Re-land 'Fold out-of-flow objects into anonymous blocks when removing children'

Re-land 'Fold out-of-flow objects into anonymous blocks when removing children'

Another attempt at https://codereview.chromium.org/1406163003.

Sometimes when we remove a child we end up with a float or out-of-flow object beside
an anonymous block. When that happens, fold the float/out-of-flow object into the
anonymous box as that is where it would have lived if they were siblings in the
first place.

BUG=322039
Committed: https://crrev.com/c579aa1f40cf26e7fe3c21e5cd9e0bc7b81497a5
Cr-Commit-Position: refs/heads/master@{#367074}

[rhogan, 2015-12-24 09:07:44]

Description was changed from

==========
bug 322039

BUG=322039
==========

to

==========
Re-land 'Fold out-of-flow objects into anonymous blocks when removing children'

Sometimes when we remove a child we end up with a float or out-of-flow object
beside
an anonymous block. When that happens, fold the float/out-of-flow object into
the
anonymous box as that is where it would have lived if they were siblings in the
first place.

BUG=322039
==========

[rhogan, 2015-12-24 09:09:13]

Description was changed from

==========
Re-land 'Fold out-of-flow objects into anonymous blocks when removing children'

Sometimes when we remove a child we end up with a float or out-of-flow object
beside
an anonymous block. When that happens, fold the float/out-of-flow object into
the
anonymous box as that is where it would have lived if they were siblings in the
first place.

BUG=322039
==========

to

==========
Re-land 'Fold out-of-flow objects into anonymous blocks when removing children'

Another attempt at https://codereview.chromium.org/1406163003.

Sometimes when we remove a child we end up with a float or out-of-flow object
beside
an anonymous block. When that happens, fold the float/out-of-flow object into
the
anonymous box as that is where it would have lived if they were siblings in the
first place.

BUG=322039
==========

[rhogan, 2015-12-24 09:09:13]

robhogan@gmail.com changed reviewers:
+ mstensho@opera.com

[mstensho (USE GERRIT), 2015-12-29 13:42:38]

lgtm, but I think there's an unintended accidental in TestExpectations.

https://codereview.chromium.org/1543283002/diff/1/third_party/WebKit/LayoutTe...
File third_party/WebKit/LayoutTests/TestExpectations (right):

https://codereview.chromium.org/1543283002/diff/1/third_party/WebKit/LayoutTe...
third_party/WebKit/LayoutTests/TestExpectations:261: 
-"#"?

[rhogan, 2015-12-29 15:36:06]

The CQ bit was checked by robhogan@gmail.com

[rhogan, 2015-12-29 15:36:07]

The patchset sent to the CQ was uploaded after l-g-t-m from mstensho@opera.com
Link to the patchset: https://codereview.chromium.org/1543283002/#ps20001
(title: "Updated")

[commit-bot: I haz the power, 2015-12-29 15:36:09]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1543283002/20001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1543283002/20001

[commit-bot: I haz the power, 2015-12-29 16:58:57]

Committed patchset #2 (id:20001)

[commit-bot: I haz the power, 2015-12-29 17:00:07]

Description was changed from

==========
Re-land 'Fold out-of-flow objects into anonymous blocks when removing children'

Another attempt at https://codereview.chromium.org/1406163003.

Sometimes when we remove a child we end up with a float or out-of-flow object
beside
an anonymous block. When that happens, fold the float/out-of-flow object into
the
anonymous box as that is where it would have lived if they were siblings in the
first place.

BUG=322039
==========

to

==========
Re-land 'Fold out-of-flow objects into anonymous blocks when removing children'

Another attempt at https://codereview.chromium.org/1406163003.

Sometimes when we remove a child we end up with a float or out-of-flow object
beside
an anonymous block. When that happens, fold the float/out-of-flow object into
the
anonymous box as that is where it would have lived if they were siblings in the
first place.

BUG=322039

Committed: https://crrev.com/c579aa1f40cf26e7fe3c21e5cd9e0bc7b81497a5
Cr-Commit-Position: refs/heads/master@{#367074}
==========

[commit-bot: I haz the power, 2015-12-29 17:00:09]

Patchset 2 (id:??) landed as
https://crrev.com/c579aa1f40cf26e7fe3c21e5cd9e0bc7b81497a5
Cr-Commit-Position: refs/heads/master@{#367074}

[inferno, 2015-12-30 18:32:49]

A revert of this CL (patchset #2 id:20001) has been created in
https://codereview.chromium.org/1558433003/ by inferno@chromium.org.

The reason for reverting is: Ton of use-after-free security regressions.
BUG=573281.