering/style/RenderStyle.h:
+
+2011-07-12  Mike Reed  <reed@google.com>
+
+        [skia] optimize getImageData to avoid a copy when not needed. lockPixels() now does the right thing.
+        https://bugs.webkit.org/show_bug.cgi?id=64302
+
+        Reviewed by Stephen White.
+
+        No new tests. Just an optimization for getImageData(), existing <canvas> tests apply
+
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::getImageData):
+        (WebCore::putImageData):
+
+2011-07-12  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: introduce UserMetrics for collecting stats in Chromium port.
+        https://bugs.webkit.org/show_bug.cgi?id=64350
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/user-metrics.html
+
+        * WebCore.gypi:
+        * WebCore.vcproj/WebCore.vcproj:
+        * bindings/js/JSInspectorFrontendHostCustom.cpp:
+        (WebCore::JSInspectorFrontendHost::recordActionTaken):
+        (WebCore::JSInspectorFrontendHost::recordPanelShown):
+        (WebCore::JSInspectorFrontendHost::recordSettingChanged):
+        * bindings/v8/custom/V8InspectorFrontendHostCustom.cpp:
+        (WebCore::histogramEnumeration):
+        (WebCore::V8InspectorFrontendHost::recordActionTakenCallback):
+        (WebCore::V8InspectorFrontendHost::recordPanelShownCallback):
+        (WebCore::V8InspectorFrontendHost::recordSettingChangedCallback):
+        * inspector/InspectorFrontendHost.idl:
+        * inspector/front-end/AuditsPanel.js:
+        (WebInspector.AuditsPanel.prototype.initiateAudit):
+        * inspector/front-end/ConsoleView.js:
+        * inspector/front-end/DebuggerModel.js:
+        (WebInspector.DebuggerModel.prototype.setBreakpoint):
+        (WebInspector.DebuggerModel.prototype.setBreakpointBySourceId):
+        * inspector/front-end/InspectorFrontendHostStub.js:
+        (.WebInspector.InspectorFrontendHostStub.prototype.loadSessionSetting):
+        (.WebInspector.InspectorFrontendHostStub.prototype.recordActionTaken):
+        (.WebInspector.InspectorFrontendHostStub.prototype.recordPanelShown):
+        (.WebInspector.InspectorFrontendHostStub.prototype.recordSettingChanged):
+        * inspector/front-end/ProfilesPanel.js:
+        (WebInspector.ProfilesPanel.prototype._setRecordingProfile):
+        (WebInspector.ProfilesPanel.prototype.takeHeapSnapshot):
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel.prototype._toggleTimelineButtonClicked):
+        * inspector/front-end/UserMetrics.js: Added.
+        (WebInspector.UserMetrics.settingChanged):
+        (WebInspector.UserMetrics):
+        (WebInspector.UserMetrics.prototype.panelShown):
+        (WebInspector.UserMetrics._Recorder):
+        (WebInspector.UserMetrics._Recorder.prototype.record):
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/inspector.html:
+        * inspector/front-end/inspector.js:
+        (WebInspector._toggleAttach):
+
+2011-07-12  Pratik Solanki  <psolanki@apple.com>
+
+        Reviewed by David Kilzer.
+
+        Add NSURLResponse wrapper in ResourceResponse when USE(CFNETWORK) is enabled
+        https://bugs.webkit.org/show_bug.cgi?id=63286
+
+        When USE(CFNETWORK) is enabled on Mac, keep an NSURLResponse object along with the
+        CFURLResponseRef so that WebKit can continue using the NSURLResponse.
+
+        No new tests because no change in functionality and option is not enabled on Mac.
+
+        * platform/network/cf/ResourceResponse.h:
+        (WebCore::ResourceResponse::ResourceResponse):
+        * platform/network/mac/ResourceResponseMac.mm:
+        (WebCore::ResourceResponse::initNSURLResponse):
+        (WebCore::ResourceResponse::nsURLResponse):
+        (WebCore::ResourceResponse::ResourceResponse):
+
+2011-07-12  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: Cancelling an empty edit fails.
+        https://bugs.webkit.org/show_bug.cgi?id=64351
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ResourceView.js:
+        (WebInspector.EditableResourceSourceFrame.prototype.cancelEditing):
+
+2011-07-12  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: make TextViewerDelegate methods implementations public in SourceFrame.
+        https://bugs.webkit.org/show_bug.cgi?id=64353
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype.beforeTextChanged):
+        (WebInspector.SourceFrame.prototype.afterTextChanged):
+        (WebInspector.SourceFrame.prototype.populateTextAreaContextMenu):
+        (WebInspector.SourceFrame.prototype.suggestedFileName):
+        (WebInspector.SourceFrame.prototype.doubleClick):
+        (WebInspector.SourceFrame.prototype.cancelEditing):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.doubleClick):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.beforeTextChanged):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.afterTextChanged):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.commitEditing):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.cancelEditing):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.populateLineGutterContextMenu):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.populateTextAreaContextMenu):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.suggestedFileName):
+
+2011-07-12  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: remove more dead code from the Network panel
+        https://bugs.webkit.org/show_bug.cgi?id=64291
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkPanel.prototype._toggleGridMode):
+        (WebInspector.NetworkPanel.prototype._toggleViewingResourceMode):
+        * inspector/front-end/networkPanel.css:
+
+2011-07-12  Adam Roben  <aroben@apple.com>
+
+        Unreviewed, rolling out r90811.
+        http://trac.webkit.org/changeset/90811
+        https://bugs.webkit.org/show_bug.cgi?id=61025
+
+        Several svg tests failing assertions beneath
+        SVGSMILElement::findInstanceTime
+
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::SVGSMILElement::findInstanceTime):
+
+2011-07-12  Oliver Varga  <Varga.Oliver@stud.u-szeged.hu>
+
+        Reviewed by Nikolas Zimmermann.
+
+        Speed up SVGSMILElement::findInstanceTime.
+        https://bugs.webkit.org/show_bug.cgi?id=61025
+
+        Replace the linear search to binary search on ordered list because
+        the previous searches from the beginning was not efficient.
+        Out of index error fixed by Renata Hodovan.
+
+        No new tests this is only a performance tweak.
+
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::extractTimeFromVector):
+        (WebCore::SVGSMILElement::findInstanceTime):
+
+2011-07-11  Zeng Huiqing  <huiqing.zeng@intel.com>
+
+        Optimize HTMLInputElement::updateCheckedRadioButtons
+        https://bugs.webkit.org/show_bug.cgi?id=62840
+
+        Reviewed by Kent Tamura.
+
+        No new tests.
+
+        * dom/Document.h:
+        (WebCore::Document::getFormElements):
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::updateCheckedRadioButtons):
+        (WebCore::HTMLInputElement::setChecked):
+
+2011-07-11  Pratik Solanki  <psolanki@apple.com>
+
+        Reviewed by David Kilzer.
+
+        Add NSURLRequest wrapper in ResourceRequest when USE(CFNETWORK) is enabled
+        https://bugs.webkit.org/show_bug.cgi?id=63276
+
+        When USE(CFNETWORK) is enabled on Mac, keep an NSURLRequest object along with the
+        CFURLRequestRef so that WebKit can continue using the NSURLRequest.
+
+        No new tests because no change in functionality and option is not enabled on Mac.
+
+        * platform/network/cf/ResourceRequest.h:
+        (WebCore::ResourceRequest::updateNSURLRequest):
+        (WebCore::ResourceRequest::ResourceRequest):
+        * platform/network/cf/ResourceRequestCFNet.cpp:
+        (WebCore::findCFURLRequestSetContentDispositionEncodingFallbackArrayFunction):
+        (WebCore::findCFURLRequestCopyContentDispositionEncodingFallbackArrayFunction):
+        (WebCore::ResourceRequest::doUpdatePlatformRequest):
+        (WebCore::ResourceRequest::applyWebArchiveHackForMail):
+        * platform/network/mac/ResourceRequestMac.mm:
+        (WebCore::ResourceRequest::nsURLRequest):
+        (WebCore::ResourceRequest::ResourceRequest):
+        (WebCore::ResourceRequest::updateNSURLRequest):
+
+2011-07-11  Ryosuke Niwa  <rniwa@webkit.org>
+
+        positionForPoint is broken when a block is positioned relatively inside the parent
+        https://bugs.webkit.org/show_bug.cgi?id=64298
+
+        Reviewed by Simon Fraser.
+
+        The bug was caused by positionForPointRespectingEditingBoundaries's not taking relativePositionOffset
+        into account when computing the point in child coordinates. Fixed the bug by adding the offset to
+        childLocation as needed.
+
+        Test: fast/block/positioning/hittest-on-relative-positioned-children.html
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::positionForPointRespectingEditingBoundaries): Fixed the bug; also replaced all instances of
+        IntPoint by LayoutPoint.
+
+2011-07-11  Dan Bernstein  <mitz@apple.com>
+
+        Excessive expansion of justified text when rounding hacks are enabled
+        https://bugs.webkit.org/show_bug.cgi?id=64331
+
+        Reviewed by Anders Carlsson.
+
+        Test: platform/mac/fast/text/rounding-hacks-expansion.html
+
+        When rounding hacks are enabled, the expansion at each expansion opportunity should be by an
+        integer. Restored more of the logic that was removed in r78846 in order to ensure this.
+
+        * platform/graphics/WidthIterator.cpp:
+        (WebCore::WidthIterator::advance):
+        * platform/graphics/mac/ComplexTextController.cpp:
+        (WebCore::ComplexTextController::adjustGlyphsAndAdvances):
+
+2011-07-11  Jer Noble  <jer.noble@apple.com>
+
+        HTML5 video controller in fullscreen is partly off-screen (at least on youtube) using ClickToFlash
+        https://bugs.webkit.org/show_bug.cgi?id=64327
+
+        Reviewed by Darin Adler.
+
+        No new tests; no change in functionality, so covered by existing tests.
+
+        Make the rules from fullscreenQuickTime.css !important so they are not overridden
+        by page authors.
+
+        * css/fullscreenQuickTime.css:
+        (video:-webkit-full-screen::-webkit-media-controls-panel):
+
+2011-07-11  Levi Weintraub  <leviw@chromium.org>
+
+        Switch lineTop and lineBottom to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64317
+
+        Reviewed by Eric Seidel.
+
+        Changing lineTop and lineBottom to LayoutUnits and preparing all uses
+        of them for the upcoming conversion.
+
+        No new tests, no new functionality.
+
+        * rendering/EllipsisBox.cpp:
+        (WebCore::EllipsisBox::nodeAtPoint):
+        * rendering/EllipsisBox.h:
+        * rendering/GapRects.h:
+        (WebCore::GapRects::left):
+        (WebCore::GapRects::center):
+        (WebCore::GapRects::right):
+        (WebCore::GapRects::uniteLeft):
+        (WebCore::GapRects::uniteCenter):
+        (WebCore::GapRects::uniteRight):
+        (WebCore::GapRects::operator LayoutRect):
+        * rendering/InlineBox.cpp:
+        (WebCore::InlineBox::nodeAtPoint):
+        * rendering/InlineBox.h:
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::placeBoxesInBlockDirection):
+        (WebCore::InlineFlowBox::flipLinesInBlockDirection):
+        (WebCore::InlineFlowBox::computeOverflow):
+        (WebCore::InlineFlowBox::setLayoutOverflow):
+        (WebCore::InlineFlowBox::setVisualOverflow):
+        (WebCore::InlineFlowBox::setOverflowFromLogicalRects):
+        (WebCore::InlineFlowBox::nodeAtPoint):
+        * rendering/InlineFlowBox.h:
+        (WebCore::InlineFlowBox::layoutOverflowRect):
+        (WebCore::InlineFlowBox::visualOverflowRect):
+        * rendering/InlineTextBox.cpp:
+        (WebCore::InlineTextBox::nodeAtPoint):
+        * rendering/RenderLineBoxList.cpp:
+        (WebCore::RenderLineBoxList::anyLineIntersectsRect):
+        * rendering/RenderLineBoxList.h:
+        * rendering/RenderListItem.cpp:
+        (WebCore::RenderListItem::positionListMarker):
+        * rendering/RenderTextControl.h:
+        * rendering/RenderTextControlMultiLine.cpp:
+        (WebCore::RenderTextControlMultiLine::adjustControlHeightBasedOnLineHeight):
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::adjustControlHeightBasedOnLineHeight):
+        * rendering/RenderTextControlSingleLine.h:
+        * rendering/RootInlineBox.cpp:
+        (WebCore::RootInlineBox::nodeAtPoint):
+        * rendering/RootInlineBox.h:
+        (WebCore::RootInlineBox::lineTop):
+        (WebCore::RootInlineBox::lineBottom):
+        (WebCore::RootInlineBox::setLineTopBottomPositions):
+        (WebCore::RootInlineBox::logicalTopVisualOverflow):
+        (WebCore::RootInlineBox::logicalBottomVisualOverflow):
+        (WebCore::RootInlineBox::logicalTopLayoutOverflow):
+        (WebCore::RootInlineBox::logicalBottomLayoutOverflow):
+        * rendering/svg/SVGInlineFlowBox.h:
+        * rendering/svg/SVGInlineTextBox.cpp:
+        (WebCore::SVGInlineTextBox::nodeAtPoint):
+        * rendering/svg/SVGInlineTextBox.h:
+        * rendering/svg/SVGRootInlineBox.h:
+
+2011-07-11  Martin Robinson  <mrobinson@igalia.com>
+
+        Reviewed by Daniel Bates.
+
+        [GTK] Transition to Mozilla named cursors have incorrect hotspot and rendering
+        https://bugs.webkit.org/show_bug.cgi?id=62752
+
+        Instead of offsetting the cursor blit by the hotspot, just pass the hotspot
+        arguments to the GdkCursor constructor.
+
+        No new tests. This is covered by manual-tests/cursor.html.
+
+        * platform/gtk/CursorGtk.cpp:
+        (WebCore::createNamedCursor):
+
+2011-07-11  Yi Shen  <yi.4.shen@nokia.com>
+
+        [Qt] Unreviewed rollout 90779 which may fail the layout-test.
+
+        * platform/network/qt/QNetworkReplyHandler.cpp:
+        (WebCore::QNetworkReplyHandlerCallQueue::setDeferSignals):
+        * platform/network/qt/QNetworkReplyHandler.h:
+
+2011-07-11  Bradley Nelson  <bradnelson@chromium.org>
+
+        Reviewed by Darin Fisher.
+
+        Split webcore_dom off webcore_remaining to reduce its size for
+        whole program optimization builds.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64299
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-07-11  Yi Shen  <yi.4.shen@nokia.com>
+
+        [Qt] ASSERTION FAILED in ResourceHandle::setDefersLoading causes crash
+        https://bugs.webkit.org/show_bug.cgi?id=62808
+
+        Reviewed by Benjamin Poulain.
+
+        The assertion in ResourceHandle::setDefersLoading assumes asynchronous
+        content delivery -- To resume a page, first, its main resource loader
+        calls setDefersLoading to resume loading the main content; then all the
+        sub-resource loaders calls setDefersLoading to resume sub-contents.
+        However, since QNetworkReplyHandler delivers content synchronously,
+        some new sub-resource loaders get created as soon as the main resource
+        loader resumed, and all these new sub-resource loaders set their
+        defersLoading flag to false. Then, the assertion fails for these new
+        sub-resource loaders when calling setDefersLoading on them. As a fix,
+        this path makes QNetworkReplyHandler deliver content asynchronously.
+
+        Test: loader/load-defer-resume-crash.html
+
+        * platform/network/qt/QNetworkReplyHandler.cpp:
+        (WebCore::QNetworkReplyHandlerCallQueue::setDeferSignals):
+        * platform/network/qt/QNetworkReplyHandler.h:
+
+2011-07-08  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Move innerTextElement() from RenderTextControl to HTMLTextFormControlElement
+        https://bugs.webkit.org/show_bug.cgi?id=64134
+
+        Reviewed by Kent Tamura.
+
+        Moved innerTextElement from RenderTextControl to HTMLTextFormControlElement. It is implemented by
+        HTMLInputElement and HTMLTextAreaElement instead of RenderTextControlSingleLine and
+        RenderTextControlMultiLine.
+
+        This refactoring removes the indirection through RenderTextControl and makes the ownership of
+        shadow DOM for input and textarea elements clear. Accessing the shadow DOM of input and textarea elements
+        are now less error prone because it no longer depends on the lifetime of the render tree.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::indexForVisiblePosition): Access innerTextElement via
+        HTMLTextFormControlElement.
+        * dom/Node.cpp:
+        (WebCore::traverseTreeAndMark): No longer calls innerTextElement because this was a work-around
+        needed before making input and textarea elements use the new shadow DOM model.
+        * editing/TextIterator.cpp:
+        (WebCore::TextIterator::handleReplacedElement): Access innerTextElement via HTMLTextFormControlElement.
+        * html/HTMLFormControlElement.cpp:
+        (WebCore::hasVisibleTextArea): Takes innerTextElement.
+        (WebCore::HTMLTextFormControlElement::setSelectionRange): Calls innerTextElement().
+        (WebCore::HTMLTextFormControlElement::selection): Ditto.
+        (WebCore::HTMLTextFormControlElement::selectionStart): Ditto; no longer uses a temporary local variable
+        for innerTextElement because innerTextElement() no longer depends on the lifetime of the render tree.
+        (WebCore::HTMLTextFormControlElement::selectionEnd): Ditto.
+        * html/HTMLFormControlElement.h:
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::innerTextElement): Added.
+        * html/HTMLTextAreaElement.h:
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::textFormControlElement): Made this function a const member.
+        (WebCore::RenderTextControl::innerTextElement): Added.
+        * rendering/RenderTextControl.h:
+        * rendering/RenderTextControlMultiLine.cpp:
+        * rendering/RenderTextControlMultiLine.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        * rendering/RenderTextControlSingleLine.h:
+
+2011-07-11  Tony Chang  <tony@chromium.org>
+
+        rename RenderObject::isFlexibleBox to isDeprecatedFlexibleBox
+        https://bugs.webkit.org/show_bug.cgi?id=64217
+
+        Reviewed by Ojan Vafai.
+
+        This is to make way for the new flexbox needing a similar method.
+        RenderObject also has isFlexingChildren() and isStretchingChildren(),
+        but we may be able to use those for the new flexbox as well so I
+        didn't rename them.
+
+        No new tests, just refactoring.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::removeChild):
+        (WebCore::RenderBlock::expandsToEncloseOverhangingFloats):
+        (WebCore::shouldCheckLines):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::removeFloatingOrPositionedChildFromBlockLists):
+        (WebCore::RenderBox::computeLogicalWidth):
+        (WebCore::RenderBox::sizesToIntrinsicLogicalWidth):
+        (WebCore::RenderBox::computeLogicalHeight):
+        * rendering/RenderDeprecatedFlexibleBox.cpp:
+        (WebCore::RenderDeprecatedFlexibleBox::layoutBlock):
+        * rendering/RenderDeprecatedFlexibleBox.h:
+        (WebCore::RenderDeprecatedFlexibleBox::isDeprecatedFlexibleBox):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isDeprecatedFlexibleBox):
+
+2011-07-11  Nate Chapin  <japhet@chromium.org>
+
+        [Chromium] Ensure we don't crash when an
+        HTMLSelectElement mouse release event removes
+        the element from the DOM.
+        https://bugs.webkit.org/show_bug.cgi?id=64295
+
+        Reviewed by Dimitri Glazkov.
+
+        Manual test only because the crash requires a
+        real popup menu, which DRT doesn't provide.
+
+        * manual-tests/chromium/popup-menu-crash.html: Added.
+        * platform/chromium/PopupMenuChromium.cpp:
+        (WebCore::PopupContainer::handleMouseReleaseEvent):
+
+2011-07-11  Mike Reed  <reed@google.com>
+
+        [skia] remove platform helpers for gradients and patterns
+        https://bugs.webkit.org/show_bug.cgi?id=64281
+
+        Reviewed by Stephen White.
+
+        No new tests. fixes canvas/philip/tests/2d.gradient.object.update.html
+
+        Remove (now empty) platform helpers for fill/stroke gradients/patterns. We now pickup the platformGradient
+        and platformPattern fresh when they're needed, so we can see any edits that have occurred to them
+        2d.gradient.object.update.html sets the fillgradient, and then edits the gradient object. This CL allows
+        us to see that edit.
+
+        * platform/graphics/GraphicsContext.cpp:
+        (WebCore::GraphicsContext::setStrokePattern):
+        (WebCore::GraphicsContext::setFillPattern):
+        (WebCore::GraphicsContext::setStrokeGradient):
+        (WebCore::GraphicsContext::setFillGradient):
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/skia/GraphicsContextSkia.cpp:
+        (WebCore::GraphicsContext::platformInit):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        (WebCore::PlatformContextSkia::State::State):
+        (WebCore::PlatformContextSkia::State::~State):
+        (WebCore::PlatformContextSkia::PlatformContextSkia):
+        (WebCore::PlatformContextSkia::drawRect):
+        (WebCore::PlatformContextSkia::setupShader):
+        (WebCore::PlatformContextSkia::setupPaintForFilling):
+        (WebCore::PlatformContextSkia::setupPaintForStroking):
+        (WebCore::PlatformContextSkia::setFillColor):
+        (WebCore::PlatformContextSkia::setStrokeColor):
+        (WebCore::PlatformContextSkia::canAccelerate):
+        * platform/graphics/skia/PlatformContextSkia.h:
+        (WebCore::PlatformContextSkia::setGraphicsContext):
+
+2011-07-11  Young Han Lee  <joybro@company100.net>
+
+        Reviewed by Simon Fraser.
+
+        Transition LayoutTest using pause API shows wrong result if it tries to pause a transition after its delay time.
+        https://bugs.webkit.org/show_bug.cgi?id=63859
+
+        The existing code to set the m_startTime haven't worked because 
+        the animation is not the right state to accept the start event. 
+        This patch just sets the values directly instead of using event.
+
+        Test: transitions/delay.html
+
+        * page/animation/AnimationBase.cpp:
+        (WebCore::AnimationBase::freezeAtTime):
+
+2011-07-11  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Move selection related code from RenderTextControl to HTMLTextFormControlElement
+        https://bugs.webkit.org/show_bug.cgi?id=64133
+
+        Reviewed by Dimitri Glazkov.
+
+        Moved selectionStart, selectionEnd, hasVisibleTextArea, setSelectionRange, setContainerAndOffsetForRange
+        and selection from RenderTextControl.cpp to HTMLFormControlElement.cpp.
+
+        This refactoring removes RenderTextControl's dependency on FrameSelection.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::selectedText): Calls HTMLTextFromControl::selectedText.
+        (WebCore::AccessibilityRenderObject::selectedTextRange): Calls selectionStart and selectionEnd.
+        (WebCore::AccessibilityRenderObject::setSelectedTextRange): Ditto.
+        * html/HTMLFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::selectedText): Extracted from AccessibilityRenderObject::selectedText.
+        (WebCore::hasVisibleTextArea): Added.
+        (WebCore::HTMLTextFormControlElement::setSelectionRange): Merged with the function of the same name in RenderTextControl.
+        (WebCore::HTMLTextFormControlElement::selectionStart): Calls computeSelectionStart instead of RenderTextControl::selectionStart.
+        (WebCore::HTMLTextFormControlElement::computeSelectionStart): Moved from RenderTextControl::selectionStart.
+        (WebCore::HTMLTextFormControlElement::selectionEnd): Calls computeSelectionEnd instead of RenderText::selectionEnd.
+        (WebCore::HTMLTextFormControlElement::computeSelectionEnd): Moved from RenderTextControl::selectionStart.
+        (WebCore::setContainerAndOffsetForRange): Moved from RenderTextControl.cpp.
+        (WebCore::HTMLTextFormControlElement::selection): Merged with the function of the same name in RenderTextControl.
+        (WebCore::HTMLTextFormControlElement::restoreCachedSelection): Calls computeSelectionStart and computeSelectionEnd instead of
+        RenderTextControl::selectionStart and RenderTextControl::selectionEnd.
+        (WebCore::HTMLTextFormControlElement::selectionChanged): Calls selectionStart and selectionEnd.
+        * html/HTMLFormControlElement.h:
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::setValue): Calls setSelectionRange.
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::textFormControlElement): Added.
+        * rendering/RenderTextControl.h:
+
+2011-07-11  Andreas Kling  <kling@webkit.org>
+
+        Reviewed by Oliver Hunt.
+
+        Canvas: Use fast, approximate dirty rects for stroke()
+        https://bugs.webkit.org/show_bug.cgi?id=59764
+
+        No new tests, this is an optimization.
+
+        * html/canvas/CanvasRenderingContext2D.cpp:
+        (WebCore::CanvasRenderingContext2D::stroke): Instead of using
+        Path::strokeBoundingRect() to calculate the exact bounding rect
+        for a path stroke, get the Path::boundingRect() and inflate it by
+        miterLimit + lineWidth to get a slightly oversized dirty rect
+        in a fraction of the time.
+
+2011-07-11  Andrey Kosyakov  <caseq@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: [refactoring] Remove dependencies of components requiring network resource list from network panel
+        https://bugs.webkit.org/show_bug.cgi?id=62477
+
+        * inspector/front-end/AuditsPanel.js:
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer):
+        (WebInspector.ExtensionServer.prototype._inspectedURLChanged):
+        (WebInspector.ExtensionServer.prototype._onGetHAR):
+        (WebInspector.ExtensionServer.prototype.initExtensions):
+        * inspector/front-end/HAREntry.js:
+        (WebInspector.HARLog):
+        (WebInspector.HARLog.prototype.build):
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkLog):
+        (WebInspector.NetworkLog.prototype.get resources):
+        (WebInspector.NetworkLog.prototype._onInspectedURLChanged):
+        (WebInspector.NetworkLog.prototype._onResourceStarted):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkPanel.prototype._reset):
+        (WebInspector.NetworkPanel.prototype._copyAll):
+        (WebInspector.NetworkPanel.prototype._exportAll):
+        * inspector/front-end/inspector.js:
+        (WebInspector.reset):
+
+2011-07-11  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: make SourceFrame a View.
+        https://bugs.webkit.org/show_bug.cgi?id=64274
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame):
+        (WebInspector.SourceFrame.createSearchRegex):
+        (WebInspector.SourceFrame.prototype.show):
+        (WebInspector.SourceFrame.prototype.hide):
+        (WebInspector.SourceFrame.prototype._beforeTextChanged):
+        (WebInspector.SourceFrame.prototype._afterTextChanged):
+        (WebInspector.SourceFrame.prototype._initializeTextViewer):
+        (WebInspector.SourceFrame.prototype.performSearch.doFindSearchMatches):
+        (WebInspector.SourceFrame.prototype.performSearch):
+        (WebInspector.SourceFrame.prototype._populateTextAreaContextMenu):
+        (WebInspector.SourceFrame.prototype._suggestedFileName):
+        (WebInspector.SourceFrame.prototype._doubleClick):
+        (WebInspector.SourceFrame.prototype._cancelEditing):
+        (WebInspector.TextViewerDelegateForSourceFrame):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.doubleClick):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.beforeTextChanged):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.afterTextChanged):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.commitEditing):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.cancelEditing):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.populateLineGutterContextMenu):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.populateTextAreaContextMenu):
+        (WebInspector.TextViewerDelegateForSourceFrame.prototype.suggestedFileName):
+        * inspector/front-end/TextViewer.js:
+        (WebInspector.TextViewerDelegate.prototype.populateLineGutterContextMenu):
+
+2011-07-11  Noel Gordon  <noel.gordon@gmail.com>
+
+        Reviewed by Adam Roben.
+
+        Forward focus events to windowless plugins on the windows port.
+        https://bugs.webkit.org/show_bug.cgi?id=62375
+
+        * plugins/win/PluginViewWin.cpp:
+        (WebCore::PluginView::setFocus): Forward focus events if the plugin is windowless.
+
+2011-07-11  Shinya Kawanaka  <shinyak@google.com>
+
+        Added accessibility notification when value is changed.
+        https://bugs.webkit.org/show_bug.cgi?id=64256
+
+        Notifies the value change of range input when accessibility is enabled.
+
+        Reviewed by Kent Tamura.
+
+        Covered by existing tests.
+
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::handleKeydownEvent):
+          Added accessibility notification when value is changed.
+
+2011-07-08  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: Fix resizing of sidebar pane in Timeline and Profile panels.
+        https://bugs.webkit.org/show_bug.cgi?id=64161
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ProfilesPanel.js:
+        (WebInspector.ProfilesPanel.prototype.updateMainViewWidth):
+        * inspector/front-end/TimelineOverviewPane.js:
+        (WebInspector.TimelineOverviewPane.prototype.updateMainViewWidth):
+
+2011-07-11  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: [REGRESSION r89753-89754] highlight does not respect scroller location.
+        https://bugs.webkit.org/show_bug.cgi?id=63982
+
+        Rolling out 89760, 89756, 89754, 89753 for breaking inspector highlight.
+
+        Reviewed by Yury Semikhatsky.
+
+        * WebCore.exp.in:
+        * inspector/DOMNodeHighlighter.cpp:
+        (WebCore::DOMNodeHighlighter::drawNodeHighlight):
+        * page/FrameView.cpp:
+        * page/FrameView.h:
+        * platform/ScrollView.h:
+        * platform/Widget.cpp:
+        * platform/Widget.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::mapLocalToContainer):
+        * rendering/RenderBox.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::mapLocalToContainer):
+        * rendering/RenderInline.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::mapLocalToContainer):
+        (WebCore::RenderObject::localToContainerQuad):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::localToAbsoluteQuad):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::mapLocalToContainer):
+        * rendering/RenderView.h:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        (WebCore::RenderSVGForeignObject::mapLocalToContainer):
+        * rendering/svg/RenderSVGForeignObject.h:
+        * rendering/svg/RenderSVGInline.cpp:
+        (WebCore::RenderSVGInline::mapLocalToContainer):
+        * rendering/svg/RenderSVGInline.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::mapLocalToContainer):
+        * rendering/svg/RenderSVGModelObject.h:
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::mapLocalToContainer):
+        * rendering/svg/RenderSVGRoot.h:
+        * rendering/svg/RenderSVGText.cpp:
+        (WebCore::RenderSVGText::mapLocalToContainer):
+        * rendering/svg/RenderSVGText.h:
+        * rendering/svg/SVGRenderSupport.cpp:
+        (WebCore::SVGRenderSupport::mapLocalToContainer):
+        * rendering/svg/SVGRenderSupport.h:
+
+2011-07-11  Mustafizur Rahaman  <mustaf.here@gmail.com>
+
+        Reviewed by James Robinson.
+
+        Fix LayoutTests/canvas/philip/tests/2d.composite.uncovered.fill.destination-atop.html
+        https://bugs.webkit.org/show_bug.cgi?id=48292
+        
+        and
+        
+        Fix LayoutTests/canvas/philip/tests/2d.composite.uncovered.pattern.destination-atop.html
+        https://bugs.webkit.org/show_bug.cgi?id=48302
+
+        * html/canvas/CanvasRenderingContext2D.cpp:
+        (WebCore::CanvasRenderingContext2D::shouldDisplayTransparencyElsewhere): Added CompositeDestinationAtop 
+        to draw transparency elsewhere for destination-atop
+
+2011-07-08  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: [Chromium] Get rid of flickering "Please wait" message in Heap profiler.
+        https://bugs.webkit.org/show_bug.cgi?id=61175
+
+        The message has been replaced with spinner icons appearing instead of profile's
+        icon. As each profile owns a worker, they run independently, and there can be
+        multiple spinners at the same time.
+
+        Reviewed by Pavel Feldman.
+
+        * WebCore.gypi:
+        * WebCore.vcproj/WebCore.vcproj:
+        * inspector/front-end/DetailedHeapshotGridNodes.js:
+        (WebInspector.HeapSnapshotGridNode.prototype._populate.sorted):
+        (WebInspector.HeapSnapshotGridNode.prototype._populate):
+        (WebInspector.HeapSnapshotGridNode.prototype.populateChildren.childrenRetrieved):
+        (WebInspector.HeapSnapshotGridNode.prototype.populateChildren):
+        * inspector/front-end/DetailedHeapshotView.js:
+        (WebInspector.HeapSnapshotSortableDataGrid.prototype.sortingChanged):
+        (WebInspector.HeapSnapshotRetainingPathsList.prototype.showNext):
+        (WebInspector.HeapSnapshotRetainingPathsList.prototype.searchCancelled):
+        (WebInspector.DetailedHeapshotView.profileCallback):
+        (WebInspector.DetailedHeapshotView):
+        (WebInspector.DetailedHeapshotView.prototype._changeBase.baseProfileLoaded):
+        (WebInspector.DetailedHeapshotView.prototype._changeBase):
+        (WebInspector.DetailedHeapshotView.prototype.processLoadedSnapshot):
+        (WebInspector.DetailedHeapshotView.prototype._changeView):
+        * inspector/front-end/HeapSnapshotProxy.js:
+        (WebInspector.HeapSnapshotWorker):
+        (WebInspector.HeapSnapshotWorker.prototype.dispose):
+        (WebInspector.HeapSnapshotWorker.prototype.startCheckingForLongRunningCalls):
+        (WebInspector.HeapSnapshotWorker.prototype._checkLongRunningCalls):
+        (WebInspector.HeapSnapshotProxyObject.prototype.callMethod):
+        (WebInspector.HeapSnapshotProxyObject.prototype.get worker):
+        * inspector/front-end/Images/spinnerActive.gif: Added. Generated using ajaxload.info.
+        * inspector/front-end/Images/spinnerActiveSelected.gif: Added. Generated using ajaxload.info.
+        * inspector/front-end/Images/spinnerInactive.gif: Added. Generated using ajaxload.info.
+        * inspector/front-end/Images/spinnerInactiveSelected.gif: Added. Generated using ajaxload.info.
+        * inspector/front-end/PleaseWaitMessage.js: Removed.
+        * inspector/front-end/ProfilesPanel.js:
+        (WebInspector.ProfilesPanel.prototype._addProfileHeader):
+        (WebInspector.ProfilesPanel.prototype.loadHeapSnapshot.setProfileWait):
+        (WebInspector.ProfilesPanel.prototype.loadHeapSnapshot):
+        (WebInspector.ProfilesPanel.prototype._finishHeapSnapshot.parsed):
+        (WebInspector.ProfilesPanel.prototype._finishHeapSnapshot):
+        (WebInspector.ProfilesPanel.prototype._reportHeapSnapshotProgress):
+        * inspector/front-end/SidebarTreeElement.js:
+        (WebInspector.SidebarTreeElement.prototype.set wait):
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/heapProfiler.css:
+        (.heap-snapshot-sidebar-tree-item.wait .icon):
+        (.heap-snapshot-sidebar-tree-item.wait.selected .icon):
+        (body.inactive .heap-snapshot-sidebar-tree-item.wait .icon):
+        (body.inactive .heap-snapshot-sidebar-tree-item.wait.selected .icon):
+        * inspector/front-end/inspector.html:
+
+2011-07-10  Patrick Gansterer  <paroga@webkit.org>
+
+        Generate conditional include statements in CodeGeneratorJS
+        https://bugs.webkit.org/show_bug.cgi?id=64231
+
+        Reviewed by Brent Fulgham.
+
+        Suround headers with a correspondig #if ENABLE() line.
+        This allows us to generate bindings only of required IDL files.
+
+        Changing the current preprocessor statements to the Conditional attribute
+        in a next step helps in getting rid of calls to the preprocessor,
+        which causes so much pain on a natvie Windows environment. 
+
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateImplementation):
+        (WriteData):
+
+2011-07-10  Patrick Gansterer  <paroga@webkit.org>
+
+        Remove array size from generated JSC binding tables
+        https://bugs.webkit.org/show_bug.cgi?id=64229
+
+        Reviewed by Brent Fulgham.
+
+        Because many items in the array are surrounded with #if(ENABLE_XXX) lines,
+        the array size isn't fix and correct in all cases.
+        So let the compiler calculate the correct size itself.
+
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateHashTable):
+        * bindings/scripts/test/JS/JSTestInterface.cpp:
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
+        * bindings/scripts/test/JS/JSTestObj.cpp:
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
+
+2011-07-10  Kenichi Ishibashi  <bashi@chromium.org>
+
+        Let plugins participate in form submission
+        https://bugs.webkit.org/show_bug.cgi?id=13061
+
+        Implements HTMLObjectElement::appendFormData() so that object
+        elements respond as form associated elements.
+
+        Reviewed by Anders Carlsson.
+
+        Test: plugins/form-value.html
+
+        * html/HTMLObjectElement.cpp:
+        (WebCore::HTMLObjectElement::appendFormData): Implemented.
+        * plugins/PluginViewBase.h:
+        (WebCore::PluginViewBase::getFormValue): Added.
+
+2011-07-10  Anders Carlsson  <andersca@apple.com>
+
+        WebKit2 is leaking NSCursors created by leakNamedCursor
+        https://bugs.webkit.org/show_bug.cgi?id=64241
+        <rdar://problem/9507151>
+
+        Reviewed by Oliver Hunt.
+
+        * platform/mac/CursorMac.mm:
+        (WebCore::createNamedCursor):
+        Rename this from leakNamedCursor to createNamedCursor and make it return a
+        RetainPtr<NSCursor> instead of a raw pointer.
+
+        (WebCore::Cursor::ensurePlatformCursor):
+        Don't leak cursors here. We still won't deallocate cursors during shutdown (which leakNamedCursor
+        was said to prevent) because the cursor singletons are all allocated from the heap and are never destroyed
+        anyway.
+
+2011-07-10  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Add useHixie76Protocol flag to WebSocketChannel and WebSocketHandshake
+        https://bugs.webkit.org/show_bug.cgi?id=64244
+
+        Reviewed by Kent Tamura.
+
+        Get the value of Settings::useHixie76WebSocketProtocol() and save it in
+        WebSocketChannel and WebSocketHandshake instances. Obtained flag value
+        is not used for now.
+
+        No behavior change, thus no new tests.
+
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::WebSocketChannel):
+        WebSocketChannel is always created in context of Document (see
+        ThreadableWebSocketChannel::create()).
+        Because m_useHixie76Protocol must be passed to WebSocketHandshake
+        constructor, WebSocketHandshake instance is allocated dynamically
+        and stored in OwnPtr.
+        (WebCore::WebSocketChannel::connect):
+        (WebCore::WebSocketChannel::fail):
+        (WebCore::WebSocketChannel::disconnect):
+        (WebCore::WebSocketChannel::didOpen):
+        (WebCore::WebSocketChannel::didFail):
+        (WebCore::WebSocketChannel::processBuffer):
+        * websockets/WebSocketChannel.h:
+        * websockets/WebSocketHandshake.cpp:
+        (WebCore::WebSocketHandshake::WebSocketHandshake):
+        * websockets/WebSocketHandshake.h:
+
+2011-07-10  Tom Hudson  <tomhudson@google.com>
+
+        Reviewed by James Robinson.
+
+        GraphicsContextSkia::drawConvexPolygon doesn't pay attention to shouldAntialias
+        https://bugs.webkit.org/show_bug.cgi?id=61369
+
+        * platform/graphics/skia/GraphicsContextSkia.cpp:
+        (WebCore::GraphicsContext::drawConvexPolygon): Pass the
+        shouldAntialias parameter on to Skia.
+
+2011-07-10  Yuzo Fujishima  <yuzo@google.com>
+
+        Fix for Bug 63968 - Add comment to explain Vector usage in FontCache::purgeInactiveFontData
+        https://bugs.webkit.org/show_bug.cgi?id=63968
+
+        Reviewed by Dan Bernstein.
+
+        No new tests because this changes comments only.
+
+        * platform/graphics/FontCache.cpp:
+        (WebCore::FontCache::purgeInactiveFontData): Add explanation why SimpleFontData is not deleted in the iteration loop.
+
+2011-07-10  Emil A Eklund  <eae@chromium.org>
+
+        Switch updateHitTestResult to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64209
+
+        Reviewed by Eric Seidel.
+
+        No new tests, no functionality changes.
+
+        * rendering/EllipsisBox.cpp:
+        (WebCore::EllipsisBox::nodeAtPoint):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::hitTestFloats):
+        (WebCore::RenderBlock::updateHitTestResult):
+        * rendering/RenderBlock.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::updateHitTestResult):
+        * rendering/RenderInline.h:
+        * rendering/RenderLineBoxList.cpp:
+        (WebCore::RenderLineBoxList::hitTest):
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::updateHitTestResult):
+        * rendering/RenderObject.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::updateHitTestResult):
+        * rendering/RenderView.h:
+        * rendering/svg/RenderSVGContainer.cpp:
+        (WebCore::RenderSVGContainer::nodeAtFloatPoint):
+        * rendering/svg/RenderSVGImage.cpp:
+        (WebCore::RenderSVGImage::nodeAtFloatPoint):
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::nodeAtFloatPoint):
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::nodeAtPoint):
+
+2011-07-10  Patrick Gansterer  <paroga@webkit.org>
+
+        Reviewed by Adam Barth.
+
+        Fix member variable order of ContextMenuItem
+        https://bugs.webkit.org/show_bug.cgi?id=59905
+
+        Use the same order at decleration and assignment to silence compiler warning.
+
+        * platform/ContextMenuItem.h:
+
+2011-07-10  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9750062> REGRESSION: Button text missing in many iTunes Store pages
+        https://bugs.webkit.org/show_bug.cgi?id=64236
+
+        Reviewed by Maciej Stachowiak.
+
+        Test: fast/css/empty-display-none.html
+
+        When an :empty selector caused an element to not have a renderer, the check for empty style
+        change when finishing parsing the elemenet did nothing, because it could not check if the
+        element’s current style was affected by :empty. The fix is to record the fact that the style
+        was affected by :empty in ElementRareData in the no-renderer case.
+
+        * dom/Element.cpp:
+        (WebCore::Element::recalcStyle): Clear the m_styleAffectedByEmpty flag.
+        (WebCore::checkForEmptyStyleChange): If the style is null (meaning there is no renderer), check
+        Element::styleAffectedByEmpty().
+        (WebCore::Element::setStyleAffectedByEmpty): Added. Sets the flag in rare data.
+        (WebCore::Element::styleAffectedByEmpty): Added. Checks for the flag in rare data.
+        * dom/Element.h:
+        * dom/ElementRareData.h:
+        (WebCore::ElementRareData::ElementRareData): Added m_styleAffectedByEmpty and initialized it
+        to false.
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRendererFactory::createRendererAndStyle): If an element doesn’t need a renderer
+        and its style is affected by :empty, record this fact in the element by calling setStyleAffectedByEmpty().
+
+2011-07-10  Mark Rowe  <mrowe@apple.com>
+
+        Fix the build.
+
+        * svg/properties/SVGAttributeToPropertyMap.h: Forward-declare SVGPropertyInfo as a struct
+        since that's what it is.
+
+2011-07-09  Patrick Gansterer  <paroga@webkit.org>
+
+        Unreviewed WinCE build fix for r90680.
+
+        Repeat the change done in r90681 for all other SVGAnimated*PropertyTearOff.h files.
+
+        * svg/properties/SVGAnimatedEnumerationPropertyTearOff.h: Make create public and remove friendship with SVGAnimatedProperty.
+        * svg/properties/SVGAnimatedListPropertyTearOff.h: Ditto.
+        * svg/properties/SVGAnimatedPathSegListPropertyTearOff.h: Ditto.
+        * svg/properties/SVGAnimatedPropertyTearOff.h: Ditto.
+        * svg/properties/SVGAnimatedTransformListPropertyTearOff.h: Ditto.
+
+2011-07-09  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Add a possibility to retrieve the associated SVGAnimatedProperty object for a certain XML attribute
+        https://bugs.webkit.org/show_bug.cgi?id=63797
+
+        Fix WinCE build. Funny none other platform complained.
+
+        * svg/properties/SVGAnimatedStaticPropertyTearOff.h: Make create public, SVGAnimatedProperty needs it - remove friendship with it.
+
+2011-07-09  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Add a possibility to retrieve the associated SVGAnimatedProperty object for a certain XML attribute
+        https://bugs.webkit.org/show_bug.cgi?id=63797
+
+        Reviewed by Dirk Schulze.
+
+        In order to prepare animVal support we need a way to map a given SVG DOM attribute to a SVGAnimatedProperty.
+        eg. SVGNames::xAttr -> SVGRectElement::xAnimated(), etc. This will be needed to update the animVal of the
+        SVGAnimatedProperty, if an animation is running. It would required adding a new method to all SVG* classes
+        that define animated properties. Unfortunately we already have lots of repeated code in methods like
+        synchronizeProperty / fillAttributeToPropertyTypeMap. Look at SVGRectElement for example:
+
+        void SVGRectElement::synchronizeProperty(const QualifiedName& attrName)
+        {
+            if (attrName == anyQName()) {
+                synchronizeX();
+                synchronizeY();
+                 ...
+              }
+
+            if (attrName == SVGNames::xAttr) {
+                synchronizeX();
+                return;
+            }
+
+            if (attrName == SVGNames::yAttr) {
+                synchronizeY();
+                return;
+            }
+            ...
+        }
+
+        or
+
+        void SVGRectElement::fillAttributeToPropertyTypeMap()
+        {
+            AttributeToPropertyTypeMap& attributeToPropertyTypeMap = this->attributeToPropertyTypeMap();
+        
+            SVGStyledTransformableElement::fillPassedAttributeToPropertyTypeMap(attributeToPropertyTypeMap);
+            attributeToPropertyTypeMap.set(SVGNames::xAttr, AnimatedLength);
+            attributeToPropertyTypeMap.set(SVGNames::yAttr, AnimatedLength);
+            ...
+        }
+
+        These lookups are all performed dynamically. Each synchronizeProperty() call does a lot of comparisons.
+        fillAttributeToPropertyTypeMap() isn't that bad as the result is cached in a static HashMap per-SVGRectElement.
+        There's no reason to do these things dynamically!
+
+        Inspired by JSC, I'm adding a "static const SVGPropertyInfo s_fooPropertyInfo" object for each animated SVG property.
+        For example, for SVGRectElements SVGAnimatedLength x property we're storing:
+        - "AnimatedPropertyType type" (AnimatedLength -- note the enum was named AnimatedAttributeType, I renamed it to AnimatedPropertyType for clarity)
+        - "const QualifiedName& attributeName" (SVGNames::xAttr)
+        - "const AtomicString& propertyIdentifier" (SVGNames::xAttr.localName() -- only different if N-wrappers map to a single XML DOM attribute, eg. orientAttr)
+        - "SynchronizeProperty synchronizeProperty" (callback to SVGRectElement::synchronizeX)
+        - "LookupOrCreateWrapperForAnimatedProperty lookupOrCreateWrapperForAnimatedProperty" (callback to SVGRectElement::xAnimated)
+
+        Using this information, we can replace all the various synchronizeProperty/fillAttributeToPropertyMap implementations, with a single one in SVGElement.
+        All these are auto-generated, using the standard macros used to define/declare SVG animated properties. This required several changes to the macros.
+        Here's a summary:
+    
+        #1) In all headers, wrap DECLARE_ANIMATED_* calls, in BEGIN_DECLARE_ANIMATED_PROPERTIES(ClassName) / END_DECLARE_ANIMATED_PROPERTIES blocks.
+        
+            Sample change for SVGRectElement:
+            -    DECLARE_ANIMATED_LENGTH(X, x)
+            -    DECLARE_ANIMATED_LENGTH(Y, y)
+            -    ...
+
+            +    BEGIN_DECLARE_ANIMATED_PROPERTIES(SVGRectElement)
+            +        DECLARE_ANIMATED_LENGTH(X, x)
+            +        DECLARE_ANIMATED_LENGTH(Y, y)
+            +         ...
+            +    END_DECLARE_ANIMATED_PROPERTIES
+
+        #2) In all cpp files, add a new section wrapped in BEGIN_REGISTER_ANIMATED_PROPERTIES(ClassName / END_REGISTER_ANIMATED_PROPERTIES blocks:
+
+            Sample change for SVGRectElement:
+            +BEGIN_REGISTER_ANIMATED_PROPERTIES(SVGRectElement)
+            +    REGISTER_LOCAL_ANIMATED_PROPERTY(x)
+            +    REGISTER_LOCAL_ANIMATED_PROPERTY(y)
+            +    ...
+            +    REGISTER_PARENT_ANIMATED_PROPERTIES(SVGStyledTransformableElement)
+            +    REGISTER_PARENT_ANIMATED_PROPERTIES(SVGTests)
+            +END_REGISTER_ANIMATED_PROPERTIES
+
+            This is the main piece of the logic that replaces the manual synchronizeProperty/fillAttributeToPropertyMap implementation. It expands to following:
+
+            SVGAttributeToPropertyMap& SVGRectElement::attributeToPropertyMap()
+            {
+                DEFINE_STATIC_LOCAL(SVGAttributeToPropertyMap, s_attributeToPropertyMap, ());
+            }
+
+            static void registerAnimatedPropertiesForSVGRectElement()
+            {
+                SVGAttributeToPropertyMap& map = SVGRectElement::attributeToPropertyMap();
+                if (!map.isEmpty())
+                    return;
+                map.addProperty(SVGRectElement::xPropertyInfo());
+                map.addProperty(SVGRectElement::yPropertyInfo());
+                ...
+                map.addProperties(SVGStyledTransformableElement::attributeToPropertyMap());
+                map.addProperties(SVGTests::attributeToPropertyMap());
+            }
+
+            A single-instance of SVGAttributeToPropertyMap is created for each SVG*Element. The constructor of SVGRectElement is supposed to call
+            registerAnimatedPropertiesForSVGRectElement(), which collects all properties of SVGRectElement and all its parent classes and stores them
+            in a Vector<const SVGPropertyInfo*>. This Vector is stored in a HashMap<QualifiedName, Vector<const SVGPropertyInfo*> > where the key
+            is the attribute name (eg. SVGNames::xAttr -> SVGRectElement::xPropertyInfo). This is only done _once_ per SVGRectElement.
+
+            SVGElement contains a "virtual SVGAttributeToPropertyMap& localAttributeToPropertyMap()" method, and SVGRectElement overrides it
+            and returns SVGRectElement::attributeToPropertyMap() (which is static!) -- this is hidden again in the macros, no need to write any code.
+
+            SVGAttributeToPropertyMap provides following API:
+            - bool synchronizeProperty(SVGElement* contextElement, const QualifiedName& attributeName)
+            - void synchronizeProperties(SVGElement* contextElement)
+            
+                A generic way to synchronize a SVGAnimatedProperty with its XML DOM attribute. Any SVG DOM change to eg. <rect>s x property will now trigger
+                contextElement->localAttributeToPropertyMap().synchronizeProperty(this, SVGNames::xAttr)
+                The SVGAttributeToPropertyMap will ask its HashMap for the Vector containing the properties for SVGNames::xAttr (in that case, just one xAnimated()).
+
+            - void animatedPropertyTypeForAttribute(const QualifiedName& attributeName, Vector<AnimatedPropertyType>& propertyTypes)
+
+                This method replaces the fillAttributeToPropertyMap implementations everywhere.
+        
+            - void animatedPropertiesForAttribute(SVGElement* contextElement, const QualifiedName& attributeName, Vector<RefPtr<SVGAnimatedProperty> >& properties);
+
+                This method is not used yet, but allows us to collect all SVGAnimatedProperties for a QualifiedName -- the initial goal for this patch.
+
+        #3) In all cpp files, add a call to "registerAnimatedPropertiesForClassName()" in the constructor. Forgetting this will result in a compile error.
