Fix setHistoryItemStateForCommit for back/forward in subframes.

third_party/WebKit/Source/core/loader/FrameLoader.h

 /*
  * Copyright (C) 2006, 2007, 2008, 2009, 2011 Apple Inc. All rights reserved.
  * Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/)
  * Copyright (C) Research In Motion Limited 2009. All rights reserved.
  * Copyright (C) 2011 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
@@ skipping 196 matching lines @@
     bool shouldPerformFragmentNavigation(bool isFormSubmission, const String& httpMethod, FrameLoadType, const KURL&);
     void processFragment(const KURL&, LoadStartType);
 
     void startLoad(FrameLoadRequest&, FrameLoadType, NavigationPolicy);
 
     enum class HistoryNavigationType {
         DifferentDocument,
         Fragment,
         HistoryApi
     };
-    void setHistoryItemStateForCommit(HistoryCommitType, HistoryNavigationType);
+    void setHistoryItemStateForCommit(FrameLoadType, HistoryCommitType, HistoryNavigationType);
 
     void loadInSameDocument(const KURL&, PassRefPtr<SerializedScriptValue> stateObject, FrameLoadType, HistoryLoadType, ClientRedirectPolicy, Document*);
 
     void scheduleCheckCompleted();
 
     void detachDocumentLoader(Member<DocumentLoader>&);
 
     std::unique_ptr<TracedValue> toTracedValue() const;
     void takeObjectSnapshot() const;
 
@@ skipping 57 matching lines @@
 
     SandboxFlags m_forcedSandboxFlags;
 
     bool m_dispatchingDidClearWindowObjectInMainWorld;
     bool m_protectProvisionalLoader;
 };
 
 } // namespace blink
 
 #endif // FrameLoader_h