Source/WebCore/ChangeLog

Index: Source/WebCore/ChangeLog
===================================================================
--- Source/WebCore/ChangeLog	(revision 92737)
+++ Source/WebCore/ChangeLog	(working copy)
@@ -1,3 +1,13516 @@
+2011-08-09  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Resources panel does not show main resource cookies.
+        https://bugs.webkit.org/show_bug.cgi?id=65770
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/resource-main-cookies.php
+
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::allResourcesURLsForFrame):
+        (WebCore::InspectorPageAgent::getCookies):
+        (WebCore::InspectorPageAgent::deleteCookie):
+
+2011-08-09  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92670.
+        http://trac.webkit.org/changeset/92670
+        https://bugs.webkit.org/show_bug.cgi?id=65905
+
+        It broke 3 inspector tests (Requested by Ossy on #webkit).
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::getProperties):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::getProperties):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.ondblclick):
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject.prototype.getOwnProperties):
+        (WebInspector.RemoteObject.prototype.getAllProperties):
+        (WebInspector.RemoteObject.prototype._getProperties.remoteObjectBinder):
+        (WebInspector.RemoteObject.prototype._getProperties):
+        (WebInspector.RemoteObjectProperty):
+        * inspector/front-end/inspector.css:
+        (.section .properties .value.dimmed):
+
+2011-08-09  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: there should be a way to tell what properties are non-enumerable when expanding objects.
+        https://bugs.webkit.org/show_bug.cgi?id=65518
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::getProperties):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::getProperties):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.ondblclick):
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject.prototype.getOwnProperties):
+        (WebInspector.RemoteObject.prototype.getAllProperties):
+        (WebInspector.RemoteObjectProperty):
+        * inspector/front-end/inspector.css:
+        (.section .properties .dimmed):
+
+2011-08-08  Steve Block  <steveblock@google.com>
+
+        Removes V8's JavaInstanceJobject, JavaClassJobject and JavaFieldJobject.
+        https://bugs.webkit.org/show_bug.cgi?id=57859
+
+        Reviewed by Alexey Proskuryakov.
+
+        This effectively reverts the changes made in Bugs 55383, 57533 and
+        55766. These classes were only used by Android. In the future, Android
+        will use the Chromium WebKit API to implement the Java bridge.
+
+        Towards this goal, this patch ...
+        - Simplfies the JavaInstance, JavaClass and JavaField interfaces for V8.
+          These interfaces will be implemented in Chromium's WebKit layer.
+        - Adds a JavaMethod interface for V8
+        - Removes the jvalue <-> JavaValue conversion functions for V8, which are
+          now superfluous
+        - Removes the calls to JavaInstance::begin()/end() for V8, which are now
+          superfluous
+
+        Will be covered by existing tests once the Chromium WebKit layer is complete.
+
+        * WebCore.gypi:
+        * bridge/jni/v8/JNIUtilityPrivate.cpp:
+        * bridge/jni/v8/JNIUtilityPrivate.h:
+        * bridge/jni/v8/JavaClassJobjectV8.cpp: Removed.
+        * bridge/jni/v8/JavaFieldJobjectV8.cpp: Removed.
+        * bridge/jni/v8/JavaFieldJobjectV8.h: Removed.
+        * bridge/jni/v8/JavaFieldV8.h:
+        * bridge/jni/v8/JavaInstanceJobjectV8.cpp: Removed.
+        * bridge/jni/v8/JavaInstanceJobjectV8.h: Removed.
+        * bridge/jni/v8/JavaInstanceV8.h:
+        * bridge/jni/v8/JavaMethodV8.h:
+        (JSC::Bindings::JavaMethod::~JavaMethod):
+        * bridge/jni/v8/JavaNPObjectV8.cpp:
+        (JSC::Bindings::JavaNPObjectHasMethod):
+        (JSC::Bindings::JavaNPObjectInvoke):
+        (JSC::Bindings::JavaNPObjectHasProperty):
+        (JSC::Bindings::JavaNPObjectGetProperty):
+
+2011-08-08  Chris Rogers  <crogers@google.com>
+
+        Fix thread-safety of AudioNode deletion
+        https://bugs.webkit.org/show_bug.cgi?id=65888
+
+        Reviewed by Kenneth Russell
+
+        No new tests - JavaScript API is not affected.
+
+        * webaudio/AudioContext.cpp:
+        (WebCore::AudioContext::AudioContext):
+        (WebCore::AudioContext::constructCommon):
+        (WebCore::AudioContext::~AudioContext):
+        (WebCore::AudioContext::uninitialize):
+        (WebCore::AudioContext::handlePostRenderTasks):
+        (WebCore::AudioContext::scheduleNodeDeletion):
+        (WebCore::AudioContext::deleteMarkedNodesDispatch):
+        (WebCore::AudioContext::deleteMarkedNodes):
+        * webaudio/AudioContext.h:
+
+2011-08-08  Chris Marrin  <cmarrin@apple.com>
+
+        Fix build breakage caused by http://trac.webkit.org/changeset/92651
+
+        Unreviewed.
+
+        * WebCore.exp.in:
+
+2011-08-08  Chris Marrin  <cmarrin@apple.com>
+
+        Logic to compute visible display rect in GraphicsLayerCA::syncCompositingState
+        https://bugs.webkit.org/show_bug.cgi?id=65708
+
+        Add logic to syncCompositingState to compute the visible rect for each
+        layer. This can be used to synchronously render the visible tiles of a
+        TiledLayer and avoid the flashing that often occurs when tiles are rendered
+        asynchronously. A new synchronouslyDisplayTilesInRect is also added to do
+        the actual rendering, but the call is not currently being made.
+
+        Reviewed by Simon Fraser.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::syncCompositingStateForThisFrame):
+        * platform/graphics/GraphicsLayer.h:
+        (WebCore::GraphicsLayer::syncCompositingState):
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::syncCompositingState):
+        (WebCore::GraphicsLayerCA::recursiveCommitChanges):
+        (WebCore::GraphicsLayerCA::platformCALayerPaintContents):
+        (WebCore::GraphicsLayerCA::updateSublayerList):
+        (WebCore::GraphicsLayerCA::swapFromOrToTiledLayer):
+        * platform/graphics/ca/GraphicsLayerCA.h:
+        * platform/graphics/ca/PlatformCALayer.h:
+        * platform/graphics/ca/mac/PlatformCALayerMac.mm:
+        (PlatformCALayer::synchronouslyDisplayTilesInRect):
+        * platform/graphics/transforms/TransformState.cpp:
+        (WebCore::TransformState::operator=):
+        * platform/graphics/transforms/TransformState.h:
+        (WebCore::TransformState::TransformState):
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::flushPendingLayerChanges):
+
+2011-08-08  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92619.
+        http://trac.webkit.org/changeset/92619
+        https://bugs.webkit.org/show_bug.cgi?id=65881
+
+        This patch breaks chromium canary (Requested by jianli on
+        #webkit).
+
+        * bindings/v8/V8Binding.h:
+        * bindings/v8/V8GCController.cpp:
+        (WebCore::globalHandleMap):
+        (WebCore::enumerateGlobalHandles):
+        (WebCore::V8GCController::registerGlobalHandle):
+        (WebCore::V8GCController::unregisterGlobalHandle):
+        * bindings/v8/V8HiddenPropertyName.cpp:
+        (WebCore::V8HiddenPropertyName::createString):
+        * bindings/v8/V8HiddenPropertyName.h:
+        * bindings/v8/V8LazyEventListener.cpp:
+        (WebCore::V8LazyEventListener::prepareListenerObject):
+        * bindings/v8/V8NPObject.cpp:
+        * bindings/v8/V8Proxy.cpp:
+        (WebCore::V8Proxy::checkNewLegal):
+        * bindings/v8/V8Utilities.h:
+        (WebCore::AllowAllocation::AllowAllocation):
+        (WebCore::AllowAllocation::~AllowAllocation):
+        (WebCore::SafeAllocation::newInstance):
+        * bindings/v8/WorkerContextExecutionProxy.cpp:
+        (WebCore::WorkerContextExecutionProxy::WorkerContextExecutionProxy):
+        (WebCore::WorkerContextExecutionProxy::initV8):
+        * bindings/v8/WorkerContextExecutionProxy.h:
+        * bindings/v8/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::scheduleExecutionTermination):
+
+2011-08-08  Scott Byer  <scottbyer@chromium.org>
+
+        Scroll animator changes to nail the framerate
+        https://bugs.webkit.org/show_bug.cgi?id=65645
+
+        Reviewed by James Robinson.
+
+        Partial test in ScrollAnimatorNoneTest::Enabled.
+
+        * platform/ScrollAnimatorNone.cpp:
+        (WebCore::ScrollAnimatorNone::PerAxisData::PerAxisData):
+        (WebCore::ScrollAnimatorNone::PerAxisData::updateDataFromParameters):
+        (WebCore::ScrollAnimatorNone::PerAxisData::animateScroll):
+        (WebCore::ScrollAnimatorNone::ScrollAnimatorNone):
+        (WebCore::ScrollAnimatorNone::~ScrollAnimatorNone):
+        (WebCore::ScrollAnimatorNone::scroll):
+        (WebCore::ScrollAnimatorNone::scrollToOffsetWithoutAnimation):
+        (WebCore::ScrollAnimatorNone::animationTimerFired):
+        (WebCore::ScrollAnimatorNone::stopAnimationTimerIfNeeded):
+        * platform/ScrollAnimatorNone.h:
+
+2011-08-08  Emil A Eklund  <eae@chromium.org>
+
+        Switch legacy flexbox to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=65340
+
+        Reviewed by Eric Seidel.
+
+        No new tests, no new functionality.
+
+        * rendering/RenderDeprecatedFlexibleBox.cpp:
+        (WebCore::RenderDeprecatedFlexibleBox::calcHorizontalPrefWidths):
+        (WebCore::RenderDeprecatedFlexibleBox::calcVerticalPrefWidths):
+        (WebCore::RenderDeprecatedFlexibleBox::computePreferredLogicalWidths):
+        (WebCore::RenderDeprecatedFlexibleBox::layoutBlock):
+        (WebCore::RenderDeprecatedFlexibleBox::layoutHorizontalBox):
+        (WebCore::RenderDeprecatedFlexibleBox::layoutVerticalBox):
+        (WebCore::RenderDeprecatedFlexibleBox::placeChild):
+        (WebCore::RenderDeprecatedFlexibleBox::allowedChildFlex):
+        * rendering/RenderDeprecatedFlexibleBox.h:
+
+2011-08-08  Emil A Eklund  <eae@chromium.org>
+
+        Switch RenderStyle to to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=65208
+
+        Reviewed by Eric Seidel.
+
+        No new tests, no new functionality.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::addShadowOverflow):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::applyTransform):
+        (WebCore::calcRadiiFor):
+        (WebCore::RenderStyle::getRoundedBorderFor):
+        (WebCore::RenderStyle::getRoundedInnerBorderFor):
+        * rendering/style/RenderStyle.h:
+        * rendering/style/ShadowData.cpp:
+        (WebCore::ShadowData::adjustRectForShadow):
+
+2011-08-08  Cris Neckar  <cdn@chromium.org>
+
+        Remove counter nodes from the tree and fix-up children when they are removed from the counter map.
+        https://bugs.webkit.org/show_bug.cgi?id=65346
+
+        Reviewed by Adam Barth.
+
+        Covered by existing CSS counter tests.
+
+        * rendering/CounterNode.cpp:
+        (WebCore::CounterNode::~CounterNode):
+
+2011-08-08  Tony Chang  <tony@chromium.org>
+
+        implement basic horizontal flexing
+        https://bugs.webkit.org/show_bug.cgi?id=65045
+
+        Reviewed by David Hyatt.
+
+        Test: css3/flexbox/001.html
+
+        * css/CSSPrimitiveValueMappings.h:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::computeLogicalWidth):
+        * rendering/RenderFlexibleBox.cpp:
+        (WebCore::RenderFlexibleBox::FlexibleBoxIterator::FlexibleBoxIterator): flexitem iterator
+        (WebCore::RenderFlexibleBox::FlexibleBoxIterator::first):
+        (WebCore::RenderFlexibleBox::FlexibleBoxIterator::next):
+        (WebCore::RenderFlexibleBox::FlexibleBoxIterator::reset):
+        (WebCore::RenderFlexibleBox::layoutBlock):
+        (WebCore::preferredFlexItemContentWidth): Returns the intrinsic size of a flex item's content.
+        (WebCore::RenderFlexibleBox::layoutHorizontalBlock): Runs the flex algorithm
+        (WebCore::preferredSizeForMarginsAndPadding):
+        (WebCore::RenderFlexibleBox::computePreferredSize): Calculate the preferred size of the
+            flex items.
+        * rendering/RenderFlexibleBox.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::createObject):
+        * rendering/style/RenderStyleConstants.h:
+
+2011-08-08  David Grogan  <dgrogan@chromium.org>
+
+        Add detail to ASSERT message in IDBTransaction::enqueueEvent
+        https://bugs.webkit.org/show_bug.cgi?id=65735
+
+        I've hit this a few times but haven't been able to pin it down.  The
+        extra detail could be helpful.
+
+        Reviewed by Nate Chapin.
+
+        No new tests, just an error message.
+
+        * storage/IDBTransaction.cpp:
+        (WebCore::IDBTransaction::enqueueEvent):
+
+2011-08-08  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92610.
+        http://trac.webkit.org/changeset/92610
+        https://bugs.webkit.org/show_bug.cgi?id=65868
+
+        Caused assertion failures when running fast/multicol tests
+        (Requested by andersca on #webkit).
+
+        * WebCore.xcodeproj/project.pbxproj:
+        * platform/PODIntervalTree.h:
+        (WebCore::PODIntervalTree::allOverlaps):
+        (WebCore::PODIntervalTree::searchForOverlapsFrom):
+        * platform/PODRedBlackTree.h:
+        (WebCore::PODRedBlackTree::add):
+        (WebCore::PODRedBlackTree::remove):
+        (WebCore::PODRedBlackTree::contains):
+        (WebCore::PODRedBlackTree::visitInorder):
+        (WebCore::PODRedBlackTree::size):
+        (WebCore::PODRedBlackTree::checkInvariants):
+        (WebCore::PODRedBlackTree::dump):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::styleDidChange):
+        (WebCore::RenderBlock::addOverflowFromFloats):
+        (WebCore::RenderBlock::repaintOverhangingFloats):
+        (WebCore::RenderBlock::paintFloats):
+        (WebCore::RenderBlock::selectionGaps):
+        (WebCore::RenderBlock::insertFloatingObject):
+        (WebCore::RenderBlock::removeFloatingObject):
+        (WebCore::RenderBlock::removeFloatingObjectsBelow):
+        (WebCore::RenderBlock::positionNewFloats):
+        (WebCore::RenderBlock::logicalLeftOffsetForLine):
+        (WebCore::RenderBlock::logicalRightOffsetForLine):
+        (WebCore::RenderBlock::nextFloatLogicalBottomBelow):
+        (WebCore::RenderBlock::lowestFloatLogicalBottom):
+        (WebCore::RenderBlock::addPositionedFloats):
+        (WebCore::RenderBlock::clearFloats):
+        (WebCore::RenderBlock::addOverhangingFloats):
+        (WebCore::RenderBlock::hasOverhangingFloat):
+        (WebCore::RenderBlock::addIntrudingFloats):
+        (WebCore::RenderBlock::markSiblingsWithFloatsForLayout):
+        (WebCore::RenderBlock::hitTestFloats):
+        (WebCore::RenderBlock::adjustForBorderFit):
+        (WebCore::RenderBlock::FloatingObjects::clear):
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::FloatingObject::FloatingObject):
+        (WebCore::RenderBlock::FloatingObject::setX):
+        (WebCore::RenderBlock::FloatingObject::setY):
+        (WebCore::RenderBlock::FloatingObject::setWidth):
+        (WebCore::RenderBlock::FloatingObject::setHeight):
+        (WebCore::RenderBlock::FloatingObject::setFrameRect):
+        (WebCore::RenderBlock::FloatingObjects::FloatingObjects):
+        (WebCore::RenderBlock::FloatingObjects::set):
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::RenderBlock::layoutRunsAndFloatsInRange):
+        (WebCore::RenderBlock::linkToEndLineIfNeeded):
+        (WebCore::RenderBlock::matchedEndLine):
+        (WebCore::RenderBlock::positionNewFloatOnLine):
+
+2011-08-08  Emil A Eklund  <eae@chromium.org>
+
+        Rename absoluteQuadsForRange and InlineTextBox::selectionRect to local*
+        https://bugs.webkit.org/show_bug.cgi?id=65722
+
+        Reviewed by Simon Fraser.
+
+        No new tests, no new functionality.
+
+        * rendering/InlineTextBox.cpp:
+        (WebCore::InlineTextBox::localSelectionRect):
+        Rename InlineTextBox::selectionRect to localSelectionRect to reflect that
+        it, unlike RenderObject::selectionRect returns a rect in the local
+        coordinate space.
+
+        * rendering/InlineTextBox.h:
+        * rendering/RenderText.cpp:
+        (WebCore::localQuadForTextBox):
+        (WebCore::RenderText::absoluteRectsForRange):
+        (WebCore::RenderText::absoluteQuadsForRange):
+        (WebCore::RenderText::selectionRectForRepaint):
+        Rename absoluteQuadForTextBox to localQuadForTextBox to reflect that it
+        returns a quad in the local coordinate space.
+        
+        * rendering/svg/RenderSVGInlineText.cpp:
+        (WebCore::RenderSVGInlineText::localCaretRect):
+        * rendering/svg/SVGInlineTextBox.cpp:
+        (WebCore::SVGInlineTextBox::localSelectionRect):
+        * rendering/svg/SVGInlineTextBox.h:
+
+2011-08-08  Jochen Eisinger  <jochen@chromium.org>
+
+        Use a raw pointer to the security origin in the ctor of FrameLoadRequest
+        https://bugs.webkit.org/show_bug.cgi?id=65852
+
+        Reviewed by Alexey Proskuryakov.
+
+        * loader/FrameLoadRequest.h:
+        (WebCore::FrameLoadRequest::FrameLoadRequest):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::changeLocation):
+        * loader/FrameLoader.h:
+        * loader/NavigationScheduler.cpp:
+        (WebCore::ScheduledURLNavigation::ScheduledURLNavigation):
+        (WebCore::ScheduledURLNavigation::fire):
+        (WebCore::ScheduledRedirect::ScheduledRedirect):
+        (WebCore::ScheduledLocationChange::ScheduledLocationChange):
+        (WebCore::ScheduledRefresh::ScheduledRefresh):
+        (WebCore::NavigationScheduler::scheduleLocationChange):
+        * loader/NavigationScheduler.h:
+
+2011-08-08  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Remove redundant inline styles from the pasted contents more aggressively
+        https://bugs.webkit.org/show_bug.cgi?id=65833
+
+        Reviewed by Tony Chang.
+
+        Make removeRedundantStylesAndKeepStyleSpanInline more aggressively remove redundant styles by realizing that
+        when an editing inheritable property in an inline style declaration of an element can be safely removed
+        if it is present either in style rules or in its ancestor and not overridden by style rules or default style
+        of the element.
+
+        Test: editing/pasteboard/paste-with-redundant-style.html
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::pseudoStyleRulesForElement): Do not match author style sheets if AuthorCSSRules
+        is not included in the rules to include. This is used in EditingStyle::removePropertiesInElementDefaultStyle.
+        * editing/ApplyStyleCommand.cpp:
+        (WebCore::isStyleSpanOrSpanWithOnlyStyleAttribute): Added; returns true if the element is a style span or
+        span possibly with a style attribute.
+        * editing/ApplyStyleCommand.h:
+        * editing/EditingStyle.cpp:
+        (WebCore::styleFromMatchedRulesForElement): Takes rulesToInclude.
+        (WebCore::EditingStyle::mergeStyleFromRules): Calls styleFromMatchedRulesForElement with AuthorCSSRules
+        | CrossOriginCSSRules to keep the original behavior.
+        (WebCore::EditingStyle::removeStyleFromRulesAndContext): Renamed from removeStyleFromRules; removes styles that
+        are present in context and not overridden by matched rules.
+        (WebCore::EditingStyle::removePropertiesInElementDefaultStyle): Added.
+        * editing/EditingStyle.h:
+        * editing/ReplaceSelectionCommand.cpp:
+        (WebCore::ReplaceSelectionCommand::removeRedundantStylesAndKeepStyleSpanInline): See the description above.
+
+2011-08-08  Dmitry Lomov  <dslomov@google.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65778
+        [WebWorkers][chromium] Make statics thread-safe and make sure V8 API accesses correct isolates.
+
+        Reviewed by David Levin.
+
+        Covered by existing tests.
+
+        * bindings/v8/V8Binding.h:
+        (WebCore::V8BindingPerIsolateData::lazyEventListenerToStringTemplate):
+        (WebCore::V8BindingPerIsolateData::hiddenPropertyName):
+        (WebCore::V8BindingPerIsolateData::globalHandleMap):
+        (WebCore::AllowAllocation::AllowAllocation): Moving to V8Binding.h from V8Utilities.h to resolve header dependency.
+        (WebCore::AllowAllocation::~AllowAllocation):
+        (WebCore::AllowAllocation::current):
+        (WebCore::SafeAllocation::newInstance):
+        * bindings/v8/V8GCController.cpp:
+        (WebCore::currentGlobalHandleMap):
+        (WebCore::enumerateGlobalHandles):
+        (WebCore::V8GCController::registerGlobalHandle):
+        (WebCore::V8GCController::unregisterGlobalHandle):
+        * bindings/v8/V8HiddenPropertyName.cpp:
+        (WebCore::V8HiddenPropertyName::createString):
+        * bindings/v8/V8HiddenPropertyName.h:
+        * bindings/v8/V8LazyEventListener.cpp:
+        (WebCore::V8LazyEventListener::prepareListenerObject):
+        * bindings/v8/V8NPObject.cpp:
+        * bindings/v8/V8Proxy.cpp:
+        (WebCore::V8Proxy::checkNewLegal):
+        * bindings/v8/V8Utilities.h:
+        * bindings/v8/WorkerContextExecutionProxy.cpp:
+        (WebCore::WorkerContextExecutionProxy::WorkerContextExecutionProxy):
+        (WebCore::WorkerContextExecutionProxy::initIsolate):
+        * bindings/v8/WorkerContextExecutionProxy.h:
+        * bindings/v8/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::scheduleExecutionTermination):
+
+2011-08-08  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92607.
+        http://trac.webkit.org/changeset/92607
+        https://bugs.webkit.org/show_bug.cgi?id=65865
+
+        This patch breaks Chromium Mac Canary (Requested by jianli on
+        #webkit).
+
+        * platform/PlatformWheelEvent.h:
+        (WebCore::PlatformWheelEvent::PlatformWheelEvent):
+        * platform/chromium/ScrollAnimatorChromiumMac.mm:
+        (WebCore::ScrollAnimatorChromiumMac::handleGestureEvent):
+
+2011-08-08  Andrew Wason  <rectalogic@rectalogic.com>
+
+        [Qt] Implement WebGL antialiasing (part 3)
+        https://bugs.webkit.org/show_bug.cgi?id=64879
+
+        Reviewed by Noam Rosenthal.
+
+        Existing WebGL layout tests cover this.
+
+        Implement WebGL antialiasing for Qt desktop.
+        Existing code in GraphicsContext3DOpenGL.cpp manages the
+        multisample FBO. GraphicsContext3DQt.cpp creates it and blits
+        it to the regular FBO when painting.
+        Requires adoption of Extensions3DOpenGL to be fully functional.
+
+        * platform/graphics/qt/GraphicsContext3DQt.cpp:
+        (WebCore::GraphicsContext3DInternal::GraphicsContext3DInternal):
+        (WebCore::GraphicsContext3DInternal::paintToTextureMapper):
+        (WebCore::GraphicsContext3DInternal::paint):
+        (WebCore::GraphicsContext3DInternal::multisampleResolve):
+        (WebCore::GraphicsContext3D::GraphicsContext3D):
+        (WebCore::GraphicsContext3D::~GraphicsContext3D):
+
+2011-08-08  Anders Carlsson  <andersca@apple.com>
+
+        Fix build.
+
+        * platform/PODRedBlackTree.h:
+        (WebCore::PODRedBlackTree::Counter::visit):
+
+2011-08-08  Alexandru Chiculita  <achicu@adobe.com>
+
+        Optimize floating elements lookup
+        https://bugs.webkit.org/show_bug.cgi?id=65668
+
+        Added an interval tree in the FloatingObjects structure. Also added new mechanisms to make
+        sure the tree is updated correctly when a float is repositioned.
+
+        Changed the PODIntervalTree to support giving a search adapter that can be implemented by the
+        client. I'm not adding a different bug for that because PODIntervalTree is not used anywhere else
+        and would be hard to test that the change is not breaking anything.
+
+        Reviewed by David Hyatt.
+
+        No new tests, just a refactor on the floating objects data structure.
