Source/WebCore/ChangeLog

Index: Source/WebCore/ChangeLog
===================================================================
--- Source/WebCore/ChangeLog	(revision 93251)
+++ Source/WebCore/ChangeLog	(working copy)
@@ -1,3 +1,6075 @@
+2011-08-04  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Implement a global resource limit for DrawingBuffer to limit the amount of GPU memory used by 2d canvas backing stores
+        https://bugs.webkit.org/show_bug.cgi?id=65655
+
+        Reviewed by Kenneth Russell.
+
+        * platform/graphics/gpu/DrawingBuffer.cpp:
+        (WebCore::DrawingBuffer::setResourceLimit):
+        (WebCore::DrawingBuffer::clear):
+        (WebCore::DrawingBuffer::reset):
+        * platform/graphics/gpu/DrawingBuffer.h:
+
+2011-08-04  Kenichi Ishibashi  <bashi@chromium.org>
+
+        [Chromium] Reduce memory consumption of HarfbuzzFace
+        https://bugs.webkit.org/show_bug.cgi?id=65688
+
+        Adds a cache for HB_FaceRec to eliminate multiple allocation for the same font.
+
+        Reviewed by Tony Chang.
+
+        No new tests since there is no behavior change.
+
+        * platform/graphics/chromium/HarfbuzzSkia.cpp:
+        (WebCore::getCachedHarfbuzzFace): Added.
+        (WebCore::releaseCachedHarfbuzzFace): Ditto.
+        (WebCore::HarfbuzzFace::HarfbuzzFace): Calls getCachedHarfbuzzFace() instead of allocating HB_FaceRec.
+        (WebCore::HarfbuzzFace::~HarfbuzzFace): Calls releaseCachedHarfbuzzFace() to release the onership of the cache.
+        * platform/graphics/chromium/HarfbuzzSkia.h:
+
+2011-08-04  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92415.
+        http://trac.webkit.org/changeset/92415
+        https://bugs.webkit.org/show_bug.cgi?id=65728
+
+        Causes many DEBUG crashes (Requested by abarth on #webkit).
+
+        * platform/network/chromium/ResourceRequest.h:
+        * xml/XMLHttpRequest.cpp:
+        (WebCore::XMLHttpRequest::createRequest):
+
+2011-08-04  Tim Horton  <timothy_horton@apple.com>
+
+        Reviewed by Nikolas Zimmerman.
+
+        Errors encountered within SVG documents should be reported to the console
+        https://bugs.webkit.org/show_bug.cgi?id=62599
+        <rdar://problem/9727074>
+
+        Make use of SVGLength::construct when parsing Length attributes; we will
+        now propagate errors which occur while parsing SVGLength attributes to the
+        Web Inspector console.
+
+        * svg/SVGCircleElement.cpp:
+        (WebCore::SVGCircleElement::parseMappedAttribute):
+        * svg/SVGCursorElement.cpp:
+        (WebCore::SVGCursorElement::parseMappedAttribute):
+        * svg/SVGEllipseElement.cpp:
+        (WebCore::SVGEllipseElement::parseMappedAttribute):
+        * svg/SVGFilterElement.cpp:
+        (WebCore::SVGFilterElement::parseMappedAttribute):
+        * svg/SVGFilterPrimitiveStandardAttributes.cpp:
+        (WebCore::SVGFilterPrimitiveStandardAttributes::parseMappedAttribute):
+        * svg/SVGForeignObjectElement.cpp:
+        (WebCore::SVGForeignObjectElement::parseMappedAttribute):
+        * svg/SVGImageElement.cpp:
+        (WebCore::SVGImageElement::parseMappedAttribute):
+        * svg/SVGLineElement.cpp:
+        (WebCore::SVGLineElement::parseMappedAttribute):
+        * svg/SVGLinearGradientElement.cpp:
+        (WebCore::SVGLinearGradientElement::parseMappedAttribute):
+        * svg/SVGMarkerElement.cpp:
+        (WebCore::SVGMarkerElement::parseMappedAttribute):
+        * svg/SVGMaskElement.cpp:
+        (WebCore::SVGMaskElement::parseMappedAttribute):
+        * svg/SVGPatternElement.cpp:
+        (WebCore::SVGPatternElement::parseMappedAttribute):
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::parseMappedAttribute):
+        * svg/SVGRectElement.cpp:
+        (WebCore::SVGRectElement::parseMappedAttribute):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::parseMappedAttribute):
+        * svg/SVGTextContentElement.cpp:
+        (WebCore::SVGTextContentElement::parseMappedAttribute):
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::parseMappedAttribute):
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::parseMappedAttribute):
+
+2011-08-04  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92419.
+        http://trac.webkit.org/changeset/92419
+        https://bugs.webkit.org/show_bug.cgi?id=65726
+
+        "committed partially to branch" (Requested by thorton on
+        #webkit).
+
+        * svg/SVGCircleElement.cpp:
+        (WebCore::SVGCircleElement::parseMappedAttribute):
+        * svg/SVGCursorElement.cpp:
+        (WebCore::SVGCursorElement::parseMappedAttribute):
+        * svg/SVGEllipseElement.cpp:
+        (WebCore::SVGEllipseElement::parseMappedAttribute):
+        * svg/SVGFilterElement.cpp:
+        (WebCore::SVGFilterElement::parseMappedAttribute):
+        * svg/SVGFilterPrimitiveStandardAttributes.cpp:
+        (WebCore::SVGFilterPrimitiveStandardAttributes::parseMappedAttribute):
+        * svg/SVGForeignObjectElement.cpp:
+        (WebCore::SVGForeignObjectElement::parseMappedAttribute):
+        * svg/SVGImageElement.cpp:
+        (WebCore::SVGImageElement::parseMappedAttribute):
+        * svg/SVGLineElement.cpp:
+        (WebCore::SVGLineElement::parseMappedAttribute):
+        * svg/SVGLinearGradientElement.cpp:
+        (WebCore::SVGLinearGradientElement::parseMappedAttribute):
+        * svg/SVGMarkerElement.cpp:
+        (WebCore::SVGMarkerElement::parseMappedAttribute):
+        * svg/SVGMaskElement.cpp:
+        (WebCore::SVGMaskElement::parseMappedAttribute):
+        * svg/SVGPatternElement.cpp:
+        (WebCore::SVGPatternElement::parseMappedAttribute):
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::parseMappedAttribute):
+        * svg/SVGRectElement.cpp:
+        (WebCore::SVGRectElement::parseMappedAttribute):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::parseMappedAttribute):
+        * svg/SVGTextContentElement.cpp:
+        (WebCore::SVGTextContentElement::parseMappedAttribute):
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::parseMappedAttribute):
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::parseMappedAttribute):
+
+2011-08-04  Fady Samuel  <fsamuel@chromium.org>
+
+        Background Does Not Scale Correctly with Page
+        https://bugs.webkit.org/show_bug.cgi?id=65690
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/repaint/background-scaling.html
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintRootBoxFillLayers):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::unscaledDocumentRect):
+        (WebCore::RenderView::documentRect):
+        * rendering/RenderView.h:
+
+2011-08-04  Jochen Eisinger  <jochen@chromium.org>
+
+        Introduce a new ResourceRequest::TargetType for XHRs
+        https://bugs.webkit.org/show_bug.cgi?id=65544
+
+        Reviewed by Darin Fisher.
+
+        * platform/network/chromium/ResourceRequest.h:
+        * xml/XMLHttpRequest.cpp:
+        (WebCore::XMLHttpRequest::createRequest):
+
+2011-08-04  Sergey Glazunov  <serg.glazunov@gmail.com>
+
+        Fix integer overflow in custom bindings for WebGLRenderingContext
+        https://bugs.webkit.org/show_bug.cgi?id=65646
+
+        Reviewed by Kenneth Russell.
+
+        Test: fast/canvas/webgl/uniform-array-length-overflow.html
+
+        * bindings/js/JSWebGLRenderingContextCustom.cpp:
+        (WebCore::toVector): Don't crash if allocation fails.
+        * bindings/v8/custom/V8WebGLRenderingContextCustom.cpp:
+        (WebCore::jsArrayToFloatArray):
+        (WebCore::jsArrayToIntArray):
+
+2011-08-04  Pratik Solanki  <psolanki@apple.com>
+
+        Implement CERTIFICATE_CREDENTIALS_SUPPORTED for CFNetwork
+        https://bugs.webkit.org/show_bug.cgi?id=65704
+        <rdar://problem/9877734>
+
+        Reviewed by Oliver Hunt.
+
+        Implement support for client side certificate authentication in the CFNetwork based loader.
+
+        * platform/network/cf/AuthenticationCF.cpp:
+        (WebCore::createCF):
+        (WebCore::core): Also fix leak of password string.
+
+2011-08-04  Chris Rogers  <crogers@google.com>
+
+        Make sure that AudioArray is 16-byte aligned
+        https://bugs.webkit.org/show_bug.cgi?id=65651
+
+        Reviewed by Kenneth Russell.
+
+        No new tests - this does not change JavaScript API.
+
+        * platform/audio/AudioArray.h:
+        (WebCore::AudioArray::AudioArray):
+        (WebCore::AudioArray::~AudioArray):
+        (WebCore::AudioArray::allocate):
+        (WebCore::AudioArray::data):
+        (WebCore::AudioArray::size):
+        (WebCore::AudioArray::at):
+        (WebCore::AudioArray::operator[]):
+        (WebCore::AudioArray::alignedAddress):
+        * platform/audio/Biquad.cpp:
+        (WebCore::Biquad::Biquad):
+        * platform/audio/ReverbConvolverStage.cpp:
+        (WebCore::ReverbConvolverStage::ReverbConvolverStage):
+        * webaudio/DelayDSPKernel.cpp:
+        (WebCore::DelayDSPKernel::DelayDSPKernel):
+        * webaudio/RealtimeAnalyser.cpp:
+        (WebCore::RealtimeAnalyser::setFftSize):
+
+2011-08-04  Brady Eidson  <beidson@apple.com>
+
+        <rdar://problem/9882581>, <rdar://problem/9868015>, and https://bugs.webkit.org/show_bug.cgi?id=65712
+        REGRESSION (91931) - Two LocalStorage threads started, thread unsafe operations can cause crash or other problems later.
+
+        Reviewed by Darin Adler.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::internalInitialize): Set the "needs initialization" flag before doing a 
+          whole bunch of stuff that might need to check it.
+
+2011-08-04  Jeff Miller  <jeffm@apple.com>
+
+        Adopt AVCF media back end on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65400
+        <rdar://problem/9894105>
+        
+        First cut at implementation in MediaPlayerPrivateAVFoundationCF.cpp/.h, based on
+        work by Eric Carlson. Note that use of AVFoundation is determined at runtime, and
+        defaults to off.
+
+        Reviewed by Darin Adler.
+
+        No new tests, uses existing media tests.
+
+        * config.h: Turn on WTF_USE_AVFOUNDATION on Windows if AVFoundationCF is available.
+        
+        * platform/graphics/MediaPlayer.cpp:
+        (WebCore::installedMediaEngines): Register MediaPlayerPrivateAVFoundationCF on Windows.
+        * platform/graphics/MediaPlayer.h: Add support for an AVCFPlayer.
+        
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
+        (WebCore::MediaPlayerPrivateAVFoundation::setPreload): Workaround an AVCF limitation that prevents an AVCFPlayer from being created without an AVCFItem.
+        (WebCore::MediaPlayerPrivateAVFoundation::dispatchNotification): Added support for ContentsNeedsDisplay notification.
+        
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.h:
+        (WebCore::MediaPlayerPrivateAVFoundation::contentsNeedsDisplay): Added support for ContentsNeedsDisplay notification.
+        
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.cpp: Added implementation.
+        (WebCore::AVFWrapper::caVideoLayer):
+        (WebCore::AVFWrapper::videoLayerWrapper):
+        (WebCore::AVFWrapper::videoLayer):
+        (WebCore::AVFWrapper::avPlayer):
+        (WebCore::AVFWrapper::avAsset):
+        (WebCore::AVFWrapper::avPlayerItem):
+        (WebCore::AVFWrapper::timeObserver):
+        (WebCore::AVFWrapper::imageGenerator):
+        (WebCore::AVFWrapper::dispatchQueue):
+        (WebCore::LayerClient::LayerClient):
+        (WebCore::LayerClient::~LayerClient):
+        (WebCore::LayerClient::platformCALayerRespondsToLayoutChanges):
+        (WebCore::LayerClient::platformCALayerAnimationStarted):
+        (WebCore::LayerClient::platformCALayerContentsOrientation):
+        (WebCore::LayerClient::platformCALayerPaintContents):
+        (WebCore::LayerClient::platformCALayerShowDebugBorders):
+        (WebCore::LayerClient::platformCALayerShowRepaintCounter):
+        (WebCore::LayerClient::platformCALayerIncrementRepaintCount):
+        (WebCore::LayerClient::platformCALayerContentsOpaque):
+        (WebCore::LayerClient::platformCALayerDrawsContent):
+        (WebCore::LayerClient::platformCALayerLayerDidDisplay):
+        (WebCore::boolString):
+        (WebCore::metadataKeyNames):
+        (WebCore::CMTimeRangeStartKey):
+        (WebCore::CMTimeRangeDurationKey):
+        (WebCore::CACFContextNeedsFlushNotification):
+        (WebCore::videoLayer):
+        (WebCore::avPlayer):
+        (WebCore::avAsset):
+        (WebCore::avPlayerItem):
+        (WebCore::imageGenerator):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::create):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::registerMediaEngine):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::MediaPlayerPrivateAVFoundationCF):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::~MediaPlayerPrivateAVFoundationCF):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::cancelLoad):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::hasLayerRenderer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::hasContextRenderer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createContextVideoRenderer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::destroyContextVideoRenderer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createVideoLayer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::destroyVideoLayer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::hasAvailableVideoFrame):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createAVPlayer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createAVPlayerItem):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createAVAssetForURL):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::checkPlayability):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::beginLoadingMetadata):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::playerItemStatus):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformMedia):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformLayer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformSetVisible):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformPlay):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformPause):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::updateRate):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformDuration):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::currentTime):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::seekToTime):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::setVolume):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::setClosedCaptionsVisible):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::rate):
+        (WebCore::timeRangeIsValidAndNotEmpty):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformBufferedTimeRanges):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformMaxTimeSeekable):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformMaxTimeLoaded):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::totalBytes):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::assetStatus):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::paintCurrentFrameInContext):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::paint):
+        (WebCore::mimeTypeCache):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::getSupportedTypes):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::supportsType):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::isAvailable):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::mediaTimeForTimeValue):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::tracksChanged):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::sizeChanged):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::contentsNeedsDisplay):
+        (WebCore::AVFWrapper::AVFWrapper):
+        (WebCore::AVFWrapper::~AVFWrapper):
+        (WebCore::AVFWrapper::scheduleDisconnectAndDelete):
+        (WebCore::AVFWrapper::disconnectAndDeleteAVFWrapper):
+        (WebCore::AVFWrapper::deleteAVFWrapper):
+        (WebCore::AVFWrapper::createAssetForURL):
+        (WebCore::AVFWrapper::createPlayer):
+        (WebCore::AVFWrapper::createPlayerItem):
+        (WebCore::AVFWrapper::periodicTimeObserverCallback):
+        (WebCore::AVFWrapper::notificationCallback):
+        (WebCore::AVFWrapper::loadPlayableCompletionCallback):
+        (WebCore::AVFWrapper::checkPlayability):
+        (WebCore::AVFWrapper::loadMetadataCompletionCallback):
+        (WebCore::AVFWrapper::beginLoadingMetadata):
+        (WebCore::AVFWrapper::seekCompletedCallback):
+        (WebCore::AVFWrapper::seekToTime):
+        (WebCore::AVFWrapper::setAsset):
+        (WebCore::AVFWrapper::platformLayer):
+        (WebCore::AVFWrapper::createAVCFVideoLayer):
+        (WebCore::AVFWrapper::destroyVideoLayer):
+        (WebCore::AVFWrapper::setVideoLayerNeedsCommit):
+        (WebCore::AVFWrapper::setVideoLayerHidden):
+        (WebCore::AVFWrapper::createImageGenerator):
+        (WebCore::AVFWrapper::destroyImageGenerator):
+        (WebCore::AVFWrapper::createImageForTimeInRect):
+        (WebCore::LayerClient::platformCALayerLayoutSublayersOfLayer):
+
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.h: Added implementation.
+
+2011-08-04  Jochen Eisinger  <jochen@chromium.org>
+
+        Get rid of ResourceRequestBase::m_targetType. Move it to chromium's ResourceRequest.
+        https://bugs.webkit.org/show_bug.cgi?id=48483
+
+        Reviewed by Alexey Proskuryakov.
+
+        * loader/PingLoader.cpp:
+        (WebCore::PingLoader::loadImage):
+        (WebCore::PingLoader::sendPing):
+        (WebCore::PingLoader::reportContentSecurityPolicyViolation):
+        * loader/cache/CachedResourceRequest.cpp:
+        (WebCore::CachedResourceRequest::load):
+        * platform/graphics/gstreamer/WebKitWebSourceGStreamer.cpp:
+        (webKitWebSrcStart):
+        * platform/network/ResourceRequestBase.cpp:
+        (WebCore::ResourceRequestBase::adopt):
+        (WebCore::ResourceRequestBase::copyData):
+        * platform/network/ResourceRequestBase.h:
+        (WebCore::ResourceRequestBase::ResourceRequestBase):
+        * platform/network/chromium/ResourceRequest.cpp:
+        (WebCore::ResourceRequest::doPlatformCopyData):
+        (WebCore::ResourceRequest::doPlatformAdopt):
+        * platform/network/chromium/ResourceRequest.h:
+        (WebCore::ResourceRequest::ResourceRequest):
+        (WebCore::ResourceRequest::targetType):
+        (WebCore::ResourceRequest::setTargetType):
+        * workers/DefaultSharedWorkerRepository.cpp:
+        (WebCore::SharedWorkerScriptLoader::load):
+        * workers/Worker.cpp:
+        (WebCore::Worker::create):
+        * workers/WorkerContext.cpp:
+        (WebCore::WorkerContext::importScripts):
+        * workers/WorkerScriptLoader.cpp:
+        (WebCore::WorkerScriptLoader::WorkerScriptLoader):
+        (WebCore::WorkerScriptLoader::createResourceRequest):
+        * workers/WorkerScriptLoader.h:
+        (WebCore::WorkerScriptLoader::create):
+        (WebCore::WorkerScriptLoader::setTargetType):
+
+2011-08-04  Jeff Miller  <jeffm@apple.com>
+
+        Fix WinCE build after r92308.
+
+        * config.h: Don't try to include WebCoreHeaderDetection.h for WinCE.
+
+2011-08-04  Darin Fisher  <darin@chromium.org>
+
+        webkitRequestAnimationFrame's element argument needs to be marked optional
+        https://bugs.webkit.org/show_bug.cgi?id=65698
+
+        Reviewed by James Robinson.
+
+        * page/DOMWindow.idl:
+
+2011-08-04  Adam Roben  <aroben@apple.com>
+
+        Delete some unused code from platform/graphics/win
+
+        MediaPlayerPrivateQuickTimeWin has been unused since r72117, and the GraphicsLayer-related
+        classes have been unused since r75262.
+
+        Fixes <http://webkit.org/b/65689> platform/graphics/win has a bunch of unused code
+
+        Reviewed by Eric Carlson.
+
+        * WebCore.gypi:
+        * WebCore.vcproj/WebCore.vcproj:
+        Removed now-deleted files.
+
+        * platform/graphics/win/GraphicsLayerCACF.cpp: Removed.
+        * platform/graphics/win/GraphicsLayerCACF.h: Removed.
+        * platform/graphics/win/MediaPlayerPrivateQuickTimeWin.cpp: Removed.
+        * platform/graphics/win/MediaPlayerPrivateQuickTimeWin.h: Removed.
+        * platform/graphics/win/WebLayer.cpp: Removed.
+        * platform/graphics/win/WebLayer.h: Removed.
+        * platform/graphics/win/WebTiledLayer.cpp: Removed.
+        * platform/graphics/win/WebTiledLayer.h: Removed.
+
+2011-08-03  Adam Roben  <aroben@apple.com>
+
+        Detect and handle overflow in PlatformCALayerWinInternal::constrainedSize
+
+        Google Maps sometimes requests very large (i.e., 2^50 pixels or greater) layers when
+        zooming. PlatformCALayerWinInternal has code to limit tiled layers to 2^27 pixels, but it
+        was not correctly handling overflow. In some cases, this would lead to creating a tiled
+        layer with 0 tiles, which was the cause of this crash.
+
+        Fixes <http://webkit.org/b/65637> <rdar://problem/9784849> Crash beneath
+        PlatformCALayerWinInternal::updateTiles when zooming on Google Maps
+
+        Reviewed by Sam Weinig.
+
+        Test: compositing/tiling/crash-huge-layer.html
+
+        * platform/graphics/ca/win/PlatformCALayerWinInternal.cpp:
+        (PlatformCALayerWinInternal::constrainedSize): Check for overflow before seeing if the
+        number of required tiles is larger than the maximum number of allowed tiles.
+        (PlatformCALayerWinInternal::updateTiles): Added an assertion to catch cases where we have a
+        non-empty tiled layer that contains 0 tiles, which would cause the crash in this bug report.
+
+2011-08-04  Stephen White  <senorblanco@chromium.org>
+
+        Set graphics context current before canvas.toDataURL().
+        https://bugs.webkit.org/show_bug.cgi?id=65700
+
+        Reviewed by James Robinson.
+
+        No new tests, unfortunately.  The test infrastucture doesn't seem
+        to be conducive to writing multiple-context tests.
+
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::toDataURL):
+
+2011-08-01  Brian Weinstein  <bweinstein@apple.com>
+
+        WebKit2: Web Inspector always starts in undocked mode
+        https://bugs.webkit.org/show_bug.cgi?id=65493
+        <rdar://problem/9353114>
+        
+        Reviewed by Adam Roben.
+        
+        Expose some methods on InspectorFrontendClient through the InspectorController so WebKit2
+        can request the inspector be docked, or ask whether or not it can be docked.
+
+        * WebCore.exp.in: Export needed methods.
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::requestAttachWindow): Call through to InspectorFrontendClient.
+        (WebCore::InspectorController::canAttachWindow): Ditto.
+        * inspector/InspectorController.h:
+        * inspector/InspectorFrontendClient.h:
+        * inspector/InspectorFrontendClientLocal.h:
+
+2011-08-04  Luke Macpherson   <macpherson@chromium.org>
+
+        Support cast between CSSPrimitiveValue and EborderFit, use in CSSStyleSelector.
+        https://bugs.webkit.org/show_bug.cgi?id=65665
+
+        Reviewed by Simon Fraser.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValueMappings.h:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        Support cast from EBorderFit.
+        (WebCore::CSSPrimitiveValue::operator EBorderFit):
+        Support cast to EBorderFit.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use new cast to allow use of appropriate macro.
+
+2011-08-04  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: rename sendResultByValue to returnByValue in Runtime agent.
+        https://bugs.webkit.org/show_bug.cgi?id=65687
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::evaluate):
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorRuntimeAgent.h:
+
+2011-08-04  Matt Falkenhagen  <falken@chromium.org>
+
+        Use -webkit-locale for font selection.
+        https://bugs.webkit.org/show_bug.cgi?id=10874
+
+        Reviewed by Dan Bernstein.
+
+        Infer a script from -webkit-locale to use to choose a font for generic
+        font families and the default unstyled font.  The font is retrieved
+        from per-script font settings (see bug 20797).  Since these settings
+        have not changed there should be no visible effect yet.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * css/CSSFontSelector.cpp: Use script when getting font from Settings
+        (WebCore::fontDataForGenericFamily):
+        (WebCore::CSSFontSelector::getFontData):
+        * css/CSSPropertyNames.in: Increase priority of -webkit-locale since it affects font
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForDocument):
+        (WebCore::CSSStyleSelector::applyDeclarations):
+        (WebCore::CSSStyleSelector::applyProperty): Set script in font based on -webkit-locale
+        * page/Settings.cpp:
+        (WebCore::getGenericFontFamilyForScript): Fallback to USCRIPT_COMMON
+        * platform/graphics/FontDescription.h: Add m_script
+        (WebCore::FontDescription::FontDescription):
+        (WebCore::FontDescription::script):
+        (WebCore::FontDescription::setScript):
+        (WebCore::FontDescription::operator==):
+        * platform/text/LocaleToScriptMapping.h: Added.
+        * platform/text/LocaleToScriptMappingDefault.cpp: Added.
+        (WebCore::localeToScriptCodeForFontSelection):
+        (WebCore::LocaleScript::if):
+        (WebCore::LocaleScript::while):
+        * platform/text/LocaleToScriptMappingICU.cpp: Added.
+        (WebCore::scriptCodeForFontSelection):
+        (WebCore::localeToScriptCodeForFontSelection):
+
+2011-08-04  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Pretty print JSONP in network panel preview tab.
+        https://bugs.webkit.org/show_bug.cgi?id=65559
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/network/network-preview-json.html
+
+        * inspector/front-end/ResourceJSONView.js:
+        (WebInspector.ResourceJSONView.parseJSON.WebInspector.ResourceJSONView.parseJSONP):
+        (WebInspector.ResourceJSONView.parseJSON.WebInspector.ResourceJSONView.prototype._initialize):
+        (WebInspector.ResourceJSONView.parseJSON.WebInspector.ParsedJSON):
+        * inspector/front-end/ResourcePreviewView.js:
+        (WebInspector.ResourcePreviewView.prototype._createPreviewView):
+
+2011-08-04  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: replace isRegex with urlRegex in setBreakpointByUrl
+        https://bugs.webkit.org/show_bug.cgi?id=65684
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorDebuggerAgent.cpp:
+        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):
+        * inspector/InspectorDebuggerAgent.h:
+        * inspector/front-end/DebuggerModel.js:
+        (WebInspector.DebuggerModel.prototype.setBreakpoint):
+
+2011-08-03  Philippe Normand  <pnormand@igalia.com>
+
+        [GTK] fullscreen/video-controls-override.html fails
+        https://bugs.webkit.org/show_bug.cgi?id=65618
+
+        Reviewed by Martin Robinson.
+
+        Implement extraFullScreenStyleSheet() and provide the QuickTime
+        stylesheet for now, later we might want our own stylesheet.
+
+        * GNUmakefile.am:
+        * platform/gtk/RenderThemeGtk.cpp:
+        (WebCore::RenderThemeGtk::extraFullScreenStyleSheet):
+        * platform/gtk/RenderThemeGtk.h:
+
+2011-08-04  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Rename sourceId -> scriptId in the protocol and the source code.
+        https://bugs.webkit.org/show_bug.cgi?id=65682
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScriptSource.js:
+        ():
+        * inspector/Inspector.json:
+        * inspector/InspectorConsoleAgent.cpp:
+        (WebCore::InspectorConsoleAgent::addMessageToConsole):
+        * inspector/InspectorConsoleAgent.h:
+        * inspector/InspectorConsoleInstrumentation.h:
+        (WebCore::InspectorInstrumentation::addMessageToConsole):
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::buildObjectForEventListener):
+        * inspector/InspectorDebuggerAgent.cpp:
+        (WebCore::parseLocation):
+        (WebCore::InspectorDebuggerAgent::setBreakpoint):
+        (WebCore::InspectorDebuggerAgent::continueToLocation):
+        (WebCore::InspectorDebuggerAgent::resolveBreakpoint):
+        (WebCore::InspectorDebuggerAgent::setScriptSource):
+        (WebCore::InspectorDebuggerAgent::getScriptSource):
+        (WebCore::InspectorDebuggerAgent::didParseSource):
+        * inspector/InspectorDebuggerAgent.h:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::addMessageToConsoleImpl):
+        * inspector/InspectorInstrumentation.h:
+        * inspector/ScriptDebugListener.h:
+        * inspector/front-end/DebuggerModel.js:
+        (WebInspector.DebuggerModel.prototype.scriptForSourceID):
+        (WebInspector.DebuggerModel.prototype.queryScripts):
+        (WebInspector.DebuggerModel.prototype.setScriptSource):
+        (WebInspector.DebuggerModel.prototype._didEditScriptSource):
+        (WebInspector.DebuggerModel.prototype._parsedScriptSource):
+        (WebInspector.DebuggerDispatcher.prototype.scriptParsed):
+        (WebInspector.DebuggerDispatcher.prototype.breakpointResolved):
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel.prototype.registerAnchor):
+        (WebInspector.DebuggerPresentationModel.prototype._updateAnchor):
+        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource.didReceiveSource):
+        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource):
+        (WebInspector.DebuggerPresentationModel.prototype._setBreakpointInDebugger.didGetScriptLocation):
+        (WebInspector.DebuggerPresentationModel.prototype._setBreakpointInDebugger):
+        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded):
+        (WebInspector.DebuggerPresentationModel.prototype.set _debuggerPaused):
+        (WebInspector.DebuggerPresentationModel.prototype._sourceFileForScript):
+        (WebInspector.DebuggerPresentationModel.prototype._scriptForSourceFileId):
+        (WebInspector.DebuggerPresentationModel.prototype._createSourceFileId):
+        (WebInspector.PresenationCallFrame):
+        (WebInspector.PresenationCallFrame.prototype.sourceLine):
+        * inspector/front-end/EventListenersSidebarPane.js:
+        (.):
+        ():
+        * inspector/front-end/Script.js:
+        (WebInspector.Script):
+        (WebInspector.Script.prototype.requestSource):
+        (WebInspector.Script.prototype.editSource):
+        * inspector/front-end/SourceFile.js:
+        (WebInspector.RawSourceCode.prototype.uiLocationToRawLocation):
+        (WebInspector.RawSourceCode.prototype.forceLoadContent):
+        (WebInspector.RawSourceCode.prototype._concatenateScriptsContent):
+
+2011-08-04  Tommy Widenflycht  <tommyw@google.com>
+
+        MediaStream API: Rename StreamEvent to MediaStreamEvent
+        https://bugs.webkit.org/show_bug.cgi?id=65669
+
+        Reviewed by Tony Gentilcore.
+
+        * CMakeLists.txt:
+        * CodeGenerators.pri:
+        * DerivedSources.cpp:
+        * DerivedSources.make:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/js/JSEventCustom.cpp:
+        (WebCore::toJS):
+        * bindings/v8/custom/V8EventCustom.cpp:
+        (WebCore::toV8):
+        * dom/DOMAllInOne.cpp:
+        * dom/Event.cpp:
+        (WebCore::Event::isMediaStreamEvent):
+        * dom/Event.h:
+        * p2p/MediaStreamEvent.cpp: Renamed from Source/WebCore/dom/StreamEvent.cpp.
