Fix HTML parser CDATA edge-case and sync state names with spec

third_party/WebKit/Source/core/html/parser/HTMLTokenizer.cpp

 /*
  * Copyright (C) 2008 Apple Inc. All Rights Reserved.
  * Copyright (C) 2009 Torch Mobile, Inc. http://www.torchmobile.com/
  * Copyright (C) 2010 Google, Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
@@ skipping 1477 matching lines @@
       if (cc == '>')
         return emitAndResumeIn(source, HTMLTokenizer::DataState);
       else if (cc == kEndOfFileMarker)
         return emitAndReconsumeIn(source, HTMLTokenizer::DataState);
       HTML_ADVANCE_TO(BogusDOCTYPEState);
     }
     END_STATE()
 
     HTML_BEGIN_STATE(CDATASectionState) {
       if (cc == ']')
-        HTML_ADVANCE_TO(CDATASectionRightSquareBracketState);
+        HTML_ADVANCE_TO(CDATASectionBracketState);
       else if (cc == kEndOfFileMarker)
         HTML_RECONSUME_IN(DataState);
       else {
         bufferCharacter(cc);
         HTML_ADVANCE_TO(CDATASectionState);
       }
     }
     END_STATE()
 
-    HTML_BEGIN_STATE(CDATASectionRightSquareBracketState) {
+    HTML_BEGIN_STATE(CDATASectionBracketState) {
       if (cc == ']')
-        HTML_ADVANCE_TO(CDATASectionDoubleRightSquareBracketState);
+        HTML_ADVANCE_TO(CDATASectionEndState);
       else {
         bufferCharacter(']');
         HTML_RECONSUME_IN(CDATASectionState);
       }
     }
 
-    HTML_BEGIN_STATE(CDATASectionDoubleRightSquareBracketState) {
-      if (cc == '>')
+    HTML_BEGIN_STATE(CDATASectionEndState) {
+      if (cc == ']') {
+        bufferCharacter(']');
+        HTML_ADVANCE_TO(CDATASectionEndState);
+      } else if (cc == '>') {
         HTML_ADVANCE_TO(DataState);
-      else {
+      } else {
         bufferCharacter(']');
         bufferCharacter(']');
         HTML_RECONSUME_IN(CDATASectionState);
       }
     }
     END_STATE()
   }
 
   ASSERT_NOT_REACHED();
   return false;
@@ skipping 47 matching lines @@
   }
 
   return true;
 }
 
 inline void HTMLTokenizer::parseError() {
   DVLOG(1) << "Not implemented.";
 }
 
 }  // namespace blink