+
+        Doesn't affect any tests.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (NativeToJSValue):
+        * bindings/scripts/CodeGeneratorObjC.pm:
+        (GenerateImplementation):
+        * bindings/scripts/CodeGeneratorV8.pm:
+        (GenerateNormalAttrGetter):
+        * svg/SVGAElement.cpp:
+        (WebCore::SVGAElement::SVGAElement):
+        * svg/SVGAElement.h:
+        (WebCore::SVGAElement::synchronizeRequiredFeatures):
+        (WebCore::SVGAElement::synchronizeRequiredExtensions):
+        (WebCore::SVGAElement::synchronizeSystemLanguage):
+        * svg/SVGAltGlyphElement.cpp:
+        (WebCore::SVGAltGlyphElement::SVGAltGlyphElement):
+        * svg/SVGAltGlyphElement.h:
+        * svg/SVGAnimateElement.cpp:
+        (WebCore::SVGAnimateElement::SVGAnimateElement):
+        (WebCore::SVGAnimateElement::hasValidAttributeType):
+        (WebCore::SVGAnimateElement::determineAnimatedPropertyType):
+        (WebCore::SVGAnimateElement::determinePropertyValueTypes):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        (WebCore::SVGAnimateElement::ensureAnimator):
+        * svg/SVGAnimateElement.h:
+        * svg/SVGAnimateTransformElement.cpp:
+        (WebCore::SVGAnimateTransformElement::hasValidAttributeType):
+        (WebCore::SVGAnimateTransformElement::determineAnimatedPropertyType):
+        (WebCore::SVGAnimateTransformElement::resetToBaseValue):
+        (WebCore::SVGAnimateTransformElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateTransformElement::applyResultsToTarget):
+        * svg/SVGAnimateTransformElement.h:
+        * svg/SVGAnimatedAngle.h:
+        * svg/SVGAnimatedBoolean.h:
+        * svg/SVGAnimatedEnumeration.h:
+        * svg/SVGAnimatedInteger.h:
+        * svg/SVGAnimatedLength.h:
+        * svg/SVGAnimatedLengthList.h:
+        * svg/SVGAnimatedNumber.h:
+        * svg/SVGAnimatedNumberList.h:
+        * svg/SVGAnimatedPreserveAspectRatio.h:
+        * svg/SVGAnimatedRect.h:
+        * svg/SVGAnimatedString.h:
+        * svg/SVGAnimatedTransformList.h:
+        * svg/SVGAnimatedType.cpp:
+        (WebCore::SVGAnimatedType::SVGAnimatedType):
+        * svg/SVGAnimatedType.h:
+        (WebCore::SVGAnimatedType::type):
+        * svg/SVGAnimatedTypeAnimator.h:
+        (WebCore::SVGAnimatedTypeAnimator::SVGAnimatedTypeAnimator):
+        * svg/SVGAnimationElement.cpp:
+        (WebCore::SVGAnimationElement::SVGAnimationElement):
+        (WebCore::SVGAnimationElement::currentValuesForValuesAnimation):
+        * svg/SVGAnimationElement.h:
+        (WebCore::SVGAnimationElement::synchronizeRequiredFeatures):
+        (WebCore::SVGAnimationElement::synchronizeRequiredExtensions):
+        (WebCore::SVGAnimationElement::synchronizeSystemLanguage):
+        * svg/SVGAnimatorFactory.h:
+        (WebCore::SVGAnimatorFactory::create):
+        * svg/SVGCircleElement.cpp:
+        (WebCore::SVGCircleElement::SVGCircleElement):
+        * svg/SVGCircleElement.h:
+        (WebCore::SVGCircleElement::synchronizeRequiredFeatures):
+        (WebCore::SVGCircleElement::synchronizeRequiredExtensions):
+        (WebCore::SVGCircleElement::synchronizeSystemLanguage):
+        * svg/SVGClipPathElement.cpp:
+        (WebCore::SVGClipPathElement::SVGClipPathElement):
+        * svg/SVGClipPathElement.h:
+        (WebCore::SVGClipPathElement::synchronizeRequiredFeatures):
+        (WebCore::SVGClipPathElement::synchronizeRequiredExtensions):
+        (WebCore::SVGClipPathElement::synchronizeSystemLanguage):
+        * svg/SVGComponentTransferFunctionElement.cpp:
+        (WebCore::SVGComponentTransferFunctionElement::SVGComponentTransferFunctionElement):
+        * svg/SVGComponentTransferFunctionElement.h:
+        * svg/SVGCursorElement.cpp:
+        (WebCore::SVGCursorElement::SVGCursorElement):
+        * svg/SVGCursorElement.h:
+        (WebCore::SVGCursorElement::synchronizeRequiredFeatures):
+        (WebCore::SVGCursorElement::synchronizeRequiredExtensions):
+        (WebCore::SVGCursorElement::synchronizeSystemLanguage):
+        * svg/SVGDefsElement.cpp:
+        (WebCore::SVGDefsElement::SVGDefsElement):
+        * svg/SVGDefsElement.h:
+        (WebCore::SVGDefsElement::synchronizeRequiredFeatures):
+        (WebCore::SVGDefsElement::synchronizeRequiredExtensions):
+        (WebCore::SVGDefsElement::synchronizeSystemLanguage):
+        * svg/SVGElement.cpp:
+        (WebCore::SVGElement::animatedPropertyTypeForAttribute):
+        (WebCore::SVGElement::updateAnimatedSVGAttribute):
+        (WebCore::SVGElement::localAttributeToPropertyMap):
+        (WebCore::SVGElement::synchronizeRequiredFeatures):
+        (WebCore::SVGElement::synchronizeRequiredExtensions):
+        (WebCore::SVGElement::synchronizeSystemLanguage):
+        * svg/SVGElement.h:
+        (WebCore::SVGElement::svgAttributeChanged):
+        (WebCore::SVGElement::synchronizeRequiredFeatures):
+        (WebCore::SVGElement::synchronizeRequiredExtensions):
+        (WebCore::SVGElement::synchronizeSystemLanguage):
+        * svg/SVGEllipseElement.cpp:
+        (WebCore::SVGEllipseElement::SVGEllipseElement):
+        * svg/SVGEllipseElement.h:
+        (WebCore::SVGEllipseElement::synchronizeRequiredFeatures):
+        (WebCore::SVGEllipseElement::synchronizeRequiredExtensions):
+        (WebCore::SVGEllipseElement::synchronizeSystemLanguage):
+        * svg/SVGFEBlendElement.cpp:
+        (WebCore::SVGFEBlendElement::SVGFEBlendElement):
+        * svg/SVGFEBlendElement.h:
+        * svg/SVGFEColorMatrixElement.cpp:
+        (WebCore::SVGFEColorMatrixElement::SVGFEColorMatrixElement):
+        * svg/SVGFEColorMatrixElement.h:
+        * svg/SVGFEComponentTransferElement.cpp:
+        (WebCore::SVGFEComponentTransferElement::SVGFEComponentTransferElement):
+        * svg/SVGFEComponentTransferElement.h:
+        * svg/SVGFECompositeElement.cpp:
+        (WebCore::SVGFECompositeElement::SVGFECompositeElement):
+        * svg/SVGFECompositeElement.h:
+        * svg/SVGFEConvolveMatrixElement.cpp:
+        (WebCore::SVGFEConvolveMatrixElement::SVGFEConvolveMatrixElement):
+        * svg/SVGFEConvolveMatrixElement.h:
+        * svg/SVGFEDiffuseLightingElement.cpp:
+        (WebCore::SVGFEDiffuseLightingElement::SVGFEDiffuseLightingElement):
+        * svg/SVGFEDiffuseLightingElement.h:
+        * svg/SVGFEDisplacementMapElement.cpp:
+        (WebCore::SVGFEDisplacementMapElement::SVGFEDisplacementMapElement):
+        * svg/SVGFEDisplacementMapElement.h:
+        * svg/SVGFEDropShadowElement.cpp:
+        (WebCore::SVGFEDropShadowElement::SVGFEDropShadowElement):
+        * svg/SVGFEDropShadowElement.h:
+        * svg/SVGFEFloodElement.cpp:
+        * svg/SVGFEFloodElement.h:
+        * svg/SVGFEGaussianBlurElement.cpp:
+        (WebCore::SVGFEGaussianBlurElement::SVGFEGaussianBlurElement):
+        * svg/SVGFEGaussianBlurElement.h:
+        * svg/SVGFEImageElement.cpp:
+        (WebCore::SVGFEImageElement::SVGFEImageElement):
+        * svg/SVGFEImageElement.h:
+        * svg/SVGFELightElement.cpp:
+        (WebCore::SVGFELightElement::SVGFELightElement):
+        * svg/SVGFELightElement.h:
+        * svg/SVGFEMergeElement.cpp:
+        * svg/SVGFEMergeElement.h:
+        * svg/SVGFEMergeNodeElement.cpp:
+        (WebCore::SVGFEMergeNodeElement::SVGFEMergeNodeElement):
+        * svg/SVGFEMergeNodeElement.h:
+        * svg/SVGFEMorphologyElement.cpp:
+        (WebCore::SVGFEMorphologyElement::SVGFEMorphologyElement):
+        * svg/SVGFEMorphologyElement.h:
+        * svg/SVGFEOffsetElement.cpp:
+        (WebCore::SVGFEOffsetElement::SVGFEOffsetElement):
+        * svg/SVGFEOffsetElement.h:
+        * svg/SVGFESpecularLightingElement.cpp:
+        (WebCore::SVGFESpecularLightingElement::SVGFESpecularLightingElement):
+        * svg/SVGFESpecularLightingElement.h:
+        * svg/SVGFETileElement.cpp:
+        (WebCore::SVGFETileElement::SVGFETileElement):
+        * svg/SVGFETileElement.h:
+        * svg/SVGFETurbulenceElement.cpp:
+        (WebCore::SVGFETurbulenceElement::SVGFETurbulenceElement):
+        * svg/SVGFETurbulenceElement.h:
+        * svg/SVGFilterElement.cpp:
+        (WebCore::SVGFilterElement::SVGFilterElement):
+        * svg/SVGFilterElement.h:
+        * svg/SVGFilterPrimitiveStandardAttributes.cpp:
+        (WebCore::SVGFilterPrimitiveStandardAttributes::SVGFilterPrimitiveStandardAttributes):
+        * svg/SVGFilterPrimitiveStandardAttributes.h:
+        * svg/SVGFitToViewBox.cpp:
+        * svg/SVGFitToViewBox.h:
+        * svg/SVGFontElement.cpp:
+        (WebCore::SVGFontElement::SVGFontElement):
+        * svg/SVGFontElement.h:
+        (WebCore::SVGFontElement::rendererIsNeeded):
+        * svg/SVGForeignObjectElement.cpp:
+        (WebCore::SVGForeignObjectElement::SVGForeignObjectElement):
+        * svg/SVGForeignObjectElement.h:
+        (WebCore::SVGForeignObjectElement::synchronizeRequiredFeatures):
+        (WebCore::SVGForeignObjectElement::synchronizeRequiredExtensions):
+        (WebCore::SVGForeignObjectElement::synchronizeSystemLanguage):
+        * svg/SVGGElement.cpp:
+        (WebCore::SVGGElement::SVGGElement):
+        * svg/SVGGElement.h:
+        (WebCore::SVGGElement::synchronizeRequiredFeatures):
+        (WebCore::SVGGElement::synchronizeRequiredExtensions):
+        (WebCore::SVGGElement::synchronizeSystemLanguage):
+        * svg/SVGGlyphElement.cpp:
+        * svg/SVGGlyphElement.h:
+        * svg/SVGGradientElement.cpp:
+        (WebCore::SVGGradientElement::SVGGradientElement):
+        (WebCore::SVGGradientElement::svgAttributeChanged):
+        * svg/SVGGradientElement.h:
+        * svg/SVGImageElement.cpp:
+        (WebCore::SVGImageElement::SVGImageElement):
+        * svg/SVGImageElement.h:
+        (WebCore::SVGImageElement::synchronizeRequiredFeatures):
+        (WebCore::SVGImageElement::synchronizeRequiredExtensions):
+        (WebCore::SVGImageElement::synchronizeSystemLanguage):
+        * svg/SVGLineElement.cpp:
+        (WebCore::SVGLineElement::SVGLineElement):
+        * svg/SVGLineElement.h:
+        (WebCore::SVGLineElement::synchronizeRequiredFeatures):
+        (WebCore::SVGLineElement::synchronizeRequiredExtensions):
+        (WebCore::SVGLineElement::synchronizeSystemLanguage):
+        * svg/SVGLinearGradientElement.cpp:
+        (WebCore::SVGLinearGradientElement::SVGLinearGradientElement):
+        * svg/SVGLinearGradientElement.h:
+        * svg/SVGMPathElement.cpp:
+        (WebCore::SVGMPathElement::SVGMPathElement):
+        * svg/SVGMPathElement.h:
+        * svg/SVGMarkerElement.cpp:
+        (WebCore::SVGMarkerElement::orientTypePropertyInfo):
+        (WebCore::SVGMarkerElement::SVGMarkerElement):
+        (WebCore::SVGMarkerElement::setOrientToAuto):
+        (WebCore::SVGMarkerElement::setOrientToAngle):
+        (WebCore::SVGMarkerElement::synchronizeOrientType):
+        (WebCore::SVGMarkerElement::lookupOrCreateOrientTypeWrapper):
+        (WebCore::SVGMarkerElement::orientTypeAnimated):
+        * svg/SVGMarkerElement.h:
+        * svg/SVGMaskElement.cpp:
+        (WebCore::SVGMaskElement::SVGMaskElement):
+        * svg/SVGMaskElement.h:
+        (WebCore::SVGMaskElement::synchronizeRequiredFeatures):
+        (WebCore::SVGMaskElement::synchronizeRequiredExtensions):
+        (WebCore::SVGMaskElement::synchronizeSystemLanguage):
+        * svg/SVGMissingGlyphElement.cpp:
+        * svg/SVGMissingGlyphElement.h:
+        * svg/SVGPathElement.cpp:
+        (WebCore::SVGPathElement::dPropertyInfo):
+        (WebCore::SVGPathElement::SVGPathElement):
+        (WebCore::SVGPathElement::svgAttributeChanged):
+        (WebCore::SVGPathElement::lookupOrCreateDWrapper):
+        (WebCore::SVGPathElement::synchronizeD):
+        (WebCore::SVGPathElement::pathSegList):
+        (WebCore::SVGPathElement::animatedPathSegList):
+        * svg/SVGPathElement.h:
+        (WebCore::SVGPathElement::pathByteStream):
+        (WebCore::SVGPathElement::synchronizeRequiredFeatures):
+        (WebCore::SVGPathElement::synchronizeRequiredExtensions):
+        (WebCore::SVGPathElement::synchronizeSystemLanguage):
+        * svg/SVGPathSegWithContext.h:
+        (WebCore::SVGPathSegWithContext::animatedProperty):
+        * svg/SVGPatternElement.cpp:
+        (WebCore::SVGPatternElement::SVGPatternElement):
+        * svg/SVGPatternElement.h:
+        (WebCore::SVGPatternElement::synchronizeRequiredFeatures):
+        (WebCore::SVGPatternElement::synchronizeRequiredExtensions):
+        (WebCore::SVGPatternElement::synchronizeSystemLanguage):
+        * svg/SVGPolyElement.cpp:
+        (WebCore::SVGPolyElement::pointsPropertyInfo):
+        (WebCore::SVGPolyElement::SVGPolyElement):
+        (WebCore::SVGPolyElement::parseMappedAttribute):
+        (WebCore::SVGPolyElement::synchronizePoints):
+        (WebCore::SVGPolyElement::lookupOrCreatePointsWrapper):
+        (WebCore::SVGPolyElement::points):
+        (WebCore::SVGPolyElement::animatedPoints):
+        * svg/SVGPolyElement.h:
+        (WebCore::SVGPolyElement::synchronizeRequiredFeatures):
+        (WebCore::SVGPolyElement::synchronizeRequiredExtensions):
+        (WebCore::SVGPolyElement::synchronizeSystemLanguage):
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::SVGRadialGradientElement):
+        * svg/SVGRadialGradientElement.h:
+        * svg/SVGRectElement.cpp:
+        (WebCore::SVGRectElement::SVGRectElement):
+        * svg/SVGRectElement.h:
+        (WebCore::SVGRectElement::synchronizeRequiredFeatures):
+        (WebCore::SVGRectElement::synchronizeRequiredExtensions):
+        (WebCore::SVGRectElement::synchronizeSystemLanguage):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::SVGSVGElement):
+        * svg/SVGSVGElement.h:
+        (WebCore::SVGSVGElement::synchronizeRequiredFeatures):
+        (WebCore::SVGSVGElement::synchronizeRequiredExtensions):
+        (WebCore::SVGSVGElement::synchronizeSystemLanguage):
+        * svg/SVGScriptElement.cpp:
+        (WebCore::SVGScriptElement::SVGScriptElement):
+        * svg/SVGScriptElement.h:
+        * svg/SVGStopElement.cpp:
+        (WebCore::SVGStopElement::SVGStopElement):
+        * svg/SVGStopElement.h:
+        * svg/SVGStyledElement.cpp:
+        (WebCore::SVGStyledElement::SVGStyledElement):
+        (WebCore::cssPropertyToTypeMap):
+        (WebCore::SVGStyledElement::animatedPropertyTypeForAttribute):
+        * svg/SVGStyledElement.h:
+        * svg/SVGStyledTransformableElement.cpp:
+        (WebCore::SVGStyledTransformableElement::SVGStyledTransformableElement):
+        * svg/SVGStyledTransformableElement.h:
+        * svg/SVGSwitchElement.cpp:
+        (WebCore::SVGSwitchElement::SVGSwitchElement):
+        * svg/SVGSwitchElement.h:
+        (WebCore::SVGSwitchElement::synchronizeRequiredFeatures):
+        (WebCore::SVGSwitchElement::synchronizeRequiredExtensions):
+        (WebCore::SVGSwitchElement::synchronizeSystemLanguage):
+        * svg/SVGSymbolElement.cpp:
+        (WebCore::SVGSymbolElement::SVGSymbolElement):
+        * svg/SVGSymbolElement.h:
+        * svg/SVGTRefElement.cpp:
+        (WebCore::SVGTRefElement::SVGTRefElement):
+        * svg/SVGTRefElement.h:
+        * svg/SVGTSpanElement.cpp:
+        * svg/SVGTSpanElement.h:
+        * svg/SVGTests.cpp:
+        (WebCore::SVGTests::requiredFeaturesPropertyInfo):
+        (WebCore::SVGTests::requiredExtensionsPropertyInfo):
+        (WebCore::SVGTests::systemLanguagePropertyInfo):
+        (WebCore::SVGTests::attributeToPropertyMap):
+        (WebCore::SVGTests::synchronizeRequiredFeatures):
+        (WebCore::SVGTests::synchronizeRequiredExtensions):
+        (WebCore::SVGTests::synchronizeSystemLanguage):
+        * svg/SVGTests.h:
+        * svg/SVGTextContentElement.cpp:
+        (WebCore::SVGTextContentElement::textLengthPropertyInfo):
+        (WebCore::SVGTextContentElement::SVGTextContentElement):
+        (WebCore::SVGTextContentElement::synchronizeTextLength):
+        (WebCore::SVGTextContentElement::lookupOrCreateTextLengthWrapper):
+        (WebCore::SVGTextContentElement::textLengthAnimated):
+        * svg/SVGTextContentElement.h:
+        (WebCore::SVGTextContentElement::synchronizeRequiredFeatures):
+        (WebCore::SVGTextContentElement::synchronizeRequiredExtensions):
+        (WebCore::SVGTextContentElement::synchronizeSystemLanguage):
+        * svg/SVGTextElement.cpp:
+        (WebCore::SVGTextElement::SVGTextElement):
+        * svg/SVGTextElement.h:
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::SVGTextPathElement):
+        * svg/SVGTextPathElement.h:
+        * svg/SVGTextPositioningElement.cpp:
+        (WebCore::SVGTextPositioningElement::SVGTextPositioningElement):
+        * svg/SVGTextPositioningElement.h:
+        * svg/SVGTitleElement.cpp:
+        * svg/SVGTitleElement.h:
+        (WebCore::SVGTitleElement::rendererIsNeeded):
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::SVGUseElement):
+        * svg/SVGUseElement.h:
+        (WebCore::SVGUseElement::synchronizeRequiredFeatures):
+        (WebCore::SVGUseElement::synchronizeRequiredExtensions):
+        (WebCore::SVGUseElement::synchronizeSystemLanguage):
+        * svg/SVGViewElement.cpp:
+        (WebCore::SVGViewElement::SVGViewElement):
+        * svg/SVGViewElement.h:
+        * svg/SVGViewSpec.cpp:
+        (WebCore::SVGViewSpec::SVGViewSpec):
+        * svg/SVGViewSpec.h:
+        * svg/properties/SVGAnimatedProperty.h:
+        (WebCore::SVGAnimatedProperty::lookupOrCreateWrapper):
+        (WebCore::SVGAnimatedProperty::lookupWrapper):
+        * svg/properties/SVGAnimatedPropertyMacros.h:
+        * svg/properties/SVGAnimatedPropertySynchronizer.h:
+        * svg/properties/SVGAttributeToPropertyMap.cpp: Added.
+        (WebCore::SVGAttributeToPropertyMap::addProperties):
+        (WebCore::SVGAttributeToPropertyMap::addProperty):
+        (WebCore::SVGAttributeToPropertyMap::animatedPropertiesForAttribute):
+        (WebCore::SVGAttributeToPropertyMap::animatedPropertyTypeForAttribute):
+        (WebCore::SVGAttributeToPropertyMap::synchronizeProperties):
+        (WebCore::SVGAttributeToPropertyMap::synchronizeProperty):
+        (WebCore::SVGAttributeToPropertyMap::animatedProperty):
+        * svg/properties/SVGAttributeToPropertyMap.h: Added.
+        (WebCore::SVGAttributeToPropertyMap::SVGAttributeToPropertyMap):
+        (WebCore::SVGAttributeToPropertyMap::~SVGAttributeToPropertyMap):
+        (WebCore::SVGAttributeToPropertyMap::isEmpty):
+        * svg/properties/SVGPropertyInfo.h: Added.
+        (WebCore::SVGPropertyInfo::SVGPropertyInfo):
+
+2011-07-09  Patrick Gansterer  <paroga@webkit.org>
+
+        Unreviewed build fix after r90676.
+
+        * platform/graphics/ImageBuffer.cpp:
+
+2011-07-08  Dirk Schulze  <krit@webkit.org>
+
+        Refactoring luminance code in RenderSVGResourceMasker
+        https://bugs.webkit.org/show_bug.cgi?id=64146
+
+        Reviewed by Simon Fraser.
+
+        Moved luminance calculcation code to ImageBuffer. The code is doing pixel manipulations and can now get replaced
+        by platform specific algorithms in the ImmageBuffer*.cpp files.
+
+        No change of functionality. No new tests.
+
+        * WebCore.xcodeproj/project.pbxproj:
+        * platform/graphics/ImageBuffer.cpp:
+        (WebCore::ImageBuffer::transformColorSpace):
+        (WebCore::ImageBuffer::genericConvertToLuminanceMask):
+        (WebCore::ImageBuffer::convertToLuminanceMask):
+        * platform/graphics/ImageBuffer.h:
+        * rendering/svg/RenderSVGResourceMasker.cpp:
+        (WebCore::RenderSVGResourceMasker::drawContentIntoMaskImage):
+
+2011-07-08  Simon Fraser  <simon.fraser@apple.com>
+
+        Clean up RenderWidget::destroy() to share more code
+        https://bugs.webkit.org/show_bug.cgi?id=64138
+
+        Reviewed by James Robinson.
+
+        RenderWidget::destroy() copied code from various other
+        destroy() methods, which made code maintenance in this
+        area very risky.
+        
+        Fix by adding a virtual willBeDestroyed() method, which
+        replaces most instances of destroy(). Now, only RenderWidget
+        and RenderObject implement destroy(), and each just calls
+        willBeDestroyed(). Code duplication is averted.
+        
+        No behavior change, so no tests.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::willBeDestroyed):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::willBeDestroyed):
+        * rendering/RenderBox.h:
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::willBeDestroyed):
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderFullScreen.cpp:
+        (RenderFullScreenPlaceholder::willBeDestroyed):
+        (RenderFullScreen::willBeDestroyed):
+        * rendering/RenderFullScreen.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::willBeDestroyed):
+        * rendering/RenderInline.h:
+        * rendering/RenderListItem.cpp:
+        (WebCore::RenderListItem::willBeDestroyed):
+        * rendering/RenderListItem.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::willBeDestroyed):
+        (WebCore::RenderObject::destroy):
+        * rendering/RenderObject.h:
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::willBeDestroyed):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::willBeDestroyed):
+        * rendering/RenderTableCell.h:
+        * rendering/RenderTableRow.cpp:
+        (WebCore::RenderTableRow::willBeDestroyed):
+        * rendering/RenderTableRow.h:
+        * rendering/RenderTableSection.cpp:
+        (WebCore::RenderTableSection::willBeDestroyed):
+        * rendering/RenderTableSection.h:
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::willBeDestroyed):
+        * rendering/RenderText.h:
+        * rendering/RenderTextFragment.cpp:
+        (WebCore::RenderTextFragment::willBeDestroyed):
+        * rendering/RenderTextFragment.h:
+        * rendering/RenderWidget.cpp:
+        (WebCore::RenderWidget::willBeDestroyed):
+        (WebCore::RenderWidget::destroy):
+        * rendering/RenderWidget.h:
+        * rendering/svg/RenderSVGBlock.cpp:
+        (WebCore::RenderSVGBlock::willBeDestroyed):
+        * rendering/svg/RenderSVGBlock.h:
+        * rendering/svg/RenderSVGInline.cpp:
+        (WebCore::RenderSVGInline::willBeDestroyed):
+        * rendering/svg/RenderSVGInline.h:
+        * rendering/svg/RenderSVGInlineText.cpp:
+        (WebCore::RenderSVGInlineText::willBeDestroyed):
+        * rendering/svg/RenderSVGInlineText.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::willBeDestroyed):
+        * rendering/svg/RenderSVGModelObject.h:
+        * rendering/svg/RenderSVGResourceContainer.cpp:
+        (WebCore::RenderSVGResourceContainer::willBeDestroyed):
+        * rendering/svg/RenderSVGResourceContainer.h:
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::willBeDestroyed):
+        * rendering/svg/RenderSVGRoot.h:
+        * rendering/svg/SVGResourcesCache.h:
+
+2011-07-08  Adam Barth  <abarth@webkit.org>
+
+        Unreviewed, rolling out r90662.
+        http://trac.webkit.org/changeset/90662
+        https://bugs.webkit.org/show_bug.cgi?id=64210
+
+        Introduced regressions in Chromium browser tests (Requested by
+        rniwa on #webkit).
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::selectedText):
+        (WebCore::AccessibilityRenderObject::selectedTextRange):
+        (WebCore::AccessibilityRenderObject::setSelectedTextRange):
+        * html/HTMLFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::setSelectionRange):
+        (WebCore::HTMLTextFormControlElement::selectionStart):
+        (WebCore::HTMLTextFormControlElement::selectionEnd):
+        (WebCore::HTMLTextFormControlElement::selection):
+        (WebCore::HTMLTextFormControlElement::restoreCachedSelection):
+        (WebCore::HTMLTextFormControlElement::selectionChanged):
+        * html/HTMLFormControlElement.h:
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::setValue):
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::selectionStart):
+        (WebCore::RenderTextControl::selectionEnd):
+        (WebCore::RenderTextControl::hasVisibleTextArea):
+        (WebCore::setSelectionRange):
+        (WebCore::setContainerAndOffsetForRange):
+        (WebCore::RenderTextControl::selection):
+        * rendering/RenderTextControl.h:
+
+2011-07-08  Brian Salomon  <bsalomon@google.com>
+
+        Make GL context current before updating layer texture using skia-gpu
+        https://bugs.webkit.org/show_bug.cgi?id=64206
+
+        Reviewed by James Robinson.
+
+        Covered by existing tests (when accelerated drawing and compositing are on).
+
+        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
+        (WebCore::LayerTextureUpdaterSkPicture::updateTextureRect):
+
+2011-07-08  Tony Chang  <tony@chromium.org>
+
+        Refactor override size to be a size rather than just an int
+        https://bugs.webkit.org/show_bug.cgi?id=64195
+
+        Reviewed by David Hyatt.
+
+        Also convert to LayoutSize and LayoutUnit.
+
+        Covered by existing tests.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::overrideSize): Pass in a LayoutSize.
+        (WebCore::RenderBox::setOverrideSize):
+        (WebCore::RenderBox::clearOverrideSize): New method for clearing the
+            override size (previous we would pass in -1)
+        (WebCore::RenderBox::overrideWidth):
+        (WebCore::RenderBox::overrideHeight):
+        (WebCore::RenderBox::computeLogicalWidth):
+        (WebCore::RenderBox::computeLogicalHeight):
+        (WebCore::RenderBox::computePercentageLogicalHeight):
+        (WebCore::RenderBox::availableLogicalHeightUsing):
+        * rendering/RenderBox.h:
+        * rendering/RenderDeprecatedFlexibleBox.cpp:
+        (WebCore::gatherFlexChildrenInfo):
+        (WebCore::RenderDeprecatedFlexibleBox::layoutHorizontalBox):
+        (WebCore::RenderDeprecatedFlexibleBox::layoutVerticalBox):
+        (WebCore::RenderDeprecatedFlexibleBox::applyLineClamp):
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::setOverrideSizeFromRowHeight):
+        * rendering/RenderTableCell.h: Remove setOverrideSize since it was
+            only called in one place to clear the override size.  Inline this
+            logic instead.
+        * rendering/RenderTableSection.cpp:
+        (WebCore::RenderTableSection::calcRowLogicalHeight):
+        * rendering/RenderWidget.cpp:
+        (WebCore::RenderWidget::destroy):
+
+2011-07-08  Emil A Eklund  <eae@chromium.org>
+
+        Switch pointInContainer and accumulatedOffset to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64112
+
+        Reviewed by Eric Seidel.
+
+        Convert remaining IntPoint versions of the pointInContainer and
+        accumulatedOffset arguments to the new layout abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/HitTestResult.cpp:
+        (WebCore::HitTestResult::addNodeToRectBasedTestResult):
+        * rendering/HitTestResult.h:
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::isPointInOverflowControl):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::pushContentsClip):
+        (WebCore::RenderBox::popContentsClip):
+        * rendering/RenderBox.h:
+        * rendering/RenderEmbeddedObject.cpp:
+        (WebCore::RenderEmbeddedObject::getReplacementTextGeometry):
+        * rendering/RenderEmbeddedObject.h:
+        * rendering/RenderLineBoxList.cpp:
+        (WebCore::RenderLineBoxList::hitTest):
+        * rendering/RenderLineBoxList.h:
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::isPointInOverflowControl):
+        * rendering/RenderListBox.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::hitTest):
+        * rendering/RenderObject.h:
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::hitInnerTextElement):
+        * rendering/RenderTextControl.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::nodeAtPoint):
+
+2011-07-07  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Move selection related code from RenderTextControl to HTMLTextFormControlElement
+        https://bugs.webkit.org/show_bug.cgi?id=64133
+
+        Reviewed by Dimitri Glazkov.
+
+        Moved selectionStart, selectionEnd, hasVisibleTextArea, setSelectionRange, setContainerAndOffsetForRange
+        and selection from RenderTextControl.cpp to HTMLFormControlElement.cpp.
+
+        This refactoring removes RenderTextControl's dependency on FrameSelection.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::selectedText): Calls HTMLTextFromControl::selectedText.
+        (WebCore::AccessibilityRenderObject::selectedTextRange): Calls selectionStart and selectionEnd.
+        (WebCore::AccessibilityRenderObject::setSelectedTextRange): Ditto.
+        * html/HTMLFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::selectedText): Extracted from AccessibilityRenderObject::selectedText.
+        (WebCore::hasVisibleTextArea):
+        (WebCore::HTMLTextFormControlElement::setSelectionRange): Merged with the function of the same name in
+        RenderTextControl.
+        (WebCore::HTMLTextFormControlElement::selectionStart): Ditto.
+        (WebCore::HTMLTextFormControlElement::selectionEnd): Ditto.
+        (WebCore::setContainerAndOffsetForRange): Moved from RenderTextControl.cpp
+        (WebCore::HTMLTextFormControlElement::selection): Merged with the function of the same name in RenderTextControl.
+        (WebCore::HTMLTextFormControlElement::selectionChanged): Calls selectionStart and selectionEnd.
+        * html/HTMLFormControlElement.h:
+        (WebCore::HTMLTextFormControlElement::restoreCachedSelection): Moved from HTMLFormControlElement.cpp now that
+        all functions are self-contained in HTMLTextFormControlElement.
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::setValue): Calls setSelectionRange.
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::textFormControlElement): Added.
+        * rendering/RenderTextControl.h:
+
+2011-07-08  Mike Reed  <reed@google.com>
+
+        remove (empty) indirection between GraphicsContextPlatformPrivate and PlatformContextSkia
+        https://bugs.webkit.org/show_bug.cgi?id=64178
+
+        Reviewed by Stephen White.
+
+        No new tests. no functionality change, other than removing an indirection that is not needed
+
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/skia/GraphicsContextPlatformPrivate.h: Removed.
+        * platform/graphics/skia/GraphicsContextSkia.cpp:
+        (WebCore::GraphicsContext::platformInit):
+        (WebCore::GraphicsContext::platformDestroy):
+        (WebCore::GraphicsContext::platformContext):
+
+2011-07-08  Jeffrey Pfau  <jpfau@apple.com>
+
+        Add framework for a new/dummy XMLDocumentParser
+        https://bugs.webkit.org/show_bug.cgi?id=63955
+
+        Reviewed by Adam Barth.
+
+        Added a dummy framework NewXMLDocumentParser
+
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/Document.cpp:
+        (WebCore::Document::createParser):
+        * xml/parser/NewXMLDocumentParser.cpp: Added.
+        (WebCore::NewXMLDocumentParser::NewXMLDocumentParser):
+        (WebCore::NewXMLDocumentParser::textPosition):
+        (WebCore::NewXMLDocumentParser::lineNumber):
+        (WebCore::NewXMLDocumentParser::insert):
+        (WebCore::NewXMLDocumentParser::append):
+        (WebCore::NewXMLDocumentParser::finish):
+        (WebCore::NewXMLDocumentParser::detach):
+        (WebCore::NewXMLDocumentParser::hasInsertionPoint):
+        (WebCore::NewXMLDocumentParser::finishWasCalled):
+        (WebCore::NewXMLDocumentParser::processingData):
+        (WebCore::NewXMLDocumentParser::prepareToStopParsing):
+        (WebCore::NewXMLDocumentParser::stopParsing):
+        (WebCore::NewXMLDocumentParser::isWaitingForScripts):
+        (WebCore::NewXMLDocumentParser::isExecutingScript):
+        (WebCore::NewXMLDocumentParser::executeScriptsWaitingForStylesheets):
+        * xml/parser/NewXMLDocumentParser.h: Added.
+        (WebCore::NewXMLDocumentParser::create):
+
+2011-07-08  David Reveman  <reveman@chromium.org>
+
+        Remove unused function parameters.
+
+        Reviewed by Ryosuke Niwa.
+
+        * platform/graphics/gpu/TilingData.cpp:
+        (WebCore::TilingData::textureOffset):
+
+2011-07-08  David Reveman  <reveman@chromium.org>
+
+        Reviewed by Stephen White.
+
+        [Chromium] Edge anti-aliasing for composited layers.
+        https://bugs.webkit.org/show_bug.cgi?id=61388
+
+        Add transparent outer border to tiled layers and adjust vertex
+        coordinates so that use of a bilinear filter creates a smooth
+        layer edge.
+
+        Tests: platform/chromium/compositing/tiny-layer-rotated.html
+               platform/chromium/compositing/huge-layer-rotated.html (existing)
+               TilingDataTest in webkit_unit_tests
+
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        Change maxUntiledSize to 510 to ensure that tiles are not greater
+        than 512 with outer borders.
+        (WebCore::ContentLayerChromium::updateLayerSize): We can't use the
+        layer size as tile size when we want to avoid tiling as this will
+        not be enough space to include possible outer borders. We instead use
+        an empty size, which allows the tiler to automatically adjust the
+        tile size to be large enough for the layer to fit in one tile.
+        (WebCore::ContentLayerChromium::createTilerIfNeeded):
+        (WebCore::ContentLayerChromium::setIsMask): Don't use border texels
+        for layer used as mask.
+
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        (WebCore::ContentLayerChromium::m_borderTexels) Added.
+
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::tileTexRect): Added.
+        (WebCore::LayerTilerChromium::tileLayerRect): m_tileSize is no
+        longer the correct layer size. Size of bounds with border should
+        be the correct layer size.
+        (WebCore::LayerTilerChromium::growLayerToContain): Adjust texture
+        size to include outer borders and handle empty m_tileSize.
+        (WebCore::LayerTilerChromium::invalidateRect): Use size of rectangle
+        returned by tileTexRect instead of m_tileSize for texture size.
+        (WebCore::LayerTilerChromium::prepareToUpdate): Ditto.
+        (WebCore::LayerTilerChromium::draw): Compute and intersect tile edges
+        instead of using tile coordinates directly. Edges are adjusted to
+        include outer borders and make sure all partially covered pixels are
+        processed.
+        (WebCore::LayerTilerChromium::drawTexturedQuad): Pass quad to
+        shader using point uniform.
+        (WebCore::LayerTilerChromium::invalidateRect): Invalidate old layer
+        area to clear any contents left from previous layer size.
+
+        * platform/graphics/chromium/LayerTilerChromium.h:
+        (WebCore::LayerTilerChromium::tileTexRect) Added.
+        (WebCore::LayerTilerChromium::drawTexturedQuad): Add quad parameter.
+
+        * platform/graphics/chromium/ShaderChromium.cpp:
+        (WebCore::VertexShaderPosTexTransform::getShaderString) Get X/Y vertex
+        components from point uniform.
+        (WebCore::VertexShaderPosTexTransform::VertexShaderPosTexTransform)
+        Added point uniform.
+        (WebCore::VertexShaderPosTexTransform::init) Ditto.
+        (WebCore::VertexShaderPosTexTransform::pointLocation) Added.
+
+        * platform/graphics/chromium/ShaderChromium.h:
+        (WebCore::VertexShaderPosTexTransform::pointLocation) Added.
+
+        * platform/graphics/gpu/TilingData.cpp:
+        (WebCore::TilingData::tileBoundsWithOuterBorder): Added.
+        (WebCore::TilingData::computeNumTiles): Adjust for outer border.
+        (WebCore::TilingData::tileXIndexFromSrcCoord): Ditto.
+        (WebCore::TilingData::tileYIndexFromSrcCoord): Ditto.
+        (WebCore::TilingData::tileSizeX): Ditto.
+        (WebCore::TilingData::tileSizeY): Ditto.
+        (WebCore::TilingData::intersectDrawQuad): Ditto.
+        (WebCore::TilingData::textureOffset): Ditto.
+
+        * platform/graphics/gpu/TilingData.h:
+        (WebCore::TilingData::tileBoundsWithOuterBorder): Added.
+
+2011-07-08  Mike Reed  <reed@google.com>
+
+        [skia] don't rely on lockPixels failure to detect gpu-backed device (in prep for skia roll)
+        https://bugs.webkit.org/show_bug.cgi?id=64162
+
+        Reviewed by Stephen White.
+
+        No new tests. preparing for skia roll, where lockPixels always succeeds (but slowly for gpu-backed)
+
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::putImageData):
+
+2011-07-08  Chang Shu  <cshu@webkit.org>
+
+        Update calling sites after function renamed.
+        https://bugs.webkit.org/show_bug.cgi?id=59114
+
+        Reviewed by Alexey Proskuryakov.
+
+        No new tests, just refactoring.
+
+        * editing/visible_units.cpp:
+        (WebCore::previousBoundary):
+        (WebCore::nextBoundary):
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::setTextInternal):
+
+2011-07-08  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions]Parse content: -webkit-from-flow
+        https://bugs.webkit.org/show_bug.cgi?id=63133
+
+        Reviewed by David Hyatt.
+
+        Test: fast/regions/content-webkit-from-flow-parsing.html
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::contentToCSSValue):
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseContent):
+        (WebCore::CSSParser::parseFromFlowContent):
+        * css/CSSParser.h:
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::cleanup):
+        (WebCore::CSSPrimitiveValue::getStringValue):
+        (WebCore::CSSPrimitiveValue::cssText):
+        * css/CSSPrimitiveValue.h:
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::regionThread):
+        (WebCore::InheritedFlags::setRegionThread):
+        (WebCore::InheritedFlags::initialRegionThread):
+        * rendering/style/StyleRareNonInheritedData.cpp:
+        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
+        (WebCore::StyleRareNonInheritedData::operator==):
+        * rendering/style/StyleRareNonInheritedData.h:
+
+2011-07-08  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: NetworkPanel search failed if the matched sting is in the query part of url
+        https://bugs.webkit.org/show_bug.cgi?id=64167
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkPanel.prototype._matchResource):
+        (WebInspector.NetworkPanel.prototype._highlightNthMatchedResource):
+        (WebInspector.NetworkDataGridNode.prototype._refreshNameCell):
+        * inspector/front-end/Resource.js:
+        (WebInspector.Resource.prototype.get folder):
+
+2011-07-08  Benjamin Poulain  <benjamin@webkit.org>
+
+        [Qt] Enable HTTP Pipelining by default
+        https://bugs.webkit.org/show_bug.cgi?id=64169
+
+        Reviewed by Andreas Kling.
+
+        QNetworkAccessManager disables HTTP pipelining by default. We enable it by
+        setting an attribute on the request.
+
+        * platform/network/qt/ResourceRequestQt.cpp:
+        (WebCore::ResourceRequest::toNetworkRequest):
+
+2011-07-08  Alexander Pavlov  <apavlov@chromium.org>
+
+        Web Inspector: CSS inspector gets confused about specificity of !important properties
+        https://bugs.webkit.org/show_bug.cgi?id=64074
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype._markUsedProperties):
+
+2011-07-08  Alexander Pavlov  <apavlov@chromium.org>
+
+        [Chromium] Unreviewed, clang build fix.
+
+        * inspector/InspectorStyleTextEditor.h:
+
+2011-07-08  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: add support for drag'n'drop of non-elements (comments, text, etc.)
+        https://bugs.webkit.org/show_bug.cgi?id=64163
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::moveTo):
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeOutline.prototype._isValidDragSourceOrTarget):
+
+2011-07-08  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: secure access to extensions API
+        https://bugs.webkit.org/show_bug.cgi?id=64080
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ExtensionAPI.js:
+        (WebInspector.injectedExtensionAPI.Panels.prototype.create):
+        (WebInspector.injectedExtensionAPI.ExtensionSidebarPaneImpl.prototype.setPage):
+        * inspector/front-end/ExtensionPanel.js:
+        (WebInspector.ExtensionPanel):
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer):
+        (WebInspector.ExtensionServer.prototype._onCreatePanel):
+        (WebInspector.ExtensionServer.prototype._onSetSidebarPage):
+        (WebInspector.ExtensionServer.prototype._addExtensions):
+        (WebInspector.ExtensionServer.prototype._onWindowMessage):
+        (WebInspector.ExtensionServer.prototype._registerSubscriptionHandler):
+        (WebInspector.ExtensionServer.prototype._expandResourcePath):
+        (WebInspector.ExtensionServer.prototype._normalizePath):
+
+2011-07-08  Adam Barth  <abarth@webkit.org>
+
+        Unreviewed, rolling out r90615.
+        http://trac.webkit.org/changeset/90615
+        https://bugs.webkit.org/show_bug.cgi?id=64158
+
+        broke inspector/extensions/extensions.html (Requested by caseq
+        on #webkit).
+
+        * inspector/front-end/ExtensionAPI.js:
+        (WebInspector.injectedExtensionAPI.Panels.prototype.create):
+        (WebInspector.injectedExtensionAPI.ExtensionSidebarPaneImpl.prototype.setPage):
+        (WebInspector.injectedExtensionAPI.expandURL):
+        * inspector/front-end/ExtensionPanel.js:
+        (WebInspector.ExtensionPanel):
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer):
+        (WebInspector.ExtensionServer.prototype._onCreatePanel):
+        (WebInspector.ExtensionServer.prototype._onSetSidebarPage):
+        (WebInspector.ExtensionServer.prototype._addExtensions):
+        (WebInspector.ExtensionServer.prototype._onWindowMessage):
+        (WebInspector.ExtensionServer.prototype._registerSubscriptionHandler):
+
+2011-07-07  Alexander Pavlov  <apavlov@chromium.org>
+
+        Web Inspector: Adding CSS properties results in messy style rules
+        https://bugs.webkit.org/show_bug.cgi?id=63622
+
+        Reviewed by Pavel Feldman.
+
+        Test: inspector/styles/styles-formatting.html
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * css/CSSPropertySourceData.cpp:
+        (WebCore::SourceRange::length):
+        * css/CSSPropertySourceData.h:
+        * inspector/InspectorStyleSheet.cpp:
+        (WebCore::InspectorStyle::InspectorStyle):
+        (WebCore::InspectorStyle::setPropertyText):
+        (WebCore::InspectorStyle::toggleProperty):
+        (WebCore::InspectorStyle::applyStyleText):
+        (WebCore::InspectorStyle::newLineAndWhitespaceDelimiters):
+        * inspector/InspectorStyleSheet.h:
+        * inspector/InspectorStyleTextEditor.cpp: Added.
+        (WebCore::InspectorStyleTextEditor::InspectorStyleTextEditor):
+        (WebCore::InspectorStyleTextEditor::insertProperty):
+        (WebCore::InspectorStyleTextEditor::replaceProperty):
+        (WebCore::InspectorStyleTextEditor::removeProperty):
+        (WebCore::InspectorStyleTextEditor::enableProperty):
+        (WebCore::InspectorStyleTextEditor::disableProperty):
+        (WebCore::InspectorStyleTextEditor::disabledIndexByOrdinal):
+        (WebCore::InspectorStyleTextEditor::shiftDisabledProperties):
+        (WebCore::InspectorStyleTextEditor::internalReplaceProperty):
+        * inspector/InspectorStyleTextEditor.h: Added.
+        (WebCore::InspectorStyleTextEditor::styleText):
+
+2011-07-08  Alexander Pavlov  <apavlov@chromium.org>
+
+        Web Inspector: Quotes are rendered as &quot; in the DOM tree
+        https://bugs.webkit.org/show_bug.cgi?id=64154
+
+        Reviewed by Yury Semikhatsky.
+
+        Since we currently rely on setting textContent rather than innerHTML for the DOM tree elements,
+        escapeHTML() calls unnecessarily HTML-escape certain characters in the DOM tree contents.
+
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeElement.prototype._buildAttributeDOM):
+        ():
+
+2011-07-08  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Remove unused code from InspectorAgent.h.
+        https://bugs.webkit.org/show_bug.cgi?id=64120
+
+        Reviewed by Joseph Pecoraro.
+
+        * inspector/InspectorAgent.h:
+
+2011-07-08  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: secure access to extensions API
+        https://bugs.webkit.org/show_bug.cgi?id=64080
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ExtensionAPI.js:
+        (WebInspector.injectedExtensionAPI.Panels.prototype.create):
+        (WebInspector.injectedExtensionAPI.ExtensionSidebarPaneImpl.prototype.setPage):
+        * inspector/front-end/ExtensionPanel.js:
+        (WebInspector.ExtensionPanel):
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer):
+        (WebInspector.ExtensionServer.prototype._onCreatePanel):
+        (WebInspector.ExtensionServer.prototype._onSetSidebarPage):
+        (WebInspector.ExtensionServer.prototype._addExtensions):
+        (WebInspector.ExtensionServer.prototype._onWindowMessage):
+        (WebInspector.ExtensionServer.prototype._registerSubscriptionHandler):
+        (WebInspector.ExtensionServer.prototype._expandResourcePath):
+        (WebInspector.ExtensionServer.prototype._normalizePath):
+
+2011-07-08  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: typing undefined = 1 in console crashes browser
+        https://bugs.webkit.org/show_bug.cgi?id=64155
+
+        Do not access undefined value directly when producing JSON objects as undefined
+        may be overriden by the inspected page.
+
+        Reviewed by Pavel Feldman.
+
+        Test: inspector/console/console-eval-undefined-override.html
+
+        * inspector/InjectedScriptSource.js:
+        (.):
+        ():
+
+2011-07-07  Emil A Eklund  <eae@chromium.org>
+
+        Switch HitTestResult to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64131
+
+        Reviewed by Eric Seidel.
+
+        No new tests, no functionality changes.
+
+        * page/MouseEventWithHitTestResults.cpp:
+        (WebCore::MouseEventWithHitTestResults::localPoint):
+        * page/MouseEventWithHitTestResults.h:
+        * rendering/HitTestResult.cpp:
+        (WebCore::HitTestResult::HitTestResult):
+        (WebCore::HitTestResult::addNodeToRectBasedTestResult):
+        (WebCore::HitTestResult::rectForPoint):
+        * rendering/HitTestResult.h:
+        (WebCore::HitTestResult::point):
+        (WebCore::HitTestResult::localPoint):
+        (WebCore::HitTestResult::setPoint):
+        (WebCore::HitTestResult::setLocalPoint):
+        (WebCore::HitTestResult::rectForPoint):
+
+2011-07-07  Levi Weintraub  <leviw@chromium.org>
+
+        Switch remaining paint functions to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64116
+
+        Reviewed by Eric Seidel.
+
+        Switching all functions with IntPoint paintOffsets to the new Layout types.
+
+        No new tests, no functionality changes.
+
+        * rendering/EllipsisBox.cpp:
+        (WebCore::EllipsisBox::paint):
+        (WebCore::EllipsisBox::paintSelection):
+        * rendering/EllipsisBox.h:
+        * rendering/InlineBox.cpp:
+        (WebCore::InlineBox::paint):
+        * rendering/InlineBox.h:
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::paint):
+        * rendering/InlineFlowBox.h:
+        * rendering/InlineTextBox.cpp:
+        (WebCore::InlineTextBox::paint):
+        (WebCore::InlineTextBox::paintCustomHighlight):
+        * rendering/InlineTextBox.h:
+        * rendering/LayoutTypes.h:
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::paintColumnRules):
+        (WebCore::RenderBlock::paintColumnContents):
+        (WebCore::RenderBlock::paintContents):
+        (WebCore::RenderBlock::paintChildren):
+        (WebCore::RenderBlock::paintCaret):
+        (WebCore::RenderBlock::paintObject):
+        (WebCore::RenderBlock::paintFloats):
+        (WebCore::RenderBlock::paintEllipsisBoxes):
+        (WebCore::RenderBlock::paintContinuationOutlines):
+        (WebCore::RenderBlock::paintSelection):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintCustomHighlight):
+        * rendering/RenderBox.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::paintOutline):
+        (WebCore::RenderInline::paintOutlineForLine):
+        * rendering/RenderInline.h:
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::paintOverflowControls):
+        (WebCore::RenderLayer::paintScrollCorner):
+        (WebCore::RenderLayer::paintResizer):
+        * rendering/RenderLayer.h:
+        * rendering/RenderLineBoxList.cpp:
+        (WebCore::RenderLineBoxList::paint):
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::paintScrollbar):
+        (WebCore::RenderListBox::paintItemForeground):
+        (WebCore::RenderListBox::paintItemBackground):
+        * rendering/RenderListBox.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::paintFocusRing):
+        (WebCore::RenderObject::paintOutline):
+        * rendering/RenderObject.h:
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::shouldPaint):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderScrollbarPart.cpp:
+        (WebCore::RenderScrollbarPart::paintIntoRect):
+        * rendering/RenderScrollbarPart.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::paintBackgroundsBehindCell):
+        * rendering/RenderTableSection.cpp:
+        (WebCore::RenderTableSection::paintCell):
+        * rendering/RenderTableSection.h:
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::paintPlaceholder):
+        * rendering/RootInlineBox.cpp:
+        (WebCore::RootInlineBox::paintEllipsisBox):
+        (WebCore::RootInlineBox::paintCustomHighlight):
+        (WebCore::RootInlineBox::paint):
+        * rendering/RootInlineBox.h:
+        * rendering/mathml/RenderMathMLBlock.cpp:
+        (WebCore::RenderMathMLBlock::paint):
+        * rendering/mathml/RenderMathMLFraction.cpp:
+        (WebCore::RenderMathMLFraction::paint):
+        * rendering/mathml/RenderMathMLRoot.cpp:
+        (WebCore::RenderMathMLRoot::paint):
+        * rendering/mathml/RenderMathMLSquareRoot.cpp:
+        (WebCore::RenderMathMLSquareRoot::paint):
+
 2011-07-07  Steve VanDeBogart  <vandebo@chromium.org>
 
         Work around Skia PDF's lack of inverted path support.
@@ -19,6 +6491,8231 @@
         * platform/graphics/skia/PlatformContextSkia.cpp:
         (WebCore::PlatformContextSkia::clipPathAntiAliased):
 
+2011-07-07  Emil A Eklund  <eae@chromium.org>
+
+        Switch rendering tree selection code to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63762
+
+        Reviewed by Eric Seidel.
+
+        Switch selection getters and selection gap calculation methods over to
+        new layout abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/InlineTextBox.cpp:
+        (WebCore::InlineTextBox::selectionTop):
+        (WebCore::InlineTextBox::selectionBottom):
+        (WebCore::InlineTextBox::selectionHeight):
+        (WebCore::InlineTextBox::isSelected):
+        * rendering/InlineTextBox.h:
+        * rendering/RenderBR.h:
+        (WebCore::RenderBR::selectionRectForRepaint):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::selectionGapRectsForRepaint):
+        (WebCore::RenderBlock::selectionGaps):
+        (WebCore::RenderBlock::inlineSelectionGaps):
+        (WebCore::RenderBlock::blockSelectionGaps):
+        (WebCore::RenderBlock::blockSelectionGap):
+        (WebCore::RenderBlock::logicalLeftSelectionGap):
+        (WebCore::RenderBlock::logicalRightSelectionGap):
+        (WebCore::RenderBlock::logicalLeftSelectionOffset):
+        (WebCore::RenderBlock::logicalRightSelectionOffset):
+        (WebCore::RenderBlock::positionForPointWithInlineChildren):
+        (WebCore::RenderBlock::desiredColumnWidth):
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::selectionRectForRepaint):
+        * rendering/RenderListMarker.cpp:
+        (WebCore::RenderListMarker::selectionRectForRepaint):
+        * rendering/RenderListMarker.h:
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::selectionRect):
+        (WebCore::RenderObject::selectionRectForRepaint):
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::selectionRectForRepaint):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderSelectionInfo.h:
+        (WebCore::RenderSelectionInfo::RenderSelectionInfo):
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::selectionRectForRepaint):
+        * rendering/RenderText.h:
+        * rendering/RootInlineBox.cpp:
+        (WebCore::RootInlineBox::selectionTop):
+        (WebCore::RootInlineBox::selectionBottom):
+        * rendering/RootInlineBox.h:
+        (WebCore::RootInlineBox::selectionHeight):
+
+2011-07-07  Gavin Peters  <gavinp@chromium.org>
+
+        Reviewed by Alexey Proskuryakov.
+
+        fast/dom/HTMLLinkElement/link-and-subresource-test.html is flaky on chromium debug bots
+        https://bugs.webkit.org/show_bug.cgi?id=60097
+
+        The culprit was that CachedResource:stopLoading() was using *this
+        after a call to checkNotify(), which isn't kosher.  This patch
+        uses a CachedResourceHandle to keep the CachedResource alive.
+
+        The test is a very close copy of the eponymous
+        link-and-subresource-test.html, only substituting invalid
+        resources for the valid ones in that test.  The reproduction is
+        timing related, and happens much more consistantly with an invalid
+        resource for whatever reason.
+        Test: fast/dom/HTMLLinkElement/link-and-subresource-test-nonexistent.html
+
+        * loader/cache/CachedResource.cpp:
+        (WebCore::CachedResource::stopLoading):
+
+2011-07-07  James Robinson  <jamesr@chromium.org>
+
+        Reviewed by Kenneth Russell.
+
+        Use v8::AdjustAmountOfExternalAllocatedMemory for ArrayBuffers
+        https://bugs.webkit.org/show_bug.cgi?id=42912
+
+        This calls v8's AdjustAmountOfExternalAllocatedMemory when ArrayBuffers are allocated/deallocated so that V8's
+        garbage collection heuristics can account for the memory held by these objects.  On the new test page, this
+        reduces the peak memory use from 5BG+ (or a crash in 32-bit systems) to <300MB.
+
+        Test: WebCore/manual-tests/array-buffer-memory.html
+
+        * html/canvas/ArrayBuffer.cpp:
+        (WebCore::ArrayBuffer::~ArrayBuffer):
+        (WebCore::ArrayBuffer::tryAllocate):
+
+2011-07-07  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Move all code related to cachedSelection to HTMLTextFormControlElement
+        https://bugs.webkit.org/show_bug.cgi?id=64118
+
+        Reviewed by Alexey Proskuryakov.
+
+        Moved m_cachedSelectionStart and m_cachedSelectionEnd from HTMLInputElement
+        and HTMLTextAreaElement to HTMLTextFormControlElement
+
+        Also removed cached selection related functions from RenderTextControl,
+        RenderTextControlSingleLine, and RenderTextControlMultiLine because they were
+        merely providing wrapper functions to enable polymorphism between
+        input and textarea elements and their WML equivalents.
+
+        * editing/FrameSelection.cpp:
+        (WebCore::FrameSelection::notifyRendererOfSelectionChange): Calls HTMLTextFormControlElement's
+        selectionChanged instead of RenderTextControl's.
+        * html/HTMLFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::HTMLTextFormControlElement): Initialize
+        m_cachedSelectionStart and m_cachedSelectionEnd.
+        (WebCore::HTMLTextFormControlElement::selectionStart):
+        (WebCore::HTMLTextFormControlElement::selectionEnd):
+        (WebCore::HTMLTextFormControlElement::selection):
+        (WebCore::HTMLTextFormControlElement::restoreCachedSelection): Added.
+        (WebCore::HTMLTextFormControlElement::selectionChanged): Extracted from
+        RenderTextControl::selectionChanged.
+        * html/HTMLFormControlElement.h:
+        (WebCore::HTMLTextFormControlElement::cacheSelection): Extracted from HTMLInputElement
+        and HTMLTextAreaElement.
+        (WebCore::HTMLTextFormControlElement::hasCachedSelectionStart): Added.
+        (WebCore::HTMLTextFormControlElement::hasCachedSelectionEnd): Added.
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::HTMLInputElement):
+        (WebCore::HTMLInputElement::updateFocusAppearance):
+        * html/HTMLInputElement.h:
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::HTMLTextAreaElement):
+        (WebCore::HTMLTextAreaElement::updateFocusAppearance):
+        * html/HTMLTextAreaElement.h:
+        (WebCore::HTMLTextAreaElement::isEmptyValue):
+        * rendering/RenderTextControl.cpp:
+        (WebCore::setSelectionRange):
+        * rendering/RenderTextControl.h:
+        * rendering/RenderTextControlMultiLine.cpp:
+        * rendering/RenderTextControlMultiLine.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        * rendering/RenderTextControlSingleLine.h:
+
+2011-07-07  Emil A Eklund  <eae@chromium.org>
+
+        Switch addFocusRingRects to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64114
+
+        Reviewed by Eric Seidel.
+
+        No new tests, no functionality changes.
+
+        * rendering/LayoutTypes.h:
+        (WebCore::flooredLayoutPoint):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::addFocusRingRects):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::addFocusRingRects):
+        * rendering/RenderBox.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::addFocusRingRects):
+        * rendering/RenderInline.h:
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::addFocusRingRects):
+        * rendering/RenderListBox.h:
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::addFocusRingRects):
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::addFocusRingRects):
+        * rendering/RenderTextControl.h:
+        * rendering/svg/RenderSVGContainer.cpp:
+        (WebCore::RenderSVGContainer::addFocusRingRects):
+        * rendering/svg/RenderSVGContainer.h:
+        * rendering/svg/RenderSVGImage.cpp:
+        (WebCore::RenderSVGImage::addFocusRingRects):
+        * rendering/svg/RenderSVGImage.h:
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::addFocusRingRects):
+        * rendering/svg/RenderSVGPath.h:
+
+2011-07-06  Adrienne Walker  <enne@google.com>
+
+        [chromium] Reduce compositor texture memory by skipping layers and clipping surfaces
+        https://bugs.webkit.org/show_bug.cgi?id=64052
+
+        Reviewed by James Robinson.
+
+        Layers and surfaces that are entirely transparent are now skipped.
+        Parent scissor rects are now applied to the content rect of surfaces
+        so that offscreen surfaces can be skipped.
+
+        Landing this for vangelis@chromium.org.
+
+        Covered by existing tests.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::calculateVisibleRect):
+        (WebCore::calculateVisibleLayerRect):
+        (WebCore::LayerRendererChromium::paintLayerContents):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::updatePropertiesAndRenderSurfaces):
+        (WebCore::LayerRendererChromium::updateCompositorResources):
+        (WebCore::LayerRendererChromium::drawLayer):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::RenderSurfaceChromium):
+
+2011-07-07  Adam Barth  <abarth@webkit.org>
+
+        Unreviewed, rolling out r90581.
+        http://trac.webkit.org/changeset/90581
+        https://bugs.webkit.org/show_bug.cgi?id=64124
+
+        Broke a bunch of inspector tests (Requested by ojan on
+        #webkit).
+
+        * inspector/front-end/ExtensionAPI.js:
+        (WebInspector.injectedExtensionAPI.Panels.prototype.create):
+        (WebInspector.injectedExtensionAPI.ExtensionSidebarPaneImpl.prototype.setPage):
+        (WebInspector.injectedExtensionAPI.expandURL):
+        * inspector/front-end/ExtensionPanel.js:
+        (WebInspector.ExtensionPanel):
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer):
+        (WebInspector.ExtensionServer.prototype._onCreatePanel):
+        (WebInspector.ExtensionServer.prototype._onSetSidebarPage):
+        (WebInspector.ExtensionServer.prototype._addExtensions):
+        (WebInspector.ExtensionServer.prototype._onWindowMessage):
+        (WebInspector.ExtensionServer.prototype._registerSubscriptionHandler):
+
+2011-07-07  Adrienne Walker  <enne@google.com>
+
+        [chromium] Fix crash when compositing gets disabled mid-paint
+        https://bugs.webkit.org/show_bug.cgi?id=64119
+
+        Reviewed by James Robinson.
+
+        WebKit paint can disable compositing and call setRootLayer(0). Adding
+        a check for this in drawLayers prevents a null pointer deref.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawLayers):
+
+2011-07-07  Dirk Schulze  <krit@webkit.org>
+
+        SVGAnimateTransform does not support calcMode=discrete
+        https://bugs.webkit.org/show_bug.cgi?id=63914
+
+        Reviewed by Rob Buis.
+
+        CalcMode discrete specifies that the animation function will jump from one value to the next without any interpolation.
+        Implemented calcMode discrete by checking current progress of animation. If we are in the first half of the animation,
+        we use the start value of the aniamtion, end value for the second half of the animation. The key time at 50% is used on
+        all other animations as well as on other SVG viewers.
+
+        Added a manual test. DRT crashes on an automated test with the SVG animation API. Opened a new bug report: 64104.