+        (WebCore::MediaStreamEvent::create):
+        (WebCore::MediaStreamEvent::MediaStreamEvent):
+        (WebCore::MediaStreamEvent::~MediaStreamEvent):
+        (WebCore::MediaStreamEvent::initMediaStreamEvent):
+        (WebCore::MediaStreamEvent::stream):
+        * p2p/MediaStreamEvent.h: Renamed from Source/WebCore/dom/StreamEvent.h.
+        (WebCore::MediaStreamEvent::isMediaStreamEvent):
+        * p2p/MediaStreamEvent.idl: Renamed from Source/WebCore/dom/StreamEvent.idl.
+        * p2p/PeerConnection.cpp:
+        (WebCore::PeerConnection::dispatchStreamEvent):
+
+2011-08-02  Hans Wennborg  <hans@chromium.org>
+
+        IndexedDB: Fix index data invalidation bugs.
+        https://bugs.webkit.org/show_bug.cgi?id=65547
+
+        Reviewed by Tony Chang.
+
+        The function that checks whether a key exists in an index failed
+        to check whether that key was still valid or not.
+
+        Deleting a record from an object store must also delete its exists
+        entry, thus invalidating index keys pointing to that record.
+
+        Test: storage/indexeddb/index-unique.html
+
+        * storage/IDBLevelDBBackingStore.cpp:
+        (WebCore::IDBLevelDBBackingStore::deleteObjectStoreRecord):
+        (WebCore::findKeyInIndex):
+        (WebCore::IDBLevelDBBackingStore::getPrimaryKeyViaIndex):
+        (WebCore::IDBLevelDBBackingStore::keyExistsInIndex):
+        (WebCore::CursorOptions::IndexKeyCursorImpl::loadCurrentRow):
+
+2011-08-04  Alexandru Chiculita  <achicu@adobe.com>
+
+        Move PODIntervalTree to Source/WebCore/platform
+        https://bugs.webkit.org/show_bug.cgi?id=65667
+
+        It seems the files were not part of any project, so no project files were modified.
+
+        Reviewed by Adam Barth.
+
+        No new tests, just moving files from one folder to the other.
+
+        * platform/PODArena.h: Renamed from Source/WebCore/platform/graphics/gpu/PODArena.h.
+        (WebCore::PODArena::Allocator::~Allocator):
+        (WebCore::PODArena::FastMallocAllocator::create):
+        (WebCore::PODArena::FastMallocAllocator::allocate):
+        (WebCore::PODArena::FastMallocAllocator::free):
+        (WebCore::PODArena::FastMallocAllocator::FastMallocAllocator):
+        (WebCore::PODArena::create):
+        (WebCore::PODArena::allocateObject):
+        (WebCore::PODArena::~PODArena):
+        (WebCore::PODArena::PODArena):
+        (WebCore::PODArena::minAlignment):
+        (WebCore::PODArena::allocateBase):
+        (WebCore::PODArena::roundUp):
+        (WebCore::PODArena::Chunk::Chunk):
+        (WebCore::PODArena::Chunk::~Chunk):
+        (WebCore::PODArena::Chunk::allocate):
+        * platform/PODInterval.h: Renamed from Source/WebCore/platform/graphics/gpu/PODInterval.h.
+        (WebCore::PODInterval::PODInterval):
+        (WebCore::PODInterval::low):
+        (WebCore::PODInterval::high):
+        (WebCore::PODInterval::data):
+        (WebCore::PODInterval::overlaps):
+        (WebCore::PODInterval::operator<):
+        (WebCore::PODInterval::operator==):
+        (WebCore::PODInterval::maxHigh):
+        (WebCore::PODInterval::setMaxHigh):
+        (WebCore::PODInterval::toString):
+        * platform/PODIntervalTree.h: Renamed from Source/WebCore/platform/graphics/gpu/PODIntervalTree.h.
+        (WebCore::PODIntervalTree::PODIntervalTree):
+        (WebCore::PODIntervalTree::allOverlaps):
+        (WebCore::PODIntervalTree::createInterval):
+        (WebCore::PODIntervalTree::checkInvariants):
+        (WebCore::PODIntervalTree::init):
+        (WebCore::PODIntervalTree::searchForOverlapsFrom):
+        (WebCore::PODIntervalTree::updateNode):
+        (WebCore::PODIntervalTree::checkInvariantsFromNode):
+        * platform/PODRedBlackTree.h: Renamed from Source/WebCore/platform/graphics/gpu/PODRedBlackTree.h.
+        (WebCore::PODRedBlackTree::Visitor::~Visitor):
+        (WebCore::PODRedBlackTree::PODRedBlackTree):
+        (WebCore::PODRedBlackTree::~PODRedBlackTree):
+        (WebCore::PODRedBlackTree::add):
+        (WebCore::PODRedBlackTree::remove):
+        (WebCore::PODRedBlackTree::contains):
+        (WebCore::PODRedBlackTree::visitInorder):
+        (WebCore::PODRedBlackTree::size):
+        (WebCore::PODRedBlackTree::setNeedsFullOrderingComparisons):
+        (WebCore::PODRedBlackTree::checkInvariants):
+        (WebCore::PODRedBlackTree::dump):
+        (WebCore::PODRedBlackTree::setVerboseDebugging):
+        (WebCore::PODRedBlackTree::Node::Node):
+        (WebCore::PODRedBlackTree::Node::~Node):
+        (WebCore::PODRedBlackTree::Node::color):
+        (WebCore::PODRedBlackTree::Node::setColor):
+        (WebCore::PODRedBlackTree::Node::data):
+        (WebCore::PODRedBlackTree::Node::copyFrom):
+        (WebCore::PODRedBlackTree::Node::left):
+        (WebCore::PODRedBlackTree::Node::setLeft):
+        (WebCore::PODRedBlackTree::Node::right):
+        (WebCore::PODRedBlackTree::Node::setRight):
+        (WebCore::PODRedBlackTree::Node::parent):
+        (WebCore::PODRedBlackTree::Node::setParent):
+        (WebCore::PODRedBlackTree::root):
+        (WebCore::PODRedBlackTree::updateNode):
+        (WebCore::PODRedBlackTree::treeSearch):
+        (WebCore::PODRedBlackTree::treeSearchNormal):
+        (WebCore::PODRedBlackTree::treeSearchFullComparisons):
+        (WebCore::PODRedBlackTree::treeInsert):
+        (WebCore::PODRedBlackTree::treeSuccessor):
+        (WebCore::PODRedBlackTree::treeMinimum):
+        (WebCore::PODRedBlackTree::propagateUpdates):
+        (WebCore::PODRedBlackTree::leftRotate):
+        (WebCore::PODRedBlackTree::rightRotate):
+        (WebCore::PODRedBlackTree::insertNode):
+        (WebCore::PODRedBlackTree::deleteFixup):
+        (WebCore::PODRedBlackTree::deleteNode):
+        (WebCore::PODRedBlackTree::visitInorderImpl):
+        (WebCore::PODRedBlackTree::Counter::Counter):
+        (WebCore::PODRedBlackTree::Counter::visit):
+        (WebCore::PODRedBlackTree::Counter::count):
+        (WebCore::PODRedBlackTree::checkInvariantsFromNode):
+        (WebCore::PODRedBlackTree::logIfVerbose):
+        (WebCore::PODRedBlackTree::dumpFromNode):
+
+2011-08-03  Alice Boxhall  <aboxhall@chromium.org>
+
+        An element with role=textbox should have settable AXValue unless read-only
+        https://bugs.webkit.org/show_bug.cgi?id=65664
+
+        Reviewed by Chris Fleizach.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::canSetValueAttribute):
+        Return true for non-native text field with aria-readonly not set.
+
+2011-08-03  Luke Macpherson   <macpherson@chromium.org>
+
+        Clean up value clamping in CSSStyleSelector.
+        https://bugs.webkit.org/show_bug.cgi?id=65588
+
+        Reviewed by Darin Adler.
+
+        No new tests / trivial code cleanup only.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Replace (unsigned int)primitiveValue->getDoubleValue() with primtiveValue->getValue<unsigned>() for correct clamping.
+        Replace clampToInteger(primitiveValue->getDoubleValue()) with primitiveValue->getIntValue().
+
+2011-08-03  Kent Tamura  <tkent@chromium.org>
+
+        Fix incorrect checks for HTMLMediaElement
+        https://bugs.webkit.org/show_bug.cgi?id=65590
+
+        Reviewed by Dimitri Glazkov.
+
+        <video> and <audio> can be an HTMLElement instance instead of
+        HTMLMediaElement if MediaPlayer::isAvailable() returns false or
+        the media feature is disabled at runtime.
+
+        * html/HTMLSourceElement.cpp:
+        (WebCore::HTMLSourceElement::insertedIntoTree):
+        (WebCore::HTMLSourceElement::willRemove):
+        * html/HTMLTrackElement.cpp:
+        (WebCore::HTMLTrackElement::insertedIntoTree):
+        (WebCore::HTMLTrackElement::willRemove):
+        * html/shadow/MediaControlElements.cpp:
+        (WebCore::toParentMediaElement):
+        * page/FrameView.cpp:
+        (WebCore::FrameView::updateWidget):
+        * platform/efl/RenderThemeEfl.cpp:
+        (WebCore::RenderThemeEfl::paintMediaMuteButton):
+        * platform/gtk/RenderThemeGtk.cpp:
+        (WebCore::getMediaElementFromRenderObject):
+        * rendering/RenderThemeMac.mm:
+        (WebCore::RenderThemeMac::paintMediaSliderTrack):
+        * rendering/RenderThemeWinCE.cpp:
+        (WebCore::mediaElementParent):
+
+2011-08-03  Sailesh Agrawal  <sail@chromium.org>
+
+        Chromium Mac: Make ScrollbarOverlayUtilitiesChromiumMac.h c++ compatible
+        https://bugs.webkit.org/show_bug.cgi?id=65659
+
+        Reviewed by James Robinson.
+
+        ScrollbarOverlayUtilitiesChromiumMac.h couldn't be included from pure c++ code because it used NSInteger. I fixed this by checking for __OBJC__ before using NSInteger.
+
+        Currently no pure c++ files are including ScrollbarOverlayUtilitiesChromiumMac.h but this will change in future patches from jam@chromium.org.
+
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.h:
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.mm:
+        (wkScrollbarPainterControllerStyle):
+        (wkSetScrollbarPainterControllerStyle):
+
+2011-08-03  Luke Macpherson   <macpherson@chromium.org>
+
+        Support cast between CSSPrimitiveValue and EBoxSizing, use in CSSStyleSelector.
+        https://bugs.webkit.org/show_bug.cgi?id=65657
+
+        Reviewed by Simon Fraser.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValueMappings.h:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        Implement cast from EBoxSizing.
+        (WebCore::CSSPrimitiveValue::operator EBoxSizing):
+        Implement cast to EBoxSizing.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use appropriate macro to simplify code using cast.
+
+2011-08-03  Ian Henderson  <ianh@apple.com>
+
+        Draw rectangular box shadow for elements with border-radius if no corners are visible
+        https://bugs.webkit.org/show_bug.cgi?id=65006
+
+        Reviewed by Simon Fraser.
+
+        Change "unroundClippedCorners" to "allCornersClippedOut" and use it to
+        determine when the corners' influence affects the blurred shadow in
+        the current drawing region.
+
+        Test: fast/box-shadow/box-shadow-clipped-slices.html
+
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::paintBoxShadow): Pass PaintInfo through to
+        RenderBoxModelObject::paintBoxShadow.
+        (WebCore::InlineFlowBox::paintBoxDecorations): Ditto.
+        * rendering/InlineFlowBox.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintBoxDecorations): Ditto.
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::allCornersClippedOut): Determines whether the bounding rects
+        for any of the given rounded rect's corners intersects the clip rect.
+        (WebCore::RenderBoxModelObject::paintBorder): Instead of "unrounding"
+        any corner outside the clip rect, unround all corners at once, and
+        only if they are all outside the clip rect.
+        (WebCore::RenderBoxModelObject::paintBoxShadow): Determine whether any
+        corner will influence shadow drawing using allCornersClippedOut on the
+        influenceRect, whose corners extend past the fillRect's corners by the
+        blur radius and inside the fillRect's corners by the blur radius.
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderFieldset.cpp:
+        (WebCore::RenderFieldset::paintBoxDecorations): Pass PaintInfo into
+        RenderBoxModelObject::paintBoxShadow.
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::paintBoxDecorations): Ditto.
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::paintBoxDecorations): Ditto.
+
+2011-08-03  No'am Rosenthal  <noam.rosenthal@nokia.com>
+
+        [Qt][Texmap][REGRESSION] http://webkit.org/blog-files/transform-style.html doesn't show composited content
+        https://bugs.webkit.org/show_bug.cgi?id=65629
+
+        Reviewed by Benjamin Poulain.
+
+        Some non-ES2 initialization was wrongfully #ifdefed in CPU(X86) and thus compiled-out.
+        When put it in the correct #ifdef, composited layers which require an intermediate buffer
+        work again.
+
+        No new tests. Existing opacity tests in LayoutTests/compositing test this.
+
+        * platform/graphics/opengl/TextureMapperGL.cpp:
+        (WebCore::BitmapTextureGL::bind):
+
+2011-08-03  Mark Rowe  <mrowe@apple.com>
+
+        Bring some order to FeatureDefines.xcconfig to make it easier to follow.
+
+        Reviewed by Sam Weinig.
+
+        * Configurations/FeatureDefines.xcconfig:
+
+2011-08-03  Mark Rowe  <mrowe@apple.com>
+
+        Clean up FeatureDefines.xcconfig to remove some unnecessary conditional settings
+
+        Reviewed by Dave Kilzer.
+
+        * Configurations/FeatureDefines.xcconfig:
+
+2011-08-02  Adrienne Walker  <enne@google.com>
+
+        [chromium] Fix issue where switching composited tabs evicts root textures
+        https://bugs.webkit.org/show_bug.cgi?id=65562
+
+        Reviewed by James Robinson.
+
+        LayerTilerChromium::protectTileTextures was hard-coding texture sizes
+        and texture formats. Because this didn't always match textures' actual
+        sizes and formats, they weren't getting protected during eviction.
+
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::protectTileTextures):
+
+2011-08-03  Ryosuke Niwa  <rniwa@webkit.org>
+
+        select-all, copy, paste of specialAncestorElements (e.g. pre, h1, etc) nests the element inside itself
+        https://bugs.webkit.org/show_bug.cgi?id=26483
+
+        Reviewed by Enrica Casucci.
+
+        The bug was caused by WebKit serializing pre, h1, etc... to retain structure and appearance when copying
+        rich content and pasting did not remove such nodes wrapping the copied contents.
+
+        Fixed the bug by extending r81887 and r83322 to remove those elements from where WebKit pastes into.
+
+        Test: editing/pasteboard/copy-paste-text-in-h1.html
+
+        * editing/ReplaceSelectionCommand.cpp:
+        (WebCore::nodeHasAttributesToPreserve): Extracted from isInlineNodeWithStyle.
+        (WebCore::isInlineNodeWithStyle): Calls nodeHasAttributesToPreserve.
+        (WebCore::ReplaceSelectionCommand::doApply): Calls ancestorToRetainStructureAndAppearance.
+        Remove nodes copied by ancestorToRetainStructureAndAppearance at insertionPos before pasting the fragment.
+        * editing/markup.cpp:
+        (WebCore::ancestorToRetainStructureAndAppearance): Takes ShouldIncludeParagraphSeparators.
+        * editing/markup.h:
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from Console.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65569
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/Console.idl:
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from HTML DOM IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65338
+
+        Reviewed by Adam Barth.
+
+        * html/DOMFormData.idl:
+        * html/DOMTokenList.idl:
+        * html/DOMURL.idl:
+        * html/HTMLAllCollection.idl:
+        * html/HTMLAnchorElement.idl:
+        * html/HTMLAudioElement.idl:
+        * html/HTMLButtonElement.idl:
+        * html/HTMLCanvasElement.idl:
+        * html/HTMLCollection.idl:
+        * html/HTMLDivElement.idl:
+        * html/HTMLDocument.idl:
+        * html/HTMLElement.idl:
+        * html/HTMLFieldSetElement.idl:
+        * html/HTMLInputElement.idl:
+        * html/HTMLKeygenElement.idl:
+        * html/HTMLMediaElement.idl:
+        * html/HTMLObjectElement.idl:
+        * html/HTMLOptionsCollection.idl:
+        * html/HTMLOutputElement.idl:
+        * html/HTMLSelectElement.idl:
+        * html/HTMLTableElement.idl:
+        * html/HTMLTableRowElement.idl:
+        * html/HTMLTableSectionElement.idl:
+        * html/HTMLTextAreaElement.idl:
+        * html/HTMLVideoElement.idl:
+        * html/TimeRanges.idl:
+
+2011-08-03  Jeffrey Pfau  <jpfau@apple.com>
+
+        Make atomic XML token
+        https://bugs.webkit.org/show_bug.cgi?id=65639
+
+        Reviewed by Adam Barth.
+
+        Create a shared AtomicMarkupTokenBase that is shared by AtomicHTMLToken and the new AtomicXMLToken
+
+        * html/parser/HTMLToken.h:
+        (WebCore::HTMLToken::setForceQuirks):
+        (WebCore::AtomicHTMLToken::AtomicHTMLToken):
+        (WebCore::AtomicHTMLToken::forceQuirks):
+        * html/parser/HTMLTokenizer.cpp:
+        (WebCore::::nameForAttribute):
+        (WebCore::::usesName):
+        (WebCore::::usesAttributes):
+        * xml/parser/MarkupTokenBase.h:
+        (WebCore::AtomicMarkupTokenBase::AtomicMarkupTokenBase):
+        (WebCore::AtomicMarkupTokenBase::type):
+        (WebCore::AtomicMarkupTokenBase::name):
+        (WebCore::AtomicMarkupTokenBase::setName):
+        (WebCore::AtomicMarkupTokenBase::selfClosing):
+        (WebCore::AtomicMarkupTokenBase::getAttributeItem):
+        (WebCore::AtomicMarkupTokenBase::attributes):
+        (WebCore::AtomicMarkupTokenBase::takeAtributes):
+        (WebCore::AtomicMarkupTokenBase::characters):
+        (WebCore::AtomicMarkupTokenBase::comment):
+        (WebCore::AtomicMarkupTokenBase::publicIdentifier):
+        (WebCore::AtomicMarkupTokenBase::systemIdentifier):
+        (WebCore::::initializeAttributes):
+        * xml/parser/XMLToken.h:
+        (WebCore::AtomicXMLToken::AtomicXMLToken):
+        (WebCore::AtomicXMLToken::prefix):
+        (WebCore::AtomicXMLToken::target):
+        (WebCore::AtomicXMLToken::data):
+        (WebCore::AtomicXMLToken::xmlVersion):
+        (WebCore::AtomicXMLToken::xmlStandalone):
+        * xml/parser/XMLTokenizer.cpp:
+        (WebCore::::nameForAttribute):
+        (WebCore::::usesName):
+        (WebCore::::usesAttributes):
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from geolocation IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65355
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/Geolocation.idl:
+        * page/PositionCallback.idl:
+        * page/PositionErrorCallback.idl:
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from DOMSelection.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65566
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/DOMSelection.idl:
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from Location.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65565
+
+        Reviewed by Darin Adler.
+
+        No new tests, all existing tests pass.
+
+        * page/Location.idl:
+
+2011-08-03  Sailesh Agrawal  <sail@chromium.org>
+
+        Chromium Mac: Fix position of search tickmarks
+        https://bugs.webkit.org/show_bug.cgi?id=65575
+
+        This change adjusts the position of search tickmarks so that they are correctly centered.
+
+        Also, insetting the tickmark rect by 5 pixels caused tickmarks on the overlay scrollbar to look very small. I changed this to inset by 4 pixels instead. The tickmark is the same width as the overlay scrollbar which looks much better.
+
+        Reviewed by James Robinson.
+
+        * platform/chromium/ScrollbarThemeChromiumMac.mm:
+        (WebCore::ScrollbarThemeChromiumMac::paint):
+
+2011-08-03  Sailesh Agrawal  <sail@chromium.org>
+
+        Chromium Mac: Make sure scrollbars flash when web page loads
+        https://bugs.webkit.org/show_bug.cgi?id=65586
+
+        On slow web pages scrollbars wouldn't flash when the page was done loading. The problem was that we were flashing the scrollbar 0.1 second after the load operation had started. If the page was slow to load then we might not have scrollbars to flash. To work around this I added an extra check to make sure that we had indeed finished loading the page before flashing the scrollbars.
+
+        Reviewed by James Robinson.
+
+        * platform/chromium/ScrollAnimatorChromiumMac.mm:
+        (WebCore::ScrollAnimatorChromiumMac::initialScrollbarPaintTimerFired):
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from navigator IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65370
+
+        Reviewed by Adam Barth.
+
+        * page/Navigator.idl:
+        * page/NavigatorUserMediaErrorCallback.idl:
+        * page/NavigatorUserMediaSuccessCallback.idl:
+
+2011-08-03  Anders Carlsson  <andersca@apple.com>
+
+        webarchive/loading/missing-data.html is failing on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=63507
+
+        Reviewed by Adam Barth.
+
+        When loading a main resource from a web archive, make sure that the working URL is actually
+        the URL of the resource, and not the URL of the web archive itself.
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::receivedFirstData):
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from DOMWindow.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65353
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateImplementation):
+        * bindings/scripts/CodeGeneratorV8.pm:
+        (GenerateFunctionCallback):
+        * page/DOMWindow.idl:
+
+2011-08-03  Jeff Miller  <jeffm@apple.com>
+
+        Fix Chromimum and Qt builds after r92308.
+
+        * config.h: Don't try to include WebCoreHeaderDetection.h for Chromimum and Qt.
+
+2011-08-03  Jeff Miller  <jeffm@apple.com>
+
+        Generate WebCoreHeaderDetection.h on Windows to define HAVE_AVCF
+        https://bugs.webkit.org/show_bug.cgi?id=65634
+        
+        AVFoundation support on Windows will (eventually) be predicated on the
+        availability of AVFoundationCF headers and libraries in the WebKit Support
+        Libraries, so we test for the existence of one of the header files (AVCFBase.h)
+        to determine whether to AVCF is available.
+        
+        For now, even if AVFoundationCF is available, leave WTF_USE_AVFOUNDATION off, since
+        it's not ready to be turned on yet (which is covered by http://webkit.org/b/65400).
+        
+        Ideally, we would generate WebCoreHeaderDetection.h on all platforms so we could
+        include it unconditionally in WebCore's config.h, but unfortunately the Mac-only file
+        ExportFileGenerator.cpp depends on WTF_USE_AVFOUNDATION being set correctly, and since this
+        .cpp file is also generated it doesn't have access to WebCoreHeaderDetection.h.
+
+        Reviewed by Adam Roben.
+
+        No change in functionality, so new tests.
+
+        * DerivedSources.make: Add rule to generate WebCoreHeaderDetection.h to set HAVE_AVCF on Windows.
+        * config.h: Include WebCoreHeaderDetection.h on Windows, check for HAVE(AVCF) but always leave WTF_USE_AVFOUNDATION off on Windows for now.
+
+2011-08-03  Tommy Widenflycht  <tommyw@google.com>
+
+        MediaStream API: Implement PeerConnection and SignalingCallback
+        https://bugs.webkit.org/show_bug.cgi?id=65101
+
+        Reviewed by Adam Barth.
+
+        LayoutTests will be provided by a follow-up CL, see <https://bugs.webkit.org/show_bug.cgi?id=56587>.
+
+        * CMakeLists.txt:
+        * CodeGenerators.pri:
+        * DerivedSources.cpp:
+        * DerivedSources.make:
+        * GNUmakefile.am:
+        * GNUmakefile.list.am:
+        * UseJSC.cmake:
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/generic/RuntimeEnabledFeatures.h:
+        (WebCore::RuntimeEnabledFeatures::peerConnectionEnabled):
+        * bindings/js/JSBindingsAllInOne.cpp:
+        * bindings/js/JSPeerConnectionCustom.cpp: Copied from Source/WebCore/page/MediaStreamClient.h.
+        (WebCore::JSPeerConnectionConstructor::constructJSPeerConnection):
+        * bindings/v8/V8DOMWrapper.cpp:
+        (WebCore::V8DOMWrapper::convertEventTargetToV8Object):
+        * bindings/v8/custom/V8PeerConnectionCustom.cpp: Added.
+        (WebCore::V8PeerConnection::constructorCallback):
+        * dom/DispatchTask.h: Added.
+        (WebCore::SimpleDispatchTask::create):
+        (WebCore::SimpleDispatchTask::performTask):
+        (WebCore::SimpleDispatchTask::SimpleDispatchTask):
+        (WebCore::DispatchTask::create):
+        (WebCore::DispatchTask::performTask):
+        (WebCore::DispatchTask::DispatchTask):
+        * dom/EventNames.h:
+        * dom/EventTarget.cpp:
+        (WebCore::EventTarget::toPeerConnection):
+        * dom/EventTarget.h:
+        * p2p/PeerConnection.cpp: Added.
+        (WebCore::PeerConnection::create):
+        (WebCore::PeerConnection::PeerConnection):
+        (WebCore::PeerConnection::init):
+        (WebCore::PeerConnection::~PeerConnection):
+        (WebCore::PeerConnection::localStreams):
+        (WebCore::PeerConnection::remoteStreams):
+        (WebCore::PeerConnection::processSignalingMessage):
+        (WebCore::PeerConnection::send):
+        (WebCore::PeerConnection::addStream):
+        (WebCore::PeerConnection::removeStream):
+        (WebCore::PeerConnection::close):
+        (WebCore::PeerConnection::onNegotiationStarted):
+        (WebCore::PeerConnection::onNegotiationDone):
+        (WebCore::PeerConnection::streamAdded):
+        (WebCore::PeerConnection::streamRemoved):
+        (WebCore::PeerConnection::onMessage):
+        (WebCore::PeerConnection::onSignalingMessage):
+        (WebCore::PeerConnection::toPeerConnection):
+        (WebCore::PeerConnection::scriptExecutionContext):
+        (WebCore::PeerConnection::eventTargetData):
+        (WebCore::PeerConnection::ensureEventTargetData):
+        (WebCore::PeerConnection::postMessageEvent):
+        (WebCore::PeerConnection::postSignalingEvent):
+        (WebCore::PeerConnection::postStreamAddedEvent):
+        (WebCore::PeerConnection::postStreamRemovedEvent):
+        (WebCore::PeerConnection::postSimpleEvent):
+        (WebCore::PeerConnection::postStartNegotiationTask):
+        (WebCore::PeerConnection::dispatchMessageEvent):
+        (WebCore::PeerConnection::dispatchSignalingEvent):
+        (WebCore::PeerConnection::dispatchStreamEvent):
+        (WebCore::PeerConnection::dispatchSimpleEvent):
+        (WebCore::PeerConnection::dispatchStartNegotiationTask):
+        * p2p/PeerConnection.h: Added.
+        (WebCore::PeerConnection::readyState):
+        (WebCore::PeerConnection::refEventTarget):
+        (WebCore::PeerConnection::derefEventTarget):
+        * p2p/PeerConnection.idl: Added.
+        * p2p/SignalingCallback.h: Copied from Source/WebCore/page/MediaStreamClient.h.
+        (WebCore::SignalingCallback::~SignalingCallback):
+        * p2p/SignalingCallback.idl: Added.
+        * page/DOMWindow.idl:
+        * page/MediaStreamClient.h:
+        * page/MediaStreamController.cpp:
+        (WebCore::MediaStreamController::MediaStreamController):
+        (WebCore::MediaStreamController::unregisterFrameController):
+        (WebCore::MediaStreamController::onSignalingMessage):
+        (WebCore::MediaStreamController::frameToPagePeerConnectionId):
+        (WebCore::MediaStreamController::processSignalingMessage):
+        (WebCore::MediaStreamController::message):
+        (WebCore::MediaStreamController::onMessage):
+        (WebCore::MediaStreamController::addStream):
+        (WebCore::MediaStreamController::onAddStream):
+        (WebCore::MediaStreamController::removeStream):
+        (WebCore::MediaStreamController::onRemoveStream):
+        (WebCore::MediaStreamController::newPeerConnection):
+        (WebCore::MediaStreamController::closePeerConnection):
+        (WebCore::MediaStreamController::startNegotiation):
+        (WebCore::MediaStreamController::onNegotiationStarted):
+        (WebCore::MediaStreamController::onNegotiationDone):
+        * page/MediaStreamController.h:
+        * page/MediaStreamFrameController.cpp:
+        (WebCore::MediaStreamFrameController::Request::isSignalingRequest):
+        (WebCore::MediaStreamFrameController::createPeerConnection):
+        (WebCore::MediaStreamFrameController::newPeerConnection):
+        (WebCore::MediaStreamFrameController::closePeerConnection):
+        (WebCore::MediaStreamFrameController::startNegotiation):
+        (WebCore::MediaStreamFrameController::processSignalingMessage):
+        (WebCore::MediaStreamFrameController::message):
+        (WebCore::MediaStreamFrameController::addStream):
+        (WebCore::MediaStreamFrameController::removeStream):
+        (WebCore::MediaStreamFrameController::onMessage):
+        (WebCore::MediaStreamFrameController::onAddStream):
+        (WebCore::MediaStreamFrameController::onRemoveStream):
+        (WebCore::MediaStreamFrameController::onSignalingMessage):
+        (WebCore::MediaStreamFrameController::onNegotiationStarted):
+        (WebCore::MediaStreamFrameController::onNegotiationDone):
+        * page/MediaStreamFrameController.h:
+        (WebCore::MediaStreamFrameController::ClientBase::isPeerConnection):
+        (WebCore::MediaStreamFrameController::PeerConnectionClient::PeerConnectionClient):
+        (WebCore::MediaStreamFrameController::PeerConnectionClient::~PeerConnectionClient):
+        (WebCore::MediaStreamFrameController::PeerConnectionClient::isPeerConnection):
+
+2011-08-03  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Web Inspector: Remove InspectorFrontendHost load/saveSessionSetting
+        https://bugs.webkit.org/show_bug.cgi?id=65582
+
+        Reviewed by Pavel Feldman.
+
+        Remove stale code. WebInspector.settings uses localStorage and
+        handles the "debuggerEnabled" state. So remove the only remaining
+        usage of load/saveSessionSetting.