+
+        * WebCore.xcodeproj/project.pbxproj:
+        * platform/PODIntervalTree.h:
+        (WebCore::PODIntervalSearchAdapter::PODIntervalSearchAdapter):
+        (WebCore::PODIntervalSearchAdapter::lowValue):
+        (WebCore::PODIntervalSearchAdapter::highValue):
+        (WebCore::PODIntervalSearchAdapter::collectIfNeeded):
+        (WebCore::PODIntervalTree::PODIntervalTree):
+        (WebCore::PODIntervalTree::allOverlaps):
+        (WebCore::PODIntervalTree::allOverlapsWithAdapter):
+        (WebCore::PODIntervalTree::searchForOverlapsFrom):
+        * platform/PODRedBlackTree.h:
+        (WebCore::PODRedBlackTree::PODRedBlackTree):
+        (WebCore::PODRedBlackTree::clear):
+        (WebCore::PODRedBlackTree::isInitialized):
+        (WebCore::PODRedBlackTree::initIfNeeded):
+        (WebCore::PODRedBlackTree::add):
+        (WebCore::PODRedBlackTree::remove):
+        (WebCore::PODRedBlackTree::contains):
+        (WebCore::PODRedBlackTree::visitInorder):
+        (WebCore::PODRedBlackTree::size):
+        (WebCore::PODRedBlackTree::checkInvariants):
+        (WebCore::PODRedBlackTree::dump):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::styleDidChange):
+        (WebCore::RenderBlock::addOverflowFromFloats):
+        (WebCore::RenderBlock::repaintOverhangingFloats):
+        (WebCore::RenderBlock::paintFloats):
+        (WebCore::RenderBlock::selectionGaps):
+        (WebCore::RenderBlock::insertFloatingObject):
+        (WebCore::RenderBlock::removeFloatingObject):
+        (WebCore::RenderBlock::removeFloatingObjectsBelow):
+        (WebCore::RenderBlock::positionNewFloats):
+        (WebCore::::collectIfNeeded):
+        (WebCore::RenderBlock::logicalLeftOffsetForLine):
+        (WebCore::RenderBlock::logicalRightOffsetForLine):
+        (WebCore::RenderBlock::nextFloatLogicalBottomBelow):
+        (WebCore::RenderBlock::lowestFloatLogicalBottom):
+        (WebCore::RenderBlock::addPositionedFloats):
+        (WebCore::RenderBlock::clearFloats):
+        (WebCore::RenderBlock::addOverhangingFloats):
+        (WebCore::RenderBlock::hasOverhangingFloat):
+        (WebCore::RenderBlock::addIntrudingFloats):
+        (WebCore::RenderBlock::markSiblingsWithFloatsForLayout):
+        (WebCore::RenderBlock::hitTestFloats):
+        (WebCore::RenderBlock::adjustForBorderFit):
+        (WebCore::RenderBlock::FloatingObjects::clear):
+        (WebCore::RenderBlock::FloatingObjects::intervalForFloatingObject):
+        (WebCore::RenderBlock::FloatingObjects::addPlacedObject):
+        (WebCore::RenderBlock::FloatingObjects::removePlacedObject):
+        (WebCore::RenderBlock::FloatingObjects::add):
+        (WebCore::RenderBlock::FloatingObjects::remove):
+        (WebCore::RenderBlock::FloatingObjects::computePlacedFloatsTree):
+        (WebCore::::string):
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::FloatingObject::FloatingObject):
+        (WebCore::RenderBlock::FloatingObject::setX):
+        (WebCore::RenderBlock::FloatingObject::setY):
+        (WebCore::RenderBlock::FloatingObject::setWidth):
+        (WebCore::RenderBlock::FloatingObject::setHeight):
+        (WebCore::RenderBlock::FloatingObject::setFrameRect):
+        (WebCore::RenderBlock::FloatingObject::isInPlacedTree):
+        (WebCore::RenderBlock::FloatingObject::setIsInPlacedTree):
+        (WebCore::RenderBlock::FloatIntervalSearchAdapter::FloatIntervalSearchAdapter):
+        (WebCore::RenderBlock::FloatIntervalSearchAdapter::lowValue):
+        (WebCore::RenderBlock::FloatIntervalSearchAdapter::highValue):
+        (WebCore::RenderBlock::FloatingObjects::FloatingObjects):
+        (WebCore::RenderBlock::FloatingObjects::setHorizontalWritingMode):
+        (WebCore::RenderBlock::FloatingObjects::set):
+        (WebCore::RenderBlock::FloatingObjects::placedFloatsTree):
+        (WebCore::RenderBlock::FloatingObjects::computePlacedFloatsTreeIfNeeded):
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::RenderBlock::layoutRunsAndFloatsInRange):
+        (WebCore::RenderBlock::linkToEndLineIfNeeded):
+        (WebCore::RenderBlock::matchedEndLine):
+        (WebCore::RenderBlock::positionNewFloatOnLine):
+
+2011-08-08  Alexei Svitkine  <asvitkine@chromium.org>
+
+        [Chromium] Enable rubber banding when scrolling.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65707
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests since this is just syncing changes to chromium platform.
+
+        * platform/PlatformWheelEvent.h:
+        (WebCore::PlatformWheelEvent::PlatformWheelEvent):
+        * platform/chromium/ScrollAnimatorChromiumMac.mm:
+        (WebCore::ScrollAnimatorChromiumMac::handleGestureEvent):
+
+2011-08-08  Dan Bernstein  <mitz@apple.com>
+
+        Build fix.
+
+        * html/NumberInputType.cpp:
+        (WebCore::NumberInputType::sizeShouldIncludeDecoration): Fixed an obvious typo.
+
+2011-08-08  Andras Becsi  <abecsi@webkit.org>
+
+        [Qt] Clean up project file after r92492.
+
+        Unreviewed gardening.
+
+        No new tests needed.
+
+        * WebCore.pro: remove nonexistent PluginHalterClient.h, PluginHalter.h, HaltablePlugin.h.
+
+2011-08-08  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: refactor links creation.
+        https://bugs.webkit.org/show_bug.cgi?id=65612
+
+        Reviewed by Pavel Feldman.
+
+        No new tests - it is refactoring, modified code covered by script-formatter.html test.
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleMessage.prototype._formatMessage):
+        (WebInspector.ConsoleMessage.prototype._linkifyLocation):
+        (WebInspector.ConsoleMessage.prototype._linkifyCallFrame):
+        (WebInspector.ConsoleMessage.prototype._populateStackTraceTreeElement):
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel):
+        (WebInspector.DebuggerPresentationModel.prototype.addSourceMappingListener):
+        (WebInspector.DebuggerPresentationModel.prototype.removeSourceMappingListener):
+        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation.updateAnchor.didGetLocation):
+        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation.updateAnchor):
+        (WebInspector.DebuggerPresentationModel.prototype.linkifyLocation):
+        (WebInspector.DebuggerPresentationModel.prototype.setFormatSourceFiles):
+        (WebInspector.DebuggerPresentationModel.prototype._sourceFileForScript):
+        (WebInspector.DebuggerPresentationModel.prototype._debuggerReset):
+        * inspector/front-end/EventListenersSidebarPane.js:
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkDataGridNode.prototype._refreshInitiatorCell):
+        * inspector/front-end/Panel.js:
+        * inspector/front-end/ProfileDataGridTree.js:
+        (WebInspector.ProfileDataGridNode.prototype.createCell):
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._folderAndDisplayNameForScriptURL):
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylePropertiesSection.linkifyUncopyable):
+        (WebInspector.StylePropertiesSection):
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel.FormattedRecord.prototype._getRecordDetails):
+        (WebInspector.TimelinePanel.FormattedRecord.prototype._linkifyLocation):
+        (WebInspector.TimelinePanel.FormattedRecord.prototype._linkifyCallFrame):
+        (WebInspector.TimelinePanel.PopupContentHelper.prototype._appendLinkRow):
+        (WebInspector.TimelinePanel.PopupContentHelper.prototype._appendStackTrace):
+        * inspector/front-end/inspector.js:
+        (WebInspector._showSettingsScreen):
+        (WebInspector.formatLinkText):
+        (WebInspector.linkifyResourceAsNode):
+
+2011-08-08  Andrew Wason  <rectalogic@rectalogic.com>
+
+        [Qt] Implement WebGL antialiasing (part 3)
+        https://bugs.webkit.org/show_bug.cgi?id=64879
+
+        Reviewed by Noam Rosenthal.
+
+        Existing WebGL layout tests.
+
+        Adopt Extensions3DOpenGL for Qt desktop as a prerequisite
+        for implementing WebGL antialiasing.
+        Extensions3DQt is still used for ES2.
+
+        * WebCore.pri:
+        * WebCore.pro:
+        * platform/graphics/GraphicsContext3D.h:
+        * platform/graphics/opengl/Extensions3DOpenGL.cpp:
+        (WebCore::Extensions3DOpenGL::createVertexArrayOES):
+        (WebCore::Extensions3DOpenGL::deleteVertexArrayOES):
+        (WebCore::Extensions3DOpenGL::isVertexArrayOES):
+        (WebCore::Extensions3DOpenGL::bindVertexArrayOES):
+        * platform/graphics/opengl/GraphicsContext3DOpenGL.cpp:
+        (WebCore::GraphicsContext3D::getExtensions):
+        * platform/graphics/qt/GraphicsContext3DQt.cpp:
+        (WebCore::GraphicsContext3D::layerComposited):
+
+2011-08-08  Benjamin Poulain  <benjamin@webkit.org>
+
+        Build fix after r92589, defaultSize is not used.
+        
+        Reviewed by Andreas Kling.
+
+        * html/InputType.cpp:
+        (WebCore::InputType::sizeShouldIncludeDecoration):
+
+2011-08-08  Keishi Hattori  <keishi@webkit.org>
+
+        Implement <input type=color> UI behavior WebCore part
+        https://bugs.webkit.org/show_bug.cgi?id=62619
+
+        Reviewed by Kent Tamura.
+
+        * WebCore.exp.in: Added __ZN7WebCore12ColorChooser7chooserEv and
+        __ZNK7WebCore12ColorChooser13colorSelectedERKNS_5ColorE
+        * WebCore.xcodeproj/project.pbxproj: Added ColorChooser.{h,cpp}
+        * html/ColorInputType.cpp:
+        (WebCore::ColorInputType::~ColorInputType): Added. Close color chooser. ex. when type attribute changes.
+        (WebCore::ColorInputType::valueAsColor): Added.
+        (WebCore::ColorInputType::setValueAsColor): Added.
+        (WebCore::ColorInputType::valueChanged): Update selected color in color chooser too.
+        (WebCore::ColorInputType::handleClickEvent): Opens color chooser.
+        (WebCore::ColorInputType::handleDOMActivateEvent): Called when element.click(). Open color chooser only
+        when it was initiated by a user interaction.
+        (WebCore::ColorInputType::detach): Close color chooser. Called when input element or its ancestors have "display:none"
+        or is removed from DOM.
+        (WebCore::ColorInputType::colorSelected): Callback from color chooser.
+        (WebCore::ColorInputType::isColorInputType): Returns true.
+        (WebCore::ColorInputType::closeColorChooserIfCurrentClient): Close color chooser if this input type is the current client of ColorChooser.
+        * html/ColorInputType.h:
+        * html/FileInputType.cpp:
+        * html/FileInputType.h:
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::detach): Calls InputType::detach
+        * html/InputType.cpp:
+        (WebCore::InputType::chrome): Added. Used in FileInputType and ColorInputType.
+        (WebCore::InputType::detach): ColorInputType overrides this.
+        * html/InputType.h:
+        * loader/EmptyClients.h:
+        (WebCore::EmptyChromeClient::openColorChooser):
+        (WebCore::EmptyChromeClient::closeColorChooser):
+        (WebCore::EmptyChromeClient::setSelectedColorInColorChooser):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::transitionToCommitted): Close color chooser when navigating away from the page. We do this here
+        because ColorInputType::detach() is called seconds after the page transition so it is too slow.
+        * page/Chrome.cpp:
+        (WebCore::Chrome::openColorChooser): Added.
+        (WebCore::Chrome::closeColorChooser): Added.
+        (WebCore::Chrome::setSelectedColorInColorChooser): Added.
+        * page/Chrome.h:
+        * page/ChromeClient.h:
+        * platform/ColorChooser.cpp: Added.
+        (WebCore::ColorChooserClient::~ColorChooserClient): Disconnects itself from the ColorChooser.
+        (WebCore::ColorChooser::chooser): Get shared instance of ColorChooser.
+        (WebCore::ColorChooser::connectClient): Connects a ColorChooserClient that receives the colorSelected callbacks.
+        (WebCore::ColorChooser::disconnectClient): Disconnects the connectClient.
+        (WebCore::ColorChooser::colorSelected): Called from color chooser listener.
+        * platform/ColorChooser.h: Added.
+        (WebCore::ColorChooserClient::isColorInputType): Added.
+        (WebCore::ColorChooser::client): Added. Returns the current connected client.
+        (WebCore::ColorChooser::ColorChooser): Added.
+
+2011-08-08  Shinya Kawanaka  <shinyak@google.com>
+
+        The input[type=number] element should be as wide as necessary to show the widest possible value.
+        https://bugs.webkit.org/show_bug.cgi?id=60673
+
+        Reviewed by Kent Tamura.
+
+        The size of input[type=number] is calculated from min/max/step attributes to show the widest possible value.
+        If min or max attribute is absent, the default size is used.
+        Also, if its css width is not auto, the width is used with priority.
+
+        If min/max/attribute is set dynamically, the size of the input[type=number] will be recalculated.
+
+        Test: fast/forms/input-number-size.html
+
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::parseMappedAttribute):
+           Added stepAttributeChanged handler.
+        (WebCore::HTMLInputElement::sizeShouldIncludeDecoration):
+           Returns true if a renderer should include decoration (e.g. inner spinbox).
+           Also returns the preferred size of the input.
+        * html/HTMLInputElement.h:
+        * html/InputType.cpp:
+        (WebCore::InputType::sizeShouldIncludeDecoration):
+           Same as WebCore::HTMLInputElement::sizeShouldIncludeDecoration.
+        (WebCore::InputType::stepAttributeChanged):
+           Will be called When step attribute is changed.
+           Sets a flag to recalculate layout.
+        * html/InputType.h:
+        * html/NumberInputType.cpp:
+        (WebCore::lengthBeforeDecimalPoint):
+           Calculates the width before the decimal point.
+        (WebCore::NumberInputType::sizeShouldIncludeDecoration):
+           Same as WebCore::HTMLInputElement::sizeShouldIncludeDecoration.
+           However, this will calculate the preferred size from min/max/step attribute.
+        (WebCore::NumberInputType::minOrMaxAttributeChanged):
+           Sets a flag to recalculate layout.
+        (WebCore::NumberInputType::stepAttributeChanged): ditto.
+        * html/NumberInputType.h:
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::preferredContentWidth):
+           Uses preferredSize instead of size.
+           Also, adds innerSpinButtonElement size to width if sizeShouldIncludeDecoration returns true.
+
+2011-08-08  Kenichi Ishibashi  <bashi@chromium.org>
+
+        Should not use C-style cast in CSSParser.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=65807
+
+        Remove C-style cast.
+
+        Reviewed by Kent Tamura.
+
+        No new tests because no behavior change.
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseAnimationTimingFunction): Replaced a cast with clampToInteger().
+        (WebCore::CSSParser::parseFontFeatureTag): Ditto.
+        (WebCore::CSSParser::createKeyframeRule): Replaced a cast with C++-style cast.
+
+2011-08-05  Pavel Feldman  <pfeldman@chromium.org>
+
+        Web Inspector: implement dock/undock in WebKit2 without getting into WebCore.
+        https://bugs.webkit.org/show_bug.cgi?id=65763
+
+        InspectorFrontendClient.h can't have synchronous canAttachWindow() returning value
+        since in the multiprocess environment, you can't immediately get back to it from the host.
+
+        r92384 introduced an unhealthy WebKit -> WebCore -> WebKit canAttach query where embedder
+        was asking itself a question. This loop was fixed.
+
+        Reviewed by Yury Semikhatsky.
+
+        * WebCore.exp.in:
+        * inspector/InspectorController.cpp:
+        * inspector/InspectorController.h:
+        * inspector/InspectorFrontendClient.h:
+        * inspector/InspectorFrontendClientLocal.h:
+        * inspector/front-end/inspector.js:
+        (windowLoaded):
+
+2011-07-28  Kent Tamura  <tkent@chromium.org>
+
+        [Chromium] Make form validation bubble fit with Chrome UI style
+        https://bugs.webkit.org/show_bug.cgi?id=65359
+
+        Reviewed by Hajime Morita.
+
+        Change the appearance of validation message bubble for
+        Chromium. Basically it doesn't change for other ports.
+
+        - Introduce a new element to put an icon, and enclose it and the
+        message text by a flexible box.
+        - Repesent the message text by two elements. One for the heading,
+        another for the remaining.
+
+        - Introduce themeChromium.css
+
+        * WebCore.gyp/WebCore.gyp: Add themeChromium.css.
+        * css/html.css:
+        (::-webkit-validation-bubble-message): Make this a flexible box container.
+        (::-webkit-validation-bubble-text-block): Takes flexibility.
+        (::-webkit-validation-bubble-heading):
+        Make the content bold because we removed <b></b>.
+        * css/themeChromium.css: Added.
+        (::-webkit-validation-bubble):
+        (::-webkit-validation-bubble-message):
+        (::-webkit-validation-bubble-arrow):
+        (::-webkit-validation-bubble-arrow-clipper):
+        (::-webkit-validation-bubble-icon):
+        (::-webkit-validation-bubble-heading):
+        (::-webkit-validation-bubble-body):
+        * html/ValidationMessage.cpp:
+        (WebCore::ValidationMessage::setMessageDOMAndStartTimer):
+        Sets the text into m_messageHeading and m_messageBody, instead of m_bubbleMessage.
+        Use ASSERT_NO_EXCEPTION.
+        (WebCore::ValidationMessage::buildBubbleTree):
+        Build the new structure, and use ASSERT_NO_EXCEPTION.
+        (WebCore::ValidationMessage::deleteBubbleTree):
+        Clear m_messageHeading and m_messageBody.
+        * html/ValidationMessage.h:
+        * rendering/RenderThemeChromiumMac.h: Add extraDefaultStyleSheet().
+        * rendering/RenderThemeChromiumMac.mm:
+        (WebCore::RenderThemeChromiumMac::extraDefaultStyleSheet): Append themeChromium.css.
+        * rendering/RenderThemeChromiumSkia.cpp:
+        (WebCore::RenderThemeChromiumSkia::extraDefaultStyleSheet): Append themeChromium.css.
+
+2011-08-07  Keishi Hattori  <keishi@webkit.org>
+
+        Sort WebCore.xcodeproj
+        Accomplished using sort-Xcode-project-file.
+
+        * WebCore.xcodeproj/project.pbxproj:
+
+2011-08-07  James Kozianski  <koz@chromium.org>
+
+        Make the fullscreen JS API enabled at runtime.
+        https://bugs.webkit.org/show_bug.cgi?id=65501
+
+        Reviewed by Adam Barth.
+
+        * bindings/generic/RuntimeEnabledFeatures.cpp:
+        * bindings/generic/RuntimeEnabledFeatures.h:
+        (WebCore::RuntimeEnabledFeatures::webkitFullScreenAPIEnabled):
+        (WebCore::RuntimeEnabledFeatures::setWebkitFullScreenAPIEnabled):
+        (WebCore::RuntimeEnabledFeatures::webkitRequestFullScreenEnabled):
+        (WebCore::RuntimeEnabledFeatures::webkitIsFullScreenEnabled):
+        (WebCore::RuntimeEnabledFeatures::webkitFullScreenKeyboardInputAllowedEnabled):
+        (WebCore::RuntimeEnabledFeatures::webkitCurrentFullScreenElementEnabled):
+        (WebCore::RuntimeEnabledFeatures::webkitCancelFullScreenEnabled):
+        * dom/Document.idl:
+        * dom/Element.idl:
+
+2011-08-07  Martin Robinson  <mrobinson@igalia.com>
+
+        Distribution fix for GTK+.
+
+        * GNUmakefile.am: Add some files to the distribution list.
+        * GNUmakefile.list.am: Strip removed files from the source list.
+
+2011-08-07  Jochen Eisinger  <jochen@chromium.org>
+
+        Move FrameLoadRequest to loader/
+        https://bugs.webkit.org/show_bug.cgi?id=65817
+
+        Reviewed by Alexey Proskuryakov.
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * loader/FrameLoadRequest.h:
+        (WebCore::FrameLoadRequest::FrameLoadRequest):
+        (WebCore::FrameLoadRequest::isEmpty):
+        (WebCore::FrameLoadRequest::requester):
+        (WebCore::FrameLoadRequest::resourceRequest):
+        (WebCore::FrameLoadRequest::frameName):
+        (WebCore::FrameLoadRequest::setFrameName):
+
+2011-08-07  Sam White  <samuel.white@rochester.edu>
+
+        Add the ability to search the AccessibilityObject cache
+        https://bugs.webkit.org/show_bug.cgi?id=64994
+        
+        New AccessibilityObject cache search functionality and API for the mac
+        platform to expose it. At this point the AccessibilityObject cache can
+        be searched using one of the supported search keys that have been defined
+        in AccessibilityObject.h, or by passing search text.
+
+        Reviewed by Chris Fleizach.
+
+        Test: platform/mac/accessibility/search-predicate.html
+
+        * accessibility/AccessibilityObject.cpp:
+        (WebCore::AccessibilityObject::isAccessibilityObjectSearchMatch):
+        (WebCore::AccessibilityObject::isAccessibilityTextSearchMatch):
+        (WebCore::AccessibilityObject::accessibilityObjectContainsText):
+        (WebCore::AccessibilityObject::accessibleObjectsWithAccessibilitySearchPredicate):
+        * accessibility/AccessibilityObject.h:
+        * accessibility/mac/AccessibilityObjectWrapper.mm:
+        (createAccessibilitySearchKeyMap):
+        (accessibilitySearchKeyForString):
+        (-[AccessibilityObjectWrapper accessibilityParameterizedAttributeNames]):
+        (-[AccessibilityObjectWrapper accessibilityAttributeValue:forParameter:]):
+
+2011-08-06  Mark Rowe  <mrowe@apple.com>
+
+        Fix a memory leak found via code inspection.
+
+        Rubber-stamped by Dan Bernstein.
+
+        * platform/mac/PasteboardMac.mm:
+        (WebCore::Pasteboard::writeSelection): Adopt the newly-allocated WebHTMLConverter
+        instance so that it does not leak.
+
+2011-08-05  Darin Adler  <darin@apple.com>
+
+        Fix Timer heap implementation to work with more libraries (other versions of STL)
+        https://bugs.webkit.org/show_bug.cgi?id=65782
+
+        Reviewed by Anders Carlsson.
+
+        No behavior change, so no tests needed. Existing tests pass.
+
+        * platform/Timer.cpp: Added TimerHeapPointer and TimerHeapReference class
+        alongside the TimerHeapIterator class. Also added a swap function. Also
+        added a TimerHeapLessThanFunction class.
+        (WebCore::TimerBase::heapDecreaseKey): Pass pointers in to the TimerHeapIterator
+        since that's how the class works now. Pass a TimerHeapLessThanFunction object
+        instead of letting the library use the < operator directly.
+        (WebCore::TimerBase::heapPopMin): Ditto.
+
+        * platform/Timer.h: Updated for above changes.
+
+2011-08-06  Aron Rosenberg  <arosenberg@logitech.com>
+
+        Reviewed by Benjamin Poulain.
+
+        [Qt] Fix build with Intel compiler on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65088
+
+        Intel compiler needs .lib suffixes instead of .a
+
+        * WebCore.pri:
+
+2011-08-06  Dan Bernstein  <mitz@apple.com>
+
+        Move the shared LineBreakIteratorPool from ThreadGlobalData into its own ThreadSpecific
+        https://bugs.webkit.org/show_bug.cgi?id=65809
+
+        Reviewed by Darin Adler and Sam Weinig.
+
+        * platform/ThreadGlobalData.cpp:
+        (WebCore::ThreadGlobalData::destroy): Removed code to clear the m_lineBreakIteratorPool member
+        variable, which was removed.
+        * platform/ThreadGlobalData.h: Removed lineBreakIteratorPool() and associated member variable.
+        * platform/text/LineBreakIteratorPoolICU.h:
+        (WebCore::LineBreakIteratorPool::sharedPool): Changed to return a thread-specific pool.
+
+2011-08-06  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Potential Leaks - RetainPtr<> over retaining Create'd objects
+        https://bugs.webkit.org/show_bug.cgi?id=65806
+
+        Reviewed by Darin Adler.
+
+        Fix a possible leak by adopting an allocation instead of retaining it.
+
+        * platform/network/mac/NetworkStateNotifierMac.cpp:
+        (WebCore::NetworkStateNotifier::NetworkStateNotifier):
+        * plugins/mac/PluginPackageMac.cpp:
+        (WebCore::stringListFromResourceId):
+        (WebCore::PluginPackage::fetchInfo):
+
+2011-08-06  Rafael Brandao  <rafael.lobo@openbossa.org>
+
+        REGRESSION (r91540): Favicons are not loaded
+        https://bugs.webkit.org/show_bug.cgi?id=65692
+
+        Reviewed by Darin Adler.
+
+        The policy that evaluates whether a page can have icon or not should not
+        need to be reimplemented each time a new IconDatabaseBase is derived,
+        so it was moved to WebCore's scope.
+
+        * loader/icon/IconController.cpp:
+        (WebCore::IconController::startLoader):
+        * loader/icon/IconDatabase.cpp:
+        * loader/icon/IconDatabase.h:
+        * loader/icon/IconDatabaseBase.cpp:
+        (WebCore::documentCanHaveIcon):
+        * loader/icon/IconDatabaseBase.h:
+
+2011-08-06  Kenichi Ishibashi  <bashi@chromium.org>
+
+        Should use C++-style cast in CSSParser.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=65807
+
+        Replaces C-style cast with C++style cast.
+
+        Reviewed by Shinichiro Hamaji.
+
+        No new tests because no behavior change.
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseAnimationTimingFunction):
+        (WebCore::CSSParser::parseFont):
+        (WebCore::CSSParser::parseColorFromValue):
+        (WebCore::CSSParser::parseFontFeatureTag):
+
+2011-08-06  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        REGRESSION(87526): ASSERT(!needsLayout()) followed by graphical glitches on google charts (svg loaded in iframe)
+        https://bugs.webkit.org/show_bug.cgi?id=64974
+
+        svg/zoom/page/zoom-svg-through-object-with-*.xhtml are flaky
+        https://bugs.webkit.org/show_bug.cgi?id=63186
+
+        Reviewed by Zoltan Herczeg.
+
+        Fix host <-> embedded document size negotiation race. The currently implemented solution relied on a specific
+        order of paint/layout calls, which is broken. Consider rendering a document containing an object/iframe/embed
+        referencing an external SVG file. When FrameView::layout() is called (associated with the outermost RenderView
+        of the host document), it lays out the whole document, and afterwards performPostLayoutTasks() is called.
+        This method then asks the Frames contentRenderer to update its widget positions. This triggers a call
+        of the embedded documents FrameView::layout() method, which now lays out the embedded SVG documents tree
+        through RenderSVGRoot::layout.