+
+        * manual-tests/svg-animateTransform-calcMode-discrete.svg: Added.
+        * svg/SVGAnimateTransformElement.cpp:
+        (WebCore::SVGAnimateTransformElement::calculateAnimatedValue):
+
+2011-07-07  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Rob Buis.
+
+        SVGAnimatedPath needs fallback for 'by' animation
+        https://bugs.webkit.org/show_bug.cgi?id=63865
+        
+        Added fallback to 'to' animation for 'by' animated SVGAnimatedPathAnimator.
+        
+        Clenup of SVGAnimateElement. Removed all switches since we support all AnimatedTypes
+        with the exception of AnimatedEnumeration. AnimatedEnumeration gets animated as AnimatedString at the moment. 
+
+        Test: svg/animations/svgpath-animation-1.html
+
+        * svg/SVGAnimateElement.cpp:
+        (WebCore::getPropertyValue):
+        (WebCore::inheritsFromProperty):
+        (WebCore::attributeValueIsCurrentColor):
+        (WebCore::SVGAnimateElement::adjustForCurrentColor):
+        (WebCore::SVGAnimateElement::determineAnimatedAttributeType):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        * svg/SVGAnimatedPath.cpp:
+        (WebCore::SVGAnimatedPathAnimator::calculateFromAndByValues):
+
+2011-07-07  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: secure access to extensions API
+        https://bugs.webkit.org/show_bug.cgi?id=64080
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ExtensionAPI.js:
+        (WebInspector.injectedExtensionAPI.Panels.prototype.create):
+        (WebInspector.injectedExtensionAPI.ExtensionSidebarPaneImpl.prototype.setPage):
+        * inspector/front-end/ExtensionPanel.js:
+        (WebInspector.ExtensionPanel):
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer):
+        (WebInspector.ExtensionServer.prototype._onCreatePanel):
+        (WebInspector.ExtensionServer.prototype._onSetSidebarPage):
+        (WebInspector.ExtensionServer.prototype._addExtensions):
+        (WebInspector.ExtensionServer.prototype._onWindowMessage):
+        (WebInspector.ExtensionServer.prototype._registerSubscriptionHandler):
+        (WebInspector.ExtensionServer.prototype._expandResourcePath):
+
+2011-07-07  Kyusun Kim  <maniagoon@company100.net>
+
+        The return value of SharedBuffer::createWithContentsOfFile must have valid m_size.
+        https://bugs.webkit.org/show_bug.cgi?id=63313
+
+        Reviewed by Eric Seidel.
+
+        * platform/posix/SharedBufferPOSIX.cpp:
+        (WebCore::SharedBuffer::createWithContentsOfFile):
+
+2011-07-07  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9737435> Re-enable -webkit-column-break-inside: avoid
+        https://bugs.webkit.org/show_bug.cgi?id=64102
+
+        Reviewed by Simon Fraser.
+
+        -webkit-column-break-inside: avoid was disabled in r62632 along with page-break-inside: avoid.
+        The latter remains disabled.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::adjustForUnsplittableChild): Treat the child as unsplittable if
+        '-webkit-column-break-inside: avoid' was specified.
+
+2011-07-07  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: visual regressions in network panel
+        https://bugs.webkit.org/show_bug.cgi?id=64089
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/networkPanel.css:
+        (.data-grid.network-log-grid tr.filler td):
+        (.network.panel .sidebar):
+
+2011-07-07  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        Reviewed by David Hyatt.
+
+        Partial layout when a flex-box has visibility: collapse
+        https://bugs.webkit.org/show_bug.cgi?id=63776
+
+        Tests: fast/flexbox/crash-button-input-autofocus.html
+               fast/flexbox/crash-button-keygen.html
+               fast/flexbox/crash-button-relayout.html
+
+        The issue is that FlexBoxIterator would skip any child if it has visibility: collapsed.
+        However if one of the child is anonymous, it may wrap some other child that would be skipped.
+        Now FlexBoxIterator is called during the layout phase and thus some nodes would not relayouted
+        as expected.
+
+        * rendering/RenderDeprecatedFlexibleBox.cpp:
+        (WebCore::FlexBoxIterator::next): When iterating, don't skip anonymous content as there may
+        be real content hiding below.
+
+2011-07-07  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: URL links in styles open new tab instead of showing resources panel.
+        https://bugs.webkit.org/show_bug.cgi?id=64090
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylePropertyTreeElement.prototype.updateTitle.linkifyURL):
+
+2011-07-07  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: active panel does not receive resize event when drawer is resized
+        https://bugs.webkit.org/show_bug.cgi?id=64094
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/Drawer.js:
+        (WebInspector.Drawer.prototype._statusBarDragging):
+
+2011-07-07  Pavel Feldman  <pfeldman@chromium.org>
+
+        Web Inspector: prevent default action during drag'n'drop in the Elements panel.
+        https://bugs.webkit.org/show_bug.cgi?id=64081
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeOutline):
+        (WebInspector.ElementsTreeOutline.prototype._ondragstart):
+        (WebInspector.ElementsTreeOutline.prototype._ondragover):
+        (WebInspector.ElementsTreeOutline.prototype._ondragend):
+        * inspector/front-end/treeoutline.js:
+        (TreeOutline.prototype.treeElementFromPoint):
+
+2011-07-07  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Move remaining enums out of SVG*Element classes
+        https://bugs.webkit.org/show_bug.cgi?id=64075
+
+        Reviewed by Dirk Schulze.
+
+        Move remaining enums out of SVG*Element classes. This is a preparation patch for bug 63797.
+        Also move the SVGPropertyTraits template specializations for enum types before the class
+        definition in the header, otherwhise we can't use SVGPropertyTraits<FooType>::fromString/toString
+        in the DECLARE_ANIMATED* macros, which is needed soon.
+
+        No new tests, just refactoring.
+
+        * rendering/svg/RenderSVGResourceGradient.cpp:
+        (WebCore::RenderSVGResourceGradient::applyResource):
+        * rendering/svg/RenderSVGResourceGradient.h:
+        * rendering/svg/RenderSVGResourceMarker.cpp:
+        (WebCore::RenderSVGResourceMarker::angle):
+        (WebCore::RenderSVGResourceMarker::markerTransformation):
+        * rendering/svg/RenderSVGResourceMarker.h:
+        (WebCore::RenderSVGResourceMarker::markerUnits):
+        * rendering/svg/RenderSVGTextPath.cpp:
+        (WebCore::RenderSVGTextPath::RenderSVGTextPath):
+        (WebCore::RenderSVGTextPath::exactAlignment):
+        (WebCore::RenderSVGTextPath::stretchMethod):
+        * rendering/svg/SVGRenderTreeAsText.cpp:
+        (WebCore::operator<<):
+        (WebCore::writeCommonGradientProperties):
+        * rendering/svg/SVGTextChunkBuilder.cpp:
+        (WebCore::SVGTextChunkBuilder::addTextChunk):
+        * rendering/svg/SVGTextLayoutEngine.cpp:
+        (WebCore::SVGTextLayoutEngine::parentDefinesTextLength):
+        (WebCore::SVGTextLayoutEngine::beginTextPathLayout):
+        * svg/GradientAttributes.h:
+        (WebCore::GradientAttributes::GradientAttributes):
+        (WebCore::GradientAttributes::spreadMethod):
+        (WebCore::GradientAttributes::setSpreadMethod):
+        * svg/SVGComponentTransferFunctionElement.h:
+        * svg/SVGFEBlendElement.h:
+        * svg/SVGFEColorMatrixElement.h:
+        * svg/SVGFECompositeElement.h:
+        * svg/SVGFEConvolveMatrixElement.h:
+        * svg/SVGFEDisplacementMapElement.h:
+        * svg/SVGFEMorphologyElement.h:
+        * svg/SVGFETurbulenceElement.h:
+        * svg/SVGGradientElement.cpp:
+        (WebCore::SVGGradientElement::SVGGradientElement):
+        * svg/SVGGradientElement.h:
+        * svg/SVGMarkerElement.cpp:
+        (WebCore::SVGMarkerElement::SVGMarkerElement):
+        (WebCore::SVGMarkerElement::parseMappedAttribute):
+        (WebCore::SVGMarkerElement::setOrientToAuto):
+        (WebCore::SVGMarkerElement::setOrientToAngle):
+        (WebCore::SVGMarkerElement::synchronizeOrientType):
+        (WebCore::SVGMarkerElement::orientTypeAnimated):
+        * svg/SVGMarkerElement.h:
+        * svg/SVGTextContentElement.cpp:
+        (WebCore::SVGTextContentElement::SVGTextContentElement):
+        * svg/SVGTextContentElement.h:
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::SVGTextPathElement):
+        * svg/SVGTextPathElement.h:
+
+2011-07-07  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: Protocol: pointers to optional "in" parameters passing to the
+        backend methods should be NULL if they are not specified in the message.
+        https://bugs.webkit.org/show_bug.cgi?id=64083
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/CodeGeneratorInspector.pm:
+        (generateBackendFunction):
+        (generateArgumentGetters):
+        * inspector/InspectorCSSAgent.cpp:
+        (WebCore::InspectorCSSAgent::getStylesForNode):
+
+2011-07-07  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: Searching on the Network panel doesn't do anything?
+        https://bugs.webkit.org/show_bug.cgi?id=55489
+
+        This is initial implementation of search in Network panel.
+        It is pretty simple search only for names and paths.
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkPanel.prototype.refresh):
+        (WebInspector.NetworkPanel.prototype._reset):
+        (WebInspector.NetworkPanel.prototype._updateOffscreenRows):
+        (WebInspector.NetworkPanel.prototype._matchResource):
+        (WebInspector.NetworkPanel.prototype._clearSearchMatchedList):
+        (WebInspector.NetworkPanel.prototype._highlightNthMatchedResource):
+        (WebInspector.NetworkPanel.prototype.performSearch):
+        (WebInspector.NetworkDataGridNode.prototype.createCells):
+        * inspector/front-end/utilities.js:
+        (String.prototype.escapeHTML):
+        ():
+
+2011-07-07  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Resources panel shows only one resource when multiple resources have the same url.
+        https://bugs.webkit.org/show_bug.cgi?id=63936
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/resource-tree/resource-tree-non-unique-url.html
+
+        * inspector/front-end/ResourcesPanel.js:
+        (WebInspector.FrameTreeElement.prototype.appendResource):
+
+2011-07-07  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Add support for clearing cache and cookies from network panel.
+        https://bugs.webkit.org/show_bug.cgi?id=63999
+
+        Reviewed by Pavel Feldman.
+
+        * English.lproj/localizedStrings.js:
+        * inspector/Inspector.json:
+        * inspector/InspectorClient.h:
+        (WebCore::InspectorClient::clearBrowserCache):
+        (WebCore::InspectorClient::clearBrowserCookies):
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::InspectorController):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::clearBrowserCache):
+        (WebCore::InspectorResourceAgent::clearBrowserCookies):
+        (WebCore::InspectorResourceAgent::InspectorResourceAgent):
+        * inspector/InspectorResourceAgent.h:
+        (WebCore::InspectorResourceAgent::create):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkPanel.prototype._contextMenu):
+        (WebInspector.NetworkPanel.prototype._clearBrowserCache):
+        (WebInspector.NetworkPanel.prototype._clearBrowserCookies):
+        * inspector/front-end/Settings.js:
+
+2011-07-07  Shinya Kawanaka  <shinyak@google.com>
+
+        Added more key bindings for input[type=range].
+        https://bugs.webkit.org/show_bug.cgi?id=52262
+
+        Added PageUp/PageDown/Home/End key bindings for input[type=range].
+        PageUp/PageDown change value by about 10%.
+        Home/End change value to minimum/maximum.
+
+        Reviewed by Kent Tamura.
+
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::handleKeydownEvent):
+          Added key bindings.
+
+2011-07-07  Oleg Romashin  <romaxa@gmail.com>
+
+        Fix InspectorInstrumentation compilation.
+        https://bugs.webkit.org/show_bug.cgi?id=64033
+
+        Reviewed by Yury Semikhatsky.
+
+        No new tests. just compile fix.
+
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::didInvalidateStyleAttrImpl):
+
+2011-07-06  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        Reviewed by David Hyatt.
+
+        [CSSRegions] Parse flow property
+        https://bugs.webkit.org/show_bug.cgi?id=61730
+
+        Test: fast/regions/webkit-flow-parsing.html
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        (WebCore::CSSParser::parseFlowThread):
+        * css/CSSParser.h:
+        * css/CSSPropertyNames.in:
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::flowThread):
+        (WebCore::InheritedFlags::setFlowThread):
+        (WebCore::InheritedFlags::initialFlowThread):
+        * rendering/style/StyleRareNonInheritedData.cpp:
+        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
+        (WebCore::StyleRareNonInheritedData::operator==):
+        * rendering/style/StyleRareNonInheritedData.h:
+
+2011-07-06  MORITA Hajime  <morrita@google.com>
+
+        [ShadowContentElement] Redundant RenderText objects are created on the content boundaries.
+        https://bugs.webkit.org/show_bug.cgi?id=63977
+
+        Reviewed by Dimitri Glazkov.
+
+        NodeRenderingContext::nextRenderer() and previousRenderer() didn't work well
+        when it crosses content elements:
+        - It doesn't step into forwarded children of ShadowContentElement.
+        - It doesn't step out from traversing forwarded children to
+          neighbors of the content element of that forwarded chidren.
+        
+        This change makes it to step into and out from content element.
+        
+        Test: fast/dom/shadow/content-element-renderers.html
+
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::firstRendererOf): Added
+        (WebCore::lastRendererOf): Added
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+
+2011-07-06  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        [EFL] Add Fullscreen API feature
+        https://bugs.webkit.org/show_bug.cgi?id=63975
+
+        Add needed files for enabling ENABLE_FULLSCREEN_API feature.
+
+        Reviewed by Adam Barth.
+
+        * CMakeLists.txt: Add RenderFullScreen.cpp, fullscreen.css
+
+2011-07-06  Emil A Eklund  <eae@chromium.org>
+
+        Switch absoluteRects to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64035
+
+        Reviewed by Eric Seidel.
+
+        Move absoluteRects over to new layout unit abstraction.
+        Add flooredLayoutPoint, mapped to flooredIntPoint.
+
+        No new tests, no functionality changes.
+
+        * rendering/LayoutTypes.h:
+        (WebCore::flooredLayoutPoint):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::absoluteRects):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::absoluteRects):
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::absoluteRects):
+        * rendering/RenderInline.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::absoluteBoundingBoxRect):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::absoluteRects):
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::absoluteRects):
+        * rendering/RenderText.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::absoluteRects):
+        * rendering/RenderView.h:
+        * rendering/svg/RenderSVGBlock.cpp:
+        (WebCore::RenderSVGBlock::absoluteRects):
+        * rendering/svg/RenderSVGBlock.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::absoluteRects):
+        * rendering/svg/RenderSVGModelObject.h:
+
+2011-07-06  Emil A Eklund  <eae@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch offsetFromContainer and related to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63659
+
+        Switch offsetFromContainer and related mapping methods to new layout unit
+        abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/LayoutTypes.h:
+        (WebCore::enclosingLayoutRect):
+        (WebCore::roundedLayoutPoint):
+        (WebCore::roundedLayoutUnit):
+        Add LayoutUnit versions of enclosingIntRect, roundedIntPoint and lroundf.
+        For now these map to their int counterpart but once we switch to float or
+        fixed point they'll be no-ops and eventually will be removed. 
+        
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::mapLocalToContainer):
+        (WebCore::RenderBox::mapAbsoluteToLocalPoint):
+        (WebCore::RenderBox::offsetFromContainer):
+        * rendering/RenderBox.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::linesBoundingBox):
+        (WebCore::RenderInline::offsetFromContainer):
+        (WebCore::RenderInline::mapLocalToContainer):
+        (WebCore::RenderInline::mapAbsoluteToLocalPoint):
+        (WebCore::RenderInline::relativePositionedInlineOffset):
+        * rendering/RenderInline.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::offsetFromContainer):
+        (WebCore::RenderObject::offsetFromAncestorContainer):
+        * rendering/RenderObject.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::offsetFromContainer):
+        * rendering/RenderTableCell.h:
+        * rendering/RenderThemeMac.mm:
+        (WebCore::RenderThemeMac::convertToPaintingRect):
+
+2011-07-06  Levi Weintraub  <leviw@chromium.org>
+
+        Switch FrameSelection to new Layout Types
+        https://bugs.webkit.org/show_bug.cgi?id=64043
+
+        Reviewed by Eric Seidel.
+
+        Switching the selection classes to the new layout types. Changing
+        NoXPosForVerticalArrowNavigation to a static inline since as it stood it violated
+        our global initializer rule when converted to numeric_limits from INT_MIN.
+
+        No new tests, no functionality changes.
+
+        * editing/FrameSelection.cpp:
+        (WebCore::FrameSelection::modify):
+        (WebCore::absoluteCaretY):
+        (WebCore::FrameSelection::lineDirectionPointForBlockDirectionNavigation):
+        (WebCore::CaretBase::clearCaretRect):
+        (WebCore::CaretBase::updateCaretRect):
+        (WebCore::FrameSelection::localCaretRect):
+        (WebCore::CaretBase::absoluteBoundsForLocalRect):
+        (WebCore::FrameSelection::absoluteCaretBounds):
+        (WebCore::repaintRectForCaret):
+        (WebCore::CaretBase::caretRepaintRect):
+        (WebCore::FrameSelection::recomputeCaretRect):
+        (WebCore::FrameSelection::paintCaret):
+        (WebCore::CaretBase::paintCaret):
+        (WebCore::FrameSelection::contains):
+        (WebCore::DragCaretController::paintDragCaret):
+        (WebCore::FrameSelection::bounds):
+        (WebCore::FrameSelection::revealSelection):
+        * editing/FrameSelection.h:
+        (WebCore::CaretBase::localCaretRectWithoutUpdate):
+
+2011-07-06  Levi Weintraub  <leviw@chromium.org>
+
+        Switch Overflow and FrameRect methods in InlineBox to Layout Units
+        https://bugs.webkit.org/show_bug.cgi?id=64034
+
+        Reviewed by Eric Seidel.
+
+        Switching Overflow and FrameRect methods on InlineBox to new Layout Unit abstraction and
+        cleaning up some compilation errors that crop up when building with floating point layout units.
+
+        No new tests, no functionality changes.
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::sizingBox):
+        * dom/Document.h:
+        * editing/DeleteButtonController.cpp:
+        (WebCore::isDeletableElement):
+        * inspector/DOMNodeHighlighter.cpp:
+        (WebCore::DOMNodeHighlighter::drawNodeHighlight):
+        * page/animation/AnimationBase.cpp:
+        (WebCore::blendFunc):
+        * platform/ScrollView.h:
+        (WebCore::ScrollView::visibleWidth):
+        (WebCore::ScrollView::visibleHeight):
+        * platform/ScrollableArea.h:
+        (WebCore::ScrollableArea::visibleHeight):
+        (WebCore::ScrollableArea::visibleWidth):
+        * platform/graphics/FloatPoint.h: Adding FloatPoint and FloatSize move[By] functions
+        (WebCore::FloatPoint::move):
+        (WebCore::FloatPoint::moveBy):
+        * rendering/AutoTableLayout.cpp:
+        (WebCore::AutoTableLayout::computePreferredLogicalWidths):
+        (WebCore::AutoTableLayout::layout):
+        * rendering/InlineFlowBox.h:
+        (WebCore::InlineFlowBox::layoutOverflowRect):
+        (WebCore::InlineFlowBox::logicalLeftLayoutOverflow):
+        (WebCore::InlineFlowBox::logicalRightLayoutOverflow):
+        (WebCore::InlineFlowBox::logicalTopLayoutOverflow):
+        (WebCore::InlineFlowBox::logicalBottomLayoutOverflow):
+        (WebCore::InlineFlowBox::logicalLayoutOverflowRect):
+        (WebCore::InlineFlowBox::visualOverflowRect):
+        (WebCore::InlineFlowBox::logicalLeftVisualOverflow):
+        (WebCore::InlineFlowBox::logicalRightVisualOverflow):
+        (WebCore::InlineFlowBox::logicalTopVisualOverflow):
+        (WebCore::InlineFlowBox::logicalBottomVisualOverflow):
+        (WebCore::InlineFlowBox::logicalVisualOverflowRect):
+        (WebCore::InlineFlowBox::frameRectIncludingLineHeight):
+        (WebCore::InlineFlowBox::logicalFrameRectIncludingLineHeight):
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::RenderBlockRareData::positiveMarginBeforeDefault):
+        (WebCore::RenderBlock::RenderBlockRareData::negativeMarginBeforeDefault):
+        (WebCore::RenderBlock::RenderBlockRareData::positiveMarginAfterDefault):
+        (WebCore::RenderBlock::RenderBlockRareData::negativeMarginAfterDefault):
+
+2011-07-06  Emil A Eklund  <eae@chromium.org>
+
+        Reviewed by Eric Seidel.
+        
+        Switch nodeAtPoint to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63663
+
+        No new tests, no functionality changes.
+
+        * rendering/EllipsisBox.cpp:
+        (WebCore::EllipsisBox::nodeAtPoint):
+        * rendering/EllipsisBox.h:
+        * rendering/InlineBox.cpp:
+        (WebCore::InlineBox::nodeAtPoint):
+        * rendering/InlineBox.h:
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::nodeAtPoint):
+        * rendering/InlineFlowBox.h:
+        * rendering/InlineTextBox.cpp:
+        (WebCore::InlineTextBox::nodeAtPoint):
+        * rendering/InlineTextBox.h:
+        * rendering/LayoutTypes.h:
+        (WebCore::toLayoutSize):
+        (WebCore::toLayoutPoint):
+        (WebCore::roundedLayoutPoint):
+        (WebCore::roundedLayoutUnit):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::nodeAtPoint):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::nodeAtPoint):
+        * rendering/RenderBox.h:
+        * rendering/RenderFrameSet.cpp:
+        (WebCore::RenderFrameSet::nodeAtPoint):
+        * rendering/RenderFrameSet.h:
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::nodeAtPoint):
+        * rendering/RenderImage.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::nodeAtPoint):
+        * rendering/RenderInline.h:
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::nodeAtPoint):
+        * rendering/RenderListBox.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::nodeAtPoint):
+        * rendering/RenderObject.h:
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::nodeAtPoint):
+        * rendering/RenderTable.h:
+        * rendering/RenderTableRow.cpp:
+        (WebCore::RenderTableRow::nodeAtPoint):
+        * rendering/RenderTableRow.h:
+        * rendering/RenderTableSection.cpp:
+        (WebCore::RenderTableSection::nodeAtPoint):
+        * rendering/RenderTableSection.h:
+        * rendering/RenderText.h:
+        (WebCore::RenderText::nodeAtPoint):
+        * rendering/RenderTextControlMultiLine.cpp:
+        (WebCore::RenderTextControlMultiLine::nodeAtPoint):
+        * rendering/RenderTextControlMultiLine.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::nodeAtPoint):
+        * rendering/RenderTextControlSingleLine.h:
+        * rendering/RenderWidget.cpp:
+        (WebCore::RenderWidget::nodeAtPoint):
+        * rendering/RenderWidget.h:
+        * rendering/RootInlineBox.cpp:
+        (WebCore::RootInlineBox::nodeAtPoint):
+        * rendering/RootInlineBox.h:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        (WebCore::RenderSVGForeignObject::nodeAtFloatPoint):
+        (WebCore::RenderSVGForeignObject::nodeAtPoint):
+        * rendering/svg/RenderSVGForeignObject.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::nodeAtPoint):
+        * rendering/svg/RenderSVGModelObject.h:
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::nodeAtPoint):
+        * rendering/svg/RenderSVGRoot.h:
+        * rendering/svg/RenderSVGText.cpp:
+        (WebCore::RenderSVGText::nodeAtPoint):
+        * rendering/svg/RenderSVGText.h:
+        * rendering/svg/SVGInlineTextBox.cpp:
+        (WebCore::SVGInlineTextBox::nodeAtPoint):
+        * rendering/svg/SVGInlineTextBox.h:
+
+2011-07-06  Adrienne Walker  <enne@google.com>
+
+        [chromium] Add compositor texture manager soft limits and lost focus reclaiming
+        https://bugs.webkit.org/show_bug.cgi?id=64009
+
+        Reviewed by James Robinson.
+
+        Add a soft limit for texture memory. Unprotected textures will get
+        reclaimed when above this limit. Increase the hard limit for maximum
+        texture memory as well, now that there is a better heuristic and
+        textures are reclaimed from tabs without focus.
+
+        Landing this for vangelis@chromium.org.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::releaseTextures):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::protectTileTextures):
+        * platform/graphics/chromium/LayerTilerChromium.h:
+        * platform/graphics/chromium/TextureManager.cpp:
+        (WebCore::TextureManager::TextureManager):
+        (WebCore::TextureManager::requestTexture):
+        * platform/graphics/chromium/TextureManager.h:
+        (WebCore::TextureManager::create):
+
+2011-07-06  Pavel Feldman  <pfeldman@chromium.org>
+
+        Not reviewed: Web Inspector: fixing typo introduced in the r90397.
+
+        * inspector/front-end/StylesSidebarPane.js:
+
+2011-07-06  Mike Reed  <reed@google.com>
+
+        [skia] don't include deprecated header
+        https://bugs.webkit.org/show_bug.cgi?id=64025
+
+        Reviewed by James Robinson.
+
+        No new tests. Just removing #include of an unused header that will be gone soon
+
+        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+
+2011-06-30  Cris Neckar  <cdn@chromium.org>
+
+        Reviewed by Darin Fisher.
+
+        Add versioning to Chromium clipboard and prevent polling from inside events.
+        https://bugs.webkit.org/show_bug.cgi?id=63738
+
+        * platform/chromium/ChromiumDataObject.cpp:
+        (WebCore::ChromiumDataObject::getSequenceNumber):
+        * platform/chromium/ChromiumDataObject.h:
+        * platform/chromium/ClipboardChromium.cpp:
+        (WebCore::ClipboardChromium::ClipboardChromium):
+        (WebCore::ClipboardChromium::getData):
+        (WebCore::ClipboardChromium::platformClipboardChanged):
+        * platform/chromium/ClipboardChromium.h:
+        * platform/chromium/DataTransferItemChromium.cpp:
+        (WebCore::DataTransferItemChromium::getAsString):
+        (WebCore::DataTransferItemChromium::getAsFile):
+        * platform/chromium/PlatformBridge.h:
+        * svg/SVGAnimationElement.cpp:
+        (WebCore::SVGAnimationElement::setTargetAttributeAnimatedValue):
+
+2011-07-01  James Robinson  <jamesr@chromium.org>
+
+        Reviewed by Stephen White.
+
+        [chromium] Externalize layer visibility calculation
+        https://bugs.webkit.org/show_bug.cgi?id=63847
+
+        This moves the layer visibility calculation from the layer itself out to LayerRendererChromium, like the other
+        calculated properties.  Previously, we were doing this calculating at paint time and again at draw time and
+        relying on the fact that this produced the same value.  This avoids the redundant calculation.
+
+        Covered by existing compositing/ layout tests.
+
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerChromium::ContentLayerChromium):
+        (WebCore::ContentLayerChromium::paintContentsIfDirty):
+        (WebCore::ContentLayerChromium::tilingTransform):
+        (WebCore::ContentLayerChromium::contentBounds):
+        (WebCore::ContentLayerChromium::updateLayerSize):
+        (WebCore::ContentLayerChromium::draw):
+        (WebCore::ContentLayerChromium::setTilingOption):
+        (WebCore::ContentLayerChromium::setIsMask):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        * platform/graphics/chromium/ImageLayerChromium.cpp:
+        (WebCore::ImageLayerChromium::paintContentsIfDirty):
+        (WebCore::ImageLayerChromium::contentBounds):
+        * platform/graphics/chromium/ImageLayerChromium.h:
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::pushPropertiesTo):
+        * platform/graphics/chromium/LayerChromium.h:
+        (WebCore::LayerChromium::contentBounds):
+        (WebCore::LayerChromium::visibleLayerRect):
+        (WebCore::LayerChromium::setVisibleLayerRect):
+        (WebCore::LayerChromium::draw):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::calculateVisibleLayerRect):
+        (WebCore::LayerRendererChromium::paintLayerContents):
+        (WebCore::LayerRendererChromium::drawLayer):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::draw):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
+        (WebCore::CCCanvasLayerImpl::draw):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        (WebCore::CCLayerImpl::draw):
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        (WebCore::CCLayerImpl::contentBounds):
+        (WebCore::CCLayerImpl::setContentBounds):
+        (WebCore::CCLayerImpl::visibleLayerRect):
+        (WebCore::CCLayerImpl::setVisibleLayerRect):
+        (WebCore::CCLayerImpl::doubleSided):
+        (WebCore::CCLayerImpl::setDoubleSided):
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
+        (WebCore::CCPluginLayerImpl::draw):
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
+        (WebCore::CCVideoLayerImpl::draw):
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
+
+2011-07-06  John Sullivan  <sullivan@apple.com>
+
+        IconDatabase::synchronousIconForPageURL() has inconsistent API when no custom icon is available
+        <https://bugs.webkit.org/show_bug.cgi?id=64015>
+        <rdar://problem/9706277>
+
+        For some URLs it would return a particular size of default icon; for other
+        URLs it would return 0.
+
+        Reviewed by Ada Chan.
+
+        * loader/icon/IconDatabase.cpp:
+        (WebCore::IconDatabase::synchronousIconForPageURL):
+        Return 0 in all cases where there is no custom icon.
+
+2011-07-06  Emil A Eklund  <eae@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch RenderLayer::hitTest* to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63640
+
+        Switch hit testing and supporting methods for RenderLayer over to the new
+        layout unit abstraction.
+        
+        No new tests, no functionality changes.
+
+        * rendering/LayoutTypes.h:
+        (WebCore::roundedLayoutPoint):
+        Add roundedLayoutPoint abstraction, calls roundedIntPoint now but will be a
+        no-op (and eventually go away) once we switch to float or fixed point.
+        
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::createLocalTransformState):
+        (WebCore::RenderLayer::hitTestLayer):
+        (WebCore::RenderLayer::hitTestList):
+        (WebCore::RenderLayer::hitTestPaginatedChildLayer):
+        (WebCore::RenderLayer::hitTestChildLayerColumns):
+        (WebCore::RenderLayer::calculateRects):
+        * rendering/RenderLayer.h:
+
+2011-07-06  Simon Fraser  <simon.fraser@apple.com>
+
+        Have RenderLayerCompositor take care of clearing backing store when entering the page cache
+        https://bugs.webkit.org/show_bug.cgi?id=64018
+
+        Reviewed by Joseph Pecoraro.
+
+        Move responsibility for tearing down all RenderLayer backing stores from
+        RenderLayer itself to RenderLayerCompositor, since RenderLayerCompositor 
+        manages backing store creation and destruction in general.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::clearBackingStores):
+        * rendering/RenderLayer.cpp:
+        * rendering/RenderLayer.h:
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::clearBackingForLayerIncludingDescendants):
+        (WebCore::RenderLayerCompositor::clearBackingForAllLayers):
+        * rendering/RenderLayerCompositor.h:
+
+2011-07-06  Ryuan Choi  <ryuan.choi@samsung.com>
+
+        [Performance] Only call sendContentResizeNotification when the scrollbar actually did change
+        https://bugs.webkit.org/show_bug.cgi?id=47320
+
+        Reviewed by Eric Seidel.
+
+        Move avoidScrollbarCreation checking code from setHasHorizontalScrollbar
+        and setHasVerticalScrollbar to their caller in order to keep sendContentResizedNotification
+        false in case scrollbar is not really changed.
+        As a result, it will remove unnecessary relayout in the above case.
+
+        No new tests as this is very hard to write tests for. The bug only
+        occured when scrolling the sites which contain frame in browser with
+        frameFlattening. This should not change functionality in other case.
+
+        * platform/ScrollView.cpp:
+        (WebCore::ScrollView::setHasHorizontalScrollbar):
+        (WebCore::ScrollView::setHasVerticalScrollbar):
+        (WebCore::ScrollView::updateScrollbars):
+
+2011-07-06  Nate Chapin  <japhet@chromium.org>
+
+        Don't let all subresources keep isLoadingInAPISense() from
+        returning false, only requests that affect
+        CachedResourceRequest::requestCount().
+        https://bugs.webkit.org/show_bug.cgi?id=62066
+
+        Reviewed by Adam Barth.
+
+        * dom/Document.cpp:
+        (WebCore::Document::Document):
+        (WebCore::Document::dispatchWindowLoadEvent):
+        * dom/Document.h:
+        (WebCore::Document::loadEventFinished):
+        * loader/DocumentLoader.cpp:
+        (WebCore::DocumentLoader::isLoadingInAPISense):
+
+2011-07-06  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: implement drag'n'drop in the elements panel for reordering nodes.
+        https://bugs.webkit.org/show_bug.cgi?id=63990
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::moveTo):
+        * inspector/InspectorDOMAgent.h:
+        * inspector/front-end/DOMAgent.js:
+        (WebInspector.DOMNode.prototype._removeChild):
+        (WebInspector.DOMNode.prototype.ownerDocumentElement):
+        (WebInspector.DOMNode.prototype.moveTo):
+        (WebInspector.DOMAgent.prototype._childNodeRemoved):
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeOutline):
+        (WebInspector.ElementsTreeOutline.prototype._ondragstart):
+        (WebInspector.ElementsTreeOutline.prototype._ondragover):
+        (WebInspector.ElementsTreeOutline.prototype._ondragleave):
+        (WebInspector.ElementsTreeOutline.prototype._isValidDragSourceOrTarget):
+        (WebInspector.ElementsTreeOutline.prototype._ondragend.callback):
+        (WebInspector.ElementsTreeOutline.prototype._ondragend):
+        (WebInspector.ElementsTreeOutline.prototype._clearDragOverTreeElementMarker):
+        (WebInspector.ElementsTreeOutline.prototype.populateContextMenu.focusElement):
+        (WebInspector.ElementsTreeOutline.prototype.populateContextMenu):
+        (WebInspector.ElementsTreeElement.prototype.onattach):
+        * inspector/front-end/inspector.css:
+        (.outline-disclosure li.elements-drag-over .selection):
+        * inspector/front-end/treeoutline.js:
+        (TreeOutline.prototype.treeElementFromEvent):
+
+2011-07-06  Andras Becsi  <abecsi@webkit.org>
+
+        Fix "warning: a `;' might be needed at the end of action code"
+
+        Unreviewed gardening.
+
+        No new tests needed.
+
+        * css/CSSGrammar.y: Future versions of Bison will not add the ';' so add it.
+
+2011-07-06  Andras Becsi  <abecsi@webkit.org>
+
+        [Qt] Revome unused but set shadowBlur variable after r90406.
+
+        Unreviewed build fix.
+
+        No new tests needed.
+
+        * platform/graphics/qt/GraphicsContextQt.cpp:
+        (WebCore::GraphicsContext::fillPath): Use the GraphicsContext brush.
+
+2011-07-06  Andras Becsi  <abecsi@webkit.org>
+
+        [Qt] Remove duplicate entries of ShadowBlur sources from project file.
+
+        Rubber-stamped by Csaba Osztrogonác.
+
+        No new tests needed.
+
+        * WebCore.pro: These files were already added in r84410.
+
+2011-07-05  Kentaro Hara  <haraken@google.com>
+
+        Trigger a 'change' event whenever selected files are changed
+        https://bugs.webkit.org/show_bug.cgi?id=63929
+
+        Reviewed by Kent Tamura.
+
+        Record previously selected files and then compare them with newly selected files.
+        If the previously selected files and their order are not equal to those of
+        the newly selected files, we trigger the 'change' event.
+
+        Test: fast/forms/file-input-change-event.html
+
+        * html/FileInputType.cpp:
+        (WebCore::FileInputType::filesChosen): Calls dispathChangeEvent() only when the previously selected files are different from the newly selected files
+
+2011-06-29  Kent Tamura  <tkent@chromium.org>
+
+        Reviewed by Alexey Proskuryakov.
+
+        [Mac] REGRESSION (r88415): Range slider doesn't have focus appearance.
+        https://bugs.webkit.org/show_bug.cgi?id=63573
+
+        * rendering/RenderThemeMac.mm:
+        (WebCore::RenderThemeMac::paintSliderThumb):
+        Need to pass the RenderObject of the owner <input> because
+        updateFocusedState() checks the outline style of the specified
+        renderer, and we'd like to make a slider thumb reflect the owner
+        focus style.
+
+2011-07-05  Hans Wennborg  <hans@chromium.org>
+
+        [V8][Chromium] Remove use of OwnHandle from V8LocalContext
+        https://bugs.webkit.org/show_bug.cgi?id=63925
+
+        Reviewed by Adam Barth.
+
+        Replace the OwnHandle<> member in V8LocalContext with
+        v8::Persistent<v8::Context>.
+        The code that used OwnHandle<> would not correctly Dispose
+        of the Context, which would cause the memory to fill up when creating
+        and destructing many V8LocalContext objects, such as in the case
+        of IndexedDB.
+
+        * bindings/v8/V8Utilities.cpp:
+        (WebCore::V8LocalContext::V8LocalContext):
+        (WebCore::V8LocalContext::~V8LocalContext):
+        * bindings/v8/V8Utilities.h:
+
+2011-07-05  Igor Oliveira  <igor.oliveira@openbossa.org>
+
+        [Qt] Add ShadowBlur support
+        https://bugs.webkit.org/show_bug.cgi?id=62997
+
+        Use ShadowBlur instead of ContextShadow to handle canvas and css shadows. ShadowBlur is
+        a newer and platform independent shadow implementation.
+        Qt QPainter does not have support for shadows so is necessary to create a layer support
+        to draw complex shapes and fonts. The beginShadowLayer creates a temporary shadow buffer
+        where the canvas can draw onto and endShadowLayer applies the blur filter, colors the
+        shadow buffer and draw the final shadow to the graphics context.
+
+        Reviewed by Andreas Kling.
+
+        * WebCore.pro:
+        * platform/graphics/GraphicsContext.cpp:
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/ShadowBlur.cpp:
+        (WebCore::ShadowBlur::ShadowBlur):
+        (WebCore::ShadowBlur::setShadowValues):
+        (WebCore::ShadowBlur::updateShadowBlurValues):
+        (WebCore::ShadowBlur::clear):
+        (WebCore::ShadowBlur::blurAndColorShadowBuffer):
+        (WebCore::ShadowBlur::beginShadowLayer):
+        (WebCore::ShadowBlur::endShadowLayer):
+        * platform/graphics/ShadowBlur.h:
+        (WebCore::ShadowBlur::type):
+        * platform/graphics/qt/ContextShadowQt.cpp: Removed.
+        * platform/graphics/qt/FontQt.cpp:
+        (WebCore::drawTextCommon):
+        (WebCore::Font::drawGlyphs):
+        * platform/graphics/qt/GraphicsContextQt.cpp:
+        (WebCore::GraphicsContextPlatformPrivate::mustUseShadowBlur):
+        (WebCore::GraphicsContextPlatformPrivate::GraphicsContextPlatformPrivate):
+        (WebCore::GraphicsContextPlatformPrivate::~GraphicsContextPlatformPrivate):
+        (WebCore::GraphicsContext::savePlatformState):
+        (WebCore::GraphicsContext::restorePlatformState):
+        (WebCore::GraphicsContext::fillPath):
+        (WebCore::GraphicsContext::strokePath):
+        (WebCore::GraphicsContext::fillRect):
+        (WebCore::GraphicsContext::fillRoundedRect):
+        (WebCore::GraphicsContext::shadowBlur):
+        (WebCore::GraphicsContext::clipBounds):
+        (WebCore::GraphicsContext::setPlatformShadow):
+        (WebCore::GraphicsContext::clearPlatformShadow):
+        * platform/graphics/qt/ImageQt.cpp:
+        (WebCore::BitmapImage::draw):
+        * platform/graphics/qt/StillImageQt.cpp:
+        (WebCore::StillImage::draw):
+
+2011-07-05  Sam Weinig  <sam@webkit.org>
+
+        Null deref accessing CustomEvent.detail
+        <rdar://problem/9724577>
+        https://bugs.webkit.org/show_bug.cgi?id=63885
+
+        Reviewed by Anders Carlsson.
+
+        Test: fast/events/custom-event-uninitialized.html
+
+        * bindings/scripts/CodeGeneratorJS.pm:
+        Guard against uninitialized script value.
+
+2011-07-05  Pratik Solanki  <psolanki@apple.com>
+
+        Reviewed by Dan Bernstein.
+
+        Coalesce data array into one NSData before calling didReceiveData
+        https://bugs.webkit.org/show_bug.cgi?id=63916
+        <rdar://problem/9715181>
+
+        Instead of calling didReceiveData multiple times with smaller chunks of data, we merge the
+        data buffers into one and call it once.
+
+        No new tests because the flag isn't enabled yet.
+
+        * platform/network/mac/ResourceHandleMac.mm:
+        (-[WebCoreResourceHandleAsDelegate connection:didReceiveDataArray:]):
+
+2011-07-05  Tamas Czene  <Czene.Tamas@stud.u-szeged.hu>
+
+        Reviewed by Simon Fraser.
+
+        Remove virtual functions from StyleImage.
+        https://bugs.webkit.org/show_bug.cgi?id=63909
+
+        We can remove the virtual "isChachedImage, isPendingImage, isGeneratedImage" functions to speed up the StyleImage.
+        Some profile data shows this part is significant, especially in small CSS-based sites.
+        Removing the virtual functions - removing the calls - makes a small performance progression on this part.
+
+        * rendering/style/StyleCachedImage.h:
+        (WebCore::StyleCachedImage::StyleCachedImage):
+        * rendering/style/StyleGeneratedImage.h:
+        (WebCore::StyleGeneratedImage::StyleGeneratedImage):
+        * rendering/style/StyleImage.h:
+        (WebCore::StyleImage::isCachedImage):
+        (WebCore::StyleImage::isPendingImage):
+        (WebCore::StyleImage::isGeneratedImage):
+        (WebCore::StyleImage::StyleImage):
+        * rendering/style/StylePendingImage.h:
+        (WebCore::StylePendingImage::StylePendingImage):
+
+2011-07-05  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: add "element state" setting to the styles section title.
+        https://bugs.webkit.org/show_bug.cgi?id=63932
+
+        Reviewed by Yury Semikhatsky.
+
+        * English.lproj/localizedStrings.js:
+        * WebCore.gypi:
+        * inspector/front-end/Images/paneElementStateButtons.png: Added.
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.muteEventListener):
+        (WebInspector.StylesSidebarPane):
+        (WebInspector.StylesSidebarPane.prototype.update):
+        (WebInspector.StylesSidebarPane.prototype._rebuildUpdate):
+        (WebInspector.StylesSidebarPane.prototype._rebuildSectionsForStyleRules):
+        (WebInspector.StylesSidebarPane.prototype.addBlankSection):
+        (WebInspector.StylesSidebarPane.prototype.registerShortcuts):
+        (WebInspector.StylesSidebarPane.prototype._toggleElementStatePane):
+        (WebInspector.StylesSidebarPane.prototype._createElementStatePane.clickListener):
+        (WebInspector.StylesSidebarPane.prototype._createElementStatePane.createCheckbox):
+        (WebInspector.StylesSidebarPane.prototype._createElementStatePane):
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/inspector.css:
+        (.pane > .title > .pane-title-button:active, .pane > .title > .pane-title-button.toggled):
+        (.pane > .title > .pane-title-button.element-state):
+        (.styles-element-state-pane):
+        (.styles-element-state-pane.expanded):
+        (.styles-element-state-pane > table):
+        (.styles-element-state-pane input):
+
+2011-06-22  Pavel Podivilov  <podivilov@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: extract duplicated code that deals with source mappings.
+        https://bugs.webkit.org/show_bug.cgi?id=63139
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleMessage.prototype.isEqual):
+        (WebInspector.ConsoleMessage.prototype.get stackTrace):
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation):
+        (WebInspector.DebuggerPresentationModel.prototype._updateAnchor):
+        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage.didGetUILocation):
+        (WebInspector.DebuggerPresentationModel.prototype._addConsoleMessage):
+        (WebInspector.DebuggerPresentationModel.prototype.continueToLine):
+        (WebInspector.DebuggerPresentationModel.prototype._setBreakpointInDebugger.didGetScriptLocation):
+        (WebInspector.DebuggerPresentationModel.prototype._setBreakpointInDebugger):
+        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded.updateSourceFileBreakpointsAndDispatchEvent):
+        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded.didGetUILocation):
+        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded):
+        (WebInspector.DebuggerPresentationModel.prototype._debuggerPaused):
+        (WebInspector.DebuggerPresentationModel.prototype._sourceFileForScript):
+        (WebInspector.PresenationCallFrame):
+        (WebInspector.PresenationCallFrame.prototype.sourceLine):
+
+2011-07-05  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: WebInspector frontend reports a protocol error in remote debugging mode.
+        https://bugs.webkit.org/show_bug.cgi?id=63935
+
+        it was error generated for obsolete message "loaded" which was sent from frontend to backend.
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/CodeGeneratorInspector.pm:
+        * inspector/front-end/inspector.js:
+        (WebInspector.loaded.WebInspector.socket.onopen):
+        (WebInspector.loaded):
+
+2011-07-05  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: [refactoring] remove network-sidebar style, add network-log-grid
+        https://bugs.webkit.org/show_bug.cgi?id=63913
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkPanel):
+        (WebInspector.NetworkPanel.prototype._createTable):
+        * inspector/front-end/networkPanel.css:
+        (.network-log-grid):
+        (.network-log-grid table.data):
+        (.network-log-grid.small table.data):
+        (.network-log-grid td):
+        (.network-log-grid.small td):
+        (.network-log-grid th):
+        (.network-log-grid.small th):
+        (.network-log-grid th, .network.panel .data-grid th.sort-descending, .network.panel .data-grid th.sort-ascending):
+        (.network-log-grid .data-container):
+        (.network-log-grid.small .data-container):
+        (.network-log-grid select):
+        (.network-log-grid.small tr.offscreen):
+        (.network-log-grid tr.offscreen):
+        (.network-log-grid tr.offscreen td):
+        (.network-log-grid tr.filler):
+        (.network-log-grid tr:not(.filler) td.name-column):
+        (.network.panel:not(.viewing-resource) .network-log-grid td.name-column:hover):
+        (.network-log-grid td.time-column):
+        (.network-log-grid.small .network-graph-side):
+        (.network-log-grid th.sortable:active):
+        (.network-log-grid tr.selected .network-cell-subtitle):
+        (.network-log-grid .icon):
+        (.network-log-grid.small .icon):
+        (.network-log-grid .network-category-scripts .icon):
+        (.network-log-grid.small .network-category-scripts .icon):
+        (.network-log-grid .network-category-documents .icon):
+        (.network-log-grid.small .network-category-documents .icon):
+        (.network-log-grid .network-category-stylesheets .icon):
+        (.network-log-grid.small .network-category-stylesheets .icon):
+        (.network-log-grid .network-category-images .icon):
+        (.network-log-grid.small .network-category-images .icon):
+        (.network-log-grid .image-network-icon-preview):
+        (.network-log-grid.small .image-network-icon-preview):
+        (.network-timeline-grid.small .network-event-divider):
+        (.network-log-grid .resources-dividers):
+        (.network-log-grid .resources-dividers-label-bar):
+        (.network-timeline-grid.small .resources-dividers-label-bar):
+        (.network-timeline-grid .resources-divider-label):
+        (.network-timeline-grid .resources-dividers-label-bar .resources-divider):
+        (.network-timeline-grid.small .resources-dividers-label-bar .resources-divider):
+        (.network-timeline-grid .resources-divider.first .resources-divider-label):
+        (.network-timeline-grid .resources-dividers-label-bar .resources-divider.first):
+        (.network-timeline-grid tr.filler td):
+        (.network-summary-bar td):
+        (.network.panel.viewing-resource .network-log-grid th):
+        (.network-log-grid.full-grid-mode .viewer-column):
+        (.network-log-grid.brief-grid-mode .time-column):
+        (.network-log-grid.viewing-resource-mode .timeline-column):
+        (.network.panel .sidebar):
+        (.network.panel.viewing-resource .network-log-grid .data-grid-resizer):
+
+2011-07-05  Alexandru Chiculita  <achicu@adobe.com>
+
+        Reviewed by Simon Hausmann.
+
+        [Qt] "cat" is not available when building.
+        https://bugs.webkit.org/show_bug.cgi?id=63924
+
+        Changed 'cat' to 'perl -ne \"print $1\"' because 'cat' is not available on Windows with
+        MSVC toolchain. It passed the Qt buildbots, because they run with cygwin.
+
+        Project file change. No tests needed.
+
+        * CodeGenerators.pri:
+2011-07-05  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Unreviewed; Qt Linux Release minimal compile fix.
+
+        * testing/Internals.h:
+        (WebCore::Internals::setInspectorResourcesDataSizeLimits):
+        * testing/Internals.idl:
+
+2011-07-05  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Show content for plugin requests in network panel.
+        https://bugs.webkit.org/show_bug.cgi?id=30080
+
+        Now the data from didReceiveData callback is passed to inspector.
+        It is then saved in NetworkResourcesData structure for plugin requests.
+        Added window.internals.setInspectorResourcesDataSizeLimits() method
+        for testing replacement logic.
+
+        Reviewed by Pavel Feldman.
+
+        Tests: http/tests/inspector/network/network-content-replacement-embed.html
+               http/tests/inspector/network/network-content-replacement-xhr.html
+               http/tests/inspector/network/network-embed.html
+
+        * WebCore.exp.in:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::setResourcesDataSizeLimitsFromInternals):
+        * inspector/InspectorController.h:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::didReceiveDataImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::didReceiveData):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::didReceiveResponse):
+        (WebCore::InspectorResourceAgent::didReceiveData):
+        (WebCore::InspectorResourceAgent::didFinishLoading):
+        (WebCore::InspectorResourceAgent::setInitialXHRContent):
+        (WebCore::InspectorResourceAgent::setResourcesDataSizeLimitsFromInternals):
+        (WebCore::InspectorResourceAgent::getResourceContent):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/NetworkResourcesData.cpp:
+        (WebCore::NetworkResourcesData::ResourceData::ResourceData):
+        (WebCore::NetworkResourcesData::ResourceData::setContent):
+        (WebCore::NetworkResourcesData::ResourceData::purgeContent):
+        (WebCore::NetworkResourcesData::ResourceData::createDecoder):
+        (WebCore::NetworkResourcesData::ResourceData::dataLength):
+        (WebCore::NetworkResourcesData::ResourceData::appendData):
+        (WebCore::NetworkResourcesData::ResourceData::decodeDataToContent):
+        (WebCore::NetworkResourcesData::NetworkResourcesData):
+        (WebCore::NetworkResourcesData::responseReceived):
+        (WebCore::NetworkResourcesData::setResourceContent):
+        (WebCore::NetworkResourcesData::maybeAddResourceData):
+        (WebCore::NetworkResourcesData::maybeDecodeDataToContent):
+        (WebCore::NetworkResourcesData::data):
+        (WebCore::NetworkResourcesData::clear):
+        (WebCore::NetworkResourcesData::setResourcesDataSizeLimits):
+        (WebCore::NetworkResourcesData::ensureNoDataForIdentifier):
+        (WebCore::NetworkResourcesData::ensureFreeSpace):
+        * inspector/NetworkResourcesData.h:
+        (WebCore::NetworkResourcesData::ResourceData::hasContent):
+        (WebCore::NetworkResourcesData::ResourceData::content):
+        (WebCore::NetworkResourcesData::ResourceData::decoder):
+        (WebCore::NetworkResourcesData::ResourceData::buffer):
+        (WebCore::NetworkResourcesData::ResourceData::setBuffer):
+        (WebCore::NetworkResourcesData::ResourceData::hasData):
+        * inspector/front-end/Resource.js:
+        (WebInspector.Resource.prototype.get contentEncoded):
+        * inspector/front-end/ResourcePreviewView.js:
+        (WebInspector.ResourcePreviewView.prototype.contentLoaded):
+        (WebInspector.ResourcePreviewView.prototype._createEmptyView):
+        (WebInspector.ResourcePreviewView.prototype._createPreviewView):
+        * inspector/front-end/ResourceView.js:
+        (WebInspector.ResourceView.hasTextContent):
+        * loader/DocumentThreadableLoader.cpp:
+        (WebCore::DocumentThreadableLoader::didReceiveData):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::willLoadMediaElementURL):
+        (WebCore::FrameLoader::commitProvisionalLoad):
+        (WebCore::FrameLoader::loadResourceSynchronously):
+        (WebCore::FrameLoader::loadedResourceFromMemoryCache):
+        * loader/ResourceLoadNotifier.cpp:
+        (WebCore::ResourceLoadNotifier::didReceiveData):
+        (WebCore::ResourceLoadNotifier::dispatchDidReceiveData):
+        (WebCore::ResourceLoadNotifier::sendRemainingDelegateMessages):
+        * loader/ResourceLoadNotifier.h:
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        (WebCore::ApplicationCacheGroup::didReceiveData):
+        * testing/Internals.cpp:
+        (WebCore::Internals::setInspectorResourcesDataSizeLimits):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-05  Kent Tamura  <tkent@chromium.org>
+
+        Add an assertion that percent height box is unregistered correctly.
+        https://bugs.webkit.org/show_bug.cgi?id=62792
+
+        Reviewed by Hajime Morita.
+
+        No new tests. This won't change behavior.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::hasPercentHeightDescendant): Added.
+        * rendering/RenderBlock.h: Declare hasPercentHeightDescendant().
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::destroy): Assert !hasPercentHeightDescendant().
+
+2011-07-04  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Enable settings screen with settings for console and elements panels.
+        https://bugs.webkit.org/show_bug.cgi?id=62853
+
+        Reviewed by Yury Semikhatsky.
+
+        * English.lproj/localizedStrings.js:
+        * inspector/front-end/HelpScreen.js:
+        (WebInspector.HelpScreen.prototype.hide):
+        * inspector/front-end/SettingsScreen.js:
+        (WebInspector.SettingsScreen):
+        (WebInspector.SettingsScreen.prototype._createRadioSetting.clickListener):
+        (WebInspector.SettingsScreen.prototype._createRadioSetting.get for):
+        * inspector/front-end/ShortcutsScreen.js:
+        (WebInspector.ShortcutsScreen.prototype.hide):
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype._colorFormatSettingChanged):
+        (WebInspector.StylesSidebarPane.prototype._updateColorFormatFilter.get var):
+        (WebInspector.StylesSidebarPane.prototype._updateColorFormatFilter):
+        (WebInspector.StylesSidebarPane.prototype._changeSetting):
+        (WebInspector.StylePropertyTreeElement.prototype.updateTitle.):
+        * inspector/front-end/inspector.css:
+        (#counters):
+        * inspector/front-end/inspector.js:
+        (WebInspector._createGlobalStatusBarItems):
+        (WebInspector._toggleSettings):
+        (WebInspector._showShortcutsScreen):
+        (WebInspector._hideShortcutsScreen):
+        (WebInspector._showSettingsScreen.onhide):
+        (WebInspector._showSettingsScreen):
+        (WebInspector._hideSettingsScreen):
+        (WebInspector.documentKeyDown):
+
+2011-07-05  Shinya Kawanaka  <shinyak@google.com>
+
+        Reviewed by Kent Tamura.
+
+        The default step is used when attribute step of input[type='number'] is "any".
+        https://bugs.webkit.org/show_bug.cgi?id=57723
+
+        When step is "any", 0 was chosen as step, but this is not intuitive.
+        So changed to use the default step.
+
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::getAllowedValueStep):
+          Calls getAllowedValueStepWithDecimalPlaces with RejectAny.
+        (WebCore::HTMLInputElement::getAllowedValueStepWithDecimalPlaces):
+          Takes a new arugument AnyStepHandling. If it is AnyIsDefaultStep, this method
+          allows "step" attribute to take a value "any" to use the default step as step value.
+          Otherwise, INVALID_STATE_ERR will be returned if "step" is "any".
+        (WebCore::HTMLInputElement::applyStep): ditto.
+        (WebCore::HTMLInputElement::stepUp):
+          Calls applyStep with RejectAny.
+        (WebCore::HTMLInputElement::stepDown): ditto.
+        (WebCore::HTMLInputElement::stepUpFromRenderer):
+          Removes a check that step is "any". It is checked in getAllowedValueStepWithDecimalPlaces.
+        * html/HTMLInputElement.h:
+
+2011-07-04  Dominic Cooney   <dominicc@chromium.org>
+
+        Simplify <progress> element's isDeterminate logic.
+        https://bugs.webkit.org/show_bug.cgi?id=63889
+
+        Reviewed by Hajime Morita.
+
+        Covered by existing tests
+        fast/dom/HTMLProgressElement/indeterminate-progress-*.html
+
+        * html/HTMLProgressElement.cpp:
+        (WebCore::HTMLProgressElement::position): don't duplicate isDeterminate
+        (WebCore::HTMLProgressElement::isDeterminate): remove redundant tests
+        (WebCore::HTMLProgressElement::didElementStateChange): fix formatting
+        * html/HTMLProgressElement.h:
+
+2011-07-04  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        Reviewed by Kent Tamura.
+
+        [EFL] Add hasOwnDisabledStateHandlingFor() to RenderThemeEfl
+        https://bugs.webkit.org/show_bug.cgi?id=63884
+
+        As MediaControlRootElement decides whether it will display timeline
+        according to the return value of RenderTheme's hasOwnDisabledStateHandlingFor(),
+        RenderThemeEfl has to implement this function.