+
+        * inspector/InspectorFrontendClient.h:
+        * inspector/InspectorFrontendHost.cpp:
+        * inspector/InspectorFrontendHost.h:
+        * inspector/InspectorFrontendHost.idl:
+        * inspector/front-end/InspectorFrontendHostStub.js:
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._debuggerWasDisabled):
+
+2011-08-03  Adam Barth  <abarth@webkit.org>
+
+        Crash in DocumentWriter::endIfNotLoadingMainResource
+        https://bugs.webkit.org/show_bug.cgi?id=65581
+
+        Reviewed by Nate Chapin.
+
+        This function is poorly designed because isLoadingMainResource is a
+        poor proxy for determing whether to flush/finish the parser.  Really,
+        we should change how loads complete to match the model in HTML5, but
+        that's pretty tricky.  In the meantime, this null check fixes the
+        crash.
+
+        I'm sure there's another bug on file about this crash, but we've never
+        been able to reproduce it.  Thanks to Berend-Jan Wever for the test
+        case!
+
+        Test: fast/loader/reload-zero-byte-plugin.html
+
+        * loader/DocumentWriter.cpp:
+        (WebCore::DocumentWriter::endIfNotLoadingMainResource):
+
+2011-08-03  Anders Carlsson  <andersca@apple.com>
+
+        WebCore images backing CG patterns should be released on the main thread
+        https://bugs.webkit.org/show_bug.cgi?id=65630
+
+        Reviewed by Sam Weinig.
+
+        * platform/graphics/cg/PatternCG.cpp:
+        (WebCore::patternReleaseOnMainThreadCallback):
+        Deref the image.
+
+        (WebCore::patternReleaseCallback):
+        Call callOnMainThread.
+
+2011-08-03  Luke Macpherson   <macpherson@chromium.org>
+
+        Use appropriate macro for CSSPropertyImageRendering.
+        https://bugs.webkit.org/show_bug.cgi?id=65594
+
+        Reviewed by Simon Fraser.
+
+        No new tests / trivial code cleanup only.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use HANDLE_INHERIT_AND_INITIAL_AND_PRIMITIVE macro.
+
+2011-08-03  Dan Bernstein  <mitz@apple.com>
+
+        FontCache::getFontData() does not set the familyIndex to cAllFamiliesScanned if the last font is a custom font
+        https://bugs.webkit.org/show_bug.cgi?id=65597
+
+        Reviewed by Simon Fraser.
+
+        No test added because behavior is unchanged, but this saves a call to getFontData().
+
+        * platform/graphics/FontCache.cpp:
+        (WebCore::FontCache::getFontData): Eliminated early return inside the loop, allowing execution
+        to continue and familyIndex to be set.
+
+2011-08-03  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Add RenderedPosition
+        https://bugs.webkit.org/show_bug.cgi?id=65221
+
+        Reviewed by Hajime Morita.
+
+        Add the skeleton for RenderedPosition and use it in rootBoxForLine.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * editing/EditingAllInOne.cpp:
+        * editing/RenderedPosition.cpp: Added.
+        (WebCore::RenderedPosition::RenderedPosition):
+        * editing/RenderedPosition.h: Added.
+        (WebCore::RenderedPosition::isNull):
+        (WebCore::RenderedPosition::rootBox):
+        (WebCore::RenderedPosition::RenderedPosition):
+        * editing/visible_units.cpp:
+        (WebCore::startPositionForLine):
+        (WebCore::endPositionForLine):
+        (WebCore::logicalStartPositionForLine):
+        (WebCore::logicalEndPositionForLine):
+
+2011-08-03  Roland Steiner  <rolandsteiner@chromium.org>
+
+        [V8] V8CSSRuleCustom.cpp: not all enum values are listed in switch statement
+        https://bugs.webkit.org/show_bug.cgi?id=65598
+
+        Reviewed by Dimitri Glazkov.
+
+        Added UNKNOWN_RULE to the switch statement.
+
+        No new tests. (No semantic change)
+
+        * bindings/v8/custom/V8CSSRuleCustom.cpp:
+        (WebCore::toV8):
+
+2011-08-03  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: [Timeline] Hover on paint events and see rect outline around that area.
+        https://bugs.webkit.org/show_bug.cgi?id=65510
+
+        Reviewed by Yury Semikhatsky.
+
+        * WebCore.exp.in:
+        * WebCore.order:
+        * inspector/DOMNodeHighlighter.cpp:
+        (WebCore::DOMNodeHighlighter::drawRectHighlight):
+        * inspector/DOMNodeHighlighter.h:
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::drawHighlight):
+        * inspector/InspectorController.h:
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::highlightRect):
+        (WebCore::InspectorDOMAgent::hideHighlight):
+        (WebCore::InspectorDOMAgent::drawHighlight):
+        * inspector/InspectorDOMAgent.h:
+        * inspector/front-end/ResourcesPanel.js:
+        (WebInspector.FrameTreeElement.prototype.onselect):
+        (WebInspector.FrameTreeElement.prototype.set hovered):
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel):
+        (WebInspector.TimelinePanel.prototype._mouseOut):
+        (WebInspector.TimelinePanel.prototype._mouseMove):
+        (WebInspector.TimelinePanel.prototype._highlightRect):
+        (WebInspector.TimelinePanel.prototype._hideRectHighlight):
+        * inspector/front-end/inspector.js:
+        (WebInspector.highlightDOMNode):
+
+2011-08-03  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: make text in popover selectable + make popover re-appear faster.
+        https://bugs.webkit.org/show_bug.cgi?id=65603
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/Popover.js:
+        (WebInspector.PopoverHelper.prototype.setTimeout):
+        (WebInspector.PopoverHelper.prototype._mouseMove):
+        (WebInspector.PopoverHelper.prototype._handleMouseAction):
+        * inspector/front-end/popover.css:
+        (.popover .content):
+
+2011-08-03  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Console scroll position should be saved when switching panels.
+        https://bugs.webkit.org/show_bug.cgi?id=65607
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._formatAsArrayEntry):
+        (WebInspector.ConsoleView.prototype.get scrollLeft):
+        (WebInspector.ConsoleView.prototype.set scrollLeft):
+        (WebInspector.ConsoleView.prototype.get scrollTop):
+        (WebInspector.ConsoleView.prototype.set scrollTop):
+        * inspector/front-end/Drawer.js:
+        (WebInspector.Drawer.prototype.show):
+        (WebInspector.Drawer.prototype._endStatusBarDragging):
+        (WebInspector.Drawer.prototype.get scrollLeft):
+        (WebInspector.Drawer.prototype.set scrollLeft):
+        (WebInspector.Drawer.prototype.get scrollTop):
+        (WebInspector.Drawer.prototype.set scrollTop):
+
+2011-08-03  Philippe Normand  <pnormand@igalia.com>
+
+        libsoup-CRITICAL **: soup_message_io_pause: assertion `io != NULL' failed
+        https://bugs.webkit.org/show_bug.cgi?id=64263
+
+        Reviewed by Martin Robinson.
+
+        Avoid any operation on not yet started messages and completed messages.
+
+        * platform/network/ResourceHandleInternal.h:
+        (WebCore::ResourceHandleInternal::ResourceHandleInternal):
+        * platform/network/soup/ResourceHandleSoup.cpp:
+        (WebCore::finishedCallback):
+        (WebCore::startHTTPRequest):
+        (WebCore::ResourceHandle::platformSetDefersLoading):
+
+2011-08-03  Jeremy Moskovich  <jeremy@chromium.org>
+
+        [Chromium] Fix OOP font loading to work on 10.6.6 and above.
+        https://bugs.webkit.org/show_bug.cgi?id=65543
+
+        In 10.6.6 the function used to get the unique ID for an NSFont in the 
+        renderer was changed so it fails in the sandbox (it now tries to access
+        the on-disk font file). In order to work around this, we get the font
+        ID from the browser process.
+
+        To speed things up, we introduce 2 levels of caching in WebKit. A font
+        name cache where we can perform a quick lookup without the need for the
+        font id and a font id cache which we can only lookup in after getting
+        the unique ID from the browser process.
+
+        Reviewed by Kenneth Russell.
+
+        No new tests since this is not readily testable.
+
+        * platform/chromium/PlatformBridge.h:
+        * platform/graphics/chromium/CrossProcessFontLoading.h:
+        * platform/graphics/chromium/CrossProcessFontLoading.mm:
+        (WebCore::MemoryActivatedFont::create):
+        (WebCore::MemoryActivatedFont::MemoryActivatedFont):
+        (WebCore::MemoryActivatedFont::~MemoryActivatedFont):
+
+2011-08-03  Hayato Ito  <hayato@chromium.org>
+
+        Make EventDispatchMediator RefCounted.
+        https://bugs.webkit.org/show_bug.cgi?id=65529
+
+        Reviewed by Hajime Morita.
+
+        Make EventDispatchMediator RefCounted so that it can be enqueued into a
+        ScopedEventQueue and called later.
+        A necessary change for ScopedEventQueue should be addressed in another patch.
+
+        This is a minor update of r92256, which failed on chromium win builds.
+
+        No changes to functionality so no new tests.
+
+        * dom/Event.cpp:
+        (WebCore::EventDispatchMediator::create):
+        * dom/Event.h:
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+        * dom/EventDispatcher.h:
+        * dom/KeyboardEvent.cpp:
+        (WebCore::KeyboardEventDispatchMediator::create):
+        * dom/KeyboardEvent.h:
+        * dom/MouseEvent.cpp:
+        (WebCore::MouseEventDispatchMediator::create):
+        * dom/MouseEvent.h:
+        * dom/Node.cpp:
+        (WebCore::Node::dispatchEvent):
+        (WebCore::Node::dispatchKeyEvent):
+        (WebCore::Node::dispatchMouseEvent):
+        (WebCore::Node::dispatchWheelEvent):
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEventDispatchMediator::create):
+        * dom/WheelEvent.h:
+
+2011-08-03  Pavel Feldman  <pfeldman@chromium.org>
+
+        Web Inspector: remove Node parameter from the InspectorClient::highlight
+        https://bugs.webkit.org/show_bug.cgi?id=65549
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InspectorClient.h:
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::highlight):
+        * loader/EmptyClients.h:
+        (WebCore::EmptyInspectorClient::highlight):
+
+2011-08-03  Antti Koivisto  <antti@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65599
+        Image loads should trigger didFirstVisuallyNonEmptyLayout more easily
+
+        Reviewed by Dan Bernstein.
+
+        Tweak the heuristic pixel count so logo-sized images trigger didFirstVisuallyNonEmptyLayout.
+
+        * page/FrameView.h:
+        (WebCore::FrameView::incrementVisuallyNonEmptyPixelCount):
+
+2011-08-03  Takashi Toyoshima  <toyoshim@chromium.org>
+
+        WebSocket: Could not handle zero length text frame.
+        https://bugs.webkit.org/show_bug.cgi?id=65592
+
+        Reviewed by Kent Tamura.
+
+        Test: http/tests/websocket/tests/hybi/zero-length-text.html
+
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::processFrame):
+
+2011-08-02  Pratik Solanki  <psolanki@apple.com>
+
+        Crash in ResourceResponse::platformCompare() with USE(CFNETWORK)
+        https://bugs.webkit.org/show_bug.cgi?id=65584
+
+        Reviewed by David Kilzer.
+
+        * platform/network/cf/ResourceResponseCFNet.cpp:
+        (WebCore::ResourceResponse::platformCompare): Don't call CFEqual with 0 as an argument.
+
+2011-08-02  Takashi Toyoshima  <toyoshim@chromium.org>
+
+        WebSocket: Should be closed by receiving invalid continuation frame.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65527
+
+        Reviewed by Kent Tamura.
+
+        Test: http/tests/websocket/tests/hybi/invalid-continuation.html
+
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::processFrame):
+
+2011-08-02  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92256.
+        http://trac.webkit.org/changeset/92256
+        https://bugs.webkit.org/show_bug.cgi?id=65593
+
+        Causing tons of crashes on the chromium win bots (Requested by
+        jamesr on #webkit).
+
+        * dom/Event.cpp:
+        * dom/Event.h:
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+        * dom/EventDispatcher.h:
+        * dom/KeyboardEvent.cpp:
+        * dom/KeyboardEvent.h:
+        * dom/MouseEvent.cpp:
+        * dom/MouseEvent.h:
+        * dom/Node.cpp:
+        (WebCore::Node::dispatchEvent):
+        (WebCore::Node::dispatchKeyEvent):
+        (WebCore::Node::dispatchMouseEvent):
+        (WebCore::Node::dispatchWheelEvent):
+        * dom/WheelEvent.cpp:
+        * dom/WheelEvent.h:
+
+2011-08-02  Hayato Ito  <hayato@chromium.org>
+
+        Make EventDispatchMediator RefCounted.
+        https://bugs.webkit.org/show_bug.cgi?id=65529
+
+        Reviewed by Dimitri Glazkov.
+
+        Make EventDispatchMediator RefCounted so that it can be enqueued into a
+        ScopedEventQueue and called later.
+        A necessary change for ScopedEventQueue should be addressed in another patch.
+
+        No changes to functionality so no new tests.
+
+        * dom/Event.cpp:
+        (WebCore::EventDispatchMediator::create):
+        * dom/Event.h:
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+        * dom/EventDispatcher.h:
+        * dom/KeyboardEvent.cpp:
+        (WebCore::KeyboardEventDispatchMediator::create):
+        * dom/KeyboardEvent.h:
+        * dom/MouseEvent.cpp:
+        (WebCore::MouseEventDispatchMediator::create):
+        * dom/MouseEvent.h:
+        * dom/Node.cpp:
+        (WebCore::Node::dispatchEvent):
+        (WebCore::Node::dispatchKeyEvent):
+        (WebCore::Node::dispatchMouseEvent):
+        (WebCore::Node::dispatchWheelEvent):
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEventDispatchMediator::create):
+        * dom/WheelEvent.h:
+
+2011-08-02  David Reveman  <reveman@chromium.org>
+
+        [Chromium] Use edge-distance method for layer anti-aliasing.
+        https://bugs.webkit.org/show_bug.cgi?id=64942
+
+        Reviewed by James Robinson.
+
+        Use an edge distance based method instead of the current linear
+        filtering method for producing anti-aliased edges on 3D transformed
+        layers. This removes the outer border handling from TilingData as
+        it's no longer needed for anti-aliasing.
+
+        Tests: platform/chromium/compositing/tiny-layer-rotated.html (existing)
+               platform/chromium/compositing/huge-layer-rotated.html (existing)
+               compositing/images/content-image-change.html (existing)
+               TilingDataTest in webkit_unit_tests
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::screenMatrix):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::setDrawViewportRect):
+        (WebCore::LayerRendererChromium::tilerProgramAA):
+        (WebCore::LayerRendererChromium::tilerProgramSwizzleAA):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        (WebCore::LayerRendererChromium::windowMatrix):
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::setTileSize):
+        (WebCore::LayerTilerChromium::tileLayerRect):
+        (WebCore::LayerTilerChromium::invalidateRect):
+        (WebCore::LayerTilerChromium::prepareToUpdate):
+        (WebCore::LayerTilerChromium::updateRect):
+        (WebCore::LayerTilerChromium::draw):
+        (WebCore::LayerTilerChromium::growLayerToContain):
+        (WebCore::LayerTilerChromium::drawTiles):
+        * platform/graphics/chromium/LayerTilerChromium.h:
+        * platform/graphics/chromium/ShaderChromium.cpp:
+        (WebCore::VertexShaderTile::VertexShaderTile):
+        (WebCore::VertexShaderTile::init):
+        (WebCore::VertexShaderTile::getShaderString):
+        (WebCore::FragmentTexAlphaAABinding::FragmentTexAlphaAABinding):
+        (WebCore::FragmentTexAlphaAABinding::init):
+        (WebCore::FragmentShaderRGBATexAlphaAA::getShaderString):
+        (WebCore::FragmentShaderRGBATexSwizzleAlphaAA::getShaderString):
+        * platform/graphics/chromium/ShaderChromium.h:
+        (WebCore::VertexShaderTile::vertexTexTransformLocation):
+        (WebCore::FragmentTexAlphaAABinding::alphaLocation):
+        (WebCore::FragmentTexAlphaAABinding::samplerLocation):
+        (WebCore::FragmentTexAlphaAABinding::fragmentTexTransformLocation):
+        (WebCore::FragmentTexAlphaAABinding::edgeLocation):
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::TiledLayerChromium::TiledLayerChromium):
+        (WebCore::TiledLayerChromium::updateTileSizeAndTilingOption):
+        (WebCore::TiledLayerChromium::createTilerIfNeeded):
+        (WebCore::TiledLayerChromium::setIsMask):
+        * platform/graphics/chromium/TiledLayerChromium.h:
+        * platform/graphics/gpu/TilingData.cpp:
+        (WebCore::computeNumTiles):
+        (WebCore::TilingData::tileXIndexFromSrcCoord):
+        (WebCore::TilingData::tileYIndexFromSrcCoord):
+        (WebCore::TilingData::tileSizeX):
+        (WebCore::TilingData::tileSizeY):
+        (WebCore::TilingData::intersectDrawQuad):
+        (WebCore::TilingData::textureOffset):
+        * platform/graphics/gpu/TilingData.h:
+
+2011-08-01  David Levin  <levin@chromium.org>
+
+        Add asserts to RefCounted to make sure ref/deref happens on the right thread.
+        https://bugs.webkit.org/show_bug.cgi?id=31639
+
+        Reviewed by Dmitry Titov.
+
+        No new functionality exposed so no new tests. (The change is basically adding
+        more testing.)
+
+        * ForwardingHeaders/wtf/ThreadRestrictionVerifier.h: Added.
+        * loader/icon/IconDatabase.cpp:
+        (WebCore::IconDatabase::defaultIcon): Set the mutex which does the guarding of the variable.
+        (WebCore::IconDatabase::setIconDataForIconURL): Ditto.
+        (WebCore::IconDatabase::getOrCreateIconRecord): Ditto.
+        (WebCore::IconDatabase::readFromDatabase): Ditto.
+
+2011-08-02  Luke Macpherson   <macpherson@chromium.org>
+
+        Clean up value clampling in CSSStyleSelector and CSSPrimitiveValue.
+        https://bugs.webkit.org/show_bug.cgi?id=65441
+
+        Reviewed by Simon Fraser.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValue.h:
+        (WebCore::CSSPrimitiveValue::getFloatValue):
+        Implement in terms of the new templated getValue().
+        (WebCore::CSSPrimitiveValue::getIntValue):
+        Implement in terms of the new templated getValue().
+        (WebCore::CSSPrimitiveValue::getValue):
+        Templated getValue that works for all numeric types.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use getValue<short> instead of rolling-your-own clamp to short.
+
+2011-08-02  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        RenderObject::computeRectForRepaint and clippedOverflowRectForRepaint should be const
+        https://bugs.webkit.org/show_bug.cgi?id=65494
+
+        Reviewed by Darin Adler.
+
+        No new tests, const-ness change only.
+
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::absoluteClippedOverflowRect):
+        (WebCore::RenderObject::computeAbsoluteRepaintRect):
+        Made those 2 const as they call a const method now.
+
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::clippedOverflowRectForRepaint): Use a const RenderObject* for iterating as
+        this is const.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::rectWithOutlineForRepaint):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::clippedOverflowRectForRepaint):
+        (WebCore::RenderBox::computeRectForRepaint):
+        * rendering/RenderBox.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::clippedOverflowRectForRepaint):
+        (WebCore::RenderInline::rectWithOutlineForRepaint):
+        (WebCore::RenderInline::computeRectForRepaint):
+        * rendering/RenderInline.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::rectWithOutlineForRepaint):
+        (WebCore::RenderObject::clippedOverflowRectForRepaint):
+        (WebCore::RenderObject::computeRectForRepaint):
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::clippedOverflowRectForRepaint):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::clippedOverflowRectForRepaint):
+        (WebCore::RenderTableCell::computeRectForRepaint):
+        * rendering/RenderTableCell.h:
+        * rendering/RenderTableCol.cpp:
+        (WebCore::RenderTableCol::clippedOverflowRectForRepaint):
+        * rendering/RenderTableCol.h:
+        * rendering/RenderTableRow.cpp:
+        (WebCore::RenderTableRow::clippedOverflowRectForRepaint):
+        * rendering/RenderTableRow.h:
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::clippedOverflowRectForRepaint):
+        * rendering/RenderText.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::computeRectForRepaint):
+        * rendering/RenderView.h:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        (WebCore::RenderSVGForeignObject::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGForeignObject::computeRectForRepaint):
+        * rendering/svg/RenderSVGForeignObject.h:
+        * rendering/svg/RenderSVGGradientStop.h:
+        (WebCore::RenderSVGGradientStop::clippedOverflowRectForRepaint):
+        * rendering/svg/RenderSVGHiddenContainer.h:
+        (WebCore::RenderSVGHiddenContainer::clippedOverflowRectForRepaint):
+        * rendering/svg/RenderSVGInline.cpp:
+        (WebCore::RenderSVGInline::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGInline::computeRectForRepaint):
+        * rendering/svg/RenderSVGInline.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGModelObject::computeRectForRepaint):
+        * rendering/svg/RenderSVGModelObject.h:
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGRoot::computeRectForRepaint):
+        * rendering/svg/RenderSVGRoot.h:
+        * rendering/svg/RenderSVGText.cpp:
+        (WebCore::RenderSVGText::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGText::computeRectForRepaint):
+        * rendering/svg/RenderSVGText.h:
+        * rendering/svg/SVGRenderSupport.cpp:
+        (WebCore::SVGRenderSupport::clippedOverflowRectForRepaint):
+        (WebCore::SVGRenderSupport::computeRectForRepaint):
+        * rendering/svg/SVGRenderSupport.h:
+        Updated the following method's signature to use a const object.
+
+2011-08-02  Jeffrey Pfau  <jpfau@apple.com>
+
+        Add namespace prefix support in XML tokenizer
+        https://bugs.webkit.org/show_bug.cgi?id=65578
+
+        Reviewed by Adam Barth.
+
+        This also changes markup debug printing to print to stderr instead of stdout
+
+        * xml/parser/MarkupTokenBase.h:
+        (WebCore::MarkupTokenBase::printString):
+        * xml/parser/XMLToken.h:
+        (WebCore::XMLToken::XMLDeclarationData::XMLDeclarationData):
+        (WebCore::XMLToken::clear):
+        (WebCore::XMLToken::appendToName):
+        (WebCore::XMLToken::name):
+        (WebCore::XMLToken::target):
+        (WebCore::XMLToken::data):
+        (WebCore::XMLToken::prefix):
+        (WebCore::XMLToken::xmlDeclarationData):
+        (WebCore::XMLToken::endPrefix):
+        (WebCore::XMLToken::hasPrefix):
+        (WebCore::XMLToken::endAttributePrefix):
+        (WebCore::XMLToken::attributeHasPrefix):
+        (WebCore::XMLToken::printAttrs):
+        (WebCore::XMLToken::print):
+        * xml/parser/XMLTokenizer.cpp:
+        (WebCore::XMLTokenizer::nextToken):
+
+2011-08-02  Zhenyao Mo  <zmo@google.com>
+
+        Unreviewed, rolling out r92238.
+        http://trac.webkit.org/changeset/92238
+        https://bugs.webkit.org/show_bug.cgi?id=65555
+
+        fail fast/events/scrollbar-double-click.html on Mac
+
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.h:
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.mm:
+        * platform/chromium/ScrollbarThemeChromiumMac.h:
+        * platform/chromium/ScrollbarThemeChromiumMac.mm:
+        (WebCore::ScrollbarThemeChromiumMac::registerScrollbar):
+        (WebCore::ScrollbarThemeChromiumMac::setNewPainterForScrollbar):
+        (WebCore::toScrollbarPainterKnobStyle):
+        (WebCore::ScrollbarThemeChromiumMac::paint):
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from History.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65572
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/History.idl:
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from WebKitAnimationList.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65571
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/WebKitAnimationList.idl:
+
+2011-08-02  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Decouple layer visibility calculations from render surfaces / computed draw transforms
+        https://bugs.webkit.org/show_bug.cgi?id=58840
+
+        Reviewed by Kenneth Russell.
+
+        This decouples the layer visibility related calculations from the LayerChromium and CCLayerImpl trees.  This is
+        done by making LayerRendererChromium's "calculate the world" function (renamed
+        calculateDrawTransformsAndVisibility()) a templated, free function that can operate on either LayerChromium +
+        RenderSurfaceChromium pairs or on CCLayerImpl + CCRenderSurface pairs and invoking it twice, once before
+        painting and once before drawing.  Before painting, these calculations are used to determine which layers are
+        potentially visible and should be painted, which depends on the calculated opacity, render surface bounds, and
+        draw transforms.  Before drawing, these calculations are used to figure out everything needed to draw.
+
+        RenderSurfaceChromium is now used just for visibility calculations when painting.  CCRenderSurfaceChromium is
+        responsible for actually drawing the render surfaces.
+
+        This does mean that in the current implementation the second calculations are redundant, but in the future this
+        won't be the case since the pre-draw time calculations might be influenced by animations or gestures.  I've
+        added some traces to try to monitor if this math is a significant amount of the per-frame computation.  Note
+        that layer sorting only happens on the CCLayerImpl tree and the layer sort algorithm is the most expensive part
+        of the calculations currently.
+
+        This removes all of the weak back/forward pointers between LayerChromium and CCLayerImpls, the trees are now
+        truly decoupled.
+
+        Covered by compositing/ tests.
+
+        * WebCore.gypi:
+        * platform/graphics/chromium/CanvasLayerChromium.cpp:
+        (WebCore::CanvasLayerChromium::createCCLayerImpl):
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::LayerChromium):
+        (WebCore::LayerChromium::~LayerChromium):
+        (WebCore::LayerChromium::createCCLayerImpl):
+        (WebCore::LayerChromium::createRenderSurface):
+        (WebCore::LayerChromium::descendantsDrawsContent):
+        * platform/graphics/chromium/LayerChromium.h:
+        (WebCore::LayerChromium::setUsesLayerScissor):
+        (WebCore::LayerChromium::usesLayerScissor):
+        (WebCore::LayerChromium::clearRenderSurface):
+        (WebCore::LayerChromium::renderSurface):
+        (WebCore::LayerChromium::drawOpacity):
+        (WebCore::LayerChromium::setDrawOpacity):
+        (WebCore::LayerChromium::scissorRect):
+        (WebCore::LayerChromium::setScissorRect):
+        (WebCore::LayerChromium::targetRenderSurface):
+        (WebCore::LayerChromium::setTargetRenderSurface):
+        (WebCore::LayerChromium::drawTransform):
+        (WebCore::LayerChromium::setDrawTransform):
+        (WebCore::LayerChromium::drawableContentRect):
+        (WebCore::LayerChromium::setDrawableContentRect):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::updateLayers):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::paintLayerContents):
+        (WebCore::LayerRendererChromium::drawLayersInternal):
+        (WebCore::LayerRendererChromium::updateCompositorResources):
+        (WebCore::LayerRendererChromium::setCompositeOffscreen):
+        (WebCore::LayerRendererChromium::getOffscreenLayerTexture):
+        (WebCore::LayerRendererChromium::useRenderSurface):
+        (WebCore::LayerRendererChromium::drawLayer):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        (WebCore::LayerRendererChromium::renderSurfaceProgram):
+        (WebCore::LayerRendererChromium::renderSurfaceMaskProgram):
+        (WebCore::LayerRendererChromium::dumpRenderSurfaces):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        * platform/graphics/chromium/PluginLayerChromium.cpp:
+        (WebCore::PluginLayerChromium::createCCLayerImpl):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::RenderSurfaceChromium):
+        (WebCore::RenderSurfaceChromium::~RenderSurfaceChromium):
+        * platform/graphics/chromium/RenderSurfaceChromium.h:
+        (WebCore::RenderSurfaceChromium::clearLayerList):
+        (WebCore::RenderSurfaceChromium::layerList):
+        (WebCore::RenderSurfaceChromium::setMaskLayer):
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::TiledLayerChromium::createCCLayerImpl):
+        (WebCore::TiledLayerChromium::tilingTransform):
+        * platform/graphics/chromium/TreeSynchronizer.cpp:
+        (WebCore::TreeSynchronizer::synchronizeTreeRecursive):
+        * platform/graphics/chromium/VideoLayerChromium.cpp:
+        (WebCore::VideoLayerChromium::createCCLayerImpl):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
+        (WebCore::CCCanvasLayerImpl::CCCanvasLayerImpl):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
+        (WebCore::CCCanvasLayerImpl::create):
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        (WebCore::CCLayerImpl::CCLayerImpl):
+        (WebCore::CCLayerImpl::~CCLayerImpl):
+        (WebCore::CCLayerImpl::createRenderSurface):
+        (WebCore::CCLayerImpl::bindContentsTexture):
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        (WebCore::CCLayerImpl::create):
+        (WebCore::CCLayerImpl::renderSurface):
+        (WebCore::CCLayerImpl::targetRenderSurface):
+        (WebCore::CCLayerImpl::setTargetRenderSurface):
+        * platform/graphics/chromium/cc/CCLayerSorter.cpp:
+        (WebCore::CCLayerSorter::createGraphNodes):
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
+        (WebCore::CCPluginLayerImpl::CCPluginLayerImpl):
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
+        (WebCore::CCPluginLayerImpl::create):
+        * platform/graphics/chromium/cc/CCRenderSurface.cpp: Copied from Source/WebCore/platform/graphics/chromium/RenderSurfaceChromium.cpp.
+        (WebCore::CCRenderSurface::CCRenderSurface):
+        (WebCore::CCRenderSurface::~CCRenderSurface):
+        (WebCore::CCRenderSurface::cleanupResources):
+        (WebCore::CCRenderSurface::layerRenderer):
+        (WebCore::CCRenderSurface::drawableContentRect):
+        (WebCore::CCRenderSurface::prepareContentsTexture):
+        (WebCore::CCRenderSurface::releaseContentsTexture):
+        (WebCore::CCRenderSurface::drawSurface):
+        (WebCore::CCRenderSurface::draw):
+        (WebCore::CCRenderSurface::name):
+        (WebCore::writeIndent):
+        (WebCore::CCRenderSurface::dumpSurface):
+        (WebCore::CCRenderSurface::owningLayerId):
+        * platform/graphics/chromium/cc/CCRenderSurface.h: Copied from Source/WebCore/platform/graphics/chromium/RenderSurfaceChromium.h.