+
+        And here's the bug: The size of the object/iframe replaced element, which hosts the embedded document
+        may depend on the intrinsic size of the SVG. We tried to mark the embedded documents _ownerRenderer_ (the RenderPart)
+        as "needs layout and pref width recalc" right from RenderSVGRoot::layout() and hoped that this would cause the whole
+        document to be laid out again, now that the size of the embedded SVG document is known.
+
+        As soon as the SVG document is laid out, the host document will be painted (flush deferred repaints) and an assertion
+        ASSERTS(!needsLayout()) will be fired, as we modified the setNeedsLayout() state after the host document layout finished,
+        right before painting.
+
+        A proper fix is to only keep track in RenderSVGRoot whether it needs to negotiate the size with the host document, but
+        not modify the layout state of the host document in any way. Let FrameView handle the size negotiation right in
+        FrameView::layout().
+
+        Consider following document:
+        <body><iframe src="some.svg"></body>
+        
+        After initial loading & parsing of the document, a FrameView exists for the main frame, and a sub-FrameView
+        for the <iframe>. The external SVG document, may not be loaded yet at this point. That means when RenderIFrame::layout()
+        tries to figure out its size (computeLogicalWidth/Height) - the RenderSVGRoot renderer of the external document hasn't
+        been created yet (as the external document hasn't received data yet) - so it falls back to eg. 300x150 CSS default size
+        (in the simplest case, where width/height are both auto).
+
+        Suppose the external document now finished loading, the RenderSVGRoot is created and a global relayout is triggered
+        starting from the main FrameView. As we already laid out the document once, needsLayout() is false for the main FrameView,
+        so _only_ the child frame view that contains the RenderSVGRoot is now laid out, for the first time.
+
+        After layout is done, the SVG document is fully laid out, though the RenderPart which embedded the SVG does NOT notice
+        the SVG has been laid out, so it still carries the default 300x150 size (and needsLayout=false!).
+
+        The fix is to retrigger layout of the parent frame view by marking the owner renderer of the frame view as "needs layout
+        and pref widths recalc" and immediatiely performing a synchronous update of the layout. It's important to do it sync,
+        as scripts depend on the result of the size negotiation (covered extensively with the new tests in svg/as-object).
+
+        Reenable svg/zoom/page/zoom-svg-through-object* tests to see whether the flakiness is gone.
+
+        Tests: svg/as-object/deep-nested-embedded-svg-size-changes-no-layout-triggers-1.html
+               svg/as-object/deep-nested-embedded-svg-size-changes-no-layout-triggers-2.html
+               svg/as-object/embedded-svg-immediate-offsetWidth-query.html
+               svg/as-object/embedded-svg-size-changes-no-layout-triggers.html
+               svg/as-object/embedded-svg-size-changes.html
+               svg/as-object/nested-embedded-svg-size-changes-no-layout-triggers-1.html
+               svg/as-object/nested-embedded-svg-size-changes-no-layout-triggers-2.html
+               svg/as-object/nested-embedded-svg-size-changes.html
+               svg/zoom/page/zoom-svg-through-object-with-absolute-size-2.xhtml
+               svg/zoom/page/zoom-svg-through-object-with-absolute-size.xhtml
+               svg/zoom/page/zoom-svg-through-object-with-auto-size.html
+               svg/zoom/page/zoom-svg-through-object-with-huge-size.xhtml
+               svg/zoom/page/zoom-svg-through-object-with-override-size.html
+               svg/zoom/page/zoom-svg-through-object-with-percentage-size.xhtml
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::layout): Call forceLayoutParentViewIfNeeded() after layout finished.
+        (WebCore::FrameView::forceLayoutParentViewIfNeeded): Added helper method.
+        (WebCore::FrameView::embeddedContentBox): Moved from RenderPart to a more central place.
+        * page/FrameView.h:
+        * rendering/RenderPart.cpp:
+        (WebCore::RenderPart::embeddedContentBox): Moved to FrameView.
+        * rendering/svg/RenderSVGRoot.cpp: Rename m_didNegotiateSize to m_needsSizeNegotiationWithHostDocument.
+        (WebCore::RenderSVGRoot::RenderSVGRoot):
+        (WebCore::RenderSVGRoot::layout): Only figure out if we need neggotiation, don't actually do anything, let FrameView handle this.
+        * rendering/svg/RenderSVGRoot.h: Remove incorrect negotiateSizeWithHostDocumentIfNeeded() logic.
+        (WebCore::RenderSVGRoot::needsSizeNegotiationWithHostDocument): Added getter for m_needsSizeNegotiationWithHostDocument.
+        (WebCore::RenderSVGRoot::scheduledSizeNegotiationWithHostDocument): Added safe way to clear m_needsSizeNegotiationWithHostDocument (asserts if it was false before).
+
+2011-08-05  Noel Gordon  <noel.gordon@gmail.com>
+
+        [Chromium] Remove HaltablePlugin references from gyp project files
+        https://bugs.webkit.org/show_bug.cgi?id=65808
+
+        HaltablePlugin and related classes were removed in r92492.  Remove any
+        reference to the deleted files from the gyp project files.
+
+        Reviewed by Adam Barth.
+
+        * WebCore.gypi: remove HaltablePlugin.h reference.
+
+2011-08-05  Mark Rowe  <mrowe@apple.com>
+
+        Attempt to fix the build after r92538.
+
+        Like all of the recent "track"-related work the new files in r92538 appear to have
+        been added to completely random places in the Xcode project. However, this time
+        the file paths were marked as being relative to their containing group resulting in
+        Xcode being unable to find the files on disk.
+
+        I've attempted to clean up all of the "track"-related mess in the Xcode project.
+        The location of the files in the project now reflect their locations on disk, and
+        are all correctly marked as being relative to their containing group as is our
+        convention.
+
+        * WebCore.xcodeproj/project.pbxproj:
+
+2011-08-05  Tom Hudson  <tomhudson@google.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=64613
+        Use supported framebuffer renderbuffer mode; chromium command buffer
+        allows DEPTH and STENCIL but not DEPTH_STENCIL.
+
+        Reviewed by James Robinson.
+
+        No new tests because was caught by extant tests, albeit only when
+        accelerated drawing and forced compositing were both turned on.
+
+        * platform/graphics/chromium/LayerTextureUpdaterCanvas.cpp:
+        (WebCore::LayerTextureUpdaterSkPicture::createFrameBuffer):
+
+2011-08-05  Anna Cavender  <annacc@chromium.org>
+
+        Adding a WebVTTParser for <track>.
+        https://bugs.webkit.org/show_bug.cgi?id=62882
+
+        Reviewed by Eric Carlson.
+
+        Feature is hidden behind VIDEO_TRACK feature define, which is turned off, but
+        new tests have been added in media/track/ (and are skipped).
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.xcodeproj/project.pbxproj:
+        * html/TextTrackCue.cpp:
+        * html/TextTrackCue.h:
+        * platform/track/CueParser.cpp:
+        * platform/track/CueParser.h:
+        * platform/track/CueParserPrivate.h:
+        * platform/track/WebVTTParser.cpp: Added.
+        * platform/track/WebVTTParser.h: Added.
+
+2011-08-05  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92330.
+        http://trac.webkit.org/changeset/92330
+        https://bugs.webkit.org/show_bug.cgi?id=65804
+
+        caused various regressions in paste (Requested by rniwa on
+        #webkit).
+
+        * editing/ReplaceSelectionCommand.cpp:
+        (WebCore::isInlineNodeWithStyle):
+        (WebCore::ReplaceSelectionCommand::doApply):
+        * editing/markup.cpp:
+        (WebCore::ancestorToRetainStructureAndAppearance):
+        * editing/markup.h:
+
+2011-08-05  Kent Tamura  <tkent@chromium.org>
+
+        Unreviewed, rolling out r92477.
+        http://trac.webkit.org/changeset/92477
+        https://bugs.webkit.org/show_bug.cgi?id=62619
+
+        Layering violation. We should not use WebCore/dom/ in
+        WebCore/platform/.
+
+        * WebCore.exp.in:
+        * WebCore.xcodeproj/project.pbxproj:
+        * html/ColorInputType.cpp:
+        (WebCore::ColorInputType::valueChanged):
+        * html/ColorInputType.h:
+        * html/FileInputType.cpp:
+        (WebCore::FileInputType::chrome):
+        * html/FileInputType.h:
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::detach):
+        * html/InputType.cpp:
+        * html/InputType.h:
+        * loader/EmptyClients.h:
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::transitionToCommitted):
+        * page/Chrome.cpp:
+        * page/Chrome.h:
+        * page/ChromeClient.h:
+        * platform/ColorChooser.cpp: Removed.
+        * platform/ColorChooser.h: Removed.
+
+2011-08-05  Darin Adler  <darin@apple.com>
+
+        Try to fix Qt Mac build.
+
+        * plugins/mac/PluginViewMac.mm: Removed PluginHalter functions.
+
+2011-08-05  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Leak in CFNetwork Loader RetainPtr<> should Adopt a Copy allocation
+        https://bugs.webkit.org/show_bug.cgi?id=65789
+
+        Reviewed by David Kilzer.
+
+        Fix a leak by adopting an allocation instead of retaining it.
+
+        * platform/network/cf/FormDataStreamCFNet.cpp:
+        (WebCore::httpBodyFromRequest):
+
+2011-08-05  Ben Wells  <benwells@chromium.org>
+
+        Introduced fast path for border rendering when all visible sides are solid, same rgba color but not all visible
+        https://bugs.webkit.org/show_bug.cgi?id=65762
+
+        Reviewed by Simon Fraser.
+
+        No intended change in behaviour, no new tests.
+
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::calculateSideRect):
+        (WebCore::RenderBoxModelObject::paintBorderSides):
+        (WebCore::RenderBoxModelObject::paintBorder):
+
+2011-08-05  Kenichi Ishibashi  <bashi@chromium.org>
+
+        Unreviewed build fix on 32-bit Mac.
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseFontFeatureTag): Added a cast to int.
+
+2011-08-05  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Upwards cursor movement incorrect when previous block ends with <br>
+        https://bugs.webkit.org/show_bug.cgi?id=33247
+
+        Reviewed by Tony Chang.
+
+        The bug was caused by previousLinePosition's trying to obtain the root line box at the position
+        after the previous line's br. This obviously fails because the the position after br is considered
+        as a part of the next line.
+
+        Fixed the bug by obtaining root inline boxes using position at the minimum caret offset as supposed
+        to maximum caret offset. The code was initially introduced by r32508 to fix arrow key movement in RTL text
+        but the test added by the revision continues to pass after this change. Furthermore, this change makes
+        new code consistent with nextLinePosition.
+
+        Also reverted the change added by r55613 because it is no longer needed.
+
+        Tests: editing/execCommand/move-selection-back-line-rtl.html
+               editing/execCommand/move-selection-back-line-strict.html
+
+        * editing/visible_units.cpp:
+        (WebCore::previousLinePosition):
+
+2011-08-05  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Accelerated canvas breaks when moving canvases or resources between Pages
+        https://bugs.webkit.org/show_bug.cgi?id=65402
+
+        Reviewed by Stephen White.
+
+        Use one shared GraphicsContext3D for the whole process instead of one per Page as canvases can move between
+        pages and directly draw into contexts in different pages.  Also switches DrawingBufferChromium over to use a
+        directly shared the color attachment instead of copying it to a separate texture and removes the now-unnecessary
+        DrawingBuffer::didReset() call and WillPublishCallback mechanism.
+
+        * page/Page.cpp:
+        (WebCore::Page::sharedGraphicsContext3D):
+        * page/Page.h:
+        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
+        (WebCore::Canvas2DLayerChromium::~Canvas2DLayerChromium):
+        (WebCore::Canvas2DLayerChromium::updateCompositorResources):
+        (WebCore::Canvas2DLayerChromium::textureId):
+        (WebCore::Canvas2DLayerChromium::setDrawingBuffer):
+        * platform/graphics/chromium/CanvasLayerChromium.cpp:
+        (WebCore::CanvasLayerChromium::CanvasLayerChromium):
+        * platform/graphics/chromium/CanvasLayerChromium.h:
+        * platform/graphics/chromium/DrawingBufferChromium.cpp:
+        (WebCore::DrawingBuffer::DrawingBuffer):
+        (WebCore::DrawingBuffer::publishToPlatformLayer):
+        * platform/graphics/chromium/Extensions3DChromium.h:
+        * platform/graphics/chromium/WebGLLayerChromium.cpp:
+        (WebCore::WebGLLayerChromium::WebGLLayerChromium):
+        * platform/graphics/chromium/WebGLLayerChromium.h:
+
+2011-08-05  Anders Carlsson  <andersca@apple.com>
+
+        Fix Chromium build.
+
+        * WebCore.gypi:
+
+2011-08-05  Anders Carlsson  <andersca@apple.com>
+
+        Remove PluginHalter
+        https://bugs.webkit.org/show_bug.cgi?id=65729
+
+        Reviewed by Darin Adler.
+
+        Remove plug-in halter and associated classes.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.exp.in:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * loader/EmptyClients.h:
+        * page/HaltablePlugin.h: Removed.
+        * page/Page.cpp:
+        (WebCore::Page::Page):
+        * page/Page.h:
+        * page/PluginHalter.cpp: Removed.
+        * page/PluginHalter.h: Removed.
+        * page/PluginHalterClient.h: Removed.
+        * page/Settings.cpp:
+        (WebCore::Settings::Settings):
+        * page/Settings.h:
+        * plugins/PluginView.cpp:
+        (WebCore::PluginView::start):
+        (WebCore::PluginView::stop):
+        (WebCore::PluginView::PluginView):
+        * plugins/PluginView.h:
+        * plugins/PluginViewNone.cpp:
+        * plugins/gtk/PluginViewGtk.cpp:
+        * plugins/qt/PluginViewQt.cpp:
+        * plugins/win/PluginViewWin.cpp:
+        * rendering/RenderWidget.cpp:
+        (WebCore::RenderWidget::paint):
+        * rendering/RenderWidget.h:
+
+2011-08-05  Jochen Eisinger  <jochen@chromium.org>
+
+        Introduce a new ResourceRequest::TargetType for XHRs
+        https://bugs.webkit.org/show_bug.cgi?id=65544
+
+        Reviewed by Darin Fisher.
+
+        * platform/network/chromium/ResourceRequest.h:
+        * xml/XMLHttpRequest.cpp:
+        (WebCore::XMLHttpRequest::createRequest):
+
+2011-08-05  Yael Aharon  <yael.aharon@nokia.com>
+
+        dir=auto needs to work on value of input and textarea elements
+        https://bugs.webkit.org/show_bug.cgi?id=65428
+
+        Reviewed by Darin Adler.
+
+        Changed the directionality algorithm to evaluate the value of input elements and textarea elements when
+        they have the attribute dir-auto Set.
+        Also skip these elements when evaluating the directionality of their ancestors.
+
+        HTMLTextAreaElement::childrenChanged is not called when a user types into the textarea, so call
+        calculateAndAdjustDirectionality() explicitly from HTMLTextAreaElement::subtreeHasChanged().
+
+        HTMLInputElement::childrenChanged is not called when a user types into the textarea, so call
+        calculateAndAdjustDirectionality() explicitly from HTMLTextAreaElement::subtreeHasChanged().
+
+        Tests: fast/dom/HTMLElement/attr-dir-auto-changed-text-form-control.html
+               fast/dom/HTMLElement/attr-dir-auto-text-form-control-child.html
+               fast/dom/HTMLElement/attr-dir-auto-text-form-control.html
+
+        * html/HTMLElement.cpp:
+        (WebCore::HTMLElement::directionality):
+        * html/HTMLElement.h:
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::subtreeHasChanged):
+
+2011-08-05  Keishi Hattori  <keishi@webkit.org>
+
+        Implement <input type=color> UI behavior WebCore part
+        https://bugs.webkit.org/show_bug.cgi?id=62619
+
+        Reviewed by Kent Tamura.
+
+        * WebCore.exp.in: Added __ZN7WebCore12ColorChooser7chooserEv and
+        __ZNK7WebCore12ColorChooser13colorSelectedERKNS_5ColorE
+        * WebCore.xcodeproj/project.pbxproj: Added ColorChooser.{h,cpp}
+        * html/ColorInputType.cpp:
+        (WebCore::ColorInputType::~ColorInputType): Added. Close color chooser. ex. when type attribute changes.
+        (WebCore::ColorInputType::valueAsColor): Added.
+        (WebCore::ColorInputType::setValueAsColor): Added.
+        (WebCore::ColorInputType::valueChanged): Update selected color in color chooser too.
+        (WebCore::ColorInputType::handleClickEvent): Opens color chooser.
+        (WebCore::ColorInputType::handleDOMActivateEvent): Called when element.click(). Open color chooser only
+        when it was initiated by a user interaction.
+        (WebCore::ColorInputType::detach): Close color chooser. Called when input element or its ancestors have "display:none"
+        or is removed from DOM.
+        (WebCore::ColorInputType::colorSelected): Callback from color chooser.
+        (WebCore::ColorInputType::closeColorChooserIfClientIsInDocument): Close color chooser if element is in
+        document. Called when the page navigates away.
+        (WebCore::ColorInputType::closeColorChooserIfCurrentClient): Close color chooser if this input type is the current client of ColorChooser.
+        * html/ColorInputType.h:
+        * html/FileInputType.cpp:
+        * html/FileInputType.h:
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::detach): Calls InputType::detach
+        * html/InputType.cpp:
+        (WebCore::InputType::chrome): Added. Used in FileInputType and ColorInputType.
+        (WebCore::InputType::detach): ColorInputType overrides this.
+        * html/InputType.h:
+        * loader/EmptyClients.h:
+        (WebCore::EmptyChromeClient::openColorChooser): Added.
+        (WebCore::EmptyChromeClient::closeColorChooser): Added.
+        (WebCore::EmptyChromeClient::setSelectedColorInColorChooser): Added.
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::transitionToCommitted): Close color chooser when
+        navigating away from the page.
+        * page/Chrome.cpp:
+        (WebCore::Chrome::openColorChooser): Added. Opens the color chooser.
+        (WebCore::Chrome::closeColorChooser): Added. Tries to close the color chooser. Might not close if the
+        listener of the color chooser is another part of the browser or another render process.
+        (WebCore::Chrome::setSelectedColorInColorChooser): Added. Sets the selected color in the color chooser.
+        Again, might not be executed if the listener of the color chooser is another part of the browser or another render process.
+        * page/Chrome.h:
+        * page/ChromeClient.h:
+        * platform/ColorChooser.cpp: Added.
+        (WebCore::ColorChooserClient::~ColorChooserClient): Disconnects itself from the ColorChooser.
+        (WebCore::ColorChooser::chooser): Get shared instance of ColorChooser.
+        (WebCore::ColorChooser::chooser): Get shared instance of ColorChooser.
+        (WebCore::ColorChooser::connectClient): Connects a ColorChooserClient that receives the colorSelected callbacks.
+        (WebCore::ColorChooser::disconnectClient): Disconnects the connectClient.
+        (WebCore::ColorChooser::closeColorChooserIfClientIsInDocument): Close the color chooser if the client is
+        inside the document.
+        (WebCore::ColorChooser::colorSelected): Called from color chooser listener.
+        * platform/ColorChooser.h: Added.
+        (WebCore::ColorChooser::client): Added. Returns the current connected client.
+        (WebCore::ColorChooser::ColorChooser): Added.
+
+2011-08-05  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: check that detaching frame has been attached before removing it from the console selector
+        https://bugs.webkit.org/show_bug.cgi?id=65686
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/JavaScriptContextManager.js:
+        (WebInspector.JavaScriptContextManager.prototype._frameDetached):
+
+2011-08-05  Keishi Hattori  <keishi@webkit.org>
+
+        Sort WebCore.xcodeproj
+        Accomplished using sort-Xcode-project-file.
+
+        * WebCore.xcodeproj/project.pbxproj:
+
+2011-08-05  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: constrain maximum depth for returnByValue objects
+        https://bugs.webkit.org/show_bug.cgi?id=65761
+
+        Set maximum depth to 20 for objects returned by value as a result of evaluations.
+
+        Reviewed by Pavel Feldman.
+
+        * bindings/js/ScriptValue.cpp:
+        (WebCore::jsToInspectorValue):
+        (WebCore::ScriptValue::toInspectorValue):
+        * bindings/v8/ScriptValue.cpp:
+        (WebCore::v8ToInspectorValue):
+        (WebCore::ScriptValue::toInspectorValue):
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::makeCall):
+        * inspector/InspectorValues.h:
+
+2011-08-05  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from appcache IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65752
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * loader/appcache/DOMApplicationCache.idl:
+
+2011-08-04  Hans Wennborg  <hans@chromium.org>
+
+        IndexedDB: Stop using free-lists for database/object store/index ids.
+        https://bugs.webkit.org/show_bug.cgi?id=65678
+
+        Reviewed by Tony Chang.
+
+        Don't use free-lists for database/object store/index ids,
+        just assign increasing numbers.
+
+        It turns out that deleting an object store and creating a new one with
+        the same id would cause the delete markers from the old object store to
+        slow down lookups into the new one. Therefore we should generate
+        a new id every time. Running out of ids (64 bits for databases and
+        object stores, 32 bits for indices) is not realistic.
+
+        Also make functions that generate new ids report errors, and make the
+        callers of those functions check the return values.
+
+        We must still delete free-lists when deleting an object store, and we
+        must keep the code for encoding/decoding/comparison of free-list keys
+        since users might have them in their databases.
+
+        This is just a performance optimization, so no new tests.
+
+        * storage/IDBLevelDBBackingStore.cpp:
+        (WebCore::getNewDatabaseId):
+        (WebCore::IDBLevelDBBackingStore::setIDBDatabaseMetaData):
+        (WebCore::getNewObjectStoreId):
+        (WebCore::IDBLevelDBBackingStore::createObjectStore):
+        (WebCore::IDBLevelDBBackingStore::deleteObjectStore):
+        (WebCore::getNewIndexId):
+        (WebCore::IDBLevelDBBackingStore::createIndex):
+        (WebCore::IDBLevelDBBackingStore::deleteIndex):
+
+2011-08-05  Roland Steiner  <rolandsteiner@chromium.org>
+
+        Unreviewed: change an instance of isImportRule() that was overlooked in commit 92448.
+
+        No new tests. (No functional change)
+
+        * xml/XSLImportRule.h:
+        (WebCore::XSLImportRule::isImportRule):
+
+2011-08-05  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from remaining SVG IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65751
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * svg/SVGElementInstance.idl:
+
+2011-08-05  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: do not delay scroll event handling - scroll is already async.
+        https://bugs.webkit.org/show_bug.cgi?id=65693
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/TextViewer.js:
+        (WebInspector.TextViewer.prototype._syncScroll):
+
+2011-08-05  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from web audio API
+        https://bugs.webkit.org/show_bug.cgi?id=65750
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * webaudio/AudioBufferSourceNode.idl:
+
+2011-08-05  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from Web Workers
+        https://bugs.webkit.org/show_bug.cgi?id=65746
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * workers/AbstractWorker.idl:
+        * workers/DedicatedWorkerContext.idl:
+        * workers/Worker.idl:
+        * workers/WorkerContext.idl:
+
+2011-08-05  Kenichi Ishibashi  <bashi@chromium.org>
+
+        Parsing CSS3 font-feature-settings property
+        https://bugs.webkit.org/show_bug.cgi?id=63618
+
+        Introduces CSS3 font-feature-settings property as -webkit-font-feature-settings.  This change only contains parsing part.  Parsed information are stored in FontDescription class.
+
+        Reviewed by Shinichiro Hamaji.
+
+        Test: css3/font-feature-settings-parsing.html
+
+        * CMakeLists.txt: Added FontFeatureValue.{h,cpp} and FontFeatureSettings.{h,cpp}.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue): Added CSSPropertyWebkitFontFeatureSettings.
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue): Added parsing code for -webkit-font-feature-settings.
+        (WebCore::CSSParser::parseFontFeatureTag): Added.
+        (WebCore::CSSParser::parseFontFeatureSettings): Added.
+        * css/CSSParser.h: Added parseFontFeatureSettings().
+        * css/CSSPropertyNames.in: Added -webkit-font-feature-settings.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyDeclarations): Modified a compile assert to follow adding -webkit-font-feature-settings.
+        (WebCore::CSSStyleSelector::applyProperty): Added a case clause for CSSPropertyWebkitFontFeatureSettings.
+        * css/CSSValue.h:
+        (WebCore::CSSValue::isFontFeatureValue): Added.
+        * css/CSSValueKeywords.in: Added 'on' and 'off' keywords.
+        * css/FontFeatureValue.cpp: Added.
+        (WebCore::FontFeatureValue::FontFeatureValue):
+        (WebCore::FontFeatureValue::value):
+        (WebCore::FontFeatureValue::cssText):
+        * css/FontFeatureValue.h: Added.
+        (WebCore::FontFeatureValue::create):
+        (WebCore::FontFeatureValue::tag):
+        (WebCore::FontFeatureValue::isFontFeatureValue):
+        * platform/graphics/FontDescription.cpp:
+        (WebCore::FontDescription::makeNormalFeatureSettings): Added.
+        * platform/graphics/FontDescription.h:
+        (WebCore::FontDescription::FontDescription): Added m_featureSettings member variable.
+        (WebCore::FontDescription::featureSettings): Added.
+        (WebCore::FontDescription::setFeatureSettings): Added.
+        (WebCore::FontDescription::operator==): Modified to take into account m_featureSettings
+        * platform/graphics/FontFeatureSettings.cpp: Added.
+        (WebCore::FontFeature::FontFeature):
+        (WebCore::FontFeature::operator=):
+        (WebCore::FontFeature::operator==):
+        (WebCore::FontFeatureSettings::FontFeatureSettings):
+        * platform/graphics/FontFeatureSettings.h: Added.
+        (WebCore::FontFeature::tag):
+        (WebCore::FontFeature::value):
+        (WebCore::FontFeatureSettings::create):
+        (WebCore::FontFeatureSettings::append):
+        (WebCore::FontFeatureSettings::size):
+        (WebCore::FontFeatureSettings::operator[]):
+        (WebCore::FontFeatureSettings::at):
+
+2011-08-05  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from websockets
+        https://bugs.webkit.org/show_bug.cgi?id=65749
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * websockets/WebSocket.idl:
+
+2011-08-05  Adam Barth  <abarth@webkit.org>
+
+        Attempt to heal media/video-can-play-type.html and media/video-src-change.html.
