TextControlElement::selection() should return SelectionInDOMTree.

third_party/WebKit/Source/core/html/TextControlElement.h

Index: third_party/WebKit/Source/core/html/TextControlElement.h
diff --git a/third_party/WebKit/Source/core/html/TextControlElement.h b/third_party/WebKit/Source/core/html/TextControlElement.h
index 8667c1ff259bf92e819da9fa2c7c120b14fa2c63..b40cb00231ae8e399c1f297181019f09fd3fb167 100644
--- a/third_party/WebKit/Source/core/html/TextControlElement.h
+++ b/third_party/WebKit/Source/core/html/TextControlElement.h
@@ -28,13 +28,13 @@
 
 #include "base/gtest_prod_util.h"
 #include "core/CoreExport.h"
+#include "core/editing/SelectionTemplate.h"
 #include "core/editing/VisiblePosition.h"
 #include "core/html/HTMLFormControlElementWithState.h"
 
 namespace blink {
 
 class ExceptionState;
-class Range;
 
 enum TextFieldSelectionDirection {
   SelectionHasNoDirection,
@@ -100,7 +100,7 @@ class CORE_EXPORT TextControlElement : public HTMLFormControlElementWithState {
   bool setSelectionRange(unsigned start,
                          unsigned end,
                          TextFieldSelectionDirection = SelectionHasNoDirection);
-  Range* selection() const;
+  SelectionInDOMTree selection() const;
 
   virtual bool supportsAutocapitalize() const = 0;
   virtual const AtomicString& defaultAutocapitalize() const = 0;