+        (WebCore::CCRenderSurface::contentRectCenter):
+        (WebCore::CCRenderSurface::drawOpacity):
+        (WebCore::CCRenderSurface::setDrawOpacity):
+        (WebCore::CCRenderSurface::setDrawTransform):
+        (WebCore::CCRenderSurface::drawTransform):
+        (WebCore::CCRenderSurface::setReplicaDrawTransform):
+        (WebCore::CCRenderSurface::replicaDrawTransform):
+        (WebCore::CCRenderSurface::setOriginTransform):
+        (WebCore::CCRenderSurface::originTransform):
+        (WebCore::CCRenderSurface::setScissorRect):
+        (WebCore::CCRenderSurface::scissorRect):
+        (WebCore::CCRenderSurface::setContentRect):
+        (WebCore::CCRenderSurface::contentRect):
+        (WebCore::CCRenderSurface::setSkipsDraw):
+        (WebCore::CCRenderSurface::skipsDraw):
+        (WebCore::CCRenderSurface::clearLayerList):
+        (WebCore::CCRenderSurface::layerList):
+        (WebCore::CCRenderSurface::setMaskLayer):
+        (WebCore::CCRenderSurface::contentsTexture):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
+        (WebCore::CCTiledLayerImpl::CCTiledLayerImpl):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
+        (WebCore::CCTiledLayerImpl::create):
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
+        (WebCore::CCVideoLayerImpl::CCVideoLayerImpl):
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
+        (WebCore::CCVideoLayerImpl::create):
+
+2011-08-02  Luke Macpherson   <macpherson@chromium.org>
+
+        Implement CSSPropertyWebkitTextCombine, CSSPropertyWebkitTextEmphasisPosition and CSSPropertyWebkitTextEmphasisStyle in CSSStyleApplyProperty.
+        https://bugs.webkit.org/show_bug.cgi?id=65517
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests. Just refactoring and moving code around.
+
+        * css/CSSStyleApplyProperty.cpp:
+        Added class ApplyPropertyTextEmphasisStyle to handle the special TextEmphasisStyle logic.
+        (WebCore::ApplyPropertyTextEmphasisStyle::applyInheritValue):
+        (WebCore::ApplyPropertyTextEmphasisStyle::applyInitialValue):
+        (WebCore::ApplyPropertyTextEmphasisStyle::applyValue):
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        Added initializations for CSSPropertyWebkitTextCombine, CSSPropertyWebkitTextEmphasisPosition, CSSPropertyWebkitTextEmphasisStyle.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Remove existing implementations.
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from SpeechInputResultList.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65570
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass
+
+        * page/SpeechInputResultList.idl:
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from EventSource.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65568
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/EventSource.idl:
+
+2011-08-02  Gavin Peters  <gavinp@chromium.org>
+
+        fail earlier to track down null CachedScript execution
+        https://bugs.webkit.org/show_bug.cgi?id=65563
+
+        Over in http://code.google.com/p/chromium/issues/detail?id=75604 I can't reproduce the problem.  Careful reading of the code hasn't led me
+        to an obvious cause either.  This patch should cause failure earlier, and lead to better stacks.  I'll watch Chrome Canary's crash
+        uploads carefully, and remove this CRASH() (and fix the underlying problem) once I understand it.
+
+        Reviewed by Alexey Proskuryakov.
+
+        No new tests, as my goal here is to get telemetry on a bug that I cannot reproduce.
+
+        * dom/ScriptRunner.cpp:
+        (WebCore::ScriptRunner::queueScriptForExecution):
+
+2011-08-02  Sailesh Agrawal  <sail@chromium.org>
+
+        Chromium: Update forked ScrollbarThemeChromiumMac.mm
+        https://bugs.webkit.org/show_bug.cgi?id=65555
+
+        Merge recent changes to ScrollbarThemeMac.mm to ScrollbarThemeChromiumMac.mm.
+
+        Reviewed by James Robinson.
+
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.h:
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.mm:
+        (wkScrollbarPainterSetEnabled):
+        * platform/chromium/ScrollbarThemeChromiumMac.h:
+        (WebCore::ScrollbarThemeChromiumMac::maxOverlapBetweenPages):
+        * platform/chromium/ScrollbarThemeChromiumMac.mm:
+        (WebCore::ScrollbarThemeChromiumMac::registerScrollbar):
+        (WebCore::ScrollbarThemeChromiumMac::setNewPainterForScrollbar):
+        (WebCore::toScrollbarPainterKnobStyle):
+        (WebCore::ScrollbarThemeChromiumMac::updateScrollbarOverlayStyle):
+        (WebCore::ScrollbarThemeChromiumMac::updateEnabledState):
+        (WebCore::ScrollbarThemeChromiumMac::paint):
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from SVG IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65337
+
+        Reviewed by Nikolas Zimmermann.
+
+        No new tests, all existing tests pass.
+
+        * svg/ElementTimeControl.idl:
+        * svg/SVGAnimationElement.idl:
+        * svg/SVGDocument.idl:
+        * svg/SVGElementInstance.idl:
+        * svg/SVGElementInstanceList.idl:
+        * svg/SVGException.idl:
+        * svg/SVGFEDropShadowElement.idl:
+        * svg/SVGFEGaussianBlurElement.idl:
+        * svg/SVGFEMorphologyElement.idl:
+        * svg/SVGFilterElement.idl:
+        * svg/SVGLocatable.idl:
+        * svg/SVGMarkerElement.idl:
+        * svg/SVGPathElement.idl:
+        * svg/SVGSVGElement.idl:
+        * svg/SVGStylable.idl:
+        * svg/SVGStyleElement.idl:
+        * svg/SVGTests.idl:
+        * svg/SVGTextContentElement.idl:
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from CSS IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65341
+
+        Reviewed by Adam Barth.
+
+        No new tests. All existing tests pass.
+
+        * css/CSSMediaRule.idl:
+        * css/CSSPrimitiveValue.idl:
+        * css/CSSRuleList.idl:
+        * css/CSSStyleDeclaration.idl:
+        * css/CSSStyleSheet.idl:
+        * css/CSSValueList.idl:
+        * css/MediaList.idl:
+        * css/MediaQueryList.idl:
+        * css/MediaQueryListListener.idl:
+        * css/StyleMedia.idl:
+        * css/StyleSheetList.idl:
+        * css/WebKitCSSKeyframesRule.idl:
+        * css/WebKitCSSMatrix.idl:
+
+2011-08-02  Robert Kroeger  <rjkroege@chromium.org>
+
+        [chromium] Layering violations in gesture recognizer
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        Reviewed by Adam Barth.
+
+        Divided the gesture recognizer up to correct a layering
+        violation by moving gesture implementation from it to
+        EventHandler::handleGestureEvent so that the gesture recognizer
+        could simply be an engine for generating gesture events from
+        touch events.
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        Added symbolic contstant for tick multiplier.
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        Removed construction of gesture recognizer.
+        (WebCore::EventHandler::handleGestureEvent):
+        Extended for new gesture events added in this patch.
+        (WebCore::EventHandler::handleTouchEvent):
+        Removed call into gesture recognizer.
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        Removed code to reset gesture recognizer.
+        * platform/PlatformGestureEvent.h:
+        (WebCore::PlatformGestureEvent::PlatformGestureEvent):
+        (WebCore::PlatformGestureEvent::deltaX):
+        (WebCore::PlatformGestureEvent::deltaY):
+        (WebCore::PlatformGestureEvent::shiftKey):
+        (WebCore::PlatformGestureEvent::ctrlKey):
+        (WebCore::PlatformGestureEvent::altKey):
+        (WebCore::PlatformGestureEvent::metaKey):
+        Added additional gesture types and parameters.
+        * platform/PlatformGestureRecognizer.h:
+        * platform/chromium/FramelessScrollView.h:
+        Added support for displatching gesture and touch events.
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::constructClickGestureEvent):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGestures):
+        Removed all depedencies on EventHandler. Instead, create gesture
+        events from touch event stream.
+        (WebCore::InnerGestureRecognizer::constructScrollGesture):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
+        (WebCore::GestureRecognizerChromium::reset):
+        * platform/chromium/GestureRecognizerChromium.h:
+        * platform/chromium/PopupMenuChromium.cpp:
+        Added support to handle touch events and gesture events.
+        (WebCore::PopupContainer::handleTouchEvent):
+        (WebCore::PopupContainer::handleGestureEvent):
+        (WebCore::PopupListBox::handleTouchEvent):
+        (WebCore::PopupListBox::handleGestureEvent):
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+        Ignores the newly added gesture event types.
+
+2011-08-01  Michael Saboff  <msaboff@apple.com>
+
+        Virtual copying of FastMalloc allocated memory causes madvise MADV_FREE_REUSABLE errors
+        https://bugs.webkit.org/show_bug.cgi?id=65502
+
+        Reviewed by Anders Carlsson.
+
+        Change the vm_copy in PurgeableBuffer::create to be a memcpy.  The
+        vm_copy causes the process to have additional references to the same
+        memory region.  These additional reference caused madvise(MADV_FREE_REUSABLE)
+        to fail when it encountered such pages.
+
+        No tests added this is a resource defect and not a functional issue.
+
+        * platform/mac/PurgeableBufferMac.cpp:
+        (WebCore::PurgeableBuffer::create):
+
+2011-08-02  Stephen White  <senorblanco@chromium.org>
+
+        [Chromium] Remove an unnecessary readback during accelerated 
+        canvas-to-canvas draws.
+        https://bugs.webkit.org/show_bug.cgi?id=65560
+
+        Reviewed by James Robinson.
+
+        No new tests.  (Printing has few tests, sadly.)
+
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::draw):
+        Revert most of the changes to this file from
+        http://trac.webkit.org/changeset/91870, except for the call which makes
+        the source context current, so that the readPixels() still works.
+
+
+2011-08-02  Filip Pizlo  <fpizlo@apple.com>
+
+        JSC GC is far too conservative about growing the heap size, particularly
+        on desktop platforms
+        https://bugs.webkit.org/show_bug.cgi?id=65438
+
+        Reviewed by Oliver Hunt.
+
+        No change in behavior, thus no new tests.
+        
+        Pass the LargeHeap hint to JSGlobalData when creating the JSC runtime
+        instance corresponding to non-worker JS code.
+
+        * bindings/js/JSDOMWindowBase.cpp:
+        (WebCore::JSDOMWindowBase::commonJSGlobalData):
+
+2011-08-02  Van Lam  <vanlam@google.com>
+
+        --webkit-visual-word: ctrl-arrow is not able to reach the boundary of line
+        https://bugs.webkit.org/show_bug.cgi?id=61346
+
+        Reviewed by Ryosuke Niwa.
+
+        When collecintg word boundaries in a box, explicitly check if the box
+        is at the end of line (so it should contain the end-of-line position)
+        and collect the end-of-line position.
+
+        * editing/visible_units.cpp:
+        (WebCore::isBoxVisuallyLastInLine):
+        (WebCore::appendPositionAtLogicalEndOfLine):
+        (WebCore::collectWordBreaksInBoxInsideBlockWithSameDirectionality):
+        (WebCore::collectWordBreaksInBoxInsideBlockWithDifferntDirectionality):
+
+2011-08-02  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Should save scroll positions for network panel Response and Preview tabs.
+        https://bugs.webkit.org/show_bug.cgi?id=65557
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkItemView.js:
+        (WebInspector.ResourceContentView.prototype.get innerView):
+        (WebInspector.ResourceContentView.prototype.set innerView):
+        (WebInspector.ResourceContentView.prototype.hide):
+        * inspector/front-end/ResourcePreviewView.js:
+        (WebInspector.ResourcePreviewView.prototype.contentLoaded):
+        * inspector/front-end/ResourceResponseView.js:
+        (WebInspector.ResourceResponseView.prototype.contentLoaded):
+
+2011-08-02  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Remove initator column for JSC, fix network resource initiator tests.
+        https://bugs.webkit.org/show_bug.cgi?id=65534
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._createTable):
+        (WebInspector.NetworkLogView.prototype.switchToDetailedView):
+        (WebInspector.NetworkLogView.prototype.switchToBriefView):
+        (WebInspector.NetworkLogView.prototype._toggleGridMode):
+        (WebInspector.NetworkLogView.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkDataGridNode.prototype.createCells):
+        (WebInspector.NetworkDataGridNode.prototype.refreshResource):
+        * inspector/front-end/Settings.js:
+
+2011-08-02  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: SourceFrame should store saved scroll positions in View.
+        https://bugs.webkit.org/show_bug.cgi?id=65472
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ResourcesPanel.js:
+        (WebInspector.FrameResourceTreeElement.prototype._recreateSourceView):
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._sourceFileChanged):
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype.show):
+        (WebInspector.SourceFrame.prototype.hide):
+        (WebInspector.SourceFrame.prototype.get scrollLeft):
+        (WebInspector.SourceFrame.prototype.set scrollLeft):
+        (WebInspector.SourceFrame.prototype.get scrollTop):
+        (WebInspector.SourceFrame.prototype.set scrollTop):
+        * inspector/front-end/View.js:
+        (WebInspector.View.prototype._innerShow):
+        (WebInspector.View.prototype._innerHide):
+        (WebInspector.View.prototype.detach):
+        (WebInspector.View.prototype.storeScrollPositions):
+        (WebInspector.View.prototype.inheritScrollPositionsFromView):
+        (WebInspector.View.prototype.restoreScrollPositions):
+
+2011-08-02  Jeff Miller  <jeffm@apple.com>
+
+        Move WTF_USE_AVFOUNDATION from JavaScriptCore/wtf/platform.h to WebCore/config.h
+        https://bugs.webkit.org/show_bug.cgi?id=65552
+        
+        Since this is a WebCore feature, there's no need to define it in JavaScriptCore/wtf/platform.h.
+
+        Reviewed by Adam Roben.
+
+        No change in functionality, so new tests.
+
+        * config.h: Added WTF_USE_AVFOUNDATION.
+
+2011-08-02  Alexandru Chiculita  <achicu@adobe.com>
+
+        Split RenderBlock::layoutRunsAndFloats into multiple methods
+        https://bugs.webkit.org/show_bug.cgi?id=65376
+
+        Extracted layoutRunsAndFloatsInRange, linkToEndLineIfNeeded and repaintDirtyFloats methods and moved
+        most of the locals to LineLayoutState.
+
+        Reviewed by David Hyatt.
+
+        No new tests needed because it is just refactoring existing code.
+
+        * rendering/RenderBlock.h:
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::LineLayoutState::LineLayoutState):
+        (WebCore::LineLayoutState::endLineMatched):
+        (WebCore::LineLayoutState::setEndLineMatched):
+        (WebCore::LineLayoutState::checkForFloatsFromLastLine):
+        (WebCore::LineLayoutState::setCheckForFloatsFromLastLine):
+        (WebCore::LineLayoutState::lineInfo):
+        (WebCore::LineLayoutState::endLineLogicalTop):
+        (WebCore::LineLayoutState::setEndLineLogicalTop):
+        (WebCore::LineLayoutState::endLine):
+        (WebCore::LineLayoutState::setEndLine):
+        (WebCore::LineLayoutState::lastFloat):
+        (WebCore::LineLayoutState::setLastFloat):
+        (WebCore::LineLayoutState::floats):
+        (WebCore::LineLayoutState::floatIndex):
+        (WebCore::LineLayoutState::setFloatIndex):
+        (WebCore::RenderBlock::layoutRunsAndFloats):
+        (WebCore::RenderBlock::layoutRunsAndFloatsInRange):
+        (WebCore::RenderBlock::linkToEndLineIfNeeded):
+        (WebCore::RenderBlock::repaintDirtyFloats):
+        (WebCore::RenderBlock::layoutInlineChildren):
+        (WebCore::RenderBlock::determineStartPosition):
+        (WebCore::RenderBlock::determineEndPosition):
+        (WebCore::RenderBlock::matchedEndLine):
+
+2011-08-02  Nat Duca  <nduca@chromium.org>
+
+        [chromium] Remove resizeOnscreenContent from LRC. It can be derived.
+        https://bugs.webkit.org/show_bug.cgi?id=65519
+
+        Reviewed by James Robinson.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::setViewport):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+
+2011-08-02  Nico Weber  <thakis@chromium.org>
+
+        [chromium] Fix unresolved symbols error when linking to libwebkit.dylib
+        https://bugs.webkit.org/show_bug.cgi?id=65498
+
+        Reviewed by Dimitri Glazkov.
+
+        * WebCore.gyp/mac/adjust_visibility.sh:
+
+2011-08-02  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        hover then un-hover makes state change
+        https://bugs.webkit.org/show_bug.cgi?id=56401
+
+        Reviewed by David Hyatt.
+
+        When a 'before' pseudo-element is re-added, we should check whether the insertion point is an anonymous
+        block with inline children. If it is, then we should change the insertion point to the first child of the
+        anonymous block, otherwise the 'before' pseudo-element ends up in a different block. We choose the insertion
+        point to be the first child only if the anonymous block has children, otherwise the before element ends up
+        in a wrong block.
+
+        Tests: fast/dynamic/hover-before-position-after-style-change.html
+               fast/dynamic/hover-before-position-after-style-change2.html
+
+        * rendering/RenderObjectChildList.cpp:
+        (WebCore::RenderObjectChildList::updateBeforeAfterContent):
+
+2011-08-02  Andreas Kling  <kling@webkit.org>
+
+        [Qt] Simplify Path::translate() implementation.
+        https://bugs.webkit.org/show_bug.cgi?id=65540
+
+        Reviewed by Benjamin Poulain.
+
+        * platform/graphics/qt/PathQt.cpp:
+        (WebCore::Path::translate):
+
+2011-07-30  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: merge FormattedSourceFile into SourceFile.
+        https://bugs.webkit.org/show_bug.cgi?id=65411
+
+        Reviewed by Pavel Feldman.
+
+        Prepare for splitting SourceFile into RawSourceCode and UISourceCode:
+         * merge FormattedSourceFile into SourceFile
+         * rename SourceFile to RawSourceCode
+         * hide formatter worker lazy creation in ScriptFormatter
+
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel):
+        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation):
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation):
+        (WebInspector.DebuggerPresentationModel.prototype._addScript):
+        * inspector/front-end/ScriptFormatter.js:
+        (WebInspector.ScriptFormatter):
+        (WebInspector.ScriptFormatter.prototype._didFormatContent):
+        (WebInspector.ScriptFormatter.prototype.get _worker):
+        * inspector/front-end/SourceFile.js:
+        (WebInspector.RawSourceCode):
+        (WebInspector.RawSourceCode.prototype.setFormatted):
+        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded.didRequestContent):
+        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded):
+        (WebInspector.RawSourceCode.prototype._didRequestContent.didFormatContent):
+        (WebInspector.RawSourceCode.prototype._didRequestContent):
+        (WebInspector.RawSourceCode.prototype._invokeRequestContentCallbacks):
+
+2011-08-02  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions]Fix build after changeset 92106
+        https://bugs.webkit.org/show_bug.cgi?id=65539
+
+        Reviewed by Adam Roben.
+
+        No new tests since it is just a build fix.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-08-01  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] Console evaluations leading to resource loading cause errors.
+        https://bugs.webkit.org/show_bug.cgi?id=65466
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/network/network-initiator-from-console.html
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkDataGridNode.prototype._refreshInitiatorCell):
+
+2011-08-02  Alexander Pavlov  <apavlov@chromium.org>
+
+        Web Inspector: img[width=90] or align attributes shouldnt be shown above element.style block (as they have lower specificity)
+        https://bugs.webkit.org/show_bug.cgi?id=65514
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/StylesSidebarPane.js:
+
+2011-08-02  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        [EFL] Add fullscreen button to media control UI.
+        https://bugs.webkit.org/show_bug.cgi?id=64428
+
+        Implement paintMediaFullscreenButton and emit fullscreen signal.
+
+        Reviewed by Antonio Gomes.
+
+        * platform/efl/RenderThemeEfl.cpp:
+        (WebCore::RenderThemeEfl::edjeGroupFromFormType):
+        (WebCore::RenderThemeEfl::emitMediaButtonSignal):
+        (WebCore::RenderThemeEfl::paintMediaFullscreenButton):
+        * platform/efl/RenderThemeEfl.h:
+
+2011-08-01  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: [Extensions API] webInspector.inspectedPage.reload() is broken
+        https://bugs.webkit.org/show_bug.cgi?id=65476
+
+        - fixed webInspector.inspectedWindow.reload(), brought tests back.
+        - removed redundant setting of user agent in FrameLoader::loadResourceSynchronously()
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: http/tests/inspector/extensions-useragent.html
+
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer.prototype._onReload):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadResourceSynchronously):
+
+2011-08-02  Pavel Feldman  <pfeldman@chromium.org>
+
+        Not reviewed: fixing inspector tests.
+
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect):
+
+2011-08-02  Pavel Feldman  <pfeldman@google.com>
+
+        Not reviewed: one line inspector style change.
+
+        * inspector/front-end/networkLogView.css:
+        (.network-error-row, .network-error-row .network-cell-subtitle):
+
+2011-08-02  Amruth Raj  <amruthraj@motorola.com>
+
+        Custom cursors cause the WebProcess to crash
+        https://bugs.webkit.org/show_bug.cgi?id=64802
+
+        Reviewed by Martin Robinson.
+
+        * WebCore.exp.in:
+
+2011-08-02  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: _normalizeEventTypes (via console's monitorEvents) doesnt handle all events like 'search' and other atypical ones.
+        https://bugs.webkit.org/show_bug.cgi?id=65468
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScriptSource.js:
+
+2011-08-02  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: 404/errors should get a RED visual treatment so easier to identify.
+        https://bugs.webkit.org/show_bug.cgi?id=65471
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkDataGridNode.prototype._refreshStatusCell):
+        * inspector/front-end/networkLogView.css:
+        (.network-error-cell):
+
+2011-08-02  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: arrow is a pain to click in console. Drive-by selection reset fix.
+        https://bugs.webkit.org/show_bug.cgi?id=65467
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._messagesClicked):
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement):
+        * inspector/front-end/inspector.css:
+        (.properties-tree li):
+        (.properties-tree li.parent::before):
+        * inspector/front-end/treeoutline.js:
+        (TreeElement.treeElementToggled):
+
+2011-08-01  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: button + "New style rule"
+        https://bugs.webkit.org/show_bug.cgi?id=65409
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/styles/styles-add-new-rule.html
+
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane):
+        (WebInspector.BlankStylePropertiesSection.prototype.editingSelectorCommitted):
+
+2011-08-01  Luke Macpherson   <macpherson@chromium.org>
+
+        Don't set m_fontDirty when setting zoom unless zoom has actually changed
+        https://bugs.webkit.org/show_bug.cgi?id=65092
+
+        Reviewed by Darin Adler.
+
+        No new tests as no functionality changed - this is an optimization that
+        should be logically equivalent to the current code.
+
+        The intent here is to avoid setting m_fontDirty unless the fornt information is actually dirty.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForDocument):
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use setZoom and setEffectiveZoom wrapper functions.
+        * css/CSSStyleSelector.h:
+        (WebCore::CSSStyleSelector::setZoom):
+        Wrapper for m_style->setZoom() that automatically updates m_fontDirty.
+        (WebCore::CSSStyleSelector::setEffectiveZoom):
+        Wrapper for m_style->setEffectiveZoom that automatically updates m_fontDirty.
+        * page/animation/AnimationBase.cpp:
+        (WebCore::AnimationBase::ensurePropertyMap):
+        Use 
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::setZoom):
+        Return true only if underlying values change.
+        (WebCore::InheritedFlags::setZoomWithoutReturnValue):
+        Return void to match function pointer type where required.
+        (WebCore::InheritedFlags::setEffectiveZoom):
+        Return true only if underlying values change.
+
+2011-08-01  Jean-luc Brouillet  <jeanluc@chromium.org>
+
+        Removing old source files in gyp files that slow build
+        https://bugs.webkit.org/show_bug.cgi?id=65503
+
+        Reviewed by Adam Barth.
+
+        A number of stale files are listed in the gyp files. These slow the
+        build on Visual Studio 2010. Removing them.
+
+        * WebCore.gypi:
+
+2011-08-01  Bradley Nelson  <bradnelson@chromium.org>
+
+        Shard webcore_remaining for msvs official builds
+
+        https://bugs.webkit.org/show_bug.cgi?id=65475
+
+        Reviewed by Darin Fisher.
+
+        webcore_remaining has consistently exceeded Visual Studio 2008's
+        capacity to link when link time code generation is turned on (full
+        release builds).  This has been dealt with the past by carving off
+        larger and larger pieces of webcore_remaining (ie webcore_html,
+        webcore_renderer etc).
+        A new option has been added to gyp to automate this sharding:
+        'msvs_shard': SHARD_COUNT,
+        Targets marked in this way will be built in several pieces
+        (target_0, target_1...).
+        Since the resulting project is less comprehensible in the IDE (and
+        since the linking limitation only afflicts official builds), this
+        option is only needed for those builds.
+        This patch shards webcore_remaining into 10 parts for official builds.
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-08-01  Alice Boxhall  <aboxhall@chromium.org>
+
+        WAI-ARIA textbox role should be AXTextArea for aria-multiline=true, AXTextField for aria-multiline=false
+        https://bugs.webkit.org/show_bug.cgi?id=65451
+
+        Reviewed by Chris Fleizach.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::determineAriaRoleAttribute):
+
+2011-08-01  srikumar bonda  <srikumar.b@gmail.com>
+
+        Use threadsafeCopy() API when using Database Directory path variable 
+        https://bugs.webkit.org/show_bug.cgi?id=65436
+
+        Reviewed by David Levin.
+
+        Use threadsafeCopy() API while using m_databaseDirectoryPath string variable
+        when the databaseGuard lock hasn't been taken in DatabaseTracker class. 
+        This is just a safety fix.
+
+        No changes to functionality so no new tests.
+
+        * storage/DatabaseTracker.cpp:
+        (WebCore::DatabaseTracker::trackerDatabasePath):
+        (WebCore::DatabaseTracker::deleteOrigin):
+
+2011-08-01  Michael Nordman  <michaeln@google.com>
+
+        [Chromium] WebSQLDatabase version handling is broken in multi-process browsers.
+        https://bugs.webkit.org/show_bug.cgi?id=65486
+
+        The WebCore::AbstractDatabase class maintains a global in-memory map of
+        the version numbers associated with open database files, but that map is
+        not reliable in a multi-process system like Chrome. So instead of relying
+        on the cached values in that map, we read the value from the database (and
+        update the cached value) where possible. There are two edge cases where that's
+        not possible because the scriptable interface requires synchronous access
+        to the version: the .version attribute getter and the .openDatabase() method.
+        In those cases, we have no choice but to use the potentially stale cached value.
+
+        Reviewed by Darin Fisher.
+
+        No new tests. Existing layout tests cover the version handling functionality.
+
+        * storage/AbstractDatabase.cpp:
+        (WebCore::AbstractDatabase::version):
+        (WebCore::AbstractDatabase::performOpenAndVerify):
+        (WebCore::AbstractDatabase::getVersionFromDatabase):
+        (WebCore::AbstractDatabase::setVersionInDatabase):
+        (WebCore::AbstractDatabase::setExpectedVersion):
+        (WebCore::AbstractDatabase::getCachedVersion):
+        (WebCore::AbstractDatabase::setCachedVersion):
+        (WebCore::AbstractDatabase::getActualVersionForTransaction):
+        * storage/AbstractDatabase.h:
+        (WebCore::AbstractDatabase::expectedVersion):
+        * storage/ChangeVersionWrapper.cpp:
+        (WebCore::ChangeVersionWrapper::handleCommitFailedAfterPostflight):
+        * storage/ChangeVersionWrapper.h:
+        * storage/Database.cpp:
+        (WebCore::Database::openDatabase):
+        * storage/DatabaseSync.cpp:
+        (WebCore::DatabaseSync::openDatabaseSync):
+        (WebCore::DatabaseSync::changeVersion):
+        * storage/SQLTransaction.cpp:
+        (WebCore::SQLTransaction::SQLTransaction):
+        (WebCore::SQLTransaction::executeSQL):
+        (WebCore::SQLTransaction::openTransactionAndPreflight):
+        (WebCore::SQLTransaction::runCurrentStatement):
+        (WebCore::SQLTransaction::postflightAndCommit):
+        * storage/SQLTransaction.h:
+        * storage/SQLTransactionSync.cpp:
+        (WebCore::SQLTransactionSync::SQLTransactionSync):
+        (WebCore::SQLTransactionSync::executeSQL):
+        (WebCore::SQLTransactionSync::begin):
+        * storage/SQLTransactionSync.h:
+
+2011-08-01  Tim Horton  <timothy_horton@apple.com>
+
+        Severe shadow repaint issues with SVGText elements
+        https://bugs.webkit.org/show_bug.cgi?id=63648
+        <rdar://problem/7632269>
+
+        Reviewed by Darin Adler.
+
+        Make SVG elements which inherit from RenderSVGBlock take text-shadow
+        overflow into account when determining whether or not they should draw
+
+        Test: svg/custom/repaint-shadow.svg
+
+        * rendering/RenderBox.h:
+        (WebCore::RenderBox::visualOverflowRect):
+        * rendering/svg/RenderSVGBlock.cpp:
+        (WebCore::RenderSVGBlock::visualOverflowRect):
+        * rendering/svg/RenderSVGBlock.h:
+
+2011-08-01  Zhenyao Mo  <zmo@google.com>
+
+        Unreviewed, rolling out r92022.
+        http://trac.webkit.org/changeset/92022
+        https://bugs.webkit.org/show_bug.cgi?id=65203
+
+        try to see if this is causing a bunch of browser tests failues
+        on win bots - will recommit if not
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::init):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::initializeForGDI):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::~TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::~TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::hdc):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::~TransparencyAwareUniscribePainter):
+        (WebCore::drawGlyphsWin):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        (WebCore::PlatformContextSkia::isNativeFontRenderingAllowed):
+        * platform/graphics/skia/PlatformContextSkia.h:
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::windowsCanHandleDrawTextShadow):
+        (WebCore::windowsCanHandleTextDrawing):
+        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-08-01  Scott Graham  <scottmg@chromium.org>
+
+        REGRESSION (r39725?): Resources removed from document can not be freed
+        until the document is deleted
+        https://bugs.webkit.org/show_bug.cgi?id=61006
+
+        Reviewed by Antti Koivisto.