+
+        Existing tests cover the visibility of the controls.
+
+        * platform/efl/RenderThemeEfl.h:
+        (WebCore::RenderThemeEfl::hasOwnDisabledStateHandlingFor):
+
+2011-07-04  Kent Tamura  <tkent@chromium.org>
+
+        REGRESSION (r87067): Text overflows from short height text field.
+        https://bugs.webkit.org/show_bug.cgi?id=61768
+
+        Reviewed by Dimitri Glazkov.
+
+        Since r87067, the RenderStyle for the inner text element is reset
+        by the value update, but the renderer for the inner text element
+        keeps to have metrics calculated by the previous style. So
+        RenderTextControlSingleLine::layout() didn't set a desired height
+        to the renderer for the inner text element.
+
+        This patch changes the style creation code so that it has the
+        desired height initially.
+
+        Test: fast/forms/textfield-overflow-by-value-update.html
+
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::RenderTextControlSingleLine):
+        Initialize m_desiredInnerTextHeight.
+        (WebCore::RenderTextControlSingleLine::layout):
+        Update m_desiredInnerTextHeight.
+        (WebCore::RenderTextControlSingleLine::styleDidChange):
+        Reset m_desiredInnerTextHeight.
+        (WebCore::RenderTextControlSingleLine::createInnerTextStyle):
+        Sets the height if m_desiredInnerTextHeight has a concrete value.
+        * rendering/RenderTextControlSingleLine.h:
+        Declare m_desiredInnerTextHeight.
+
+2011-07-04  MORITA Hajime  <morrita@google.com>
+
+        Accessing ShadowRoot.nodeList causes an assertion failure.
+        http://webkit.org/b/63798
+        
+        The TreeScope destructor did clear the reference to TreeScope, 
+        then the Node destructor accessing treeScope(), which results 
+        an inconsistent state during the NodeList cache cleanup.
+
+        This change clears NodeList cache during the TreeScope destructor.
+        The Node destructor no longer does problematic NodeList cache
+        manipulation.
+
+        Test: fast/dom/shadow/shadow-root-node-list.html
+
+        Reviewed by Dimitri Glazkov.
+        
+        * dom/Node.cpp:
+        (WebCore::Node::~Node):
+        (WebCore::Node::clearRareData):
+        * dom/Node.h:
+        * dom/TreeScope.cpp:
+        (WebCore::TreeScope::~TreeScope):
+
+2011-07-04  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        ResourceLoadNotifier::dispatchWillSendRequest should not compare StringImpl directly
+        https://bugs.webkit.org/show_bug.cgi?id=63873
+
+        Reviewed by Alexey Proskuryakov.
+
+        * loader/ResourceLoadNotifier.cpp:
+        (WebCore::ResourceLoadNotifier::dispatchWillSendRequest):
+
+2011-07-04  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r90373.
+        http://trac.webkit.org/changeset/90373
+        https://bugs.webkit.org/show_bug.cgi?id=63917
+
+        Breaks Qt Linux Release minimal (Requested by vsevik on
+        #webkit).
+
+        * WebCore.exp.in:
+        * inspector/InspectorController.cpp:
+        * inspector/InspectorController.h:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::didReceiveContentLengthImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::didReceiveContentLength):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::didReceiveResponse):
+        (WebCore::InspectorResourceAgent::didReceiveContentLength):
+        (WebCore::InspectorResourceAgent::didFinishLoading):
+        (WebCore::InspectorResourceAgent::setInitialXHRContent):
+        (WebCore::InspectorResourceAgent::getResourceContent):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/NetworkResourcesData.cpp:
+        (WebCore::NetworkResourcesData::ResourceData::ResourceData):
+        (WebCore::NetworkResourcesData::ResourceData::content):
+        (WebCore::NetworkResourcesData::ResourceData::appendContent):
+        (WebCore::NetworkResourcesData::ResourceData::purgeContent):
+        (WebCore::NetworkResourcesData::NetworkResourcesData):
+        (WebCore::NetworkResourcesData::responseReceived):
+        (WebCore::NetworkResourcesData::addResourceContent):
+        (WebCore::NetworkResourcesData::data):
+        (WebCore::NetworkResourcesData::clear):
+        (WebCore::NetworkResourcesData::ensureNoDataForIdentifier):
+        (WebCore::NetworkResourcesData::ensureFreeSpace):
+        * inspector/NetworkResourcesData.h:
+        (WebCore::NetworkResourcesData::ResourceData::hasContent):
+        (WebCore::NetworkResourcesData::ResourceData::setIsContentPurged):
+        (WebCore::NetworkResourcesData::ResourceData::textEncodingName):
+        (WebCore::NetworkResourcesData::ResourceData::setTextEncodingName):
+        * inspector/front-end/Resource.js:
+        * inspector/front-end/ResourcePreviewView.js:
+        (WebInspector.ResourcePreviewView.prototype.contentLoaded):
+        (WebInspector.ResourcePreviewView.prototype._createInnerView):
+        * inspector/front-end/ResourceView.js:
+        (WebInspector.ResourceView.hasTextContent):
+        * loader/DocumentThreadableLoader.cpp:
+        (WebCore::DocumentThreadableLoader::didReceiveData):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::willLoadMediaElementURL):
+        (WebCore::FrameLoader::commitProvisionalLoad):
+        (WebCore::FrameLoader::loadResourceSynchronously):
+        (WebCore::FrameLoader::loadedResourceFromMemoryCache):
+        * loader/ResourceLoadNotifier.cpp:
+        (WebCore::ResourceLoadNotifier::didReceiveData):
+        (WebCore::ResourceLoadNotifier::dispatchDidReceiveContentLength):
+        (WebCore::ResourceLoadNotifier::sendRemainingDelegateMessages):
+        * loader/ResourceLoadNotifier.h:
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        (WebCore::ApplicationCacheGroup::didReceiveData):
+        * testing/Internals.cpp:
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-04  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Show content for plugin requests in network panel.
+        https://bugs.webkit.org/show_bug.cgi?id=30080
+
+        Reviewed by Pavel Feldman.
+
+        Tests: http/tests/inspector/network/network-content-replacement-embed.html
+               http/tests/inspector/network/network-content-replacement-xhr.html
+               http/tests/inspector/network/network-embed.html
+
+        * WebCore.exp.in:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::setResourcesDataSizeLimitsFromInternals):
+        * inspector/InspectorController.h:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::didReceiveDataImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::didReceiveData):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::didReceiveResponse):
+        (WebCore::InspectorResourceAgent::didReceiveData):
+        (WebCore::InspectorResourceAgent::didFinishLoading):
+        (WebCore::InspectorResourceAgent::setInitialXHRContent):
+        (WebCore::InspectorResourceAgent::setResourcesDataSizeLimitsFromInternals):
+        (WebCore::InspectorResourceAgent::getResourceContent):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/NetworkResourcesData.cpp:
+        (WebCore::NetworkResourcesData::ResourceData::ResourceData):
+        (WebCore::NetworkResourcesData::ResourceData::setContent):
+        (WebCore::NetworkResourcesData::ResourceData::purgeContent):
+        (WebCore::NetworkResourcesData::ResourceData::createDecoder):
+        (WebCore::NetworkResourcesData::ResourceData::dataLength):
+        (WebCore::NetworkResourcesData::ResourceData::appendData):
+        (WebCore::NetworkResourcesData::ResourceData::decodeDataToContent):
+        (WebCore::NetworkResourcesData::NetworkResourcesData):
+        (WebCore::NetworkResourcesData::responseReceived):
+        (WebCore::NetworkResourcesData::setResourceContent):
+        (WebCore::NetworkResourcesData::maybeAddResourceData):
+        (WebCore::NetworkResourcesData::maybeDecodeDataToContent):
+        (WebCore::NetworkResourcesData::data):
+        (WebCore::NetworkResourcesData::clear):
+        (WebCore::NetworkResourcesData::setResourcesDataSizeLimits):
+        (WebCore::NetworkResourcesData::ensureNoDataForIdentifier):
+        (WebCore::NetworkResourcesData::ensureFreeSpace):
+        * inspector/NetworkResourcesData.h:
+        (WebCore::NetworkResourcesData::ResourceData::hasContent):
+        (WebCore::NetworkResourcesData::ResourceData::content):
+        (WebCore::NetworkResourcesData::ResourceData::decoder):
+        (WebCore::NetworkResourcesData::ResourceData::buffer):
+        (WebCore::NetworkResourcesData::ResourceData::setBuffer):
+        (WebCore::NetworkResourcesData::ResourceData::hasData):
+        * inspector/front-end/Resource.js:
+        (WebInspector.Resource.prototype.get contentEncoded):
+        * inspector/front-end/ResourcePreviewView.js:
+        (WebInspector.ResourcePreviewView.prototype.contentLoaded):
+        (WebInspector.ResourcePreviewView.prototype._createEmptyView):
+        (WebInspector.ResourcePreviewView.prototype._createPreviewView):
+        * inspector/front-end/ResourceView.js:
+        (WebInspector.ResourceView.hasTextContent):
+        * loader/DocumentThreadableLoader.cpp:
+        (WebCore::DocumentThreadableLoader::didReceiveData):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::willLoadMediaElementURL):
+        (WebCore::FrameLoader::commitProvisionalLoad):
+        (WebCore::FrameLoader::loadResourceSynchronously):
+        (WebCore::FrameLoader::loadedResourceFromMemoryCache):
+        * loader/ResourceLoadNotifier.cpp:
+        (WebCore::ResourceLoadNotifier::didReceiveData):
+        (WebCore::ResourceLoadNotifier::dispatchDidReceiveData):
+        (WebCore::ResourceLoadNotifier::sendRemainingDelegateMessages):
+        * loader/ResourceLoadNotifier.h:
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        (WebCore::ApplicationCacheGroup::didReceiveData):
+        * testing/Internals.cpp:
+        (WebCore::Internals::setInspectorResourcesDataSizeLimits):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-04  Jeff Timanus  <twiz@chromium.org>
+
+        Reviewed by Stephen White.
+
+        Prevent calls to GrapicsContext3D::deleteTexture with id 0 in DrawingBuffer::clear().
+        https://bugs.webkit.org/show_bug.cgi?id=63756
+
+        * platform/graphics/gpu/DrawingBuffer.cpp:
+        (WebCore::DrawingBuffer::clear):
+
+2011-07-04  Martin Robinson  <mrobinson@igalia.com>
+
+        Reviewed by Andreas Kling.
+
+        [GTK] r90148 did not apply to X11 platforms in WebKit1
+        https://bugs.webkit.org/show_bug.cgi?id=63862
+
+        Correct the guard for an X11 specific piece of code. TARGET(X11) not
+        defined for the GTK+ port.
+
+        No new tests. This is covered by an existing test.
+
+        * plugins/npapi.cpp: Correct the X11 guard.
+        (NPN_InvalidateRect):
+
+2011-07-04  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: implement settings panel.
+        https://bugs.webkit.org/show_bug.cgi?id=63907
+
+        Reviewed by Yury Semikhatsky.
+
+        * English.lproj/localizedStrings.js:
+        * WebCore.gypi:
+        * WebCore.vcproj/WebCore.vcproj:
+        * inspector/front-end/BreakpointsSidebarPane.js:
+        (WebInspector.XHRBreakpointsSidebarPane.prototype._saveBreakpoints):
+        (WebInspector.EventListenerBreakpointsSidebarPane.prototype._saveBreakpoints):
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView):
+        (WebInspector.ConsoleView.prototype._handleContextMenuEvent.monitoringXHRItemAction):
+        (WebInspector.ConsoleView.prototype._handleContextMenuEvent.get preserveLogItemAction):
+        (WebInspector.ConsoleView.prototype._monitoringXHREnabledSettingChanged):
+        (WebInspector.ConsoleView.prototype._registerShortcuts):
+        * inspector/front-end/DOMBreakpointsSidebarPane.js:
+        (WebInspector.DOMBreakpointsSidebarPane.prototype._saveBreakpoints):
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel.prototype._saveBreakpoints):
+        * inspector/front-end/ElementsPanel.js:
+        (WebInspector.ElementsPanel.prototype._contextMenuEventFired):
+        (WebInspector.ElementsPanel.prototype._domWordWrapSettingChanged):
+        (WebInspector.ElementsPanel.prototype._registerShortcuts):
+        * inspector/front-end/EventListenersSidebarPane.js:
+        (WebInspector.EventListenersSidebarPane.prototype):
+        ():
+        * inspector/front-end/HelpScreen.js:
+        (WebInspector.HelpScreen):
+        (WebInspector.HelpScreen.prototype.show):
+        (WebInspector.HelpScreen.prototype.hide):
+        (WebInspector.HelpScreen.prototype._onKeyDown):
+        * inspector/front-end/NetworkItemView.js:
+        * inspector/front-end/NetworkPanel.js:
+        * inspector/front-end/Panel.js:
+        (WebInspector.Panel.prototype.saveSidebarWidth):
+        * inspector/front-end/ProfilesPanel.js:
+        * inspector/front-end/ResourcesPanel.js:
+        (WebInspector.BaseStorageTreeElement.prototype.onselect):
+        (WebInspector.StorageCategoryTreeElement.prototype.onexpand):
+        (WebInspector.StorageCategoryTreeElement.prototype.set oncollapse):
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._sourceFileAdded.get if):
+        (WebInspector.ScriptsPanel.prototype._setPauseOnExceptions.callback):
+        (WebInspector.ScriptsPanel.prototype._createSidebarButtonAndRegisterShortcuts):
+        * inspector/front-end/Settings.js:
+        (WebInspector.Settings):
+        (WebInspector.Settings.prototype.installApplicationSetting):
+        (WebInspector.Setting):
+        (WebInspector.Setting.prototype.addChangeListener):
+        (WebInspector.Setting.prototype.removeChangeListener):
+        (WebInspector.Setting.prototype.get var):
+        (WebInspector.Setting.prototype):
+        (WebInspector.Setting.prototype.set if):
+        * inspector/front-end/SettingsScreen.js: Added.
+        (WebInspector.SettingsScreen):
+        (WebInspector.SettingsScreen.prototype._appendSection):
+        (WebInspector.SettingsScreen.prototype._columnElement):
+        (WebInspector.SettingsScreen.prototype._createCheckboxSetting.get listener):
+        (WebInspector.SettingsScreen.prototype._createRadioSetting):
+        * inspector/front-end/ShortcutsScreen.js: Renamed from Source/WebCore/inspector/front-end/ShortcutsHelp.js.
+        (WebInspector.ShortcutsScreen):
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype.registerShortcuts):
+        * inspector/front-end/WatchExpressionsSidebarPane.js:
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/helpScreen.css:
+        (.help-window-main):
+        (body.attached .help-window-main):
+        (.help-window-caption):
+        (body.attached .help-window-caption):
+        (.help-content):
+        (.help-close-button):
+        (body.attached .help-close-button):
+        (body.attached .help-content):
+        (.help-table):
+        (body.platform-mac .help-key):
+        (.help-combine-keys):
+        (.help-content p):
+        (.help-content fieldset):
+        (.help-content fieldset p):
+        (.help-content p.help-section):
+        (.help-section-title):
+        (.help-content input[type=checkbox]):
+        * inspector/front-end/inspector.css:
+        (button.settings-status-bar-item):
+        (.settings-status-bar-item .glyph):
+        * inspector/front-end/inspector.html:
+        * inspector/front-end/inspector.js:
+        (WebInspector._createGlobalStatusBarItems):
+        (WebInspector._toggleAttach):
+        (WebInspector._toggleSettings):
+        (WebInspector._registerShortcuts):
+        (WebInspector.documentKeyDown):
+
+2011-07-04  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Resources loaded to Resources Panel from InspectorPageAgent do not have mime type set.
+        https://bugs.webkit.org/show_bug.cgi?id=63701
+
+        Pass cachedResource/documentLoader mimeType from InspectorPageAgent to frontend.
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: http/tests/inspector/resource-tree/resource-tree-mimetype.html
+
+        * inspector/Inspector.json:
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::InspectorPageAgent::buildObjectForFrame):
+        (WebCore::InspectorPageAgent::buildObjectForFrameTree):
+        * inspector/front-end/ResourceTreeModel.js:
+        (WebInspector.ResourceTreeModel.prototype._addFramesRecursively):
+        (WebInspector.ResourceTreeModel.prototype._createResource):
+
+2011-07-04  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: repeated message counter should be aligned with other message icons
+        https://bugs.webkit.org/show_bug.cgi?id=63901
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/inspector.css:
+        (.console-message .bubble):
+
+2011-07-04  Alexander Pavlov  <apavlov@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: Adding new CSS rules should be more discoverable in the UI
+        https://bugs.webkit.org/show_bug.cgi?id=63803
+
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype._createNewRule):
+
+2011-07-04  Danilo Cesar Lemes de Paula  <danilo.cesar@collabora.co.uk>
+
+        [Qt] Fixing build with --media-stream flag enabled
+        https://bugs.webkit.org/show_bug.cgi?id=63831
+
+        Reviewed by Benjamin Poulain.
+
+        * features.pri: Adding support to ENABLE_MEDIA_STREAM flag.
+
+2011-07-04  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: Update network resource url from response data.
+        https://bugs.webkit.org/show_bug.cgi?id=63736
+
+        * inspector/Inspector.json:
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::buildObjectForResourceResponse):
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkDispatcher.prototype._updateResourceWithResponse):
+
+2011-07-04  Andrey Kosyakov  <caseq@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: [Extensions API] audit formatter names should begin with create
+        https://bugs.webkit.org/show_bug.cgi?id=63802
+
+        * inspector/front-end/ExtensionAPI.js:
+        (WebInspector.injectedExtensionAPI.AuditResultImpl):
+
+2011-07-03  Dominic Cooney  <dominicc@chromium.org>
+
+        The value property of an indeterminate progress element should be zero
+        https://bugs.webkit.org/show_bug.cgi?id=63861
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/dom/HTMLProgressElement/set-progress-properties.html
+
+        * html/HTMLProgressElement.cpp:
+        (WebCore::HTMLProgressElement::value):
+
+2011-07-03  Robert Hogan  <robert@webkit.org>
+
+        Restore scroll position on page reloads scheduled by <meta http-equiv="refresh" content="XX"/>
+        https://bugs.webkit.org/show_bug.cgi?id=62482
+
+        If a <meta http-equiv="refresh"> directive schedules a page reload rather than
+        a redirect restore the scroll position after the reload. Do the same on location.reload().
+
+        Reviewed by Adam Barth.
+
+        Tests: http/tests/navigation/scrollstate-after-http-equiv-refresh-fragment-identifier-2.html
+               http/tests/navigation/scrollstate-after-http-equiv-refresh-fragment-identifier.html
+               http/tests/navigation/scrollstate-after-http-equiv-refresh.html
+               http/tests/navigation/scrollstate-after-location-reload.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadURL):
+        Only make the load FrameLoadTypeSame if it has not already been set as FrameLoadTypeReload*.
+        FrameLoadTypeReload* loads are set through http-equiv refreshes, manual reloads, or location.reload()
+        and honour the user's scroll position in the frame. A FrameLoadTypeSame is for when the frame is loading
+        the same page again, e.g. by clicking a link.
+
+        * loader/NavigationScheduler.cpp:
+        (WebCore::ScheduledRedirect::fire): Tell FrameLoader::changeLocation() if this is a reload.
+
+2011-07-03  Dirk Schulze  <krit@webkit.org>
+
+        SVGAnimateTransform accumulate=sum restarts on every repeat
+        https://bugs.webkit.org/show_bug.cgi?id=63876
+
+        Reviewed by Nikolas Zimmermann.
+        
+        We applied transforms from previous animation repeats to a transform list. The problem is, that we calculated the current
+        transform based on the percentage of the current repeat count. This causes an animation starting from scale level 0
+        on every repeat. Now I add the repeat count to the current percentage, so that the distance calculation starts from 100% on
+        the first repeat, from 200% on the second and so on.
+
+        Test: svg/animations/svgtransform-animation-1.html
+
+        * svg/SVGAnimateTransformElement.cpp:
+        (WebCore::SVGAnimateTransformElement::calculateAnimatedValue):
+
+2011-07-03  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r90342.
+        http://trac.webkit.org/changeset/90342
+        https://bugs.webkit.org/show_bug.cgi?id=63875
+
+        Newly added tests fail on Mac, GTK, and Win7 (Requested by
+        abarth on #webkit).
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadURL):
+        * loader/NavigationScheduler.cpp:
+
+2011-07-03  Robert Hogan  <robert@webkit.org>
+
+        Restore scroll position on page reloads scheduled by <meta http-equiv="refresh" content="XX"/>
+        https://bugs.webkit.org/show_bug.cgi?id=62482
+
+        If a <meta http-equiv="refresh"> directive schedules a page reload rather than
+        a redirect restore the scroll position after the reload. Do the same on location.reload().
+
+        Reviewed by Adam Barth.
+
+        Tests: http/tests/navigation/scrollstate-after-http-equiv-refresh-fragment-identifier-2.html
+               http/tests/navigation/scrollstate-after-http-equiv-refresh-fragment-identifier.html
+               http/tests/navigation/scrollstate-after-http-equiv-refresh.html
+               http/tests/navigation/scrollstate-after-location-reload.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadURL):
+        Only make the load FrameLoadTypeSame if it has not already been set as FrameLoadTypeReload*.
+        FrameLoadTypeReload* loads are set through http-equiv refreshes, manual reloads, or location.reload()
+        and honour the user's scroll position in the frame. A FrameLoadTypeSame is for when the frame is loading
+        the same page again, e.g. by clicking a link.
+
+        * loader/NavigationScheduler.cpp:
+        (WebCore::ScheduledRedirect::fire): Tell FrameLoader::changeLocation() if this is a reload.
+
+2011-04-02  Robert Hogan  <robert@webkit.org>
+
+        Reviewed by Benjamin Poulain.
+
+        [Qt] Support third-party cookie policy for Qt clients
+        https://bugs.webkit.org/show_bug.cgi?id=45455
+
+        Identifying third-party cookies is facilitated by API new to QUrl from
+        Qt 4.8: QUrl::topLevelDomain(). This API uses the Mozilla public suffix
+        list to determine the top-level registry-controlled domain of the Url.
+
+        See also: http://gitorious.org/qt/qt/merge_requests/1205
+                   (commit 154402f56dcf8303a6ce601a52215226af8d31ba)
+                  http://bugreports.qt.nokia.com/browse/QTBUG-13601
+
+        Test: http/tests/cookies/strict-third-party-cookie-blocking.html
+
+        * WebCore.pro:
+        * platform/network/qt/ResourceRequestQt.cpp:
+        (WebCore::ResourceRequest::toNetworkRequest):
+        * platform/qt/CookieJarQt.cpp:
+        (WebCore::setCookies):
+        (WebCore::cookies):
+        * platform/qt/ThirdPartyCookiesQt.cpp: Added.
+        (WebCore::cookieJar):
+        (WebCore::isFirstPartyCookie):
+        (WebCore::cookieAllowed):
+        (WebCore::allowThirdPartyCookies):
+        * platform/qt/ThirdPartyCookiesQt.h: Added.
+
+2011-07-03  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Reviewed by Alexey Proskuryakov.
+
+        Web Inspector: Preflight OPTIONS requests are not shown on network panel for asynchronous XHRs.
+        https://bugs.webkit.org/show_bug.cgi?id=63712
+
+        Added InspectorInstrumentation calls to preflight OPTIONS requests callbacks in DocumentThreadableLoader.
+
+        * loader/DocumentThreadableLoader.cpp:
+        (WebCore::DocumentThreadableLoader::DocumentThreadableLoader):
+        (WebCore::DocumentThreadableLoader::didReceiveResponse):
+        (WebCore::DocumentThreadableLoader::didReceiveData):
+        (WebCore::DocumentThreadableLoader::didFinishLoading):
+        (WebCore::DocumentThreadableLoader::didFail):
+        (WebCore::DocumentThreadableLoader::loadRequest):
+        * loader/DocumentThreadableLoader.h:
+
+2011-06-23  Robert Hogan  <robert@webkit.org>
+
+        Reviewed by Simon Hausmann.
+
+        [Qt] Windowless Plugins : <input> cursor blinks even after transferring focus to plugin
+        https://bugs.webkit.org/show_bug.cgi?id=30355
+
+        Test: plugins/mouse-click-plugin-clears-selection.html
+
+        PluginView needs to use page->focusController()->setFocusedNode() when focusing a plugin
+        in order to clear the FrameSelection in the currently focused node. In its platform-specific
+        code Chromium already does this (WebPluginContainerImpl.cpp).
+
+        * WebCore.exp.in: Add symbol for FocusController::setFocusedNode
+        * plugins/PluginView.cpp:
+        (WebCore::PluginView::focusPluginElement): Using FocusController::setFocusedNode() makes
+                                                   the call to FocusController:setFocusedFrame() and Document::setFocusedNode()
+                                                   redundant, since it calls both.
+
+2011-07-01  Michael Nordman  <michaeln@google.com>
+
+        Reviewed by Darin Fisher.
+
+        [Chromium] FileSystem API can be used to learn about installed software on the user's computer.
+        Added a new MIMETypeRegistry method to return a type based on a well known set of mappings
+        without consulting the OS/registry.
+        https://bugs.webkit.org/show_bug.cgi?id=63220
+
+        No new tests, existing layout tests that invoke file.type apply.
+
+        * fileapi/File.cpp: Refactored the factory methods.
+        (WebCore::createBlobDataForFileWithType):
+        (WebCore::createBlobDataForFile):
+        (WebCore::createBlobDataForFileSystemFile):
+        (WebCore::File::File):
+        * platform/MIMETypeRegistry.cpp: Added getWellKnownMIMETypeForExtension() method.
+        (WebCore::mediaMIMETypeMap):
+        (WebCore::findMimeType):
+        (WebCore::MIMETypeRegistry::getWellKnownMIMETypeForExtension):
+        * platform/MIMETypeRegistry.h:
+        * platform/chromium/MIMETypeRegistryChromium.cpp: Added getWellKnownMIMETypeForExtension() method.
+        (WebCore::MIMETypeRegistry::getMIMETypeForExtension):
+        (WebCore::MIMETypeRegistry::getWellKnownMIMETypeForExtension):
+        (WebCore::findMimeType):
+        * platform/chromium/PlatformBridge.h:
+
+2011-07-01  Tim Horton  <timothy_horton@apple.com>
+
+        Reviewed by Darin Adler.
+
+        SVG data:image/svg+xml;base64 URLs inside CSS throw mime type warning
+        https://bugs.webkit.org/show_bug.cgi?id=54325
+        
+        Add image/svg+xml to the list of acceptable MIME types for the Image type.
+
+        * inspector/front-end/inspector.js:
+        (WebInspector):
+
+2011-07-01  Tim Horton  <timothy_horton@apple.com>
+
+        Reviewed by Darin Adler.
+
+        Errors encountered within SVG documents should be reported to the console
+        https://bugs.webkit.org/show_bug.cgi?id=62599
+
+        Add SVGElement::reportAttributeParsingError, which will
+        write a Web Inspector console message if passed an SVGParsingError
+        and the attribute which was being applied, only in the case where
+        there is actually an error.
+
+        Include the SVG document's URI when writing to the Web Inspector
+        console, so that the UI displays both the filename and the line number.
+
+        * svg/SVGDocumentExtensions.cpp:
+        (WebCore::reportMessage):
+        * svg/SVGElement.cpp:
+        (WebCore::SVGElement::reportAttributeParsingError):
+        * svg/SVGElement.h:
+
+2011-07-01  Scott Byer  <scottbyer@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Smooth scrolling fixes
+        https://bugs.webkit.org/show_bug.cgi?id=63770
+
+        Tests: Chromium webkit_unit_tests ScrollAnimatorNoneTest.ScrollWheelTrace and .LinuxTrackPadTrace
+
+        Fix issues found in manual testing; distill the traces into unit tests. Fix the issues the tests exposed in the
+        scroll animation code.
+
+        * platform/ScrollAnimatorNone.cpp:
+        (WebCore::ScrollAnimatorNone::PerAxisData::updateDataFromParameters):
+        (WebCore::ScrollAnimatorNone::scroll):
+
+2011-07-01  Levi Weintraub  <leviw@chromium.org>
+
+        Switch primary virtual layout functions to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63852
+
+        Reviewed by Eric Seidel.
+
+        Switching the primary overloaded layout functions over to the new layout unit abstraction.
+
+        No new tests, no functionality changes.
+
+        * html/shadow/MediaControlElements.cpp:
+        (WebCore::RenderMediaVolumeSliderContainer::layout):
+        * page/FrameView.cpp:
+        (WebCore::FrameView::layout):
+        * rendering/AutoTableLayout.cpp:
+        (WebCore::AutoTableLayout::layout):
+        * rendering/FixedTableLayout.cpp:
+        (WebCore::FixedTableLayout::layout):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::layout):
+        * rendering/RenderFrameSet.cpp:
+        (WebCore::RenderFrameSet::layout):
+        * rendering/RenderMedia.cpp:
+        (WebCore::RenderMedia::layout):
+        * rendering/RenderRubyRun.cpp:
+        (WebCore::RenderRubyRun::layout):
+        * rendering/RenderScrollbarPart.cpp:
+        (WebCore::RenderScrollbarPart::layout):
+        * rendering/RenderSlider.cpp:
+        (WebCore::RenderSlider::layout):
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::layout):
+        * rendering/RenderTableRow.cpp:
+        (WebCore::RenderTableRow::layout):
+        * rendering/RenderTableSection.cpp:
+        (WebCore::RenderTableSection::layout):
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::layout):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::layout):
+        * rendering/RenderView.h:
+        (WebCore::RenderView::layoutDelta):
+        (WebCore::RenderView::addLayoutDelta):
+        * rendering/mathml/RenderMathMLRoot.cpp:
+        (WebCore::RenderMathMLRoot::layout):
+        * rendering/mathml/RenderMathMLRow.cpp:
+        (WebCore::RenderMathMLRow::layout):
+        * rendering/mathml/RenderMathMLSquareRoot.cpp:
+        (WebCore::RenderMathMLSquareRoot::layout):
+        * rendering/mathml/RenderMathMLSubSup.cpp:
+        (WebCore::RenderMathMLSubSup::layout):
+        * rendering/mathml/RenderMathMLUnderOver.cpp:
+        (WebCore::RenderMathMLUnderOver::layout):
+
+2011-07-01  Sam Weinig  <sam@webkit.org>
+
+        Reduce parser nesting cap to 512
+        https://bugs.webkit.org/show_bug.cgi?id=63856
+
+        Reviewed by Dan Bernstein.
+
+        Given Firefox's cap of 200, our cap of 2048 seemed a little excessive. Lower
+        the nesting cap to 512 to cover more cases where rending recursion was biting us.
+
+        * page/Settings.h:
+        Reduce the nesting cap to 512.
+
+2011-07-01  Darin Adler  <darin@apple.com>
+
+        Add change accidentally left out of last commit.
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::updateContentsScale): Multiply in the
+        backing scale.
+
+2011-07-01  Darin Adler  <darin@apple.com>
+
+        Consider backing scale when setting up graphics layers
+        https://bugs.webkit.org/show_bug.cgi?id=63848
+
+        Reviewed by Simon Fraser.
+
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::clampedContentsScaleForScale):
+        Increased the maximum scale since scale factor can now include
+        both page contents scale and backing scale.
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::createGraphicsLayer): Multiply in the
+        backing scale as well as the page contents scale.
+        (WebCore::RenderLayerBacking::updateForegroundLayer): Ditto.
+        (WebCore::RenderLayerBacking::updateMaskLayer): Ditto.
+        (WebCore::RenderLayerBacking::pageContentsScale): Added.
+        (WebCore::RenderLayerBacking::backingScale): Added.
+        * rendering/RenderLayerBacking.h: Added new private functions.
+
+2011-07-01  Adele Peterson  <adele@apple.com>
+
+        Reviewed by Darin Adler.
+
+        WebCore part of fix for https://bugs.webkit.org/show_bug.cgi?id=63851
+        <rdar://problem/8981062> Crash when loading a document in an editable WebView that has a subframe with an unstyled body
+
+        No new tests.  I tried to make a test in DumpRenderTree with an editable WebView, 
+        but was unsuccessful in getting the crash to happen in that instance.
+
+        * editing/Editor.cpp: (WebCore::Editor::applyEditingStyleToElement): Add a nil check that exits early, in addition to the ASSERT.
+
+2011-07-01  Levi Weintraub  <leviw@chromium.org>
+
+        Switch overflow and collapsedMargins to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63840
+
+        Reviewed by Eric Seidel.
+
+        Switching overflow and collapsedMargins over to the new layout unit abstraction.
+
+        Also removing an unused function: blockDirectionOverflow
+
+        No new tests, no functionality changes.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::collapsedMarginBeforeForChild):
+        (WebCore::RenderBlock::collapsedMarginAfterForChild):
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::collapsedMarginBefore):
+        (WebCore::RenderBlock::collapsedMarginAfter):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::addOverflowFromChild):
+        (WebCore::RenderBox::addLayoutOverflow):
+        (WebCore::RenderBox::addVisualOverflow):
+        * rendering/RenderBox.h:
+        (WebCore::RenderBox::layoutOverflowRect):
+        (WebCore::RenderBox::minYLayoutOverflow):
+        (WebCore::RenderBox::maxYLayoutOverflow):
+        (WebCore::RenderBox::minXLayoutOverflow):
+        (WebCore::RenderBox::maxXLayoutOverflow):
+        (WebCore::RenderBox::maxLayoutOverflow):
+        (WebCore::RenderBox::logicalLeftLayoutOverflow):
+        (WebCore::RenderBox::logicalRightLayoutOverflow):
+        (WebCore::RenderBox::visualOverflowRect):
+        (WebCore::RenderBox::minYVisualOverflow):
+        (WebCore::RenderBox::maxYVisualOverflow):
+        (WebCore::RenderBox::minXVisualOverflow):
+        (WebCore::RenderBox::maxXVisualOverflow):
+        (WebCore::RenderBox::logicalLeftVisualOverflow):
+        (WebCore::RenderBox::logicalRightVisualOverflow):
+        (WebCore::RenderBox::addOverflowFromChild):
+        (WebCore::RenderBox::collapsedMarginBefore):
+        (WebCore::RenderBox::collapsedMarginAfter):
+        * rendering/RenderOverflow.h:
+        (WebCore::RenderOverflow::RenderOverflow):
+        (WebCore::RenderOverflow::minYLayoutOverflow):
+        (WebCore::RenderOverflow::maxYLayoutOverflow):
+        (WebCore::RenderOverflow::minXLayoutOverflow):
+        (WebCore::RenderOverflow::maxXLayoutOverflow):
+        (WebCore::RenderOverflow::minYVisualOverflow):
+        (WebCore::RenderOverflow::maxYVisualOverflow):
+        (WebCore::RenderOverflow::minXVisualOverflow):
+        (WebCore::RenderOverflow::maxXVisualOverflow):
+        (WebCore::RenderOverflow::setMinYLayoutOverflow):
+        (WebCore::RenderOverflow::setMaxYLayoutOverflow):
+        (WebCore::RenderOverflow::setMinXLayoutOverflow):
+        (WebCore::RenderOverflow::setMaxXLayoutOverflow):
+        (WebCore::RenderOverflow::setMinYVisualOverflow):
+        (WebCore::RenderOverflow::setMaxYVisualOverflow):
+        (WebCore::RenderOverflow::setMinXVisualOverflow):
+        (WebCore::RenderOverflow::setMaxXVisualOverflow):
+        (WebCore::RenderOverflow::layoutOverflowRect):
+        (WebCore::RenderOverflow::visualOverflowRect):
+        (WebCore::RenderOverflow::move):
+        (WebCore::RenderOverflow::addLayoutOverflow):
+        (WebCore::RenderOverflow::addVisualOverflow):
+        (WebCore::RenderOverflow::setLayoutOverflow):
+        (WebCore::RenderOverflow::setVisualOverflow):
+        (WebCore::RenderOverflow::resetLayoutOverflow):
+
+2011-07-01  Nate Chapin  <japhet@chromium.org>
+
+        Ensure WorkerScriptLoader::notifyFinished() doesn't re-enter.
+        https://bugs.webkit.org/show_bug.cgi?id=63835
+
+        Reviewed by Dmitry Titov.
+
+        Test: fast/workers/worker-finish-crash.html
+
+        * workers/WorkerScriptLoader.cpp:
+        (WebCore::WorkerScriptLoader::WorkerScriptLoader):
+        (WebCore::WorkerScriptLoader::notifyFinished):
+        * workers/WorkerScriptLoader.h:
+
+2011-07-01  Adrienne Walker  <enne@google.com>
+
+        [chromium] Upload root layer textures first so that it is less likely to be skipped
+        https://bugs.webkit.org/show_bug.cgi?id=63850
+
+        Reviewed by James Robinson.
+
+        This is a tiny follow-on patch to bug 63760.  If the root layer is not
+        uploaded first, then it may not have enough space to fit into texture
+        memory and might be skipped, leaving a blue background.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::updateLayers):
+
+2011-07-01  Mihai Parparita  <mihaip@chromium.org>
+
+        Reviewed by Darin Fisher.
+
+        location.replace with a hash change does not update the history entry
+        https://bugs.webkit.org/show_bug.cgi?id=63777
+
+        location.replace('#foo') would not update the HistoryItem with the
+        new URL, thus navigating back to the page would use the previous
+        URL, even though it had been replaced. Make
+        HistoryController::updateForSameDocumentNavigation mirror 
+        HistoryController::replaceState.
+
+        Test: fast/history/location-replace-hash.html
+
+        * loader/HistoryController.cpp:
+        (WebCore::HistoryController::updateForSameDocumentNavigation):
+
+2011-07-01  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Reviewed by Ojan Vafai.
+
+        Move m_isDirectional from FrameSelection to VisibleSelection
+        https://bugs.webkit.org/show_bug.cgi?id=63473
+
+        Move m_isDirectional from FrameSelection to VisibleSelection.
+
+        Also fixed a bug that WebKit does not preserve non-directional selection after undo.
+
+        Test: editing/selection/directionality-after-undo-replace.html
+
+        * WebCore.exp.in: Updated the signature of setSelection.
+        * editing/FrameSelection.cpp:
+        (WebCore::FrameSelection::FrameSelection): Removed the call to setIsDirectional.
+        (WebCore::shouldAlwaysUseDirectionalSelection): Added.
+        (WebCore::FrameSelection::setSelection): No longer takes DirectionalityPolicy.
+        Calls setIsDirectional(true) when the platform doesn't support non-directional selection.
+        Passes align and granularity to setSelection of the base end point as expected.
+        No longer updates granularity when updating the selection of a different frame.
+        (WebCore::FrameSelection::willBeModified): Calls VisibleSelection::isDirectional().
+        (WebCore::FrameSelection::modify): No longer calls trialFrameSelection.setIsDirectional
+        because the directionality is passed from m_selection automatically.
+        Also calls shouldAlwaysUseDirectionalSelection.
+        * editing/FrameSelection.h: Remove m_isDirectional. Make all boolean bit fields.
+        (WebCore::FrameSelection::setSelection): No longer takes DirectionalityPolicy.
+        * editing/VisibleSelection.cpp:
+        (WebCore::VisibleSelection::VisibleSelection): Initializes m_isDirectional to true.
+        This should be changed to false to fix the bug 60529.
+        * editing/VisibleSelection.h:
+        (WebCore::VisibleSelection::isDirectional): Added.
+        (WebCore::VisibleSelection::setIsDirectional): Added.
+        * page/EventHandler.cpp:
+        (WebCore::setNonDirectionalSelectionIfNeeded): Creates a non-directional selection instead of
+        calling setSelection with MakeNonDirectionalSelection.
+        (WebCore::EventHandler::handleMousePressEventSingleClick): Remove the call to setIsDirectional
+        because it already calls setNonDirectionalSelectionIfNeeded.
+
+2011-07-01  Tony Chang  <tony@chromium.org>
+
+        cleanup of flexbox and marquee data naming in StyleRareNonInheritedData
+        https://bugs.webkit.org/show_bug.cgi?id=63827
+
+        Reviewed by Ojan Vafai.
+
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::RenderStyle):
+        (WebCore::RenderStyle::diff):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::boxAlign):
+        (WebCore::InheritedFlags::boxFlex):
+        (WebCore::InheritedFlags::boxFlexGroup):
+        (WebCore::InheritedFlags::boxLines):
+        (WebCore::InheritedFlags::boxOrdinalGroup):
+        (WebCore::InheritedFlags::boxOrient):
+        (WebCore::InheritedFlags::boxPack):
+        (WebCore::InheritedFlags::marqueeIncrement):
+        (WebCore::InheritedFlags::marqueeSpeed):
+        (WebCore::InheritedFlags::marqueeLoopCount):
+        (WebCore::InheritedFlags::marqueeBehavior):
+        (WebCore::InheritedFlags::marqueeDirection):
+        (WebCore::InheritedFlags::setBoxAlign):
+        (WebCore::InheritedFlags::setBoxFlex):
+        (WebCore::InheritedFlags::setBoxFlexGroup):
+        (WebCore::InheritedFlags::setBoxLines):
+        (WebCore::InheritedFlags::setBoxOrdinalGroup):
+        (WebCore::InheritedFlags::setBoxOrient):
+        (WebCore::InheritedFlags::setBoxPack):
+        (WebCore::InheritedFlags::setMarqueeIncrement):
+        (WebCore::InheritedFlags::setMarqueeSpeed):
+        (WebCore::InheritedFlags::setMarqueeDirection):
+        (WebCore::InheritedFlags::setMarqueeBehavior):
+        (WebCore::InheritedFlags::setMarqueeLoopCount):
+        * rendering/style/StyleRareNonInheritedData.cpp:
+        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
+        (WebCore::StyleRareNonInheritedData::operator==):
+        * rendering/style/StyleRareNonInheritedData.h:
+            flexibleBox -> m_deprecatedFlexibleBox and marquee to m_marquee
+
+2011-07-01  Mike Reed  <reed@google.com>
+
+        Stop using deprecated SkDeviceFactory API
+        https://bugs.webkit.org/show_bug.cgi?id=63488
+
+        Reviewed by James Robinson.
+
+        No new tests. Check-point for removing Factory API from Skia
+
+        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
+        (WebCore::LayerTextureUpdaterSkPicture::createFrameBuffer):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        (WebCore::PlatformContextSkia::setSharedGraphicsContext3D):
+
+2011-07-01  Jeffrey Pfau  <jpfau@apple.com>
+
+        Reviewed by Adam Barth.
+
+        Move XMLDocumentParser to new folder xml/parser/
+        https://bugs.webkit.org/show_bug.cgi?id=63666
+
+        * CMakeLists.txt:
+        * GNUmakefile.am:
+        * GNUmakefile.list.am:
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+        * WebCore.pri:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.vcproj/WebCoreCommon.vsprops:
+        * WebCore.vcproj/copyForwardingHeaders.cmd:
+        * WebCore.xcodeproj/project.pbxproj:
+        * xml/parser/XMLDocumentParser.cpp:
+        (WebCore::XMLDocumentParser::pushCurrentNode):
+        (WebCore::XMLDocumentParser::popCurrentNode):
+        (WebCore::XMLDocumentParser::clearCurrentNodeStack):
+        (WebCore::XMLDocumentParser::insert):
+        (WebCore::XMLDocumentParser::append):
+        (WebCore::XMLDocumentParser::handleError):
+        (WebCore::XMLDocumentParser::enterText):
+        (WebCore::toString):
+        (WebCore::XMLDocumentParser::exitText):
+        (WebCore::XMLDocumentParser::detach):
+        (WebCore::XMLDocumentParser::end):
+        (WebCore::XMLDocumentParser::finish):
+        (WebCore::XMLDocumentParser::finishWasCalled):
+        (WebCore::createXHTMLParserErrorHeader):
+        (WebCore::XMLDocumentParser::insertErrorMessageBlock):
+        (WebCore::XMLDocumentParser::notifyFinished):
+        (WebCore::XMLDocumentParser::isWaitingForScripts):
+        (WebCore::XMLDocumentParser::pauseParsing):
+        (WebCore::XMLDocumentParser::parseDocumentFragment):
+        * xml/parser/XMLDocumentParser.h:
+        (WebCore::XMLParserContext::context):
+        (WebCore::XMLParserContext::XMLParserContext):
+        (WebCore::XMLDocumentParser::create):
+        (WebCore::XMLDocumentParser::setIsXHTMLDocument):
+        (WebCore::XMLDocumentParser::isXHTMLDocument):
+        (WebCore::XMLDocumentParser::setIsXHTMLMPDocument):
+        (WebCore::XMLDocumentParser::isXHTMLMPDocument):
+        (WebCore::XMLDocumentParser::wellFormed):
+        (WebCore::XMLDocumentParser::context):
+        * xml/parser/XMLDocumentParserLibxml2.cpp:
+        (WebCore::PendingCallbacks::~PendingCallbacks):
+        (WebCore::PendingCallbacks::create):
+        (WebCore::PendingCallbacks::appendStartElementNSCallback):
+        (WebCore::PendingCallbacks::appendEndElementNSCallback):
+        (WebCore::PendingCallbacks::appendCharactersCallback):
+        (WebCore::PendingCallbacks::appendProcessingInstructionCallback):
+        (WebCore::PendingCallbacks::appendCDATABlockCallback):
+        (WebCore::PendingCallbacks::appendCommentCallback):
+        (WebCore::PendingCallbacks::appendInternalSubsetCallback):
+        (WebCore::PendingCallbacks::appendErrorCallback):
+        (WebCore::PendingCallbacks::callAndRemoveFirstCallback):
+        (WebCore::PendingCallbacks::isEmpty):
+        (WebCore::PendingCallbacks::PendingCallbacks):
+        (WebCore::PendingCallbacks::PendingCallback::~PendingCallback):
+        (WebCore::PendingCallbacks::PendingStartElementNSCallback::~PendingStartElementNSCallback):
+        (WebCore::PendingCallbacks::PendingStartElementNSCallback::call):
+        (WebCore::PendingCallbacks::PendingEndElementNSCallback::call):
+        (WebCore::PendingCallbacks::PendingCharactersCallback::~PendingCharactersCallback):
+        (WebCore::PendingCallbacks::PendingCharactersCallback::call):
+        (WebCore::PendingCallbacks::PendingProcessingInstructionCallback::~PendingProcessingInstructionCallback):
+        (WebCore::PendingCallbacks::PendingProcessingInstructionCallback::call):
+        (WebCore::PendingCallbacks::PendingCDATABlockCallback::~PendingCDATABlockCallback):
+        (WebCore::PendingCallbacks::PendingCDATABlockCallback::call):
+        (WebCore::PendingCallbacks::PendingCommentCallback::~PendingCommentCallback):
+        (WebCore::PendingCallbacks::PendingCommentCallback::call):
+        (WebCore::PendingCallbacks::PendingInternalSubsetCallback::~PendingInternalSubsetCallback):
+        (WebCore::PendingCallbacks::PendingInternalSubsetCallback::call):
+        (WebCore::matchFunc):
+        (WebCore::OffsetBuffer::OffsetBuffer):
+        (WebCore::OffsetBuffer::readOutBytes):
+        (WebCore::switchToUTF16):
+        (WebCore::shouldAllowExternalLoad):
+        (WebCore::openFunc):
+        (WebCore::readFunc):
+        (WebCore::writeFunc):
+        (WebCore::closeFunc):
+        (WebCore::errorFunc):
+        (WebCore::XMLParserContext::createStringParser):
+        (WebCore::XMLParserContext::createMemoryParser):
+        (WebCore::XMLDocumentParser::supportsXMLVersion):
+        (WebCore::XMLDocumentParser::XMLDocumentParser):
+        (WebCore::XMLParserContext::~XMLParserContext):
+        (WebCore::XMLDocumentParser::~XMLDocumentParser):
+        (WebCore::XMLDocumentParser::doWrite):
+        (WebCore::toString):
+        (WebCore::toAtomicString):
+        (WebCore::handleElementNamespaces):
+        (WebCore::handleElementAttributes):
+        (WebCore::XMLDocumentParser::startElementNs):
+        (WebCore::XMLDocumentParser::endElementNs):
+        (WebCore::XMLDocumentParser::characters):
+        (WebCore::XMLDocumentParser::error):
+        (WebCore::XMLDocumentParser::processingInstruction):
+        (WebCore::XMLDocumentParser::cdataBlock):
+        (WebCore::XMLDocumentParser::comment):
+        (WebCore::XMLDocumentParser::startDocument):
+        (WebCore::XMLDocumentParser::endDocument):
+        (WebCore::XMLDocumentParser::internalSubset):
+        (WebCore::getParser):
+        (WebCore::hackAroundLibXMLEntityBug):
+        (WebCore::startElementNsHandler):
+        (WebCore::endElementNsHandler):
+        (WebCore::charactersHandler):
+        (WebCore::processingInstructionHandler):
+        (WebCore::cdataBlockHandler):
+        (WebCore::commentHandler):
+        (WebCore::warningHandler):
+        (WebCore::fatalErrorHandler):
+        (WebCore::normalErrorHandler):
+        (WebCore::sharedXHTMLEntity):
+        (WebCore::getXHTMLEntity):
+        (WebCore::getEntityHandler):
+        (WebCore::startDocumentHandler):
+        (WebCore::endDocumentHandler):
+        (WebCore::internalSubsetHandler):
+        (WebCore::externalSubsetHandler):
+        (WebCore::ignorableWhitespaceHandler):
+        (WebCore::XMLDocumentParser::initializeParserContext):
+        (WebCore::XMLDocumentParser::doEnd):
+        (WebCore::xmlDocPtrForString):
+        (WebCore::XMLDocumentParser::lineNumber):
+        (WebCore::XMLDocumentParser::columnNumber):
+        (WebCore::XMLDocumentParser::textPosition):
+        (WebCore::XMLDocumentParser::textPositionOneBased):
+        (WebCore::XMLDocumentParser::stopParsing):
+        (WebCore::XMLDocumentParser::resumeParsing):
+        (WebCore::XMLDocumentParser::appendFragmentSource):
+        (WebCore::attributesStartElementNsHandler):
+        (WebCore::parseAttributes):
+        * xml/parser/XMLDocumentParserQt.cpp:
+        (WebCore::EntityResolver::resolveUndeclaredEntity):
+        (WebCore::XMLDocumentParser::supportsXMLVersion):
+        (WebCore::XMLDocumentParser::XMLDocumentParser):
+        (WebCore::XMLDocumentParser::~XMLDocumentParser):
+        (WebCore::XMLDocumentParser::doWrite):
+        (WebCore::XMLDocumentParser::initializeParserContext):
+        (WebCore::XMLDocumentParser::doEnd):
+        (WebCore::XMLDocumentParser::lineNumber):
+        (WebCore::XMLDocumentParser::columnNumber):
+        (WebCore::XMLDocumentParser::textPosition):
+        (WebCore::XMLDocumentParser::textPositionOneBased):
+        (WebCore::XMLDocumentParser::stopParsing):
+        (WebCore::XMLDocumentParser::resumeParsing):
+        (WebCore::XMLDocumentParser::appendFragmentSource):
+        (WebCore::attributesStartElementNsHandler):
+        (WebCore::parseAttributes):
+        (WebCore::prefixFromQName):
+        (WebCore::handleElementNamespaces):
+        (WebCore::handleElementAttributes):
+        (WebCore::XMLDocumentParser::parse):
+        (WebCore::XMLDocumentParser::startDocument):
+        (WebCore::XMLDocumentParser::parseStartElement):
+        (WebCore::XMLDocumentParser::parseEndElement):
+        (WebCore::XMLDocumentParser::parseCharacters):
+        (WebCore::XMLDocumentParser::parseProcessingInstruction):
+        (WebCore::XMLDocumentParser::parseCdata):
+        (WebCore::XMLDocumentParser::parseComment):
+        (WebCore::XMLDocumentParser::endDocument):
+        (WebCore::XMLDocumentParser::hasError):
+        (WebCore::XMLDocumentParser::parseDtd):
+        * xml/parser/XMLDocumentParserScope.cpp:
+        (WebCore::XMLDocumentParserScope::XMLDocumentParserScope):
+        (WebCore::XMLDocumentParserScope::~XMLDocumentParserScope):
+
+2011-07-01  Vangelis Kokkevis  <vangelis@chromium.org>
+
+        Reviewed by James Robinson.
+
+        [chromium] Reserve all tile textures at layer update time to guarantee
+        that they will be available at draw time.
+        https://bugs.webkit.org/show_bug.cgi?id=63760
+
+        In addition, this patch unreserves textures used by RenderSurface's
+        right after the RenderSurface has been used to free up memory for
+        subsequent RenderSurfaces.
+        
+        This patch also "fixes" the pages that display a blue background when
+        running out of texture memory as the root layer tiles get reserved first
+        and are guaranteed to get textures.
+
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerChromium::ContentLayerChromium):
+        (WebCore::ContentLayerChromium::visibleLayerRect):
+        (WebCore::ContentLayerChromium::setIsMask):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        * platform/graphics/chromium/ImageLayerChromium.cpp:
+        (WebCore::ImageLayerChromium::paintContentsIfDirty):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::paintLayerContents):
+        (WebCore::LayerRendererChromium::drawLayer):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        * platform/graphics/chromium/LayerTexture.cpp:
+        (WebCore::LayerTexture::unreserve):
+        * platform/graphics/chromium/LayerTexture.h:
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::prepareToUpdate):
+        (WebCore::LayerTilerChromium::updateRect):
+        (WebCore::LayerTilerChromium::drawTiles):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::releaseContentsTexture):
+        * platform/graphics/chromium/RenderSurfaceChromium.h:
+        * platform/graphics/chromium/TextureManager.cpp:
+        (WebCore::TextureManager::unprotectTexture):
+        * platform/graphics/chromium/TextureManager.h:
+
+2011-07-01  Jungshik Shin  <jshin@chromium.org>
+
+        Reviewed by Alexey Proskuryakov.
+
+        Allow generic font family settings per script code.
+        https://bugs.webkit.org/show_bug.cgi?id=20797
+
+        Make generic font family getters/setters accept an additional
+        argument (script code). It has a default value so that if an embedder
+        does not have/want a per-script font family setting, call-sites
+        don't have to be changed.
+        This is to prepare for fixing bug 10874 (font selection is not
+        language-dependent) and bug 18085.
+
+        uscript.h has been updated to that of ICU 3.6 (the version of ICU on
+        Mac OS 10.5)
+
+        There should be no change in layout and no new layout test
+        is added.
+
+        * WebCore.exp.in:
+        * icu/unicode/uscript.h: updated to ICU 4.6
+        * page/Settings.cpp:
+        (WebCore::setGenericFontFamilyMap): helper to set generic family per script
+        (WebCore::getGenericFontFamilyForScript): helper function used by getters for fooFontFamily.
+        (WebCore::Settings::standardFontFamily):
+        (WebCore::Settings::setStandardFontFamily):
+        (WebCore::Settings::fixedFontFamily):
+        (WebCore::Settings::setFixedFontFamily):
+        (WebCore::Settings::serifFontFamily):
+        (WebCore::Settings::setSerifFontFamily):
+        (WebCore::Settings::sansSerifFontFamily):
+        (WebCore::Settings::setSansSerifFontFamily):
+        (WebCore::Settings::cursiveFontFamily):
+        (WebCore::Settings::setCursiveFontFamily):
+        (WebCore::Settings::fantasyFontFamily):
+        (WebCore::Settings::setFantasyFontFamily):
+        * page/Settings.h: setter and getter for FooFontFamily have a new optional argument, scriptCode.
+
+2011-07-01  Tony Chang  <tony@chromium.org>
+
+        Reviewed by Ojan Vafai.
+
+        rename StyleFlexibleBoxData to StyleDeprecatedFlexibleBoxData
+        https://bugs.webkit.org/show_bug.cgi?id=63773
+
+        We will have a similar struct to hold CSS3 flexible box data, so
+        this makes way for the new class.
+        I will rename the member variable in RenderStyle.h in a follow up
+        change.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.order:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * rendering/style/RenderStyle.h:
+        * rendering/style/StyleAllInOne.cpp:
+        * rendering/style/StyleDeprecatedFlexibleBoxData.cpp:
+        (WebCore::StyleDeprecatedFlexibleBoxData::StyleDeprecatedFlexibleBoxData):
+        (WebCore::StyleDeprecatedFlexibleBoxData::operator==):
+        * rendering/style/StyleDeprecatedFlexibleBoxData.h:
+        (WebCore::StyleDeprecatedFlexibleBoxData::create):
+        (WebCore::StyleDeprecatedFlexibleBoxData::copy):
+        (WebCore::StyleDeprecatedFlexibleBoxData::operator!=):
+        * rendering/style/StyleRareNonInheritedData.h:
+
+2011-07-01  Hans Wennborg  <hans@chromium.org>
+
+        Reviewed by Tony Chang.
+
+        IndexedDB: Fix constants for webkitIDBTransaction.READ_WRITE/READ_ONLY
+        https://bugs.webkit.org/show_bug.cgi?id=63754
+
+        Fix values for the webkitIDBTransaction.READ_WRITE/READ_ONLY
+        constants. Douglas Stockwell pointed out that these were reverse
+        of what the spec says.