+
+        * html/HTMLMediaElement.idl:
+
+2011-08-05  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from notifications IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65747
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * notifications/Notification.idl:
+        * notifications/NotificationCenter.idl:
+
+2011-08-05  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92439.
+        http://trac.webkit.org/changeset/92439
+        https://bugs.webkit.org/show_bug.cgi?id=65753
+
+        Caused 9 tests to fail on Qt (Requested by abarth on #webkit).
+
+        * dom/Document.cpp:
+        (WebCore::Document::implicitOpen):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::transitionToCommitted):
+        (WebCore::FrameLoader::detachChildren):
+
+2011-08-04  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Use RenderedPosition instead of getInlineBoxAndOffset in Editor and AccessibilityObject
+        https://bugs.webkit.org/show_bug.cgi?id=65647
+
+        Reviewed by Hajime Morita.
+
+        Encapsulated the use of getInlineBoxAndOffset in Editor.cpp and AccessibilityObject.cpp by RenderedPosition.
+
+        Also added rendererFromPosition that returns the renderer of deprecatedNode but using a proper Position interface.
+
+        * accessibility/AccessibilityObject.cpp:
+        (WebCore::updateAXLineStartForVisiblePosition):
+        * editing/Editor.cpp:
+        (WebCore::Editor::firstRectForRange):
+        * editing/RenderedPosition.cpp:
+        (WebCore::rendererFromPosition):
+        (WebCore::RenderedPosition::RenderedPosition):
+        (WebCore::RenderedPosition::absoluteRect):
+        * editing/RenderedPosition.h:
+        (WebCore::RenderedPosition::absoluteRect):
+
+2011-08-04  Hayato Ito  <hayato@chromium.org>
+
+        Make ScopedEventQueue enqueue an EventDispatchMediator, instead of an Event.
+        https://bugs.webkit.org/show_bug.cgi?id=65613
+
+        Reviewed by Dimitri Glazkov.
+
+        No changes to functionality so no new tests.
+
+        * dom/Event.h:
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchScopedEvent):
+        * dom/EventDispatcher.h:
+        * dom/Node.cpp:
+        (WebCore::Node::dispatchScopedEvent):
+        (WebCore::Node::dispatchScopedEventDispatchMediator):
+        * dom/Node.h:
+        * dom/ScopedEventQueue.cpp:
+        (WebCore::ScopedEventQueue::~ScopedEventQueue):
+        (WebCore::ScopedEventQueue::enqueueEventDispatchMediator):
+        (WebCore::ScopedEventQueue::dispatchAllEvents):
+        (WebCore::ScopedEventQueue::dispatchEvent):
+        * dom/ScopedEventQueue.h:
+
+2011-08-04  James Robinson  <jamesr@chromium.org>
+
+        Unreviewed build fix.  gcc 4.5 can't figure out that the 'data' variables are always initialized in these functions.
+
+        * bindings/v8/custom/V8WebGLRenderingContextCustom.cpp:
+        (WebCore::jsArrayToFloatArray):
+        (WebCore::jsArrayToIntArray):
+
+2011-08-05  Roland Steiner  <rolandsteiner@chromium.org>
+
+        Improve const-correctness in CSS code: type information methods
+        https://bugs.webkit.org/show_bug.cgi?id=65506
+
+        Reviewed by Simon Fraser.
+
+        Make "is...()" functions (e.g., "isStyleRule()") const.
+        Also, change CSSRule's type() function to return CSSRuleType.
+
+        No new tests. (no change in semantics)
+
+        * css/CSSCharsetRule.h:
+        (WebCore::CSSCharsetRule::isCharsetRule):
+        (WebCore::CSSCharsetRule::type):
+        * css/CSSFontFaceRule.h:
+        (WebCore::CSSFontFaceRule::isFontFaceRule):
+        (WebCore::CSSFontFaceRule::type):
+        * css/CSSImportRule.h:
+        (WebCore::CSSImportRule::isImportRule):
+        (WebCore::CSSImportRule::type):
+        * css/CSSMediaRule.h:
+        (WebCore::CSSMediaRule::isMediaRule):
+        (WebCore::CSSMediaRule::type):
+        * css/CSSPageRule.h:
+        (WebCore::CSSPageRule::isPageRule):
+        (WebCore::CSSPageRule::type):
+        * css/CSSRule.h:
+        (WebCore::CSSRule::isRule):
+        * css/CSSStyleRule.h:
+        (WebCore::CSSStyleRule::isStyleRule):
+        (WebCore::CSSStyleRule::type):
+        * css/CSSUnknownRule.h:
+        (WebCore::CSSUnknownRule::type):
+        * css/StyleBase.h:
+        (WebCore::StyleBase::isCharsetRule):
+        (WebCore::StyleBase::isFontFaceRule):
+        (WebCore::StyleBase::isImportRule):
+        (WebCore::StyleBase::isKeyframeRule):
+        (WebCore::StyleBase::isKeyframesRule):
+        (WebCore::StyleBase::isMediaRule):
+        (WebCore::StyleBase::isPageRule):
+        (WebCore::StyleBase::isRule):
+        (WebCore::StyleBase::isStyleRule):
+        * css/WebKitCSSKeyframeRule.h:
+        (WebCore::WebKitCSSKeyframeRule::isKeyframeRule):
+        (WebCore::WebKitCSSKeyframeRule::type):
+        * css/WebKitCSSKeyframesRule.h:
+        (WebCore::WebKitCSSKeyframesRule::isKeyframesRule):
+        (WebCore::WebKitCSSKeyframesRule::type):
+
+2011-08-04  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from plugin IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65745
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * plugins/DOMMimeTypeArray.idl:
+        * plugins/DOMPlugin.idl:
+        * plugins/DOMPluginArray.idl:
+
+2011-08-04  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from XML/XSL IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65740
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * xml/DOMParser.idl:
+        * xml/XMLSerializer.idl:
+        * xml/XPathEvaluator.idl:
+        * xml/XPathExpression.idl:
+        * xml/XPathNSResolver.idl:
+        * xml/XPathResult.idl:
+        * xml/XSLTProcessor.idl:
+
+2011-08-04  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from canvas IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65737
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * html/canvas/CanvasGradient.idl:
+        * html/canvas/Float32Array.idl:
+        * html/canvas/Float64Array.idl:
+        * html/canvas/Int16Array.idl:
+        * html/canvas/Int32Array.idl:
+        * html/canvas/Int8Array.idl:
+        * html/canvas/OESVertexArrayObject.idl:
+        * html/canvas/Uint16Array.idl:
+        * html/canvas/Uint32Array.idl:
+        * html/canvas/Uint8Array.idl:
+
+2011-08-04  MORITA Hajime  <morrita@google.com>
+
+        Reviewed by Ryosuke Niwa.
+
+        DocumentMarker: Type specific details should be separately held by other object.
+        https://bugs.webkit.org/show_bug.cgi?id=59855
+
+        - Introduced DocumentMarkerDetails abstract class and two its subclasses
+          DocumentMarkerDescription and DocumentMarkerActiveMatch,
+        
+        - Replacing DocumentMarker::m_description and
+          DocumentMarker::m_activeMatch with these new details classes.
+        
+        No new tests. No behavior change.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/DOMAllInOne.cpp:
+        * dom/DocumentMarker.cpp: Added.
+        (WebCore::emptyDescription):
+        (WebCore::DocumentMarkerDetails::DocumentMarkerDetails):
+        (WebCore::DocumentMarkerDetails::~DocumentMarkerDetails):
+        (WebCore::DocumentMarkerDescription::description):
+        (WebCore::DocumentMarkerDescription::isDescription):        
+        (WebCore::DocumentMarkerDescription::DocumentMarkerDescription):
+        (WebCore::DocumentMarkerDescription::createUnlessEmpty):
+        (WebCore::DocumentMarkerDescription::compatibleTypes):
+        (WebCore::DocumentMarkerTextMatch::activeMatch):    
+        (WebCore::DocumentMarkerTextMatch::isTextMatch):
+        (WebCore::DocumentMarkerTextMatch::DocumentMarkerTextMatch):
+        (WebCore::DocumentMarkerTextMatch::instanceFor):
+        (WebCore::DocumentMarkerTextMatch::compatibleTypes):
+        (WebCore::DocumentMarker::DocumentMarker):
+        (WebCore::DocumentMarker::shiftOffsets):
+        (WebCore::DocumentMarker::setActiveMatch):
+        (WebCore::DocumentMarker::description):
+        (WebCore::DocumentMarker::activeMatch):
+        * dom/DocumentMarker.h:
+        (WebCore::DocumentMarker::details):
+        (WebCore::DocumentMarker::clearDetails):
+        (WebCore::DocumentMarkerDetails::isDescription):
+        (WebCore::DocumentMarkerDetails::isTextMatch):
+        (WebCore::DocumentMarkerDetails::isAllowedFor):
+        * dom/DocumentMarkerController.cpp:
+        (WebCore::DocumentMarkerController::clearDescriptionOnMarkersIntersectingRange):
+        * editing/CompositeEditCommand.cpp:
+        (WebCore::CompositeEditCommand::replaceTextInNodePreservingMarkers):
+
+2011-08-04  Scott Graham  <scottmg@chromium.org>
+
+        Bad interaction between document destruction and unload events
+        https://bugs.webkit.org/show_bug.cgi?id=64741
+
+        Reviewed by Adam Barth.
+
+        Three different errors triggered by this test case. The case to
+        consider is a subdocument with an onunload on an element, that
+        destroys the parent document during the onunload. One fix was a
+        lifetime issue fixed by a protecting RefPtr, and another was an
+        additional cancel of event triggers. The main fix was that during the
+        transition to commited state, the documentLoader is being replaced by
+        the provisionalDocumentLoader. But, because during firing events in
+        the subdocument the parent is destroyed, that subevent caused the
+        provisionalDocumentLoader to be detached from its frame. By marking
+        the page as being in committed state before the parent documentLoader
+        is set, this is avoided.
+
+        Test: loader/document-destruction-within-unload.html
+
+        * dom/Document.cpp:
+        (WebCore::Document::implicitOpen):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::transitionToCommitted):
+        (WebCore::FrameLoader::detachChildren):
+
+2011-08-04  Simon Fraser  <simon.fraser@apple.com>
+
+        Add code to determine whether a Range in inside fixed position content
+        https://bugs.webkit.org/show_bug.cgi?id=65720
+
+        Reviewed by Sam Weinig.
+
+        Propagate the 'wasFixed' flag out from various methods that
+        are used when computing the collection of rects or quads
+        for a range. Use the flag in Range to computer whether
+        the Range is entirely within, partially within, or outside
+        of fixed-position content.
+
+        * WebCore.exp.in:
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::boundingBoxRect):
+        * dom/Range.cpp:
+        (WebCore::Range::textRects):
+        (WebCore::Range::textQuads):
+        * dom/Range.h:
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::absoluteQuads):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::absoluteQuads):
+        * rendering/RenderBox.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::absoluteQuads):
+        * rendering/RenderInline.h:
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::absoluteQuads):
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::absoluteRectsForRange):
+        (WebCore::RenderText::absoluteQuads):
+        (WebCore::RenderText::absoluteQuadsForRange):
+        * rendering/RenderText.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::absoluteQuads):
+        * rendering/RenderView.h:
+        * rendering/svg/RenderSVGHiddenContainer.cpp:
+        (WebCore::RenderSVGHiddenContainer::absoluteQuads):
+        * rendering/svg/RenderSVGHiddenContainer.h:
+        * rendering/svg/RenderSVGInline.cpp:
+        (WebCore::RenderSVGInline::absoluteQuads):
+        * rendering/svg/RenderSVGInline.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::absoluteQuads):
+        * rendering/svg/RenderSVGModelObject.h:
+        * rendering/svg/RenderSVGText.cpp:
+        (WebCore::RenderSVGText::absoluteQuads):
+        * rendering/svg/RenderSVGText.h:
+
+2011-08-04  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from Document.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65717
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * dom/Document.idl:
+
+2011-08-04  Simon Fraser  <simon.fraser@apple.com>
+
+        Fix release build failure with last commit.
+
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::mapLocalToContainer):
+
+2011-08-04  Simon Fraser  <simon.fraser@apple.com>
+
+        Add code to determine whether a Range in inside fixed position content
+        https://bugs.webkit.org/show_bug.cgi?id=65720
+
+        Reviewed by Dan Bernstein.
+
+        Add an out param for various coordinate mapping functions
+        that tells us whether the point or rectangle being
+        mapped is inside fixed-position content.
+        
+        This brings back some of the changes from r89754.
+        
+        No behavior changes, so no tests.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::mapLocalToContainer):
+        * rendering/RenderBox.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::mapLocalToContainer):
+        * rendering/RenderInline.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::mapLocalToContainer):
+        (WebCore::RenderObject::localToContainerQuad):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::localToAbsoluteQuad):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::mapLocalToContainer):
+        * rendering/RenderView.h:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        (WebCore::RenderSVGForeignObject::mapLocalToContainer):
+        * rendering/svg/RenderSVGForeignObject.h:
+        * rendering/svg/RenderSVGInline.cpp:
+        (WebCore::RenderSVGInline::mapLocalToContainer):
+        * rendering/svg/RenderSVGInline.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::mapLocalToContainer):
+        * rendering/svg/RenderSVGModelObject.h:
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::mapLocalToContainer):
+        * rendering/svg/RenderSVGRoot.h:
+        * rendering/svg/RenderSVGText.cpp:
+        (WebCore::RenderSVGText::mapLocalToContainer):
+        * rendering/svg/RenderSVGText.h:
+        * rendering/svg/SVGRenderSupport.cpp:
+        (WebCore::SVGRenderSupport::mapLocalToContainer):
+        * rendering/svg/SVGRenderSupport.h:
+
+2011-08-04  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from DOM-related files except Document.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65715
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * dom/CharacterData.idl:
+        * dom/ClientRectList.idl:
+        * dom/Clipboard.idl:
+        * dom/DOMImplementation.idl:
+        * dom/DOMStringList.idl:
+        * dom/DataTransferItem.idl:
+        * dom/DataTransferItems.idl:
+        * dom/DocumentFragment.idl:
+        * dom/Element.idl:
+        * dom/EventListener.idl:
+        * dom/EventTarget.idl:
+        * dom/MediaStream.idl:
+        * dom/MediaStreamList.idl:
+        * dom/MediaStreamTrackList.idl:
+        * dom/MessagePort.idl:
+        * dom/NamedNodeMap.idl:
+        * dom/Node.idl:
+        * dom/NodeFilter.idl:
+        * dom/NodeList.idl:
+        * dom/Range.idl:
+        * dom/RequestAnimationFrameCallback.idl:
+        * dom/StringCallback.idl:
+        * dom/Text.idl:
+        * dom/TouchList.idl:
+
+2011-08-04  Mark Rowe  <mrowe@apple.com>
+
+        Future-proof Xcode configuration settings.
+
+        * Configurations/Base.xcconfig:
+        * Configurations/DebugRelease.xcconfig:
+        * Configurations/Version.xcconfig:
+        * Configurations/WebCore.xcconfig:
+
+2011-08-04  Van Lam  <vanlam@google.com>
+
+        A few purely stylistic modifications to visible_units.cpp
+        https://bugs.webkit.org/show_bug.cgi?id=65723
+
+        Reviewed by Ryosuke Niwa.
+
+        Renamed greatestValueUnder to greatestOffsetUnder, positionIsInsideBox
+        to positionIsInBoxButNotOnBoundary (to avoid confusion with
+        positionIsInBox, which is just a getInlineBoxAndOffset check).
+        Removed use of invalidOffset as an error value in greatestOffsetUnder
+        and smallestOffsetAbove since semantically it should only be used to
+        check if it makes sense to compare offsets in a single box.
+
+        * editing/visible_units.cpp:
+        (WebCore::greatestOffsetUnder):
+        (WebCore::smallestOffsetAbove):
+        (WebCore::positionIsInBoxButNotOnBoundary):
+        (WebCore::leftWordPositionAcrossBoundary):
+        (WebCore::rightWordPositionAcrossBoundary):
+
+2011-08-04  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Implement a global resource limit for DrawingBuffer to limit the amount of GPU memory used by 2d canvas backing stores
+        https://bugs.webkit.org/show_bug.cgi?id=65655
+
+        Reviewed by Kenneth Russell.
+
+        * platform/graphics/gpu/DrawingBuffer.cpp:
+        (WebCore::DrawingBuffer::setResourceLimit):
+        (WebCore::DrawingBuffer::clear):
+        (WebCore::DrawingBuffer::reset):
+        * platform/graphics/gpu/DrawingBuffer.h:
+
+2011-08-04  Kenichi Ishibashi  <bashi@chromium.org>
+
+        [Chromium] Reduce memory consumption of HarfbuzzFace
+        https://bugs.webkit.org/show_bug.cgi?id=65688
+
+        Adds a cache for HB_FaceRec to eliminate multiple allocation for the same font.
+
+        Reviewed by Tony Chang.
+
+        No new tests since there is no behavior change.
+
+        * platform/graphics/chromium/HarfbuzzSkia.cpp:
+        (WebCore::getCachedHarfbuzzFace): Added.
+        (WebCore::releaseCachedHarfbuzzFace): Ditto.
+        (WebCore::HarfbuzzFace::HarfbuzzFace): Calls getCachedHarfbuzzFace() instead of allocating HB_FaceRec.
+        (WebCore::HarfbuzzFace::~HarfbuzzFace): Calls releaseCachedHarfbuzzFace() to release the onership of the cache.
+        * platform/graphics/chromium/HarfbuzzSkia.h:
+
+2011-08-04  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92415.
+        http://trac.webkit.org/changeset/92415
+        https://bugs.webkit.org/show_bug.cgi?id=65728
+
+        Causes many DEBUG crashes (Requested by abarth on #webkit).
+
+        * platform/network/chromium/ResourceRequest.h:
+        * xml/XMLHttpRequest.cpp:
+        (WebCore::XMLHttpRequest::createRequest):
+
+2011-08-04  Tim Horton  <timothy_horton@apple.com>
+
+        Reviewed by Nikolas Zimmerman.
+
+        Errors encountered within SVG documents should be reported to the console
+        https://bugs.webkit.org/show_bug.cgi?id=62599
+        <rdar://problem/9727074>
+
+        Make use of SVGLength::construct when parsing Length attributes; we will
+        now propagate errors which occur while parsing SVGLength attributes to the
+        Web Inspector console.
+
+        * svg/SVGCircleElement.cpp:
+        (WebCore::SVGCircleElement::parseMappedAttribute):
+        * svg/SVGCursorElement.cpp:
+        (WebCore::SVGCursorElement::parseMappedAttribute):
+        * svg/SVGEllipseElement.cpp:
+        (WebCore::SVGEllipseElement::parseMappedAttribute):
+        * svg/SVGFilterElement.cpp:
+        (WebCore::SVGFilterElement::parseMappedAttribute):
+        * svg/SVGFilterPrimitiveStandardAttributes.cpp:
+        (WebCore::SVGFilterPrimitiveStandardAttributes::parseMappedAttribute):
+        * svg/SVGForeignObjectElement.cpp:
+        (WebCore::SVGForeignObjectElement::parseMappedAttribute):
+        * svg/SVGImageElement.cpp:
+        (WebCore::SVGImageElement::parseMappedAttribute):
+        * svg/SVGLineElement.cpp:
+        (WebCore::SVGLineElement::parseMappedAttribute):
+        * svg/SVGLinearGradientElement.cpp:
+        (WebCore::SVGLinearGradientElement::parseMappedAttribute):
+        * svg/SVGMarkerElement.cpp:
+        (WebCore::SVGMarkerElement::parseMappedAttribute):
+        * svg/SVGMaskElement.cpp:
+        (WebCore::SVGMaskElement::parseMappedAttribute):
+        * svg/SVGPatternElement.cpp:
+        (WebCore::SVGPatternElement::parseMappedAttribute):
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::parseMappedAttribute):
+        * svg/SVGRectElement.cpp:
+        (WebCore::SVGRectElement::parseMappedAttribute):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::parseMappedAttribute):
+        * svg/SVGTextContentElement.cpp:
+        (WebCore::SVGTextContentElement::parseMappedAttribute):
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::parseMappedAttribute):
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::parseMappedAttribute):
+
+2011-08-04  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92419.
+        http://trac.webkit.org/changeset/92419
+        https://bugs.webkit.org/show_bug.cgi?id=65726
+
+        "committed partially to branch" (Requested by thorton on
+        #webkit).
+
+        * svg/SVGCircleElement.cpp:
+        (WebCore::SVGCircleElement::parseMappedAttribute):
+        * svg/SVGCursorElement.cpp:
+        (WebCore::SVGCursorElement::parseMappedAttribute):
+        * svg/SVGEllipseElement.cpp:
+        (WebCore::SVGEllipseElement::parseMappedAttribute):
+        * svg/SVGFilterElement.cpp:
+        (WebCore::SVGFilterElement::parseMappedAttribute):
+        * svg/SVGFilterPrimitiveStandardAttributes.cpp:
+        (WebCore::SVGFilterPrimitiveStandardAttributes::parseMappedAttribute):
+        * svg/SVGForeignObjectElement.cpp:
+        (WebCore::SVGForeignObjectElement::parseMappedAttribute):
+        * svg/SVGImageElement.cpp:
+        (WebCore::SVGImageElement::parseMappedAttribute):
+        * svg/SVGLineElement.cpp:
+        (WebCore::SVGLineElement::parseMappedAttribute):
+        * svg/SVGLinearGradientElement.cpp:
+        (WebCore::SVGLinearGradientElement::parseMappedAttribute):
+        * svg/SVGMarkerElement.cpp:
+        (WebCore::SVGMarkerElement::parseMappedAttribute):
+        * svg/SVGMaskElement.cpp:
+        (WebCore::SVGMaskElement::parseMappedAttribute):
+        * svg/SVGPatternElement.cpp:
+        (WebCore::SVGPatternElement::parseMappedAttribute):
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::parseMappedAttribute):
+        * svg/SVGRectElement.cpp:
+        (WebCore::SVGRectElement::parseMappedAttribute):
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::parseMappedAttribute):
+        * svg/SVGTextContentElement.cpp:
+        (WebCore::SVGTextContentElement::parseMappedAttribute):
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::parseMappedAttribute):
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::parseMappedAttribute):
+
+2011-08-04  Fady Samuel  <fsamuel@chromium.org>
+
+        Background Does Not Scale Correctly with Page
+        https://bugs.webkit.org/show_bug.cgi?id=65690
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/repaint/background-scaling.html
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintRootBoxFillLayers):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::unscaledDocumentRect):
+        (WebCore::RenderView::documentRect):
+        * rendering/RenderView.h:
+
+2011-08-04  Jochen Eisinger  <jochen@chromium.org>
+
+        Introduce a new ResourceRequest::TargetType for XHRs
+        https://bugs.webkit.org/show_bug.cgi?id=65544
+
+        Reviewed by Darin Fisher.
+
+        * platform/network/chromium/ResourceRequest.h:
+        * xml/XMLHttpRequest.cpp:
+        (WebCore::XMLHttpRequest::createRequest):
+
+2011-08-04  Sergey Glazunov  <serg.glazunov@gmail.com>
+
+        Fix integer overflow in custom bindings for WebGLRenderingContext
+        https://bugs.webkit.org/show_bug.cgi?id=65646
+
+        Reviewed by Kenneth Russell.
+
+        Test: fast/canvas/webgl/uniform-array-length-overflow.html
+
+        * bindings/js/JSWebGLRenderingContextCustom.cpp:
+        (WebCore::toVector): Don't crash if allocation fails.
+        * bindings/v8/custom/V8WebGLRenderingContextCustom.cpp:
+        (WebCore::jsArrayToFloatArray):
+        (WebCore::jsArrayToIntArray):
+
+2011-08-04  Pratik Solanki  <psolanki@apple.com>
+
+        Implement CERTIFICATE_CREDENTIALS_SUPPORTED for CFNetwork
+        https://bugs.webkit.org/show_bug.cgi?id=65704
+        <rdar://problem/9877734>
+
+        Reviewed by Oliver Hunt.
+
+        Implement support for client side certificate authentication in the CFNetwork based loader.
+
+        * platform/network/cf/AuthenticationCF.cpp:
+        (WebCore::createCF):
+        (WebCore::core): Also fix leak of password string.
+
+2011-08-04  Chris Rogers  <crogers@google.com>
+
+        Make sure that AudioArray is 16-byte aligned
+        https://bugs.webkit.org/show_bug.cgi?id=65651
+
+        Reviewed by Kenneth Russell.
+
+        No new tests - this does not change JavaScript API.
+
+        * platform/audio/AudioArray.h:
+        (WebCore::AudioArray::AudioArray):
+        (WebCore::AudioArray::~AudioArray):
+        (WebCore::AudioArray::allocate):
+        (WebCore::AudioArray::data):
+        (WebCore::AudioArray::size):
+        (WebCore::AudioArray::at):
+        (WebCore::AudioArray::operator[]):
+        (WebCore::AudioArray::alignedAddress):
+        * platform/audio/Biquad.cpp:
+        (WebCore::Biquad::Biquad):
+        * platform/audio/ReverbConvolverStage.cpp:
+        (WebCore::ReverbConvolverStage::ReverbConvolverStage):
+        * webaudio/DelayDSPKernel.cpp:
+        (WebCore::DelayDSPKernel::DelayDSPKernel):
+        * webaudio/RealtimeAnalyser.cpp:
+        (WebCore::RealtimeAnalyser::setFftSize):
+
+2011-08-04  Brady Eidson  <beidson@apple.com>
+
+        <rdar://problem/9882581>, <rdar://problem/9868015>, and https://bugs.webkit.org/show_bug.cgi?id=65712
+        REGRESSION (91931) - Two LocalStorage threads started, thread unsafe operations can cause crash or other problems later.
+
+        Reviewed by Darin Adler.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::internalInitialize): Set the "needs initialization" flag before doing a 
+          whole bunch of stuff that might need to check it.