+
+        Upon completing a load start a Timer to iterate through
+        CachedResourceLoader's m_documentResources map to check for any items
+        that have only one reference (thus being the reference in the map
+        itself). The map should really be weak, but because the
+        CachedResourceHandle achieves bookkeeping work in addition to
+        reference counting, this is a simpler and more localized way to free
+        the used memory while maintaining the other behaviour (when
+        CachedResource is used as proxy).
+
+        With this patch the testcase at
+        https://bugs.webkit.org/attachment.cgi?id=93850 should no longer
+        consume 400MB of ram on load. Test added for crash discovered in
+        previous revision, but no tests for memory usage.
+
+        Test: http/tests/inspector/network/disabled-cache-crash.html
+
+        * WebCore.exp.in:
+        * loader/cache/CachedResource.h:
+        (WebCore::CachedResource::hasOneHandle):
+        * loader/cache/CachedResourceLoader.cpp:
+        (WebCore::CachedResourceLoader::CachedResourceLoader):
+        (WebCore::CachedResourceLoader::loadDone):
+        (WebCore::CachedResourceLoader::garbageCollectDocumentResourcesTimerFired):
+        * loader/cache/CachedResourceLoader.h:
+        * testing/Internals.cpp:
+        (WebCore::Internals::disableMemoryCache):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-08-01  Jochen Eisinger  <jochen@chromium.org>
+
+        Never override the policy URL on form submissions.
+        https://bugs.webkit.org/show_bug.cgi?id=61809
+
+        Reviewed by Adam Barth.
+
+        Tests: http/tests/security/cookies/third-party-cookie-blocking-main-frame.html
+               http/tests/security/cookies/third-party-cookie-blocking-user-action.html
+               http/tests/security/cookies/third-party-cookie-blocking.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadURL):
+        (WebCore::FrameLoader::addExtraFieldsToSubresourceRequest):
+        (WebCore::FrameLoader::addExtraFieldsToMainResourceRequest):
+        (WebCore::FrameLoader::addExtraFieldsToRequest):
+        (WebCore::FrameLoader::loadPostRequest):
+        (WebCore::FrameLoader::loadDifferentDocumentItem):
+        * loader/FrameLoader.h:
+
+
+2011-08-01  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Update comment added in r92139 per Darin's suggestion.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForElement):
+
+2011-08-01  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Search field in designMode causes a crash
+        https://bugs.webkit.org/show_bug.cgi?id=65362
+
+        Reviewed by Dimitri Glazkov.
+
+        The crashed was caused by editing code inadvertently deleting search and cancel buttons in the design mode.
+        Fixed the bug by avoid inheriting user-modify property from the shadow host.
+
+        Test: editing/input/search-field-crash-in-designmode.html
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::isAtShadowBoundary): Moved.
+        (WebCore::CSSStyleSelector::styleForElement): Overrides -webkit-user-modify by the initial value after m_style
+        inherited the values from m_parentStyle but before applying matched rules.
+        * dom/Node.cpp:
+        (WebCore::Node::rendererIsEditable): Ignore page's editability inside a shadow DOM.
+
+2011-08-01  Marco Peereboom  <marco@peereboom.us>
+
+        [Soup] Set default max-conns to a more sane default value and fix comment 
+        https://bugs.webkit.org/show_bug.cgi?id=65335
+
+        Reviewed by Martin Robinson.
+
+        Rigged the xxxterm web browser and validated that the default values were set properly.
+
+        * platform/network/soup/ResourceHandleSoup.cpp:
+        (WebCore::ResourceHandle::defaultSession):
+
+2011-07-28  Abhishek Arya  <inferno@chromium.org>
+
+        Regression(82144): Crash in TrailingObjects::updateMidpointsForTrailingBoxes
+        https://bugs.webkit.org/show_bug.cgi?id=65137
+
+        Fix the looping condition to prevent trailingSpaceMidpoint from becoming negative.
+
+        Reviewed by Dave Hyatt.
+
+        Test: fast/block/update-midpoints-for-trailing-boxes-crash.html
+
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::TrailingObjects::updateMidpointsForTrailingBoxes):
+
+2011-08-01  Benjamin Poulain  <benjamin@webkit.org>
+
+        [Qt] OpenGLShims does not build on ARM
+        https://bugs.webkit.org/show_bug.cgi?id=65465
+
+        Reviewed by Noam Rosenthal.
+
+        Fix the build with OpenGL ES 2:
+        -lookupOpenGLFunctionAddress() was defined but not used for OpenGL ES.
+        -glBlitFramebuffer() and glRenderbufferStorageMultisample() are not part of the specification.
+        When those are available as platform extension, the extension has been added.
+        -GLchar is not defined on some platform. The patch adds the same typedef as the official definition
+        to avoid conflicts.
+
+        * platform/graphics/cairo/OpenGLShims.cpp:
+        (lookupOpenGLFunctionAddress):
+        (WebCore::initializeOpenGLShims):
+        * platform/graphics/cairo/OpenGLShims.h:
+
+2011-08-01  Yury Semikhatsky  <yurys@chromium.org>
+
+        Unreviewed. Trivial fix for inspector/debugger/debugger-completions-on-call-frame.html after r92122.
+
+        * inspector/front-end/ConsoleView.js:
+
+2011-08-01  Hayato Ito  <hayato@chromium.org>
+
+        Add support for getting an element in shadow root by its id into a window.internals object.
+        https://bugs.webkit.org/show_bug.cgi?id=64587
+
+        Reviewed by Hajime Morita.
+
+        Test: fast/dom/shadow/get-element-by-id-in-shadow-root.html
+
+        * WebCore.exp.in:
+        * testing/Internals.cpp:
+        (WebCore::Internals::getElementByIdInShadowRoot):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-15  Hayato Ito  <hayato@chromium.org>
+
+        Add support for retrieving an element in TreeScope by id to window.internals object.
+        https://bugs.webkit.org/show_bug.cgi?id=64587
+
+        Reviewed by Hajime Morita.
+
+        Test: fast/dom/shadow/get-element-by-id-in-shadow.html
+
+        * WebCore.exp.in:
+        * testing/Internals.cpp:
+        (WebCore::Internals::getElementByIdInTreeScope):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-08-01  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: typing an expression in an iframe leads to multiple "Unsafe JavaScript attempt to access frame..." errors
+        https://bugs.webkit.org/show_bug.cgi?id=65457
+
+        Console completions are now done using evaluation which returns a JSON object with all property names rather than a remote
+        object. Also Runtime.evaluate and Runtime.callFunctionOn commands were extended with an optional parameter that allows to
+        get result as JSON value.
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/console-cd-completions.html
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::evaluate):
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        ():
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::asBool):
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._completions.evaluated.getCompletions):
+        (WebInspector.ConsoleView.prototype._completions.evaluated):
+        (WebInspector.ConsoleView.prototype._completions.receivedPropertySet):
+        (WebInspector.ConsoleView.prototype._completions):
+        (WebInspector.ConsoleView.prototype.evalInInspectedWindow):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject):
+        (WebInspector.RemoteObject.prototype.callFunction):
+        (WebInspector.RemoteObject.prototype.callFunctionJSON):
+        * inspector/front-end/WatchExpressionsSidebarPane.js:
+        (WebInspector.WatchExpressionsSection.prototype.update):
+
+2011-08-01  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        BORDER attribute with the object tag, using percentage values not working.
+        https://bugs.webkit.org/show_bug.cgi?id=65176
+
+        Reviewed by Hajime Morita.
+
+        When border presentational attribute for object element has % in it, it should be parsed using HTML parser rules.
+
+        Test: fast/borders/border-width-percent.html
+
+        * html/HTMLElement.cpp:
+        (WebCore::HTMLElement::parseBorderWidthAttribute):
+        * html/HTMLElement.h:
+        * html/HTMLImageElement.cpp:
+        * html/HTMLObjectElement.cpp:
+        (WebCore::HTMLObjectElement::parseMappedAttribute):
+
+2011-08-01  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Receive URL and subprotocol in WebSocketChannel::connect()
+        https://bugs.webkit.org/show_bug.cgi?id=65367
+
+        Reviewed by Kent Tamura.
+
+        To implement multiple subprotocols support (bug 65247), WebSocket::connect() will need to validate
+        the value of subprotocols after constructing WebSocketChannel, because the result depends on which
+        WebSocket protocol is used, which is obtained from WebSocketChannel::useHixie76Protocol(). This
+        means the subprotocol value will not be available at the time of WebSocketChannel construction.
+
+        This change moves URL and subprotocol arguments in WebSocketChannel constructor to
+        WebSocketChannel::connect(), which allows WebSocket::connect() function to check the subprotocol
+        value before the actual connection is established.
+
+        Relocating URL argument is technically not necessary, but seemed legitimate in terms of functional
+        correspondence between WebSocket and WebSocketChannel (constructor versus connect()).
+
+        No change in behavior, thus no new tests.
+
+        * websockets/ThreadableWebSocketChannel.cpp:
+        Remove "url" and "protocol" arguments from constructor and add them in connect().
+        (WebCore::ThreadableWebSocketChannel::create):
+        * websockets/ThreadableWebSocketChannel.h:
+        * websockets/WebSocket.cpp:
+        (WebCore::WebSocket::connect):
+        * websockets/WebSocketChannel.cpp: Same as ThreadableWebSocketChannel.
+        (WebCore::WebSocketChannel::WebSocketChannel):
+        (WebCore::WebSocketChannel::connect):
+        InspectorInstrumentation::didCreateWebSocket() call was moved to connect() because it needs URL.
+        This does not change behavior, because connect() is guaranteed to be called immediately after
+        WebSocketChannel is constructed.
+        * websockets/WebSocketChannel.h:
+        (WebCore::WebSocketChannel::create):
+        * websockets/WorkerThreadableWebSocketChannel.cpp: Same as ThreadableWebSocketChannel.
+        (WebCore::WorkerThreadableWebSocketChannel::WorkerThreadableWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::connect):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::Peer):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::connect):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::mainThreadCreateWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::Bridge):
+        (WebCore::WorkerThreadableWebSocketChannel::mainThreadConnect):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::connect):
+        * websockets/WorkerThreadableWebSocketChannel.h:
+        (WebCore::WorkerThreadableWebSocketChannel::create):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::create):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::create):
+
+2011-08-01  Luke Macpherson   <macpherson@chromium.org>
+
+        Add iterator to CSSValueList
+        https://bugs.webkit.org/show_bug.cgi?id=65297
+
+        Reviewed by Darin Adler.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValue.h:
+        (WebCore::CSSPrimitiveValue::isLength):
+        Add shorthand to determine if this primitive value is a length.
+        * css/CSSStyleSelector.cpp:
+        Use CSSValueListIterator throughout.
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::applyPageSizeProperty):
+        (WebCore::CSSStyleSelector::createTransformOperations):
+        * css/CSSValueList.cpp:
+        (WebCore::CSSValueList::copy):
+        Use itemWithoutBoundsCheck() instead of item().
+        * css/CSSValueList.h:
+        Add CSSValueListIterator and CSSValueListInspector class definitions.
+        (WebCore::CSSValueList::item)
+        Provide inline definition of item.
+        (WebCore::CSSValueListIterator::CSSValueListIterator):
+        (WebCore::CSSValueListIterator::hasMore):
+        Return true if there are more values to consume, including the current value.
+        (WebCore::CSSValueListIterator::value):
+        Return the value at the current position.
+        (WebCore::CSSValueListIterator::next):
+        Move the iterator forward to the next item.
+        (WebCore::CSSValueListIterator::index):
+        Return the current position in the list.
+        (WebCore::CSSValueListInspector::item):
+        Return the item at a given index.
+        (WebCore::CSSValueListInspector::first):
+        Return the first item in the list.
+        (WebCore::CSSValueListInspector::second):
+        Return the second item in the list.
+        (WebCore::CSSValueListInspector::length):
+        Return the size of the underlying list.
+
+2011-08-01  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: group scripts by folder in the scripts selector.
+        https://bugs.webkit.org/show_bug.cgi?id=65321
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/debugger/scripts-sorting.html
+
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._sourceFileAdded.get if):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect.insertOrdered.optionCompare):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect.insertOrdered):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect):
+        (WebInspector.ScriptsPanel.prototype._folderAndDisplayNameForScriptURL):
+        (WebInspector.ScriptsPanel.prototype.reset):
+        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.suggestedFileName):
+
+2011-07-28  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: [protocol] methods where all parameters are optional should not require empty params object.
+        https://bugs.webkit.org/show_bug.cgi?id=65331
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/CodeGeneratorInspector.pm:
+        (generateBackendFunction):
+        (generateArgumentGetters):
+
+2011-08-01  Adam Barth  <abarth@webkit.org>
+
+        application/json MIME type shouldn't cause warnings in <script> tags
+        https://bugs.webkit.org/show_bug.cgi?id=65448
+
+        Reviewed by Pavel Feldman.
+
+        This patch stops the web inspector from logging a ton of spam warnings
+        when a web page uses a JSONP service (which points script tags at
+        application/json resources).
+
+        * inspector/front-end/inspector.js:
+        (WebInspector.reset):
+
+2011-08-01  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Rename SocketStreamHandleClient member functions
+        https://bugs.webkit.org/show_bug.cgi?id=65374
+
+        Reviewed by Kent Tamura.
+
+        Rename SocketStreamHandleClient member functions to avoid conflict of the names of
+        FileReaderLoaderClient functions.
+
+        No change in behavior, thus no new tests are added.
+
+        * platform/network/SocketStreamHandleClient.h:
+        (WebCore::SocketStreamHandleClient::didOpenSocketStream):
+        (WebCore::SocketStreamHandleClient::didCloseSocketStream):
+        (WebCore::SocketStreamHandleClient::didReceiveSocketStreamData):
+        (WebCore::SocketStreamHandleClient::didFailSocketStream):
+        * platform/network/brew/SocketStreamHandleBrew.cpp:
+        (WebCore::SocketStreamHandlePrivate::socketConnected):
+        (WebCore::SocketStreamHandlePrivate::socketReadyRead):
+        (WebCore::SocketStreamHandlePrivate::socketClosed):
+        (WebCore::SocketStreamHandlePrivate::socketError):
+        * platform/network/cf/SocketStreamHandleCFNet.cpp:
+        (WebCore::SocketStreamHandle::addCONNECTCredentials):
+        (WebCore::SocketStreamHandle::readStreamCallback):
+        (WebCore::SocketStreamHandle::writeStreamCallback):
+        (WebCore::SocketStreamHandle::reportErrorToClient):
+        (WebCore::SocketStreamHandle::platformClose):
+        * platform/network/qt/SocketStreamHandleQt.cpp:
+        (WebCore::SocketStreamHandlePrivate::socketConnected):
+        (WebCore::SocketStreamHandlePrivate::socketReadyRead):
+        (WebCore::SocketStreamHandlePrivate::socketClosedCallback):
+        (WebCore::SocketStreamHandlePrivate::socketErrorCallback):
+        * platform/network/soup/SocketStreamHandleSoup.cpp:
+        (WebCore::SocketStreamHandle::connected):
+        (WebCore::SocketStreamHandle::readBytes):
+        (WebCore::SocketStreamHandle::platformSend):
+        (WebCore::SocketStreamHandle::platformClose):
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::didOpenSocketStream):
+        (WebCore::WebSocketChannel::didCloseSocketStream):
+        (WebCore::WebSocketChannel::didReceiveSocketStreamData):
+        (WebCore::WebSocketChannel::didFailSocketStream):
+        (WebCore::WebSocketChannel::resumeTimerFired):
+        * websockets/WebSocketChannel.h:
+
+2011-07-31  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92094.
+        http://trac.webkit.org/changeset/92094
+        https://bugs.webkit.org/show_bug.cgi?id=65443
+
+        Triggered many asserts (Requested by abarth on #webkit).
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+
+2011-07-31  Dominic Cooney  <dominicc@chromium.org>
+
+        Event target set to null post event dispatch
+        https://bugs.webkit.org/show_bug.cgi?id=63934
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/events/event-target-reset.html
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent): Reset target to outermost
+        shadow host.
+
+2011-07-31  Sam Weinig  <sam@webkit.org>
+
+        REGRESSION: getBoundingClientRect() method of Range incorrectly returns null for collapsed Range
+        https://bugs.webkit.org/show_bug.cgi?id=65324
+
+        Reviewed by Ryosuke Niwa.
+
+        Update to more closely match the spec.
+
+        * dom/Range.cpp:
+        (WebCore::Range::getClientRects):
+        Return an empty ClientRectList instead of null when the range is empty.
+
+        (WebCore::Range::getBoundingClientRect):
+        Always return a ClientRect, even for an empty bounding rect.
+
+2011-07-29  Ryosuke Niwa  <rniwa@webkit.org>
+
+        [HTML5] Implement the selectionDirection property on input and textarea
+        https://bugs.webkit.org/show_bug.cgi?id=60403
+
+        Reviewed by Darin Adler.
+
+        Implements selectionDirection property as specified in HTML5 section 4.10.20:
+        http://www.whatwg.org/specs/web-apps/current-work/#textFieldSelection
+
+        selectionDirection is a property on input and textarea elements, which, on getting returns either "none",
+        "forward", or "backward" corresponding to the current selection direction, and on setting, modifies
+        the direction of the current selection. When selection doesn't exist or direction is unknown, "none"
+        is returned on getting. Setting the property value to neither of above values will result in setting "none".
+
+        This patch also adds the optional third argument, direction, to setSelectionRange.
+
+        Test: fast/forms/selection-direction.html
+              fast/forms/selection-wrongtype.html
+
+        * bindings/js/JSHTMLInputElementCustom.cpp:
+        (WebCore::JSHTMLInputElement::selectionDirection): Added.
+        (WebCore::JSHTMLInputElement::setSelectionDirection): Added.
+        (WebCore::JSHTMLInputElement::setSelectionRange): Processes the third argument.
+        * bindings/v8/custom/V8HTMLInputElementCustom.cpp:
+        (WebCore::V8HTMLInputElement::selectionDirectionAccessorGetter): Added.
+        (WebCore::V8HTMLInputElement::selectionDirectionAccessorSetter): Added.
+        (WebCore::V8HTMLInputElement::setSelectionRangeCallback): Processes the third argument.
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::updateFocusAppearance): Calls hasCachedSelection.
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::updateFocusAppearance): Ditto.
+        (WebCore::HTMLInputElement::setValue): Calls cacheSelection with SelectionHasNoDirection.
+        * html/HTMLTextAreaElement.idl: Added selectionDirection and the third argument to setSelectionRange.
+        * html/HTMLInputElement.idl: Ditto.
+        * html/HTMLTextFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::HTMLTextFormControlElement): Initializes
+        m_cachedSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::setSelectionStart): Calls setSelectionRange.
+        (WebCore::HTMLTextFormControlElement::setSelectionEnd): Ditto.
+        (WebCore::HTMLTextFormControlElement::setSelectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::select): Calls setSelectionRange with SelectionHasNoDirection.
+        (WebCore::HTMLTextFormControlElement::setSelectionRange): Added the version that takes direction
+        string as the third argument, which calls the version that takes two ints and TextFieldSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::selectionStart): Calls hasCachedSelection.
+        (WebCore::HTMLTextFormControlElement::selectionEnd): Ditto.
+        (WebCore::directionString): Added.
+        (WebCore::HTMLTextFormControlElement::selectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::computeSelectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::selection): Calls hasCachedSelection.
+        (WebCore::HTMLTextFormControlElement::restoreCachedSelection): Calls setSelectionRange.
+        (WebCore::HTMLTextFormControlElement::selectionChanged): Calls cacheSelection.
+        * html/HTMLTextFormControlElement.h:
+        (WebCore::HTMLTextFormControlElement::cacheSelection): Takes TextFieldSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::hasCachedSelection): Extracted from hasCachedSelectionStart;
+        cacheSelection is the only function that modifies m_cacheSelectionStart and m_cacheSelectionEnd
+        and none of its callers ever set one of them be -1 so they are always both -1 or both non-negative.
+        Thus, having two separate functions for m_cacheSelectionStart and m_cacheSelectionEnd was redundant.
+
+2011-07-31  Daniel Bates  <dbates@webkit.org>
+
+        [GTK] Remove unused variable coreChild in WebCore::getChildForTable()
+        https://bugs.webkit.org/show_bug.cgi?id=65427
+
+        This variable was unused when it was initially added in <http://trac.webkit.org/changeset/89660> (bug #62718)
+        and it is unused today. We should remove it. This will also resolve a compiler warning.
+
+        Reviewed by Xan Lopez.
+
+        * accessibility/gtk/AccessibilityObjectWrapperAtk.cpp:
+        (getChildForTable):
+
+2011-07-30  Daniel Bates  <dbates@webkit.org>
+
+        Fix the WinCairo Debug build after <http://trac.webkit.org/changeset/91914>
+        (https://bugs.webkit.org/show_bug.cgi?id=64744)
+
+        * WebCore.vcproj/WebCore.vcproj: Remove ContextShadowCairo.cpp from the build since this
+          file was deleted in <http://trac.webkit.org/changeset/91914>.
+
+2011-07-30  Daniel Bates  <dbates@webkit.org>
+
+        Fix the Chromium Linux Release Flexbot build after <http://trac.webkit.org/changeset/92004>
+        (https://bugs.webkit.org/show_bug.cgi?id=65342)
+
+        * rendering/RenderFlexibleBox.cpp:
+        (WebCore::RenderFlexibleBox::layoutBlock): Update the definition of RenderFlexibleBox::layoutBlock()
+        to be consistent with its declaration in RenderFlexibleBox.h; Add argument layoutPass of type BlockLayoutPass.
+
+2011-07-30  Adam Barth  <abarth@webkit.org>
+
+        Update run-bindings-tests results after
+        http://trac.webkit.org/changeset/92068
+
+        * bindings/scripts/test/JS/JSTestCallback.cpp:
+
+2011-07-30  Patrick Gansterer  <paroga@webkit.org>
+
+        Remove inclusion of MainThread.h from Threading.h
+        https://bugs.webkit.org/show_bug.cgi?id=65081
+
+        Reviewed by Darin Adler.
+
+        Add missing include statements for MainThread.
+
+        * bindings/js/DOMWrapperWorld.cpp:
+        * bindings/js/JSDOMWindowBase.cpp:
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateCallbackImplementation):
+        * bindings/v8/DOMDataStore.cpp:
+        * bindings/v8/DOMWrapperWorld.cpp:
+        * bindings/v8/V8Binding.cpp:
+        * bindings/v8/V8DOMMap.cpp:
+        * bindings/v8/V8DOMWrapper.h:
+        * dom/EventTarget.cpp:
+        * fileapi/LocalFileSystem.cpp:
+        * loader/CrossOriginPreflightResultCache.cpp:
+        * loader/ResourceLoadScheduler.cpp:
+        * loader/WorkerThreadableLoader.cpp:
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        * page/DOMWindow.cpp:
+        * page/History.cpp:
+        * page/SecurityOrigin.cpp:
+        * page/mac/EventHandlerMac.mm:
+        * platform/MIMETypeRegistry.cpp:
+        * platform/ThreadGlobalData.cpp:
+        * platform/ThreadTimers.cpp:
+        * platform/TreeShared.h:
+        * platform/audio/HRTFDatabaseLoader.cpp:
+        * platform/graphics/Font.cpp:
+        * platform/graphics/FontFallbackList.h:
+        * platform/graphics/FontFastPath.cpp:
+        * platform/graphics/Image.cpp:
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
+        * platform/graphics/ca/win/WKCACFViewLayerTreeHost.cpp:
+        * platform/graphics/cg/ImageBufferCG.cpp:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp:
+        * platform/mac/LocalizedStringsMac.mm:
+        * platform/mac/SharedBufferMac.mm:
+        * platform/network/BlobResourceHandle.cpp:
+        * platform/network/cf/DNSCFNet.cpp:
+        * platform/network/cf/LoaderRunLoopCF.cpp:
+        * platform/text/LocalizedNumberICU.cpp:
+        * platform/text/TextEncodingRegistry.cpp:
+        * platform/text/mac/LocalizedNumberMac.mm:
+        * platform/win/LocalizedStringsWin.cpp:
+        * storage/LocalStorageThread.cpp:
+        * storage/StorageAreaImpl.cpp:
+        * storage/StorageAreaSync.cpp:
+        * storage/StorageNamespaceImpl.cpp:
+        * storage/StorageSyncManager.cpp:
+        * webaudio/AsyncAudioDecoder.cpp:
+        * webaudio/AudioBufferSourceNode.cpp:
+        * webaudio/AudioContext.h
+        * webaudio/AudioContext.cpp:
+        * webaudio/AudioNode.cpp:
+        * webaudio/ConvolverNode.cpp:
+        * webaudio/OfflineAudioDestinationNode.cpp:
+        * webaudio/RealtimeAnalyser.cpp:
+        * webaudio/WaveShaperNode.cpp:
+        * websockets/WorkerThreadableWebSocketChannel.cpp:
+        * workers/WorkerMessagingProxy.cpp:
+
+2011-07-30  Enrica Casucci  <enrica@apple.com>
+
+        REGRESSION: culledInlineAbsoluteRects needs to translate a 0,0 point to absolute
+        coordinates so that the top left position is accurate.
+        https://bugs.webkit.org/show_bug.cgi?id=65419
+        <rdar://problem/9408862>
+
+        This patch fixes a regression introduced in r83075.
+        Make sure that culledInlineAbsoluteRects still does
+        a translation of a 0,0 point to absolute coordinates so that the top left position is
+        accurate.
+        This code path could not be tested via JavaScript. The patch
+        extends the Internals object to be able to test this case.
+
+        Reviewed by Dan Bernstein.
+
+        Test: fast/inline/skipped-whitespace-boundingBox.html
+
+        * WebCore.exp.in: Added some exports.
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::culledInlineAbsoluteRects):
+        * testing/Internals.cpp:
+        (WebCore::Internals::boundingBox):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-26  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: move location conversion functions to SourceFile.
+        https://bugs.webkit.org/show_bug.cgi?id=65185
+
+        Reviewed by Pavel Feldman.
+
+        Test: inspector/debugger/source-file.html
+
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation.didCreateSourceMapping):
+        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation):
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation.didCreateSourceMapping):
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation):
+        * inspector/front-end/SourceFile.js:
+        (WebInspector.SourceFile.prototype.rawLocationToUILocation):
+        (WebInspector.SourceFile.prototype.uiLocationToRawLocation):
+        (WebInspector.SourceFile.prototype._scriptForRawLocation):
+        (WebInspector.SourceFile.prototype.createSourceMappingIfNeeded):
+        (WebInspector.FormattedSourceFile.prototype.createSourceMappingIfNeeded):
+        (WebInspector.FormattedSourceFile.prototype._didRequestContent):
+
+2011-07-29  Rob Buis  <rbuis@rim.com>
+
+        URL references are completely broken in SVG
+        https://bugs.webkit.org/show_bug.cgi?id=63283
+
+        Reviewed by Nikolas Zimmermann.
+
+        Change SVGURIElement::getTarget to be more strict about iri resolving and make it serve as a central
+        place to resolve a iri to a SVGElement. The iri can be same-document or external, for now we only handle
+        the former, the latter will be handled in bug 65344.
+        Accept as same-document if the iri combined with the base uri equals the document url (ignoring
+        the fragment identifier). For convenience a method is added to lookup the element, if found.
+
+        Tests: svg/custom/external-paintserver-reference.svg
+               svg/custom/linking-base-external-reference.xhtml
+               svg/custom/uri-reference-handling.svg
+
+        * css/CSSCursorImageValue.cpp:
+        (WebCore::resourceReferencedByCursorElement):
+        (WebCore::CSSCursorImageValue::~CSSCursorImageValue):
+        (WebCore::CSSCursorImageValue::updateIfSVGCursorIsUsed):
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::getFontData):
+        * css/CSSFontSelector.h:
+        (WebCore::CSSFontSelector::document):
+        * css/SVGCSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applySVGProperty):
+        * rendering/svg/RenderSVGTextPath.cpp:
+        (WebCore::RenderSVGTextPath::layoutPath):
+        * rendering/svg/SVGResources.cpp:
+        (WebCore::targetReferenceFromResource):
+        (WebCore::paintingResourceFromSVGPaint):
+        * svg/SVGAltGlyphElement.cpp:
+        (WebCore::SVGAltGlyphElement::hasValidGlyphElements):
+        * svg/SVGFEImageElement.cpp:
+        (WebCore::SVGFEImageElement::requestImageResource):
+        (WebCore::SVGFEImageElement::build):
+        * svg/SVGGlyphRefElement.cpp:
+        (WebCore::SVGGlyphRefElement::hasValidGlyphElement):
+        * svg/SVGLinearGradientElement.cpp:
+        (WebCore::SVGLinearGradientElement::collectGradientAttributes):
+        * svg/SVGMPathElement.cpp:
+        (WebCore::SVGMPathElement::pathElement):
+        * svg/SVGPaint.cpp:
+        (WebCore::SVGPaint::matchesTargetURI):
+        * svg/SVGPatternElement.cpp:
+        (WebCore::SVGPatternElement::collectPatternAttributes):
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::collectGradientAttributes):
+        * svg/SVGTRefElement.cpp:
+        (WebCore::SVGTRefElement::updateReferencedText):
+        (WebCore::SVGTRefElement::svgAttributeChanged):
+        (WebCore::SVGTRefElement::buildPendingResource):
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::insertedIntoDocument):
+        * svg/SVGURIReference.cpp:
+        (WebCore::SVGURIReference::fragmentIdentifierFromIRIString):
+        (WebCore::SVGURIReference::targetElementFromIRIString):
+        * svg/SVGURIReference.h:
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::buildPendingResource):
+        (WebCore::SVGUseElement::hasCycleUseReferencing):
+        (WebCore::SVGUseElement::expandUseElementsInShadowTree):
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::SVGSMILElement::targetElement):
+
+2011-07-29  James Simonsen  <simonjam@chromium.org>
+
+        Remove zipcar.com site specific hack added in r87361
+        https://bugs.webkit.org/show_bug.cgi?id=65405
+
+        Reviewed by Adam Barth.
+
+        * html/HTMLScriptElement.cpp:
+        (WebCore::HTMLScriptElement::insertedIntoDocument):
+
+2011-07-29  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Reorder functions in LayerRendererChromium.cpp to make bug 58840 easier to review
+        https://bugs.webkit.org/show_bug.cgi?id=65354
+
+        Reviewed by Kenneth Russell.