+
+        * storage/IDBTransaction.h:
+        * storage/IDBTransaction.idl:
+
+2011-07-01  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch positionForPoint to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63774
+
+        Switching positionForPoint functions to new layout unit abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/RenderBR.cpp:
+        (WebCore::RenderBR::positionForPoint):
+        * rendering/RenderBR.h:
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::positionForPoint):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::positionForPoint):
+        * rendering/RenderBox.h:
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::positionForPoint):
+        * rendering/RenderFileUploadControl.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::positionForPoint):
+        * rendering/RenderInline.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::positionForPoint):
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::positionForPoint):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::positionForPoint):
+        * rendering/RenderText.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlInnerBlock::positionForPoint):
+        * rendering/RenderTextControlSingleLine.h:
+        * rendering/svg/RenderSVGInlineText.cpp:
+        (WebCore::RenderSVGInlineText::positionForPoint):
+        * rendering/svg/RenderSVGInlineText.h:
+        * rendering/svg/RenderSVGText.cpp:
+        (WebCore::RenderSVGText::positionForPoint):
+        * rendering/svg/RenderSVGText.h:
+
+2011-07-01  Andrew Scherkus  <scherkus@chromium.org>
+
+        Reviewed by Darin Fisher.
+
+        Re-enable WTF_USE_WEBAUDIO_FFMPEG for Chromium
+        https://bugs.webkit.org/show_bug.cgi?id=63783
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-07-01  Patrick Gansterer  <paroga@webkit.org>
+
+        Reviewed by Daniel Bates.
+
+        [CMake] Don't compile unused bindings
+        https://bugs.webkit.org/show_bug.cgi?id=63741
+
+        * UseJSC.cmake: Added IF (ENABLE_XXX) around files.
+
+2011-07-01  Joone Hur  <joone.hur@collabora.co.uk>
+
+        Reviewed by Martin Robinson.
+
+        [GTK] Add DeviceOrientation feature
+        https://bugs.webkit.org/show_bug.cgi?id=63720
+
+        Add DeviceMotionClientGtk.cpp and DeviceOrientationClientGtk.cpp to WebKitGtk+ build.
+
+        * GNUmakefile.am: Add DeviceMotionClientGtk.cpp, DeviceOrientationClientGtk.cpp.
+
+2011-07-01  Kentaro Hara  <haraken@google.com>
+
+        Reviewed by Kent Tamura.
+
+        Disallow clicking an [X] button in 'search' input forms when 'disabled' attribute or 'readonly' attribute is set.
+        https://bugs.webkit.org/show_bug.cgi?id=63709
+
+        Ignore a cancel button event on a 'search' input form if 'disabled' attribute or
+        'readonly' attribute is set to the input form.
+
+        Test: fast/forms/search-disabled-readonly.html
+
+        * html/shadow/TextControlInnerElements.cpp:
+        (WebCore::SearchFieldCancelButtonElement::defaultEventHandler):
+
+2011-06-30  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: [Chromium] Fix heap snapshots in a remote debugging session from Safari.
+        https://bugs.webkit.org/show_bug.cgi?id=63703
+
+        * inspector/front-end/HeapSnapshotWorker.js:
+        (.Function.prototype.bind.return.bound):
+        (.Function.prototype.bind):
+
+2011-07-01  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVGAnimatedLengthListAnimator does not take additive="sum" into accout
+        https://bugs.webkit.org/show_bug.cgi?id=63705
+
+        Added support for additive animations to SVGAnimatedLengthListAnimator. Don't clear the animatedList if not
+        necessary.
+
+        SVGLength unit gets animated as well now. We used to take the unit of 'from' all the time.
+
+        Tests: svg/animations/svglength-animation-unitType.html
+               svg/animations/svglengthlist-animation-5.html
+
+        * svg/SVGAnimatedLength.cpp:
+        (WebCore::SVGAnimatedLengthAnimator::calculateAnimatedValue): Code clean-up and support for unit animation.
+        * svg/SVGAnimatedLengthList.cpp: Add support for additive animations.
+        (WebCore::SVGAnimatedLengthListAnimator::calculateAnimatedValue):
+        * svg/SVGLength.cpp:
+        (WebCore::SVGLength::SVGLength):
+        (WebCore::SVGLength::setValue): New setValue that gets the LengthType and UnitType as argument for supporting animations of units as well.
+        * svg/SVGLength.h:
+
+2011-07-01  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVGAnimatedType should support SVGAnimatedInteger animation
+        https://bugs.webkit.org/show_bug.cgi?id=63789
+        
+        Follow up of "SVGAnimation should use direct unit animation for SVGLength": https://bugs.webkit.org/show_bug.cgi?id=61368
+        This patch continues the conversion to the new concept of SVGAnimatorFactory with SVGAnimatedInteger.
+        
+        SVGAnimatedInteger is used for some attributes of SVG filter effects. The animation of those attributes work after this patch.
+
+        Test: svg/animations/svginteger-animation-1.html
+
+        * CMakeLists.txt: Added file to build system.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * svg/SVGAllInOne.cpp: Ditto.
+        * svg/SVGAnimateElement.cpp: Make use of AnimatedInteger.
+        (WebCore::SVGAnimateElement::determineAnimatedAttributeType):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        * svg/SVGAnimatedInteger.cpp: Added. The new animator for SVGAnimatedInteger.
+        (WebCore::SVGAnimatedIntegerAnimator::SVGAnimatedIntegerAnimator):
+        (WebCore::SVGAnimatedIntegerAnimator::constructFromString):
+        (WebCore::SVGAnimatedIntegerAnimator::calculateFromAndToValues):
+        (WebCore::SVGAnimatedIntegerAnimator::calculateFromAndByValues):
+        (WebCore::SVGAnimatedIntegerAnimator::calculateAnimatedValue):
+        (WebCore::SVGAnimatedIntegerAnimator::calculateDistance):
+        * svg/SVGAnimatedInteger.h:
+        (WebCore::SVGAnimatedIntegerAnimator::~SVGAnimatedIntegerAnimator):
+        * svg/SVGAnimatedType.cpp: Added handler for AnimatedInteger.
+        (WebCore::SVGAnimatedType::~SVGAnimatedType):
+        (WebCore::SVGAnimatedType::createInteger):
+        (WebCore::SVGAnimatedType::integer):
+        (WebCore::SVGAnimatedType::valueAsString):
+        (WebCore::SVGAnimatedType::setValueAsString):
+        * svg/SVGAnimatedType.h:
+        * svg/SVGAnimatorFactory.h:
+        (WebCore::SVGAnimatorFactory::create):
+
+2011-06-30  Eugene Klyuchnikov  <eustas.bug@gmail.com>
+
+        Reviewed by Pavel Feldman.
+
+        WebInspector: Performance / memory allocation issue in WebInspector.TextEditorModel.prototype._replaceTabsIfNeeded
+        https://bugs.webkit.org/show_bug.cgi?id=40447
+
+        Test: inspector/editor/text-editor-model-replace-tabs.html
+
+        * inspector/front-end/TextEditorModel.js:
+        (WebInspector.TextEditorModel.prototype._replaceTabsIfNeeded): avoid looped production of tail substrings 
+
+2011-06-30  Kent Tamura  <tkent@chromium.org>
+
+        Reviewed by Tony Chang.
+
+        [Chromium] Input type="range" slider thumb is rendered upside down on Mac OS X.
+        https://bugs.webkit.org/show_bug.cgi?id=63697
+
+        http://trac.webkit.org/changeset/86261 added a thumb flipping code
+        for Mac-WebKit2. Chromium also needs it.
+
+        * rendering/RenderThemeMac.mm:
+        (WebCore::RenderThemeMac::paintSliderThumb): Always flip vertically on Chromium.
+
+2011-06-30  Kenichi Ishibashi  <bashi@chromium.org>
+
+        Reviewed by Simon Fraser.
+
+        [Chromium] -webkit-text-stroke doesn't affect with non-zero width border property
+        https://bugs.webkit.org/show_bug.cgi?id=63698
+
+        Restore the stroke style when it is modified in RenderObject::drawLineForBoxSide() to show text stroke correctly.
+
+        Test: platform/chromium/fast/text/text-stroke-with-border.html
+
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::drawLineForBoxSide): Save/restore the stroke style.
+
+2011-06-30  Gwang Yoon Hwang  <ryumiel@company100.net>
+
+        Reviewed by Nate Chapin.
+
+        [V8] Add ENABLE(INSPECTOR) guards around v8 custom bindings.
+        https://bugs.webkit.org/show_bug.cgi?id=63442
+
+        No new tests needed.
+
+        * bindings/v8/custom/V8InjectedScriptHostCustom.cpp:
+        * bindings/v8/custom/V8InspectorFrontendHostCustom.cpp:
+
+2011-06-30  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Remove positionForCoordinates
+        https://bugs.webkit.org/show_bug.cgi?id=63765
+
+        Removing positionForCoordinate. We should always use positionForPoint. Also cleaning up
+        RenderBox's implementation of positionForPoint.
+
+        No new tests, there should be no functionality changes.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::stringValue): Removing dead, or at least untested, code and
+        adding an ASSERT_NOT_REACHED.
+        (WebCore::AccessibilityRenderObject::visiblePositionRangeForLine):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::positionForPoint): cleaning up some ugly code.
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::positionForPoint):
+        * rendering/RenderObject.cpp:
+        * rendering/RenderObject.h:
+
+2011-06-30  Zhenyao Mo  <zmo@google.com>
+
+        Reviewed by Kenneth Russell.
+
+        Improve WebGL object lifetime management in WebGLRenderingContext
+        https://bugs.webkit.org/show_bug.cgi?id=63635
+
+        * html/canvas/WebGLRenderingContext.cpp:
+        (WebCore::WebGLRenderingContext::getAttachedShaders): Use cached objects instead of querying the underlying GL.
+        (WebCore::WebGLRenderingContext::getFramebufferAttachmentParameter): Ditto.
+        (WebCore::WebGLRenderingContext::detachAndRemoveAllObjects): Multiple loop because objects might be removed from the table within an iteration.
+        * html/canvas/WebGLRenderingContext.h:
+
+2011-06-30  Rafael Brandao  <rafael.lobo@openbossa.org>
+
+        Reviewed by Andreas Kling.
+
+        [Qt] build-webkit warning: cannot find file ElementShadowPseudoId.h
+        https://bugs.webkit.org/show_bug.cgi?id=63747
+
+        Removed reference to ElementShadowPseudoId.h that no longer exists.
+
+        * WebCore.pro:
+
+2011-06-30  Anders Carlsson  <andersca@apple.com>
+
+        Fix clang build.
+
+        Remove the complete Widget constructor from the .exp.in file; since Widget is an abstract class,
+        its complete constructor can never be called and clang has stopped emitting it altogether.
+
+        * WebCore.exp.in:
+
+2011-06-30  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch paintingRootRect and RenderObject repaint methods to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63746
+
+        Switching paintingRootRect and RenderObject repaint functions over to the
+        new layout unit abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::repaintDuringLayoutIfMoved):
+        * rendering/RenderBox.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::paintingRootRect):
+        (WebCore::RenderObject::paint):
+        (WebCore::RenderObject::repaintUsingContainer):
+        (WebCore::RenderObject::repaintRectangle):
+        (WebCore::RenderObject::repaintAfterLayoutIfNeeded):
+        (WebCore::RenderObject::repaintDuringLayoutIfMoved):
+        * rendering/RenderObject.h:
+
+2011-06-30  Cary Clark  <caryclark@google.com>
+
+        Reviewed by James Robinson.
+
+        Use Skia if Skia on Mac Chrome is enabled
+        https://bugs.webkit.org/show_bug.cgi?id=62999
+
+        No new tests. This does not affect existing
+        functionality.
+
+        * WebCore.gyp/WebCore.gyp:
+        Include Skia and related files and exclude CG
+        and related files when building Chromium for Skia
+        on the Mac.
+
+        * loader/cache/CachedFont.cpp:
+        Rename CHROME to CHROMIUM.
+
+        * platform/chromium/DragImageRef.h:
+        * platform/graphics/FloatPoint.h:
+        * platform/graphics/FloatRect.h:
+        * platform/graphics/FloatSize.h:
+        * platform/graphics/FontPlatformData.h:
+        (WebCore::FontPlatformData::hash):
+        * platform/graphics/GlyphBuffer.h:
+        (WebCore::GlyphBuffer::advanceAt):
+        (WebCore::GlyphBuffer::add):
+        (WebCore::GlyphBuffer::expandLastAdvance):
+        * platform/graphics/IntPoint.h:
+        * platform/graphics/IntRect.h:
+        * platform/graphics/IntSize.h:
+        * platform/graphics/SimpleFontData.h:
+        * platform/graphics/cg/FloatPointCG.cpp:
+        * platform/graphics/cg/FloatRectCG.cpp:
+        * platform/graphics/cg/FloatSizeCG.cpp:
+        * platform/graphics/cg/IntPointCG.cpp:
+        * platform/graphics/cg/IntRectCG.cpp:
+        * platform/graphics/cg/IntSizeCG.cpp:
+        * platform/graphics/mac/FontCustomPlatformData.cpp:
+        (WebCore::FontCustomPlatformData::~FontCustomPlatformData):
+        (WebCore::createFontCustomPlatformData):
+        * platform/graphics/mac/FontCustomPlatformData.h:
+        (WebCore::FontCustomPlatformData::FontCustomPlatformData):
+        Ditto.
+
+2011-06-30  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        Update SVG position values on SVG DOM updates
+        https://bugs.webkit.org/show_bug.cgi?id=62439
+
+        Test: svg/custom/crash-textPath-attributes.html
+
+        * rendering/svg/RenderSVGInline.cpp:
+        (WebCore::RenderSVGInline::destroy): Notify our containing RenderSVGText that it needs
+        to update its positioning information.
+
+        * rendering/svg/SVGInlineFlowBox.cpp:
+        (WebCore::SVGInlineFlowBox::calculateBoundaries): Check the type of the InlineBox
+        like the rest of the code (fixes an ASSERT_NOT_REACHED in InlineBox::calculateBoudaries).
+
+        * rendering/svg/SVGTextLayoutAttributesBuilder.cpp:
+        (WebCore::SVGTextLayoutAttributesBuilder::buildLayoutAttributesForTextSubtree): Clear
+        our cached layout attributes every time we invalidate them. This avoids keeping stale
+        attribute that have a backpointer to a RenderObject.
+
+2011-06-30  Sreeram Ramachandran  <sreeram@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Suppress modal JavaScript/HTML dialogs during unload events
+        https://bugs.webkit.org/show_bug.cgi?id=56397
+
+        Allows clients to specify whether to show alerts during unload handlers.
+        When checking for whether a page dismissal event is being dispatched,
+        it's important to check all frames on the page (otherwise it becomes a
+        loophole easily exploited).
+
+        Test: fast/loader/page-dismissal-modal-dialogs.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::FrameLoader):
+        (WebCore::FrameLoader::stopLoading):
+        (WebCore::FrameLoader::loadURL):
+        (WebCore::FrameLoader::loadWithDocumentLoader):
+        (WebCore::FrameLoader::stopAllLoaders):
+        (WebCore::FrameLoader::fireBeforeUnloadEvent):
+        * loader/FrameLoader.h:
+        (WebCore::FrameLoader::pageDismissalEventBeingDispatched):
+        * loader/cache/CachedResourceLoader.cpp:
+        (WebCore::CachedResourceLoader::requestImage):
+        * page/Chrome.cpp:
+        (WebCore::canRunModalIfDuringPageDismissal):
+        (WebCore::Chrome::canRunModalNow):
+        (WebCore::Chrome::runJavaScriptAlert):
+        (WebCore::Chrome::runJavaScriptConfirm):
+        (WebCore::Chrome::runJavaScriptPrompt):
+        * page/Chrome.h:
+        * page/ChromeClient.h:
+        (WebCore::ChromeClient::shouldRunModalDialogDuringPageDismissal):
+        * page/DOMWindow.cpp:
+        (WebCore::DOMWindow::showModalDialog):
+
+2011-06-30  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        Assertion failure in RenderSVGInlineText::characterStartsNewTextChunk
+        https://bugs.webkit.org/show_bug.cgi?id=63076
+
+        Tests: svg/custom/crash-text-in-textpath.svg
+               svg/custom/text-node-in-text-invalidated.svg
+
+        The problem was that we did not call setNeedsPositionUpdate on RenderSVGText. When
+        doing our layout, we would not update the attributes on our SVGRenderInlineText as
+        we would not lay it out.
+
+        This was caused by childrenChanged being overridden on SVGTextPositioningElement but
+        not on SVGTextPathElement.
+
+        As both classes shared the same mother class, it made sense to move the logic here.
+        There should be no other side effects as SVGTextPathElement and SVGTextPositioningElement
+        are the only classes deriving from SVGTextContentElement.
+
+        * svg/SVGTextContentElement.cpp:
+        (WebCore::SVGTextContentElement::childrenChanged): Moved this method from SVGTextPositioningElement.
+        * svg/SVGTextContentElement.h:
+        * svg/SVGTextPositioningElement.cpp:
+        (WebCore::SVGTextPositioningElement::svgAttributeChanged): Updated after updatePositioningValuesInRenderer
+        removal, replaced by RenderSVGText::locateRenderSVGTextAncestor.
+        * svg/SVGTextPositioningElement.h:
+
+2011-06-30  Patrick Gansterer  <paroga@webkit.org>
+
+        Unreviewed build fix for !ENABLE(DATABASE) after r84789.
+
+        * bindings/js/JSDOMBinding.cpp:
+
+2011-06-30  Anders Carlsson  <andersca@apple.com>
+
+        Reviewed by Dan Bernstein.
+
+        More ScrollableArea scaffolding
+        https://bugs.webkit.org/show_bug.cgi?id=63678
+
+        Add a way to get the enclosing scrollable area for a given scrollable area.
+        Also, add ScrollableArea::isPinnedInDirectionOfScrollDelta.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::enclosingScrollableArea):
+        Return 0 for now.
+
+        * page/FrameView.h:
+        Add FrameView::enclosingScrollableArea.
+
+        * platform/ScrollableArea.cpp:
+        (WebCore::ScrollableArea::isPinnedInDirectionOfScrollDelta):
+        Return whether the area is pinned in the direction of the scroll delta.
+
+        * platform/ScrollableArea.h:
+        Add new member functions.
+
+        * platform/chromium/FramelessScrollView.cpp:
+        (WebCore::FramelessScrollView::enclosingScrollableArea):
+        * platform/chromium/FramelessScrollView.h:
+        Add stub.
+
+        * platform/win/PopupMenuWin.h:
+        (WebCore::PopupMenuWin::enclosingScrollableArea):
+        Always return 0.
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::enclosingScrollableLayer):
+        Add helper function.
+
+        (WebCore::RenderLayer::scrollByRecursively):
+        Use the new enclosingScrollableLayer helper function.
+
+        (WebCore::RenderLayer::enclosingScrollableArea):
+        Return the enclosing scrollable area.
+
+        * rendering/RenderLayer.h:
+        Add new member function.
+
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::enclosingScrollableArea):
+        Return 0 for now.
+        
+        * rendering/RenderListBox.h:
+        Add new member function.
+
+2011-06-30  Martin Robinson  <mrobinson@igalia.com>
+
+        Reviewed by Anders Carlsson.
+
+        [GTK] Crash observed with nspluginwrapper and flash
+        https://bugs.webkit.org/show_bug.cgi?id=62249
+
+        Test: plugins/invalidate-rect-with-null-npp-argument.html
+
+        * plugins/npapi.cpp:
+        (NPN_InvalidateRect): Guard against null instances here.
+
+2011-06-30  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch availableWidth/Height, logicalLeft/RightOffsetForLine to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63671
+
+        Switch availableWidth/Height, logicalLeft/RightOffsetForLine functions over to the
+        new layout unit abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::logicalLeftOffsetForLine):
+        (WebCore::RenderBlock::logicalRightOffsetForLine):
+        (WebCore::RenderBlock::availableLogicalWidthForLine):
+        (WebCore::RenderBlock::availableLogicalWidth):
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::logicalRightOffsetForLine):
+        (WebCore::RenderBlock::logicalLeftOffsetForLine):
+        (WebCore::RenderBlock::startOffsetForLine):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::availableLogicalHeight):
+        (WebCore::RenderBox::availableLogicalHeightUsing):
+        * rendering/RenderBox.h:
+        (WebCore::RenderBox::availableLogicalWidth):
+        (WebCore::RenderBox::availableWidth):
+        (WebCore::RenderBox::availableHeight):
+
+2011-06-30  Adam Barth  <abarth@webkit.org>
+
+        Remove useless ASSERT that breaks the build.
+
+        * dom/StyledElement.cpp:
+        (WebCore::parseColorStringWithCrazyLegacyRules):
+
+2011-06-30  Tab Atkins  <jackalmage@gmail.com>
+
+        Reviewed by Adam Barth.
+
+        Fix legacy color attribute parsing to match HTML spec
+        https://bugs.webkit.org/show_bug.cgi?id=63029
+
+        Relevant spec link: http://www.whatwg.org/specs/web-apps/current-work/complete/common-microsyntaxes.html#rules-for-parsing-a-legacy-color-value
+        Fix legacy color attribute parsing (<body bgcolor>, <font color>, etc.) to match the HTML spec and more closely match other browsers.
+
+        Test: fast/dom/attribute-legacy-colors.html
+
+        * dom/StyledElement.cpp:
+        (WebCore::StyledElement::addCSSColor):
+
+2011-06-28  Hans Wennborg  <hans@chromium.org>
+
+        Reviewed by Tony Chang.
+
+        IndexedDB: Prepare for running layout tests with LevelDB
+        https://bugs.webkit.org/show_bug.cgi?id=63593
+
+        Migration of data from SQLite to LevelDB must be done before the
+        m_backingStore map is checked for an open LevelDB, because if a
+        previous layout test has used LevelDB, it will be in the
+        m_backingStore map.
+
+        Covered by existing layout tests.
+
+        * storage/IDBFactoryBackendImpl.cpp:
+        (WebCore::IDBFactoryBackendImpl::open):
+
+2011-06-30  Pavel Feldman  <pfeldman@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: introduce "filter" icons for timeline panel and elements sidebar.
+        https://bugs.webkit.org/show_bug.cgi?id=63731
+
+        * inspector/front-end/EventListenersSidebarPane.js:
+        * inspector/front-end/Images/paneFilterButtons.png: Added.
+        * inspector/front-end/Images/statusbarButtonGlyphs.png:
+        * inspector/front-end/StylesSidebarPane.js:
+        * inspector/front-end/inspector.css:
+        (.pane > .title > select):
+        (.pane > .title > select.select-settings):
+        (.pane > .title > select.select-filter):
+        (.timeline-filter-status-bar-item .glyph):
+
+2011-06-28  Hans Wennborg  <hans@chromium.org>
+
+        Reviewed by Tony Chang.
+
+        IndexedDB: Support for deleteIndex with LevelDB backing store
+        https://bugs.webkit.org/show_bug.cgi?id=63539
+
+        Covered by storage/indexeddb/mozilla/remove-index.html.
+
+        * storage/IDBLevelDBBackingStore.cpp:
+        (WebCore::IDBLevelDBBackingStore::deleteIndex):
+
+2011-06-30  Abhishek Arya  <inferno@chromium.org>
+
+        Reviewed by Ryosuke Niwa.
+
+        Crash when calling DOMSubtreeModified event when extracting range
+        contents.
+        https://bugs.webkit.org/show_bug.cgi?id=63650
+
+        Convert a few nodes to RefPtrs and add commonRoot verification checks
+        for Range::processContents.
+
+        Tests: fast/dom/Range/range-extract-contents-event-fire-crash.html
+               fast/dom/Range/range-extract-contents-event-fire-crash2.html
+
+        * dom/Range.cpp:
+        (WebCore::childOfCommonRootBeforeOffset):
+        (WebCore::Range::processContents):
+        (WebCore::Range::processContentsBetweenOffsets):
+        (WebCore::Range::processAncestorsAndTheirSiblings):
+
+2011-06-30  Dan Bernstein  <mitz@apple.com>
+
+        Reviewed by Adele Peterson.
+
+        Add +[WebView _allowsRoundingHacks]
+        https://bugs.webkit.org/show_bug.cgi?id=63734
+
+        * WebCore.exp.in: Export TextRun::allowsRoundingHacks().
+        * platform/graphics/TextRun.cpp:
+        (WebCore::TextRun::allowsRoundingHacks): Added this accessor.
+        * platform/graphics/TextRun.h:
+
+2011-06-30  Patrick Gansterer  <paroga@webkit.org>
+
+        Reviewed by Adam Roben.
+
+        [WIN] Don't redefine the keyboard codes
+        https://bugs.webkit.org/show_bug.cgi?id=63726
+
+        Only define the codes when undefined.
+        r64957 fixed this problem for COMPILER(MINGW) but not for OS(WINCE).
+
+        * platform/WindowsKeyboardCodes.h:
+
+2011-06-30  Yury Semikhatsky  <yurys@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: hide "Enabled background events collection" option in context menu until the setting is persisted
+        https://bugs.webkit.org/show_bug.cgi?id=63708
+
+        The option has no much sense if it is not preserved between browser restarts.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkPanel.prototype._contextMenu):
+
+2011-06-30  Patrick Gansterer  <paroga@webkit.org>
+
+        Reviewed by Darin Adler.
+
+        Remove dependnecy on IDL generation for disabled features in JSC bindings
+        https://bugs.webkit.org/show_bug.cgi?id=63718
+
+        Move the #if ENABLE() line directly after #include "config.h".
+        This enables us to compile all files even when we don't generate the IDL output.
+
+        * bindings/js/IDBBindingUtilities.cpp:
+        * bindings/js/JSConsoleCustom.cpp:
+        * bindings/js/JSCustomSQLStatementErrorCallback.cpp:
+        * bindings/js/JSCustomXPathNSResolver.cpp:
+        * bindings/js/JSDOMApplicationCacheCustom.cpp:
+        * bindings/js/JSDeviceMotionEventCustom.cpp:
+        * bindings/js/JSDeviceOrientationEventCustom.cpp:
+        * bindings/js/JSInjectedScriptHostCustom.cpp:
+        * bindings/js/JSInjectedScriptManager.cpp:
+        * bindings/js/JSInspectorFrontendHostCustom.cpp:
+        * bindings/js/JSJavaScriptCallFrameCustom.cpp:
+        * bindings/js/JSSQLResultSetRowListCustom.cpp:
+        * bindings/js/JSSQLTransactionCustom.cpp:
+        * bindings/js/JSSQLTransactionSyncCustom.cpp:
+        * bindings/js/JSSVGElementInstanceCustom.cpp:
+        * bindings/js/JSStorageCustom.cpp:
+        * bindings/js/JSTouchCustom.cpp:
+        * bindings/js/JSTouchListCustom.cpp:
+        * bindings/js/JSXPathResultCustom.cpp:
+        * bindings/js/JavaScriptCallFrame.cpp:
+        * bindings/js/PageScriptDebugServer.cpp:
+        * bindings/js/ScriptDebugServer.cpp:
+        * bindings/js/ScriptGCEvent.cpp:
+        * bindings/js/ScriptProfile.cpp:
+        * bindings/js/WorkerScriptDebugServer.cpp:
+
+2011-06-30  Alexander Pavlov  <apavlov@chromium.org>
+
+        Reviewed by Kent Tamura.
+
+        [Chromium] Autofill suggestions appear in upper left corner after input change
+        https://bugs.webkit.org/show_bug.cgi?id=63702
+
+        This change fixes a few popup layout issues, some of which have existed for quite a while:
+        - the absence of the ChromeClientImpl::screenToWindow() implementation (the method used to always return (0, 0));
+        - the confusion of window and screen coordinates passed into the autofill popup client's setWindowRect() method;
+        - the use of the current frameRect() width as the target element's width (which was wrong when refreshing
+          a popup resized during the initial layout (e.g. made wider than the target element)).
+
+        No new tests, as this is a change to platform-specific widget code. The test case is provided in the bug description.
+
+        * platform/chromium/PopupMenuChromium.cpp:
+        (WebCore::PopupContainer::layoutAndGetRTLOffset): Use original target element width, not frameRect().width(),
+        since the latter gets updated if the popup is not the same width as the target element.
+        (WebCore::PopupContainer::refresh): Restore only the popup bounds rather than its original rectangle,
+        since it sometimes breaks the invalidation region and layout.
+
+2011-06-30  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r90102.
+        http://trac.webkit.org/changeset/90102
+        https://bugs.webkit.org/show_bug.cgi?id=63714
+
+        Lots of tests asserting beneath
+        SVGSMILElement::findInstanceTime (Requested by aroben on
+        #webkit).
+
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::SVGSMILElement::findInstanceTime):
+
+2011-06-30  Andrey Kosyakov  <caseq@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: remove ExtensionAPISchema.json
+        https://bugs.webkit.org/show_bug.cgi?id=63687
+
+        * inspector/front-end/ExtensionAPISchema.json: Removed.
+
+2011-06-30  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Unreviewed build fix for chromium.
+
+        * inspector/CodeGeneratorInspector.pm:
+
+2011-06-30  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Unreviewed build fix for mac.
+
+        * inspector/CodeGeneratorInspector.pm:
+
+2011-06-30  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: Protocol: error object needs some improvement.
+        https://bugs.webkit.org/show_bug.cgi?id=63707
+
+        Current implementation is not useful in the code.
+        We need to have toString implementation with nice formatting
+        I'd like to use error.message property as the main place for the error's text.
+
+        * inspector/CodeGeneratorInspector.pm:
+
+2011-06-30  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: [Chromium] Support annotations for arrays in heap profiler.
+        https://bugs.webkit.org/show_bug.cgi?id=63690
+
+        * inspector/front-end/DetailedHeapshotGridNodes.js:
+        (WebInspector.HeapSnapshotGenericObjectNode.prototype.get data):
+
+
+2011-06-30  Patrick Gansterer  <paroga@webkit.org>
+
+        Unreviewed build fix for !ENABLE(SVG_ANIMATION) after r88663, r89187, r89220, r89431 and r89661.
+
+        * svg/SVGAnimatedAngle.h:
+        * svg/SVGAnimatedLength.h:
+        * svg/SVGAnimatedNumber.h:
+        * svg/SVGAnimatedRect.h:
+        * svg/SVGAnimatedString.h:
+
+2011-06-30  Gabor Loki  <loki@webkit.org>
+
+        Reviewed by Csaba Osztrogonác.
+
+        Fixed several style and typo issues after r90091.
+        https://bugs.webkit.org/show_bug.cgi?id=63692
+
+        Rename yStart to extremaStartY during computing extremas
+
+        * platform/graphics/filters/FEMorphology.cpp:
+        (WebCore::FEMorphology::platformApplyGeneric):
+        * platform/graphics/filters/FEMorphology.h:
+
+2011-06-30  Oliver Varga  <Varga.Oliver@stud.u-szeged.hu>
+
+        Reviewed by Nikolas Zimmermann.
+
+        Speed up SVGSMILElement::findInstanceTime.
+        https://bugs.webkit.org/show_bug.cgi?id=61025
+
+        Replace the linear search to binary search on ordered list because
+        the previous searches from the beginning was not efficient.
+
+        No new tests this is only a performance tweak.
+
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::extractTimeFromVector):
+        (WebCore::SVGSMILElement::findInstanceTime):
+
+2011-06-30  Kentaro Hara  <haraken@google.com>
+
+        Reviewed by Kent Tamura.
+
+        Change the label of an HTML5 file chooser button to "Choose Files"
+        https://bugs.webkit.org/show_bug.cgi?id=49245
+
+        We should notify capability of multiple files to users.
+
+        Test: fast/forms/input-file-label.html
+
+        * English.lproj/Localizable.strings:
+        * html/FileInputType.cpp:
+        (WebCore::UploadButtonElement::createForMultiple): Constructs a multiple file chooser button.
+        (WebCore::FileInputType::createShadowSubtree): Constructs a single/multiple file chooser button depending on 'multiple' attribute.
+        (WebCore::FileInputType::multipleAttributeChanged): Updates the label of the file chooser button.
+        * html/FileInputType.h:
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::parseMappedAttribute): Updates the shadow tree of the file chooser button when 'multiple' attribute is set or unset.
+        * html/InputType.cpp:
+        (WebCore::InputType::multipleAttributeChanged): Virtual method to be overridden by FileInputType.
+        * html/InputType.h:
+        * platform/DefaultLocalizationStrategy.cpp:
+        (WebCore::DefaultLocalizationStrategy::fileButtonChooseFileLabel): Updated the description for "Choose File".
+        (WebCore::DefaultLocalizationStrategy::fileButtonChooseMultipleFilesLabel): Returns a string "Choose Files".
+        * platform/DefaultLocalizationStrategy.h:
+        * platform/LocalizationStrategy.h:
+        * platform/LocalizedStrings.cpp:
+        (WebCore::fileButtonChooseMultipleFilesLabel): Wrapper method for getting the "Choose Files" label.
+        * platform/LocalizedStrings.h:
+        * platform/brew/LocalizedStringsBrew.cpp:
+        (WebCore::fileButtonChooseMultipleFilesLabel): Returns a "Choose Files" label.
+        * platform/efl/LocalizedStringsEfl.cpp:
+        (WebCore::fileButtonChooseMultipleFilesLabel): Returns a "Choose Files" label.
+        * platform/gtk/LocalizedStringsGtk.cpp:
+        (WebCore::fileButtonChooseMultipleFilesLabel): Returns a "Choose Files" label.
+        * platform/haiku/LocalizedStringsHaiku.cpp:
+        (WebCore::fileButtonChooseMultipleFilesLabel): Returns a "Choose Files" label.
+        * platform/wx/LocalizedStringsWx.cpp:
+        (WebCore::fileButtonChooseMultipleFilesLabel): Returns a "Choose Files" label.
+
+2011-06-30  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Reviewed by Kent Tamura.
+
+        Replace isNodeInTextFormControl(Node*) by enclosingTextFormControl(const Position&)
+        https://bugs.webkit.org/show_bug.cgi?id=63672
+
+        Replaced isNodeInTextFormControl(Node*) by enclosingTextFormControl(const Position&).
+        Also added a safe toTextFormControl to HTMLFormControlElement.h.
+
+        * editing/DeleteSelectionCommand.cpp:
+        (WebCore::DeleteSelectionCommand::doApply): Calls enclosingTextFormControl instead of manually
+        checking the tag name of shadowAncestorNode.
+        * editing/Editor.cpp:
+        (WebCore::Editor::selectionForCommand): Rewritten using enclosingTextFormControl and toTextFormControl.
+        (WebCore::Editor::cut): Calls enclosingTextFormControl instead of isNodeInTextFormControl.
+        (WebCore::Editor::copy): Ditto.
+        (WebCore::Editor::setBaseWritingDirection): Calls toTextFormControl instead of manually checking tag name.
+        * editing/FrameSelection.cpp:
+        (WebCore::FrameSelection::isInPasswordField): Calls enclosingTextFormControl.
+        * editing/ReplaceSelectionCommand.cpp:
+        (WebCore::ReplaceSelectionCommand::doApply): Ditto.
+        * editing/htmlediting.cpp:
+        (WebCore::enclosingTextFormControl): Added.
+        * editing/htmlediting.h:
+        * html/HTMLFormControlElement.h:
+        (WebCore::toTextFormControl): Added.
+        * page/DragController.cpp:
+        (WebCore::DragController::startDrag): Calls enclosingTextFormControl instead of isNodeInTextFormControl.
+
+2011-06-27  Pavel Podivilov  <podivilov@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: source code is not highlighted after drawer height animations.
+        https://bugs.webkit.org/show_bug.cgi?id=62860
+
+        * inspector/front-end/Drawer.js:
+        (WebInspector.Drawer.prototype._animateDrawerHeight.animationFinished):
+        (WebInspector.Drawer.prototype._animateDrawerHeight):
+
+2011-06-30  MORITA Hajime  <morrita@google.com>
+
+        Reviewed by Dimitri Glazkov.
+
+        Crash if ShadowRoot has a text node.
+        https://bugs.webkit.org/show_bug.cgi?id=63607
+        
+        Node::styleForRenderer() for Text node wasn't shadow-aware.
+        This change allow styleForRenderer() to know its visual parent by
+        passing NodeRenderingContext.
+        
+        Changes other than NodeRenderingContext and Element is just a
+        follow up for change above.
+
+        * dom/Element.cpp: use NodeRenderingContext to resolve parent node.
+        (WebCore::Element::recalcStyle):
+        * dom/Node.cpp:
+        (WebCore::Node::styleForRenderer): Added NodeRenderingContext as a parameter.
+        * dom/Node.h:
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRendererFactory::createRendererAndStyle):
+        * html/HTMLOptGroupElement.cpp:
+        (WebCore::HTMLOptGroupElement::attach):
+        * html/HTMLOptionElement.cpp:
+        (WebCore::HTMLOptionElement::attach):
+        * html/HTMLTitleElement.cpp:
+        (WebCore::HTMLTitleElement::textWithDirection):
+        * html/shadow/TextControlInnerElements.cpp:
+        (WebCore::TextControlInnerElement::styleForRenderer):
+        (WebCore::TextControlInnerTextElement::styleForRenderer):
+        * html/shadow/TextControlInnerElements.h:
+
+        Test: fast/dom/shadow/shadow-root-text-child.html
+        
+2011-06-30  Piroska András  <Piroska.Andras@stud.u-szeged.hu>
+
+        Reviewed by Dirk Schulze.
+
+        Apply the ParallelJobs support to FEMorphology
+        https://bugs.webkit.org/show_bug.cgi?id=63064
+
+        The FEMorphology filter of SVG can consume lots of resources if it is
+        applied to a large area. The computation can be distributed to multiple
+        cores if the architecture supports.
+        The average performance progression is 20-25% on dual-core machines.
+
+        * platform/graphics/filters/FEMorphology.cpp:
+        (WebCore::FEMorphology::platformApplyGeneric): Apply the filter between yStart and yEnd interval
+        (WebCore::FEMorphology::platformApplyWorker): Call the generic apply from a parallel worker
+        (WebCore::FEMorphology::platformApply):
+        (WebCore::FEMorphology::apply): Move the functionality into platformApply
+        (WebCore::FEMorphology::externalRepresentation): Remove whitespaces
+        * platform/graphics/filters/FEMorphology.h:
+
+2011-06-29  Kent Tamura  <tkent@chromium.org>
+
+        Reviewed by Dimitri Glazkov.
+
+        Avoid custom layout code of RenderTextControlSingleLine
+        https://bugs.webkit.org/show_bug.cgi?id=61415
+
+        If a text field has a search results button, a search cancel
+        button, a speech button, or a spin button, the editable inner text
+        element and the buttons are wrapped by a flexible box container,
+        and the editable inner text element has flexibility. As the result
+        of applying the flexible box, we don't need any horizontal layout
+        code in RenderTextControlSingleLine except the inner spin button.
+
+        Also, we remove custom hit-testing code in nodeAtPoint(). If a
+        user clicks on a position left of the inner editable text but not
+        on the search results button, the search results button doesn't
+        work though it worked.
+
+        * css/html.css:
+        (input::-webkit-textfield-decoration-container):
+          New style definition for the "container" element.
+        (input[type="search"]::-webkit-search-cancel-button):
+          It should be a block element because it's a child of the flexible box.
+          Also, this doesn't have flexibility.
+        (input[type="search"]::-webkit-search-decoration): ditto.
+        (input[type="search"]::-webkit-search-results-decoration): ditto.
+        (input[type="search"]::-webkit-search-results-button): ditto.
+        (input::-webkit-inner-spin-button): ditto.
+        (input::-webkit-input-speech-button): ditto.
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::containerElement):
+          Add an accessor of the flexible box container.
+          It just calls InputType::containerElement().
+        * html/HTMLInputElement.h: Declare it.
+        * html/InputType.h:
+        (WebCore::InputType::containerElement): New accessor for a shadow element.
+        * html/SearchInputType.cpp:
+        (WebCore::SearchInputType::SearchInputType):
+          m_innerBlock is moved to TextFieldInputType.
+        (WebCore::SearchInputType::needsContainer):
+          A search field always needs the flexible box container because
+          of the results button and the cancel button.
+        (WebCore::SearchInputType::createShadowSubtree):
+          Use TextFieldInputType::createShadowSubtree(), then modify the tree.
+        (WebCore::SearchInputType::destroyShadowSubtree):
+          m_innerBlock is moved to TextFieldInputType.
+        * html/SearchInputType.h:
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::TextFieldInputType):
+          Initialize the new members.
+        (WebCore::TextFieldInputType::needsContainer):
+          Returns true if x-webkit-speech. We check a spin button separately.
+        (WebCore::TextFieldInputType::createShadowSubtree):
+          Wrap everything with the flexible box container if needsContainer() or we need a spin button.
+        (WebCore::TextFieldInputType::containerElement): Added an accessor.
+        (WebCore::TextFieldInputType::innerBlockElement): ditto.
+        (WebCore::TextFieldInputType::innerTextElement): ditto.
+        (WebCore::TextFieldInputType::innerSpinButtonElement): ditto.
+        (WebCore::TextFieldInputType::speechButtonElement): ditto.
+        (WebCore::TextFieldInputType::destroyShadowSubtree):
+          Clear references to new shadow nodes.
+        * html/TextFieldInputType.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::containerElement): Added an accessor.
+        (WebCore::RenderTextControlSingleLine::innerTextElement):
+        (WebCore::RenderTextControlSingleLine::layout):
+         - Correct heights check
+          Comparing with height(), not contentHeigth(), was incorrect.
+         - Adjust the container height like the editable inner text.
+         - Remove width adjustment
+         - Remove the speech button layout code
+          The flexible box layout is enough.
+        (WebCore::RenderTextControlSingleLine::nodeAtPoint):
+          Remove custom code for results/cancel/speech buttons, and
+          Simplify comments.
+        (WebCore::RenderTextControlSingleLine::forwardEvent):
+          Remove custom forwarding code for results/cancel buttons.
+        (WebCore::RenderTextControlSingleLine::styleDidChange):
+          Clear the style of the container because we update it in layout().
+        (WebCore::RenderTextControlSingleLine::hasControlClip):
+          Decoration buttons should be clipped by the container.
+        (WebCore::RenderTextControlSingleLine::controlClipRect): ditto.
+        (WebCore::RenderTextControlSingleLine::createInnerTextStyle):
+          We don't need to use display:inline-block any more.
+        (WebCore::RenderTextControlSingleLine::createInnerBlockStyle):
+          The text wrapper element should have flexibility.
+        (WebCore::RenderTextControlSingleLine::textBlockInsetTop):
+          Updated for the tree structure change.
+        * rendering/RenderTextControlSingleLine.h:
+
+2011-06-29  Kent Tamura  <tkent@chromium.org>
+
+        [Mac] Attempt to fix Leopard build.
+
+        * platform/mac/CursorMac.mm:
+        (WebCore::Cursor::ensurePlatformCursor):
+
+2011-06-29  Darin Adler  <darin@apple.com>
+
+        Reviewed by Dan Bernstein.
+
+        [Mac] Use system cursors instead of custom bitmaps where possible
+        https://bugs.webkit.org/show_bug.cgi?id=63679
+
+        * Resources/crossHairCursor.png: Removed.
+        * Resources/notAllowedCursor.png: Removed.
+        * WebCore.exp.in: Added wkCursor.
+        * WebCore/WebCore.gyp/WebCore.gyp: Removed the two now-unused PNG files.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+
+        * platform/mac/CursorMac.mm:
+        (WebCore::Cursor::ensurePlatformCursor): Use NSCursor API for Cross, Hand,
+        VerticalText, ContextMenu, Copy, and NotAllowed. Use wkCursor for Move,
+        Alias, Progress, and the resize and panning cursors.
+
+        * platform/mac/WebCoreSystemInterface.h: Added wkCursor.
+        * platform/mac/WebCoreSystemInterface.mm: Ditto.
+
+2011-06-29  Keishi Hattori  <keishi@webkit.org>
+
+        Reviewed by Adam Barth.
+
+        Remove extra space at EOL in view source mode
+        https://bugs.webkit.org/show_bug.cgi?id=63620
+
+        Test: fast/frames/viewsource-linebreak.html
+
+        * css/view-source.css:
+        (tbody:last-child .webkit-line-content:empty:before): If we don't do this
+        the last line will be empty and the height will be shorter than the rest.
+        * html/HTMLViewSourceDocument.cpp:
+        (WebCore::HTMLViewSourceDocument::addSource): If source file is empty, add an empty line.
+        (WebCore::HTMLViewSourceDocument::finishLine): Call when you are done with the current line.
+        Adds a BR element if the line is empty and sets current to tbody.
+        (WebCore::HTMLViewSourceDocument::addText):
+        * html/HTMLViewSourceDocument.h:
+
+2011-06-29  Brent Fulgham  <bfulgham@webkit.org>
+
+        [WinCE] Correct logical state of WINCE test.
+
+        * platform/win/ScrollbarThemeWin.cpp: The #if OS(WINCE)
+          should have been #if !OS(WINCE)
+        (WebCore::ScrollbarThemeWin::paintTrackPiece):
+        (WebCore::ScrollbarThemeWin::paintButton):
+        (WebCore::ScrollbarThemeWin::paintThumb):
+        * rendering/RenderThemeWin.cpp: ditto.
+        (WebCore::drawControl):
+
+2011-06-29  Justin Garcia  <justin.garcia@apple.com>
+
+        Reviewed by Enrica Casucci.
+        
+        I forgot to include these (reviewed) style fix-ups in my previous check-in.
+
+        * editing/htmlediting.cpp:
+        (WebCore::indexForVisiblePosition):
+        (WebCore::visiblePositionForIndex):
+
+2011-06-29  Justin Garcia  <justin.garcia@apple.com>
+
+        Reviewed by Enrica Casucci.
+
+        https://bugs.webkit.org/show_bug.cgi?id=62922
+        indexForVisiblePosition(const VisiblePosition& visiblePosition) does not consider shadow content
+        
+        VisiblePositions can be inside web form text regions, which use shadow trees. Made indexForVisiblePosition
+        aware of this, and added a new parameter to obtain the scope for a VisiblePosition, in addition to its index.
+        
+        Added visiblePositionForIndex to go in the opposite direction, taking into account the scope
+        used to compute the index.
+        
+        These two functions use TextIterators to convert between VisiblePositions and indices. But 
+        TextIterator iteration using TextIteratorEmitsCharactersBetweenAllVisiblePositions does not 
+        exactly match VisiblePosition iteration, so using them to preserve a selection during an 
+        editing operation is unreliable. This can be seen in the expected results for:
+        
+        editing/execCommand/indent-pre-list.html
+        editing/execCommand/crash-indenting-list-item.html
+        
+        TextIterator's TextIteratorEmitsCharactersBetweenAllVisiblePositions mode needs to be fixed, or 
+        these functions need to be changed to iterate using actual VisiblePositions. See:
+        
+        https://bugs.webkit.org/show_bug.cgi?id=63590
+        TextIterators in TextIteratorEmitsCharactersBetweenAllVisiblePositions do not exactly match VisiblePositions
+        
+        Also:
+        
+        https://bugs.webkit.org/show_bug.cgi?id=63592
+        Use visiblePositionForIndex and indexForVisiblePosition everywhere that TextIterators are used to convert between VisiblePositions and indices
+        
+        No new tests added because indexForVisiblePosition is currently only used for editing operations
+        that cannot be performed inside web form fields.
+
+        * editing/ApplyBlockElementCommand.cpp:
+        (WebCore::ApplyBlockElementCommand::doApply):
+        * editing/InsertListCommand.cpp:
+        (WebCore::InsertListCommand::doApply):
+        * editing/htmlediting.cpp:
+        (WebCore::indexForVisiblePosition):
+        (WebCore::visiblePositionForIndex):
+        * editing/htmlediting.h:
+
+2011-06-29  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        Reviewed by Kent Tamura.
+
+        Remove ElementWithPseudoId, since now an Element can store it all by itself.
+        https://bugs.webkit.org/show_bug.cgi?id=63657
+
+        Refactoring, covered by existing tests.
+
+        * CMakeLists.txt: Removed ElementWithPseudoId from build.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.order: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * html/ColorInputType.cpp:
+        (WebCore::ColorInputType::createShadowSubtree): Changed to use plain-old HTMLDivElement.
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::createShadowSubtree): Ditto.
+        * html/ValidationMessage.cpp:
+        (WebCore::ValidationMessage::buildBubbleTree): Ditto.
+        * html/shadow/ElementWithPseudoId.cpp: Removed.
+        * html/shadow/ElementWithPseudoId.h: Removed.
+
+2011-06-29  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch computeWidth and computeHeight functions to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63655
+
+        Switch computeWidth and computeHeight functions over to the new layout unit abstraction.
+
+        Making a point to mark rounding that should eventually be removed by linking to a new
+        tracking bug: 63645.
+
+        No new tests, no functionality changes.
+
+        * rendering/AutoTableLayout.cpp:
+        (WebCore::AutoTableLayout::computePreferredLogicalWidths):
+        * rendering/AutoTableLayout.h:
+        * rendering/FixedTableLayout.cpp:
+        (WebCore::FixedTableLayout::computePreferredLogicalWidths):
+        * rendering/FixedTableLayout.h:
+        * rendering/LayoutTypes.h:
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::computePreferredLogicalWidths):
+        (WebCore::RenderBlock::computeInlinePreferredLogicalWidths):
+        (WebCore::RenderBlock::computeBlockPreferredLogicalWidths):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::computeLogicalWidthUsing):
+        (WebCore::RenderBox::computeLogicalHeight):
+        (WebCore::RenderBox::computeLogicalHeightUsing):
+        (WebCore::RenderBox::computePercentageLogicalHeight):
+        (WebCore::RenderBox::computeReplacedLogicalWidth):
+        (WebCore::RenderBox::computeReplacedLogicalWidthRespectingMinMaxWidth):
+        (WebCore::RenderBox::computeReplacedLogicalWidthUsing):
+        (WebCore::RenderBox::computeReplacedLogicalHeight):
+        (WebCore::RenderBox::computeReplacedLogicalHeightRespectingMinMaxHeight):
+        (WebCore::RenderBox::computeReplacedLogicalHeightUsing):
+        * rendering/RenderBox.h:
+        * rendering/RenderIFrame.cpp:
+        (WebCore::RenderIFrame::computeLogicalWidth):
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::computeReplacedLogicalWidth):
+        (WebCore::RenderImage::computeReplacedLogicalHeight):
+        * rendering/RenderImage.h:
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::computePreferredLogicalWidths):
+        * rendering/RenderListMarker.cpp:
+        (WebCore::RenderListMarker::computePreferredLogicalWidths):
+        * rendering/RenderMenuList.cpp:
+        (WebCore::RenderMenuList::computePreferredLogicalWidths):
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::computeReplacedLogicalWidth):
+        (WebCore::RenderReplaced::computeReplacedLogicalHeight):
+        (WebCore::RenderReplaced::computePreferredLogicalWidths):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderSlider.cpp:
+        (WebCore::RenderSlider::computePreferredLogicalWidths):
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::computeLogicalWidth):
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::computePreferredLogicalWidths):
+        * rendering/RenderVideo.cpp:
+        (WebCore::RenderVideo::computeReplacedLogicalWidth):
+        (WebCore::RenderVideo::computeReplacedLogicalHeight):
+        * rendering/RenderVideo.h:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        (WebCore::RenderSVGForeignObject::computeLogicalWidth):
+        (WebCore::RenderSVGForeignObject::computeLogicalHeight):
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::computePreferredLogicalWidths):
+        (WebCore::RenderSVGRoot::computeIntrinsicWidth):
+        (WebCore::RenderSVGRoot::computeIntrinsicHeight):
+        (WebCore::RenderSVGRoot::computeReplacedLogicalWidth):
+        (WebCore::RenderSVGRoot::computeReplacedLogicalHeight):
+        (WebCore::RenderSVGRoot::layout):
+        * rendering/svg/RenderSVGRoot.h:
+
+2011-06-23  Abhishek Arya  <inferno@chromium.org>
+
+        Reviewed by James Robinson.
+
+        In RenderBlock, RenderWidget and RenderReplaced destroy functions,
+        call dirtyLinesFromChangedChild to tell our parent that we are going away.
+        https://bugs.webkit.org/show_bug.cgi?id=60307
+
+        Test: fast/block/child-not-removed-from-parent-lineboxes-crash.html
+              fast/block/block-not-removed-from-parent-lineboxes-crash.html
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::destroy):
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::destroy):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderWidget.cpp:
+        (WebCore::RenderWidget::destroy):
+
+2011-06-29  Brent Fulgham  <bfulgham@webkit.org>
+
+        Speculative WinCE build correction.
+
+        * rendering/RenderThemeWin.cpp:
+        (WebCore::drawControl): Don't call setRGBABitmapAlpha
+          for WinCE case.
+
+2011-06-29  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Reviewed by Darin Adler.
+
+        REGRESSION(r89952): r89952 added a wrong assertion in visible_units.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=63668
+
+        We need to assert the offset to be zero only when the position is NOT offset in node.
+
+        * editing/visible_units.cpp:
+        (WebCore::startOfParagraph):
+
+2011-06-29  Brent Fulgham  <bfulgham@webkit.org>
+
+        Speculative WinCE build correction after r90057.
+
+        * CMakeListsWinCE.txt: Roll back r90061, since GetWorldTransform
+          is not available in WinCE.
+        * platform/win/ScrollbarThemeWin.cpp: Conditionally exclude calls
+          to DIBPixelData::setRGBABitmapAlpha for WinCE.
+        (WebCore::ScrollbarThemeWin::paintTrackPiece):
+        (WebCore::ScrollbarThemeWin::paintButton):
+        (WebCore::ScrollbarThemeWin::paintThumb):
+
+2011-06-29  Brent Fulgham  <bfulgham@webkit.org>
+
+        Speculative WinCE build correction after r90057.
+
+        * CMakeListsWinCE.txt: Add missing DIBPixelData.cpp to
+        WinCE build to support setting bitmap image alpha value.
+
+2011-06-29  Simon Fraser  <simon.fraser@apple.com>
+
+        Reviewed by Beth Dakin.
+
+        Lay some groundwork for rubber-banding in overflow:scroll divs
+        https://bugs.webkit.org/show_bug.cgi?id=63654
+
+        Make it possible for scrollTop and scrollLeft on a RenderLayer to be
+        set to negative values, which we will do during rubber-banding in
+        future. Continue to clamp programmatic scrolls, and scroll positions
+        set by layout between 0 and the max value.
+
+        Test: fast/layers/negative-scroll-positions.html
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::setScrollLeft):
+        (WebCore::RenderBox::setScrollTop):
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::scrollToOffset):
+        (WebCore::RenderLayer::scrollTo):
+        * rendering/RenderLayer.h:
+        (WebCore::RenderLayer::scrollToXOffset):
+        (WebCore::RenderLayer::scrollToYOffset):
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::forwardEvent):
+
+2011-06-29  Anders Carlsson  <andersca@apple.com>
+
+        Reviewed by Simon Fraser.
+
+        RenderLayer::maximumScrollPosition() is wrong
+        https://bugs.webkit.org/show_bug.cgi?id=62667
+
+        * platform/ScrollableArea.h:
+        (WebCore::ScrollableArea::isVerticalScrollerPinnedToMinimumPosition):
+        (WebCore::ScrollableArea::isVerticalScrollerPinnedToMaximumPosition):
+        Add these for good measure; they will be needed in an upcoming patch.
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::maximumScrollPosition):
+        Subtract the visible content rect, including the scroll bars.
+
+2011-06-29  Brent Fulgham  <bfulgham@webkit.org>
+
+        Speculative WinCE build correction after r90053.
+
+        * platform/graphics/GraphicsContext.h:
+        (WebCore::GraphicsContext::inTransparencyLayer): Provide
+        stub implementation for 'inTransparencyLayer'.
+
+2011-06-29  Xu Fan  <qifuren1985@gmail.com>
+
+        Reviewed by Brent Fulgham.
+
+        Fix Scrollbars Transparent in Windows XP if WebKit is using Layered Window
+        https://bugs.webkit.org/show_bug.cgi?id=61136
+
+        * platform/graphics/win/DIBPixelData.h: add a static method setRGBABitmapAlpha
+        * platform/graphics/win/DIBPixelData.cpp: add implementation
+        * platform/win/ScrollbarThemeWin.cpp: fix scroolbar transparent
+        * rendering/RenderThemeWin.cpp: fix textbox and button transparent
+
+2011-06-29  Emil A Eklund  <eae@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch RenderBoxModelObject::margin* and setMargin* to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63652
+
+        Switch margin methods for render tree over to the new layout unit abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/InlineFlowBox.h:
+        * rendering/RenderBlock.cpp:
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        * rendering/RenderBox.h:
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderInline.cpp:
+        * rendering/RenderInline.h:
+        * rendering/RenderText.h:
+
+2011-06-29  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch paint to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63645
+
+        Switch vanilla paint function over to the new layout unit abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::paint):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paint):
+        * rendering/RenderBox.h:
+        * rendering/RenderDetailsMarker.cpp:
+        (WebCore::RenderDetailsMarker::paint):
+        * rendering/RenderDetailsMarker.h:
+        * rendering/RenderEmbeddedObject.cpp:
+        (WebCore::RenderEmbeddedObject::paint):
+        * rendering/RenderEmbeddedObject.h:
+        * rendering/RenderFrameSet.cpp:
+        (WebCore::RenderFrameSet::paint):
+        * rendering/RenderFrameSet.h:
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::paint):
+        * rendering/RenderImage.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::paint):
+        * rendering/RenderInline.h:
+        * rendering/RenderLineBoxList.h:
+        * rendering/RenderListItem.cpp:
+        (WebCore::RenderListItem::paint):
+        * rendering/RenderListItem.h:
+        * rendering/RenderListMarker.cpp:
+        (WebCore::RenderListMarker::paint):
+        * rendering/RenderListMarker.h:
+        * rendering/RenderObject.h:
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::paint):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderReplica.cpp:
+        (WebCore::RenderReplica::paint):
+        * rendering/RenderReplica.h:
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::paint):
+        * rendering/RenderTable.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::paint):
+        * rendering/RenderTableCell.h:
+        * rendering/RenderTableRow.cpp:
+        (WebCore::RenderTableRow::paint):
+        * rendering/RenderTableRow.h:
+        * rendering/RenderTableSection.cpp:
+        (WebCore::RenderTableSection::paint):
+        * rendering/RenderTableSection.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::paint):
+        * rendering/RenderTextControlSingleLine.h:
+        * rendering/RenderTheme.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::paint):
+        * rendering/RenderView.h:
+        * rendering/RenderWidget.cpp:
+        (WebCore::RenderWidget::paint):
+        * rendering/RenderWidget.h:
+        * rendering/mathml/RenderMathMLBlock.h:
+        * rendering/mathml/RenderMathMLFraction.h:
+        * rendering/mathml/RenderMathMLRoot.h:
+        * rendering/mathml/RenderMathMLSquareRoot.h:
+        * rendering/svg/RenderSVGContainer.h:
+        * rendering/svg/RenderSVGForeignObject.h:
+        * rendering/svg/RenderSVGHiddenContainer.h:
+        * rendering/svg/RenderSVGImage.h:
+        * rendering/svg/RenderSVGPath.h:
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::paint):
+        * rendering/svg/RenderSVGRoot.h:
+        * rendering/svg/RenderSVGText.h:
+
+2011-06-29  Jian Li  <jianli@chromium.org>
+
+        Reviewed by Kenneth Russell.