+
+2011-08-04  Jeff Miller  <jeffm@apple.com>
+
+        Adopt AVCF media back end on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65400
+        <rdar://problem/9894105>
+        
+        First cut at implementation in MediaPlayerPrivateAVFoundationCF.cpp/.h, based on
+        work by Eric Carlson. Note that use of AVFoundation is determined at runtime, and
+        defaults to off.
+
+        Reviewed by Darin Adler.
+
+        No new tests, uses existing media tests.
+
+        * config.h: Turn on WTF_USE_AVFOUNDATION on Windows if AVFoundationCF is available.
+        
+        * platform/graphics/MediaPlayer.cpp:
+        (WebCore::installedMediaEngines): Register MediaPlayerPrivateAVFoundationCF on Windows.
+        * platform/graphics/MediaPlayer.h: Add support for an AVCFPlayer.
+        
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
+        (WebCore::MediaPlayerPrivateAVFoundation::setPreload): Workaround an AVCF limitation that prevents an AVCFPlayer from being created without an AVCFItem.
+        (WebCore::MediaPlayerPrivateAVFoundation::dispatchNotification): Added support for ContentsNeedsDisplay notification.
+        
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.h:
+        (WebCore::MediaPlayerPrivateAVFoundation::contentsNeedsDisplay): Added support for ContentsNeedsDisplay notification.
+        
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.cpp: Added implementation.
+        (WebCore::AVFWrapper::caVideoLayer):
+        (WebCore::AVFWrapper::videoLayerWrapper):
+        (WebCore::AVFWrapper::videoLayer):
+        (WebCore::AVFWrapper::avPlayer):
+        (WebCore::AVFWrapper::avAsset):
+        (WebCore::AVFWrapper::avPlayerItem):
+        (WebCore::AVFWrapper::timeObserver):
+        (WebCore::AVFWrapper::imageGenerator):
+        (WebCore::AVFWrapper::dispatchQueue):
+        (WebCore::LayerClient::LayerClient):
+        (WebCore::LayerClient::~LayerClient):
+        (WebCore::LayerClient::platformCALayerRespondsToLayoutChanges):
+        (WebCore::LayerClient::platformCALayerAnimationStarted):
+        (WebCore::LayerClient::platformCALayerContentsOrientation):
+        (WebCore::LayerClient::platformCALayerPaintContents):
+        (WebCore::LayerClient::platformCALayerShowDebugBorders):
+        (WebCore::LayerClient::platformCALayerShowRepaintCounter):
+        (WebCore::LayerClient::platformCALayerIncrementRepaintCount):
+        (WebCore::LayerClient::platformCALayerContentsOpaque):
+        (WebCore::LayerClient::platformCALayerDrawsContent):
+        (WebCore::LayerClient::platformCALayerLayerDidDisplay):
+        (WebCore::boolString):
+        (WebCore::metadataKeyNames):
+        (WebCore::CMTimeRangeStartKey):
+        (WebCore::CMTimeRangeDurationKey):
+        (WebCore::CACFContextNeedsFlushNotification):
+        (WebCore::videoLayer):
+        (WebCore::avPlayer):
+        (WebCore::avAsset):
+        (WebCore::avPlayerItem):
+        (WebCore::imageGenerator):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::create):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::registerMediaEngine):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::MediaPlayerPrivateAVFoundationCF):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::~MediaPlayerPrivateAVFoundationCF):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::cancelLoad):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::hasLayerRenderer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::hasContextRenderer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createContextVideoRenderer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::destroyContextVideoRenderer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createVideoLayer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::destroyVideoLayer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::hasAvailableVideoFrame):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createAVPlayer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createAVPlayerItem):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::createAVAssetForURL):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::checkPlayability):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::beginLoadingMetadata):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::playerItemStatus):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformMedia):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformLayer):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformSetVisible):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformPlay):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformPause):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::updateRate):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformDuration):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::currentTime):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::seekToTime):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::setVolume):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::setClosedCaptionsVisible):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::rate):
+        (WebCore::timeRangeIsValidAndNotEmpty):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformBufferedTimeRanges):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformMaxTimeSeekable):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::platformMaxTimeLoaded):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::totalBytes):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::assetStatus):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::paintCurrentFrameInContext):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::paint):
+        (WebCore::mimeTypeCache):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::getSupportedTypes):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::supportsType):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::isAvailable):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::mediaTimeForTimeValue):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::tracksChanged):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::sizeChanged):
+        (WebCore::MediaPlayerPrivateAVFoundationCF::contentsNeedsDisplay):
+        (WebCore::AVFWrapper::AVFWrapper):
+        (WebCore::AVFWrapper::~AVFWrapper):
+        (WebCore::AVFWrapper::scheduleDisconnectAndDelete):
+        (WebCore::AVFWrapper::disconnectAndDeleteAVFWrapper):
+        (WebCore::AVFWrapper::deleteAVFWrapper):
+        (WebCore::AVFWrapper::createAssetForURL):
+        (WebCore::AVFWrapper::createPlayer):
+        (WebCore::AVFWrapper::createPlayerItem):
+        (WebCore::AVFWrapper::periodicTimeObserverCallback):
+        (WebCore::AVFWrapper::notificationCallback):
+        (WebCore::AVFWrapper::loadPlayableCompletionCallback):
+        (WebCore::AVFWrapper::checkPlayability):
+        (WebCore::AVFWrapper::loadMetadataCompletionCallback):
+        (WebCore::AVFWrapper::beginLoadingMetadata):
+        (WebCore::AVFWrapper::seekCompletedCallback):
+        (WebCore::AVFWrapper::seekToTime):
+        (WebCore::AVFWrapper::setAsset):
+        (WebCore::AVFWrapper::platformLayer):
+        (WebCore::AVFWrapper::createAVCFVideoLayer):
+        (WebCore::AVFWrapper::destroyVideoLayer):
+        (WebCore::AVFWrapper::setVideoLayerNeedsCommit):
+        (WebCore::AVFWrapper::setVideoLayerHidden):
+        (WebCore::AVFWrapper::createImageGenerator):
+        (WebCore::AVFWrapper::destroyImageGenerator):
+        (WebCore::AVFWrapper::createImageForTimeInRect):
+        (WebCore::LayerClient::platformCALayerLayoutSublayersOfLayer):
+
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.h: Added implementation.
+
+2011-08-04  Jochen Eisinger  <jochen@chromium.org>
+
+        Get rid of ResourceRequestBase::m_targetType. Move it to chromium's ResourceRequest.
+        https://bugs.webkit.org/show_bug.cgi?id=48483
+
+        Reviewed by Alexey Proskuryakov.
+
+        * loader/PingLoader.cpp:
+        (WebCore::PingLoader::loadImage):
+        (WebCore::PingLoader::sendPing):
+        (WebCore::PingLoader::reportContentSecurityPolicyViolation):
+        * loader/cache/CachedResourceRequest.cpp:
+        (WebCore::CachedResourceRequest::load):
+        * platform/graphics/gstreamer/WebKitWebSourceGStreamer.cpp:
+        (webKitWebSrcStart):
+        * platform/network/ResourceRequestBase.cpp:
+        (WebCore::ResourceRequestBase::adopt):
+        (WebCore::ResourceRequestBase::copyData):
+        * platform/network/ResourceRequestBase.h:
+        (WebCore::ResourceRequestBase::ResourceRequestBase):
+        * platform/network/chromium/ResourceRequest.cpp:
+        (WebCore::ResourceRequest::doPlatformCopyData):
+        (WebCore::ResourceRequest::doPlatformAdopt):
+        * platform/network/chromium/ResourceRequest.h:
+        (WebCore::ResourceRequest::ResourceRequest):
+        (WebCore::ResourceRequest::targetType):
+        (WebCore::ResourceRequest::setTargetType):
+        * workers/DefaultSharedWorkerRepository.cpp:
+        (WebCore::SharedWorkerScriptLoader::load):
+        * workers/Worker.cpp:
+        (WebCore::Worker::create):
+        * workers/WorkerContext.cpp:
+        (WebCore::WorkerContext::importScripts):
+        * workers/WorkerScriptLoader.cpp:
+        (WebCore::WorkerScriptLoader::WorkerScriptLoader):
+        (WebCore::WorkerScriptLoader::createResourceRequest):
+        * workers/WorkerScriptLoader.h:
+        (WebCore::WorkerScriptLoader::create):
+        (WebCore::WorkerScriptLoader::setTargetType):
+
+2011-08-04  Jeff Miller  <jeffm@apple.com>
+
+        Fix WinCE build after r92308.
+
+        * config.h: Don't try to include WebCoreHeaderDetection.h for WinCE.
+
+2011-08-04  Darin Fisher  <darin@chromium.org>
+
+        webkitRequestAnimationFrame's element argument needs to be marked optional
+        https://bugs.webkit.org/show_bug.cgi?id=65698
+
+        Reviewed by James Robinson.
+
+        * page/DOMWindow.idl:
+
+2011-08-04  Adam Roben  <aroben@apple.com>
+
+        Delete some unused code from platform/graphics/win
+
+        MediaPlayerPrivateQuickTimeWin has been unused since r72117, and the GraphicsLayer-related
+        classes have been unused since r75262.
+
+        Fixes <http://webkit.org/b/65689> platform/graphics/win has a bunch of unused code
+
+        Reviewed by Eric Carlson.
+
+        * WebCore.gypi:
+        * WebCore.vcproj/WebCore.vcproj:
+        Removed now-deleted files.
+
+        * platform/graphics/win/GraphicsLayerCACF.cpp: Removed.
+        * platform/graphics/win/GraphicsLayerCACF.h: Removed.
+        * platform/graphics/win/MediaPlayerPrivateQuickTimeWin.cpp: Removed.
+        * platform/graphics/win/MediaPlayerPrivateQuickTimeWin.h: Removed.
+        * platform/graphics/win/WebLayer.cpp: Removed.
+        * platform/graphics/win/WebLayer.h: Removed.
+        * platform/graphics/win/WebTiledLayer.cpp: Removed.
+        * platform/graphics/win/WebTiledLayer.h: Removed.
+
+2011-08-03  Adam Roben  <aroben@apple.com>
+
+        Detect and handle overflow in PlatformCALayerWinInternal::constrainedSize
+
+        Google Maps sometimes requests very large (i.e., 2^50 pixels or greater) layers when
+        zooming. PlatformCALayerWinInternal has code to limit tiled layers to 2^27 pixels, but it
+        was not correctly handling overflow. In some cases, this would lead to creating a tiled
+        layer with 0 tiles, which was the cause of this crash.
+
+        Fixes <http://webkit.org/b/65637> <rdar://problem/9784849> Crash beneath
+        PlatformCALayerWinInternal::updateTiles when zooming on Google Maps
+
+        Reviewed by Sam Weinig.
+
+        Test: compositing/tiling/crash-huge-layer.html
+
+        * platform/graphics/ca/win/PlatformCALayerWinInternal.cpp:
+        (PlatformCALayerWinInternal::constrainedSize): Check for overflow before seeing if the
+        number of required tiles is larger than the maximum number of allowed tiles.
+        (PlatformCALayerWinInternal::updateTiles): Added an assertion to catch cases where we have a
+        non-empty tiled layer that contains 0 tiles, which would cause the crash in this bug report.
+
+2011-08-04  Stephen White  <senorblanco@chromium.org>
+
+        Set graphics context current before canvas.toDataURL().
+        https://bugs.webkit.org/show_bug.cgi?id=65700
+
+        Reviewed by James Robinson.
+
+        No new tests, unfortunately.  The test infrastucture doesn't seem
+        to be conducive to writing multiple-context tests.
+
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::toDataURL):
+
+2011-08-01  Brian Weinstein  <bweinstein@apple.com>
+
+        WebKit2: Web Inspector always starts in undocked mode
+        https://bugs.webkit.org/show_bug.cgi?id=65493
+        <rdar://problem/9353114>
+        
+        Reviewed by Adam Roben.
+        
+        Expose some methods on InspectorFrontendClient through the InspectorController so WebKit2
+        can request the inspector be docked, or ask whether or not it can be docked.
+
+        * WebCore.exp.in: Export needed methods.
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::requestAttachWindow): Call through to InspectorFrontendClient.
+        (WebCore::InspectorController::canAttachWindow): Ditto.
+        * inspector/InspectorController.h:
+        * inspector/InspectorFrontendClient.h:
+        * inspector/InspectorFrontendClientLocal.h:
+
+2011-08-04  Luke Macpherson   <macpherson@chromium.org>
+
+        Support cast between CSSPrimitiveValue and EborderFit, use in CSSStyleSelector.
+        https://bugs.webkit.org/show_bug.cgi?id=65665
+
+        Reviewed by Simon Fraser.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValueMappings.h:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        Support cast from EBorderFit.
+        (WebCore::CSSPrimitiveValue::operator EBorderFit):
+        Support cast to EBorderFit.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use new cast to allow use of appropriate macro.
+
+2011-08-04  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: rename sendResultByValue to returnByValue in Runtime agent.
+        https://bugs.webkit.org/show_bug.cgi?id=65687
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::evaluate):
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorRuntimeAgent.h:
+
+2011-08-04  Matt Falkenhagen  <falken@chromium.org>
+
+        Use -webkit-locale for font selection.
+        https://bugs.webkit.org/show_bug.cgi?id=10874
+
+        Reviewed by Dan Bernstein.
+
+        Infer a script from -webkit-locale to use to choose a font for generic
+        font families and the default unstyled font.  The font is retrieved
+        from per-script font settings (see bug 20797).  Since these settings
+        have not changed there should be no visible effect yet.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * css/CSSFontSelector.cpp: Use script when getting font from Settings
+        (WebCore::fontDataForGenericFamily):
+        (WebCore::CSSFontSelector::getFontData):
+        * css/CSSPropertyNames.in: Increase priority of -webkit-locale since it affects font
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForDocument):
+        (WebCore::CSSStyleSelector::applyDeclarations):
+        (WebCore::CSSStyleSelector::applyProperty): Set script in font based on -webkit-locale
+        * page/Settings.cpp:
+        (WebCore::getGenericFontFamilyForScript): Fallback to USCRIPT_COMMON
+        * platform/graphics/FontDescription.h: Add m_script
+        (WebCore::FontDescription::FontDescription):
+        (WebCore::FontDescription::script):
+        (WebCore::FontDescription::setScript):
+        (WebCore::FontDescription::operator==):
+        * platform/text/LocaleToScriptMapping.h: Added.
+        * platform/text/LocaleToScriptMappingDefault.cpp: Added.
+        (WebCore::localeToScriptCodeForFontSelection):
+        (WebCore::LocaleScript::if):
+        (WebCore::LocaleScript::while):
+        * platform/text/LocaleToScriptMappingICU.cpp: Added.
+        (WebCore::scriptCodeForFontSelection):
+        (WebCore::localeToScriptCodeForFontSelection):
+
+2011-08-04  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Pretty print JSONP in network panel preview tab.
+        https://bugs.webkit.org/show_bug.cgi?id=65559
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/network/network-preview-json.html
+
+        * inspector/front-end/ResourceJSONView.js:
+        (WebInspector.ResourceJSONView.parseJSON.WebInspector.ResourceJSONView.parseJSONP):
+        (WebInspector.ResourceJSONView.parseJSON.WebInspector.ResourceJSONView.prototype._initialize):
+        (WebInspector.ResourceJSONView.parseJSON.WebInspector.ParsedJSON):
+        * inspector/front-end/ResourcePreviewView.js:
+        (WebInspector.ResourcePreviewView.prototype._createPreviewView):
+
+2011-08-04  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: replace isRegex with urlRegex in setBreakpointByUrl
+        https://bugs.webkit.org/show_bug.cgi?id=65684
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorDebuggerAgent.cpp:
+        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):
+        * inspector/InspectorDebuggerAgent.h:
+        * inspector/front-end/DebuggerModel.js:
+        (WebInspector.DebuggerModel.prototype.setBreakpoint):
+
+2011-08-03  Philippe Normand  <pnormand@igalia.com>
+
+        [GTK] fullscreen/video-controls-override.html fails
+        https://bugs.webkit.org/show_bug.cgi?id=65618
+
+        Reviewed by Martin Robinson.
+
+        Implement extraFullScreenStyleSheet() and provide the QuickTime
+        stylesheet for now, later we might want our own stylesheet.
+
+        * GNUmakefile.am:
+        * platform/gtk/RenderThemeGtk.cpp:
+        (WebCore::RenderThemeGtk::extraFullScreenStyleSheet):
+        * platform/gtk/RenderThemeGtk.h:
+
+2011-08-04  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Rename sourceId -> scriptId in the protocol and the source code.
+        https://bugs.webkit.org/show_bug.cgi?id=65682
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScriptSource.js:
+        ():
+        * inspector/Inspector.json:
+        * inspector/InspectorConsoleAgent.cpp:
+        (WebCore::InspectorConsoleAgent::addMessageToConsole):
+        * inspector/InspectorConsoleAgent.h:
+        * inspector/InspectorConsoleInstrumentation.h:
+        (WebCore::InspectorInstrumentation::addMessageToConsole):
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::buildObjectForEventListener):
+        * inspector/InspectorDebuggerAgent.cpp:
+        (WebCore::parseLocation):
+        (WebCore::InspectorDebuggerAgent::setBreakpoint):
+        (WebCore::InspectorDebuggerAgent::continueToLocation):
+        (WebCore::InspectorDebuggerAgent::resolveBreakpoint):
+        (WebCore::InspectorDebuggerAgent::setScriptSource):
+        (WebCore::InspectorDebuggerAgent::getScriptSource):
+        (WebCore::InspectorDebuggerAgent::didParseSource):
+        * inspector/InspectorDebuggerAgent.h:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::addMessageToConsoleImpl):
+        * inspector/InspectorInstrumentation.h:
+        * inspector/ScriptDebugListener.h:
+        * inspector/front-end/DebuggerModel.js:
+        (WebInspector.DebuggerModel.prototype.scriptForSourceID):
+        (WebInspector.DebuggerModel.prototype.queryScripts):
+        (WebInspector.DebuggerModel.prototype.setScriptSource):
+        (WebInspector.DebuggerModel.prototype._didEditScriptSource):
+        (WebInspector.DebuggerModel.prototype._parsedScriptSource):
+        (WebInspector.DebuggerDispatcher.prototype.scriptParsed):
+        (WebInspector.DebuggerDispatcher.prototype.breakpointResolved):
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel.prototype.registerAnchor):
+        (WebInspector.DebuggerPresentationModel.prototype._updateAnchor):
+        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource.didReceiveSource):
+        (WebInspector.DebuggerPresentationModel.prototype.setScriptSource):
+        (WebInspector.DebuggerPresentationModel.prototype._setBreakpointInDebugger.didGetScriptLocation):
+        (WebInspector.DebuggerPresentationModel.prototype._setBreakpointInDebugger):
+        (WebInspector.DebuggerPresentationModel.prototype._breakpointAdded):
+        (WebInspector.DebuggerPresentationModel.prototype.set _debuggerPaused):
+        (WebInspector.DebuggerPresentationModel.prototype._sourceFileForScript):
+        (WebInspector.DebuggerPresentationModel.prototype._scriptForSourceFileId):
+        (WebInspector.DebuggerPresentationModel.prototype._createSourceFileId):
+        (WebInspector.PresenationCallFrame):
+        (WebInspector.PresenationCallFrame.prototype.sourceLine):
+        * inspector/front-end/EventListenersSidebarPane.js:
+        (.):
+        ():
+        * inspector/front-end/Script.js:
+        (WebInspector.Script):
+        (WebInspector.Script.prototype.requestSource):
+        (WebInspector.Script.prototype.editSource):
+        * inspector/front-end/SourceFile.js:
+        (WebInspector.RawSourceCode.prototype.uiLocationToRawLocation):
+        (WebInspector.RawSourceCode.prototype.forceLoadContent):
+        (WebInspector.RawSourceCode.prototype._concatenateScriptsContent):
+
+2011-08-04  Tommy Widenflycht  <tommyw@google.com>
+
+        MediaStream API: Rename StreamEvent to MediaStreamEvent
+        https://bugs.webkit.org/show_bug.cgi?id=65669
+
+        Reviewed by Tony Gentilcore.
+
+        * CMakeLists.txt:
+        * CodeGenerators.pri:
+        * DerivedSources.cpp:
+        * DerivedSources.make:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/js/JSEventCustom.cpp:
+        (WebCore::toJS):
+        * bindings/v8/custom/V8EventCustom.cpp:
+        (WebCore::toV8):
+        * dom/DOMAllInOne.cpp:
+        * dom/Event.cpp:
+        (WebCore::Event::isMediaStreamEvent):
+        * dom/Event.h:
+        * p2p/MediaStreamEvent.cpp: Renamed from Source/WebCore/dom/StreamEvent.cpp.
+        (WebCore::MediaStreamEvent::create):
+        (WebCore::MediaStreamEvent::MediaStreamEvent):
+        (WebCore::MediaStreamEvent::~MediaStreamEvent):
+        (WebCore::MediaStreamEvent::initMediaStreamEvent):
+        (WebCore::MediaStreamEvent::stream):
+        * p2p/MediaStreamEvent.h: Renamed from Source/WebCore/dom/StreamEvent.h.
+        (WebCore::MediaStreamEvent::isMediaStreamEvent):
+        * p2p/MediaStreamEvent.idl: Renamed from Source/WebCore/dom/StreamEvent.idl.
+        * p2p/PeerConnection.cpp:
+        (WebCore::PeerConnection::dispatchStreamEvent):
+
+2011-08-02  Hans Wennborg  <hans@chromium.org>
+
+        IndexedDB: Fix index data invalidation bugs.
+        https://bugs.webkit.org/show_bug.cgi?id=65547
+
+        Reviewed by Tony Chang.
+
+        The function that checks whether a key exists in an index failed
+        to check whether that key was still valid or not.
+
+        Deleting a record from an object store must also delete its exists
+        entry, thus invalidating index keys pointing to that record.
+
+        Test: storage/indexeddb/index-unique.html
+
+        * storage/IDBLevelDBBackingStore.cpp:
+        (WebCore::IDBLevelDBBackingStore::deleteObjectStoreRecord):
+        (WebCore::findKeyInIndex):
+        (WebCore::IDBLevelDBBackingStore::getPrimaryKeyViaIndex):
+        (WebCore::IDBLevelDBBackingStore::keyExistsInIndex):
+        (WebCore::CursorOptions::IndexKeyCursorImpl::loadCurrentRow):
+
+2011-08-04  Alexandru Chiculita  <achicu@adobe.com>
+
+        Move PODIntervalTree to Source/WebCore/platform
+        https://bugs.webkit.org/show_bug.cgi?id=65667
+
+        It seems the files were not part of any project, so no project files were modified.
+
+        Reviewed by Adam Barth.
+
+        No new tests, just moving files from one folder to the other.
+
+        * platform/PODArena.h: Renamed from Source/WebCore/platform/graphics/gpu/PODArena.h.
+        (WebCore::PODArena::Allocator::~Allocator):
+        (WebCore::PODArena::FastMallocAllocator::create):
+        (WebCore::PODArena::FastMallocAllocator::allocate):
+        (WebCore::PODArena::FastMallocAllocator::free):
+        (WebCore::PODArena::FastMallocAllocator::FastMallocAllocator):
+        (WebCore::PODArena::create):
+        (WebCore::PODArena::allocateObject):
+        (WebCore::PODArena::~PODArena):
+        (WebCore::PODArena::PODArena):
+        (WebCore::PODArena::minAlignment):
+        (WebCore::PODArena::allocateBase):
+        (WebCore::PODArena::roundUp):
+        (WebCore::PODArena::Chunk::Chunk):
+        (WebCore::PODArena::Chunk::~Chunk):
+        (WebCore::PODArena::Chunk::allocate):
+        * platform/PODInterval.h: Renamed from Source/WebCore/platform/graphics/gpu/PODInterval.h.
+        (WebCore::PODInterval::PODInterval):
+        (WebCore::PODInterval::low):
+        (WebCore::PODInterval::high):
+        (WebCore::PODInterval::data):
+        (WebCore::PODInterval::overlaps):
+        (WebCore::PODInterval::operator<):
+        (WebCore::PODInterval::operator==):
+        (WebCore::PODInterval::maxHigh):
+        (WebCore::PODInterval::setMaxHigh):
+        (WebCore::PODInterval::toString):
+        * platform/PODIntervalTree.h: Renamed from Source/WebCore/platform/graphics/gpu/PODIntervalTree.h.
+        (WebCore::PODIntervalTree::PODIntervalTree):
+        (WebCore::PODIntervalTree::allOverlaps):
+        (WebCore::PODIntervalTree::createInterval):
+        (WebCore::PODIntervalTree::checkInvariants):
+        (WebCore::PODIntervalTree::init):
+        (WebCore::PODIntervalTree::searchForOverlapsFrom):
+        (WebCore::PODIntervalTree::updateNode):
+        (WebCore::PODIntervalTree::checkInvariantsFromNode):
+        * platform/PODRedBlackTree.h: Renamed from Source/WebCore/platform/graphics/gpu/PODRedBlackTree.h.