+
+        This moves a few function definitions in LayerRendererChromium around to make the patch on bug 58840 easier to
+        review.  In that patch, updatePropertiesAndRenderSurfaces() becomes a templated free function instead of a
+        member function, so it has to be near the top of the .cpp.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::calculateVisibleRect):
+        (WebCore::isScaleOrTranslation):
+        (WebCore::LayerRendererChromium::updatePropertiesAndRenderSurfaces):
+        (WebCore::LayerRendererChromium::updateLayers):
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Work-in-progress on Adopt AVCF media back end on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65400
+        <rdar://problem/9083559>
+        
+        Prepare WebCore.vcproj to support AVCF media back end on Windows.
+
+        Reviewed by Darin Adler.
+
+        No changes to functionality so no new tests.
+
+        * WebCore.vcproj/WebCore.vcproj: Added MediaPlayerPrivateAVFoundation and MediaPlayerPrivateAVFoundationCF sources.
+        * WebCore.vcproj/WebCoreMediaQT.vsprops: Added additional include directories and dleay load DLLs for AVCF.
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.cpp: Added, just a stub for now.
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.h: Added, just a stub for now.
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Work-in-progress on Adopt AVCF media back end on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65400
+        <rdar://problem/9083559>
+        
+        Make MediaPlayerPrivateAVFoundation::setDelayCallbacks() const and make the ivars
+        it references mutable so other const member functions can call it.
+
+        Reviewed by Darin Adler.
+
+        No changes to functionality so no new tests.
+
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
+        (WebCore::MediaPlayerPrivateAVFoundation::setDelayCallbacks):
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.h:
+
+2011-07-29  Zhenyao Mo  <zmo@google.com>
+
+        Unreviewed, rolling out r92011.
+        http://trac.webkit.org/changeset/92011
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        break chromium win build
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        (WebCore::EventHandler::handleGestureEvent):
+        (WebCore::EventHandler::handleTouchEvent):
+        (WebCore::EventHandler::resetGestureRecognizer):
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        * platform/PlatformGestureEvent.h:
+        * platform/PlatformGestureRecognizer.h:
+        * platform/ScrollAnimatorWin.cpp:
+        * platform/chromium/FramelessScrollView.h:
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::dispatchSyntheticClick):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGesture):
+        (WebCore::InnerGestureRecognizer::scrollViaTouchMotion):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        * platform/chromium/GestureRecognizerChromium.h:
+        (WebCore::GestureRecognizerChromium::reset):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGesture):
+        * platform/chromium/PopupMenuChromium.cpp:
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+
+2011-07-29  Adrienne Walker  <enne@google.com>
+
+        [chromium] Only force slow scrolling for iframes under --force-compositing-mode
+        https://bugs.webkit.org/show_bug.cgi?id=65394
+
+        Reviewed by James Robinson.
+
+        The previous code introduced by r91591 made composited frames as well
+        as non-composited subframes go down the slow scrolling path.  Adjust
+        the check to use ownerElement to test for subframe and use
+        hasCompositedContent() which is a more correct test for compositing
+        than isEnclosedInCompositingLayer.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::useSlowRepaints):
+
+2011-07-29  Emil A Eklund  <eae@chromium.org>
+
+        -webkit-marquee with anonymous node causes segmentation fault in Node::document
+        https://bugs.webkit.org/show_bug.cgi?id=64693
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/css/webkit-marquee-anonymous-node-crash.html
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::scrollTo):
+        Add null check as renderer()->node() is null for anonymous nodes.
+
+2011-07-29  Mike Reed  <reed@google.com>
+
+        [skia] never draw with GDI, so that all text can be gpu-accelerated
+        https://bugs.webkit.org/show_bug.cgi?id=65203
+
+        Reviewed by Kenneth Russell.
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
+        (WebCore::drawGlyphsWin):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        * platform/graphics/skia/PlatformContextSkia.h:
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-07-29  Sam Weinig  <sam@webkit.org>
+
+        Move Region code from WebKit2 to WebCore
+        https://bugs.webkit.org/show_bug.cgi?id=65392
+
+        Reviewed by David Hyatt.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        Update project files.
+
+        * WebCore.exp.in:
+        Update exports.
+
+        * platform/graphics/Region.cpp: Copied from Source/WebKit2/Platform/Region.cpp.
+        * platform/graphics/Region.h: Copied from Source/WebKit2/Platform/Region.h.
+        Add files.
+
+2011-07-29  Robert Kroeger  <rjkroege@chromium.org>
+
+        [chromium] Layering violations in gesture recognizer
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        Reviewed by Adam Barth.
+
+        Divided the gesture recognizer up to correct a layering
+        violation by moving gesture implementation from it to
+        EventHandler::handleGestureEvent so that the gesture recognizer
+        could simply be an engine for generating gesture events from
+        touch events.
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        Added symbolic contstant for tick multiplier.
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        Removed construction of gesture recognizer.
+        (WebCore::EventHandler::handleGestureEvent):
+        Extended for new gesture events added in this patch.
+        (WebCore::EventHandler::handleTouchEvent):
+        Removed call into gesture recognizer.
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        Removed code to reset gesture recognizer.
+        * platform/PlatformGestureEvent.h:
+        (WebCore::PlatformGestureEvent::PlatformGestureEvent):
+        (WebCore::PlatformGestureEvent::deltaX):
+        (WebCore::PlatformGestureEvent::deltaY):
+        (WebCore::PlatformGestureEvent::shiftKey):
+        (WebCore::PlatformGestureEvent::ctrlKey):
+        (WebCore::PlatformGestureEvent::altKey):
+        (WebCore::PlatformGestureEvent::metaKey):
+        Added additional gesture types and parameters.
+        * platform/PlatformGestureRecognizer.h:
+        * platform/ScrollAnimatorWin.cpp:
+        (WebCore::ScrollAnimatorWin::handleGestureEvent):
+        Added missing method needed to fix the build on windows.
+        * platform/chromium/FramelessScrollView.h:
+        Added support for displatching gesture and touch events.
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::constructClickGestureEvent):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGestures):
+        Removed all depedencies on EventHandler. Instead, create gesture
+        events from touch event stream.
+        (WebCore::InnerGestureRecognizer::constructScrollGesture):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
+        (WebCore::GestureRecognizerChromium::reset):
+        * platform/chromium/GestureRecognizerChromium.h:
+        * platform/chromium/PopupMenuChromium.cpp:
+        Added support to handle touch events and gesture events.
+        (WebCore::PopupContainer::handleTouchEvent):
+        (WebCore::PopupContainer::handleGestureEvent):
+        (WebCore::PopupListBox::handleTouchEvent):
+        (WebCore::PopupListBox::handleGestureEvent):
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+        Ignores the newly added gesture event types.
+
+2011-07-29  Eric Carlson  <eric.carlson@apple.com>
+
+        Load delegate not consulted before loading some poster images
+        https://bugs.webkit.org/show_bug.cgi?id=65270
+
+        Reviewed by Joseph Pecoraro.
+
+        * html/HTMLVideoElement.cpp:
+        (WebCore::HTMLVideoElement::setDisplayMode): Don't ask a load delegate if it is OK to 
+            load an empty poster url.
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Re-sort one more file in the WebCore project with Visual Studio.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Re-sort the WebCore project with Visual Studio after recent changes that I assume were done by manually editing the XML.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-07-29  Dan Bernstein  <mitz@apple.com>
+
+        Added the regional indicator symbols to the set of codepoints that force use of the complex text code path.
+
+        Fixes <rdar://problem/9864578> Regional indicator symbols do not combine into national flags
+        https://bugs.webkit.org/show_bug.cgi?id=65380
+
+        Reviewed by Anders Carlsson.
+
+        Test: fast/text/regional-indicator-symobls.html
+
+        * platform/graphics/Font.cpp:
+        (WebCore::Font::codePath): Added handling of surrogate pairs, which returns Complex for characters in
+        the range U+1F1E6..U+1F1FF.
+
+2011-07-28  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65342
+
+        Add support for positioned floats being placed into a RenderBlock's FloatingObject list and for
+        correct propagation of those floating objects into descendants.
+
+        Reviewed by Sam Weinig.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::layoutBlock):
+        The positioned float layout algorithm is 2-pass. You lay out without the positioned objects, and then
+        once they have been placed, you lay out again and use that placement to determine the float positions.
+        layoutBlock now has an extra parameter to indicate which layout pass you are in.
+        
+        (WebCore::RenderBlock::addOverflowFromFloats):
+        Don't add overflow from positioned floats ever, since the positioning overflow function takes care of that
+        already.
+
+        (WebCore::RenderBlock::layoutBlockChild):
+        Include positioned floats in the lowestFloatLogicalBottom we look at so that overhang is computed properly.
+
+        (WebCore::RenderBlock::simplifiedLayout):
+        If layoutPositionedObjects indicates that a positioned float moved, then we can't do simplified layout. Bail
+        instead and do a full layout.
+
+        (WebCore::RenderBlock::positionedFloatsNeedRelayout):
+        Helper for layoutBlock in order to bypass the 2-pass model if we can detect that none of the positioned objects
+        will actually need to lay out again. This allows incremental layout to not always fault back to 2-pass as normal
+        flow content streams in.
+
+        (WebCore::RenderBlock::layoutPositionedObjects):
+        Modified to return a boolean indicating whether a positioned float got a layout. If so, we will lay out again
+        once our positioned objects are placed.
+
+        (WebCore::RenderBlock::insertFloatingObject):
+        insertFloatingObject can now handle positioned objects being inserted.
+
+        (WebCore::RenderBlock::positionNewFloats):
+        positionNewFloats doesn't attempt to position this new type of float. It only handles left/right floats.
+
+        (WebCore::RenderBlock::addPositionedFloats):
+        Helper to add in the floating objects for positioned floats. This is used instead of positionNewFloats and
+        just walks the positioned objects instead.
+
+        (WebCore::RenderBlock::clearFloats):
+        clearFloats now handles adding in positioned floats if the layout pass says they should be included.
+
+        (WebCore::RenderBlock::marginLogicalLeftForChild):
+        (WebCore::RenderBlock::marginLogicalRightForChild):
+        New helpers used by addPositionedFloats.
+    
+        (WebCore::RenderBlock::FloatingObjects::clear):
+        (WebCore::RenderBlock::FloatingObjects::increaseObjectsCount):
+        (WebCore::RenderBlock::FloatingObjects::decreaseObjectsCount):
+        Make sure the object count tracking handles positioned floats as well as left/right floats.
+    
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::logicalLeftForChild):
+        New helper used by addPositionedFloats.
+
+        (WebCore::RenderBlock::FloatingObject::FloatingObject):
+        Change the constructor to take the RenderStyle enum. This makes the construction simpler.
+
+        (WebCore::RenderBlock::hasPositionedFloats):
+        A bit tracks whether or not a block has positioned floats in its positioned objects list.
+
+        (WebCore::RenderBlock::hasOverhangingFloats):
+        Modified to include positioned floats.
+
+        (WebCore::RenderBlock::lowestFloatLogicalBottom):
+        This function excludes positioned floats by default, so that places that - for example - expand to
+        encompass their lowestFloatLogicalBottom won't accidentally expand to encompass positioned objects.
+
+        (WebCore::RenderBlock::lowestFloatLogicalBottomIncludingPositionedFloats):
+        A new function that includes positioned floats for callers that care.
+
+        (WebCore::RenderBlock::FloatingObjects::FloatingObjects):
+        (WebCore::RenderBlock::FloatingObjects::hasPositionedObjects):
+        The object count tracking for positioned floats within a block's FloatingObjects list.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::updateBoxModelInfoFromStyle):
+        Make sure isFloating is set even if isPositioned is also set for the positioned float case.
+
+        * rendering/RenderDeprecatedFlexibleBox.cpp:
+        (WebCore::RenderDeprecatedFlexibleBox::layoutBlock):
+        Modified to do the extra layout pass if needed.
+
+2011-07-29  Scott Byer  <scottbyer@chromium.org>
+
+        Scroll animation refinements.
+        https://bugs.webkit.org/show_bug.cgi?id=65154
+
+        Reviewed by Adam Barth.
+
+        Fix scroll animation bugs when scrolling to the ends of a document. Smooth over slow event repeat rates
+        better. Fix tests to allow for unit testing of scrolling up and not just down.
+
+        Additional unit tests added to ScrollAnimatorNoneTest:
+        ScrollQuadraticSmoothed, ScrollLotsQuadraticSmoothed, ScrollDownToBumper, ScrollUpToBumper
+
+        * platform/ScrollAnimatorNone.cpp:
+        (WebCore::ScrollAnimatorNone::Parameters::Parameters):
+        (WebCore::ScrollAnimatorNone::PerAxisData::updateDataFromParameters):
+        (WebCore::ScrollAnimatorNone::scroll):
+        * platform/ScrollAnimatorNone.h:
+
+2011-07-29  Samuel White  <samuel_white@apple.com>
+
+        Add the ability to search the AccessibilityObject cache
+        https://bugs.webkit.org/show_bug.cgi?id=64994
+        
+        To support searching the AccessibilityObject cache, we first need to
+        implement a minimal set of functions that will allow AccessibilityObjects
+        to be identified when searching using common search criteria. The additional
+        functions below complement the existing identification functionality already
+        available and together provide a basic working set to build search on top of.
+        Additionally, the blockquoteLevel function has been moved into the AccessibilityObject
+        class to make it available to all platforms.
+
+        Reviewed by Chris Fleizach.
+
+        New tests will be included in the following patch that will also implement
+        basic search functionality.
+
+        * accessibility/AccessibilityObject.cpp:
+        (WebCore::AccessibilityObject::isBlockquote):
+        (WebCore::AccessibilityObject::isLandmark):
+        (WebCore::AccessibilityObject::hasMisspelling):
+        (WebCore::AccessibilityObject::blockquoteLevel):
+        * accessibility/AccessibilityObject.h:
+        (WebCore::AccessibilityObject::isUnvisited):
+        (WebCore::AccessibilityObject::hasBoldFont):
+        (WebCore::AccessibilityObject::hasItalicFont):
+        (WebCore::AccessibilityObject::hasPlainText):
+        (WebCore::AccessibilityObject::hasSameFont):
+        (WebCore::AccessibilityObject::hasSameFontColor):
+        (WebCore::AccessibilityObject::hasSameStyle):
+        (WebCore::AccessibilityObject::hasStaticText):
+        (WebCore::AccessibilityObject::hasUnderline):
+        (WebCore::AccessibilityObject::tableLevel):
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::isUnvisited):
+        (WebCore::AccessibilityRenderObject::hasBoldFont):
+        (WebCore::AccessibilityRenderObject::hasItalicFont):
+        (WebCore::AccessibilityRenderObject::hasPlainText):
+        (WebCore::AccessibilityRenderObject::hasSameFont):
+        (WebCore::AccessibilityRenderObject::hasSameFontColor):
+        (WebCore::AccessibilityRenderObject::hasSameStyle):
+        (WebCore::AccessibilityRenderObject::hasUnderline):
+        * accessibility/AccessibilityRenderObject.h:
+        * accessibility/AccessibilityTable.cpp:
+        (WebCore::AccessibilityTable::tableLevel):
+        * accessibility/AccessibilityTable.h:
+        * accessibility/mac/AccessibilityObjectWrapper.mm:
+        (AXAttributeStringSetBlockquoteLevel):
+        (-[AccessibilityObjectWrapper accessibilityAttributeValue:]):
+
+2011-07-29  Zeng Huiqing  <huiqing.zeng@intel.com>
+
+        Avoid calling animation timer updates while the page is loading
+        https://bugs.webkit.org/show_bug.cgi?id=64851
+
+        Reviewed by Simon Fraser.
+
+        There is no need to update the animation timer for a RenderObject that has not yet been inserted into the render tree, or that doesn't have animations. Our tests show that this improves page loading by up to 3x on pages with a large number of transitionable objects.
+
+        * page/animation/AnimationController.cpp:
+        (WebCore::AnimationController::updateAnimations):
+
+2011-07-29  Anders Carlsson  <andersca@apple.com>
+
+        Pass the HTTP referrer header for URLs loaded by plug-ins
+        https://bugs.webkit.org/show_bug.cgi?id=65379
+        <rdar://problem/9822116>
+
+        Reviewed by Sam Weinig.
+
+        Export a symbol needed by WebKit2.
+
+        * WebCore.exp.in:
+
+2011-07-28  Leandro Gracia Gil  <leandrogracia@chromium.org>
+
+        Fix speech input icon rect on RTL directions.
+        https://bugs.webkit.org/show_bug.cgi?id=65333
+
+        Reviewed by Tony Gentilcore.
+
+        No new tests. This is used by platforms, not WebCore, and
+        the base functionality is not changed but only the failing cases.
+
+        * html/shadow/TextControlInnerElements.cpp:
+        (WebCore::InputFieldSpeechButtonElement::defaultEventHandler):
+
+2011-07-29  Kent Tamura  <tkent@chromium.org>
+
+        Make the ExceptionCode argument of Element::setShadowPseudoId() ASSERT_NO_EXCEPTION by default
+        https://bugs.webkit.org/show_bug.cgi?id=65363
+
+        Reviewed by Hajime Morita.
+
+        No new tests. Cleanup-only.
+
+        * dom/Element.h: Make the ExceptionCode argument ASSERT_NO_EXCEPTION by default.
+        * html/ColorInputType.cpp:
+        (WebCore::ColorInputType::createShadowSubtree): Remove the ExceptionCode argument and ASSERT(!ec).
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::updatePlaceholderText): ditto.
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::createShadowSubtree): ditto.
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::createShadowSubtree): ditto.
+        (WebCore::TextFieldInputType::updatePlaceholderText): ditto.
+        * html/ValidationMessage.cpp:
+        (WebCore::ValidationMessage::buildBubbleTree): ditto.
+
+2011-07-28  Luke Macpherson   <macpherson@chromium.org>
+
+        Remove remaining uses of CSSPrimitiveValue::computeLengthIntForLength()
+        https://bugs.webkit.org/show_bug.cgi?id=64919
+
+        Reviewed by Darin Adler.
+
+        No new tests / cleanup only.
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::computeLength):
+        Remove implementation of computeLengthIntForLength()
+        * css/CSSPrimitiveValue.h:
+        Remove definition of computeLengthIntForLength()
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::ApplyPropertyLength::applyValue):
+        Remove use of computeLengthIntForLength()
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Remove use of computeLengthIntForLength()
+        * platform/Length.h:
+        (WebCore::Length::setQuirk):
+        Adds the ability to set the m_quirk member variable after construction.
+
+2011-07-28  Anders Carlsson  <andersca@apple.com>
+
+        Unreviewed, rolling out r88601. (Requested by Sam Weinig).
+        http://trac.webkit.org/changeset/88601
+        https://bugs.webkit.org/show_bug.cgi?id=62230
+
+        Caused a regression, see https://bugs.webkit.org/show_bug.cgi?id=64378
+
+        * dom/StyledElement.cpp:
+        * dom/StyledElement.h:
+        * html/HTMLBodyElement.cpp:
+        (WebCore::HTMLBodyElement::parseMappedAttribute):
+        (WebCore::HTMLBodyElement::insertedIntoDocument):
+        (WebCore::HTMLBodyElement::didMoveToNewOwnerDocument):
+        * html/HTMLBodyElement.h:
+
+2011-07-28  Justin Schuh  <jschuh@chromium.org>
+
+        Simplify createCanonicalUUIDString implementation.
+        https://bugs.webkit.org/show_bug.cgi?id=65157
+
+        All ports support OS_RANDOMNESS, so better to have one implementation.
+
+        Reviewed by Adam Barth.
+
+        Change covered by existing tests.
+
+        * platform/UUID.cpp:
+        (WebCore::createCanonicalUUIDString):
+
+2011-07-28  Devdatta Deshpande  <pwjd73@motorola.com>
+
+        Fixed gif animation dependency on system time
+        https://bugs.webkit.org/show_bug.cgi?id=64996
+
+        Reviewed by James Robinson.
+
+        Test: Load WebCore/manual-tests/animated-gif-looping.html
+        Change system time to a time in past
+
+        * platform/graphics/BitmapImage.cpp:
+        (WebCore::BitmapImage::startAnimation): Bitmap animation is now based
+        on monotonicallyIncreasingTime instead of currentTime
+
+2011-07-28  Luke Zarko  <lukezarko@gmail.com>
+
+        V8 should correctly serialize Boolean, Number and String objects.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65286
+
+        Reviewed by David Levin.
+        
+        New APIs were exposed to allow V8 to correctly serialize Boolean, Number and String objects, as well as detect certain native errors as required by the HTML5 Structured Clone algorithm (http://www.whatwg.org/specs/web-apps/current-work/multipage/urls.html#safe-passing-of-structured-data). SerializedScriptValue should make use of these APIs.
+
+        - Checks for and serializes Boolean, Number and String objects.
+        - Checks for native errors and aborts should a script attempt to serialize them.
+        - Small name change to clear up the code: m_objectReferenceStack => m_openCompositeReferenceStack
+
+        Tests: fast/dom/Window/window-postmessage-clone.html
+               fast/loader/stateobjects/pushstate-object-types.html
+
+        * bindings/v8/SerializedScriptValue.cpp:
+        (WebCore::V8ObjectMap::Writer::writeBooleanObject):
+        (WebCore::V8ObjectMap::Writer::writeStringObject):
+        (WebCore::V8ObjectMap::Writer::writeNumberObject):
+        (WebCore::V8ObjectMap::Serializer::writeStringObject):
+        (WebCore::V8ObjectMap::Serializer::writeNumberObject):
+        (WebCore::V8ObjectMap::Serializer::writeBooleanObject):
+        (WebCore::V8ObjectMap::Serializer::doSerialize):
+        (WebCore::V8ObjectMap::Reader::read):
+        (WebCore::V8ObjectMap::Reader::readStringObject):
+        (WebCore::V8ObjectMap::Reader::readNumberObject):
+        (WebCore::V8ObjectMap::Deserializer::deserialize):
+        (WebCore::V8ObjectMap::Deserializer::openComposite):
+        (WebCore::V8ObjectMap::Deserializer::closeComposite):
+
+2011-07-28  Adam Barth  <abarth@webkit.org>
+
+        Old code about empty security origins could use a bath
+        https://bugs.webkit.org/show_bug.cgi?id=64735
+
+        Reviewed by Dimitri Glazkov.
+
+        This patch cleans up some old code related to empty security origins.
+        It also removes some dodgy code that seems wrong.
+
+        Test: http/tests/security/inactive-document-with-empty-security-origin.html
+
+        * bindings/generic/BindingSecurityBase.cpp:
+        (WebCore::BindingSecurityBase::canAccess):
+        * page/SecurityOrigin.cpp:
+        (WebCore::SecurityOrigin::isEmpty):
+        (WebCore::SecurityOrigin::isSecureTransitionTo):
+        (WebCore::SecurityOrigin::toString):
+
+2011-07-28  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] Inspected tab crashes if navigated with inspector open and there are watch expressions added.
+        https://bugs.webkit.org/show_bug.cgi?id=65322
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorController.cpp:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/WorkerInspectorController.cpp:
+
+2011-07-28  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions]Add basic RenderRegion support
+        https://bugs.webkit.org/show_bug.cgi?id=64689
+
+        Reviewed by David Hyatt.
+
+        This patch introduces the RenderRegion object.
+        A RenderObject that takes its content from a "named" flow will become a RenderRegion, an element that is used to display the content from a RenderFlowThread.
+        A RenderRegion that is marked to take its content from a non existing flow, will have its content disconnected from the normal flow.
+
+        Tests: fast/regions/region-element-display-restriction.html
+               fast/regions/region-element-dynamic-attach-flow.html
+               fast/regions/region-element-dynamic-detach-flow.html
+               fast/regions/render-region-renderer.html
+
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/Node.cpp:
+        (WebCore::Node::diff):
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::createObject):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isRenderRegion):
+        * rendering/RenderRegion.cpp: Added.
+        (WebCore::RenderRegion::RenderRegion):
+        (WebCore::RenderRegion::~RenderRegion):
+        (WebCore::RenderRegion::layout):
+        (WebCore::RenderRegion::paint):
+        * rendering/RenderRegion.h: Added.
+        (WebCore::RenderRegion::isRenderRegion):
+        (WebCore::RenderRegion::renderName):
+        (WebCore::toRenderRegion):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+
+2011-07-28  Marco Peereboom  <marco@peereboom.us>
+
+        [Soup] Cannot override default max-conns and max-conns-per-host Soup Session settings
+        https://bugs.webkit.org/show_bug.cgi?id=64355
+        Default max-conns and max-conns-per-host are set at "first contact" with
+        a site instead of at creation time.  This results in values being
+        overwritten if they are set prior to said "first contact"; which is the
+        most likely (or only) scenario.
+
+        Reviewed by Martin Robinson.
+
+        No new tests.  Rigged libsoup and xxxterm web browser to diagnose the
+        issue and validate the patch.
+
+        * platform/network/soup/ResourceHandleSoup.cpp:
+        (WebCore::ensureSessionIsInitialized): No longer ininitalize connection limits.
+        (WebCore::ResourceHandle::defaultSession): Initialize connection limits here instead.
+
+2011-07-28  Brady Eidson  <beidson@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65323
+        r91931 causes NOTREACHED to be hit via StorageTracker
+
+        Change the meaning of the "has been initialized" flag to "needs initialization", and only set it to true
+        if the ::initializeTracker() method has been called.
+
+        Reviewed by Sam Weinig.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker): Set m_needsInitialization to true since the calling WebKit port expects full
+          initialization instead of a dummy tracker.
+        (WebCore::StorageTracker::internalInitialize):
+        (WebCore::StorageTracker::tracker): Only initialize the tracker if it was created in the above initializeTracker().
+        (WebCore::StorageTracker::StorageTracker):
+        * storage/StorageTracker.h:
+
+2011-07-28  David Kilzer  <ddkilzer@apple.com>
+
+        <http://webkit.org/b/65289> Remove GeolocationPositionCache
+
+        Reviewed by Adam Barth.
+
+        * CMakeLists.txt: Remove references to GeolocationPositionCache.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.order: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+
+        * page/Geolocation.cpp: Switch from using m_positionCache to
+        m_cachedPosition.
+        (WebCore::Geolocation::makeCachedPositionCallbacks):
+        (WebCore::Geolocation::haveSuitableCachedPosition):
+        (WebCore::Geolocation::positionChangedInternal):
+        * page/Geolocation.h: Remove PositionCacheWrapper and replace
+        with RefPtr<Geoposition>.
+        * page/GeolocationPositionCache.cpp: Removed.
+        * page/GeolocationPositionCache.h: Removed.
+
+2011-07-28  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9589433> Displaying Japanese dictionary contents in vertical orientation takes a couple of seconds
+
+        Reviewed by Darin Adler.
+
+        * WebCore.exp.in: Exported wkGetVerticalGlyphsForCharacters.
+        * platform/graphics/mac/GlyphPageTreeNodeMac.cpp:
+        (WebCore::GlyphPage::fill): Use wkGetVerticalGlyphsForCharacters. If it returns false, proceed
+        with the existing, slower method of getting vertical glyphs.
+        * platform/mac/WebCoreSystemInterface.h:
+        * platform/mac/WebCoreSystemInterface.mm:
+
+2011-07-28  Brady Eidson  <beidson@apple.com>
+
+        <rdar://problem/9714337> and https://bugs.webkit.org/show_bug.cgi?id=65306
+        WebKitInitializeStorageIfNecessary() can take awhile performing i/o, isn't necessary for every WebView
+
+        Move the heavy lifting done in StorageTracker::initializeTracker() until when the global tracker is actually
+        accessed, therefore deferring it until a web page actually uses LocalStorage or the app uses the API.
+
+        Reviewed by Maciej Stachowiak.
+
+        No new tests. (Not possible to test this API implementation detail)
+
+        * WebCore.exp.in:
+
+        * storage/StorageAreaImpl.cpp:
+        (WebCore::StorageAreaImpl::StorageAreaImpl): Access the global StorageTracker to indicate that a web page
+          is actually using the storage APIs.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker): Moved the potentially hefty work from here...
+        (WebCore::StorageTracker::internalInitialize): ...to here.
+        (WebCore::StorageTracker::tracker): If the global tracker hasn't had internalInitialize() called, do so.
+        (WebCore::StorageTracker::StorageTracker):
+        * storage/StorageTracker.h:
+
+2011-07-28  Carlos Garcia Campos  <cgarcia@igalia.com>
+
+        [GTK] Copy and paste is broken in WebKit2
+        https://bugs.webkit.org/show_bug.cgi?id=65252
+
+        Reviewed by Martin Robinson.
+
+        Use gtk_clipboard_get_for_display() instead of
+        gtk_widget_get_clipboard(), using the the default display when
+        there's no page client widget, which is the case of WebKit2.
+
+        * platform/gtk/PasteboardHelper.cpp:
+        (WebCore::displayFromFrame): Return the display of the current
+        frame widget or the default display if there's no widget.
+        (WebCore::PasteboardHelper::getClipboard):
+        (WebCore::PasteboardHelper::getPrimarySelectionClipboard):
+
+2011-07-28  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Add resource initiator column to network panel.
+        https://bugs.webkit.org/show_bug.cgi?id=65105
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/network/network-initiator.html
+
+        * English.lproj/localizedStrings.js:
+        * dom/Document.cpp:
+        (WebCore::Document::scheduleStyleRecalc):
+        * inspector/Inspector.json:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::willRecalculateStyleImpl):
+        (WebCore::InspectorInstrumentation::didRecalculateStyleImpl):
+        (WebCore::InspectorInstrumentation::didScheduleStyleRecalculationImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::didScheduleStyleRecalculation):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::willSendRequest):
+        (WebCore::InspectorResourceAgent::didLoadResourceFromMemoryCache):
+        (WebCore::InspectorResourceAgent::willRecalculateStyle):
+        (WebCore::InspectorResourceAgent::didRecalculateStyle):
+        (WebCore::InspectorResourceAgent::didScheduleStyleRecalculation):
+        (WebCore::InspectorResourceAgent::buildInitiatorObject):
+        (WebCore::InspectorResourceAgent::InspectorResourceAgent):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkDispatcher.prototype.requestWillBeSent):
+        (WebInspector.NetworkDispatcher.prototype.resourceLoadedFromMemoryCache):
+        (WebInspector.NetworkDispatcher.prototype._appendRedirect):
+        (WebInspector.NetworkDispatcher.prototype._createResource):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._createTable):
+        (WebInspector.NetworkLogView.prototype._createSortingFunctions):
+        (WebInspector.NetworkLogView.prototype.switchToDetailedView):
+        (WebInspector.NetworkLogView.prototype.switchToBriefView):
+        (WebInspector.NetworkLogView.prototype._toggleGridMode):
+        (WebInspector.NetworkLogView.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkDataGridNode.prototype.createCells):
+        (WebInspector.NetworkDataGridNode.prototype.refreshResource):
+        (WebInspector.NetworkDataGridNode.prototype._refreshInitiatorCell):
+        (WebInspector.NetworkDataGridNode.InitiatorComparator):
+        * inspector/front-end/networkLogView.css:
+        (.initiator-column a):
+
+2011-07-28  Rob Buis  <rbuis@rim.com>
+
+        Use styling test from ietestcenter fails
+        https://bugs.webkit.org/show_bug.cgi?id=62147 
+
+        Reviewed by Nikolas Zimmermann.