+
+        WebGL test failing on SL bots: fast/canvas/webgl/data-view-test.html 
+        https://bugs.webkit.org/show_bug.cgi?id=63151
+
+        The fix is to change to throw TypeError in custom JS/V8 bindings.
+
+        * bindings/js/JSDataViewCustom.cpp:
+        (WebCore::getDataViewMember):
+        (WebCore::setDataViewMember):
+        * bindings/v8/custom/V8DataViewCustom.cpp:
+        (WebCore::V8DataView::constructorCallback):
+        (WebCore::V8DataView::getInt8Callback):
+
+2011-06-29  Luke Macpherson   <macpherson@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        Convert uses of computeLengthIntForLength() to computeLength<Length>()
+        https://bugs.webkit.org/show_bug.cgi?id=63641
+
+        No new tests / refactoring only.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::convertToLength):
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::applyPageSizeProperty):
+        (WebCore::CSSStyleSelector::mmLength):
+        (WebCore::CSSStyleSelector::inchLength):
+        (WebCore::CSSStyleSelector::mapFillSize):
+        (WebCore::CSSStyleSelector::mapFillXPosition):
+        (WebCore::CSSStyleSelector::mapFillYPosition):
+
+2011-06-29  Chris Rogers  <crogers@google.com>
+
+        Reviewed by Kenneth Russell.
+
+        Simplify AudioBufferSourceNode rendering
+        https://bugs.webkit.org/show_bug.cgi?id=63586
+
+        No new tests since this doesn't change API.
+
+        * webaudio/AudioBufferSourceNode.cpp:
+        (WebCore::AudioBufferSourceNode::AudioBufferSourceNode):
+        (WebCore::AudioBufferSourceNode::process):
+        (WebCore::AudioBufferSourceNode::renderFromBuffer):
+        (WebCore::AudioBufferSourceNode::reset):
+        (WebCore::AudioBufferSourceNode::setBuffer):
+        (WebCore::AudioBufferSourceNode::noteOn):
+        (WebCore::AudioBufferSourceNode::noteGrainOn):
+        (WebCore::AudioBufferSourceNode::totalPitchRate):
+        * webaudio/AudioBufferSourceNode.h:
+
+2011-06-29  Martin Robinson  <mrobinson@igalia.com>
+
+        Reviewed by Xan Lopez.
+
+        [Freetype] Many tests report ERROR: Failed to get glyph page zero.
+        https://bugs.webkit.org/show_bug.cgi?id=63498
+
+        Instead of conditionally instantiating the m_scaledFont member of FontPlatformData,
+        always instantiate it. For times when the size is 0 and the instantiation would lead
+        to a Cairo error, we use size 1 and just make operations which would fail conditional
+        on the m_size > 0.
+
+        No new tests. This change is covered by existing tests. We should
+        observe no errors on the bots after landing.
+
+        * platform/graphics/cairo/FontCairo.cpp:
+        (WebCore::Font::drawGlyphs): Instead of looking at whether or not there is
+        a scaled font to determine whether to draw, just look at the size.
+        * platform/graphics/freetype/FontPlatformData.h: Remove the m_font member.
+        * platform/graphics/freetype/FontPlatformDataFreeType.cpp: Always instantiate
+        a scaled font member and remove references to m_font. If we are instantiating
+        a scaled font for a 0 size font, instantiate a size 1 font, so that we can
+        still use Cairo to query font properties.
+        * platform/graphics/freetype/GlyphPageTreeNodeFreeType.cpp:
+        (WebCore::GlyphPage::fill): We can assume there is always a scaled font now.
+        * platform/graphics/freetype/SimpleFontDataFreeType.cpp:
+        (WebCore::SimpleFontData::platformInit): Ditto.
+        (WebCore::SimpleFontData::createScaledFontData): Ditto.
+        (WebCore::SimpleFontData::containsCharacters): Ditto.
+        (WebCore::SimpleFontData::platformWidthForGlyph): Ditto.
+
+2011-06-29  Eric Carlson  <eric.carlson@apple.com>
+
+        Reviewed by Darin Adler.
+
+        Media element loads blocked by a resource load delegate do not generate an error event
+        https://bugs.webkit.org/show_bug.cgi?id=63558
+
+        Tests: media/media-blocked-by-beforeload.html
+               media/media-blocked-by-willsendrequest.html
+
+        * html/HTMLMediaElement.cpp:
+        (WebCore::HTMLMediaElement::selectMediaResource): Call mediaLoadingFailed instead of noneSupported
+            so all failures follow the same code path.
+        (WebCore::HTMLMediaElement::loadResource): Call mediaLoadingFailed when there is no frame, when 
+            the loader delegate rejects the url, or when MediaPlayer doesn't find a media engine that
+            supports the type.
+        (WebCore::HTMLMediaElement::selectNextSourceChild): Fix incorrect logging.
+        (WebCore::HTMLMediaElement::mediaLoadingFailed): Change name of parameter from "state" to
+            "error" to make its purpose obvious.
+
+        * platform/graphics/MediaPlayer.cpp:
+        (WebCore::MediaPlayer::load): Return a bool indicating whether or not the url was given to
+            a media engine.
+        (WebCore::MediaPlayer::loadWithNextMediaEngine): Add some logging.
+        * platform/graphics/MediaPlayer.h:
+
+2011-06-29  Darin Adler  <darin@apple.com>
+
+        Reviewed by Anders Carlsson.
+
+        [WebKit2] Crash loading page that adds/removes frame in DOMContentLoaded/loaded
+        https://bugs.webkit.org/show_bug.cgi?id=63483
+
+        Test: fast/loader/create-frame-in-DOMContentLoaded.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::init): Added an assertion.
+        (WebCore::FrameLoader::finishedLoadingDocument): Removed a non-helpful #if
+        statement. The rule that we do not call the client when creating the initial
+        empty document was nominally specific to Windows and Chromium but is needed
+        for all platforms.
+
+2011-06-29  Emil A Eklund  <eae@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        Switch hitTestColumns/Contents/Floats to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63589
+
+        Switch location and size methods for RenderBox over to the new layout unit abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/ColumnInfo.h:
+        (WebCore::ColumnInfo::desiredColumnWidth):
+        (WebCore::ColumnInfo::setDesiredColumnWidth):
+        (WebCore::ColumnInfo::columnHeight):
+        (WebCore::ColumnInfo::setColumnCountAndHeight):
+        (WebCore::ColumnInfo::setColumnHeight):
+        (WebCore::ColumnInfo::updateMinimumColumnHeight):
+        (WebCore::ColumnInfo::minimumColumnHeight):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::addOverflowFromChildren):
+        (WebCore::RenderBlock::paintColumnRules):
+        (WebCore::RenderBlock::paintColumnContents):
+        (WebCore::RenderBlock::hitTestFloats):
+        (WebCore::RenderBlock::hitTestColumns):
+        (WebCore::RenderBlock::hitTestContents):
+        (WebCore::RenderBlock::columnRectAt):
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::xPositionForFloatIncludingMargin):
+        (WebCore::RenderBlock::yPositionForFloatIncludingMargin):
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::hitTestContents):
+        * rendering/RenderLayer.h:
+
+2011-06-29  Adrienne Walker  <enne@google.com>
+
+        Reviewed by James Robinson.
+
+        [chromium] Divide by zero in TilingData
+        https://bugs.webkit.org/show_bug.cgi?id=63305
+
+        Add safety checks for empty layers.
+
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::prepareToUpdate):
+        (WebCore::LayerTilerChromium::reset):
+        (WebCore::LayerTilerChromium::updateRect):
+
+2011-06-29  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Extract setShadowRoot function, harden it in preparation to be exposed to script.
+        https://bugs.webkit.org/show_bug.cgi?id=63596
+
+        Refactoring, covered by existing tests.
+
+        * dom/Element.cpp:
+        (WebCore::validateShadowRoot): Added.
+        (WebCore::Element::setShadowRoot): Extracted from ensureShadowRoot.
+        (WebCore::Element::ensureShadowRoot): Changed to use setShadowRoot.
+        * dom/Element.h: Added decl.
+
+2011-06-29  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: REGRESSION Resource revision fails to request content if it was not yet loaded for resource.
+        https://bugs.webkit.org/show_bug.cgi?id=63631
+
+        Test: http/tests/inspector/network/network-request-revision-content.html
+
+        * inspector/front-end/Resource.js:
+        (WebInspector.ResourceRevision.prototype.requestContent):
+
+2011-06-29  Igor Oliveira  <igor.oliveira@openbossa.org>
+
+        Reviewed by Andreas Kling.
+
+        [Qt] GraphicsContext::clipToImageBuffer does not support scale transformation
+        https://bugs.webkit.org/show_bug.cgi?id=63555
+
+        Scale alphaMask if GraphicsContext is scaled
+
+        * platform/graphics/qt/GraphicsContextQt.cpp:
+        (WebCore::GraphicsContext::pushTransparencyLayerInternal):
+        * platform/graphics/qt/ImageBufferQt.cpp:
+        (WebCore::ImageBuffer::clip):
+
+2011-06-29  Andrey Kosyakov  <caseq@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: backend needs to provide system-unique object ids, so these remain unique across navigation
+        https://bugs.webkit.org/show_bug.cgi?id=62894
+
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::setAgentProcessIdentifier):
+        * inspector/InspectorController.h:
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::InspectorPageAgent::setAgentIdentifier):
+        (WebCore::InspectorPageAgent::createIdentifier):
+        (WebCore::InspectorPageAgent::frameForId):
+        (WebCore::InspectorPageAgent::frameId):
+        (WebCore::InspectorPageAgent::frameDestroyed):
+        * inspector/InspectorPageAgent.h:
+
+2011-06-29  Pavel Feldman  <pfeldman@google.com>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: create status bar buttons programmatically. Add "Inspect" button to all panels.
+        https://bugs.webkit.org/show_bug.cgi?id=63450
+
+        Buttons should be created in code, not in HTML. Also making Inspect Element
+        action available on all panels (as an experiment).
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype.show):
+        (WebInspector.ConsoleView.prototype.hide):
+        * inspector/front-end/ElementsPanel.js:
+        (WebInspector.ElementsPanel):
+        (WebInspector.ElementsPanel.prototype.get statusBarItems):
+        (WebInspector.ElementsPanel.prototype.updateFocusedNode):
+        (WebInspector.ElementsPanel.prototype._setSearchingForNode):
+        (WebInspector.ElementsPanel.prototype.toggleSearchingForNode):
+        * inspector/front-end/inspector.css:
+        (button.dock-status-bar-item.status-bar-item .glyph):
+        (button.dock-status-bar-item.status-bar-item.toggled-on .glyph):
+        (.console-status-bar-item .glyph):
+        * inspector/front-end/inspector.html:
+        * inspector/front-end/inspector.js:
+        (WebInspector._createGlobalStatusBarItems):
+        (WebInspector.set attached):
+
+2011-06-29  Pavel Feldman  <pfeldman@google.com>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: tab crash after deleting trailing quote when editing attribute
+        https://bugs.webkit.org/show_bug.cgi?id=63544
+
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::setAttributesText):
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeElement.prototype._attributeEditingCommitted.moveToNextAttributeIfNeeded):
+        (WebInspector.ElementsTreeElement.prototype._attributeEditingCommitted):
+
+2011-06-29  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: REGRESSION Inspector failing to load resource content after navigation. Safari.
+        https://bugs.webkit.org/show_bug.cgi?id=63480
+
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkDispatcher):
+        (WebInspector.NetworkDispatcher.prototype.resourceLoadedFromMemoryCache):
+
+2011-06-29  Mike West  <mkwst@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: Missing fields in HAR
+        https://bugs.webkit.org/show_bug.cgi?id=58127
+        
+        Specifically, this patch adds:
+        - entry.request.httpVersion
+        - entry.request.headersSize
+        - entry.request.bodySize
+        - entry.response.httpVersion
+        - entry.response.headersSize
+        - entry.response.bodySize
+        - entry.response.content.compression
+        
+        Tests: http/tests/inspector/resource-har-conversion.html
+               http/tests/inspector/resource-har-headers.html
+               http/tests/inspector/resource-parameters.html
+               http/tests/inspector/network/network-size.html
+
+        * inspector/front-end/HAREntry.js:
+        (WebInspector.HAREntry.prototype.build):
+        (WebInspector.HAREntry.prototype._buildRequest):
+        (WebInspector.HAREntry.prototype._buildResponse):
+        (WebInspector.HAREntry.prototype._buildContent):
+        (WebInspector.HAREntry.prototype._buildCookie):
+        (WebInspector.HAREntry.prototype._interval):
+        (WebInspector.HAREntry.prototype.get requestBodySize):
+        (WebInspector.HAREntry.prototype.get responseBodySize):
+        (WebInspector.HAREntry.prototype.get responseCompression):
+        (WebInspector.HARLog.prototype.build):
+        * inspector/front-end/Resource.js:
+        (WebInspector.Resource.prototype.set requestHeaders):
+        (WebInspector.Resource.prototype.get requestHeadersText):
+        (WebInspector.Resource.prototype.set requestHeadersText):
+        (WebInspector.Resource.prototype.get requestHeadersSize):
+        (WebInspector.Resource.prototype.get requestHttpVersion):
+        (WebInspector.Resource.prototype.set responseHeaders):
+        (WebInspector.Resource.prototype.get responseHeadersText):
+        (WebInspector.Resource.prototype.set responseHeadersText):
+        (WebInspector.Resource.prototype.get responseHeadersSize):
+        (WebInspector.Resource.prototype.get responseHttpVersion):
+
+2011-06-29  Hayato Ito  <hayato@chromium.org>
+
+        Reviewed by Hajime Morita.
+
+        Make a shadow host transfer a focus to the first focusable element in the shadow root when its focus() is called.
+        https://bugs.webkit.org/show_bug.cgi?id=62358.
+
+        This patch doesn't take an effect on the following elements to keep a compatibility.
+        - <input>, <textarea>, <video> and <audio> elements
+        We'll address these elements separately after re-targeting focus events
+        (bug 61421) is implemented.
+
+        A shadow root's <content> is not considered in this patch.
+        That should be addressed in another patch. See bug 63522.
+
+        Test: fast/dom/shadow/shadow-host-transfer-focus.html
+
+        * dom/Element.cpp:
+        (WebCore::Element::focus):
+        * page/FocusController.cpp:
+        (WebCore::shadowRoot):
+        (WebCore::isTreeScopeOwner):
+        (WebCore::FocusController::transferFocusToElementInShadowRoot):
+        (WebCore::hasCustomFocusLogic):
+        (WebCore::FocusController::findFocusableNodeDecendingDownIntoFrameDocumentOrShadowRoot):
+        (WebCore::FocusController::advanceFocusInDocumentOrder):
+        (WebCore::ownerOfTreeScope):
+        (WebCore::FocusController::findFocusableNodeAcrossTreeScope):
+        * page/FocusController.h:
+
+2011-06-29  Ryan Sleevi  <rsleevi@chromium.org>
+
+        Reviewed by Dirk Schulze.
+
+        SVGRadialGradientElement::selfHasRelativeLengths() doesn't consider if cx() is relative
+        https://bugs.webkit.org/show_bug.cgi?id=61600
+
+        Correct the logic for checking for relative lengths in a SVGRadialGradientElement to consider cx() in addition to cy()
+        
+        No new tests, as there is no way to currently test this. With the bug present, a side-effect is causing the
+        expected/correct image to be rendered. This is because the cached SVG resource is getting invalided through a
+        different path, forcing a repaint. The repaint takes into consideration the proper dimensions, hiding the bug.
+
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::selfHasRelativeLengths):
+
+2011-06-28  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVGAnimatedType should support SVGBoolean animation
+        https://bugs.webkit.org/show_bug.cgi?id=63529
+
+        Follow up of "SVGAnimation should use direct unit animation for SVGLength": https://bugs.webkit.org/show_bug.cgi?id=61368
+        This patch continues the conversion to the new concept of SVGAnimatorFactory with SVGBoolean.
+        
+        The new animator does not affect any behavior, since it was animated with SVGAnimatedString before. The new animator is still needed
+        to support animVal and baseVal later.
+
+        Test: svg/animations/svgboolean-animation-1.html
+
+        * CMakeLists.txt: Add new file to build system.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * svg/SVGAllInOne.cpp: Ditto.
+        * svg/SVGAnimateElement.cpp: Make use of AnimatedBoolean.
+        (WebCore::SVGAnimateElement::determineAnimatedAttributeType):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        * svg/SVGAnimatedBoolean.cpp: Added. New animator for SVGBoolean.
+        (WebCore::SVGAnimatedBooleanAnimator::SVGAnimatedBooleanAnimator):
+        (WebCore::SVGAnimatedBooleanAnimator::constructFromString):
+        (WebCore::SVGAnimatedBooleanAnimator::calculateFromAndToValues):
+        (WebCore::SVGAnimatedBooleanAnimator::calculateFromAndByValues):
+        (WebCore::SVGAnimatedBooleanAnimator::calculateAnimatedValue):
+        (WebCore::SVGAnimatedBooleanAnimator::calculateDistance):
+        * svg/SVGAnimatedBoolean.h:
+        (WebCore::SVGAnimatedBooleanAnimator::~SVGAnimatedBooleanAnimator):
+        * svg/SVGAnimatedType.cpp: Use bool for SVGBoolean.
+        (WebCore::SVGAnimatedType::~SVGAnimatedType):
+        (WebCore::SVGAnimatedType::createBoolean):
+        (WebCore::SVGAnimatedType::boolean):
+        (WebCore::SVGAnimatedType::valueAsString):
+        (WebCore::SVGAnimatedType::setValueAsString):
+        * svg/SVGAnimatedType.h:
+        * svg/SVGAnimatorFactory.h: New crate function for SVGAnimatedSVGBooleanAnimator.
+        (WebCore::SVGAnimatorFactory::create):
+
+2011-06-28  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Make applyAuthorSheets settable on ShadowRoot.
+        https://bugs.webkit.org/show_bug.cgi?id=63599
+
+        Refactoring and adding not-yet used function, tests to follow when API lands.
+
+        * dom/ShadowRoot.cpp:
+        (WebCore::ShadowRoot::ShadowRoot): Added initializer.
+        (WebCore::ShadowRoot::applyAuthorSheets): Made to use member variable.
+        (WebCore::ShadowRoot::setApplyAuthorSheets): Added.
+        * dom/ShadowRoot.h: Tweaked, added decls.
+
+2011-06-28  Ilya Sherman  <isherman@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        form.autocomplete="off" does not work
+        Rename the autoComplete() method for HTMLFormElement, HTMLFormControlElementWithState, and HTMLInputElement to shouldAutocomplete()
+        Add the autocomplete attribute to HTMLFormElement.idl and HTMLInputElement.idl
+        https://bugs.webkit.org/show_bug.cgi?id=35823
+
+        Test: fast/forms/autocomplete.html
+
+        * html/HTMLFormControlElement.cpp:
+        (WebCore::HTMLFormControlElementWithState::shouldAutocomplete): Renamed from ::autoComplete()
+        (WebCore::HTMLFormControlElementWithState::shouldSaveAndRestoreFormControlState): Update callsite.
+        * html/HTMLFormControlElement.h:
+        * html/HTMLFormElement.cpp:
+        (WebCore::HTMLFormElement::~HTMLFormElement): Update callsite.
+        (WebCore::HTMLFormElement::parseMappedAttribute): Update callsite.
+        (WebCore::HTMLFormElement::documentDidBecomeActive): Update callsite.
+        (WebCore::HTMLFormElement::willMoveToNewOwnerDocument): Update callsite.
+        (WebCore::HTMLFormElement::didMoveToNewOwnerDocument): Update callsite.
+        (WebCore::HTMLFormElement::shouldAutocomplete): Renamed from ::autoComplete()
+        * html/HTMLFormElement.h:
+        * html/HTMLFormElement.idl: Bind the autocomplete attribute to a JavaScript property.
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::shouldAutocomplete): Renamed from ::autoComplete()
+        * html/HTMLInputElement.h:
+        * html/HTMLInputElement.idl: Bind the autocomplete attribute to a JavaScript property.
+        * WebCore.exp.in: Updated autoComplete() -> shouldAutocomplete()
+
+2011-06-28  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        Reviewed by Kent Tamura.
+
+        Store shadowPseudoId in ElementRareData.
+        https://bugs.webkit.org/show_bug.cgi?id=63604
+
+        No new tests, because the code isn't yet used.
+
+        * css/CSSSelector.cpp:
+        (WebCore::CSSSelector::isUnknownPseudoType): Added convenience helper.
+        * css/CSSSelector.h: Added decl.
+        * dom/Element.cpp:
+        (WebCore::Element::shadowPseudoId): Changed to use ElementRareData.
+        (WebCore::Element::setShadowPseudoId): Ditto.
+        * dom/Element.h: Added decls.
+        * dom/ElementRareData.h: Added a member to keep shadowPseudoId.
+
+2011-06-28  Kenichi Ishibashi  <bashi@chromium.org>
+
+        Reviewed by Tony Chang.
+
+        [Chromium] Remove dependencies on harfbuzz from FontPlatformDataLinux and FontLinux
+        https://bugs.webkit.org/show_bug.cgi?id=62530
+
+        - Moved codes of FontLinux which depend on harfbuzz APIs to ComplexTextController.  Removed Some methods of ComplexTextController(advances() and logClusters()) since they are no longer needed.
+        - Moved RefCountedHarfbuzzFace from FontPlatformDataLinux to HarfbuzzSkia and renamed it to HarfbuzzFace.
+
+        No new tests because there is no behavior change (The existing tests should cover the changes).
+
+        * platform/graphics/chromium/ComplexTextControllerLinux.cpp:
+        (WebCore::ComplexTextController::ComplexTextController): Added arguments so eliminating setter invocations.
+        (WebCore::ComplexTextController::setupForRTL): Added.
+        (WebCore::ComplexTextController::setupFontForScriptRun): Adopt the change of HarfbuzzFace class.
+        (WebCore::ComplexTextController::setGlyphPositions): Use m_item.log_clusters instead of removed method.
+        (WebCore::ComplexTextController::glyphIndexForXPositionInScriptRun): Added.
+        (WebCore::ComplexTextController::offsetForPosition): Ditto.
+        (WebCore::ComplexTextController::selectionRect): Ditto.
+        * platform/graphics/chromium/ComplexTextControllerLinux.h:
+        (WebCore::ComplexTextController::width):
+        * platform/graphics/chromium/FontLinux.cpp: Removed truncateFixedPointToInteger().
+        (WebCore::Font::drawComplexText): Removed setter invocations of ComplexTextController.
+        (WebCore::Font::floatWidthForComplexText): Ditto.
+        (WebCore::Font::offsetForPositionForComplexText): Moved harfbuzz dependent code to ComplexTextController.
+        (WebCore::Font::selectionRectForComplexText): Ditto.
+        * platform/graphics/chromium/FontPlatformDataLinux.cpp:
+        (WebCore::FontPlatformData::harfbuzzFace): Wrapped up HB_FaceRec in HarfbuzzFace class.
+        * platform/graphics/chromium/FontPlatformDataLinux.h: Moved RefCountedHarfbuzzFace class and renamed to HarfbuzzFace.
+        * platform/graphics/chromium/HarfbuzzSkia.cpp:
+        (WebCore::allocHarfbuzzFont): Moved from ComplexTextControllerLinux.cpp.
+        (WebCore::HarfbuzzFace::HarfbuzzFace): Added.
+        (WebCore::HarfbuzzFace::~HarfbuzzFace): Added.
+        * platform/graphics/chromium/HarfbuzzSkia.h:
+        (WebCore::HarfbuzzFace::create): Added.
+        (WebCore::HarfbuzzFace::face): Added.
+        * platform/graphics/skia/GlyphPageTreeNodeSkia.cpp:
+        (WebCore::substituteWithVerticalGlyphs): Adopt  the change of HarfbuzzFace class.
+
+2011-06-28  Roland Steiner  <rolandsteiner@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Bug 55930 - (CVE-2011-1440) Incorrect handling of 'display:' property within nested <ruby> tags
+        https://bugs.webkit.org/show_bug.cgi?id=55930
+
+        Don't set style type BEFORE/AFTER on anonymous wrapper block.
+        Rather, check style type on generated wrapped child.
+
+        Tests: fast/ruby/generated-after-counter-doesnt-crash.html
+               fast/ruby/generated-before-and-after-counter-doesnt-crash.html
+               fast/ruby/generated-before-counter-doesnt-crash.html
+
+        * rendering/RenderRuby.cpp:
+        (WebCore::isAnonymousRubyInlineBlock):
+        (WebCore::isRubyBeforeBlock):
+        (WebCore::isRubyAfterBlock):
+        (WebCore::rubyBeforeBlock):
+        (WebCore::rubyAfterBlock):
+        (WebCore::createAnonymousRubyInlineBlock):
+        (WebCore::RenderRubyAsInline::addChild):
+        (WebCore::RenderRubyAsBlock::addChild):
+
+2011-06-28  Emil A Eklund  <eae@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch RenderLayer position/size to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63578
+
+        Switch location and size methods for RenderLayer over to the new layout unit abstraction.
+        
+        No new tests, no functionality changes.
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::resize):
+        (WebCore::RenderLayer::visibleHeight):
+        (WebCore::RenderLayer::visibleWidth):
+        (WebCore::RenderLayer::offsetFromResizeCorner):
+        * rendering/RenderLayer.h:
+        (WebCore::RenderLayer::location):
+        (WebCore::RenderLayer::setLocation):
+        (WebCore::RenderLayer::size):
+        (WebCore::RenderLayer::setSize):
+        (WebCore::RenderLayer::rect):
+        (WebCore::RenderLayer::renderBoxLocation):
+        (WebCore::RenderLayer::renderBoxX):
+        (WebCore::RenderLayer::renderBoxY):
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::visibleHeight):
+        (WebCore::RenderListBox::visibleWidth):
+        * rendering/RenderListBox.h:
+
+2011-06-28  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch paintObject and paintReplaced to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63585
+
+        Switching paintObject and paintReplaced to layout type abstractions from more integral types.
+
+        No new tests as this is just moving to an abstraction.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::paintObject):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.h:
+        (WebCore::RenderBox::paintObject):
+        * rendering/RenderEmbeddedObject.cpp:
+        (WebCore::RenderEmbeddedObject::paintReplaced):
+        * rendering/RenderEmbeddedObject.h:
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::paintObject):
+        * rendering/RenderFileUploadControl.h:
+        * rendering/RenderHTMLCanvas.cpp:
+        (WebCore::RenderHTMLCanvas::paintReplaced):
+        * rendering/RenderHTMLCanvas.h:
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::paintReplaced):
+        * rendering/RenderImage.h:
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::paintObject):
+        * rendering/RenderListBox.h:
+        * rendering/RenderReplaced.h:
+        (WebCore::RenderReplaced::paintReplaced):
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::paintObject):
+        * rendering/RenderTable.h:
+        * rendering/RenderTableSection.cpp:
+        (WebCore::RenderTableSection::paintObject):
+        * rendering/RenderTableSection.h:
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::paintObject):
+        * rendering/RenderTextControl.h:
+        * rendering/RenderVideo.cpp:
+        (WebCore::RenderVideo::paintReplaced):
+        * rendering/RenderVideo.h:
+
+2011-06-28  Adam Langley  <agl@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Skip cache validation on back with HTTPS.
+        https://bugs.webkit.org/show_bug.cgi?id=63537
+
+        For back navigations over HTTP, WebKit sets a flag to use cached data
+        irrespective of whether it has expired. However, this isn't currently
+        done for HTTPS.
+
+        The logic in question was added in
+        https://bugs.webkit.org/show_bug.cgi?id=33993 and appears to have been
+        precautionary. However, both Firefox and IE will use this back
+        navigation trick for HTTPS as well and so we should probably behave
+        likewise.
+
+        Test: http/tests/cache/history-only-cached-subresource-loads-max-age-https.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::addExtraFieldsToRequest):
+
+2011-06-28  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Remove errant isShadowBoundary on ShadowRoot.
+        https://bugs.webkit.org/show_bug.cgi?id=63588
+
+        Removing dead code, no tests for that.
+
+        * dom/ShadowRoot.h: Removed a function that's no longer used.
+
+2011-06-28  Zeng Huiqing  <huiqing.zeng@intel.com>
+
+        Reviewed by Kenneth Russell.
+
+        [chromium]Optimize GraphicsLayerChromium::setChildren()
+        https://bugs.webkit.org/show_bug.cgi?id=62837
+
+        No new tests. 
+
+        * platform/graphics/chromium/GraphicsLayerChromium.cpp:
+        (WebCore::GraphicsLayerChromium::GraphicsLayerChromium):
+        (WebCore::GraphicsLayerChromium::setChildren):
+        (WebCore::GraphicsLayerChromium::addChild):
+        * platform/graphics/chromium/GraphicsLayerChromium.h:
+
+2011-06-28  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch paintBoxShadow and paintBoxDecorations to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63577
+
+        Switching paintBoxShadow and paintBoxDecorations to layout type abstraction 
+        from more integral types.
+
+        No new tests as this is just moving to an abstraction.
+
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::paintBoxShadow):
+        (WebCore::InlineFlowBox::paintBoxDecorations):
+        * rendering/InlineFlowBox.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintBoxDecorations):
+        * rendering/RenderBox.h:
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::paintBoxShadow):
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderFieldset.cpp:
+        (WebCore::RenderFieldset::paintBoxDecorations):
+        * rendering/RenderFieldset.h:
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::paintBoxDecorations):
+        * rendering/RenderTable.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::paintBoxDecorations):
+        * rendering/RenderTableCell.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::paintBoxDecorations):
+        * rendering/RenderView.h:
+
+2011-06-28  Emil A Eklund  <eae@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch RenderBox position/size to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63571
+
+        Switch location and size methods for RenderBox over to the new layout unit abstraction.
+
+        No new tests, no functionality changes.
+
+        * rendering/RenderBox.cpp:
+        * rendering/RenderBox.h:
+        * rendering/RenderBoxModelObject.cpp:
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderInline.cpp:
+        * rendering/RenderInline.h:
+        * rendering/RenderVideo.cpp:
+        * rendering/RenderVideo.h:
+
+2011-06-28  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r89968.
+        http://trac.webkit.org/changeset/89968
+        https://bugs.webkit.org/show_bug.cgi?id=63581
+
+        Broke chromium windows compile (Requested by jamesr on
+        #webkit).
+
+        * WebCore.gyp/WebCore.gyp:
+        * loader/cache/CachedFont.cpp:
+        * platform/chromium/DragImageRef.h:
+        * platform/graphics/FloatPoint.h:
+        * platform/graphics/FloatRect.h:
+        * platform/graphics/FloatSize.h:
+        * platform/graphics/FontPlatformData.h:
+        (WebCore::FontPlatformData::hash):
+        * platform/graphics/GlyphBuffer.h:
+        (WebCore::GlyphBuffer::advanceAt):
+        (WebCore::GlyphBuffer::add):
+        (WebCore::GlyphBuffer::expandLastAdvance):
+        * platform/graphics/IntPoint.h:
+        * platform/graphics/IntRect.h:
+        * platform/graphics/IntSize.h:
+        * platform/graphics/SimpleFontData.h:
+        * platform/graphics/cg/FloatPointCG.cpp:
+        * platform/graphics/cg/FloatRectCG.cpp:
+        * platform/graphics/cg/FloatSizeCG.cpp:
+        * platform/graphics/cg/IntPointCG.cpp:
+        * platform/graphics/cg/IntRectCG.cpp:
+        * platform/graphics/cg/IntSizeCG.cpp:
+        * platform/graphics/mac/FontCustomPlatformData.cpp:
+        (WebCore::FontCustomPlatformData::~FontCustomPlatformData):
+        (WebCore::createFontCustomPlatformData):
+        * platform/graphics/mac/FontCustomPlatformData.h:
+        (WebCore::FontCustomPlatformData::FontCustomPlatformData):
+
+2011-06-28  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch PaintMask* to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63576
+
+        Switching paintMask* to layout type abstraction from more integral types.
+
+        No new tests as this is just moving to an abstraction.
+
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::paintMask):
+        * rendering/InlineFlowBox.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintMask):
+        (WebCore::RenderBox::paintMaskImages):
+        * rendering/RenderBox.h:
+        * rendering/RenderFieldset.cpp:
+        (WebCore::RenderFieldset::paintMask):
+        * rendering/RenderFieldset.h:
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::paintMask):
+        * rendering/RenderTable.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::paintMask):
+        * rendering/RenderTableCell.h:
+
+2011-06-28  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Switch paintFillLayer* to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=63570
+
+        Switching painFillLayer* to layout type abstraction from more integral types.
+
+        No new tests as this is just moving to an abstraction.
+
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::paintFillLayers):
+        (WebCore::InlineFlowBox::paintFillLayer):
+        * rendering/InlineFlowBox.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintFillLayers):
+        (WebCore::RenderBox::paintFillLayer):
+        * rendering/RenderBox.h:
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::paintFillLayerExtended):
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderObject.h:
+
+2011-06-28  Luke Macpherson   <macpherson@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Use appropriate macro for CSSPropertyWebkitAppearance in CSSStyleSelector::applyProperty()
+        https://bugs.webkit.org/show_bug.cgi?id=63197
+
+        No new tests / no functionality changed.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use HANDLE_INHERIT_AND_INITIAL_AND_PRIMITIVE macro and delete duplicate code.
+
+2011-06-28  Cary Clark  <caryclark@google.com>
+
+        Reviewed by James Robinson.
+
+        Use Skia if Skia on Mac Chrome is enabled
+        https://bugs.webkit.org/show_bug.cgi?id=62999
+
+        No new tests. This does not affect existing
+        functionality.
+
+        * WebCore.gyp/WebCore.gyp:
+        Include Skia and related files and exclude CG
+        and related files when building Chromium for Skia
+        on the Mac.
+
+        * loader/cache/CachedFont.cpp:
+        Rename CHROME to CHROMIUM.
+
+        * platform/chromium/DragImageRef.h:
+        * platform/graphics/FloatPoint.h:
+        * platform/graphics/FloatRect.h:
+        * platform/graphics/FloatSize.h:
+        * platform/graphics/FontPlatformData.h:
+        (WebCore::FontPlatformData::hash):
+        * platform/graphics/GlyphBuffer.h:
+        (WebCore::GlyphBuffer::advanceAt):
+        (WebCore::GlyphBuffer::add):
+        (WebCore::GlyphBuffer::expandLastAdvance):
+        * platform/graphics/IntPoint.h:
+        * platform/graphics/IntRect.h:
+        * platform/graphics/IntSize.h:
+        * platform/graphics/SimpleFontData.h:
+        * platform/graphics/cg/FloatPointCG.cpp:
+        * platform/graphics/cg/FloatRectCG.cpp:
+        * platform/graphics/cg/FloatSizeCG.cpp:
+        * platform/graphics/cg/IntPointCG.cpp:
+        * platform/graphics/cg/IntRectCG.cpp:
+        * platform/graphics/cg/IntSizeCG.cpp:
+        * platform/graphics/mac/FontCustomPlatformData.cpp:
+        (WebCore::FontCustomPlatformData::~FontCustomPlatformData):
+        (WebCore::createFontCustomPlatformData):
+        * platform/graphics/mac/FontCustomPlatformData.h:
+        (WebCore::FontCustomPlatformData::FontCustomPlatformData):
+        Ditto.
+
+2011-06-28  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Reviewed by Darin Adler.
+
+        Stop instantiating Position with PositionIsOffsetInAnchor in various files
+        https://bugs.webkit.org/show_bug.cgi?id=63384
+
+        Refactoring.
+
+        Removed many if conditions that compared the anchor type to Position::PositionIsOffsetInAnchor
+        because there were also checking that containerNode is a text node.
+
+        Also added Position::containerText() to avoid manually casting containerNode().
+
+        * dom/Position.cpp:
+        (WebCore::Position::Position): Added an assertion to ensure BeforeChildren/AfterChildren
+        anchor type won't be used for a node whose contents is ignored by editing.
+        (WebCore::Position::containerText): Added.
+        * dom/Position.h:
+        * editing/ApplyBlockElementCommand.cpp:
+        (WebCore::isNewLineAtPosition): Removed a redundant comparison of anchor type.
+        (WebCore::ApplyBlockElementCommand::rangeForParagraphSplittingTextNodesIfNeeded): Since containerNode
+        is always a text node when renderStyleOfEnclosingTextNode returns a render style, use new Position
+        constructor that takes Text* and offset.
+        (WebCore::ApplyBlockElementCommand::endOfNextParagrahSplittingTextNodesIfNeeded): Removed redundant
+        comparison of anchor type and use new Position constructor that takes Text* and offset.
+        * editing/ApplyStyleCommand.cpp:
+        (WebCore::ApplyStyleCommand::splitTextAtStart): Replaced an assertion that compared anchor type by
+        an assertion that the container node is a text node; use new constructor.
+        (WebCore::ApplyStyleCommand::splitTextAtEnd): Ditto; also added early exits in the case script
+        modified DOM.
+        (WebCore::ApplyStyleCommand::splitTextElementAtStart): Ditto.
+        (WebCore::ApplyStyleCommand::splitTextElementAtEnd): Ditto.
+        (WebCore::ApplyStyleCommand::joinChildTextNodes): Use new constructor.
+        * editing/CompositeEditCommand.cpp:
+        (WebCore::Editor::replaceSelectedTextInNode): Calls containerText instead of manually casting containerNode.
+        * editing/Editor.cpp:
+        (WebCore::Editor::canDeleteRange): Call Range::startPosition instead of manually instantiating Position
+        by calling startContainer and startOffset.
+        * editing/FrameSelection.cpp:
+        (WebCore::FrameSelection::setSelectedRange): Ditto.
+        * editing/InsertTextCommand.cpp:
+        (WebCore::InsertTextCommand::input): Calls containerText instead of manually casting containerNode.
+        * editing/ReplaceSelectionCommand.cpp:
+        (WebCore::ReplaceSelectionCommand::doApply): Calls containerText instead of manually casting containerNode.
+        * editing/VisiblePosition.cpp:
+        (WebCore::VisiblePosition::characterAfter): Removed a redundant anchor type comparison.
+        (WebCore::startVisiblePosition): Call Range::startPosition instead of startContainer and startOffset.
+        (WebCore::endVisiblePosition): Call Range::endPosition instead of endContainer and endOffset.
+        * editing/htmlediting.cpp:
+        (WebCore::firstInSpecialElement): Call containerNode() to address <rdar://problem/5027702>.
+        (WebCore::lastInSpecialElement): Ditto; use new constructor.
+        * editing/visible_units.cpp:
+        (WebCore::endPositionForLine): Use new constructor.
+        (WebCore::startOfParagraph): Ditto.
+        (WebCore::endOfParagraph): Ditto.
+
+2011-06-28  Rob Buis  <rbuis@rim.com>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVG1.1SE test text-tref-03-b.svg fails
+        https://bugs.webkit.org/show_bug.cgi?id=63390
+
+        Support tref on forward referenced content by listening to DOMSubtreeModified events. This also
+        allows updating after modifications in the referenced content subtree.
+
+        Tests: svg/W3C-SVG-1.1-SE/text-tref-03-b.svg
+               svg/custom/text-tref-03-b-change-href-dom.svg
+               svg/custom/text-tref-03-b-change-href.svg
+               svg/custom/text-tref-03-b-dynamic.svg
+               svg/custom/text-tref-03-b-dynamic2.svg
+               svg/custom/text-tref-03-b-referenced-element-removal.svg
+               svg/custom/text-tref-03-b-tref-removal.svg
+
+        * svg/SVGTRefElement.cpp:
+        (WebCore::SubtreeModificationEventListener::create):
+        (WebCore::SubtreeModificationEventListener::cast):
+        (WebCore::SubtreeModificationEventListener::removeFromTarget):
+        (WebCore::SubtreeModificationEventListener::SubtreeModificationEventListener):
+        (WebCore::SubtreeModificationEventListener::operator==):
+        (WebCore::SubtreeModificationEventListener::handleEvent):
+        (WebCore::SVGTRefElement::updateReferencedText):
+        (WebCore::SVGTRefElement::parseMappedAttribute):
+        (WebCore::SVGTRefElement::svgAttributeChanged):
+        (WebCore::SVGTRefElement::buildPendingResource):
+        (WebCore::SVGTRefElement::removedFromDocument):
+        * svg/SVGTRefElement.h:
+
+2011-06-28  Abhishek Arya  <inferno@chromium.org>
+
+        Reviewed by Anders Carlsson.
+
+        Split the string creation into a local (while creating text runs)
+        so that it is not destroyed prematurely.
+        https://bugs.webkit.org/show_bug.cgi?id=63543
+
+        Run fast/forms/text-control-intrinsic-widths.html under valgrind/ASAN.       
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::computePreferredLogicalWidths):
+        this one is just done for caution, in case, we don't do the same
+        mistake when adding legacy rounding hacks option.
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::getAvgCharWidth):
+
+2011-06-28  Greg Simon  <gregsimon@chromium.org>
+
+        Reviewed by Dimitri Glazkov.
+
+        Migrate SQLite backing store to LevelDB backing store for Indexeddb.
+        https://bugs.webkit.org/show_bug.cgi?id=62780
+
+        * storage/IDBFactoryBackendImpl.cpp:
+        (WebCore::computeFileIdentifier):
+        (WebCore::computeUniqueIdentifier):
+        (WebCore::IDBFactoryBackendImpl::open):
+        (WebCore::migrateObjectStores):
+        (WebCore::IDBFactoryBackendImpl::migrateFromSQLiteToLevelDB):
+        * storage/IDBLevelDBBackingStore.cpp:
+        (WebCore::IDBLevelDBBackingStore::backingStoreExists):
+        * storage/IDBLevelDBBackingStore.h:
+        * storage/IDBObjectStoreBackendImpl.cpp:
+        (WebCore::IDBObjectStoreBackendImpl::populateIndex):
+        * storage/IDBObjectStoreBackendImpl.h:
+        * storage/IDBSQLiteBackingStore.cpp:
+        (WebCore::IDBSQLiteBackingStore::backingStoreExists):
+        * storage/IDBSQLiteBackingStore.h:
+
+2011-06-28  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        Create intermediate classes as a path towards getting off of pixel offsets
+        https://bugs.webkit.org/show_bug.cgi?id=61896
+
+        Creating three intermediate typedefs to aid in moving layout and hit testing from integers
+        to floats. We'll transition the render tree over to these intermediate types and add
+        infrastructure to support the new types behind USE(FLOAT_LAYOUT_OFFSETS). This allows the ultimate
+        changeover to be easier.
+
+        Switching LayoutState over to this abstraction to verify it works correctly.
+
+        No new tests since this is creating a new abstraction, not changing current behavior.
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * rendering/LayoutState.cpp:
+        (WebCore::LayoutState::LayoutState):
+        (WebCore::LayoutState::pageLogicalOffset):
+        (WebCore::LayoutState::addForcedColumnBreak):
+        * rendering/LayoutState.h:
+        * rendering/LayoutTypes.h: Added.
+
+2011-06-28  Jeff Miller  <jeffm@apple.com>
+
+        Add fullscreen.css and fullscreenQuickTime.css to the WebCore Visual Studio project for convenience.
+        Looks like Visual Studio also re-sorted one more file since my last checkin.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-06-28  Jeff Miller  <jeffm@apple.com>
+
+        Re-sort the WebCore project with Visual Studio after recent changes that I assume were done by manually editing the XML.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-06-28  Joone Hur  <joone.hur@collabora.co.uk>
+
+        Reviewed by Martin Robinson.
+
+        [GTK] Rename 3D transforms to 3D rendering
+        https://bugs.webkit.org/show_bug.cgi?id=63508
+
+        This patch allows to include ENABLE_3D_RENDERING to build WebKitGtk+.
+
+        * GNUmakefile.am: Add ENABLE_3D_RENDERING
+
+2011-06-22  Pavel Podivilov  <podivilov@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: use column numbers when linking to script location in timeline and console.
+        https://bugs.webkit.org/show_bug.cgi?id=63126
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleMessage.prototype._populateStackTraceTreeElement):
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel.FormattedRecord.prototype._getRecordDetails):
+        (WebInspector.TimelinePanel.PopupContentHelper.prototype._appendStackTrace):
+
+2011-06-28  Joone Hur  <joone.hur@collabora.co.uk>
+
+        Reviewed by Martin Robinson.
+
+        [GTK] Allow to build WebKitGtk+ with accelerated compositing
+        https://bugs.webkit.org/show_bug.cgi?id=63404
+
+        WebKitGtk+ needs to implement accelerated compositing for running CSS3 3D transforms 
+        and animation through GPU acceleration. We could implement GraphicsLayer using Clutter.
+
+        * GNUmakefile.list.am:
+        * platform/graphics/clutter/GraphicsLayerClutter.cpp: Added.
+        (WebCore::GraphicsLayer::create): Not implemented yet.
+        (WebCore::GraphicsLayerClutter::GraphicsLayerClutter):
+        (WebCore::GraphicsLayerClutter::~GraphicsLayerClutter):
+        (WebCore::GraphicsLayerClutter::setNeedsDisplay): Ditto.
+        (WebCore::GraphicsLayerClutter::setNeedsDisplayInRect): Ditto.
+        * platform/graphics/clutter/GraphicsLayerClutter.h: Added.
+
+2011-06-28  Dan Bernstein  <mitz@apple.com>
+
+        Reviewed by Darin Adler.
+
+        REGRESSION (r89733): fast/text/zero-font-size.html is failing on Leopard
+        https://bugs.webkit.org/show_bug.cgi?id=63512
+
+        * platform/graphics/mac/SimpleFontDataMac.mm:
+        (WebCore::SimpleFontData::platformWidthForGlyph): Initialize the advance local variable, because
+        on Leopard wkGetGlyphTransformedAdvances can return successfully yet not update the variable when
+        the font size is 0. Presumably, r89733 exposed this by changing the values put on the stack just
+        before this function is called.
+
+2011-06-27  Alexander Pavlov  <apavlov@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: Change the inspector model API and backend to allow CSS pseudoclass inspection
+        https://bugs.webkit.org/show_bug.cgi?id=63446
+
+        * inspector/Inspector.json:
+        * inspector/InspectorCSSAgent.cpp:
+        (WebCore::computePseudoClassMask):
+        (WebCore::InspectorCSSAgent::getStylesForNode):
+        * inspector/InspectorCSSAgent.h:
+        * inspector/front-end/AuditRules.js:
+        (WebInspector.AuditRules.ImageDimensionsRule.prototype.doRun.getStyles):
+        * inspector/front-end/CSSStyleModel.js:
+        (WebInspector.CSSStyleModel.prototype.getStylesAsync):
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype.update):
+
+2011-06-28  Kent Tamura  <tkent@chromium.org>
+
+        Fix a build error on Mac by r89907.
+
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::SVGSMILElement::endListChanged):
+
+2011-06-27  Alexander Pavlov  <apavlov@chromium.org>
+
+        Reviewed by Kent Tamura.
+
+        [Chromium] SELECT or autofill popup is trimmed by screen edge on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=63438
+
+        If the popup is calculated to be trimmed by a screen edge, an attempt is made
+        to alter its vertical edge alignment (set to the right edge for LTR or to the left edge for RTL)
+        to see if the trimmed portion becomes smaller than that with the original layout.
+        The change involves remembering the original frameRect for the popup and restoring it in refresh().
+        This is due to the fact that the frameRect originally set in showInRect() is overwritten
+        by layoutAndGetRTLOffset(), which breaks the originally requested popup container layout metrics.
+        The max width is reset on every layoutAndCalculateWidgetRect(), as it can be constrained by the screen edge,
+        and thus should be re-checked every time the popup is displayed, in case the browser window has been moved.
+
+        Tests: manual-tests/popup-width-restriction-within-screen.html partly covers the fix (should not regress).
+        Other than that, there is no way to unit-test the platform-specific native code.
+
+        * platform/chromium/PopupMenuChromium.cpp:
+        (WebCore::PopupListBox::setMaxWidth): Added. Avoid duplicate popup content layouts (in contrast with setMaxWidthAndLayout()).
+        (WebCore::PopupListBox::PopupListBox):
+        (WebCore::PopupContainer::layoutAndCalculateWidgetRect): Attempt a left-right popup alignment inversion
+        to minimize the trimmed content. Also restore a default max popup width.
+        (WebCore::PopupContainer::layoutAndGetRTLOffset): Always return the popup listbox offset for the RTL (right alignment) case.
+        The method rename is due to the return value semantics change.
+        (WebCore::PopupContainer::showInRect): Store the originally requested frameRect for the popup.
+        (WebCore::PopupContainer::refresh): Restore the original popup frameRect to avoid layout artifacts on refresh.
+        (WebCore::PopupContainer::isRTL): This check should be made by the layoutAndGetRTLOffset() clients.
+        * platform/chromium/PopupMenuChromium.h:
+
+2011-06-28  Kentaro Hara  <haraken@google.com>
+
+        Reviewed by Kent Tamura.
+
+        Allow spaces between e-mail addresses in 'email' input type.
+        https://bugs.webkit.org/show_bug.cgi?id=55987
+
+        Allowed spaces between e-mail addresses in 'email' input type,
+        e.g. ' a@p.com , b@p.com ' is a valid value. Implemented the
+        value sanitization algorithm for an e-mail value.  Added more unit
+        tests that check the e-mail value parser.
+
+        Test: fast/forms/ValidityState-typeMismatch-email.html
+
+        * html/EmailInputType.cpp:
+        (WebCore::EmailInputType::typeMismatchFor):
+        (WebCore::EmailInputType::sanitizeValue):
+        * html/EmailInputType.h:
+        * html/parser/HTMLParserIdioms.cpp:
+        (WebCore::stripHTMLLineBreaks):
+        * html/parser/HTMLParserIdioms.h:
+        (WebCore::isHTMLLineBreak):
+
+2011-06-28  Kent Tamura  <tkent@chromium.org>
+
+        Reviewed by Hajime Morita.
+
+        Refactor RenderTextControl::text().
+        https://bugs.webkit.org/show_bug.cgi?id=63519
+
+        No new tests because this is just a refactoring.
+
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::setInnerTextValue):
+         Resuce the number of text() calls.
+        (WebCore::finishText):
+          - Use StringBuilder.
+          - Make this a static function.
+            This function doesn't access anything of RenderTextControl.
+        (WebCore::RenderTextControl::text):
+         Use emptyString() and StringBuilder.
+        (WebCore::RenderTextControl::textWithHardLineBreaks): ditto.
+        * rendering/RenderTextControl.h: Remove finishText().
+
+2011-06-28  Yury Semikhatsky  <yurys@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: console.group messages should never be coalesced
+        https://bugs.webkit.org/show_bug.cgi?id=63521
+
+        * inspector/InspectorConsoleAgent.cpp:
+        (WebCore::isGroupMessage):
+        (WebCore::InspectorConsoleAgent::addConsoleMessage):
+
+2011-06-28  Yury Semikhatsky  <yurys@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: console group boundaries should be more distinct in UI
+        https://bugs.webkit.org/show_bug.cgi?id=63455
+
+        Show grey bracket to on the left side of a console group message to highlight
+        the group extent.
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleGroup):
+        * inspector/front-end/inspector.css:
+        (#console-prompt):
+        (.console-message, .console-user-command):
+        (.console-message::before, .console-user-command::before, #console-prompt::before, .console-group-title::before):
+        (.console-group-title::before):
+        (.console-group):
+        (.console-group-bracket):
+        (.console-group.collapsed > .console-group-bracket):
+
+2011-06-28  Kent Tamura  <tkent@chromium.org>
+
+        Reviewed by Hajime Morita.
+
+        Use RefPtr for the HTMLElement data members of TextFieldInptType
+        and SearchInputType.
+        https://bugs.webkit.org/show_bug.cgi?id=63511
+
+        No new tests because of no behavior change.
+
+        * html/SearchInputType.cpp:
+        (WebCore::SearchInputType::SearchInputType):
+        No need to initialize the element members explicitly because
+        RefPtr constructor works well.
+        (WebCore::SearchInputType::createShadowSubtree):
+        Substitute an element to a data member, and don't call RefPtr<>::release().
+        (WebCore::SearchInputType::innerBlockElement):
+        Moved from the header file, and adjustment for RefPtr<>.
+        (WebCore::SearchInputType::resultsButtonElement): ditto.
+        (WebCore::SearchInputType::cancelButtonElement): ditto.
+        (WebCore::SearchInputType::destroyShadowSubtree):
+         Adjustment for RefPtr<>.
+        * html/SearchInputType.h:
+         - Move accessor functions to the cpp file because they are virtual.
+         - Change element data member types: HTMLElement* -> RefPtr<HTMLElement>.
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::TextFieldInputType):
+        No need to initialize the element members explicitly because
+        RefPtr constructor works well.
+        (WebCore::TextFieldInputType::~TextFieldInputType):
+        Explicityly defines the destructor in the cpp file to avoid to
+        make it implicitly in the header file. If the destructor was made
+        in the header file, we would need to include HTMLElement.h in the
+        header file.
+        (WebCore::TextFieldInputType::createShadowSubtree):
+        - Don't call RenderTheme::themeForPage().
+        - Substitute an element to a data member, and don't call RefPtr<>::release().
+        (WebCore::TextFieldInputType::setInnerTextElement):
+         Moved from the header file to avoid to include HTMLElement.h.
+        (WebCore::TextFieldInputType::setSpeechButtonElement): ditto.
+        (WebCore::TextFieldInputType::innerTextElement):
+        Moved from the header file, and adjustment for RefPtr<>.
+        (WebCore::TextFieldInputType::innerSpinButtonElement): ditto.
+        (WebCore::TextFieldInputType::speechButtonElement): ditto.
+        (WebCore::TextFieldInputType::destroyShadowSubtree):
+         Adjustment for RefPtr<>.
+        * html/TextFieldInputType.h:
+         - Move accessor functions to the cpp file because they are virtual.
+         - Change element data member types: HTMLElement* -> RefPtr<HTMLElement>.
+
+2011-06-28  Felician Marton  <marton.felician.zoltan@stud.u-szeged.hu>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVG animation flickers when restarting
+        https://bugs.webkit.org/show_bug.cgi?id=18450
+
+        Add new parameter to the following methods. The new parameter is the time of adding a "begin" or "end" time to the SVG animation.
+         - WebCore::SVGSMILElement::addBeginTime
+         - WebCore::SVGSMILElement::beginListChanged
+         - WebCore::SVGSMILElement::addEndTime
+         - WebCore::SVGSMILElement::endListChanged
+        In case of beginTime and beginListChanged it's necessary, because the delay between the event of adding a new begin time
+        (in WebCore::SVGAnimationElement::beginElementAt) and the actual processing (in WebCore::SVGSMILElement::endListChanged)
+        is significant. In lack of event time we can't decide that we should consider the new time or not.
+        If the new begin time is smaller than the event time, we musn't begin the animation, else we shoud do further calculations.
+
+        The following methods just modified for consistency:
+         - WebCore::SVGSMILElement::addEndTime
+         - WebCore::SVGSMILElement::endListChanged
+
+        No new tests, because currently there is no way to test SVG flickering at zero time.
+
+        * svg/SVGAnimationElement.cpp:
+        (WebCore::SVGAnimationElement::beginElementAt):
+        (WebCore::SVGAnimationElement::endElementAt):
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::SVGSMILElement::attributeChanged):
+        (WebCore::SVGSMILElement::addBeginTime):
+        (WebCore::SVGSMILElement::addEndTime):
+        (WebCore::SVGSMILElement::beginListChanged):
+        (WebCore::SVGSMILElement::endListChanged):
+          The body changed:
+           - Use new parameter, the time of adding the new begin time.
+           - Cancel some incorrect optimalization. We should also do further calculations when elapsed >= m_intervalBegin.