+        (WebCore::PODRedBlackTree::Visitor::~Visitor):
+        (WebCore::PODRedBlackTree::PODRedBlackTree):
+        (WebCore::PODRedBlackTree::~PODRedBlackTree):
+        (WebCore::PODRedBlackTree::add):
+        (WebCore::PODRedBlackTree::remove):
+        (WebCore::PODRedBlackTree::contains):
+        (WebCore::PODRedBlackTree::visitInorder):
+        (WebCore::PODRedBlackTree::size):
+        (WebCore::PODRedBlackTree::setNeedsFullOrderingComparisons):
+        (WebCore::PODRedBlackTree::checkInvariants):
+        (WebCore::PODRedBlackTree::dump):
+        (WebCore::PODRedBlackTree::setVerboseDebugging):
+        (WebCore::PODRedBlackTree::Node::Node):
+        (WebCore::PODRedBlackTree::Node::~Node):
+        (WebCore::PODRedBlackTree::Node::color):
+        (WebCore::PODRedBlackTree::Node::setColor):
+        (WebCore::PODRedBlackTree::Node::data):
+        (WebCore::PODRedBlackTree::Node::copyFrom):
+        (WebCore::PODRedBlackTree::Node::left):
+        (WebCore::PODRedBlackTree::Node::setLeft):
+        (WebCore::PODRedBlackTree::Node::right):
+        (WebCore::PODRedBlackTree::Node::setRight):
+        (WebCore::PODRedBlackTree::Node::parent):
+        (WebCore::PODRedBlackTree::Node::setParent):
+        (WebCore::PODRedBlackTree::root):
+        (WebCore::PODRedBlackTree::updateNode):
+        (WebCore::PODRedBlackTree::treeSearch):
+        (WebCore::PODRedBlackTree::treeSearchNormal):
+        (WebCore::PODRedBlackTree::treeSearchFullComparisons):
+        (WebCore::PODRedBlackTree::treeInsert):
+        (WebCore::PODRedBlackTree::treeSuccessor):
+        (WebCore::PODRedBlackTree::treeMinimum):
+        (WebCore::PODRedBlackTree::propagateUpdates):
+        (WebCore::PODRedBlackTree::leftRotate):
+        (WebCore::PODRedBlackTree::rightRotate):
+        (WebCore::PODRedBlackTree::insertNode):
+        (WebCore::PODRedBlackTree::deleteFixup):
+        (WebCore::PODRedBlackTree::deleteNode):
+        (WebCore::PODRedBlackTree::visitInorderImpl):
+        (WebCore::PODRedBlackTree::Counter::Counter):
+        (WebCore::PODRedBlackTree::Counter::visit):
+        (WebCore::PODRedBlackTree::Counter::count):
+        (WebCore::PODRedBlackTree::checkInvariantsFromNode):
+        (WebCore::PODRedBlackTree::logIfVerbose):
+        (WebCore::PODRedBlackTree::dumpFromNode):
+
+2011-08-03  Alice Boxhall  <aboxhall@chromium.org>
+
+        An element with role=textbox should have settable AXValue unless read-only
+        https://bugs.webkit.org/show_bug.cgi?id=65664
+
+        Reviewed by Chris Fleizach.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::canSetValueAttribute):
+        Return true for non-native text field with aria-readonly not set.
+
+2011-08-03  Luke Macpherson   <macpherson@chromium.org>
+
+        Clean up value clamping in CSSStyleSelector.
+        https://bugs.webkit.org/show_bug.cgi?id=65588
+
+        Reviewed by Darin Adler.
+
+        No new tests / trivial code cleanup only.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Replace (unsigned int)primitiveValue->getDoubleValue() with primtiveValue->getValue<unsigned>() for correct clamping.
+        Replace clampToInteger(primitiveValue->getDoubleValue()) with primitiveValue->getIntValue().
+
+2011-08-03  Kent Tamura  <tkent@chromium.org>
+
+        Fix incorrect checks for HTMLMediaElement
+        https://bugs.webkit.org/show_bug.cgi?id=65590
+
+        Reviewed by Dimitri Glazkov.
+
+        <video> and <audio> can be an HTMLElement instance instead of
+        HTMLMediaElement if MediaPlayer::isAvailable() returns false or
+        the media feature is disabled at runtime.
+
+        * html/HTMLSourceElement.cpp:
+        (WebCore::HTMLSourceElement::insertedIntoTree):
+        (WebCore::HTMLSourceElement::willRemove):
+        * html/HTMLTrackElement.cpp:
+        (WebCore::HTMLTrackElement::insertedIntoTree):
+        (WebCore::HTMLTrackElement::willRemove):
+        * html/shadow/MediaControlElements.cpp:
+        (WebCore::toParentMediaElement):
+        * page/FrameView.cpp:
+        (WebCore::FrameView::updateWidget):
+        * platform/efl/RenderThemeEfl.cpp:
+        (WebCore::RenderThemeEfl::paintMediaMuteButton):
+        * platform/gtk/RenderThemeGtk.cpp:
+        (WebCore::getMediaElementFromRenderObject):
+        * rendering/RenderThemeMac.mm:
+        (WebCore::RenderThemeMac::paintMediaSliderTrack):
+        * rendering/RenderThemeWinCE.cpp:
+        (WebCore::mediaElementParent):
+
+2011-08-03  Sailesh Agrawal  <sail@chromium.org>
+
+        Chromium Mac: Make ScrollbarOverlayUtilitiesChromiumMac.h c++ compatible
+        https://bugs.webkit.org/show_bug.cgi?id=65659
+
+        Reviewed by James Robinson.
+
+        ScrollbarOverlayUtilitiesChromiumMac.h couldn't be included from pure c++ code because it used NSInteger. I fixed this by checking for __OBJC__ before using NSInteger.
+
+        Currently no pure c++ files are including ScrollbarOverlayUtilitiesChromiumMac.h but this will change in future patches from jam@chromium.org.
+
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.h:
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.mm:
+        (wkScrollbarPainterControllerStyle):
+        (wkSetScrollbarPainterControllerStyle):
+
+2011-08-03  Luke Macpherson   <macpherson@chromium.org>
+
+        Support cast between CSSPrimitiveValue and EBoxSizing, use in CSSStyleSelector.
+        https://bugs.webkit.org/show_bug.cgi?id=65657
+
+        Reviewed by Simon Fraser.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValueMappings.h:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        Implement cast from EBoxSizing.
+        (WebCore::CSSPrimitiveValue::operator EBoxSizing):
+        Implement cast to EBoxSizing.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use appropriate macro to simplify code using cast.
+
+2011-08-03  Ian Henderson  <ianh@apple.com>
+
+        Draw rectangular box shadow for elements with border-radius if no corners are visible
+        https://bugs.webkit.org/show_bug.cgi?id=65006
+
+        Reviewed by Simon Fraser.
+
+        Change "unroundClippedCorners" to "allCornersClippedOut" and use it to
+        determine when the corners' influence affects the blurred shadow in
+        the current drawing region.
+
+        Test: fast/box-shadow/box-shadow-clipped-slices.html
+
+        * rendering/InlineFlowBox.cpp:
+        (WebCore::InlineFlowBox::paintBoxShadow): Pass PaintInfo through to
+        RenderBoxModelObject::paintBoxShadow.
+        (WebCore::InlineFlowBox::paintBoxDecorations): Ditto.
+        * rendering/InlineFlowBox.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintBoxDecorations): Ditto.
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::allCornersClippedOut): Determines whether the bounding rects
+        for any of the given rounded rect's corners intersects the clip rect.
+        (WebCore::RenderBoxModelObject::paintBorder): Instead of "unrounding"
+        any corner outside the clip rect, unround all corners at once, and
+        only if they are all outside the clip rect.
+        (WebCore::RenderBoxModelObject::paintBoxShadow): Determine whether any
+        corner will influence shadow drawing using allCornersClippedOut on the
+        influenceRect, whose corners extend past the fillRect's corners by the
+        blur radius and inside the fillRect's corners by the blur radius.
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderFieldset.cpp:
+        (WebCore::RenderFieldset::paintBoxDecorations): Pass PaintInfo into
+        RenderBoxModelObject::paintBoxShadow.
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::paintBoxDecorations): Ditto.
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::paintBoxDecorations): Ditto.
+
+2011-08-03  No'am Rosenthal  <noam.rosenthal@nokia.com>
+
+        [Qt][Texmap][REGRESSION] http://webkit.org/blog-files/transform-style.html doesn't show composited content
+        https://bugs.webkit.org/show_bug.cgi?id=65629
+
+        Reviewed by Benjamin Poulain.
+
+        Some non-ES2 initialization was wrongfully #ifdefed in CPU(X86) and thus compiled-out.
+        When put it in the correct #ifdef, composited layers which require an intermediate buffer
+        work again.
+
+        No new tests. Existing opacity tests in LayoutTests/compositing test this.
+
+        * platform/graphics/opengl/TextureMapperGL.cpp:
+        (WebCore::BitmapTextureGL::bind):
+
+2011-08-03  Mark Rowe  <mrowe@apple.com>
+
+        Bring some order to FeatureDefines.xcconfig to make it easier to follow.
+
+        Reviewed by Sam Weinig.
+
+        * Configurations/FeatureDefines.xcconfig:
+
+2011-08-03  Mark Rowe  <mrowe@apple.com>
+
+        Clean up FeatureDefines.xcconfig to remove some unnecessary conditional settings
+
+        Reviewed by Dave Kilzer.
+
+        * Configurations/FeatureDefines.xcconfig:
+
+2011-08-02  Adrienne Walker  <enne@google.com>
+
+        [chromium] Fix issue where switching composited tabs evicts root textures
+        https://bugs.webkit.org/show_bug.cgi?id=65562
+
+        Reviewed by James Robinson.
+
+        LayerTilerChromium::protectTileTextures was hard-coding texture sizes
+        and texture formats. Because this didn't always match textures' actual
+        sizes and formats, they weren't getting protected during eviction.
+
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::protectTileTextures):
+
+2011-08-03  Ryosuke Niwa  <rniwa@webkit.org>
+
+        select-all, copy, paste of specialAncestorElements (e.g. pre, h1, etc) nests the element inside itself
+        https://bugs.webkit.org/show_bug.cgi?id=26483
+
+        Reviewed by Enrica Casucci.
+
+        The bug was caused by WebKit serializing pre, h1, etc... to retain structure and appearance when copying
+        rich content and pasting did not remove such nodes wrapping the copied contents.
+
+        Fixed the bug by extending r81887 and r83322 to remove those elements from where WebKit pastes into.
+
+        Test: editing/pasteboard/copy-paste-text-in-h1.html
+
+        * editing/ReplaceSelectionCommand.cpp:
+        (WebCore::nodeHasAttributesToPreserve): Extracted from isInlineNodeWithStyle.
+        (WebCore::isInlineNodeWithStyle): Calls nodeHasAttributesToPreserve.
+        (WebCore::ReplaceSelectionCommand::doApply): Calls ancestorToRetainStructureAndAppearance.
+        Remove nodes copied by ancestorToRetainStructureAndAppearance at insertionPos before pasting the fragment.
+        * editing/markup.cpp:
+        (WebCore::ancestorToRetainStructureAndAppearance): Takes ShouldIncludeParagraphSeparators.
+        * editing/markup.h:
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from Console.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65569
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/Console.idl:
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from HTML DOM IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65338
+
+        Reviewed by Adam Barth.
+
+        * html/DOMFormData.idl:
+        * html/DOMTokenList.idl:
+        * html/DOMURL.idl:
+        * html/HTMLAllCollection.idl:
+        * html/HTMLAnchorElement.idl:
+        * html/HTMLAudioElement.idl:
+        * html/HTMLButtonElement.idl:
+        * html/HTMLCanvasElement.idl:
+        * html/HTMLCollection.idl:
+        * html/HTMLDivElement.idl:
+        * html/HTMLDocument.idl:
+        * html/HTMLElement.idl:
+        * html/HTMLFieldSetElement.idl:
+        * html/HTMLInputElement.idl:
+        * html/HTMLKeygenElement.idl:
+        * html/HTMLMediaElement.idl:
+        * html/HTMLObjectElement.idl:
+        * html/HTMLOptionsCollection.idl:
+        * html/HTMLOutputElement.idl:
+        * html/HTMLSelectElement.idl:
+        * html/HTMLTableElement.idl:
+        * html/HTMLTableRowElement.idl:
+        * html/HTMLTableSectionElement.idl:
+        * html/HTMLTextAreaElement.idl:
+        * html/HTMLVideoElement.idl:
+        * html/TimeRanges.idl:
+
+2011-08-03  Jeffrey Pfau  <jpfau@apple.com>
+
+        Make atomic XML token
+        https://bugs.webkit.org/show_bug.cgi?id=65639
+
+        Reviewed by Adam Barth.
+
+        Create a shared AtomicMarkupTokenBase that is shared by AtomicHTMLToken and the new AtomicXMLToken
+
+        * html/parser/HTMLToken.h:
+        (WebCore::HTMLToken::setForceQuirks):
+        (WebCore::AtomicHTMLToken::AtomicHTMLToken):
+        (WebCore::AtomicHTMLToken::forceQuirks):
+        * html/parser/HTMLTokenizer.cpp:
+        (WebCore::::nameForAttribute):
+        (WebCore::::usesName):
+        (WebCore::::usesAttributes):
+        * xml/parser/MarkupTokenBase.h:
+        (WebCore::AtomicMarkupTokenBase::AtomicMarkupTokenBase):
+        (WebCore::AtomicMarkupTokenBase::type):
+        (WebCore::AtomicMarkupTokenBase::name):
+        (WebCore::AtomicMarkupTokenBase::setName):
+        (WebCore::AtomicMarkupTokenBase::selfClosing):
+        (WebCore::AtomicMarkupTokenBase::getAttributeItem):
+        (WebCore::AtomicMarkupTokenBase::attributes):
+        (WebCore::AtomicMarkupTokenBase::takeAtributes):
+        (WebCore::AtomicMarkupTokenBase::characters):
+        (WebCore::AtomicMarkupTokenBase::comment):
+        (WebCore::AtomicMarkupTokenBase::publicIdentifier):
+        (WebCore::AtomicMarkupTokenBase::systemIdentifier):
+        (WebCore::::initializeAttributes):
+        * xml/parser/XMLToken.h:
+        (WebCore::AtomicXMLToken::AtomicXMLToken):
+        (WebCore::AtomicXMLToken::prefix):
+        (WebCore::AtomicXMLToken::target):
+        (WebCore::AtomicXMLToken::data):
+        (WebCore::AtomicXMLToken::xmlVersion):
+        (WebCore::AtomicXMLToken::xmlStandalone):
+        * xml/parser/XMLTokenizer.cpp:
+        (WebCore::::nameForAttribute):
+        (WebCore::::usesName):
+        (WebCore::::usesAttributes):
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from geolocation IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65355
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/Geolocation.idl:
+        * page/PositionCallback.idl:
+        * page/PositionErrorCallback.idl:
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from DOMSelection.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65566
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/DOMSelection.idl:
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from Location.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65565
+
+        Reviewed by Darin Adler.
+
+        No new tests, all existing tests pass.
+
+        * page/Location.idl:
+
+2011-08-03  Sailesh Agrawal  <sail@chromium.org>
+
+        Chromium Mac: Fix position of search tickmarks
+        https://bugs.webkit.org/show_bug.cgi?id=65575
+
+        This change adjusts the position of search tickmarks so that they are correctly centered.
+
+        Also, insetting the tickmark rect by 5 pixels caused tickmarks on the overlay scrollbar to look very small. I changed this to inset by 4 pixels instead. The tickmark is the same width as the overlay scrollbar which looks much better.
+
+        Reviewed by James Robinson.
+
+        * platform/chromium/ScrollbarThemeChromiumMac.mm:
+        (WebCore::ScrollbarThemeChromiumMac::paint):
+
+2011-08-03  Sailesh Agrawal  <sail@chromium.org>
+
+        Chromium Mac: Make sure scrollbars flash when web page loads
+        https://bugs.webkit.org/show_bug.cgi?id=65586
+
+        On slow web pages scrollbars wouldn't flash when the page was done loading. The problem was that we were flashing the scrollbar 0.1 second after the load operation had started. If the page was slow to load then we might not have scrollbars to flash. To work around this I added an extra check to make sure that we had indeed finished loading the page before flashing the scrollbars.
+
+        Reviewed by James Robinson.
+
+        * platform/chromium/ScrollAnimatorChromiumMac.mm:
+        (WebCore::ScrollAnimatorChromiumMac::initialScrollbarPaintTimerFired):
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from navigator IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65370
+
+        Reviewed by Adam Barth.
+
+        * page/Navigator.idl:
+        * page/NavigatorUserMediaErrorCallback.idl:
+        * page/NavigatorUserMediaSuccessCallback.idl:
+
+2011-08-03  Anders Carlsson  <andersca@apple.com>
+
+        webarchive/loading/missing-data.html is failing on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=63507
+
+        Reviewed by Adam Barth.
+
+        When loading a main resource from a web archive, make sure that the working URL is actually
+        the URL of the resource, and not the URL of the web archive itself.
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::receivedFirstData):
+
+2011-08-03  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from DOMWindow.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65353
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateImplementation):
+        * bindings/scripts/CodeGeneratorV8.pm:
+        (GenerateFunctionCallback):
+        * page/DOMWindow.idl:
+
+2011-08-03  Jeff Miller  <jeffm@apple.com>
+
+        Fix Chromimum and Qt builds after r92308.
+
+        * config.h: Don't try to include WebCoreHeaderDetection.h for Chromimum and Qt.
+
+2011-08-03  Jeff Miller  <jeffm@apple.com>
+
+        Generate WebCoreHeaderDetection.h on Windows to define HAVE_AVCF
+        https://bugs.webkit.org/show_bug.cgi?id=65634
+        
+        AVFoundation support on Windows will (eventually) be predicated on the
+        availability of AVFoundationCF headers and libraries in the WebKit Support
+        Libraries, so we test for the existence of one of the header files (AVCFBase.h)
+        to determine whether to AVCF is available.
+        
+        For now, even if AVFoundationCF is available, leave WTF_USE_AVFOUNDATION off, since
+        it's not ready to be turned on yet (which is covered by http://webkit.org/b/65400).
+        
+        Ideally, we would generate WebCoreHeaderDetection.h on all platforms so we could
+        include it unconditionally in WebCore's config.h, but unfortunately the Mac-only file
+        ExportFileGenerator.cpp depends on WTF_USE_AVFOUNDATION being set correctly, and since this
+        .cpp file is also generated it doesn't have access to WebCoreHeaderDetection.h.
+
+        Reviewed by Adam Roben.
+
+        No change in functionality, so new tests.
+
+        * DerivedSources.make: Add rule to generate WebCoreHeaderDetection.h to set HAVE_AVCF on Windows.
+        * config.h: Include WebCoreHeaderDetection.h on Windows, check for HAVE(AVCF) but always leave WTF_USE_AVFOUNDATION off on Windows for now.
+
+2011-08-03  Tommy Widenflycht  <tommyw@google.com>
+
+        MediaStream API: Implement PeerConnection and SignalingCallback
+        https://bugs.webkit.org/show_bug.cgi?id=65101
+
+        Reviewed by Adam Barth.
+
+        LayoutTests will be provided by a follow-up CL, see <https://bugs.webkit.org/show_bug.cgi?id=56587>.
+
+        * CMakeLists.txt:
+        * CodeGenerators.pri:
+        * DerivedSources.cpp:
+        * DerivedSources.make:
+        * GNUmakefile.am:
+        * GNUmakefile.list.am:
+        * UseJSC.cmake:
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/generic/RuntimeEnabledFeatures.h:
+        (WebCore::RuntimeEnabledFeatures::peerConnectionEnabled):
+        * bindings/js/JSBindingsAllInOne.cpp:
+        * bindings/js/JSPeerConnectionCustom.cpp: Copied from Source/WebCore/page/MediaStreamClient.h.
+        (WebCore::JSPeerConnectionConstructor::constructJSPeerConnection):
+        * bindings/v8/V8DOMWrapper.cpp:
+        (WebCore::V8DOMWrapper::convertEventTargetToV8Object):
+        * bindings/v8/custom/V8PeerConnectionCustom.cpp: Added.
+        (WebCore::V8PeerConnection::constructorCallback):
+        * dom/DispatchTask.h: Added.
+        (WebCore::SimpleDispatchTask::create):
+        (WebCore::SimpleDispatchTask::performTask):
+        (WebCore::SimpleDispatchTask::SimpleDispatchTask):
+        (WebCore::DispatchTask::create):
+        (WebCore::DispatchTask::performTask):
+        (WebCore::DispatchTask::DispatchTask):
+        * dom/EventNames.h:
+        * dom/EventTarget.cpp:
+        (WebCore::EventTarget::toPeerConnection):
+        * dom/EventTarget.h:
+        * p2p/PeerConnection.cpp: Added.
+        (WebCore::PeerConnection::create):
+        (WebCore::PeerConnection::PeerConnection):
+        (WebCore::PeerConnection::init):
+        (WebCore::PeerConnection::~PeerConnection):
+        (WebCore::PeerConnection::localStreams):
+        (WebCore::PeerConnection::remoteStreams):
+        (WebCore::PeerConnection::processSignalingMessage):
+        (WebCore::PeerConnection::send):
+        (WebCore::PeerConnection::addStream):
+        (WebCore::PeerConnection::removeStream):
+        (WebCore::PeerConnection::close):
+        (WebCore::PeerConnection::onNegotiationStarted):
+        (WebCore::PeerConnection::onNegotiationDone):
+        (WebCore::PeerConnection::streamAdded):
+        (WebCore::PeerConnection::streamRemoved):
+        (WebCore::PeerConnection::onMessage):
+        (WebCore::PeerConnection::onSignalingMessage):
+        (WebCore::PeerConnection::toPeerConnection):
+        (WebCore::PeerConnection::scriptExecutionContext):
+        (WebCore::PeerConnection::eventTargetData):
+        (WebCore::PeerConnection::ensureEventTargetData):
+        (WebCore::PeerConnection::postMessageEvent):
+        (WebCore::PeerConnection::postSignalingEvent):
+        (WebCore::PeerConnection::postStreamAddedEvent):
+        (WebCore::PeerConnection::postStreamRemovedEvent):
+        (WebCore::PeerConnection::postSimpleEvent):
+        (WebCore::PeerConnection::postStartNegotiationTask):
+        (WebCore::PeerConnection::dispatchMessageEvent):
+        (WebCore::PeerConnection::dispatchSignalingEvent):
+        (WebCore::PeerConnection::dispatchStreamEvent):
+        (WebCore::PeerConnection::dispatchSimpleEvent):
+        (WebCore::PeerConnection::dispatchStartNegotiationTask):
+        * p2p/PeerConnection.h: Added.
+        (WebCore::PeerConnection::readyState):
+        (WebCore::PeerConnection::refEventTarget):
+        (WebCore::PeerConnection::derefEventTarget):
+        * p2p/PeerConnection.idl: Added.
+        * p2p/SignalingCallback.h: Copied from Source/WebCore/page/MediaStreamClient.h.
+        (WebCore::SignalingCallback::~SignalingCallback):
+        * p2p/SignalingCallback.idl: Added.
+        * page/DOMWindow.idl:
+        * page/MediaStreamClient.h:
+        * page/MediaStreamController.cpp:
+        (WebCore::MediaStreamController::MediaStreamController):
+        (WebCore::MediaStreamController::unregisterFrameController):
+        (WebCore::MediaStreamController::onSignalingMessage):
+        (WebCore::MediaStreamController::frameToPagePeerConnectionId):
+        (WebCore::MediaStreamController::processSignalingMessage):
+        (WebCore::MediaStreamController::message):
+        (WebCore::MediaStreamController::onMessage):
+        (WebCore::MediaStreamController::addStream):
+        (WebCore::MediaStreamController::onAddStream):
+        (WebCore::MediaStreamController::removeStream):
+        (WebCore::MediaStreamController::onRemoveStream):
+        (WebCore::MediaStreamController::newPeerConnection):
+        (WebCore::MediaStreamController::closePeerConnection):
+        (WebCore::MediaStreamController::startNegotiation):
+        (WebCore::MediaStreamController::onNegotiationStarted):
+        (WebCore::MediaStreamController::onNegotiationDone):
+        * page/MediaStreamController.h:
+        * page/MediaStreamFrameController.cpp:
+        (WebCore::MediaStreamFrameController::Request::isSignalingRequest):
+        (WebCore::MediaStreamFrameController::createPeerConnection):
+        (WebCore::MediaStreamFrameController::newPeerConnection):
+        (WebCore::MediaStreamFrameController::closePeerConnection):
+        (WebCore::MediaStreamFrameController::startNegotiation):
+        (WebCore::MediaStreamFrameController::processSignalingMessage):
+        (WebCore::MediaStreamFrameController::message):
+        (WebCore::MediaStreamFrameController::addStream):
+        (WebCore::MediaStreamFrameController::removeStream):
+        (WebCore::MediaStreamFrameController::onMessage):
+        (WebCore::MediaStreamFrameController::onAddStream):
+        (WebCore::MediaStreamFrameController::onRemoveStream):
+        (WebCore::MediaStreamFrameController::onSignalingMessage):
+        (WebCore::MediaStreamFrameController::onNegotiationStarted):
+        (WebCore::MediaStreamFrameController::onNegotiationDone):
+        * page/MediaStreamFrameController.h:
+        (WebCore::MediaStreamFrameController::ClientBase::isPeerConnection):
+        (WebCore::MediaStreamFrameController::PeerConnectionClient::PeerConnectionClient):
+        (WebCore::MediaStreamFrameController::PeerConnectionClient::~PeerConnectionClient):
+        (WebCore::MediaStreamFrameController::PeerConnectionClient::isPeerConnection):
+
+2011-08-03  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Web Inspector: Remove InspectorFrontendHost load/saveSessionSetting
+        https://bugs.webkit.org/show_bug.cgi?id=65582
+
+        Reviewed by Pavel Feldman.
+
+        Remove stale code. WebInspector.settings uses localStorage and
+        handles the "debuggerEnabled" state. So remove the only remaining
+        usage of load/saveSessionSetting.
+
+        * inspector/InspectorFrontendClient.h:
+        * inspector/InspectorFrontendHost.cpp:
+        * inspector/InspectorFrontendHost.h:
+        * inspector/InspectorFrontendHost.idl:
+        * inspector/front-end/InspectorFrontendHostStub.js:
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._debuggerWasDisabled):
+
+2011-08-03  Adam Barth  <abarth@webkit.org>
+
+        Crash in DocumentWriter::endIfNotLoadingMainResource
+        https://bugs.webkit.org/show_bug.cgi?id=65581
+
+        Reviewed by Nate Chapin.
+
+        This function is poorly designed because isLoadingMainResource is a
+        poor proxy for determing whether to flush/finish the parser.  Really,
+        we should change how loads complete to match the model in HTML5, but
+        that's pretty tricky.  In the meantime, this null check fixes the
+        crash.
+
+        I'm sure there's another bug on file about this crash, but we've never
+        been able to reproduce it.  Thanks to Berend-Jan Wever for the test
+        case!
+
+        Test: fast/loader/reload-zero-byte-plugin.html
+
+        * loader/DocumentWriter.cpp:
+        (WebCore::DocumentWriter::endIfNotLoadingMainResource):
+
+2011-08-03  Anders Carlsson  <andersca@apple.com>
+
+        WebCore images backing CG patterns should be released on the main thread
+        https://bugs.webkit.org/show_bug.cgi?id=65630
+
+        Reviewed by Sam Weinig.