+
+        Make sure CSS selectors are applied to the DOM tree referenced by <use>, not the internal shadow tree. In order to quickly
+        find the corresponding DOM tree element store this info in SVGElementRareData. 
+
+        Test: svg/W3C-SVG-1.1-SE/struct-use-11-f.svg
+
+        * rendering/svg/SVGShadowTreeElements.cpp:
+        (WebCore::SVGShadowTreeContainerElement::styleForRenderer):
+        * rendering/svg/SVGShadowTreeElements.h:
+        * svg/SVGElement.cpp:
+        (WebCore::SVGElement::correspondingElement):
+        (WebCore::SVGElement::setCorrespondingElement):
+        (WebCore::SVGElement::styleForRenderer):
+        * svg/SVGElement.h:
+        * svg/SVGElementInstance.cpp:
+        (WebCore::SVGElementInstance::invalidateAllInstancesOfElement):
+        * svg/SVGElementRareData.h:
+        (WebCore::SVGElementRareData::SVGElementRareData):
+        (WebCore::SVGElementRareData::correspondingElement):
+        (WebCore::SVGElementRareData::setCorrespondingElement):
+        * svg/SVGStyledElement.cpp:
+        (WebCore::SVGStyledElement::removedFromDocument):
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::associateInstancesWithShadowTreeElements):
+        * svg/SVGUseElement.h:
+
+2011-07-28  Denis Oliver Kropp  <dok@directfb.org>
+
+        This fixes build without video enabled.
+        https://bugs.webkit.org/show_bug.cgi?id=65084
+
+        Reviewed by Philippe Normand.
+
+        Test with --disable-video.
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::determineDispatchBehavior):
+
+2011-07-28  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Pass the value of useHixie76Protocol flag to WebSocket object
+        https://bugs.webkit.org/show_bug.cgi?id=65250
+
+        Reviewed by Alexey Proskuryakov.
+
+        Add useHixie76Protocol() method to WebSocketChannel and its family. To implement hybi-specific
+        attributes in WebSocket object, WebSocket class needs to be able to get the value of
+        useHixie76Protocol flag of WebSocketChannel.
+
+        If the WebSocket object is created in a worker thread, the flag value must be obtained from
+        WebSocketChannel which resides in the loader thread (through WorkerThreadableWebSocketChannel).
+        Since the value does not change after creation of WebSocketChannel, it can be cached in
+        the worker thread.
+
+        There is no change in behavior, thus no new tests.
+
+        * websockets/ThreadableWebSocketChannel.h:
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::useHixie76Protocol):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setUseHixie76Protocol):
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::useHixie76Protocol):
+        * websockets/WebSocketChannel.h:
+        * websockets/WorkerThreadableWebSocketChannel.cpp:
+        (WebCore::WorkerThreadableWebSocketChannel::useHixie76Protocol):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::useHixie76Protocol):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::setWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::mainThreadCreateWebSocketChannel):
+        * websockets/WorkerThreadableWebSocketChannel.h:
+
+2011-07-28  Rob Buis  <rbuis@rim.com>
+
+        REGRESSION (r91125): Google Drawings is broken
+        https://bugs.webkit.org/show_bug.cgi?id=65257
+
+        Reviewed by Darin Adler.
+
+        Only consider zero-length path rendering code path when a stroke is defined.
+
+        Test: svg/custom/zero-path-square-cap-rendering2.svg
+
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::shouldStrokeZeroLengthSubpath):
+
+2011-07-22  Martin Robinson  <mrobinson@igalia.com>
+
+        [Cairo] Switch from ContextShadow to ShadowBlur
+        https://bugs.webkit.org/show_bug.cgi?id=64744
+
+        Use ShadowBlur in the Cairo backend instead of ContextShadow. This allows us
+        to share shadowing code with Qt and Mac ports and to correct some broken
+        shadow rendering.
+
+        Reviewed by Dirk Schulze.
+
+        * CMakeLists.txt: Remove ContextShadow from the build.
+        * CMakeListsEfl.txt: Ditto.
+        * GNUmakefile.list.am: Add ShadowBlur source files and remove ContextShadow
+        source files.
+        * platform/graphics/GraphicsContext.cpp:Add #ifdefs to support ShadowBlur for Cairo.
+        * platform/graphics/GraphicsContext.h: Remove Cairo ContextShadow code.
+        * platform/graphics/ShadowBlur.cpp:
+        (WebCore::ShadowBlur::drawInsetShadowWithTiling): Since the ShadowBlur is a property
+        of the GraphicsContext, we cannot clear the GraphicsContext shadow until we have
+        finished using properties like m_offset. If we clear the GrahpicsContext shadow
+        before using these properties, they will be zero when we try to use them.
+        (WebCore::ShadowBlur::drawRectShadowWithTiling):Ditto.
+        (WebCore::ShadowBlur::drawLayerPieces): Ditto.
+        (WebCore::ShadowBlur::beginShadowLayer):Cairo is the first port to keep ShadowBlur
+        as a persistent property of GraphicsContext and use drawRectShadow and drawInsetShadow.
+        Thus, we must manually clear the cached tiling values so that ShadowBlur does not
+        try to reuse the scratch buffer for rectangular shadows after using beginShadowLayer
+        and endShadowLayer.
+        (WebCore::ShadowBlur::mustUseShadowBlur): Moved this method from the Qt port to
+        this cross-platform location.
+        * platform/graphics/ShadowBlur.h: Added new method declaration.
+        * platform/graphics/cairo/ContextShadowCairo.cpp: Removed.
+        * platform/graphics/cairo/FontCairo.cpp: Switched to using ShadowBlur.
+        (WebCore::drawGlyphsShadow):Ditto.
+        * platform/graphics/cairo/GraphicsContextCairo.cpp: Switch to using ShadowBlur.
+        (WebCore::drawPathShadow): ShadowBlur has slightly different semantics than
+        ContextShadow. When filling the shadow layer, we do not need to use the fill
+        alpha. We also need to restore the Cairo path to the target context after
+        endShadowLayer as it destroys the current path.
+        * platform/graphics/cairo/GraphicsContextPlatformPrivateCairo.h: Switch to using ShadowBlur.
+        * platform/graphics/cairo/ImageCairo.cpp: Ditto.
+        * platform/graphics/cairo/PlatformContextCairo.cpp:
+        (WebCore::PlatformContextCairo::drawSurfaceToContext):Ditto.
+        (WebCore::PlatformContextCairo::prepareForStroking): Add a mode ignoring alpha.
+        * platform/graphics/cairo/PlatformContextCairo.h: Ditto.
+        (WebCore::PlatformContextCairo::shadowBlur):Added.
+        * platform/graphics/gtk/FontGtk.cpp: Update to use ShadowBlur.
+        * platform/graphics/qt/GraphicsContextQt.cpp: Switch to using the new version of mustUseShadowBlur.
+
+2011-07-27  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        [EFL] Add dummy NotificationPresenterClientEfl
+        https://bugs.webkit.org/show_bug.cgi?id=64064
+
+        Add two files to CMakeLists.txt for HTML5 Notification.
+
+        Reviewed by Antonio Gomes.
+
+        * CMakeLists.txt:
+
+2011-07-27  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Calling window.find immediately after mutating the document crashes WebKit.
+        https://bugs.webkit.org/show_bug.cgi?id=65296
+
+        Reviewed by Darin Adler.
+
+        Don't forget to layout first.
+
+        Test: editing/text-iterator/find-after-mutation.html
+
+        * editing/TextIterator.cpp:
+        (WebCore::findPlainText):
+
+2011-07-27  Ben Wells  <benwells@chromium.org>
+
+        Remove skia special case for outline rendering code
+        https://bugs.webkit.org/show_bug.cgi?id=65295
+
+        Reviewed by James Robinson.
+
+        The fix for bug 58999 (outlines with alpha channels showed artifacts in the corners) was
+        excluded from skia builds until bug 61369 (skia drawConvexPoly didn't pay attention to
+        shouldAntialias) was fixed. That bug is fixed so now the #if's can be removed.
+
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::paintOutline):
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::paintOutline):
+
+2011-07-27  Adam Barth  <abarth@webkit.org>
+
+        Crypto.idl doesn't need legacy optional arguments
+        https://bugs.webkit.org/show_bug.cgi?id=65298
+
+        Reviewed by Darin Adler.
+
+        This API is relatively new and useless to call without its only argument.
+
+        * page/Crypto.idl:
+
+2011-07-27  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Remove operator new from JSCell
+        https://bugs.webkit.org/show_bug.cgi?id=64999
+
+        Reviewed by Oliver Hunt.
+
+        No new tests.
+
+        Removed the implementation of operator new in JSCell, so any further uses
+        will not successfully link.  Also removed any remaining uses of operator new.
+
+        * bridge/c/CRuntimeObject.h:
+        (JSC::Bindings::CRuntimeObject::create):
+        * bridge/c/c_instance.cpp:
+        (JSC::Bindings::CInstance::newRuntimeObject):
+        (JSC::Bindings::CRuntimeMethod::create):
+        (JSC::Bindings::CRuntimeMethod::CRuntimeMethod):
+        (JSC::Bindings::CInstance::getMethod):
+        * bridge/jni/jsc/JavaInstanceJSC.cpp:
+        (JavaInstance::newRuntimeObject):
+        (JavaRuntimeMethod::create):
+        (JavaRuntimeMethod::JavaRuntimeMethod):
+        (JavaInstance::getMethod):
+        * bridge/jni/jsc/JavaRuntimeObject.h:
+        (JSC::Bindings::JavaRuntimeObject::create):
+        * bridge/objc/ObjCRuntimeObject.h:
+        (JSC::Bindings::ObjCRuntimeObject::create):
+        * bridge/objc/objc_class.mm:
+        (JSC::Bindings::ObjcClass::fallbackObject):
+        * bridge/objc/objc_instance.mm:
+        (ObjcInstance::newRuntimeObject):
+        (ObjCRuntimeMethod::create):
+        (ObjCRuntimeMethod::ObjCRuntimeMethod):
+        (ObjcInstance::getMethod):
+        * bridge/objc/objc_runtime.h:
+        (JSC::Bindings::ObjcFallbackObjectImp::create):
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Network panel sidebar should have width saved in preferences when resource is selected.
+        https://bugs.webkit.org/show_bug.cgi?id=65256
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkPanel.prototype.restoreSidebarWidth):
+        (WebInspector.NetworkPanel.prototype._showResource):
+        (WebInspector.NetworkPanel.prototype._closeVisibleResource):
+        (WebInspector.NetworkPanel.prototype._toggleViewingResourceMode):
+        * inspector/front-end/Panel.js:
+        (WebInspector.Panel.prototype.show):
+        (WebInspector.Panel.prototype.preferredSidebarWidth):
+        (WebInspector.Panel.prototype.get restoreSidebarWidth):
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] [Chromium] Opening link in new tab does not work properly.
+        https://bugs.webkit.org/show_bug.cgi?id=65279
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::InspectorPageAgent::open):
+
+2011-07-27  Adam Klein  <adamk@chromium.org>
+
+        [V8] Remove unused m_isWeak member of V8AbstractEventListener
+        https://bugs.webkit.org/show_bug.cgi?id=65273
+
+        Reviewed by Adam Barth.
+
+        m_isWeak is set to true in the constructor and never changed,
+        so the one if statement that tests it always executes; the
+        code has been updated to make this clear.
+
+        No behavior change, thus no tests.
+
+        * bindings/v8/V8AbstractEventListener.cpp:
+        (WebCore::V8AbstractEventListener::V8AbstractEventListener):
+        (WebCore::V8AbstractEventListener::setListenerObject):
+        * bindings/v8/V8AbstractEventListener.h:
+
+2011-07-27  Fady Samuel  <fsamuel@chromium.org>
+
+        Popups on Chromium now check the minimum row height set through the Chromium WebKit API when
+        computing the height of a row in a popup listbox.
+        https://bugs.webkit.org/show_bug.cgi?id=64897
+
+        Reviewed by Darin Fisher.
+
+        No new tests.
+
+        * platform/chromium/PopupMenuChromium.cpp:
+        (WebCore::PopupListBox::getRowHeight):
+        * platform/chromium/PopupMenuChromium.h:
+        (WebCore::PopupMenuChromium::minimumRowHeight):
+        (WebCore::PopupMenuChromium::setMinimumRowHeight):
+
+2011-07-27  MORITA Hajime  <morrita@google.com>
+
+        Inconsistent state of TreeScope reference.
+        https://bugs.webkit.org/show_bug.cgi?id=65235
+        
+        The tree scope pointers on shadow tree nodes didn't cleared.
+        even when the tree scope (shadow root) is destroyed.
+        This change clear these poitners before detaching the shadow root.
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/dom/shadow/tree-scope-crash.html
+
+        * dom/Element.cpp:
+        (WebCore::Element::removeShadowRoot):
+
+2011-07-27  Rachel Blum  <groby@chromium.org>
+
+        Implement sizes attribute for link tag from HTML5
+        https://bugs.webkit.org/show_bug.cgi?id=37674
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/dom/icon-size-property.html
+
+        * WebCore.gypi:
+        * WebCore.pro:
+        * bindings/js/JSHTMLLinkElementCustom.cpp:
+        (WebCore::JSHTMLLinkElement::sizes):
+        (WebCore::JSHTMLLinkElement::setSizes):
+        * bindings/v8/custom/V8HTMLLinkElementCustom.cpp: Added.
+        (WebCore::V8HTMLLinkElement::sizesAccessorGetter):
+        (WebCore::V8HTMLLinkElement::sizesAccessorSetter):
+        * html/HTMLAttributeNames.in:
+        * html/HTMLLinkElement.cpp:
+        (WebCore::HTMLLinkElement::HTMLLinkElement):
+        (WebCore::HTMLLinkElement::parseMappedAttribute):
+        (WebCore::HTMLLinkElement::sizes):
+        (WebCore::HTMLLinkElement::setSizes):
+        * html/HTMLLinkElement.h:
+        * html/HTMLLinkElement.idl:
+
+2011-07-27  Pratik Solanki  <psolanki@apple.com>
+
+        Incorrect arguments passed to LOG statement
+        https://bugs.webkit.org/show_bug.cgi?id=65293
+
+        Reviewed by Oliver Hunt.
+
+        * platform/network/mac/ResourceHandleMac.mm:
+        (-[WebCoreResourceHandleAsDelegate connection:canAuthenticateAgainstProtectionSpace:]):
+
+2011-07-27  Levi Weintraub  <leviw@chromium.org>
+
+        Switch transform operations to FloatSize
+        https://bugs.webkit.org/show_bug.cgi?id=64301
+
+        Reviewed by Simon Fraser.
+
+        Changing TransformOperation and its progeny to operate on FloatSizes instead of IntSizes.
+
+        * platform/graphics/transforms/IdentityTransformOperation.h:
+        (WebCore::IdentityTransformOperation::apply):
+        * platform/graphics/transforms/Matrix3DTransformOperation.cpp:
+        (WebCore::Matrix3DTransformOperation::blend):
+        * platform/graphics/transforms/Matrix3DTransformOperation.h:
+        (WebCore::Matrix3DTransformOperation::apply):
+        * platform/graphics/transforms/MatrixTransformOperation.cpp:
+        (WebCore::MatrixTransformOperation::blend):
+        * platform/graphics/transforms/MatrixTransformOperation.h:
+        (WebCore::MatrixTransformOperation::apply):
+        * platform/graphics/transforms/PerspectiveTransformOperation.h:
+        (WebCore::PerspectiveTransformOperation::apply):
+        * platform/graphics/transforms/RotateTransformOperation.h:
+        (WebCore::RotateTransformOperation::apply):
+        * platform/graphics/transforms/ScaleTransformOperation.h:
+        (WebCore::ScaleTransformOperation::apply):
+        * platform/graphics/transforms/SkewTransformOperation.h:
+        (WebCore::SkewTransformOperation::apply):
+        * platform/graphics/transforms/TransformOperation.h:
+        * platform/graphics/transforms/TransformOperations.h:
+        (WebCore::TransformOperations::apply):
+        * platform/graphics/transforms/TranslateTransformOperation.h:
+        (WebCore::TranslateTransformOperation::x):
+        (WebCore::TranslateTransformOperation::y):
+        (WebCore::TranslateTransformOperation::z):
+        (WebCore::TranslateTransformOperation::apply):
+
+2011-07-27  Levi Weintraub  <leviw@chromium.org>
+
+        unicode-bidi:-webkit-plaintext does not work on <textarea>
+        https://bugs.webkit.org/show_bug.cgi?id=65074
+
+        Reviewed by Ryosuke Niwa.
+
+        Fixing unicode-bidi style propagation into text control shadow trees.
+
+        Test: fast/text/international/unicode-bidi-plaintext-in-textarea.html
+
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::adjustInnerTextStyle):
+
+2011-07-27  Eric Carlson  <eric.carlson@apple.com>
+
+        Load delegate not consulted before loading some poster images
+        https://bugs.webkit.org/show_bug.cgi?id=65270
+
+        Reviewed by Darin Adler.
+
+        Test: media/video-poster-blocked-by-willsendrequest.html
+
+        * html/HTMLVideoElement.cpp:
+        (WebCore::HTMLVideoElement::setDisplayMode): Don't ask media engine to set poster if
+            willLoadMediaElementURL returns false.
+
+2011-07-27  Stephen White  <senorblanco@chromium.org>
+
+        Fix for printing with accelerated <canvas>
+        https://bugs.webkit.org/show_bug.cgi?id=62406
+
+        Reviewed by James Robinson.
+
+        The platform-independent side of this should be covered by existing
+        tests.  Printing itself in Chrome has few tests, sadly.  :(
+
+        * html/HTMLCanvasElement.cpp:
+        (WebCore::HTMLCanvasElement::paint):
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::draw):
+
+2011-07-25  Mihai Parparita  <mihaip@chromium.org>
+
+        [Chromium] Add better WebKit API for chrome.tabs.insertCSS extension API
+        https://bugs.webkit.org/show_bug.cgi?id=65158
+
+        Reviewed by David Hyatt.
+
+        Add per-Document instance user stylesheets (as opposed to the page 
+        group user styles and the global page stylesheet).
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::CSSStyleSelector):
+        * css/CSSStyleSelector.h:
+        * dom/Document.cpp:
+        (WebCore::Document::~Document):
+        (WebCore::Document::createStyleSelector):
+        (WebCore::Document::addUserSheet):
+        * dom/Document.h:
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Disable cache option should only clear memory cache, not disable it.
+        https://bugs.webkit.org/show_bug.cgi?id=65184
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorClient.h:
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::enable):
+        (WebCore::InspectorResourceAgent::disable):
+        (WebCore::InspectorResourceAgent::setCacheDisabled):
+        (WebCore::InspectorResourceAgent::mainFrameNavigated):
+
+2011-07-27  Rob Buis  <rbuis@rim.com>
+
+        Implement getIntersectionList(), getEnclosureList(), checkIntersection() and checkEnclosure() in SVGSVGElement
+        https://bugs.webkit.org/show_bug.cgi?id=11274
+
+        Reviewed by Nikolas Zimmermann.
+
+        Implement checkIntersection/checkEnclosure and use it to implement getIntersectionList and getEnclosureList as well.
+        The referenceElement is used to provide a DOM subtree to find matches in. Also we do not allow elements that specify
+        pointer-events=none in the list.
+
+        Tests: svg/W3C-SVG-1.1-SE/struct-dom-11-f.svg
+               svg/custom/intersection-list-clipping.svg
+               svg/custom/intersection-list-nested-svg.svg
+
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::getElementCTM):
+        (WebCore::intersectsAllowingEmpty):
+        (WebCore::isGraphicsElement):
+        (WebCore::RenderSVGModelObject::checkIntersection):
+        (WebCore::RenderSVGModelObject::checkEnclosure):
+        * rendering/svg/RenderSVGModelObject.h:
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::checkIntersection):
+        (WebCore::SVGSVGElement::checkEnclosure):
+
+2011-07-27  Becsi Andras  <abecsi@webkit.org>
+
+        [Qt][V8] Fix the build.
+
+        Unreviewed build fix.
+
+        No new tests needed.
+
+        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp: Add missing CString.h include.
+
+2011-07-27  Alexis Menard  <alexis.menard@openbossa.org>
+
+        [Qt] Unreviewed build fix for mac.
+
+        QtKit is now our default media player, the define is WTF_USE_QTKIT and it's not part
+        of the options passed to build-webkit, therefore DerivedSources should now generate the
+        includes when it's mac.
+
+        * DerivedSources.pro:
+        * WebCore.pro:
+
+2011-07-27  Yury Semikhatsky  <yurys@chromium.org>
+
+        Inspector should support cd(window) in the command line
+        https://bugs.webkit.org/show_bug.cgi?id=19872
+
+        Added dropdown list with all iframes to allow selecting current evaluation context for console expressions.
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/console-cd.html
+
+        * WebCore.gypi:
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::InspectorController):
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::InspectorRuntimeAgent):
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/WorkerInspectorController.cpp:
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype.addContext):
+        (WebInspector.ConsoleView.prototype.removeContext):
+        (WebInspector.ConsoleView.prototype._contextUpdated):
+        (WebInspector.ConsoleView.prototype.get _currentEvaluationContextId):
+        (WebInspector.ConsoleView.prototype.evalInInspectedWindow):
+        * inspector/front-end/ContextManager.js: Added.
+        (WebInspector.ContextManager):
+        (WebInspector.ContextManager.prototype._frameAdded):
+        (WebInspector.ContextManager.prototype._frameNavigated):
+        (WebInspector.ContextManager.prototype._frameDetached):
+        (WebInspector.FrameEvaluationContext):
+        (WebInspector.FrameEvaluationContext.prototype._frameNavigated):
+        (WebInspector.FrameEvaluationContext.prototype.get id):
+        (WebInspector.FrameEvaluationContext.prototype.get url):
+        (WebInspector.FrameEvaluationContext.prototype.get displayName):
+        * inspector/front-end/ResourceTreeModel.js:
+        (WebInspector.ResourceTreeModel.prototype._cleanupFramesAfterNavigation):
+        (WebInspector.ResourceTreeModel.prototype._addFramesRecursively):
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/inspector.html:
+        * inspector/front-end/inspector.js:
+
+2011-07-27  Shinya Kawanaka  <shinyak@google.com>
+
+        Uses isHTMLSpace to normalize white spaces.
+        https://bugs.webkit.org/show_bug.cgi?id=57746
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/forms/option-strip-unicode-spaces.html
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+          Uses isHTMLSpace to trim and replace white spaces.
+
+2011-05-15  Holger Hans Peter Freyther  <holger@moiji-mobile.com>
+
+        [chromium] Remove include of skia/ext/platform_canvas.h
+        https://bugs.webkit.org/show_bug.cgi?id=60852
+
+        Reviewed by Hajime Morita.
+
+        In https://bugs.webkit.org/show_bug.cgi?id=57563 the usage of the
+        skia::PlatformCanvas was eliminated in favor of directly using
+        SkCanvas directly. The include of platform_canvas.h was not removed
+        leaving the dependency on Chromium in the header files. Remove
+        that dependency now.
+
+        * platform/graphics/skia/PlatformContextSkia.h: Remove platform_canvas.h
+
+2011-07-27  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: [Chromium] REGRESSION: Uncaught TypeError: Cannot read property 'isTracingToWindowObjects' of undefined
+        https://bugs.webkit.org/show_bug.cgi?id=65213
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/DetailedHeapshotView.js:
+        (WebInspector.HeapSnapshotRetainingPathsList.prototype.refresh):
+
+2011-07-27  Shinya Kawanaka  <shinyak@google.com>
+
+        Knob of a disabled or readonly range control should not be draggable.
+        https://bugs.webkit.org/show_bug.cgi?id=54820
+
+        Reviewed by Kent Tamura.
+
+        Made disabled or readonly range control undraggable.
+
+        Test: fast/forms/range-drag.html
+
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::handleMouseDownEvent):
+          Added check that the element is readonly or disabled.
+        * html/shadow/SliderThumbElement.cpp:
+        (WebCore::SliderThumbElement::defaultEventHandler): ditto.
+
+2011-07-27  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: CloseEvent attribute is not available on WebWorkers in JSC
+        https://bugs.webkit.org/show_bug.cgi?id=65232
+
+        Reviewed by Kent Tamura.
+
+        Add [NoStaticTables] attribute to CloseEvent interface definition. This attribute
+        makes the code generator obtain the attributes table used for building ClassInfo
+        through JSGlobalData, instead of directly using a statically-allocated table.
+
+        Generally speaking, NoStaticTables needs to be specified in interfaces which
+        may be accessed from workers.
+
+        Tests: http/tests/websocket/tests/hybi/workers/shared-worker-simple.html (updated)
+               http/tests/websocket/tests/hybi/workers/worker-simple.html (updated)
+
+        * websockets/CloseEvent.idl: Fixed the formatting, too.
+
+2011-07-26  James Robinson  <jamesr@chromium.org>
+
+        [chromium] REGRESSION(90963): Content layers are not redrawn after losing the compositor context
+        https://bugs.webkit.org/show_bug.cgi?id=65224
+
+        Reviewed by Kenneth Russell.
+
+        There's no automated way to test lost compositor contexts (yet), but to test manually open up the poster circle
+        page and kill the GPU process.
+
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerChromium::cleanupResources):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91805.
+        http://trac.webkit.org/changeset/91805
+        https://bugs.webkit.org/show_bug.cgi?id=65226
+
+        Breaks @ symbols and changes other font rendering on Windows
+        (Requested by enne on #webkit).
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::init):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::initializeForGDI):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::~TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::~TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::hdc):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::~TransparencyAwareUniscribePainter):
+        (WebCore::drawGlyphsWin):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        (WebCore::PlatformContextSkia::isNativeFontRenderingAllowed):
+        * platform/graphics/skia/PlatformContextSkia.h:
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::windowsCanHandleDrawTextShadow):
+        (WebCore::windowsCanHandleTextDrawing):
+        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-07-26  Adrienne Walker  <enne@google.com>
+
+        Unreviewed, rolling out r91812.
+        http://trac.webkit.org/changeset/91812
+        https://bugs.webkit.org/show_bug.cgi?id=65210
+
+        Breaks OSX GPU tests.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawLayers):
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91809.
+        http://trac.webkit.org/changeset/91809
+        https://bugs.webkit.org/show_bug.cgi?id=65225
+
+        Does not build on Chromium Windows (Requested by abarth on
+        #webkit).
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        (WebCore::EventHandler::handleGestureEvent):
+        (WebCore::EventHandler::handleTouchEvent):
+        (WebCore::EventHandler::resetGestureRecognizer):
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        * platform/PlatformGestureEvent.h:
+        * platform/PlatformGestureRecognizer.h:
+        * platform/chromium/FramelessScrollView.h:
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::dispatchSyntheticClick):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGesture):
+        (WebCore::InnerGestureRecognizer::scrollViaTouchMotion):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        * platform/chromium/GestureRecognizerChromium.h:
+        (WebCore::GestureRecognizerChromium::reset):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGesture):
+        * platform/chromium/PopupMenuChromium.cpp:
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+
+2011-07-26  Dmitry Lomov  <dslomov@google.com>
+
+        [V8][Chromium] Run workers in a separate v8::Isolate 
+        https://bugs.webkit.org/show_bug.cgi?id=65004
+        This patch allocates a new v8::Isolate for every worker and enters it on worker thread.
+
+        Reviewed by David Levin.
+
+        Covered by existing chromium tests.
+
+        * bindings/v8/DOMDataStore.cpp:
+        (WebCore::DOMDataStore::DOMDataStore):
+        (WebCore::DOMDataStore::~DOMDataStore):
+        * bindings/v8/StaticDOMDataStore.cpp:
+        (WebCore::StaticDOMDataStore::StaticDOMDataStore):
+        (WebCore::StaticDOMDataStore::~StaticDOMDataStore):
+        * bindings/v8/StaticDOMDataStore.h:
+        * bindings/v8/V8Binding.h:
+        (WebCore::V8BindingPerIsolateData::registerDOMDataStore):
+        (WebCore::V8BindingPerIsolateData::unregisterDOMDataStore):
+        * bindings/v8/V8DOMMap.cpp:
+        (WebCore::DOMDataStoreHandle::DOMDataStoreHandle):
+        (WebCore::DOMDataStoreHandle::~DOMDataStoreHandle):
+        * bindings/v8/WorkerContextExecutionProxy.cpp:
+        (WebCore::WorkerContextExecutionProxy::WorkerContextExecutionProxy):
+        (WebCore::WorkerContextExecutionProxy::initV8):
+        * bindings/v8/WorkerContextExecutionProxy.h:
+        * bindings/v8/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::WorkerScriptController):
+        (WebCore::WorkerScriptController::~WorkerScriptController):
+        * bindings/v8/WorkerScriptController.h:
+
+2011-07-26  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Avoid clearing the framebuffer when compositing in release builds
+        https://bugs.webkit.org/show_bug.cgi?id=65210
+
+        Reviewed by Kenneth Russell.
+
+        We clear the default framebuffer to blue when compositing so it's
+        easier to spot regions we miss. This is useful for debugging, but eats
+        bandwidth unnecessarily in release builds.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawLayers):
+
+2011-07-26  Jeffrey Pfau  <jpfau@apple.com>
+
+        New XML tokenizer
+        https://bugs.webkit.org/show_bug.cgi?id=64566
+
+        Reviewed by Adam Barth.
+
+        Add tokenizer for XML and tests in NewXMLDocumentParser for printing results of tokenization.
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * xml/parser/NewXMLDocumentParser.cpp:
+        (WebCore::NewXMLDocumentParser::NewXMLDocumentParser):
+        (WebCore::NewXMLDocumentParser::append):
+        * xml/parser/NewXMLDocumentParser.h:
+        * xml/parser/XMLToken.h:
+        * xml/parser/XMLTokenizer.cpp: Added.