+        (WebCore::SVGSMILElement::createInstanceTimesFromSyncbase):
+        (WebCore::SVGSMILElement::handleConditionEvent):
+        (WebCore::SVGSMILElement::beginByLinkActivation):
+        * svg/animation/SVGSMILElement.h:
+
+2011-06-28  Csaba Osztrogonác  <ossy@webkit.org>
+
+        Reviewed by Andreas Kling.
+
+        Adding MHTML reading support.
+        https://bugs.webkit.org/show_bug.cgi?id=7168
+
+        * features.pri: Disable MHTML on Qt by default in a proper way.
+
+2011-06-28  Csaba Osztrogonác  <ossy@webkit.org>
+
+        Reviewed by Andreas Kling.
+
+        [Qt] Remove ENABLE_XBL, because there aren't ENABLE(XBL) macros anymore.
+
+        * features.pri:
+
+2011-06-27  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        Unreviewed. Fix style error related to wrong include order.
+
+        * platform/graphics/efl/ImageEfl.cpp:
+
+2011-06-27  Brian Weinstein  <bweinstein@apple.com>
+
+        Fix the WebCore vcproj file after r89851.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-06-27  Joe Wild  <joseph.wild@nokia.com>
+
+        Reviewed by Simon Fraser.
+
+        Crash on www.crave.cnet.com in FrameView::windowClipRect()
+        https://bugs.webkit.org/show_bug.cgi?id=56393
+
+        Check for a null renderer to fix a crash. This situation can
+        arise when external content/plugins is referenced from html
+        elements with style="display:none".
+
+        Test: plugins/hidden-iframe-with-swf-plugin.html
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::windowClipRect):
+
+2011-06-27  Raymes Khoury  <raymes@chromium.org>
+
+        Reviewed by Tony Chang.
+
+        WebCore fails to compile in thumb mode when neon instructions are
+        enabled.
+
+        There are two files (FELightingNEON.cpp and FEGaussianBlur.cpp)
+        which fail to build when -mthumb is passed to gcc. These contain inline
+        assembly for neon instructions on arm. This patch forces the -marm flag
+        to be passed when compiling these files to work around this.
+
+        https://bugs.webkit.org/show_bug.cgi?id=62916
+
+        Built WebKit in Chromium and checked that -marm is passed
+        only when building these files.
+
+        https://bugs.webkit.org/show_bug.cgi?id=62916
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-06-27  Jay Civelli  <jcivelli@chromium.org>
+
+        Reviewed by Darin Fisher.
+
+        Adding binary part support to MHTML.
+        https://bugs.webkit.org/show_bug.cgi?id=63310
+
+        * loader/archive/mhtml/MHTMLArchive.cpp:
+        (WebCore::MHTMLArchive::generateMHTMLData):
+        (WebCore::MHTMLArchive::generateMHTMLDataUsingBinaryEncoding):
+        * loader/archive/mhtml/MHTMLArchive.h:
+        * loader/archive/mhtml/MHTMLParser.cpp:
+        (WebCore::MHTMLParser::parseNextPart):
+        * platform/SharedBuffer.cpp:
+        (WebCore::SharedBuffer::append):
+        * platform/SharedBuffer.h:
+        * platform/network/MIMEHeader.cpp:
+        (WebCore::MIMEHeader::parseContentTransferEncoding):
+        * platform/network/MIMEHeader.h:
+
+2011-06-27  Levi Weintraub  <leviw@chromium.org>
+
+        Reviewed by Eric Seidel.
+
+        Add support for unicode-bidi:plaintext CSS property
+        https://bugs.webkit.org/show_bug.cgi?id=50949
+
+        Adding support for unicode-bidi: plaintext. This involves invoking P2 and P3
+        of the Unicode BiDi algorithm on each paragraph of a block with that style.
+        This is similar to dir=auto but done per-paragraph instead of per element.
+
+        Test: fast/text/international/unicode-bidi-plaintext.html
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):  Added plaintext.
+        * css/CSSPrimitiveValueMappings.h:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue): Ditto.
+        (WebCore::CSSPrimitiveValue::operator EUnicodeBidi): Ditto.
+        * css/CSSValueKeywords.in: Ditto.
+        * html/HTMLElement.cpp:
+        (WebCore::unicodeBidiAttributeForDirAuto): Helper to map elements with dir=auto
+        to their proper unicode-bidi attribute.
+        (WebCore::HTMLElement::parseMappedAttribute): Assign plaintext to pre and textarea
+        when dir=auto.
+        * platform/text/UnicodeBidi.h: Added plaintext.
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::determineParagraphDirection): Determines the direction of a paragraph
+        based on the first strong character. Stops at first paragraph separator.
+        (WebCore::RenderBlock::layoutInlineChildren): Uses determineParagraphDirection
+        when in unicode-bidi: plaintext mode (and operating at the block's BidiContext)
+        to set each paragraph to the proper base BidiContext.
+        (WebCore::RenderBlock::determineStartPosition): Ditto.
+        * rendering/style/RenderStyle.h: Gave _unicodebidi another bit to accomodate
+        for plaintext.
+
+2011-06-27  Alexis Menard  <alexis.menard@openbossa.org>
+
+        Reviewed by Darin Adler.
+
+        Use specific headers includes rather than full system headers.
+        https://bugs.webkit.org/show_bug.cgi?id=63475
+
+        Use only needed headers rather than system headers.
+
+        No new tests, it's just a little cosmetic change.
+
+        * platform/mac/WebVideoFullscreenController.h:
+        * platform/mac/WebVideoFullscreenHUDWindowController.h:
+
+2011-06-27  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Reviewed by Darin Adler.
+
+        Allow non-main thread text drawing in ICU ports
+        https://bugs.webkit.org/show_bug.cgi?id=63482
+
+        Some ports allow multiple threads to draw strings.
+        LineBreakIteratorPool is not thread safe and the existing
+        ASSERT caught cases where multiple threads were trying
+        to access the shared pool. This makes the pool a lazily
+        created per-thread pool to allow for thread safe pool use.
+
+        * platform/ThreadGlobalData.h:
+        * platform/ThreadGlobalData.cpp:
+        (WebCore::ThreadGlobalData::ThreadGlobalData): start with null.
+        (WebCore::ThreadGlobalData::lineBreakIteratorPool): lazily create.
+        (WebCore::ThreadGlobalData::destroy): delete.
+        Manage the lifetime of the per-thread pool instance.
+
+        * platform/text/LineBreakIteratorPoolICU.h:
+        (WebCore::LineBreakIteratorPool::sharedPool):
+        Use the per-thread pool instance and remove the ASSERT that
+        this needs to be on the main thread.
+
+        (WebCore::LineBreakIteratorPool::create):
+        Create a PassOwnPtr so we can use OwnPtr on pools.
+
+        (WebCore::LineBreakIteratorPool::LineBreakIteratorPool):
+        Private now that there is a public create function.
+
+2011-06-27  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Reviewed by Darin Adler.
+
+        Extract LineBreakIteratorPool class into its own file
+        https://bugs.webkit.org/show_bug.cgi?id=63471
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        Add the new file to builds that used TextBreakIteratorPoolICU.h.
+
+        * platform/text/LineBreakIteratorPoolICU.h: Added.
+        (WebCore::LineBreakIteratorPool::sharedPool):
+        (WebCore::LineBreakIteratorPool::LineBreakIteratorPool):
+        Expose the constructor so it can be used by others.
+
+        * platform/text/TextBreakIteratorICU.cpp:
+        Remove the old LineBreakIteratorPool implementation.
+
+2011-06-27  Justin Garcia  <justin.garcia@apple.com>
+
+        Reviewed by Ryosuke Niwa.
+
+        CompositeEditCommand::inputText(const String& text, bool selectedInsertText) is unused
+        https://bugs.webkit.org/show_bug.cgi?id=62921
+
+        * editing/CompositeEditCommand.cpp:
+        * editing/CompositeEditCommand.h:
+        * editing/InsertTextCommand.cpp:
+        (WebCore::InsertTextCommand::input):
+
+2011-05-17  Nat Duca  <nduca@chromium.org>
+
+        Reviewed by James Robinson.
+
+        [chromium] Implement CCLayerTreeHost and CCLayerTreeHostImpl portions of threaded compositor
+        https://bugs.webkit.org/show_bug.cgi?id=58408
+
+        Create CCLayerTreeHost and CCLayerTreeHostImpl, which are the main
+        thread and compositor thread halves of a composited view. Communication
+        between the two is based on the design used in FileStreamProxy.
+
+        * WebCore.gypi:
+        * platform/chromium/TraceEvent.h:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::create):
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::setViewport):
+        (WebCore::LayerRendererChromium::updateLayers):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromiumImpl::create):
+        (WebCore::LayerRendererChromiumImpl::drawLayersAndPresent):
+        (WebCore::LayerRendererChromiumImpl::LayerRendererChromiumImpl):
+        (WebCore::LayerRendererChromiumImpl::drawLayersOnMainThread):
+        (WebCore::LayerRendererChromiumImplProxy::create):
+        (WebCore::LayerRendererChromiumImplProxy::createLayerTreeHostImpl):
+        (WebCore::LayerRendererChromiumImplProxy::LayerRendererChromiumImplProxy):
+        (WebCore::LayerRendererChromium::createLayerTreeHostImplProxy):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
+        (WebCore::CCHeadsUpDisplay::setShowFPSCounter):
+        (WebCore::CCHeadsUpDisplay::setShowPlatformLayerTree):
+        * platform/graphics/chromium/cc/CCHeadsUpDisplay.h:
+        (WebCore::CCHeadsUpDisplay::currentFrameNumber):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::init):
+        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::beginCommit):
+        (WebCore::CCLayerTreeHost::commitComplete):
+        (WebCore::CCLayerTreeHost::animateAndLayout):
+        (WebCore::CCLayerTreeHost::createLayerTreeHostCommitter):
+        (WebCore::CCLayerTreeHost::setNeedsCommitAndRedraw):
+        (WebCore::CCLayerTreeHost::setNeedsRedraw):
+        (WebCore::CCLayerTreeHost::updateLayers):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHost::frameNumber):
+        * platform/graphics/chromium/cc/CCLayerTreeHostCommitter.cpp: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHostCommitter::create):
+        (WebCore::CCLayerTreeHostCommitter::commit):
+        * platform/graphics/chromium/cc/CCLayerTreeHostCommitter.h: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHostCommitter::CCLayerTreeHostCommitter):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp: Added.
+        (WebCore::CCLayerTreeHostImpl::CCLayerTreeHostImpl):
+        (WebCore::CCLayerTreeHostImpl::~CCLayerTreeHostImpl):
+        (WebCore::CCLayerTreeHostImpl::beginCommit):
+        (WebCore::CCLayerTreeHostImpl::commitComplete):
+        (WebCore::CCLayerTreeHostImpl::drawLayers):
+        (WebCore::CCLayerTreeHostImpl::setNeedsCommitAndRedraw):
+        (WebCore::CCLayerTreeHostImpl::setNeedsRedraw):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHostImplClient::~CCLayerTreeHostImplClient):
+        (WebCore::CCLayerTreeHostImpl::frameNumber):
+        (WebCore::CCLayerTreeHostImpl::sourceFrameNumber):
+        (WebCore::CCLayerTreeHostImpl::setSourceFrameNumber):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp: Added.
+        (WebCore::CCLayerTreeHostImplProxy::CCLayerTreeHostImplProxy):
+        (WebCore::CCLayerTreeHostImplProxy::start):
+        (WebCore::CCLayerTreeHostImplProxy::~CCLayerTreeHostImplProxy):
+        (WebCore::CCLayerTreeHostImplProxy::isStarted):
+        (WebCore::CCLayerTreeHostImplProxy::setNeedsCommitAndRedraw):
+        (WebCore::CCLayerTreeHostImplProxy::setNeedsRedraw):
+        (WebCore::CCLayerTreeHostImplProxy::stop):
+        (WebCore::CCLayerTreeHostImplProxy::postDrawLayersTaskOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::requestFrameAndCommitOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::isMainThread):
+        (WebCore::CCLayerTreeHostImplProxy::isCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::requestFrameAndCommit):
+        (WebCore::CCLayerTreeHostImplProxy::commitOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::drawLayersOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::setNeedsCommitAndRedrawOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::setNeedsRedrawOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::initImplOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::layerTreeHostClosedOnCCThread):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.h: Added.
+        (WebCore::CCLayerTreeHostImplProxy::host):
+        * platform/graphics/chromium/cc/CCMainThreadTask.h:
+        * platform/graphics/chromium/cc/CCThread.cpp:
+        (WebCore::CCThread::runLoop):
+        * platform/graphics/chromium/cc/CCThreadTask.h:
+
+2011-06-27  Abhishek Arya  <inferno@chromium.org>
+
+        Reviewed by Simon Fraser.
+
+        Fix removal of overhanging floats on style changes to absolute/fixed position.
+        https://bugs.webkit.org/show_bug.cgi?id=63355
+
+        1. If we are not currently positioned.
+        2. And we are not floating. (If we are floating, then this will be automatically
+           done in RenderBox::styleWillChange as part of removeFloatingOrPositionedChildFromBlockLists) 
+        3. And we have overhanging floats from previous sibling blocks.
+        4. And our new new style tells that we will have absolute or fixed position.
+
+        Then, we mark all our descendants with floats for layout. This will make sure that
+        overhanging floats are removed. Also, it is important to do that since if that previous
+        sibling block goes away, it is not able to tell us that to remove those floats thinking 
+        that being a positioned block, we should have removed them already.
+
+        Tests: fast/block/float/intruding-float-add-in-sibling-block-on-static-position.html
+               fast/block/float/intruding-float-add-in-sibling-block-on-static-position2.html
+               fast/block/float/intruding-float-remove-from-sibling-block-on-absolute-position.html
+               fast/block/float/intruding-float-remove-from-sibling-block-on-absolute-position2.html
+               fast/block/float/intruding-float-remove-from-sibling-block-on-fixed-position.html
+               fast/block/float/intruding-float-remove-from-sibling-block-on-fixed-position2.html
+               fast/block/float/overhanging-float-add-in-static-position-block.html
+               fast/block/float/overhanging-float-add-in-static-position-block2.html
+               fast/block/float/overhanging-float-remove-from-absolute-position-block.html
+               fast/block/float/overhanging-float-remove-from-absolute-position-block2.html
+               fast/block/float/overhanging-float-remove-from-fixed-position-block.html
+               fast/block/float/overhanging-float-remove-from-fixed-position-block2.html
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::styleWillChange):
+
+2011-06-27  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVGAnimatedType should support SVGPreserveAspectRatio animation
+        https://bugs.webkit.org/show_bug.cgi?id=63456
+        
+        Follow up of "SVGAnimation should use direct unit animation for SVGLength": https://bugs.webkit.org/show_bug.cgi?id=61368
+        This patch continues the conversion to the new concept of SVGAnimatorFactory with SVGAnimatedPreserveAspectRatio.
+        
+        The new animator does not affect any behavior, since it was animated with SVGAnimatedString before. The new animator is still needed
+        to support animVal and baseVal later.
+
+        Test: svg/animations/svgPreserveAspectRatio-animation-1.html
+
+        * CMakeLists.txt: Added new file.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * svg/SVGAllInOne.cpp: Ditto.
+        * svg/SVGAnimateElement.cpp: Handle AnimatedPreserveAspectRatio.
+        (WebCore::SVGAnimateElement::determineAnimatedAttributeType):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        * svg/SVGAnimatedPreserveAspectRatio.cpp: Added. New animator for SVGAnimatedPreserveAspectRatio.
+        (WebCore::SVGAnimatedPreserveAspectRatioAnimator::SVGAnimatedPreserveAspectRatioAnimator):
+        (WebCore::SVGAnimatedPreserveAspectRatioAnimator::constructFromString):
+        (WebCore::SVGAnimatedPreserveAspectRatioAnimator::calculateFromAndToValues):
+        (WebCore::SVGAnimatedPreserveAspectRatioAnimator::calculateFromAndByValues):
+        (WebCore::SVGAnimatedPreserveAspectRatioAnimator::calculateAnimatedValue):
+        (WebCore::SVGAnimatedPreserveAspectRatioAnimator::calculateDistance):
+        * svg/SVGAnimatedPreserveAspectRatio.h:
+        (WebCore::SVGAnimatedPreserveAspectRatioAnimator::~SVGAnimatedPreserveAspectRatioAnimator):
+        * svg/SVGAnimatedType.cpp: Support for SVGPreserveAspectRatio.
+        (WebCore::SVGAnimatedType::~SVGAnimatedType):
+        (WebCore::SVGAnimatedType::createPreserveAspectRatio):
+        (WebCore::SVGAnimatedType::preserveAspectRatio):
+        (WebCore::SVGAnimatedType::valueAsString):
+        (WebCore::SVGAnimatedType::setValueAsString):
+        (WebCore::SVGAnimatedType::setPreserveAspectRatioBaseValue):
+        * svg/SVGAnimatedType.h:
+        * svg/SVGAnimatorFactory.h:
+        (WebCore::SVGAnimatorFactory::create):
+
+2011-06-27  Alexis Menard  <alexis.menard@openbossa.org>
+
+        Reviewed by Kenneth Rohde Christiansen.
+
+        [Qt] Remove Phonon MediaPlayer from the tree.
+        https://bugs.webkit.org/show_bug.cgi?id=63448
+
+        Remove Phonon mediaplayer as it is unused, not finished and
+        unmaintained.
+
+        * WebCore.gypi:
+        * WebCore.pri:
+        * WebCore.pro:
+        * features.pri:
+        * platform/graphics/MediaPlayer.cpp:
+        * platform/graphics/qt/MediaPlayerPrivatePhonon.cpp: Removed.
+        * platform/graphics/qt/MediaPlayerPrivatePhonon.h: Removed.
+
+2011-06-27  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Reviewed by Kent Tamura.
+
+        Crash in TextIterator
+        https://bugs.webkit.org/show_bug.cgi?id=63334
+
+        Fix a crash in TextIterator. Keep m_sortedTextBoxes and renderer consistent
+        and check !m_offset when handling first letter.
+
+        Also add more assertions to help detecting similar bugs.
+
+        Test: editing/text-iterator/first-letter-rtl-crash.html
+
+        * editing/TextIterator.cpp:
+        (WebCore::TextIterator::handleTextNode):
+        (WebCore::TextIterator::emitText):
+
+2011-06-27  Caio Marcelo de Oliveira Filho  <caio.oliveira@openbossa.org>
+
+        Reviewed by Andreas Kling.
+
+        [Qt] tst_QWebFrame::overloadedSlots() fails
+        https://bugs.webkit.org/show_bug.cgi?id=37319
+
+        This patch is based on Noam Rosenthal original patch in the same bug.
+
+        When hinted with QWebElement metatype, we qualify the conversion
+        from JSElement as a "perfect match".
+
+        The test was failing because the wrong slot was called, since the QWebElement
+        match was taken as equal to the others and not chosen when the metacall happened.
+
+        * bridge/qt/qt_runtime.cpp:
+        (JSC::Bindings::convertValueToQVariant): Identify the conversion between JSElement
+        to QWebElement as a "perfect match" (dist = 0). Add comments to explain the reason
+        why we have the implicit conversion.
+
+2011-06-27  ChangSeok Oh  <shivamidow@gmail.com>
+
+        Reviewed by Martin Robinson.
+
+        [GTK] Fix build break to support webgl
+        https://bugs.webkit.org/show_bug.cgi?id=63425
+
+        Some missing files in ANGLE are just added to fix build-break.
+
+        No test reqired
+
+        * GNUmakefile.list.am:
+
+2011-06-27  Hyowon Kim  <hw1008.kim@samsung.com>
+
+        Reviewed by Martin Robinson.
+
+        [EFL] Add some PLATFORM(EFL) ifdefs to GraphicsContext3D.h
+        https://bugs.webkit.org/show_bug.cgi?id=62959
+
+        Add PLATFORM(EFL) ifdefs to use GraphicsContextInternal.
+
+        * platform/graphics/GraphicsContext3D.h:
+
+2011-06-27  Alexandru Chiculita  <achicu@adobe.com>
+
+        Reviewed by Ojan Vafai.
+
+        css combinator "+" in combination with NAV tag is buggy
+        https://bugs.webkit.org/show_bug.cgi?id=47971
+
+        Added a new state in css/tokenizer.flex for the "nth" rule. The state begins
+        at nth-*( functions and ends at the first ")". It avoids parsing selectors 
+        like "#div+nav" as: "#div" "+n" "av".
+
+        Test: fast/css/div_plus_nav_bug47971.html
+
+        * css/maketokenizer:
+        * css/tokenizer.flex:
+
+2011-06-27  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r89822.
+        http://trac.webkit.org/changeset/89822
+        https://bugs.webkit.org/show_bug.cgi?id=63461
+
+        Broken builds (Requested by apavlov on #webkit).
+
+        * inspector/Inspector.json:
+        * inspector/InspectorCSSAgent.cpp:
+        (WebCore::InspectorCSSAgent::getStylesForNode):
+        * inspector/InspectorCSSAgent.h:
+        * inspector/front-end/AuditRules.js:
+        (WebInspector.AuditRules.ImageDimensionsRule.prototype.doRun.getStyles):
+        * inspector/front-end/CSSStyleModel.js:
+        (WebInspector.CSSStyleModel.prototype.getStylesAsync):
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype.update):
+
+2011-06-27  Noel Gordon  <noel.gordon@gmail.com>
+
+        Reviewed by Adam Roben.
+
+        Send keypress events to windowless plugins on the windows port.
+        https://bugs.webkit.org/show_bug.cgi?id=63144
+
+        No new tests.  Covered by existing windowless plugin tests plugins/mouse-events.html
+        and plugins/keyboard-events.html.  Both are not yet working as desired because focus
+        events are not being fowarded to windowed plugins on the win port (bug 62375).  Test
+        plugin logging on the win port was added in bug 61721.  New failing expectations for
+        plugins/keyboard-events.html were subsequently added in bug 33973 so there's no need
+        to update test expectations in this patch.
+
+         * plugins/win/PluginViewWin.cpp:
+        (WebCore::PluginView::handleKeyboardEvent): Add an ASSERT(m_plugin && !m_isWindowed)
+        to indicate that the routine is for windowless plugins.  Remove trailing whitespace.
+        Add handling for keyPress events (map to WM_CHAR).
+        (WebCore::PluginView::handleMouseEvent): Add the ASSERT to indicate that the routine
+        is for windowless plugins.  Add FIXME note.  Remove trailing whitespace.
+
+2011-06-27  Alexander Pavlov  <apavlov@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: Change the inspector model API and backend to allow CSS pseudoclass inspection
+        https://bugs.webkit.org/show_bug.cgi?id=63446
+
+        * inspector/Inspector.json:
+        * inspector/InspectorCSSAgent.cpp:
+        (WebCore::computePseudoClassMask):
+        (WebCore::InspectorCSSAgent::getStylesForNode):
+        * inspector/InspectorCSSAgent.h:
+        * inspector/front-end/AuditRules.js:
+        (WebInspector.AuditRules.ImageDimensionsRule.prototype.doRun.getStyles):
+        * inspector/front-end/CSSStyleModel.js:
+        (WebInspector.CSSStyleModel.prototype.getStylesAsync):
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype.update):
+
+2011-06-27  Pavel Feldman  <pfeldman@google.com>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: [REGRESSION r84481] updateLayout called from DrawNodeHighlight
+        https://bugs.webkit.org/show_bug.cgi?id=63405
+
+        We should not call layout from paint.
+
+        * inspector/DOMNodeHighlighter.cpp:
+        (WebCore::DOMNodeHighlighter::drawNodeHighlight):
+        * inspector/DOMNodeHighlighter.h:
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::drawNodeHighlight):
+
+2011-06-27  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        Unreviewed. Fix style error in EFL port.
+
+        * platform/efl/PlatformKeyboardEventEfl.cpp:
+        * platform/efl/PlatformScreenEfl.cpp:
+        * platform/efl/SharedBufferEfl.cpp:
+
+2011-06-27  Pavel Feldman  <pfeldman@google.com>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: node selection is slow in the Elements panel.
+        https://bugs.webkit.org/show_bug.cgi?id=60813
+
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype.update.stylesCallback):
+        (WebInspector.StylesSidebarPane.prototype.update.computedStyleCallback):
+        (WebInspector.StylesSidebarPane.prototype.update):
+
+2011-06-26  Pavel Feldman  <pfeldman@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: roll out r88337 for making tests flaky.
+        https://bugs.webkit.org/show_bug.cgi?id=63422
+
+        * inspector/front-end/ElementsPanel.js:
+        (WebInspector.ElementsPanel):
+        (WebInspector.ElementsPanel.prototype.updateStyles):
+        (WebInspector.ElementsPanel.prototype._stylesUpdated):
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane.prototype.update.stylesCallback):
+        (WebInspector.StylesSidebarPane.prototype.update.computedStyleCallback):
+        (WebInspector.StylesSidebarPane.prototype.update):
+
+2011-06-27  Huang Dongsung  <luxtella@company100.net>
+
+        Reviewed by Kenneth Rohde Christiansen.
+
+        TiledBackingStore endlessly creates and destroys tiles due to an off-by-one
+        error.
+        https://bugs.webkit.org/show_bug.cgi?id=62422
+
+        REGRESSION(r77286): Remove bottomRight().
+        REGRESSION(r77312): Change the logic to get the bottom right point.
+        REGRESSION(r77928): Cause off-by-one error in TiledBackingStore.
+        REGRESSION(r78783): Cause off-by-one error in TiledDrawingAreaProxy.
+        REGRESSION(r78785): Cause off-by-one error in TiledDrawingAreaProxy.
+
+        If the viewport width equals the contents width, especially in the mobile
+        device, TiledBackingStore endlessly creates and deletes the rightmost
+        column and bottom row of tiles.
+        In the detail, dropTilesOutsideRect() in TiledBackingStore::createTiles()
+        deletes tiles and setTile(coordinate, Tile::create(this, coordinate)) creates
+        tiles infinitely.
+        Modified TiledDrawingAreaProxy also.
+
+        * platform/graphics/TiledBackingStore.cpp:
+        (WebCore::innerBottomRight):
+        (WebCore::TiledBackingStore::invalidate):
+        (WebCore::TiledBackingStore::paint):
+        (WebCore::TiledBackingStore::createTiles):
+
+2011-06-26  Adam Barth  <abarth@webkit.org>
+
+        Reviewed by Eric Seidel.
+
+        Remove LegacyDefaultOptionalArguments from WebAudio IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=63416
+
+        WebAudio isn't that widely used, so it's seems somewhat safe to remove
+        legacy code generation hacks.  I'm not an expert on WebAudio, but the
+        API doesn't appear to need many optional arguments.
+
+        There are a bunch of APIs that have custom bindings that look like they
+        could be autogenerated.  I've added FIXME comments where appropriate.
+
+        * webaudio/AudioBuffer.idl:
+        * webaudio/AudioContext.idl:
+        * webaudio/AudioListener.idl:
+        * webaudio/AudioNode.idl:
+        * webaudio/AudioPannerNode.idl:
+        * webaudio/AudioParam.idl:
+        * webaudio/RealtimeAnalyserNode.idl:
+
+2011-06-26  Yury Semikhatsky  <yurys@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: REGRESSION Scripts panel sidebar pane context menu has no "Remove breakpoint" item
+        https://bugs.webkit.org/show_bug.cgi?id=63421
+
+        Show generic sidebar menu only if no pane-specific menu has been shown.
+
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel):
+
+2011-06-26  Adam Barth  <abarth@webkit.org>
+
+        Build fix for clang.  Apparently clang doesn't want us to use the std
+        namespace in headers, which makes sense.
+
+        * svg/SVGAnimatedType.h:
+
+2011-06-26  Adam Barth  <abarth@webkit.org>
+
+        Reviewed by Eric Seidel.
+
+        Remove LegacyDefaultOptionalArguments from XMLHttpRequest.idl and XMLHttpRequestUpload.idl
+        https://bugs.webkit.org/show_bug.cgi?id=63418
+
+        The XMLHttpRequest.idl interface used to implement the new behavior
+        manually using the RequiresAllArguments attribute.  Now that we have
+        that behavior by default, we can simply remove the
+        LegacyDefaultOptionalArguments attribute.
+
+        * xml/XMLHttpRequest.idl:
+        * xml/XMLHttpRequestUpload.idl:
+
+2011-06-26  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVGAnimatedType should support SVGLengthList animation
+        https://bugs.webkit.org/show_bug.cgi?id=63399
+
+        Follow up of "SVGAnimation should use direct unit animation for SVGLength": https://bugs.webkit.org/show_bug.cgi?id=61368
+        This patch continues the conversion to the new concept of SVGAnimatorFactory with SVGAnimatedLengthList.
+        
+        Interpolated animations of glyph positions are possible now.
+
+        Tests: svg/animations/svglengthlist-animation-1.html
+               svg/animations/svglengthlist-animation-2.html
+               svg/animations/svglengthlist-animation-3.html
+               svg/animations/svglengthlist-animation-4.html
+
+        * CMakeLists.txt: Add new file to build system.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * svg/SVGAllInOne.cpp: Ditto.
+        * svg/SVGAnimateElement.cpp: Make use of AnimatedLengthList.
+        (WebCore::SVGAnimateElement::determineAnimatedAttributeType):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        * svg/SVGAnimatedLengthList.cpp: Added. New animator for SVGLengthList.
+        (WebCore::SVGAnimatedLengthListAnimator::SVGAnimatedLengthListAnimator):
+        (WebCore::SVGAnimatedLengthListAnimator::constructFromString):
+        (WebCore::SVGAnimatedLengthListAnimator::calculateFromAndToValues):
+        (WebCore::SVGAnimatedLengthListAnimator::calculateFromAndByValues):
+        (WebCore::SVGAnimatedLengthListAnimator::calculateAnimatedValue):
+        (WebCore::SVGAnimatedLengthListAnimator::calculateDistance):
+        * svg/SVGAnimatedLengthList.h:
+        (WebCore::SVGAnimatedLengthListAnimator::~SVGAnimatedLengthListAnimator):
+        * svg/SVGAnimatedType.cpp: Add SVGLengthList.
+        (WebCore::SVGAnimatedType::~SVGAnimatedType):
+        (WebCore::SVGAnimatedType::createLengthList):
+        (WebCore::SVGAnimatedType::lengthList):
+        (WebCore::SVGAnimatedType::valueAsString):
+        (WebCore::SVGAnimatedType::setValueAsString):
+        * svg/SVGAnimatedType.h:
+        * svg/SVGAnimatorFactory.h:
+        (WebCore::SVGAnimatorFactory::create):
+        * svg/SVGLength.cpp: Add new constructor with LengthType, LengthMode and value.
+        (WebCore::SVGLength::SVGLength):
+        * svg/SVGLength.h:
+
+2011-06-26  Adam Barth  <abarth@webkit.org>
+
+        Reviewed by Eric Seidel.
+
+        window.location should use the holder's prototype chain
+        https://bugs.webkit.org/show_bug.cgi?id=63411
+
+        This patch corrects the prototype chain for Location, but we really
+        should do a complete cleanup of the prototype chain generation, like we
+        did for JavaScriptCore.
+
+        Test: http/tests/security/location-prototype.html
+
+        * bindings/scripts/CodeGeneratorV8.pm:
+
+2011-06-26  Adam Barth  <abarth@webkit.org>
+
+        Reviewed by Eric Seidel.
+
+        Add [Optional] attributes where appropriate for addEventListener and removeEventListener
+        https://bugs.webkit.org/show_bug.cgi?id=63417
+
+        This patch doesn't actually change behavior because these interfaces
+        have the LegacyDefaultOptionalArguments attribute.  This patch paves
+        the way to removing LegacyDefaultOptionalArguments from some of these
+        interfaces as well as making the project safer for copy-and-pasting
+        these methods into new IDL files that don't have the
+        LegacyDefaultOptionalArguments attribute.
+
+        * bindings/scripts/test/TestObj.idl:
+        * dom/EventTarget.idl:
+        * dom/MediaStream.idl:
+        * dom/MessagePort.idl:
+        * dom/Node.idl:
+        * loader/appcache/DOMApplicationCache.idl:
+        * notifications/Notification.idl:
+        * page/DOMWindow.idl:
+        * page/EventSource.idl:
+        * storage/IDBRequest.idl:
+        * storage/IDBTransaction.idl:
+        * svg/SVGElementInstance.idl:
+        * websockets/WebSocket.idl:
+        * workers/AbstractWorker.idl:
+        * workers/WorkerContext.idl:
+        * xml/XMLHttpRequest.idl:
+        * xml/XMLHttpRequestUpload.idl:
+
+2011-06-26  Adam Barth  <abarth@webkit.org>
+
+        Reviewed by Kent Tamura.
+
+        m_formElementsWithFormAttribute doesn't ref the objects it holds
+        https://bugs.webkit.org/show_bug.cgi?id=62956
+
+        Test: fast/forms/form-associated-element-crash3.html
+
+        * dom/Document.h:
+
+2011-06-26  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        FileList::filenames should be FileList::paths, because it's more accurate.
+        https://bugs.webkit.org/show_bug.cgi?id=63414
+
+        Refactoring, no change in behavior.
+
+        * fileapi/FileList.cpp:
+        (WebCore::FileList::paths): Renamed from filenames.
+        * fileapi/FileList.h:
+        * html/FileInputType.cpp:
+        (WebCore::FileInputType::handleDOMActivateEvent): Changed to use filenames, also fixed a reach-unto-thyself whoopsie.
+        (WebCore::FileInputType::requestIcon): Ditto.
+        (WebCore::FileInputType::filesChosen): Ditto.
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::fileTextValue): Ditto.
+
+2011-06-26  Young Han Lee  <joybro@company100.net>
+
+        Reviewed by Dirk Schulze.
+
+        SVGAnimation - keyTime value 1 never get animated
+        https://bugs.webkit.org/show_bug.cgi?id=63230
+
+        According to the SMIL 3.0 specification, the index of the keyTimes should be 
+        determined under the end-point-exclusive rule (e.g. Given keyTimes(0;0.5;1) 
+        and t=0.5, the current index of the keyTimes have to be 1 not 0).
+        http://www.w3.org/TR/SMIL3/smil-animation.html#animationNS-InterpolationExamplesAdvanced
+
+        Test: svg/animations/animate-number-calcMode-discrete-keyTimes.html
+
+        * svg/SVGAnimationElement.cpp:
+        (WebCore::SVGAnimationElement::calculateKeyTimesIndex):
+
+2011-06-26  Dan Bernstein  <mitz@apple.com>
+
+        Reviewed by Darin Adler.
+
+        With word-break: break-all, words do not break correctly before a surrogate pair
+        https://bugs.webkit.org/show_bug.cgi?id=63401
+
+        The code to check for mid-word breaks accumulates width one character at a time. It was actually
+        measuring the two parts of the surrogate pair individually, so they appeared to have zero width.
+        Fixed by checking for surrogate pairs and measuring the pair as one unit.
+
+        Test: fast/text/midword-break-before-surrogate-pair.html
+
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::RenderBlock::LineBreaker::nextLineBreak):
+
+2011-06-26  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVGAnimatedType should support SVGNumberOptionalNumber animation
+        https://bugs.webkit.org/show_bug.cgi?id=63397
+        
+        Follow up of "SVGAnimation should use direct unit animation for SVGLength": https://bugs.webkit.org/show_bug.cgi?id=61368
+        This patch continues the conversion to the new concept of SVGAnimatorFactory with SVGAnimatedNumberOptionalNumber.
+        
+        Animations of attributes with type SVGAnimatedNumberOptionalNumber can be interpolated now. This can be used for smooth
+        growing shadows with feGaussianBlur, feDropShadow or other filter effects.
+
+        Tests: svg/animations/svgnumberoptionalnumber-animation-1.html
+               svg/animations/svgnumberoptionalnumber-animation-2.html
+               svg/animations/svgnumberoptionalnumber-animation-3.html
+               svg/animations/svgnumberoptionalnumber-animation-4.html
+
+        * CMakeLists.txt: Added new files to build system.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * svg/SVGAllInOne.cpp: Ditto.
+        * svg/SVGAnimateElement.cpp: Make use of attribute type AnimatedNumberOptionalNumber.
+        (WebCore::SVGAnimateElement::determineAnimatedAttributeType):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        * svg/SVGAnimatedNumberOptionalNumber.cpp: Added. New animator for SVGAnimatedNumberOptionalNumber.
+        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::SVGAnimatedNumberOptionalNumberAnimator):
+        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::constructFromString):
+        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::calculateFromAndToValues):
+        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::calculateFromAndByValues):
+        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::calculateAnimatedValue):
+        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::calculateDistance):
+        * svg/SVGAnimatedNumberOptionalNumber.h: Added.
+        (WebCore::SVGAnimatedNumberOptionalNumberAnimator::~SVGAnimatedNumberOptionalNumberAnimator):
+        * svg/SVGAnimatedType.cpp: Added new type: pair<float, float>.
+        (WebCore::SVGAnimatedType::~SVGAnimatedType):
+        (WebCore::SVGAnimatedType::createNumberOptionalNumber):
+        (WebCore::SVGAnimatedType::numberOptionalNumber):
+        (WebCore::SVGAnimatedType::valueAsString):
+        (WebCore::SVGAnimatedType::setValueAsString):
+        * svg/SVGAnimatedType.h:
+        * svg/SVGAnimatorFactory.h: Add new animator to factory.
+        (WebCore::SVGAnimatorFactory::create):
+
+2011-06-25  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Crash in frameless document with media element.
+        https://bugs.webkit.org/show_bug.cgi?id=63393
+
+        Since MediaControls::create can return 0 (and does for frameless documents), we must anticipate it
+        in the calling code.
+
+        Test: fast/dom/shadow/frameless-media-element-crash.html
+
+        * html/HTMLMediaElement.cpp:
+        (WebCore::HTMLMediaElement::attributeChanged): Changed to bail out if controls weren't successfully created.
+        (WebCore::HTMLMediaElement::createMediaControls): Renamed to better reflect the purpose, changed to handle failure of creation.
+        (WebCore::HTMLMediaElement::preDispatchEventHandler): Changed to bail out if controls weren't successfully created.
+        * html/HTMLMediaElement.h: Adjusted def.
+
+2011-06-25  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Reviewed by Darin Adler.
+
+        Fix some minor style issues
+        https://bugs.webkit.org/show_bug.cgi?id=63391
+
+        * inspector/DOMNodeHighlighter.cpp:
+        (WebCore::DOMNodeHighlighter::DrawNodeHighlight):
+        The explicit WebCore namespace usage can be dropped.
+
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::mapLocalToContainer):
+        Use ASSERT_UNUSED for a parameter that we want to ASSERT
+        on for a debug build, but is UNUSED in a release build.
+
+2011-06-25  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Unreviewed build fix.
+
+        Use UNUSED_PARAM on the correct param!
+
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::mapLocalToContainer):
+
+2011-06-25  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Reviewed by Simon Fraser.
+
+        Inspector highlight rect is wrong for contents of transformed iframes
+        https://bugs.webkit.org/show_bug.cgi?id=53627
+
+        Part 2: Only adjust for the FrameView's scroll position when
+        the localToAbsolute mapping did not end with fixed content.
+        Content that is inside of a fixed position container is already
+        adjusted for the FrameView's scrollPosition when RenderView
+        maps local to container.
+
+        This patch uses a "wasFixed" out parameter to determine if
+        the localToAbsolute transformation ended inside a fixed block,
+        and if so does not apply the scroll position.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::convertFromRenderer):
+        Respect wasFixed as described above.
+
+        * rendering/RenderBox.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::mapLocalToContainer):
+        This is the only time that "fixed" ever changed. So when
+        fixed changes, update the optional wasFixed out parameter.
+
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::localToAbsolute):
+        (WebCore::RenderObject::mapLocalToContainer):
+        (WebCore::RenderObject::localToContainerQuad):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::localToAbsoluteQuad):
+        Ignore wasFixed by default, but pipe it though where needed.
+
+        * rendering/RenderView.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::mapLocalToContainer):
+        This is the final recursive call, so wasFixed goes no
+        further. We sanity check its value in debug builds.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::selectionGapRectsForRepaint):
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::mapLocalToContainer):
+        * rendering/RenderInline.h:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        (WebCore::RenderSVGForeignObject::mapLocalToContainer):
+        * rendering/svg/RenderSVGForeignObject.h:
+        * rendering/svg/RenderSVGInline.cpp:
+        (WebCore::RenderSVGInline::mapLocalToContainer):
+        * rendering/svg/RenderSVGInline.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::mapLocalToContainer):
+        * rendering/svg/RenderSVGModelObject.h:
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::mapLocalToContainer):
+        * rendering/svg/RenderSVGRoot.h:
+        * rendering/svg/RenderSVGText.cpp:
+        (WebCore::RenderSVGText::mapLocalToContainer):
+        * rendering/svg/RenderSVGText.h:
+        * rendering/svg/SVGRenderSupport.cpp:
+        (WebCore::SVGRenderSupport::mapLocalToContainer):
+        * rendering/svg/SVGRenderSupport.h:
+        Pipe wasFixed through where needed.
+
+2011-06-25  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Reviewed by Simon Fraser.
+
+        Inspector highlight rect is wrong for contents of transformed iframes
+        https://bugs.webkit.org/show_bug.cgi?id=53627
+
+        Part 1: Provide FloatQuad versions of convertFromRenderer,
+        convertToContainingView, and convertChildToSelf, so that we
+        can get the fully transformed quad of a renderer all the
+        way up to the root widget.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::convertFromRenderer):
+        (WebCore::FrameView::convertToContainingView):
+        * page/FrameView.h:
+        * platform/ScrollView.h:
+        (WebCore::ScrollView::convertChildToSelf):
+        * platform/Widget.h:
+        * platform/Widget.cpp:
+        (WebCore::Widget::convertToContainingView):
+        Provide FloatQuad versions of these already existing functions.
+
+        (WebCore::Widget::convertToRootContainingView):
+        Provide a helper conversion function to recursively
+        convert a given FloatQuad up to the root widget.
+
+        * inspector/DOMNodeHighlighter.cpp:
+        (WebCore::DOMNodeHighlighter::DrawNodeHighlight):
+        Use the new methods to convert the FloatQuad for the highlighted
+        node to the root container, without losing transformation
+        information. Add a FIXME for SVG, which is still broken.
+
+        * WebCore.exp.in:
+        Export the new Widget functions so WebKit can link properly.
+
+2011-06-25  Dirk Schulze  <krit@webkit.org>
+
+        Unreviewed build fix.
+
+        SVGAnimatedType should support SVGNumberList animation
+        https://bugs.webkit.org/show_bug.cgi?id=63387
+
+        * svg/SVGAnimatedNumberList.cpp:
+        (WebCore::SVGAnimatedNumberListAnimator::calculateAnimatedValue):
+
+2011-06-25  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVGAnimatedType should support SVGNumberList animation
+        https://bugs.webkit.org/show_bug.cgi?id=63387
+        
+        Follow up of "SVGAnimation should use direct unit animation for SVGLength": https://bugs.webkit.org/show_bug.cgi?id=61368
+        This patch continues the conversion to the new concept of SVGAnimatorFactory with SVGNumberList.
+        
+        Animations of attributes with type SVGNumberList can be interpolated now.
+
+        Tests: svg/animations/svgnumberlist-animation-1.html
+               svg/animations/svgnumberlist-animation-2.html
+
+        * CMakeLists.txt: Added new file to build system.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * svg/SVGAllInOne.cpp: Ditto.
+        * svg/SVGAnimateElement.cpp: Make use of attribute type AnimatedNumberList.
+        (WebCore::SVGAnimateElement::determineAnimatedAttributeType):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        * svg/SVGAnimatedNumber.cpp:
+        (WebCore::SVGAnimatedNumberAnimator::calculateAnimatedNumber): Made method static for reuse in SVGAnimatedNumberList (and SVGAnimatedNumberOptionalNumber later).
+        (WebCore::SVGAnimatedNumberAnimator::calculateAnimatedValue): Use new static function.
+        * svg/SVGAnimatedNumber.h:
+        * svg/SVGAnimatedNumberList.cpp: Added. New animator for SVGNumberList.
+        (WebCore::SVGAnimatedNumberListAnimator::SVGAnimatedNumberListAnimator):
+        (WebCore::SVGAnimatedNumberListAnimator::constructFromString):
+        (WebCore::SVGAnimatedNumberListAnimator::calculateFromAndToValues):
+        (WebCore::SVGAnimatedNumberListAnimator::calculateFromAndByValues):
+        (WebCore::SVGAnimatedNumberListAnimator::calculateAnimatedValue):
+        (WebCore::SVGAnimatedNumberListAnimator::calculateDistance):
+        * svg/SVGAnimatedNumberList.h:
+        (WebCore::SVGAnimatedNumberListAnimator::~SVGAnimatedNumberListAnimator):
+        * svg/SVGAnimatedType.cpp: Use new Animator.
+        (WebCore::SVGAnimatedType::~SVGAnimatedType):
+        (WebCore::SVGAnimatedType::createNumberList):
+        (WebCore::SVGAnimatedType::numberList):
+        (WebCore::SVGAnimatedType::valueAsString):
+        (WebCore::SVGAnimatedType::setValueAsString):
+        * svg/SVGAnimatedType.h:
+        * svg/SVGAnimatorFactory.h:
+        (WebCore::SVGAnimatorFactory::create):
+
+2011-06-25  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Reviewed by Dirk Schulze.
+
+        Convert SVGPath to SVGAnimatorFactory concept
+        https://bugs.webkit.org/show_bug.cgi?id=63336
+
+        Convert <animate attributeName="d"> parsing to the new SVGAnimatorFactory concept, removing
+        the last special data types from SVGAnimateElement: SVGPathByteStream m_fromPath/m_toPath/m_animatedPath.
+        All existing non-string primitives have been converted to the new concept.
+
+        Doesn't change any functionality.
+
+        * CMakeLists.txt: Added SVGAnimatedPath.*.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * svg/SVGAllInOne.cpp: Ditto.
+        * svg/SVGAnimateElement.cpp:
+        (WebCore::SVGAnimateElement::SVGAnimateElement):
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        * svg/SVGAnimateElement.h:
+        * svg/SVGAnimatedPath.cpp: Added.
+        (WebCore::SVGAnimatedPathAnimator::SVGAnimatedPathAnimator):
+        (WebCore::SVGAnimatedPathAnimator::constructFromString):
+        (WebCore::SVGAnimatedPathAnimator::calculateFromAndToValues):
+        (WebCore::SVGAnimatedPathAnimator::calculateFromAndByValues):
+        (WebCore::SVGAnimatedPathAnimator::calculateAnimatedValue):
+        (WebCore::SVGAnimatedPathAnimator::calculateDistance):
+        * svg/SVGAnimatedPath.h: Added.
+        (WebCore::SVGAnimatedPathAnimator::~SVGAnimatedPathAnimator):
+        * svg/SVGAnimatedType.cpp:
+        (WebCore::SVGAnimatedType::~SVGAnimatedType):
+        (WebCore::SVGAnimatedType::createPath):
+        (WebCore::SVGAnimatedType::path):
+        (WebCore::SVGAnimatedType::valueAsString):
+        (WebCore::SVGAnimatedType::setValueAsString):
+        * svg/SVGAnimatedType.h:
+        * svg/SVGAnimatorFactory.h:
+        (WebCore::SVGAnimatorFactory::create):
+        * svg/SVGPathByteStream.h:
+        (WebCore::SVGPathByteStream::initializeFrom):
+        * svg/SVGPathParserFactory.cpp:
+        (WebCore::SVGPathParserFactory::buildSVGPathByteStreamFromSVGPathSegList):
+        (WebCore::SVGPathParserFactory::buildSVGPathByteStreamFromString):
+        (WebCore::SVGPathParserFactory::buildAnimatedSVGPathByteStream):
+
+2011-06-25  Jer Noble  <jer.noble@apple.com>
+
+        Reviewed by Maciej Stachowiak.
+
+        SOFT_LINK_POINTER_OPTIONAL isn't optional.
+        https://bugs.webkit.org/show_bug.cgi?id=63378
+
+        Continuation of r89718.  SOFT_LINK_POINTER_OPTIONAL should check the value returned by dlsym before dereferencing it.
+
+        * platform/mac/SoftLinking.h:
+
+2011-06-25  Rob Buis  <rbuis@rim.com>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVG1.1SE test linking-uri-01-b.svg fails
+        https://bugs.webkit.org/show_bug.cgi?id=63322
+
+        Allow navigating to internal <view> targets. When choosing Back ensure
+        the <svg> current view is initialized correctly.
+
+        Tests: svg/W3C-SVG-1.1-SE/linking-uri-01-b.svg
+               svg/custom/linking-uri-01-b.svg
+
+        * page/FrameView.cpp: Delegate to setupInitialView.
+        (WebCore::FrameView::scrollToAnchor):
+        * svg/SVGAElement.cpp: Allow navigating to internal <view> targets.
+        (WebCore::SVGAElement::defaultEventHandler):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::setupInitialView): Initialize current view depending on fragment identifier.
+        (WebCore::SVGSVGElement::inheritViewAttributes):
+        * svg/SVGSVGElement.h:
+
+2011-06-24  Dimitri Glazkov  <dglazkov@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        REGRESSION (r77740): Shadow DOM pseudo elements aren't matching when combined with descendant selectors
+        https://bugs.webkit.org/show_bug.cgi?id=63373
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::pushParentStackFrame): Changed to use parentOrHostElement.
+        (WebCore::CSSStyleSelector::pushParent): Ditto.
+        * dom/Node.cpp:
+        (WebCore::Node::parentOrHostElement): Added.
+        * dom/Node.h:
+
+2011-06-24  Dan Bernstein  <mitz@apple.com>
+
+        Reviewed by Anders Carlsson.
+
+        Add an option to enable legacy rounding hacks
+        https://bugs.webkit.org/show_bug.cgi?id=63363
+
+        Restored most of text rounding hacks which were removed in r78846, with a global flag to control
+        whether rounding hacks are allowed, which defaults to false.
+
+        Test: platform/mac/fast/text/rounding-hacks.html
+
+        * CMakeLists.txt: Added TextRun.cpp.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.exp.in: Export new TextRun function and global and updated StringTruncator functions.
+        * WebCore.gypi: Added TextRun.cpp.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * html/canvas/CanvasRenderingContext2D.cpp:
+        (WebCore::CanvasRenderingContext2D::drawTextInternal): Disable rounding hacks in the one place
+        they used to be disabled.
+        * platform/graphics/Font.cpp: Re-added the rounding character table.
+        * platform/graphics/Font.h:
+        (WebCore::Font::isRoundingHackCharacter): Re-added.
+        * platform/graphics/FontFastPath.cpp:
+        (WebCore::Font::getGlyphsAndAdvancesForSimpleText): Account for final rounding width.
+        * platform/graphics/SimpleFontData.cpp:
+        (WebCore::SimpleFontData::platformGlyphInit): Initialize m_adjustedSpaceWidth.
+        * platform/graphics/SimpleFontData.h:
+        (WebCore::SimpleFontData::adjustedSpaceWidth): Re-added.
+        * platform/graphics/StringTruncator.cpp:
+        (WebCore::stringWidth): Re-added disableRoundingHacks parameter.
+        (WebCore::truncateString): Ditto.
+        (WebCore::StringTruncator::centerTruncate): Added EnableRoundingHacksOrNot parameter.
+        (WebCore::StringTruncator::rightTruncate): Ditto.
+        (WebCore::StringTruncator::width): Ditto.
+        * platform/graphics/StringTruncator.h:
+        * platform/graphics/TextRun.cpp: Added.
+        (WebCore::TextRun::setAllowsRoundingHacks): Added.
+        * platform/graphics/TextRun.h:
+        (WebCore::TextRun::TextRun): Added RoundingHacks parameter to the constructors, used to initialize
+        the m_applyRunRounding and m_applyWordRounding member variables, subject to rounding hacks being allowed.
+        (WebCore::TextRun::applyRunRounding): Re-added this accessor.
+        (WebCore::TextRun::applyWordRounding): Ditto.
+        (WebCore::TextRun::disableRoundingHacks): Re-added.
+        * platform/graphics/WidthIterator.cpp:
+        (WebCore::WidthIterator::WidthIterator): Re-added code to apply rounding hacks.
+        (WebCore::WidthIterator::advance): Ditto.
+        * platform/graphics/WidthIterator.h:
+        * platform/graphics/mac/ComplexTextController.cpp:
+        (WebCore::ceilCGFloat): Re-added.
+        (WebCore::ComplexTextController::ComplexTextController): Re-added code to apply rounding hacks.
+        (WebCore::ComplexTextController::advance): Ditto.
+        (WebCore::ComplexTextController::adjustGlyphsAndAdvances): Ditto.
+        * platform/graphics/mac/ComplexTextController.h:
+        (WebCore::ComplexTextController::finalRoundingWidth): Re-added this accessor.
+        * platform/graphics/mac/FontComplexTextMac.cpp:
+        (WebCore::Font::getGlyphsAndAdvancesForComplexText): Accound for final rounding width.
+        * platform/graphics/qt/SimpleFontDataQt.cpp:
+        (WebCore::SimpleFontData::platformGlyphInit): Initialize m_adjustedSpaceWidth.
+        * platform/gtk/RenderThemeGtk.cpp:
+        (WebCore::RenderThemeGtk::fileListNameForWidth): Enabled rounding hacks in the string truncator.
+        * platform/mac/DragImageMac.mm:
+        (WebCore::widthWithFont): Disable rounding hacks when measuring.
+        (WebCore::drawAtPoint): Disable rounding hacks when drawing.
+        * platform/win/DragImageWin.cpp:
+        (WebCore::createDragImageForLink): Enable rounding hacks in the string truncator.
+        * platform/win/WebCoreTextRenderer.cpp:
+        (WebCore::WebCoreTextFloatWidth): Ditto.
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::paintObject): Disable rounding hacks.
+        * rendering/RenderListBox.cpp:
+        (WebCore::RenderListBox::updateFromElement): Ditto.
+        (WebCore::RenderListBox::paintItemForeground): Ditto.
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::getAvgCharWidth): Ditto.
+        * rendering/RenderTheme.cpp:
+        (WebCore::RenderTheme::fileListNameForWidth): Enabled rounding hacks in the string truncator.
+        * rendering/RenderThemeMac.mm:
+        (WebCore::RenderThemeMac::fileListNameForWidth): Ditto.
+        * rendering/svg/SVGInlineTextBox.cpp:
+        (WebCore::SVGInlineTextBox::constructTextRun): Disabled rounding hacks.
+        * rendering/svg/SVGTextMetrics.cpp:
+        (WebCore::constructTextRun): Ditto.
+
+2011-06-24  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Reviewed by Rob Buis.
+
+        Integrate SVG Fonts within GlyphPage concept, removing the special SVG code paths from Font, making it possible to reuse the simple text code path for SVG Fonts
+        https://bugs.webkit.org/show_bug.cgi?id=59085
+
+        font substitution doesn't work for HTML text using SVG fonts
+        https://bugs.webkit.org/show_bug.cgi?id=17608
+
+        Selection rects are wrong for text with SVG fonts
+        https://bugs.webkit.org/show_bug.cgi?id=25460
+
+        With @font-face, SVG fonts only work as primary, non-segmented
+        https://bugs.webkit.org/show_bug.cgi?id=32227
+
+        When using SVG fonts with @font-face word-spacing and text-align: justify are not being honored
+        https://bugs.webkit.org/show_bug.cgi?id=34236
+
+        SVG @font-face breaks text-overflow: ellipsis
+        https://bugs.webkit.org/show_bug.cgi?id=36840
+
+        REGRESSION: SVG Font selection problems
+        https://bugs.webkit.org/show_bug.cgi?id=41934
+
+        Tests: svg/custom/svg-fonts-fallback.xhtml (for bug 17608, extended the original test from Mark Ambachtsheer)
+               svg/custom/svg-fonts-segmented.xhtml (for bug 32227)
+               svg/custom/svg-fonts-word-spacing.html (for bug 34236, from Michael Lewis)
+               svg/text/select-text-svgfont.html (for bug 25460/41934, from Emil Schutte)
+               svg/text/text-overflow-ellipsis-svgfont.html (for 36840, from Emil Schutte)
+
+        Rewrite the SVG Fonts support to fully integrate within the GlyphPage concept and the "simple" code path used to render platform fonts.
+        That means the special logic for measuring text using SVG Fonts, calculating offset for positions, computing selection rects etc. is all gone now.
+        There's no difference anymore between using a native font or a SVG Font, in terms of these operations.
+
+        This makes text selection using SVG Fonts possible again.
+
+        * features.pri: Temporarily turn of SVG Fonts for Qt, as long as QRawFont support is not available and the fast path is disabled.
+        * page/DOMWindow.idl: Touched file to force Qt regenerating the bindings.
+        * platform/graphics/Font.cpp: Remove SVG Font special cases, the simple code path now handles SVG Fonts as well.
+        (WebCore::Font::drawText):
+        (WebCore::Font::drawEmphasisMarks):
+        (WebCore::Font::width):
+        (WebCore::Font::selectionRectForText):
+        (WebCore::Font::offsetForPosition):
+        (WebCore::Font::codePath):
+        * platform/graphics/Font.h: Pass TextRun to drawGlyphBuffer/drawEmphasisMarks. Add new glyphDataAndPageForCharacter() method which returns a pair
+                                    std::pair<GlyphData, GlyphPage*>, so we know the associated GlyphPage for a certain GlyphData object, which is needed to properly
+                                    handle font fallback glyph matching for SVG Fonts..