+
+        * platform/graphics/cg/PatternCG.cpp:
+        (WebCore::patternReleaseOnMainThreadCallback):
+        Deref the image.
+
+        (WebCore::patternReleaseCallback):
+        Call callOnMainThread.
+
+2011-08-03  Luke Macpherson   <macpherson@chromium.org>
+
+        Use appropriate macro for CSSPropertyImageRendering.
+        https://bugs.webkit.org/show_bug.cgi?id=65594
+
+        Reviewed by Simon Fraser.
+
+        No new tests / trivial code cleanup only.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use HANDLE_INHERIT_AND_INITIAL_AND_PRIMITIVE macro.
+
+2011-08-03  Dan Bernstein  <mitz@apple.com>
+
+        FontCache::getFontData() does not set the familyIndex to cAllFamiliesScanned if the last font is a custom font
+        https://bugs.webkit.org/show_bug.cgi?id=65597
+
+        Reviewed by Simon Fraser.
+
+        No test added because behavior is unchanged, but this saves a call to getFontData().
+
+        * platform/graphics/FontCache.cpp:
+        (WebCore::FontCache::getFontData): Eliminated early return inside the loop, allowing execution
+        to continue and familyIndex to be set.
+
+2011-08-03  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Add RenderedPosition
+        https://bugs.webkit.org/show_bug.cgi?id=65221
+
+        Reviewed by Hajime Morita.
+
+        Add the skeleton for RenderedPosition and use it in rootBoxForLine.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * editing/EditingAllInOne.cpp:
+        * editing/RenderedPosition.cpp: Added.
+        (WebCore::RenderedPosition::RenderedPosition):
+        * editing/RenderedPosition.h: Added.
+        (WebCore::RenderedPosition::isNull):
+        (WebCore::RenderedPosition::rootBox):
+        (WebCore::RenderedPosition::RenderedPosition):
+        * editing/visible_units.cpp:
+        (WebCore::startPositionForLine):
+        (WebCore::endPositionForLine):
+        (WebCore::logicalStartPositionForLine):
+        (WebCore::logicalEndPositionForLine):
+
+2011-08-03  Roland Steiner  <rolandsteiner@chromium.org>
+
+        [V8] V8CSSRuleCustom.cpp: not all enum values are listed in switch statement
+        https://bugs.webkit.org/show_bug.cgi?id=65598
+
+        Reviewed by Dimitri Glazkov.
+
+        Added UNKNOWN_RULE to the switch statement.
+
+        No new tests. (No semantic change)
+
+        * bindings/v8/custom/V8CSSRuleCustom.cpp:
+        (WebCore::toV8):
+
+2011-08-03  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: [Timeline] Hover on paint events and see rect outline around that area.
+        https://bugs.webkit.org/show_bug.cgi?id=65510
+
+        Reviewed by Yury Semikhatsky.
+
+        * WebCore.exp.in:
+        * WebCore.order:
+        * inspector/DOMNodeHighlighter.cpp:
+        (WebCore::DOMNodeHighlighter::drawRectHighlight):
+        * inspector/DOMNodeHighlighter.h:
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::drawHighlight):
+        * inspector/InspectorController.h:
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::highlightRect):
+        (WebCore::InspectorDOMAgent::hideHighlight):
+        (WebCore::InspectorDOMAgent::drawHighlight):
+        * inspector/InspectorDOMAgent.h:
+        * inspector/front-end/ResourcesPanel.js:
+        (WebInspector.FrameTreeElement.prototype.onselect):
+        (WebInspector.FrameTreeElement.prototype.set hovered):
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel):
+        (WebInspector.TimelinePanel.prototype._mouseOut):
+        (WebInspector.TimelinePanel.prototype._mouseMove):
+        (WebInspector.TimelinePanel.prototype._highlightRect):
+        (WebInspector.TimelinePanel.prototype._hideRectHighlight):
+        * inspector/front-end/inspector.js:
+        (WebInspector.highlightDOMNode):
+
+2011-08-03  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: make text in popover selectable + make popover re-appear faster.
+        https://bugs.webkit.org/show_bug.cgi?id=65603
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/Popover.js:
+        (WebInspector.PopoverHelper.prototype.setTimeout):
+        (WebInspector.PopoverHelper.prototype._mouseMove):
+        (WebInspector.PopoverHelper.prototype._handleMouseAction):
+        * inspector/front-end/popover.css:
+        (.popover .content):
+
+2011-08-03  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Console scroll position should be saved when switching panels.
+        https://bugs.webkit.org/show_bug.cgi?id=65607
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._formatAsArrayEntry):
+        (WebInspector.ConsoleView.prototype.get scrollLeft):
+        (WebInspector.ConsoleView.prototype.set scrollLeft):
+        (WebInspector.ConsoleView.prototype.get scrollTop):
+        (WebInspector.ConsoleView.prototype.set scrollTop):
+        * inspector/front-end/Drawer.js:
+        (WebInspector.Drawer.prototype.show):
+        (WebInspector.Drawer.prototype._endStatusBarDragging):
+        (WebInspector.Drawer.prototype.get scrollLeft):
+        (WebInspector.Drawer.prototype.set scrollLeft):
+        (WebInspector.Drawer.prototype.get scrollTop):
+        (WebInspector.Drawer.prototype.set scrollTop):
+
+2011-08-03  Philippe Normand  <pnormand@igalia.com>
+
+        libsoup-CRITICAL **: soup_message_io_pause: assertion `io != NULL' failed
+        https://bugs.webkit.org/show_bug.cgi?id=64263
+
+        Reviewed by Martin Robinson.
+
+        Avoid any operation on not yet started messages and completed messages.
+
+        * platform/network/ResourceHandleInternal.h:
+        (WebCore::ResourceHandleInternal::ResourceHandleInternal):
+        * platform/network/soup/ResourceHandleSoup.cpp:
+        (WebCore::finishedCallback):
+        (WebCore::startHTTPRequest):
+        (WebCore::ResourceHandle::platformSetDefersLoading):
+
+2011-08-03  Jeremy Moskovich  <jeremy@chromium.org>
+
+        [Chromium] Fix OOP font loading to work on 10.6.6 and above.
+        https://bugs.webkit.org/show_bug.cgi?id=65543
+
+        In 10.6.6 the function used to get the unique ID for an NSFont in the 
+        renderer was changed so it fails in the sandbox (it now tries to access
+        the on-disk font file). In order to work around this, we get the font
+        ID from the browser process.
+
+        To speed things up, we introduce 2 levels of caching in WebKit. A font
+        name cache where we can perform a quick lookup without the need for the
+        font id and a font id cache which we can only lookup in after getting
+        the unique ID from the browser process.
+
+        Reviewed by Kenneth Russell.
+
+        No new tests since this is not readily testable.
+
+        * platform/chromium/PlatformBridge.h:
+        * platform/graphics/chromium/CrossProcessFontLoading.h:
+        * platform/graphics/chromium/CrossProcessFontLoading.mm:
+        (WebCore::MemoryActivatedFont::create):
+        (WebCore::MemoryActivatedFont::MemoryActivatedFont):
+        (WebCore::MemoryActivatedFont::~MemoryActivatedFont):
+
+2011-08-03  Hayato Ito  <hayato@chromium.org>
+
+        Make EventDispatchMediator RefCounted.
+        https://bugs.webkit.org/show_bug.cgi?id=65529
+
+        Reviewed by Hajime Morita.
+
+        Make EventDispatchMediator RefCounted so that it can be enqueued into a
+        ScopedEventQueue and called later.
+        A necessary change for ScopedEventQueue should be addressed in another patch.
+
+        This is a minor update of r92256, which failed on chromium win builds.
+
+        No changes to functionality so no new tests.
+
+        * dom/Event.cpp:
+        (WebCore::EventDispatchMediator::create):
+        * dom/Event.h:
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+        * dom/EventDispatcher.h:
+        * dom/KeyboardEvent.cpp:
+        (WebCore::KeyboardEventDispatchMediator::create):
+        * dom/KeyboardEvent.h:
+        * dom/MouseEvent.cpp:
+        (WebCore::MouseEventDispatchMediator::create):
+        * dom/MouseEvent.h:
+        * dom/Node.cpp:
+        (WebCore::Node::dispatchEvent):
+        (WebCore::Node::dispatchKeyEvent):
+        (WebCore::Node::dispatchMouseEvent):
+        (WebCore::Node::dispatchWheelEvent):
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEventDispatchMediator::create):
+        * dom/WheelEvent.h:
+
+2011-08-03  Pavel Feldman  <pfeldman@chromium.org>
+
+        Web Inspector: remove Node parameter from the InspectorClient::highlight
+        https://bugs.webkit.org/show_bug.cgi?id=65549
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InspectorClient.h:
+        * inspector/InspectorDOMAgent.cpp:
+        (WebCore::InspectorDOMAgent::highlight):
+        * loader/EmptyClients.h:
+        (WebCore::EmptyInspectorClient::highlight):
+
+2011-08-03  Antti Koivisto  <antti@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65599
+        Image loads should trigger didFirstVisuallyNonEmptyLayout more easily
+
+        Reviewed by Dan Bernstein.
+
+        Tweak the heuristic pixel count so logo-sized images trigger didFirstVisuallyNonEmptyLayout.
+
+        * page/FrameView.h:
+        (WebCore::FrameView::incrementVisuallyNonEmptyPixelCount):
+
+2011-08-03  Takashi Toyoshima  <toyoshim@chromium.org>
+
+        WebSocket: Could not handle zero length text frame.
+        https://bugs.webkit.org/show_bug.cgi?id=65592
+
+        Reviewed by Kent Tamura.
+
+        Test: http/tests/websocket/tests/hybi/zero-length-text.html
+
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::processFrame):
+
+2011-08-02  Pratik Solanki  <psolanki@apple.com>
+
+        Crash in ResourceResponse::platformCompare() with USE(CFNETWORK)
+        https://bugs.webkit.org/show_bug.cgi?id=65584
+
+        Reviewed by David Kilzer.
+
+        * platform/network/cf/ResourceResponseCFNet.cpp:
+        (WebCore::ResourceResponse::platformCompare): Don't call CFEqual with 0 as an argument.
+
+2011-08-02  Takashi Toyoshima  <toyoshim@chromium.org>
+
+        WebSocket: Should be closed by receiving invalid continuation frame.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65527
+
+        Reviewed by Kent Tamura.
+
+        Test: http/tests/websocket/tests/hybi/invalid-continuation.html
+
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::processFrame):
+
+2011-08-02  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92256.
+        http://trac.webkit.org/changeset/92256
+        https://bugs.webkit.org/show_bug.cgi?id=65593
+
+        Causing tons of crashes on the chromium win bots (Requested by
+        jamesr on #webkit).
+
+        * dom/Event.cpp:
+        * dom/Event.h:
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+        * dom/EventDispatcher.h:
+        * dom/KeyboardEvent.cpp:
+        * dom/KeyboardEvent.h:
+        * dom/MouseEvent.cpp:
+        * dom/MouseEvent.h:
+        * dom/Node.cpp:
+        (WebCore::Node::dispatchEvent):
+        (WebCore::Node::dispatchKeyEvent):
+        (WebCore::Node::dispatchMouseEvent):
+        (WebCore::Node::dispatchWheelEvent):
+        * dom/WheelEvent.cpp:
+        * dom/WheelEvent.h:
+
+2011-08-02  Hayato Ito  <hayato@chromium.org>
+
+        Make EventDispatchMediator RefCounted.
+        https://bugs.webkit.org/show_bug.cgi?id=65529
+
+        Reviewed by Dimitri Glazkov.
+
+        Make EventDispatchMediator RefCounted so that it can be enqueued into a
+        ScopedEventQueue and called later.
+        A necessary change for ScopedEventQueue should be addressed in another patch.
+
+        No changes to functionality so no new tests.
+
+        * dom/Event.cpp:
+        (WebCore::EventDispatchMediator::create):
+        * dom/Event.h:
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+        * dom/EventDispatcher.h:
+        * dom/KeyboardEvent.cpp:
+        (WebCore::KeyboardEventDispatchMediator::create):
+        * dom/KeyboardEvent.h:
+        * dom/MouseEvent.cpp:
+        (WebCore::MouseEventDispatchMediator::create):
+        * dom/MouseEvent.h:
+        * dom/Node.cpp:
+        (WebCore::Node::dispatchEvent):
+        (WebCore::Node::dispatchKeyEvent):
+        (WebCore::Node::dispatchMouseEvent):
+        (WebCore::Node::dispatchWheelEvent):
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEventDispatchMediator::create):
+        * dom/WheelEvent.h:
+
+2011-08-02  David Reveman  <reveman@chromium.org>
+
+        [Chromium] Use edge-distance method for layer anti-aliasing.
+        https://bugs.webkit.org/show_bug.cgi?id=64942
+
+        Reviewed by James Robinson.
+
+        Use an edge distance based method instead of the current linear
+        filtering method for producing anti-aliased edges on 3D transformed
+        layers. This removes the outer border handling from TilingData as
+        it's no longer needed for anti-aliasing.
+
+        Tests: platform/chromium/compositing/tiny-layer-rotated.html (existing)
+               platform/chromium/compositing/huge-layer-rotated.html (existing)
+               compositing/images/content-image-change.html (existing)
+               TilingDataTest in webkit_unit_tests
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::screenMatrix):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::setDrawViewportRect):
+        (WebCore::LayerRendererChromium::tilerProgramAA):
+        (WebCore::LayerRendererChromium::tilerProgramSwizzleAA):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        (WebCore::LayerRendererChromium::windowMatrix):
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::setTileSize):
+        (WebCore::LayerTilerChromium::tileLayerRect):
+        (WebCore::LayerTilerChromium::invalidateRect):
+        (WebCore::LayerTilerChromium::prepareToUpdate):
+        (WebCore::LayerTilerChromium::updateRect):
+        (WebCore::LayerTilerChromium::draw):
+        (WebCore::LayerTilerChromium::growLayerToContain):
+        (WebCore::LayerTilerChromium::drawTiles):
+        * platform/graphics/chromium/LayerTilerChromium.h:
+        * platform/graphics/chromium/ShaderChromium.cpp:
+        (WebCore::VertexShaderTile::VertexShaderTile):
+        (WebCore::VertexShaderTile::init):
+        (WebCore::VertexShaderTile::getShaderString):
+        (WebCore::FragmentTexAlphaAABinding::FragmentTexAlphaAABinding):
+        (WebCore::FragmentTexAlphaAABinding::init):
+        (WebCore::FragmentShaderRGBATexAlphaAA::getShaderString):
+        (WebCore::FragmentShaderRGBATexSwizzleAlphaAA::getShaderString):
+        * platform/graphics/chromium/ShaderChromium.h:
+        (WebCore::VertexShaderTile::vertexTexTransformLocation):
+        (WebCore::FragmentTexAlphaAABinding::alphaLocation):
+        (WebCore::FragmentTexAlphaAABinding::samplerLocation):
+        (WebCore::FragmentTexAlphaAABinding::fragmentTexTransformLocation):
+        (WebCore::FragmentTexAlphaAABinding::edgeLocation):
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::TiledLayerChromium::TiledLayerChromium):
+        (WebCore::TiledLayerChromium::updateTileSizeAndTilingOption):
+        (WebCore::TiledLayerChromium::createTilerIfNeeded):
+        (WebCore::TiledLayerChromium::setIsMask):
+        * platform/graphics/chromium/TiledLayerChromium.h:
+        * platform/graphics/gpu/TilingData.cpp:
+        (WebCore::computeNumTiles):
+        (WebCore::TilingData::tileXIndexFromSrcCoord):
+        (WebCore::TilingData::tileYIndexFromSrcCoord):
+        (WebCore::TilingData::tileSizeX):
+        (WebCore::TilingData::tileSizeY):
+        (WebCore::TilingData::intersectDrawQuad):
+        (WebCore::TilingData::textureOffset):
+        * platform/graphics/gpu/TilingData.h:
+
+2011-08-01  David Levin  <levin@chromium.org>
+
+        Add asserts to RefCounted to make sure ref/deref happens on the right thread.
+        https://bugs.webkit.org/show_bug.cgi?id=31639
+
+        Reviewed by Dmitry Titov.
+
+        No new functionality exposed so no new tests. (The change is basically adding
+        more testing.)
+
+        * ForwardingHeaders/wtf/ThreadRestrictionVerifier.h: Added.
+        * loader/icon/IconDatabase.cpp:
+        (WebCore::IconDatabase::defaultIcon): Set the mutex which does the guarding of the variable.
+        (WebCore::IconDatabase::setIconDataForIconURL): Ditto.
+        (WebCore::IconDatabase::getOrCreateIconRecord): Ditto.
+        (WebCore::IconDatabase::readFromDatabase): Ditto.
+
+2011-08-02  Luke Macpherson   <macpherson@chromium.org>
+
+        Clean up value clampling in CSSStyleSelector and CSSPrimitiveValue.
+        https://bugs.webkit.org/show_bug.cgi?id=65441
+
+        Reviewed by Simon Fraser.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValue.h:
+        (WebCore::CSSPrimitiveValue::getFloatValue):
+        Implement in terms of the new templated getValue().
+        (WebCore::CSSPrimitiveValue::getIntValue):
+        Implement in terms of the new templated getValue().
+        (WebCore::CSSPrimitiveValue::getValue):
+        Templated getValue that works for all numeric types.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use getValue<short> instead of rolling-your-own clamp to short.
+
+2011-08-02  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        RenderObject::computeRectForRepaint and clippedOverflowRectForRepaint should be const
+        https://bugs.webkit.org/show_bug.cgi?id=65494
+
+        Reviewed by Darin Adler.
+
+        No new tests, const-ness change only.
+
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::absoluteClippedOverflowRect):
+        (WebCore::RenderObject::computeAbsoluteRepaintRect):
+        Made those 2 const as they call a const method now.
+
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::clippedOverflowRectForRepaint): Use a const RenderObject* for iterating as
+        this is const.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::rectWithOutlineForRepaint):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::clippedOverflowRectForRepaint):
+        (WebCore::RenderBox::computeRectForRepaint):
+        * rendering/RenderBox.h:
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::clippedOverflowRectForRepaint):
+        (WebCore::RenderInline::rectWithOutlineForRepaint):
+        (WebCore::RenderInline::computeRectForRepaint):
+        * rendering/RenderInline.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::rectWithOutlineForRepaint):
+        (WebCore::RenderObject::clippedOverflowRectForRepaint):
+        (WebCore::RenderObject::computeRectForRepaint):
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::clippedOverflowRectForRepaint):
+        * rendering/RenderReplaced.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::clippedOverflowRectForRepaint):
+        (WebCore::RenderTableCell::computeRectForRepaint):
+        * rendering/RenderTableCell.h:
+        * rendering/RenderTableCol.cpp:
+        (WebCore::RenderTableCol::clippedOverflowRectForRepaint):
+        * rendering/RenderTableCol.h:
+        * rendering/RenderTableRow.cpp:
+        (WebCore::RenderTableRow::clippedOverflowRectForRepaint):
+        * rendering/RenderTableRow.h:
+        * rendering/RenderText.cpp:
+        (WebCore::RenderText::clippedOverflowRectForRepaint):
+        * rendering/RenderText.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::computeRectForRepaint):
+        * rendering/RenderView.h:
+        * rendering/svg/RenderSVGForeignObject.cpp:
+        (WebCore::RenderSVGForeignObject::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGForeignObject::computeRectForRepaint):
+        * rendering/svg/RenderSVGForeignObject.h:
+        * rendering/svg/RenderSVGGradientStop.h:
+        (WebCore::RenderSVGGradientStop::clippedOverflowRectForRepaint):
+        * rendering/svg/RenderSVGHiddenContainer.h:
+        (WebCore::RenderSVGHiddenContainer::clippedOverflowRectForRepaint):
+        * rendering/svg/RenderSVGInline.cpp:
+        (WebCore::RenderSVGInline::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGInline::computeRectForRepaint):
+        * rendering/svg/RenderSVGInline.h:
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::RenderSVGModelObject::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGModelObject::computeRectForRepaint):
+        * rendering/svg/RenderSVGModelObject.h:
+        * rendering/svg/RenderSVGRoot.cpp:
+        (WebCore::RenderSVGRoot::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGRoot::computeRectForRepaint):
+        * rendering/svg/RenderSVGRoot.h:
+        * rendering/svg/RenderSVGText.cpp:
+        (WebCore::RenderSVGText::clippedOverflowRectForRepaint):
+        (WebCore::RenderSVGText::computeRectForRepaint):
+        * rendering/svg/RenderSVGText.h:
+        * rendering/svg/SVGRenderSupport.cpp:
+        (WebCore::SVGRenderSupport::clippedOverflowRectForRepaint):
+        (WebCore::SVGRenderSupport::computeRectForRepaint):
+        * rendering/svg/SVGRenderSupport.h:
+        Updated the following method's signature to use a const object.
+
+2011-08-02  Jeffrey Pfau  <jpfau@apple.com>
+
+        Add namespace prefix support in XML tokenizer
+        https://bugs.webkit.org/show_bug.cgi?id=65578
+
+        Reviewed by Adam Barth.
+
+        This also changes markup debug printing to print to stderr instead of stdout
+
+        * xml/parser/MarkupTokenBase.h:
+        (WebCore::MarkupTokenBase::printString):
+        * xml/parser/XMLToken.h:
+        (WebCore::XMLToken::XMLDeclarationData::XMLDeclarationData):
+        (WebCore::XMLToken::clear):
+        (WebCore::XMLToken::appendToName):
+        (WebCore::XMLToken::name):
+        (WebCore::XMLToken::target):
+        (WebCore::XMLToken::data):
+        (WebCore::XMLToken::prefix):
+        (WebCore::XMLToken::xmlDeclarationData):
+        (WebCore::XMLToken::endPrefix):
+        (WebCore::XMLToken::hasPrefix):
+        (WebCore::XMLToken::endAttributePrefix):
+        (WebCore::XMLToken::attributeHasPrefix):
+        (WebCore::XMLToken::printAttrs):
+        (WebCore::XMLToken::print):
+        * xml/parser/XMLTokenizer.cpp:
+        (WebCore::XMLTokenizer::nextToken):
+
+2011-08-02  Zhenyao Mo  <zmo@google.com>
+
+        Unreviewed, rolling out r92238.
+        http://trac.webkit.org/changeset/92238
+        https://bugs.webkit.org/show_bug.cgi?id=65555
+
+        fail fast/events/scrollbar-double-click.html on Mac
+
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.h:
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.mm:
+        * platform/chromium/ScrollbarThemeChromiumMac.h:
+        * platform/chromium/ScrollbarThemeChromiumMac.mm:
+        (WebCore::ScrollbarThemeChromiumMac::registerScrollbar):
+        (WebCore::ScrollbarThemeChromiumMac::setNewPainterForScrollbar):
+        (WebCore::toScrollbarPainterKnobStyle):
+        (WebCore::ScrollbarThemeChromiumMac::paint):
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from History.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65572
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/History.idl:
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from WebKitAnimationList.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65571
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/WebKitAnimationList.idl:
+
+2011-08-02  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Decouple layer visibility calculations from render surfaces / computed draw transforms
+        https://bugs.webkit.org/show_bug.cgi?id=58840
+
+        Reviewed by Kenneth Russell.
+
+        This decouples the layer visibility related calculations from the LayerChromium and CCLayerImpl trees.  This is
+        done by making LayerRendererChromium's "calculate the world" function (renamed
+        calculateDrawTransformsAndVisibility()) a templated, free function that can operate on either LayerChromium +
+        RenderSurfaceChromium pairs or on CCLayerImpl + CCRenderSurface pairs and invoking it twice, once before
+        painting and once before drawing.  Before painting, these calculations are used to determine which layers are
+        potentially visible and should be painted, which depends on the calculated opacity, render surface bounds, and
+        draw transforms.  Before drawing, these calculations are used to figure out everything needed to draw.
+
+        RenderSurfaceChromium is now used just for visibility calculations when painting.  CCRenderSurfaceChromium is
+        responsible for actually drawing the render surfaces.
+
+        This does mean that in the current implementation the second calculations are redundant, but in the future this
+        won't be the case since the pre-draw time calculations might be influenced by animations or gestures.  I've
+        added some traces to try to monitor if this math is a significant amount of the per-frame computation.  Note
+        that layer sorting only happens on the CCLayerImpl tree and the layer sort algorithm is the most expensive part
+        of the calculations currently.
+
+        This removes all of the weak back/forward pointers between LayerChromium and CCLayerImpls, the trees are now
+        truly decoupled.
+
+        Covered by compositing/ tests.