+        (WebCore::XMLTokenizer::XMLTokenizer):
+        (WebCore::::shouldSkipNullCharacters):
+        (WebCore::XMLTokenizer::nextToken):
+        (WebCore::XMLTokenizer::bufferCharacter):
+        (WebCore::XMLTokenizer::parseError):
+        * xml/parser/XMLTokenizer.h: Added.
+        (WebCore::XMLTokenizer::create):
+        (WebCore::XMLTokenizer::gotError):
+        (WebCore::XMLTokenizer::shouldSkipNullCharacters):
+
+2011-07-26  Robert Kroeger  <rjkroege@chromium.org>
+
+        [chromium] Layering violations in gesture recognizer
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        Reviewed by Adam Barth.
+
+        Divided the gesture recognizer up to correct a layering
+        violation by moving gesture implementation from it to
+        EventHandler::handleGestureEvent so that the gesture recognizer
+        could simply be an engine for generating gesture events from
+        touch events.
+
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        Removed construction of gesture recognizer.
+        (WebCore::EventHandler::handleGestureEvent):
+        Extended for new gesture events added in this patch.
+        (WebCore::EventHandler::handleTouchEvent):
+        Removed call into gesture recognizer.
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        Removed code to reset gesture recognizer.
+        * platform/PlatformGestureEvent.h:
+        (WebCore::PlatformGestureEvent::PlatformGestureEvent):
+        (WebCore::PlatformGestureEvent::deltaX):
+        (WebCore::PlatformGestureEvent::deltaY):
+        (WebCore::PlatformGestureEvent::shiftKey):
+        (WebCore::PlatformGestureEvent::ctrlKey):
+        (WebCore::PlatformGestureEvent::altKey):
+        (WebCore::PlatformGestureEvent::metaKey):
+        Added additional gesture types and parameters.
+        * platform/PlatformGestureRecognizer.h:
+        * platform/chromium/FramelessScrollView.h:
+        Added support for displatching gesture and touch events.
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::constructClickGestureEvent):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGestures):
+        Removed all depedencies on EventHandler. Instead, create gesture
+        events from touch event stream.
+        (WebCore::InnerGestureRecognizer::constructScrollGesture):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
+        (WebCore::GestureRecognizerChromium::reset):
+        * platform/chromium/GestureRecognizerChromium.h:
+        * platform/chromium/PopupMenuChromium.cpp:
+        Added support to handle touch events and gesture events.
+        (WebCore::PopupContainer::handleTouchEvent):
+        (WebCore::PopupContainer::handleGestureEvent):
+        (WebCore::PopupListBox::handleTouchEvent):
+        (WebCore::PopupListBox::handleGestureEvent):
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+        Ignores the newly added gesture event types.
+
+2011-07-26  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Restore Composited Layers Faster from PageCache
+        https://bugs.webkit.org/show_bug.cgi?id=65216
+
+        Reviewed by Simon Fraser.
+
+        Restore the layer tree hierarchy a little sooner, when
+        restoring from the page cache. This more closely matches
+        original restore behavior.
+
+        Existing test showed no change.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::restoreBackingStores):
+
+2011-07-26  Mike Reed  <reed@google.com>
+
+        [skia] never draw with GDI, so that all text can be gpu-accelerated
+        https://bugs.webkit.org/show_bug.cgi?id=65203
+
+        Reviewed by Kenneth Russell.
+
+        No new tests. existing tests apply to the new drawing path
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::windowsCanHandleDrawTextShadow):
+        (WebCore::windowsCanHandleTextDrawing):
+        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
+
+2011-07-26  Kenneth Russell  <kbr@google.com>
+
+        Float32Array(ArrayBuffer, index, length) constructor working incorrectly.
+        https://bugs.webkit.org/show_bug.cgi?id=57042
+
+        Reviewed by James Robinson.
+
+        * bindings/js/JSArrayBufferViewHelper.h:
+        (WebCore::constructArrayBufferViewWithArrayBufferArgument):
+        * bindings/v8/custom/V8ArrayBufferViewCustom.h:
+        (WebCore::constructWebGLArrayWithArrayBufferArgument):
+
+2011-07-26  Chris Rogers  <crogers@google.com>
+
+        V8 custom bindings for AudioNode must do proper object checking and throw exception in case of error
+        https://bugs.webkit.org/show_bug.cgi?id=65222
+
+        Reviewed by James Robinson.
+
+        No new tests - this fixes upcoming audionode.html layout test
+
+        * bindings/v8/custom/V8AudioNodeCustom.cpp:
+        (WebCore::V8AudioNode::connectCallback):
+
+2011-07-26  Chris Rogers  <crogers@google.com>
+
+        AudioContext is not correctly accounting for hardware resources
+        https://bugs.webkit.org/show_bug.cgi?id=65217
+
+        Reviewed by Kenneth Russell.
+
+        No new tests since audio API is not yet implemented.
+
+        * webaudio/AudioContext.cpp:
+        (WebCore::AudioContext::create):
+        (WebCore::AudioContext::AudioContext):
+        (WebCore::AudioContext::lazyInitialize):
+
+2011-07-26  Luke Macpherson   <macpherson@chromium.org>
+
+        Handle CSS Properties that can be either auto or a primitive value in CSSStyleApplyProperty
+        https://bugs.webkit.org/show_bug.cgi?id=65164
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValueMappings.h:
+        Add casts to/from various numeric types.
+        (WebCore::CSSPrimitiveValue::operator short):
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        (WebCore::CSSPrimitiveValue::operator unsigned short):
+        (WebCore::CSSPrimitiveValue::operator int):
+        (WebCore::CSSPrimitiveValue::operator float):
+        * css/CSSStyleApplyProperty.cpp:
+        Add class to handle properties that set an "auto" boolean on RenderStyle.
+        (WebCore::ApplyPropertyAuto::ApplyPropertyAuto):
+        (WebCore::ApplyPropertyAuto::applyInheritValue):
+        (WebCore::ApplyPropertyAuto::applyInitialValue):
+        (WebCore::ApplyPropertyAuto::applyValue):
+        (WebCore::ApplyPropertyAuto::hasAuto):
+        (WebCore::ApplyPropertyAuto::setAuto):
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        * css/CSSStyleSelector.cpp:
+        Remove existing implementations.
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-07-26  Pratik Solanki  <psolanki@apple.com>
+
+        Add protection space authentication callback code to CFNetwork loader on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=65190
+        <rdar://problem/9842424>
+
+        Reviewed by Oliver Hunt.
+
+        Port over protection space authentication callback code from ResourceHandleMac.mm to
+        ResourceHandleCFNet.cpp.
+
+        * platform/network/ResourceHandle.h:
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::canRespondToProtectionSpace):
+        (WebCore::ResourceHandle::createCFURLConnection):
+        (WebCore::ResourceHandle::canAuthenticateAgainstProtectionSpace):
+        (WebCore::WebCoreSynchronousLoaderClient::canAuthenticateAgainstProtectionSpace):
+        * platform/network/mac/ResourceHandleMac.mm:
+        (-[WebCoreResourceHandleAsDelegate connection:canAuthenticateAgainstProtectionSpace:]): Add logging.
+
+2011-07-26  Sadrul Habib Chowdhury  <sadrul@chromium.org>
+
+        Add support for download='filename' attribute in anchors.
+        https://bugs.webkit.org/show_bug.cgi?id=64580
+
+        Reviewed by Adam Barth.
+
+        The download attribute allows the author of the hyperlink to cause the
+        browser to download the linked URL.  The author can also supply a
+        suggested file name in the attribute value.  This feature is a recent
+        addition to HTML to better support offline applications that use blob
+        URLs.  Traditionally, web sites use the HTTP Content-Disposition header
+        to trigger downloads, but that option isn't available when working
+        offline.
+
+        There is some question about whether we should initiate a download when
+        we receive a DOM-created click event.  This patch does initiate the
+        download, but we might revise that decision in the future as part of a
+        larger change in how WebKit treats the interaction between default
+        event handlers and DOM-created events.
+
+        Tests: fast/dom/HTMLAnchorElement/anchor-download.html
+               fast/dom/HTMLAnchorElement/anchor-nodownload.html
+               fast/dom/HTMLAnchorElement/anchor-download-unset.html
+               fast/dom/HTMLAnchorElement/anchor-nodownload-set.html
+
+        * html/HTMLAnchorElement.cpp:
+        (WebCore::HTMLAnchorElement::defaultEventHandler):
+        (WebCore::HTMLAnchorElement::handleClick):
+        * html/HTMLAnchorElement.h:
+        * html/HTMLAnchorElement.idl:
+        * html/HTMLAttributeNames.in:
+        * loader/EmptyClients.h:
+        (WebCore::EmptyFrameLoaderClient::startDownload):
+        * loader/FrameLoaderClient.h:
+
+2011-07-26  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Refactor automatically generated JS DOM bindings to replace operator new with static create methods
+        https://bugs.webkit.org/show_bug.cgi?id=64732
+
+        Reviewed by Oliver Hunt.
+
+        No new tests.
+
+        Replacing the public constructors in the automatically generated JS DOM bindings in CodeGeneratorJS.pm
+        with static create methods.  This is part of a larger refactoring effort to use static create methods
+        in the headers of the generated files (so as to be inline-able) in favor of public constructors throughout JSC.
+
+        * bindings/js/JSAudioConstructor.h:
+        (WebCore::JSAudioConstructor::create):
+        * bindings/js/JSDOMBinding.h:
+        (WebCore::createWrapper):
+        * bindings/js/JSDOMGlobalObject.h:
+        (WebCore::getDOMConstructor):
+        * bindings/js/JSDOMWindowCustom.cpp:
+        (WebCore::JSDOMWindow::history):
+        (WebCore::JSDOMWindow::location):
+        * bindings/js/JSDOMWindowShell.cpp:
+        (WebCore::JSDOMWindowShell::setWindow):
+        * bindings/js/JSDocumentCustom.cpp:
+        (WebCore::JSDocument::location):
+        * bindings/js/JSImageConstructor.h:
+        (WebCore::JSImageConstructor::create):
+        * bindings/js/JSImageDataCustom.cpp:
+        (WebCore::toJS):
+        * bindings/js/JSOptionConstructor.h:
+        (WebCore::JSOptionConstructor::create):
+        * bindings/js/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::initScript):
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (AddIncludesForTypeInImpl):
+        (AddIncludesForTypeInHeader):
+        (AddIncludesForType):
+        (GenerateHeader):
+        (GenerateImplementation):
+        (GenerateCallbackImplementation):
+        (GenerateConstructorDeclaration):
+        * bindings/scripts/test/JS/JSTestInterface.cpp:
+        (WebCore::JSTestInterfaceConstructor::create):
+        (WebCore::JSTestInterface::createPrototype):
+        * bindings/scripts/test/JS/JSTestInterface.h:
+        (WebCore::JSTestInterface::create):
+        (WebCore::JSTestInterfacePrototype::create):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
+        (WebCore::JSTestMediaQueryListListenerConstructor::create):
+        (WebCore::JSTestMediaQueryListListener::createPrototype):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
+        (WebCore::JSTestMediaQueryListListener::create):
+        (WebCore::JSTestMediaQueryListListenerPrototype::create):
+        * bindings/scripts/test/JS/JSTestObj.cpp:
+        (WebCore::JSTestObjConstructor::create):
+        (WebCore::JSTestObj::createPrototype):
+        * bindings/scripts/test/JS/JSTestObj.h:
+        (WebCore::JSTestObj::create):
+        (WebCore::JSTestObjPrototype::create):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
+        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::create):
+        (WebCore::JSTestSerializedScriptValueInterface::createPrototype):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
+        (WebCore::JSTestSerializedScriptValueInterface::create):
+        (WebCore::JSTestSerializedScriptValueInterfacePrototype::create):
+        * bridge/jni/jsc/JavaArrayJSC.cpp:
+        (JavaArray::convertJObjectToArray):
+        * bridge/jsc/BridgeJSC.cpp:
+        (JSC::Bindings::Instance::newRuntimeObject):
+        * bridge/objc/objc_utility.mm:
+        (JSC::Bindings::convertObjcValueToValue):
+        * bridge/qt/qt_runtime.cpp:
+        (JSC::Bindings::convertQVariantToValue):
+        * bridge/runtime_array.h:
+        (JSC::RuntimeArray::create):
+        * bridge/runtime_object.h:
+        (JSC::Bindings::RuntimeObject::create):
+
+2011-07-26  Xiaomei Ji  <xji@chromium.org>
+
+        --webkit-visual-word does not work in multi-line
+        https://bugs.webkit.org/show_bug.cgi?id=61344
+
+        Reviewed by Ryosuke Niwa.
+
+        Replace Position(node, offset, PositionIsOffsetInAnchor) with 
+        createPositionAvoidingIgnoredNode(node, offset) which takes care of creating position 
+        before/after <br/> etc. editingIgnoresContent node. 
+
+        When iterate InlineBox, replace prevLeafChild and nextLeafChild (which only returns 
+        InlineBox within the same line) with leftInlineBox and rightInlineBox (which returns 
+        InlineBox across multiple lines).
+
+        * editing/htmlediting.cpp:
+        (WebCore::createPositionAvoidingIgnoredNode):
+        * editing/htmlediting.h:
+        * editing/visible_units.cpp:
+        (WebCore::previousWordBreakInBoxInsideBlockWithSameDirectionality): Replace Position() with
+        createPositionAvoidingIgnoredNode().
+        (WebCore::leftmostPositionInRTLBoxInLTRBlock): Ditto.
+        (WebCore::rightmostPositionInLTRBoxInRTLBlock): Ditto.
+        (WebCore::nextWordBreakInBoxInsideBlockWithDifferentDirectionality): Ditto.
+        (WebCore::blockWithPreviousLineBox): Added.
+        (WebCore::previousRootInlineBox): Added.
+        (WebCore::blockWithNextLineBox): Added.
+        (WebCore::nextRootInlineBox): Added.
+        (WebCore::leftInlineBox): Added.
+        (WebCore::rightInlineBox): Added.
+        (WebCore::leftWordBoundary): Replace prevLeafChild/nextLeafChild with leftInlineBox()
+        and rightInlineBox().
+        (WebCore::rightWordBoundary): Ditto.
+        (WebCore::leftWordPositionAcrossBoundary): Ditto.
+        (WebCore::rightWordPositionAcrossBoundary): Ditto.
+
+2011-07-26  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=60778
+
+        Use after free because of line box culling optimization regression.
+
+        In the case of a child with no line box being removed (typically
+        a <br> in quirks mode), if there is no previous sibling with a line
+        box, then we have a potential problem with the culling optimization.
+
+        The culled inline may still have other leaf line box children, but
+        they may follow the removed <br>. In this case we can't rely on
+        them, since we need a line box that comes before the <br>.
+
+        The fix is to simply recur up to the parent if we are a culled inline
+        and could not find a previous line box.
+
+        Reviewed by Dan Bernstein.
+
+        Added editing/execCommand/crash-line-break-after-outdent.html
+
+        * rendering/RenderLineBoxList.cpp:
+        (WebCore::RenderLineBoxList::dirtyLinesFromChangedChild):
+
+2011-07-26  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9842889> Add a generic pictograph font family
+        https://bugs.webkit.org/show_bug.cgi?id=65197
+
+        Reviewed by Anders Carlsson.
+
+        Test: fast/css/font-family-pictograph.html
+
+        * WebCore.exp.in: Export Settings::setPictographFontFamily().
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::identifierForFamily): Added -webkit-pictograph.
+        * css/CSSFontSelector.cpp:
+        (WebCore::CSSFontSelector::addFontFaceRule): Ditto.
+        (WebCore::fontDataForGenericFamily): Ditto.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty): Ditto.
+        * css/CSSValueKeywords.in:
+        * inspector/front-end/CSSKeywordCompletions.js: Ditto.
+        * inspector/front-end/SourceCSSTokenizer.js: Ditto.
+        (WebInspector.SourceCSSTokenizer):
+        * inspector/front-end/SourceCSSTokenizer.re2js: Ditto.
+        * page/Settings.cpp:
+        (WebCore::Settings::pictographFontFamily): Added this getter.
+        (WebCore::Settings::setPictographFontFamily): Added this setter.
+        * page/Settings.h:
+        * platform/graphics/FontDescription.h: Added PictographFamily to the GenericFamilyType enum.
+
+2011-07-26  Viet-Trung Luu  <viettrungluu@chromium.org>
+
+        Improve (i.e., speed up) .gyp(i) files for Chromium
+        https://bugs.webkit.org/show_bug.cgi?id=65032
+
+        Reviewed by Adam Barth.
+
+        This re-applies r91595 with the source exclusion fixed.
+
+        Test by building (in all supported configurations).
+
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+
+2011-07-26  Alexis Menard  <alexis.menard@openbossa.org>
+
+        [Qt] Disable video support on linux if the dependencies are not found.
+
+        If we can't find the necessary dependencies to build the GStreamer media player
+        we disable the video support. This is related to http://trac.webkit.org/changeset/91752.
+
+        Reviewed by Holger Freyther.
+
+        No new tests, it's a build fix.
+
+        * features.pri:
+
+2011-07-26  Evan Martin  <evan@chromium.org>
+
+        regression: generating CSSValueKeywords should not print by default
+        https://bugs.webkit.org/show_bug.cgi?id=65195
+
+        Reviewed by Tony Chang.
+
+        Some refactoring made some callers no longer pass the final 'beQuiet'
+        parameter to applyPreprocessor.  This flag was only used to print the
+        input filename anyway, so remove the flag and just make the caller
+        print the filename if it wants this.
+
+        * bindings/scripts/IDLParser.pm:
+        (Parse): print before calling applyPreprocessor, if necessary.
+        * bindings/scripts/preprocessor.pm:
+        (applyPreprocessor): remove the beQuiet flag; just always be quiet.
+
+2011-07-26  Raphael Kubo da Costa  <kubo@profusion.mobi>
+
+        [EFL] Do not crash on the isSlider() assert.
+        https://bugs.webkit.org/show_bug.cgi?id=65191
+
+        Reviewed by Antonio Gomes.
+
+        RenderThemeEfl's paintSliderThumb() just forwarded the call to
+        paintSliderTrack(), which, on its turn, called code that assumed that
+        object->isSlider() was true. That does not seem to be the case for
+        slidethumbs, so any page with an <input type="range"> tag would crash
+        WebKit.
+
+        We now do what RenderThemeQt does, and assume everything was properly
+        done in the call to paintSliderTrack().
+
+        No new tests, as this has been uncovered by an existing test.
+
+        * platform/efl/RenderThemeEfl.cpp:
+        (WebCore::RenderThemeEfl::paintSliderThumb):
+
+2011-07-26  Brian Salomon  <bsalomon@google.com>
+
+        [SKIA] Make the skia GL context current when drawing text to gpu backed platform context.
+        https://bugs.webkit.org/show_bug.cgi?id=65182
+
+        Reviewed by Stephen White.
+
+        No new tests. Not sure how to test wrong-ctx bugs in layout tests.
+
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::paintSkiaText):
+
+2011-07-26  Emil A Eklund  <eae@chromium.org>
+
+        RenderText::absoluteRectsForRange() and absoluteQuadsForRange() have nearly duplicate code
+        https://bugs.webkit.org/show_bug.cgi?id=62478
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/dom/Range/getClientRects.html
+
+        * platform/graphics/FloatRect.h:
+        (WebCore::FloatRect::isZero):
+        Add izZero method, unlike isEmpty this checks if both the width and the
+        height are zero.
+
+        * rendering/RenderText.cpp:
+        (WebCore::absoluteQuadForTextBox):
+        (WebCore::RenderText::absoluteRectsForRange):
+        (WebCore::RenderText::absoluteQuadsForRange):
+        Break duplicate code out of absoluteRectsForRange and
+        absoluteQuadsForRange into shared static function.
+        
+        Fix what I presume to be a bug in the absoluteQuadsForRange where the
+        logicalHeight was always used to set the size in absoluteQuadForTextBox
+        as oppsued to the absoluteRectsForRange implementation that uses the
+        logicalWidth or the logicalHeight depending on whether it's horizontal or
+        vertical.
+
+2011-07-26  Alexandru Chiculita  <achicu@adobe.com>
+
+        [CSSRegions] Collect flowed elements in different render element
+        https://bugs.webkit.org/show_bug.cgi?id=64516
+
+        All the RenderObjects that have a specified "flow" name are moved out of the
+        normal flow. A RenderFlowThread will collect all such RenderObjects. There is
+        a RenderFlowThread for each flow name. The new RenderFlowThread is an anonymous
+        RenderBlock that is positioned absolute and will not render directly. In a
+        different bug/patch we will add RenderRegion that will take care of rendering the
+        RenderFlowThread on screen.
+
+        Reviewed by Simon Fraser.
+
+        Tests: fast/regions/webkit-flow-renderer-layer.html
+               fast/regions/webkit-flow-renderer-nested.html
+               fast/regions/webkit-flow-renderer.html
+
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/Node.cpp:
+        (WebCore::Node::diff):
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRenderingContext::NodeRenderingContext):
+        (WebCore::NodeRenderingContext::setStyle):
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+        (WebCore::NodeRenderingContext::parentRenderer):
+        (WebCore::NodeRenderingContext::moveToFlowThreadIfNeeded):
+        (WebCore::NodeRendererFactory::createRendererIfNeeded):
+        * dom/NodeRenderingContext.h:
+        (WebCore::NodeRenderingContext::hasFlowThreadParent):
+        (WebCore::NodeRenderingContext::parentFlowRenderer):
+        * rendering/RenderFlowThread.cpp: Added.
+        (WebCore::RenderFlowThread::RenderFlowThread):
+        (WebCore::RenderFlowThread::createFlowThreadStyle):
+        (WebCore::RenderFlowThread::nextRendererForNode):
+        (WebCore::RenderFlowThread::previousRendererForNode):
+        (WebCore::RenderFlowThread::addChild):
+        (WebCore::RenderFlowThread::removeChild):
+        * rendering/RenderFlowThread.h: Added.
+        (WebCore::toRenderFlowThread):
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::collectLayers):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isRenderFlowThread):
+        * rendering/RenderTreeAsText.cpp:
+        (WebCore::RenderTreeAsText::writeRenderObject):
+        (WebCore::writeLayers):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::renderFlowThreadWithName):
+        * rendering/RenderView.h:
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+
+2011-07-26  Patrick Dubroy  <dubroy@chromium.org>
+
+        Filename text in file upload controls is not aligned with button text on
+        chromium-linux, chromium-win, and gtk.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64692
+
+        The fix is to not include the margin, border, and padding in the calculation,
+        because those are already accounted for by RenderBlock::baselinePosition().
+
+        Reviewed by Dimitri Glazkov.
+
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::paintObject):
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91746.
+        http://trac.webkit.org/changeset/91746
+        https://bugs.webkit.org/show_bug.cgi?id=65180
+
+        It broke SL build (Requested by Ossy on #webkit).
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Better represent custom getters in the properties pane
+        https://bugs.webkit.org/show_bug.cgi?id=16734
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/runtime/runtime-getProperties.html
+
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+
+2011-07-26  Alexis Menard  <alexis.menard@openbossa.org>
+
+        Reviewed by Andreas Kling.
+
+        [Qt] Change default backend to use GStreamer on Linux and QuickTime on Mac.
+        https://bugs.webkit.org/show_bug.cgi?id=63472
+
+        Enable the GStreamer backend and the QuickTime backend as default media players
+        for the Qt port on Mac and Linux. QtMultimedia is now a fallback option that you
+        can enable by passing DEFINES+=USE_QT_MULTIMEDIA=1 to enforce its usage.
+
+        No new tests. The media layout tests are disabled on the Qt port but hopefully with this
+        switch we can enable them again.
+
+        * WebCore.pri:
+        * WebCore.pro:
+        * features.pri:
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Implement setPropertyValue using evaluate and callFunctionOn
+        https://bugs.webkit.org/show_bug.cgi?id=65112
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/runtime/runtime-setPropertyValue.html
+
+        * inspector/InjectedScript.cpp:
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject.prototype.setPropertyValue.evaluatedCallback.setPropertyValue):
+        (WebInspector.RemoteObject.prototype.setPropertyValue.evaluatedCallback):
+        (WebInspector.RemoteObject.prototype.setPropertyValue.propertySetCallback):
+        (WebInspector.RemoteObject.prototype.setPropertyValue):
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Re-applying r91665 and r91668 with JSC issues fixed.
+
+        Web Inspector: use dedicated type for object id in the protocol.
+        Web Inspector: refactor remote object structure to contain value for primitive values.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65103
+        https://bugs.webkit.org/show_bug.cgi?id=65110
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorValues.cpp:
+        (WebCore::InspectorBasicValue::writeJSON):
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._format):
+        (WebInspector.ConsoleView.prototype._formatAsArrayEntry):
+        (WebInspector.ConsoleMessage.prototype._format):
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeElement.prototype._createTooltipForNode.setTooltip):
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+        * inspector/front-end/PropertiesSidebarPane.js:
+        (WebInspector.PropertiesSidebarPane.prototype.update.nodePrototypesReady):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject):
+        (WebInspector.RemoteObject.fromPrimitiveValue):
+        (WebInspector.RemoteObject.fromPayload):
+        (WebInspector.RemoteObject.prototype.get subtype):
+        (WebInspector.RemoteObject.prototype.callFunction):
+        (WebInspector.LocalJSONObject.prototype.get description):
+        (WebInspector.LocalJSONObject.prototype.get type):
+        (WebInspector.LocalJSONObject.prototype.get subtype):
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype._showPopup.showObjectPopup):
+        (WebInspector.SourceFrame.prototype._showPopup):
+        * inspector/front-end/inspector.js:
+        (WebInspector.log.logMessage):
+        (WebInspector.log):
+        (WebInspector.inspect):
+
+2011-07-26  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Prepare animVal support - phase 2
+        https://bugs.webkit.org/show_bug.cgi?id=65167
+
+        Reviewed by Dirk Schulze.
+
+        Next patch preparing animVal support. Modify the SVGAnimatedProperty* classes & macros to assure that calling someElement->someProperty()
+        will return the animVal, when the property is being animated. Not yet hooked into SVGAnimateElement, this is just a preparation.
+
+        Doesn't affect any tests, yet.
+
+        * svg/SVGPathElement.cpp: Adapt to SVGAnimatedProperty::lookupWrapper changes (new template parameters have been added).
+        (WebCore::SVGPathElement::svgAttributeChanged):
+        * svg/SVGPathSegWithContext.h: Ditto.
+        (WebCore::SVGPathSegWithContext::animatedProperty):
+        * svg/SVGPolyElement.cpp: Ditto.
+        (WebCore::SVGPolyElement::parseMappedAttribute):
+        * svg/properties/SVGAnimatedEnumerationPropertyTearOff.h: Implement currentAnimatedValue, an abstract way to retrieve the underlying animated value for any animated type.
+        (WebCore::SVGAnimatedEnumerationPropertyTearOff::currentAnimatedValue): Forward call to SVGAnimatedStaticPropertyTearOff<int>, our base.
+        * svg/properties/SVGAnimatedListPropertyTearOff.h:
+        (WebCore::SVGAnimatedListPropertyTearOff::isAnimating): Returns whether this property is being animated or not.
+        (WebCore::SVGAnimatedListPropertyTearOff::currentAnimatedValue):
+        * svg/properties/SVGAnimatedProperty.h:
+        (WebCore::SVGAnimatedProperty::updateAnimVal): Will be used from SVGAnim*Element to update the current animVal, exposed to JS.
+        (WebCore::SVGAnimatedProperty::lookupOrCreateWrapper): Share more code with lookupWrapper.
+        (WebCore::SVGAnimatedProperty::lookupWrapper): Cleanup code, avoid doing any work for non-SVGElement derived objects, like SVGViewSpec.
+        * svg/properties/SVGAnimatedPropertyMacros.h: Make all lowerProperty() calls (eg. myRectElement->x()) return the animVal, if the property is being animated.
+        * svg/properties/SVGAnimatedPropertyTearOff.h: Main logic for the new animVal stuff.
+        (WebCore::SVGAnimatedPropertyTearOff::isAnimating):
+        (WebCore::SVGAnimatedPropertyTearOff::currentAnimatedValue):
+        (WebCore::SVGAnimatedPropertyTearOff::updateAnimVal):
+        (WebCore::SVGAnimatedPropertyTearOff::SVGAnimatedPropertyTearOff):
+        * svg/properties/SVGAnimatedStaticPropertyTearOff.h:
+        (WebCore::SVGAnimatedStaticPropertyTearOff::isAnimating):
+        (WebCore::SVGAnimatedStaticPropertyTearOff::currentAnimatedValue):
+        * svg/properties/SVGPropertyTearOff.h:
+        (WebCore::SVGPropertyTearOff::updateAnimVal):
+
+2011-07-26  Shinya Kawanaka  <shinyak@google.com>
+
+        Uses isHTMLSpace to normalize white spaces.
+        https://bugs.webkit.org/show_bug.cgi?id=57746
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/forms/option-strip-unicode-spaces.html
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+          Uses isHTMLSpace to trim and replace white spaces.
+
+2011-07-25  Ryuan Choi  <ryuan.choi@samsung.com>
+
+        [CMAKE] Split JSC related files from WebCore/CMakeLists.txt
+        https://bugs.webkit.org/show_bug.cgi?id=61350
+
+        Reviewed by Daniel Bates.
+
+        No new tests, just moving jsc related files from CMakeLists.txt to UseJSC.cmake.
+
+        * CMakeLists.txt:
+        * UseJSC.cmake:
+
+2011-07-25  Dan Bernstein  <mitz@apple.com>
+
+        Fix the build by committing a rename in this file that I neglected to include in the previous commit.
+
+        * css/CSSFontFaceSource.h:
+
+2011-07-25  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9835028> Font loading during layout can cause layout code to be re-entered via resource load delegate
+        https://bugs.webkit.org/show_bug.cgi?id=65123
+
+        Reviewed by Anders Carlsson and Darin Adler.
+
+        Since CSSFontFaceSource::getFontData() can get called during layout, avoid calling out to loader
+        code from under it, and instead defer that work using a zero-delay timer.
+
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::~CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::getFontData): Rather than starting the font load here, schedule
+        a zero-delay timer to do it.
+        (WebCore::CSSFontFaceSource::startLoadingTimerFired): Added. Starts loading the font if needed.
+        * css/CSSFontFaceSource.h:
+
 2011-07-25  Al Patrick  <apatrick@chromium.org>
 
         Removed support for the GL_latch_CHROMIUM extension which Chromium no longer supports.