+        (WebCore::Font::fontList): Add FontFallbackList accessor.
+        * platform/graphics/FontFallbackList.h: Add getters/setters for glyphPageZero -- SVG Fonts support needs access to these objects from SVGTextRunRenderingContext.
+        (WebCore::FontFallbackList::glyphPageZero):
+        (WebCore::FontFallbackList::glyphPages):
+        (WebCore::FontFallbackList::setGlyphPageZero):
+        (WebCore::FontFallbackList::setGlyphPages):
+        * platform/graphics/FontFastPath.cpp:
+        (WebCore::Font::glyphDataForCharacter): Move implementation to glyphDataAndPageForCharacter(), and use that method from here.
+        (WebCore::Font::glyphDataAndPageForCharacter): Does the same as before, just returns an additional GlyphPage* pointer.
+        (WebCore::Font::getEmphasisMarkGlyphData): Remove SVG Fonts special case.
+        (WebCore::Font::drawGlyphBuffer): Ditto.
+        * platform/graphics/FontMetrics.h:
+        (WebCore::scaleEmToUnits): Refactored scaleEmToUnits free function from SimpleFontDataMac/CGWin to share with SVGFontData/SVGTextRunRenderingContext.
+        * platform/graphics/GlyphPageTreeNode.cpp:
+        (WebCore::fill): Stop skipping SVG Fonts, they now also fill the GlyphPage using the glyphs defined in the SVG Font.
+        * platform/graphics/SVGGlyph.h: s/isValid/isPartOfLigature/. Its usage has been changed.
+        (WebCore::SVGGlyph::SVGGlyph):
+        (WebCore::SVGGlyph::operator==):
+        * platform/graphics/SimpleFontData.cpp: Change font size to be a float, not an int.
+        (WebCore::SimpleFontData::SimpleFontData):
+        * platform/graphics/SimpleFontData.h: Add new pure virtual methods to the AdditionalFontData interface, to be implemented in SVGFontData.
+        (WebCore::SimpleFontData::widthForGlyph): Call widthForSVGGlyph, if we encounter a SVG glyph.
+        * platform/graphics/TextRun.h: 
+        * platform/graphics/WidthIterator.cpp:
+        (WebCore::WidthIterator::glyphDataForCharacter):
+        (WebCore::WidthIterator::advance):
+        * platform/graphics/WidthIterator.h: Store several new members needed for SVG Fonts support (last processed glyph name used for kerning pair lookup)
+                                             and a map mapping each character of a text to its arabic-form (if needed, to perform SVG glyph selection for Arabic text).
+        (WebCore::WidthIterator::run):
+        (WebCore::WidthIterator::runWidthSoFar):
+        (WebCore::WidthIterator::lastGlyphName):
+        (WebCore::WidthIterator::setLastGlyphName):
+        (WebCore::WidthIterator::arabicForms):
+        * platform/graphics/chromium/SimpleFontDataChromiumWin.cpp: Use new scaleEmToUnits free function from FontMetrics.h.
+        * platform/graphics/mac/SimpleFontDataMac.mm: Ditto.
+        * platform/graphics/win/SimpleFontDataCGWin.cpp: Ditto.
+        * rendering/svg/SVGTextLayoutAttributesBuilder.cpp:
+        (WebCore::SVGTextLayoutAttributesBuilder::propagateLayoutAttributes): Handle UTF-16 surrogate pairs correctly, fixes the previous Acid3 regression.
+        * rendering/svg/SVGTextMetrics.cpp:
+        (WebCore::SVGTextMetrics::SVGTextMetrics):
+        (WebCore::constructTextRun):
+        (WebCore::SVGTextMetrics::measureCharacterRange):
+        * rendering/svg/SVGTextMetrics.h:
+        * rendering/svg/SVGTextRunRenderingContext.cpp: Remove drawTextUsingSVGFont/floatWidthUsingSVGFont/selectionRectForTextUsingSVGFont/offsetForPositionForTextUsingSVGFont.
+        (WebCore::firstParentRendererForNonTextNode): Don't assert node() exists, doesn't hold true for generated render objects.
+        (WebCore::renderObjectFromRun): Renamed from referencingRenderObjectFromRun.
+        (WebCore::SVGTextRunRenderingContext::floatWidthUsingSVGFont): Remove extra "extraCharsAvailable" parameter, now solves via TextRun::charactersLength().
+        (WebCore::calculateEmUnitToPixelScaleFactor): Add helper method.
+        (WebCore::SVGTextRunRenderingContext::drawSVGGlyphs): Main drawing method, this actually creates/renders Paths.
+        (WebCore::SVGTextRunRenderingContext::glyphDataForCharacter): Part 1/2 of SVG Glyph selection code.
+        * rendering/svg/SVGTextRunRenderingContext.h:
+        * svg/SVGAltGlyphElement.cpp:
+        (WebCore::SVGAltGlyphElement::hasValidGlyphElement):
+        * svg/SVGAltGlyphElement.h:
+        * svg/SVGFontData.cpp:
+        (WebCore::SVGFontData::initializeFontData): Changed font size from int to float.
+        (WebCore::SVGFontData::widthForSVGGlyph): Lookup a SVGGlyph from a Glyph using the glyph table in SVGFontElement and calculate its width.
+        (WebCore::SVGFontData::applySVGGlyphSelection): Part 2/2 of SVG Glyph selection code.
+        (WebCore::SVGFontData::fillSVGGlyphPage): Fill GlyphPage using glyphs defined in the SVG Font.
+        (WebCore::SVGFontData::fillBMPGlyphs): Moved from the previous fillSVGGlyphPage implementation.
+        (WebCore::SVGFontData::fillNonBMPGlyphs): Add non-bmp glyph handling, fixing the Acid3 regression (support using SVGGlyphs for UTF-16 surrogate pairs).
+        * svg/SVGFontData.h:
+        * svg/SVGFontElement.cpp:
+        (WebCore::SVGFontElement::registerLigaturesInGlyphCache): Enable ligature registration for the use within GlyphPage.
+        (WebCore::SVGFontElement::ensureGlyphCache):
+        * svg/SVGGlyphMap.h: Switch to use SurrogatePairTextIterator, and switch glyph table from UChar to UChar32, just like GlyphPage, to handle glyphs from non-BMP correctly.
+        (WebCore::SVGGlyphMap::addGlyph): Remove setting isValid, it's not needed anymore and gone.
+        (WebCore::SVGGlyphMap::collectGlyphsForString):
+        * svg/svgtags.in: Surround vkern in ENABLE_SVG_FONTS block.
+
+2011-06-24  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        Reviewed by Antonio Gomes.
+
+        [CMAKE] Replace ";" with space in FEATURE_DEFINES macro
+        https://bugs.webkit.org/show_bug.cgi?id=62211
+
+        html.css file doesn't recognize ENABLE_XXX macro because FEATURE_DEFINES macro has ";"
+        as separator. So, let the html.css to use new feature macro with space separator.
+
+        * CMakeLists.txt:
+
+2011-06-24  Gavin Peters  <gavinp@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        fix possible race in LinkLoader
+        https://bugs.webkit.org/show_bug.cgi?id=63360
+
+        In chromium bug 80729
+        http://code.google.com/p/chromium/issues/detail?id=80729 I am
+        seeing some kind of double triggering of the timer; I am concerned
+        that it is possible that a Link element errors out or succeeds,
+        sets a timer, and shortly before the timer is triggered it is
+        editted, launches another request.  After that, the first timer
+        triggers, zeroing out m_cachedResource.  Then, the second load
+        finishes, and *crash*.  If this is the case, this fix should stop
+        it.
+
+        No new tests; I haven't reproduced this.  I hope chrome's crash
+        telemetry will give good feedback; this crash is occuring many times a
+        day so the difference should be obvious.
+
+        * loader/LinkLoader.cpp:
+        (WebCore::LinkLoader::LinkLoader):
+        (WebCore::LinkLoader::linkLoadTimerFired):
+        (WebCore::LinkLoader::linkLoadingErrorTimerFired):
+        (WebCore::LinkLoader::notifyFinished):
+        * loader/LinkLoader.h:
+
+2011-06-24  Jer Noble  <jer.noble@apple.com>
+
+        Reviewed by Eric Carlson.
+
+        Safari will quit unexpectedly when launching Safari in the first time (crash in initQTSecurityPolicyNoLocalToRemoteSiteAttribute)
+        https://bugs.webkit.org/show_bug.cgi?id=63332
+        <rdar://problem/9661650>
+
+        No new tests; Only affects machines with QTKit < 7.6.3 installed.
+
+        Check to see if QTSecurityPolicyNoRemoteToLocalSiteAttribute is non-NULL before passing it into -[QTMovie initWithAttributes:],
+        as it is only defined in QTKit >= 7.6.3.  If it is NULL, pass QTSecurityPolicyNoCrossSiteAttribute=YES instead, which has
+        the same effect in earlier versions of QTKit as the NoLocalToRemote and NoRemoteToLocal keys.  To avoid ASSERTs when running
+        debug builds with earlier versions of QTKit, add a SOFT_LINK_POINTER_OPTIONAL macro to SoftLinking.h and make these keys optional.
+
+        * platform/graphics/mac/MediaPlayerPrivateQTKit.mm:
+        (WebCore::MediaPlayerPrivateQTKit::commonMovieAttributes):
+        * platform/mac/SoftLinking.h: Add SOFT_LINK_POINTER_OPTIONAL macro.
+
+2011-06-24  Darin Adler  <darin@apple.com>
+
+        Try to fix Windows build failure.
+
+        * platform/win/ClipboardUtilitiesWin.cpp:
+        (WebCore::setFileDescriptorData): Copy string into a local so we
+        can call charactersWithNullTermination on it.
+
+2011-06-23  Darin Adler  <darin@apple.com>
+
+        Reviewed by Adam Barth.
+
+        Remove some unneeded functions from FrameLoader
+        https://bugs.webkit.org/show_bug.cgi?id=63295
+
+        Removing 7 of the functions in FrameLoader.h is probably a step
+        in the right direction.
+
+        * loader/DocumentLoader.cpp:
+        (WebCore::DocumentLoader::handledOnloadEvents):
+        Moved the call to stopDeferringEvents in here from FrameLoader.
+        * loader/DocumentLoader.h: Ditto.
+
+        * loader/DocumentWriter.h: Fixed a typo.
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::setFirstPartyForCookies): Changed this to
+        use a non-recursive tree walk instead of recursion.
+        (WebCore::FrameLoader::stopAllLoaders): Moved the code from
+        stopLoadingSubframes inline, since it's only two lines of code.
+        (WebCore::FrameLoader::checkLoadCompleteForThisFrame): Moved
+        the code from markLoadComplete inline, since it's only one line.
+        (WebCore::FrameLoader::checkLoadComplete): Changed this to use a
+        non-recursive tree walk instead of recursion, eliminating the
+        recursiveCheckLoadComplete function completely.
+        (WebCore::FrameLoader::handledOnloadEvents): Moved the call to
+        stopDeferringEvents into DocumentLoader.
+
+        * loader/FrameLoader.h: Removed unneeded forward declarations,
+        and now-unneeded functions setupForReplaceByMIMEType,
+        isStopping, isLoadingFromCachedPage, stopLoadingSubframes,
+        markLoadComplete, mainReceivedError, and recursiveCheckLoadComplete.
+        Also made allChildrenAreComplete private.
+
+        * loader/MainResourceLoader.cpp:
+        (WebCore::MainResourceLoader::continueAfterContentPolicy):
+        Call DocumentLoader::isStopping so we can remove the function
+        from FrameLoader that just calls through. Other call sites were
+        using DocumentLoader::isStopping directly.
+        (WebCore::MainResourceLoader::didReceiveResponse): Call
+        DocumentLoader::setupForReplaceByMIMEType so we can remove the
+        function from FrameLoader that just calls through. This was
+        the only call site.
+
+        * loader/ResourceLoader.cpp:
+        (WebCore::ResourceLoader::init): Call the
+        ResourceLoader::cancelledError function instead of calling
+        directly to FrameLoader.
+
+        * loader/ResourceLoader.h: Made response an inline function.
+
+2011-06-24  Alexey Proskuryakov  <ap@apple.com>
+
+        Rubber-stamped by Maciej Stachowiak.
+
+        REGRESSION (r88984): Infinite recursion in DocumentLoader::detachFromFrame/stopLoading
+
+        No new tests, as there is no known way to reproduce this (but we'll keep investigating, as
+        the rollout will re-introduce the older less frequent crash).
+
+        * loader/DocumentLoader.cpp: (WebCore::DocumentLoader::detachFromFrame): Rollout the fix
+        for bug 62764.
+
+2011-06-24  Tony Chang  <tony@chromium.org>
+
+        Reviewed by Ojan Vafai.
+
+        add flexbox and inline-flexbox as possible CSS display values
+        https://bugs.webkit.org/show_bug.cgi?id=63361
+
+        Test: css3/flexbox/display-property.html
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        * css/CSSValueKeywords.in:
+
+2011-06-24  Anna Cavender  <annacc@chromium.org>
+
+        Reviewed by Eric Carlson.
+
+        Loading out-of-band text track files from <track>.
+        https://bugs.webkit.org/show_bug.cgi?id=62881
+
+        Uses the src attribute of <track> urls to load out-of-band text track
+        files using ThreadableLoader.  Also removes TextTrackPrivateInterface
+        (as well as LoadableTextTrackImpl and MutableTextTrackImpl) classes.
+
+        No new tests because feature is hidden behind VIDEO_TRACK feature
+        define, which is turned off.
+
+        * CMakeLists.txt:
+        * GNUmakefile.am:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.xcodeproj/project.pbxproj:
+        * html/HTMLMediaElement.cpp:
+        * html/HTMLMediaElement.h:
+        * html/HTMLTrackElement.cpp:
+        * html/HTMLTrackElement.h:
+        * html/LoadableTextTrack.cpp:
+        * html/LoadableTextTrack.h:
+        * html/LoadableTextTrackImpl.cpp: Removed.
+        * html/LoadableTextTrackImpl.h: Removed.
+        * html/MutableTextTrack.cpp:
+        * html/MutableTextTrack.h:
+        * html/MutableTextTrackImpl.cpp: Removed.
+        * html/MutableTextTrackImpl.h: Removed.
+        * html/TextTrack.cpp:
+        * html/TextTrack.h:
+        * html/TextTrackPrivate.h: Removed.
+        * platform/track/CueParser.cpp:
+        * platform/track/CueParser.h:
+
+2011-06-24  Rob Buis  <rbuis@rim.com>
+
+        Rubber-stamped by Nikolas Zimmermann.
+
+        All pointer-events fail if text has visibility="hidden"
+        https://bugs.webkit.org/show_bug.cgi?id=62209
+
+        Do not use writing mode aware code for SVG Text.
+
+        No new tests needed.
+
+        * rendering/svg/SVGInlineTextBox.cpp:
+        (WebCore::SVGInlineTextBox::nodeAtPoint):
+
+2011-06-24  Lukasz Slachciak  <l.slachciak@samsung.com>
+
+        Reviewed by Darin Adler.
+
+        Change NDEBUG to !LOG_DISABLED macro in databases for logging.
+        https://bugs.webkit.org/show_bug.cgi?id=63346
+
+        Changed NDEBUG to !LOG_DISABLED in databases code which involves logging.
+        This change resolves also build break in Release build when logging enabled.
+
+        No new tests because there is no new behavior or feature exposed.
+
+        * loader/icon/IconDatabase.cpp: Macro fixes.
+        (WebCore::IconDatabase::iconDatabaseSyncThread):
+        (WebCore::IconDatabase::syncThreadMainLoop):
+        (WebCore::IconDatabase::readFromDatabase):
+        (WebCore::IconDatabase::writeToDatabase):
+        (WebCore::IconDatabase::cleanupSyncThread):
+        * storage/AbstractDatabase.h: Macro fixes.
+        * storage/DatabaseTask.cpp: Macro fixes.
+        * storage/DatabaseTask.h: Macro fixes.
+        * storage/SQLTransaction.cpp: Macro fixes.
+        * storage/SQLTransaction.h: Macro fixes.
+
+2011-06-24  Tony Chang  <tony@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        Pass Strings by const reference to functions
+        https://bugs.webkit.org/show_bug.cgi?id=63341
+
+        Note that since Strings hold a RefPtr to StringImpl, passing Strings
+        by value isn't horrible, but it does cause ref count churn and using
+        const references is more consistent with the rest of the code base.
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::addHTTPOriginIfNeeded): Rework the code to not
+            change the value of the passed in String.
+        * loader/FrameLoader.h:
+        * platform/win/ClipboardUtilitiesWin.cpp:
+        (WebCore::setFileDescriptorData):
+        * platform/win/ClipboardUtilitiesWin.h:
+        * storage/DatabaseTracker.h:
+        * storage/IDBLevelDBBackingStore.cpp:
+        (WebCore::IDBLevelDBBackingStore::IDBLevelDBBackingStore):
+        * storage/IDBLevelDBBackingStore.h:
+        * storage/IDBSQLiteBackingStore.cpp:
+        (WebCore::IDBSQLiteBackingStore::IDBSQLiteBackingStore):
+        * storage/IDBSQLiteBackingStore.h:
+        * storage/chromium/DatabaseTrackerChromium.cpp:
+        (WebCore::DatabaseTracker::getOpenDatabases):
+        * svg/SVGPaint.cpp:
+        (WebCore::SVGPaint::SVGPaint):
+        * svg/SVGPaint.h:
+        * svg/animation/SMILTimeContainer.cpp:
+        (WebCore::SMILTimeContainer::updateAnimations):
+        * svg/animation/SMILTimeContainer.h:
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::didReceiveMessageCallback):
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+
+2011-06-24  Abhishek Arya  <inferno@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        Add clamping for CSSPrimitiveValues and SVGInlineText font size.
+        https://bugs.webkit.org/show_bug.cgi?id=53449        
+
+        Test: svg/text/svg-zoom-large-value.xhtml
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue): add asserts to detect if the
+        number created is valid.
+        * css/CSSPrimitiveValue.h: add clamping checks to prevent overflows.
+        (WebCore::CSSPrimitiveValue::getFloatValue):
+        (WebCore::CSSPrimitiveValue::getIntValue):
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::getComputedSizeFromSpecifiedSize): split into two
+        static functions, one specific to CSSStyleSelector and other generic to help
+        in clamping font size for other callers like svg text, etc.
+        * css/CSSStyleSelector.h:
+        * platform/graphics/FontDescription.h: add asserts to detect if the new font
+        size is valid.
+        (WebCore::FontDescription::setComputedSize):
+        (WebCore::FontDescription::setSpecifiedSize):
+        * rendering/svg/RenderSVGInlineText.cpp:
+        (WebCore::RenderSVGInlineText::computeNewScaledFontForStyle): use the new helper
+        from CSSStyleSelector to help in clamping new scaled font size. do not use
+        "smart minimum" since svg allows really small unreadable fonts (tested by existing
+        layout tests). Document's minimum font size clamp (0 in my case) and harmless epsilon
+        check in CSSStyleSelector function should still hold for svg.
+
+2011-06-24  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        Reviewed by Darin Adler.
+
+        Remove unsafe static_cast inside the InlineBox hierarchy
+        https://bugs.webkit.org/show_bug.cgi?id=63077
+
+        Refactoring only, no new test.
+
+        * rendering/InlineFlowBox.h:
+        (WebCore::toInlineFlowBox):
+        * rendering/InlineTextBox.h:
+        (WebCore::toInlineTextBox):
+        Added the proper cast methods to those 2 classes from an InlineBox.
+
+        * rendering/InlineBox.cpp:
+        (WebCore::InlineBox::nextLeafChild):
+        (WebCore::InlineBox::prevLeafChild):
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::getFlowSpacingLogicalWidth):
+        (WebCore::InlineFlowBox::addToLine):
+        (WebCore::InlineFlowBox::determineSpacingForFlowBoxes):
+        (WebCore::InlineFlowBox::placeBoxesInInlineDirection):
+        (WebCore::InlineFlowBox::requiresIdeographicBaseline):
+        (WebCore::InlineFlowBox::adjustMaxAscentAndDescent):
+        (WebCore::InlineFlowBox::computeLogicalBoxHeights):
+        (WebCore::InlineFlowBox::placeBoxesInBlockDirection):
+        (WebCore::InlineFlowBox::flipLinesInBlockDirection):
+        (WebCore::InlineFlowBox::computeOverflow):
+        (WebCore::InlineFlowBox::firstLeafChild):
+        (WebCore::InlineFlowBox::lastLeafChild):
+        (WebCore::InlineFlowBox::computeOverAnnotationAdjustment):
+        (WebCore::InlineFlowBox::computeUnderAnnotationAdjustment):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::positionForBox):
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::RenderBlock::createLineBoxes):
+        (WebCore::RenderBlock::constructLine):
+        (WebCore::setLogicalWidthForTextRun):
+        (WebCore::computeExpansionForJustifiedText):
+        (WebCore::RenderBlock::computeInlineDirectionPositionsForLine):
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::localCaretRect):
+        (WebCore::RenderText::positionLineBox):
+        * rendering/RootInlineBox.cpp:
+        (WebCore::RootInlineBox::ascentAndDescentForBox):
+        (WebCore::RootInlineBox::includeFontForBox):
+        (WebCore::RootInlineBox::includeGlyphsForBox):
+        Replaced the static_cast in those previous call sites with the new cast methods.
+
+2011-06-24  Alexis Menard  <alexis.menard@openbossa.org>
+
+        Unreviewed build fix.
+
+        Build fix on Linux when using the GStreamer backend.
+
+        No new tests, just a build fix.
+
+        * platform/graphics/gstreamer/PlatformVideoWindowQt.cpp:
+        (FullScreenVideoWindow::keyPressEvent):
+
+2011-06-24  Nat Duca  <nduca@chromium.org>
+
+        Unreviewed, rolling out r89694.
+        http://trac.webkit.org/changeset/89694
+        https://bugs.webkit.org/show_bug.cgi?id=58408
+
+        Test shell still not ready for animate changes.
+
+        * WebCore.gypi:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::create):
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::setViewport):
+        (WebCore::LayerRendererChromium::updateAndDrawLayers):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
+        * platform/graphics/chromium/cc/CCHeadsUpDisplay.h:
+        (WebCore::CCHeadsUpDisplay::setShowFPSCounter):
+        (WebCore::CCHeadsUpDisplay::setShowPlatformLayerTree):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp: Removed.
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h: Removed.
+        * platform/graphics/chromium/cc/CCLayerTreeHostCommitter.cpp: Removed.
+        * platform/graphics/chromium/cc/CCLayerTreeHostCommitter.h: Removed.
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp: Removed.
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h: Removed.
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp: Removed.
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.h: Removed.
+        * platform/graphics/chromium/cc/CCMainThreadTask.h:
+        * platform/graphics/chromium/cc/CCThread.cpp:
+        (WebCore::CCThread::runLoop):
+        * platform/graphics/chromium/cc/CCThreadTask.h:
+
+2011-06-24  Chris Rogers  <crogers@google.com>
+
+        Unreviewed build fix.
+
+        Fix Chromium Linux Build
+        https://bugs.webkit.org/show_bug.cgi?id=63349
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-06-24  Henry Song  <hsong@sisa.samsung.com>
+
+        Reviewed by Martin Robinson.
+
+        Correct _sharedTimer value in SharedTimerEfl.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=62380
+
+        SharedTimerEfl.cpp set _sharedTimer = 0 is incorrect in 
+        timerEvent(), we have observed addNewTimer() can be triggered 
+        by either inside timerFunction() or others that are not within
+        timerFunction().  We have observed the following case:
+        1. add a new Timer within timerFunction()
+        2. timerFunction returns, set _sharedTimer = 0
+        3. addNewTimer() is triggered again within webkit, don't know
+           it triggers this.
+        4. because at this moment, _sharedTimer == 0, the previous
+           registered timer (in step 1) did not get removed.
+        5. Now in ecore_timer, there are two timers with same callbacks
+        6. From now on, timerFunction() will be called twice back-to-back
+           in each ecore_timer loop.
+        To correct this, we should set _sharedTimer = 0 before
+        timerFunction() so that when addNewTimer() triggered within,
+        we have a valid timer object.
+
+        * platform/efl/SharedTimerEfl.cpp:
+        (WebCore::timerEvent):
+
+2011-05-17  Nat Duca  <nduca@chromium.org>
+
+        Reviewed by James Robinson.
+
+        [chromium] Implement CCLayerTreeHost and CCLayerTreeHostImpl portions of threaded compositor
+        https://bugs.webkit.org/show_bug.cgi?id=58408
+
+        Create CCLayerTreeHost and CCLayerTreeHostImpl, which are the main
+        thread and compositor thread halves of a composited view. Communication
+        between the two is based on the design used in FileStreamProxy.
+
+        * WebCore.gypi:
+        * platform/chromium/TraceEvent.h:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::create):
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::setViewport):
+        (WebCore::LayerRendererChromium::updateLayers):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromiumImpl::create):
+        (WebCore::LayerRendererChromiumImpl::drawLayersAndPresent):
+        (WebCore::LayerRendererChromiumImpl::LayerRendererChromiumImpl):
+        (WebCore::LayerRendererChromiumImpl::drawLayersOnMainThread):
+        (WebCore::LayerRendererChromiumImplProxy::create):
+        (WebCore::LayerRendererChromiumImplProxy::createLayerTreeHostImpl):
+        (WebCore::LayerRendererChromiumImplProxy::LayerRendererChromiumImplProxy):
+        (WebCore::LayerRendererChromium::createLayerTreeHostImplProxy):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
+        (WebCore::CCHeadsUpDisplay::setShowFPSCounter):
+        (WebCore::CCHeadsUpDisplay::setShowPlatformLayerTree):
+        * platform/graphics/chromium/cc/CCHeadsUpDisplay.h:
+        (WebCore::CCHeadsUpDisplay::currentFrameNumber):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.cpp: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHost::CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::init):
+        (WebCore::CCLayerTreeHost::~CCLayerTreeHost):
+        (WebCore::CCLayerTreeHost::beginCommit):
+        (WebCore::CCLayerTreeHost::commitComplete):
+        (WebCore::CCLayerTreeHost::animateAndLayout):
+        (WebCore::CCLayerTreeHost::createLayerTreeHostCommitter):
+        (WebCore::CCLayerTreeHost::setNeedsCommitAndRedraw):
+        (WebCore::CCLayerTreeHost::setNeedsRedraw):
+        (WebCore::CCLayerTreeHost::updateLayers):
+        * platform/graphics/chromium/cc/CCLayerTreeHost.h: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHost::frameNumber):
+        * platform/graphics/chromium/cc/CCLayerTreeHostCommitter.cpp: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHostCommitter::create):
+        (WebCore::CCLayerTreeHostCommitter::commit):
+        * platform/graphics/chromium/cc/CCLayerTreeHostCommitter.h: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHostCommitter::CCLayerTreeHostCommitter):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.cpp: Added.
+        (WebCore::CCLayerTreeHostImpl::CCLayerTreeHostImpl):
+        (WebCore::CCLayerTreeHostImpl::~CCLayerTreeHostImpl):
+        (WebCore::CCLayerTreeHostImpl::beginCommit):
+        (WebCore::CCLayerTreeHostImpl::commitComplete):
+        (WebCore::CCLayerTreeHostImpl::drawLayers):
+        (WebCore::CCLayerTreeHostImpl::setNeedsCommitAndRedraw):
+        (WebCore::CCLayerTreeHostImpl::setNeedsRedraw):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImpl.h: Copied from Source/WebCore/platform/graphics/chromium/cc/CCThread.cpp.
+        (WebCore::CCLayerTreeHostImplClient::~CCLayerTreeHostImplClient):
+        (WebCore::CCLayerTreeHostImpl::frameNumber):
+        (WebCore::CCLayerTreeHostImpl::sourceFrameNumber):
+        (WebCore::CCLayerTreeHostImpl::setSourceFrameNumber):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp: Added.
+        (WebCore::CCLayerTreeHostImplProxy::CCLayerTreeHostImplProxy):
+        (WebCore::CCLayerTreeHostImplProxy::start):
+        (WebCore::CCLayerTreeHostImplProxy::~CCLayerTreeHostImplProxy):
+        (WebCore::CCLayerTreeHostImplProxy::isStarted):
+        (WebCore::CCLayerTreeHostImplProxy::setNeedsCommitAndRedraw):
+        (WebCore::CCLayerTreeHostImplProxy::setNeedsRedraw):
+        (WebCore::CCLayerTreeHostImplProxy::stop):
+        (WebCore::CCLayerTreeHostImplProxy::postDrawLayersTaskOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::requestFrameAndCommitOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::isMainThread):
+        (WebCore::CCLayerTreeHostImplProxy::isCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::requestFrameAndCommit):
+        (WebCore::CCLayerTreeHostImplProxy::commitOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::drawLayersOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::setNeedsCommitAndRedrawOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::setNeedsRedrawOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::initImplOnCCThread):
+        (WebCore::CCLayerTreeHostImplProxy::layerTreeHostClosedOnCCThread):
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.h: Added.
+        (WebCore::CCLayerTreeHostImplProxy::host):
+        * platform/graphics/chromium/cc/CCMainThreadTask.h:
+        * platform/graphics/chromium/cc/CCThread.cpp:
+        (WebCore::CCThread::runLoop):
+        * platform/graphics/chromium/cc/CCThreadTask.h:
+
+2011-06-24  Adrienne Walker  <enne@google.com>
+
+        Unreviewed, remove assertion about root layers in RenderLayerBacking.
+        https://bugs.webkit.org/show_bug.cgi?id=60741
+
+        This was added in r89687, but somehow is not true on Safari Leopard.
+        However, as the tests that were added with that revision are passing
+        correctly, the assertion is most likely not correct.
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::updateGraphicsLayerGeometry):
+
+2011-06-24  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Reviewed by Dirk Schulze.
+
+        Refactor text iterator code respecting surrogate pairs from WidthIterator
+        https://bugs.webkit.org/show_bug.cgi?id=63319
+
+        WidthIterator contains a surrogate pair aware text iterator that is needed in other parts of WebCore.
+        Refactor the code into its own SurrogatePairAwareTextIterator class. It can be used like this:
+
+        UChar32 character = 0;
+        unsigned clusterLength = 0;
+
+        SurrogatePairAwareTextIterator textIterator(myString.characters(), 0, myString.length(), myString.length());
+        while (textIterator.consume(character, clusterLength)) {
+            // Either clusterLength is 1 and UChar32 fits into a single UChar.
+            // Or     clusterLength is 2 and the UChar32 has been computed by combining the high & low surrogate pairs
+            ...
+        
+            textIterator.advance(clusterLength);
+        }
+
+        SVGGlyphMap is the next candidate that wants to make use of SurrogatePairAwareTextIterator.
+        Doesn't affect any tests, just refactoring.
+
+        * CMakeLists.txt: Add SurrogatePairAwareTextIterator.* to build.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * platform/graphics/SurrogatePairAwareTextIterator.cpp: Copied from platform/graphics/WidthIterator.cpp.
+        * platform/graphics/SurrogatePairAwareTextIterator.h: Added.
+        (WebCore::SurrogatePairAwareTextIterator::currentCharacter):
+        * platform/graphics/WidthIterator.cpp:
+        (WebCore::WidthIterator::advance):
+        * platform/graphics/WidthIterator.h:
+
+2011-06-24  Adrienne Walker  <enne@google.com>
+
+        Reviewed by Simon Fraser.
+
+        Incorrect RenderLayer transforms on overflow RTL pages
+        https://bugs.webkit.org/show_bug.cgi?id=60741
+
+        Fix positioning of the root graphics layer for RTL pages.  The fact
+        that the left side of the page is negative for pages with overflow is
+        not taken into account when calculating the position.  This negative
+        value ends up being double-counted for the root graphics layer (once
+        in the position and once in the offset) and it shifts child layers
+        into the wrong place.
+
+        Tests: compositing/rtl/rtl-absolute-overflow-scrolled.html
+               compositing/rtl/rtl-absolute-overflow.html
+               compositing/rtl/rtl-absolute.html
+               compositing/rtl/rtl-fixed-overflow-scrolled.html
+               compositing/rtl/rtl-fixed-overflow.html
+               compositing/rtl/rtl-fixed.html
+               compositing/rtl/rtl-iframe-absolute-overflow-scrolled.html
+               compositing/rtl/rtl-iframe-absolute-overflow.html
+               compositing/rtl/rtl-iframe-absolute.html
+               compositing/rtl/rtl-iframe-fixed-overflow-scrolled.html
+               compositing/rtl/rtl-iframe-fixed-overflow.html
+               compositing/rtl/rtl-iframe-fixed.html
+               compositing/rtl/rtl-iframe-relative.html
+               compositing/rtl/rtl-relative.html
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::updateGraphicsLayerGeometry):
+
+2011-06-24  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Reviewed by Enrica Casucci.
+
+        Add BeforeChildren and AfterChildren to the Position's anchor types
+        https://bugs.webkit.org/show_bug.cgi?id=63100
+
+        Added PositionIsBeforeChildren and PositionIsAfterChildren to Position::AnchorType and deployed them in
+        firstPositionInNode and lastPositionInNode.
+
+        These new types of positions will let us express the first and the last positions in a non-text node in O(1).
+
+        No new tests because there is no new behavior or feature exposed.
+
+        * dom/Position.cpp:
+        (WebCore::Position::Position): Assert that the anchor type is not BeforeChildren and AfterChildren for text nodes.
+        (WebCore::Position::containerNode): For BeforeChildren and AfterChildren, the anchor node is the container node.
+        (WebCore::Position::computeOffsetInContainerNode): The offset in the container node is 0 for BeforeChildren and
+        the offset in the anchor node for AfterChildren.
+        (WebCore::Position::offsetForPositionAfterAnchor): Called by deprecatedNode; the anchor type could be AfterChildren.
+        (WebCore::Position::parentAnchoredEquivalent): If the anchor node is before or after children, then do the trick
+        for table and ignored contents like before or after anchor.
+        (WebCore::Position::computeNodeBeforePosition): Returns null for BeforeChildren and returns the last child of
+        the anchor node for AfterChildren.
+        (WebCore::Position::computeNodeAfterPosition): Returns the first child of the anchor node for BeforeChildren
+        (WebCore::Position::atFirstEditingPositionForNode): A position is at the last editing position if the anchor type
+        is BeforeChildren, or the anchor type is AfterChildren or AfterAnchor and the anchor doesn't have any children.
+        (WebCore::Position::atLastEditingPositionForNode): A position is at the last editing position if the anchor type
+        is AfterChildren.
+        (WebCore::Position::showAnchorTypeAndOffset): Supports BeforeChildren and AfterChildren.
+        * dom/Position.h:
+        (WebCore::Position::deprecatedEditingOffset): Returns m_offset if the anchor type is BeforeChildren.
+        (WebCore::firstPositionInNode): Returns a position in offset for a text node. Otherwise returns BeforeChildren.
+        (WebCore::lastPositionInNode): Returns a position in offset for a text node. Otherwise returns AfterChildren.
+        * editing/CompositeEditCommand.cpp:
+        (WebCore::CompositeEditCommand::positionOutsideTabSpan): Since the anchor node was a text node,
+        the anchor type shouldn't be BeforeChildren or AfterChildren.
+        * editing/DeleteSelectionCommand.cpp:
+        (WebCore::updatePositionForNodeRemoval): Supports BeforeChildren and AfterChildren.
+        (WebCore::DeleteSelectionCommand::handleGeneralDelete): Calls updatePositionForNodeRemoval on m_downstremEnd
+        when its anchor node is removed instead of manually updating the offset; also avoid calling moveToOffset
+        on BeforeChildren or AfterChildren position.
+        * editing/FormatBlockCommand.cpp:
+        (WebCore::FormatBlockCommand::formatRange): Since lastParagraphInBlockNode is used to insert a placeholder
+        after paragraphs below the block is moved into, it needs to be the position after the current last child in
+        the block instead of after children in the block; otherwise the position will move to the end of block.
+        * editing/VisiblePosition.cpp:
+        (WebCore::VisiblePosition::characterAfter): Since the container node is never a text for position before/after
+        children or before/after anchor, just return null for these anchor types.
+
+2011-06-24  Dominic Cooney  <dominicc@chromium.org>
+
+        Reviewed by Dimitri Glazkov.
+
+        Convert shadow DOM-related tests to use window.internals
+        https://bugs.webkit.org/show_bug.cgi?id=61671
+
+        * WebCore.exp.in: Exports for symbols used by WebCoreTestSupport.
+        * testing/Internals.cpp: The new home of shadowRoot and friends.
+        (WebCore::Internals::ensureShadowRoot):
+        (WebCore::Internals::shadowRoot):
+        (WebCore::Internals::removeShadowRoot):
+        (WebCore::Internals::shadowPseudoId):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-06-24  Tony Chang  <tony@chromium.org>
+
+        Reviewed by Darin Adler.
+
+        Refactor creation of primitive values in CSSParser
+        https://bugs.webkit.org/show_bug.cgi?id=63270
+
+        Covered by existing tests.
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::createPrimitiveNumericValue): Helper method for creating numeric values
+            to keep the cast in one place.
+        (WebCore::CSSParser::createPrimitiveStringValue): Helper method for creating string values.
+        (WebCore::CSSParser::parseValidPrimitive):
+        (WebCore::CSSParser::parseValue):
+        (WebCore::CSSParser::parseWCSSInputProperty):
+        (WebCore::CSSParser::parsePage):
+        (WebCore::CSSParser::parseSizeParameter):
+        (WebCore::CSSParser::parseContent):
+        (WebCore::CSSParser::parseFillPositionX):
+        (WebCore::CSSParser::parseFillPositionY):
+        (WebCore::CSSParser::parseFillPositionComponent):
+        (WebCore::CSSParser::parseFillSize):
+        (WebCore::CSSParser::parseAnimationDelay):
+        (WebCore::CSSParser::parseAnimationDuration):
+        (WebCore::CSSParser::parseAnimationIterationCount):
+        (WebCore::CSSParser::parseAnimationName):
+        (WebCore::CSSParser::parseTransformOriginShorthand):
+        (WebCore::CSSParser::parseDashboardRegions):
+        (WebCore::CSSParser::parseCounterContent):
+        (WebCore::CSSParser::parseShape):
+        (WebCore::CSSParser::parseFont):
+        (WebCore::CSSParser::parseReflect):
+        (WebCore::CSSParser::parseBorderRadius):
+        (WebCore::CSSParser::parseCounter):
+        (WebCore::CSSParser::parseDeprecatedGradient):
+        (WebCore::CSSParser::parseLinearGradient):
+        (WebCore::CSSParser::parseRadialGradient):
+        (WebCore::CSSParser::parseGradientColorStops):
+        (WebCore::CSSParser::parseTransform):
+        (WebCore::CSSParser::parseTransformOrigin):
+        (WebCore::CSSParser::parseTextEmphasisStyle):
+        * css/CSSParser.h:
+        * css/CSSPrimitiveValueCache.h:
+        (WebCore::CSSPrimitiveValueCache::createValue): pass String by const reference
+
+2011-06-24  Carlos Garcia Campos  <cgarcia@igalia.com>
+
+        Reviewed by Martin Robinson.
+
+        [GTK] Fix runtime critical warnings in WebKit2
+        https://bugs.webkit.org/show_bug.cgi?id=63256
+
+        Check whether there's a view widget before trying to use it in
+        PlatformScreenGtk. If there isn't a view widget, which is the case
+        in WebKit2, try to use the default GdkScreen and monitor.
+
+        * platform/gtk/PlatformScreenGtk.cpp:
+        (WebCore::getToplevel): Helper function to get the toplevel
+        widget.
+        (WebCore::getVisual): Use getToplevel().
+        (WebCore::getScreen): Helper funtion to get the screen of a
+        widget.
+        (WebCore::screenRect): Use getToplevel() and getScreen().
+
+2011-06-24  Yuta Kitamura  <yutak@chromium.org>
+
+        Reviewed by Adam Barth.
+
+        WebSocket: Add run-time flag for new HyBi protocol
+        https://bugs.webkit.org/show_bug.cgi?id=60348
+
+        Add a flag in Setting so that WebSocket protocols can be switched
+        dynamically. The protocol we have implemented so far is based on
+        older Hixie-76 specification. A new protocol is being discussed in
+        IETF HyBi working group, and I'm planning to implement the new protocol
+        behind this Settings flag.
+
+        I will add a method to LayoutTestController which flips this flag in
+        a later patch. In this way, we can put tests for both protocols in
+        the same place and test implementation for both protocols at the same time.
+
+        This patch only adds a flag. The flag is not used yet, thus there is
+        no change in functionality. Therefore, no tests were added.
+
+        * page/Settings.cpp:
+        (WebCore::Settings::Settings):
+        * page/Settings.h:
+        (WebCore::Settings::setUseHixie76WebSocketProtocol):
+        (WebCore::Settings::useHixie76WebSocketProtocol):
+
+2011-06-23  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: [Chromium] Shorten DOMWindow URLs in heap profiles.
+        https://bugs.webkit.org/show_bug.cgi?id=63238
+
+        * inspector/front-end/DetailedHeapshotGridNodes.js:
+        (WebInspector.HeapSnapshotGridNode.prototype.hasHoverMessage.false.hoverMessage):
+        (WebInspector.HeapSnapshotGenericObjectNode):
+        (WebInspector.HeapSnapshotGenericObjectNode.prototype.hoverMessage):
+        (WebInspector.HeapSnapshotGenericObjectNode.prototype._updateHasChildren):
+        (WebInspector.HeapSnapshotGenericObjectNode.prototype.isDOMWindow):
+        (WebInspector.HeapSnapshotGenericObjectNode.prototype.shortenWindowURL):
+        * inspector/front-end/DetailedHeapshotView.js:
+        (WebInspector.HeapSnapshotRetainingPathsList.prototype.showNext.pathFound):
+        (WebInspector.DetailedHeapshotView.prototype._getHoverAnchor):
+        (WebInspector.DetailedHeapshotView.prototype._showStringContentPopup.displayString):
+        (WebInspector.DetailedHeapshotView.prototype._showStringContentPopup):
+        * inspector/front-end/utilities.js:
+        ():
+
+2011-06-24  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: HTML preview should delete old iframe on show().
+        https://bugs.webkit.org/show_bug.cgi?id=63170
+
+        * inspector/front-end/ResourceHTMLView.js:
+        (WebInspector.ResourceHTMLView.prototype._createIFrame):
+        * inspector/front-end/ResourcePreviewView.js:
+        (WebInspector.ResourcePreviewView.prototype.contentLoaded):
+
+2011-06-24  Dirk Schulze  <krit@webkit.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        Convert AnimatedString to SVGAnimatorFactory concept
+        https://bugs.webkit.org/show_bug.cgi?id=63296
+
+        Follow up of "SVGAnimation should use direct unit animation for SVGLength": https://bugs.webkit.org/show_bug.cgi?id=61368
+        This patch continues the conversion to the new concept of SVGAnimatorFactory with SVGString.
+
+        No new tests added. No change of functionality.
+
+        * CMakeLists.txt: Added new file to build system.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * svg/SVGAllInOne.cpp: Ditto.
+        * svg/SVGAnimateElement.cpp:
+        (WebCore::SVGAnimateElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateElement::calculateFromAndToValues):
+        (WebCore::SVGAnimateElement::calculateFromAndByValues):
+        (WebCore::SVGAnimateElement::resetToBaseValue):
+        (WebCore::SVGAnimateElement::applyResultsToTarget):
+        (WebCore::SVGAnimateElement::calculateDistance):
+        * svg/SVGAnimateElement.h:
+        * svg/SVGAnimatedString.cpp: Added. Animator for SVGString.
+        (WebCore::SVGAnimatedStringAnimator::SVGAnimatedStringAnimator):
+        (WebCore::SVGAnimatedStringAnimator::constructFromString):
+        (WebCore::SVGAnimatedStringAnimator::calculateFromAndToValues):
+        (WebCore::SVGAnimatedStringAnimator::calculateFromAndByValues):
+        (WebCore::SVGAnimatedStringAnimator::calculateAnimatedValue):
+        (WebCore::SVGAnimatedStringAnimator::calculateDistance):
+        * svg/SVGAnimatedString.h:
+        (WebCore::SVGAnimatedStringAnimator::~SVGAnimatedStringAnimator):
+        * svg/SVGAnimatedType.cpp:
+        (WebCore::SVGAnimatedType::~SVGAnimatedType):
+        (WebCore::SVGAnimatedType::createString):
+        (WebCore::SVGAnimatedType::string):
+        (WebCore::SVGAnimatedType::valueAsString):
+        (WebCore::SVGAnimatedType::setValueAsString):
+        * svg/SVGAnimatedType.h:
+        * svg/SVGAnimatorFactory.h:
+        (WebCore::SVGAnimatorFactory::create):
+
+2011-06-24  Mario Sanchez Prada  <msanchez@igalia.com>
+
+        Reviewed by Chris Fleizach.
+
+        [GTK] Consider rows being ignored when adding children to tables
+        https://bugs.webkit.org/show_bug.cgi?id=62718
+
+        Hide row objects in tables in GTK's accessibility wrapper.
+
+        This is a different approach in the way WebCore's accessible
+        rows are exposed to assistive technologies in the GTK port,
+        since from now on those objects are kept in WebCore (they do not
+        declare to ignore accessibility) and just bypassed in the mapping
+        to ATK, allowing to hide them in the ATK hierarchy while, at the
+        same time, keeping them internally to be able to provide enough
+        information to determine tables related information, such as rows
+        counting or finding an cell for specific coordinates.
+
+        * accessibility/gtk/AccessibilityObjectAtk.cpp:
+        (WebCore::AccessibilityObject::accessibilityPlatformIncludesObject):
+        Do not ignore accessibility for table rows here.
+
+        * accessibility/gtk/AccessibilityObjectWrapperAtk.cpp:
+        (webkit_accessible_get_parent): Bypass rows when needed.
+        (getNChildrenForTable): New, find the number of children for a
+        table, which will be the addition of all cells for its rows.
+        (webkit_accessible_get_n_children): Call to getNChildrenForTable
+        for accessibility tables if needed.
+        (getChildForTable): New, bypass rows when needed, retrieving
+        cells as if they were direct children for tables.
+        (webkit_accessible_ref_child): Call to refChildForTable if needed.
+        (getIndexInParentForCellInRow): New, get the index for a given
+        cell in its parent table, considering other rows' cells.
+        (webkit_accessible_get_index_in_parent): Call to
+        getIndexInParentForCellInRow if needed.
+
+2011-06-24  Andrey Kosyakov  <caseq@chromium.org>
+
+        Reviewed by Yury Semikhatsky.
+
+        Web Inspector: extension panel iframes do not span entire panel client area
+        https://bugs.webkit.org/show_bug.cgi?id=63165
+
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer.prototype._onCreatePanel):
+        (WebInspector.ExtensionServer.prototype.createClientIframe):
+        * inspector/front-end/inspector.css:
+        (iframe.extension):
+        (iframe.panel.extension):
+
+2011-06-24  David Grogan  <dgrogan@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        Web Inspector: [REGRESSION r86838] line numbers do not scroll when script paused
+        https://bugs.webkit.org/show_bug.cgi?id=61653
+
+        roll out r86838
+
+        No new tests - refactoring.
+
+        * dom/Document.h:
+        * dom/EventQueue.cpp:
+        (WebCore::EventQueueTimer::EventQueueTimer):
+        (WebCore::EventQueueTimer::fired):
+        (WebCore::EventQueue::create):
+        (WebCore::EventQueue::EventQueue):
+        (WebCore::EventQueue::~EventQueue):
+        (WebCore::EventQueue::enqueueEvent):
+        (WebCore::EventQueue::cancelEvent):
+        (WebCore::EventQueue::cancelQueuedEvents):
+        (WebCore::EventQueue::pendingEventTimerFired):
+        (WebCore::EventQueue::dispatchEvent):
+        * dom/EventQueue.h:
+
+2011-06-24  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r89594.
+        http://trac.webkit.org/changeset/89594
+        https://bugs.webkit.org/show_bug.cgi?id=63316
+
+        It broke 5 tests on the Qt bot (Requested by Ossy_DC on
+        #webkit).
+
+        * WebCore.exp.in:
+        * icu/unicode/uscript.h:
+        * page/Settings.cpp:
+        (WebCore::Settings::setStandardFontFamily):
+        (WebCore::Settings::setFixedFontFamily):
+        (WebCore::Settings::setSerifFontFamily):
+        (WebCore::Settings::setSansSerifFontFamily):
+        (WebCore::Settings::setCursiveFontFamily):
+        (WebCore::Settings::setFantasyFontFamily):
+        * page/Settings.h:
+        (WebCore::Settings::standardFontFamily):
+        (WebCore::Settings::fixedFontFamily):
+        (WebCore::Settings::serifFontFamily):
+        (WebCore::Settings::sansSerifFontFamily):
+        (WebCore::Settings::cursiveFontFamily):
+        (WebCore::Settings::fantasyFontFamily):
+
+2011-06-23  Tony Chang  <tony@chromium.org>
+
+        Reviewed by Kent Tamura.
+
+        Pass Strings by const reference in bindings code
+        https://bugs.webkit.org/show_bug.cgi?id=63302
+
+        Note that since Strings hold a RefPtr to StringImpl, passing Strings
+        by value isn't horrible, but it does cause ref count churn and using
+        const references is more consistent with the rest of the code base.
+
+        * bindings/generic/BindingSecurity.h:
+        (WebCore::::allowSettingFrameSrcToJavascriptUrl):
+        (WebCore::::allowSettingSrcToJavascriptURL):
+        * bindings/js/SerializedScriptValue.cpp:
+        (WebCore::CloneSerializer::serialize):
+        (WebCore::SerializedScriptValue::create):
+        * bindings/js/SerializedScriptValue.h:
+        * bindings/v8/SerializedScriptValue.cpp:
+        (WebCore::SerializedScriptValue::createFromWire):
+        (WebCore::SerializedScriptValue::create):
+        (WebCore::SerializedScriptValue::SerializedScriptValue):
+        * bindings/v8/SerializedScriptValue.h:
+        * bindings/v8/V8Binding.h:
+        (WebCore::V8ParameterBase::setString):
+
+2011-06-23  Yury Semikhatsky  <yurys@chromium.org>
+
+        Reviewed by Pavel Feldman.
+
+        [Chromium] Web Inspector: provide context menu item for enabling native worker inspection
+        https://bugs.webkit.org/show_bug.cgi?id=63258
+
+        Added context menu checkbox item that allows to enable inspection of
+        native workers. The value will be persisted as other inspector settings
+        and will be restored after frontend/breowser reopening.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::restoreInspectorStateFromCookie):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::didStartWorkerContext):
+        * inspector/InspectorWorkerAgent.cpp:
+        (WebCore::InspectorWorkerAgent::setFrontend):
+        (WebCore::InspectorWorkerAgent::restore):
+        (WebCore::InspectorWorkerAgent::setWorkerInspectionEnabled):
+        * inspector/InspectorWorkerAgent.h:
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel):
+        (WebInspector.ScriptsPanel.prototype.reset):
+        (WebInspector.ScriptsPanel.prototype._toggleFormatSourceFiles):
+        (WebInspector.ScriptsPanel.prototype._contextMenu.enableWorkerInspection):
+        (WebInspector.ScriptsPanel.prototype._contextMenu):
+        * inspector/front-end/Settings.js:
+        (WebInspector.Settings):
+        * inspector/front-end/inspector.js:
+        (WebInspector.didCreateWorker):
+        (WebInspector.didDestroyWorker):
+        * workers/Worker.cpp:
+        (WebCore::Worker::notifyFinished):
+
+2011-06-23  Simon Fraser  <simon.fraser@apple.com>
+
+        Reviewed by Dan Bernstein.
+
+        Need to turn off default animations for anchorPointZ in PlatformCALayer
+        https://bugs.webkit.org/show_bug.cgi?id=63159
+        
+        When the z-component of transform-origin changed, we ran an implicit
+        animation of anchorPointZ on the CALayer. Turn this off.
+
+        Test: transforms/3d/general/transform-origin-z-change.html
+
+        * platform/graphics/ca/mac/PlatformCALayerMac.mm:
+        (nullActionsDictionary):
+
+2011-06-23  Zhenyao Mo  <zmo@google.com>
+
+        Reviewed by Kenneth Russell.
+
+        Limit WebGL internal drawingBuffer size to 4k x 4k
+        https://bugs.webkit.org/show_bug.cgi?id=63304
+
+        * html/canvas/WebGLRenderingContext.cpp:
+        (WebCore::WebGLRenderingContext::reshape): Limit drawing buffer size to 4k x 4k.
+
+2011-06-20  MORITA Hajime  <morrita@google.com>
+
+        Reviewed by Dimitri Glazkov.
+
+        [ShadowContentElement] should layout child whitespace between span.
+        https://bugs.webkit.org/show_bug.cgi?id=62202
+
+        NodeRenderingContext::nextRenderer() and previousRenderer()
+        ignored forwarded content tree hierarchies and used render-object
+        hierarchies instead, that caused some wrong Text node rendering.
+        
+        This change uses ShadowContentElement::m_inclusions for the lookup.
+        In this way, these methods can reflect hierarchies of forward light tree.
+        
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRenderingContext::NodeRenderingContext):
+        (WebCore::nextRendererOf): Added. This traverses content element's children for searching neighboring renderer.
+        (WebCore::previousRendererOf): Added. This traverses content element's children for searching neighboring renderer.
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+        * dom/NodeRenderingContext.h:
+        * dom/ShadowContentElement.h:
+        (ShadowContentElement::inclusionIndexOf): Added.
+        * dom/ShadowContentSelector.cpp:
+        (WebCore::ShadowContentSelector::activeElement):
+        * dom/ShadowContentSelector.h:
+        * dom/ShadowRoot.cpp:
+        (WebCore::ShadowRoot::activeContentElement):
+        * dom/ShadowRoot.h:
+        * rendering/RenderTreeAsText.cpp: 
+        (WebCore::externalRepresentation): Fixed an apparent bug introduced at r89230.
+
+2011-05-25  James Robinson  <jamesr@chromium.org>
+
+        Reviewed by Kenneth Russell.
+
+        [chromium] Fix ownership of PlatformImage for ImageLayerChromiums
+        https://bugs.webkit.org/show_bug.cgi?id=61099
+
+        For a composited image, both the ImageLayerChromium and its associated LayerTilerChromium need access to a
+        PlatformImage - the ImageLayerChromium has to update the PlatformImage's contents and the LayerTilerChromium has
+        to upload pixels from it.  This patch makes the ImageLayerTextureUpdater have exclusive ownership of the
+        PlatformImage and moves ownership of the LayerTextureUpdater from the LayerTilerChromium to the owner of the
+        tiler.  The updater is passed in as a parameter to the relevant tiler calls.
+
+        Patch also fixes a number of minor style issues (missing explicit keyword on constructor, etc).
+
+        Refactor only, no new tests.
+
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerPainter::create):
+        (WebCore::ContentLayerPainter::ContentLayerPainter):
+        (WebCore::ContentLayerChromium::paintContentsIfDirty):
+        (WebCore::ContentLayerChromium::createTextureUpdaterIfNeeded):
+        (WebCore::ContentLayerChromium::draw):
+        (WebCore::ContentLayerChromium::createTilerIfNeeded):
+        (WebCore::ContentLayerChromium::updateCompositorResources):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+        * platform/graphics/chromium/ImageLayerChromium.cpp:
+        (WebCore::ImageLayerTextureUpdater::create):
+        (WebCore::ImageLayerTextureUpdater::updateFromImage):
+        (WebCore::ImageLayerTextureUpdater::imageSize):
+        (WebCore::ImageLayerTextureUpdater::ImageLayerTextureUpdater):
+        (WebCore::ImageLayerChromium::~ImageLayerChromium):
+        (WebCore::ImageLayerChromium::paintContentsIfDirty):
+        (WebCore::ImageLayerChromium::updateCompositorResources):
+        (WebCore::ImageLayerChromium::setLayerRenderer):
+        (WebCore::ImageLayerChromium::createTextureUpdaterIfNeeded):
+        (WebCore::ImageLayerChromium::layerBounds):
+        * platform/graphics/chromium/ImageLayerChromium.h:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::updateRootLayerContents):
+        (WebCore::LayerRendererChromium::drawRootLayer):
+        (WebCore::LayerRendererChromium::updateLayers):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        * platform/graphics/chromium/LayerTextureUpdater.h:
+        (WebCore::LayerTextureUpdater::LayerTextureUpdater):
+        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
+        (WebCore::LayerTextureUpdaterBitmap::create):
+        (WebCore::LayerTextureUpdaterSkPicture::create):
+        * platform/graphics/chromium/LayerTextureUpdaterCanvas.h:
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::create):
+        (WebCore::LayerTilerChromium::LayerTilerChromium):
+        (WebCore::LayerTilerChromium::prepareToUpdate):
+        (WebCore::LayerTilerChromium::updateRect):
+        (WebCore::LayerTilerChromium::draw):
+        * platform/graphics/chromium/LayerTilerChromium.h:
+
+2011-06-23  Adrienne Walker  <enne@google.com>
+
+        Unreviewed, rolling out r89632 and r89640.
+        http://trac.webkit.org/changeset/89632
+        http://trac.webkit.org/changeset/89640
+        https://bugs.webkit.org/show_bug.cgi?id=60741
+
+        Breaks ancestor-overflow-change unexpectedly
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::updateGraphicsLayerGeometry):
+
 2011-06-23  John Bates  <jbates@google.com>
 
         Reviewed by James Robinson.