+
+        * WebCore.gypi:
+        * platform/graphics/chromium/CanvasLayerChromium.cpp:
+        (WebCore::CanvasLayerChromium::createCCLayerImpl):
+        * platform/graphics/chromium/LayerChromium.cpp:
+        (WebCore::LayerChromium::LayerChromium):
+        (WebCore::LayerChromium::~LayerChromium):
+        (WebCore::LayerChromium::createCCLayerImpl):
+        (WebCore::LayerChromium::createRenderSurface):
+        (WebCore::LayerChromium::descendantsDrawsContent):
+        * platform/graphics/chromium/LayerChromium.h:
+        (WebCore::LayerChromium::setUsesLayerScissor):
+        (WebCore::LayerChromium::usesLayerScissor):
+        (WebCore::LayerChromium::clearRenderSurface):
+        (WebCore::LayerChromium::renderSurface):
+        (WebCore::LayerChromium::drawOpacity):
+        (WebCore::LayerChromium::setDrawOpacity):
+        (WebCore::LayerChromium::scissorRect):
+        (WebCore::LayerChromium::setScissorRect):
+        (WebCore::LayerChromium::targetRenderSurface):
+        (WebCore::LayerChromium::setTargetRenderSurface):
+        (WebCore::LayerChromium::drawTransform):
+        (WebCore::LayerChromium::setDrawTransform):
+        (WebCore::LayerChromium::drawableContentRect):
+        (WebCore::LayerChromium::setDrawableContentRect):
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::updateLayers):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::paintLayerContents):
+        (WebCore::LayerRendererChromium::drawLayersInternal):
+        (WebCore::LayerRendererChromium::updateCompositorResources):
+        (WebCore::LayerRendererChromium::setCompositeOffscreen):
+        (WebCore::LayerRendererChromium::getOffscreenLayerTexture):
+        (WebCore::LayerRendererChromium::useRenderSurface):
+        (WebCore::LayerRendererChromium::drawLayer):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        (WebCore::LayerRendererChromium::renderSurfaceProgram):
+        (WebCore::LayerRendererChromium::renderSurfaceMaskProgram):
+        (WebCore::LayerRendererChromium::dumpRenderSurfaces):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        * platform/graphics/chromium/PluginLayerChromium.cpp:
+        (WebCore::PluginLayerChromium::createCCLayerImpl):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::RenderSurfaceChromium):
+        (WebCore::RenderSurfaceChromium::~RenderSurfaceChromium):
+        * platform/graphics/chromium/RenderSurfaceChromium.h:
+        (WebCore::RenderSurfaceChromium::clearLayerList):
+        (WebCore::RenderSurfaceChromium::layerList):
+        (WebCore::RenderSurfaceChromium::setMaskLayer):
+        * platform/graphics/chromium/TiledLayerChromium.cpp:
+        (WebCore::TiledLayerChromium::createCCLayerImpl):
+        (WebCore::TiledLayerChromium::tilingTransform):
+        * platform/graphics/chromium/TreeSynchronizer.cpp:
+        (WebCore::TreeSynchronizer::synchronizeTreeRecursive):
+        * platform/graphics/chromium/VideoLayerChromium.cpp:
+        (WebCore::VideoLayerChromium::createCCLayerImpl):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.cpp:
+        (WebCore::CCCanvasLayerImpl::CCCanvasLayerImpl):
+        * platform/graphics/chromium/cc/CCCanvasLayerImpl.h:
+        (WebCore::CCCanvasLayerImpl::create):
+        * platform/graphics/chromium/cc/CCLayerImpl.cpp:
+        (WebCore::CCLayerImpl::CCLayerImpl):
+        (WebCore::CCLayerImpl::~CCLayerImpl):
+        (WebCore::CCLayerImpl::createRenderSurface):
+        (WebCore::CCLayerImpl::bindContentsTexture):
+        * platform/graphics/chromium/cc/CCLayerImpl.h:
+        (WebCore::CCLayerImpl::create):
+        (WebCore::CCLayerImpl::renderSurface):
+        (WebCore::CCLayerImpl::targetRenderSurface):
+        (WebCore::CCLayerImpl::setTargetRenderSurface):
+        * platform/graphics/chromium/cc/CCLayerSorter.cpp:
+        (WebCore::CCLayerSorter::createGraphNodes):
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.cpp:
+        (WebCore::CCPluginLayerImpl::CCPluginLayerImpl):
+        * platform/graphics/chromium/cc/CCPluginLayerImpl.h:
+        (WebCore::CCPluginLayerImpl::create):
+        * platform/graphics/chromium/cc/CCRenderSurface.cpp: Copied from Source/WebCore/platform/graphics/chromium/RenderSurfaceChromium.cpp.
+        (WebCore::CCRenderSurface::CCRenderSurface):
+        (WebCore::CCRenderSurface::~CCRenderSurface):
+        (WebCore::CCRenderSurface::cleanupResources):
+        (WebCore::CCRenderSurface::layerRenderer):
+        (WebCore::CCRenderSurface::drawableContentRect):
+        (WebCore::CCRenderSurface::prepareContentsTexture):
+        (WebCore::CCRenderSurface::releaseContentsTexture):
+        (WebCore::CCRenderSurface::drawSurface):
+        (WebCore::CCRenderSurface::draw):
+        (WebCore::CCRenderSurface::name):
+        (WebCore::writeIndent):
+        (WebCore::CCRenderSurface::dumpSurface):
+        (WebCore::CCRenderSurface::owningLayerId):
+        * platform/graphics/chromium/cc/CCRenderSurface.h: Copied from Source/WebCore/platform/graphics/chromium/RenderSurfaceChromium.h.
+        (WebCore::CCRenderSurface::contentRectCenter):
+        (WebCore::CCRenderSurface::drawOpacity):
+        (WebCore::CCRenderSurface::setDrawOpacity):
+        (WebCore::CCRenderSurface::setDrawTransform):
+        (WebCore::CCRenderSurface::drawTransform):
+        (WebCore::CCRenderSurface::setReplicaDrawTransform):
+        (WebCore::CCRenderSurface::replicaDrawTransform):
+        (WebCore::CCRenderSurface::setOriginTransform):
+        (WebCore::CCRenderSurface::originTransform):
+        (WebCore::CCRenderSurface::setScissorRect):
+        (WebCore::CCRenderSurface::scissorRect):
+        (WebCore::CCRenderSurface::setContentRect):
+        (WebCore::CCRenderSurface::contentRect):
+        (WebCore::CCRenderSurface::setSkipsDraw):
+        (WebCore::CCRenderSurface::skipsDraw):
+        (WebCore::CCRenderSurface::clearLayerList):
+        (WebCore::CCRenderSurface::layerList):
+        (WebCore::CCRenderSurface::setMaskLayer):
+        (WebCore::CCRenderSurface::contentsTexture):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.cpp:
+        (WebCore::CCTiledLayerImpl::CCTiledLayerImpl):
+        * platform/graphics/chromium/cc/CCTiledLayerImpl.h:
+        (WebCore::CCTiledLayerImpl::create):
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.cpp:
+        (WebCore::CCVideoLayerImpl::CCVideoLayerImpl):
+        * platform/graphics/chromium/cc/CCVideoLayerImpl.h:
+        (WebCore::CCVideoLayerImpl::create):
+
+2011-08-02  Luke Macpherson   <macpherson@chromium.org>
+
+        Implement CSSPropertyWebkitTextCombine, CSSPropertyWebkitTextEmphasisPosition and CSSPropertyWebkitTextEmphasisStyle in CSSStyleApplyProperty.
+        https://bugs.webkit.org/show_bug.cgi?id=65517
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests. Just refactoring and moving code around.
+
+        * css/CSSStyleApplyProperty.cpp:
+        Added class ApplyPropertyTextEmphasisStyle to handle the special TextEmphasisStyle logic.
+        (WebCore::ApplyPropertyTextEmphasisStyle::applyInheritValue):
+        (WebCore::ApplyPropertyTextEmphasisStyle::applyInitialValue):
+        (WebCore::ApplyPropertyTextEmphasisStyle::applyValue):
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        Added initializations for CSSPropertyWebkitTextCombine, CSSPropertyWebkitTextEmphasisPosition, CSSPropertyWebkitTextEmphasisStyle.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Remove existing implementations.
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from SpeechInputResultList.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65570
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass
+
+        * page/SpeechInputResultList.idl:
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from EventSource.idl
+        https://bugs.webkit.org/show_bug.cgi?id=65568
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * page/EventSource.idl:
+
+2011-08-02  Gavin Peters  <gavinp@chromium.org>
+
+        fail earlier to track down null CachedScript execution
+        https://bugs.webkit.org/show_bug.cgi?id=65563
+
+        Over in http://code.google.com/p/chromium/issues/detail?id=75604 I can't reproduce the problem.  Careful reading of the code hasn't led me
+        to an obvious cause either.  This patch should cause failure earlier, and lead to better stacks.  I'll watch Chrome Canary's crash
+        uploads carefully, and remove this CRASH() (and fix the underlying problem) once I understand it.
+
+        Reviewed by Alexey Proskuryakov.
+
+        No new tests, as my goal here is to get telemetry on a bug that I cannot reproduce.
+
+        * dom/ScriptRunner.cpp:
+        (WebCore::ScriptRunner::queueScriptForExecution):
+
+2011-08-02  Sailesh Agrawal  <sail@chromium.org>
+
+        Chromium: Update forked ScrollbarThemeChromiumMac.mm
+        https://bugs.webkit.org/show_bug.cgi?id=65555
+
+        Merge recent changes to ScrollbarThemeMac.mm to ScrollbarThemeChromiumMac.mm.
+
+        Reviewed by James Robinson.
+
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.h:
+        * platform/chromium/ScrollbarOverlayUtilitiesChromiumMac.mm:
+        (wkScrollbarPainterSetEnabled):
+        * platform/chromium/ScrollbarThemeChromiumMac.h:
+        (WebCore::ScrollbarThemeChromiumMac::maxOverlapBetweenPages):
+        * platform/chromium/ScrollbarThemeChromiumMac.mm:
+        (WebCore::ScrollbarThemeChromiumMac::registerScrollbar):
+        (WebCore::ScrollbarThemeChromiumMac::setNewPainterForScrollbar):
+        (WebCore::toScrollbarPainterKnobStyle):
+        (WebCore::ScrollbarThemeChromiumMac::updateScrollbarOverlayStyle):
+        (WebCore::ScrollbarThemeChromiumMac::updateEnabledState):
+        (WebCore::ScrollbarThemeChromiumMac::paint):
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from SVG IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65337
+
+        Reviewed by Nikolas Zimmermann.
+
+        No new tests, all existing tests pass.
+
+        * svg/ElementTimeControl.idl:
+        * svg/SVGAnimationElement.idl:
+        * svg/SVGDocument.idl:
+        * svg/SVGElementInstance.idl:
+        * svg/SVGElementInstanceList.idl:
+        * svg/SVGException.idl:
+        * svg/SVGFEDropShadowElement.idl:
+        * svg/SVGFEGaussianBlurElement.idl:
+        * svg/SVGFEMorphologyElement.idl:
+        * svg/SVGFilterElement.idl:
+        * svg/SVGLocatable.idl:
+        * svg/SVGMarkerElement.idl:
+        * svg/SVGPathElement.idl:
+        * svg/SVGSVGElement.idl:
+        * svg/SVGStylable.idl:
+        * svg/SVGStyleElement.idl:
+        * svg/SVGTests.idl:
+        * svg/SVGTextContentElement.idl:
+
+2011-08-02  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from CSS IDL files
+        https://bugs.webkit.org/show_bug.cgi?id=65341
+
+        Reviewed by Adam Barth.
+
+        No new tests. All existing tests pass.
+
+        * css/CSSMediaRule.idl:
+        * css/CSSPrimitiveValue.idl:
+        * css/CSSRuleList.idl:
+        * css/CSSStyleDeclaration.idl:
+        * css/CSSStyleSheet.idl:
+        * css/CSSValueList.idl:
+        * css/MediaList.idl:
+        * css/MediaQueryList.idl:
+        * css/MediaQueryListListener.idl:
+        * css/StyleMedia.idl:
+        * css/StyleSheetList.idl:
+        * css/WebKitCSSKeyframesRule.idl:
+        * css/WebKitCSSMatrix.idl:
+
+2011-08-02  Robert Kroeger  <rjkroege@chromium.org>
+
+        [chromium] Layering violations in gesture recognizer
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        Reviewed by Adam Barth.
+
+        Divided the gesture recognizer up to correct a layering
+        violation by moving gesture implementation from it to
+        EventHandler::handleGestureEvent so that the gesture recognizer
+        could simply be an engine for generating gesture events from
+        touch events.
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        Added symbolic contstant for tick multiplier.
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        Removed construction of gesture recognizer.
+        (WebCore::EventHandler::handleGestureEvent):
+        Extended for new gesture events added in this patch.
+        (WebCore::EventHandler::handleTouchEvent):
+        Removed call into gesture recognizer.
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        Removed code to reset gesture recognizer.
+        * platform/PlatformGestureEvent.h:
+        (WebCore::PlatformGestureEvent::PlatformGestureEvent):
+        (WebCore::PlatformGestureEvent::deltaX):
+        (WebCore::PlatformGestureEvent::deltaY):
+        (WebCore::PlatformGestureEvent::shiftKey):
+        (WebCore::PlatformGestureEvent::ctrlKey):
+        (WebCore::PlatformGestureEvent::altKey):
+        (WebCore::PlatformGestureEvent::metaKey):
+        Added additional gesture types and parameters.
+        * platform/PlatformGestureRecognizer.h:
+        * platform/chromium/FramelessScrollView.h:
+        Added support for displatching gesture and touch events.
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::constructClickGestureEvent):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGestures):
+        Removed all depedencies on EventHandler. Instead, create gesture
+        events from touch event stream.
+        (WebCore::InnerGestureRecognizer::constructScrollGesture):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
+        (WebCore::GestureRecognizerChromium::reset):
+        * platform/chromium/GestureRecognizerChromium.h:
+        * platform/chromium/PopupMenuChromium.cpp:
+        Added support to handle touch events and gesture events.
+        (WebCore::PopupContainer::handleTouchEvent):
+        (WebCore::PopupContainer::handleGestureEvent):
+        (WebCore::PopupListBox::handleTouchEvent):
+        (WebCore::PopupListBox::handleGestureEvent):
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+        Ignores the newly added gesture event types.
+
+2011-08-01  Michael Saboff  <msaboff@apple.com>
+
+        Virtual copying of FastMalloc allocated memory causes madvise MADV_FREE_REUSABLE errors
+        https://bugs.webkit.org/show_bug.cgi?id=65502
+
+        Reviewed by Anders Carlsson.
+
+        Change the vm_copy in PurgeableBuffer::create to be a memcpy.  The
+        vm_copy causes the process to have additional references to the same
+        memory region.  These additional reference caused madvise(MADV_FREE_REUSABLE)
+        to fail when it encountered such pages.
+
+        No tests added this is a resource defect and not a functional issue.
+
+        * platform/mac/PurgeableBufferMac.cpp:
+        (WebCore::PurgeableBuffer::create):
+
+2011-08-02  Stephen White  <senorblanco@chromium.org>
+
+        [Chromium] Remove an unnecessary readback during accelerated 
+        canvas-to-canvas draws.
+        https://bugs.webkit.org/show_bug.cgi?id=65560
+
+        Reviewed by James Robinson.
+
+        No new tests.  (Printing has few tests, sadly.)
+
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::draw):
+        Revert most of the changes to this file from
+        http://trac.webkit.org/changeset/91870, except for the call which makes
+        the source context current, so that the readPixels() still works.
+
+
+2011-08-02  Filip Pizlo  <fpizlo@apple.com>
+
+        JSC GC is far too conservative about growing the heap size, particularly
+        on desktop platforms
+        https://bugs.webkit.org/show_bug.cgi?id=65438
+
+        Reviewed by Oliver Hunt.
+
+        No change in behavior, thus no new tests.
+        
+        Pass the LargeHeap hint to JSGlobalData when creating the JSC runtime
+        instance corresponding to non-worker JS code.
+
+        * bindings/js/JSDOMWindowBase.cpp:
+        (WebCore::JSDOMWindowBase::commonJSGlobalData):
+
+2011-08-02  Van Lam  <vanlam@google.com>
+
+        --webkit-visual-word: ctrl-arrow is not able to reach the boundary of line
+        https://bugs.webkit.org/show_bug.cgi?id=61346
+
+        Reviewed by Ryosuke Niwa.
+
+        When collecintg word boundaries in a box, explicitly check if the box
+        is at the end of line (so it should contain the end-of-line position)
+        and collect the end-of-line position.
+
+        * editing/visible_units.cpp:
+        (WebCore::isBoxVisuallyLastInLine):
+        (WebCore::appendPositionAtLogicalEndOfLine):
+        (WebCore::collectWordBreaksInBoxInsideBlockWithSameDirectionality):
+        (WebCore::collectWordBreaksInBoxInsideBlockWithDifferntDirectionality):
+
+2011-08-02  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Should save scroll positions for network panel Response and Preview tabs.
+        https://bugs.webkit.org/show_bug.cgi?id=65557
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkItemView.js:
+        (WebInspector.ResourceContentView.prototype.get innerView):
+        (WebInspector.ResourceContentView.prototype.set innerView):
+        (WebInspector.ResourceContentView.prototype.hide):
+        * inspector/front-end/ResourcePreviewView.js:
+        (WebInspector.ResourcePreviewView.prototype.contentLoaded):
+        * inspector/front-end/ResourceResponseView.js:
+        (WebInspector.ResourceResponseView.prototype.contentLoaded):
+
+2011-08-02  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Remove initator column for JSC, fix network resource initiator tests.
+        https://bugs.webkit.org/show_bug.cgi?id=65534
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._createTable):
+        (WebInspector.NetworkLogView.prototype.switchToDetailedView):
+        (WebInspector.NetworkLogView.prototype.switchToBriefView):
+        (WebInspector.NetworkLogView.prototype._toggleGridMode):
+        (WebInspector.NetworkLogView.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkDataGridNode.prototype.createCells):
+        (WebInspector.NetworkDataGridNode.prototype.refreshResource):
+        * inspector/front-end/Settings.js:
+
+2011-08-02  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: SourceFrame should store saved scroll positions in View.
+        https://bugs.webkit.org/show_bug.cgi?id=65472
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ResourcesPanel.js:
+        (WebInspector.FrameResourceTreeElement.prototype._recreateSourceView):
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._sourceFileChanged):
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype.show):
+        (WebInspector.SourceFrame.prototype.hide):
+        (WebInspector.SourceFrame.prototype.get scrollLeft):
+        (WebInspector.SourceFrame.prototype.set scrollLeft):
+        (WebInspector.SourceFrame.prototype.get scrollTop):
+        (WebInspector.SourceFrame.prototype.set scrollTop):
+        * inspector/front-end/View.js:
+        (WebInspector.View.prototype._innerShow):
+        (WebInspector.View.prototype._innerHide):
+        (WebInspector.View.prototype.detach):
+        (WebInspector.View.prototype.storeScrollPositions):
+        (WebInspector.View.prototype.inheritScrollPositionsFromView):
+        (WebInspector.View.prototype.restoreScrollPositions):
+
+2011-08-02  Jeff Miller  <jeffm@apple.com>
+
+        Move WTF_USE_AVFOUNDATION from JavaScriptCore/wtf/platform.h to WebCore/config.h
+        https://bugs.webkit.org/show_bug.cgi?id=65552
+        
+        Since this is a WebCore feature, there's no need to define it in JavaScriptCore/wtf/platform.h.
+
+        Reviewed by Adam Roben.
+
+        No change in functionality, so new tests.
+
+        * config.h: Added WTF_USE_AVFOUNDATION.
+
+2011-08-02  Alexandru Chiculita  <achicu@adobe.com>
+
+        Split RenderBlock::layoutRunsAndFloats into multiple methods
+        https://bugs.webkit.org/show_bug.cgi?id=65376
+
+        Extracted layoutRunsAndFloatsInRange, linkToEndLineIfNeeded and repaintDirtyFloats methods and moved
+        most of the locals to LineLayoutState.
+
+        Reviewed by David Hyatt.
+
+        No new tests needed because it is just refactoring existing code.
+
+        * rendering/RenderBlock.h:
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::LineLayoutState::LineLayoutState):
+        (WebCore::LineLayoutState::endLineMatched):
+        (WebCore::LineLayoutState::setEndLineMatched):
+        (WebCore::LineLayoutState::checkForFloatsFromLastLine):
+        (WebCore::LineLayoutState::setCheckForFloatsFromLastLine):
+        (WebCore::LineLayoutState::lineInfo):
+        (WebCore::LineLayoutState::endLineLogicalTop):
+        (WebCore::LineLayoutState::setEndLineLogicalTop):
+        (WebCore::LineLayoutState::endLine):
+        (WebCore::LineLayoutState::setEndLine):
+        (WebCore::LineLayoutState::lastFloat):
+        (WebCore::LineLayoutState::setLastFloat):
+        (WebCore::LineLayoutState::floats):
+        (WebCore::LineLayoutState::floatIndex):
+        (WebCore::LineLayoutState::setFloatIndex):
+        (WebCore::RenderBlock::layoutRunsAndFloats):
+        (WebCore::RenderBlock::layoutRunsAndFloatsInRange):
+        (WebCore::RenderBlock::linkToEndLineIfNeeded):
+        (WebCore::RenderBlock::repaintDirtyFloats):
+        (WebCore::RenderBlock::layoutInlineChildren):
+        (WebCore::RenderBlock::determineStartPosition):
+        (WebCore::RenderBlock::determineEndPosition):
+        (WebCore::RenderBlock::matchedEndLine):
+
+2011-08-02  Nat Duca  <nduca@chromium.org>
+
+        [chromium] Remove resizeOnscreenContent from LRC. It can be derived.
+        https://bugs.webkit.org/show_bug.cgi?id=65519
+
+        Reviewed by James Robinson.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::setViewport):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+
+2011-08-02  Nico Weber  <thakis@chromium.org>
+
+        [chromium] Fix unresolved symbols error when linking to libwebkit.dylib
+        https://bugs.webkit.org/show_bug.cgi?id=65498
+
+        Reviewed by Dimitri Glazkov.
+
+        * WebCore.gyp/mac/adjust_visibility.sh:
+
+2011-08-02  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        hover then un-hover makes state change
+        https://bugs.webkit.org/show_bug.cgi?id=56401
+
+        Reviewed by David Hyatt.
+
+        When a 'before' pseudo-element is re-added, we should check whether the insertion point is an anonymous
+        block with inline children. If it is, then we should change the insertion point to the first child of the
+        anonymous block, otherwise the 'before' pseudo-element ends up in a different block. We choose the insertion
+        point to be the first child only if the anonymous block has children, otherwise the before element ends up
+        in a wrong block.
+
+        Tests: fast/dynamic/hover-before-position-after-style-change.html
+               fast/dynamic/hover-before-position-after-style-change2.html
+
+        * rendering/RenderObjectChildList.cpp:
+        (WebCore::RenderObjectChildList::updateBeforeAfterContent):
+
+2011-08-02  Andreas Kling  <kling@webkit.org>
+
+        [Qt] Simplify Path::translate() implementation.
+        https://bugs.webkit.org/show_bug.cgi?id=65540
+
+        Reviewed by Benjamin Poulain.
+
+        * platform/graphics/qt/PathQt.cpp:
+        (WebCore::Path::translate):
+
+2011-07-30  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: merge FormattedSourceFile into SourceFile.
+        https://bugs.webkit.org/show_bug.cgi?id=65411
+
+        Reviewed by Pavel Feldman.
+
+        Prepare for splitting SourceFile into RawSourceCode and UISourceCode:
+         * merge FormattedSourceFile into SourceFile
+         * rename SourceFile to RawSourceCode
+         * hide formatter worker lazy creation in ScriptFormatter
+
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel):
+        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation):
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation):
+        (WebInspector.DebuggerPresentationModel.prototype._addScript):
+        * inspector/front-end/ScriptFormatter.js:
+        (WebInspector.ScriptFormatter):
+        (WebInspector.ScriptFormatter.prototype._didFormatContent):
+        (WebInspector.ScriptFormatter.prototype.get _worker):
+        * inspector/front-end/SourceFile.js:
+        (WebInspector.RawSourceCode):
+        (WebInspector.RawSourceCode.prototype.setFormatted):
+        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded.didRequestContent):
+        (WebInspector.RawSourceCode.prototype.createSourceMappingIfNeeded):
+        (WebInspector.RawSourceCode.prototype._didRequestContent.didFormatContent):
+        (WebInspector.RawSourceCode.prototype._didRequestContent):
+        (WebInspector.RawSourceCode.prototype._invokeRequestContentCallbacks):
+
+2011-08-02  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions]Fix build after changeset 92106
+        https://bugs.webkit.org/show_bug.cgi?id=65539
+
+        Reviewed by Adam Roben.
+
+        No new tests since it is just a build fix.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-08-01  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] Console evaluations leading to resource loading cause errors.
+        https://bugs.webkit.org/show_bug.cgi?id=65466
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/network/network-initiator-from-console.html
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkDataGridNode.prototype._refreshInitiatorCell):
+
+2011-08-02  Alexander Pavlov  <apavlov@chromium.org>
+
+        Web Inspector: img[width=90] or align attributes shouldnt be shown above element.style block (as they have lower specificity)
+        https://bugs.webkit.org/show_bug.cgi?id=65514
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/StylesSidebarPane.js:
+
+2011-08-02  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        [EFL] Add fullscreen button to media control UI.
+        https://bugs.webkit.org/show_bug.cgi?id=64428
+
+        Implement paintMediaFullscreenButton and emit fullscreen signal.
+
+        Reviewed by Antonio Gomes.
+
+        * platform/efl/RenderThemeEfl.cpp:
+        (WebCore::RenderThemeEfl::edjeGroupFromFormType):
+        (WebCore::RenderThemeEfl::emitMediaButtonSignal):
+        (WebCore::RenderThemeEfl::paintMediaFullscreenButton):
+        * platform/efl/RenderThemeEfl.h:
+
+2011-08-01  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: [Extensions API] webInspector.inspectedPage.reload() is broken
+        https://bugs.webkit.org/show_bug.cgi?id=65476
+
+        - fixed webInspector.inspectedWindow.reload(), brought tests back.
+        - removed redundant setting of user agent in FrameLoader::loadResourceSynchronously()
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: http/tests/inspector/extensions-useragent.html
+
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer.prototype._onReload):
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadResourceSynchronously):
+
+2011-08-02  Pavel Feldman  <pfeldman@chromium.org>
+
+        Not reviewed: fixing inspector tests.
+
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect):
+
+2011-08-02  Pavel Feldman  <pfeldman@google.com>
+
+        Not reviewed: one line inspector style change.
+
+        * inspector/front-end/networkLogView.css:
+        (.network-error-row, .network-error-row .network-cell-subtitle):
+
+2011-08-02  Amruth Raj  <amruthraj@motorola.com>
+
+        Custom cursors cause the WebProcess to crash
+        https://bugs.webkit.org/show_bug.cgi?id=64802
+
+        Reviewed by Martin Robinson.
+
+        * WebCore.exp.in:
+
+2011-08-02  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: _normalizeEventTypes (via console's monitorEvents) doesnt handle all events like 'search' and other atypical ones.
+        https://bugs.webkit.org/show_bug.cgi?id=65468
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScriptSource.js:
+
+2011-08-02  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: 404/errors should get a RED visual treatment so easier to identify.
+        https://bugs.webkit.org/show_bug.cgi?id=65471
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkDataGridNode.prototype._refreshStatusCell):
+        * inspector/front-end/networkLogView.css:
+        (.network-error-cell):
+
+2011-08-02  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: arrow is a pain to click in console. Drive-by selection reset fix.
+        https://bugs.webkit.org/show_bug.cgi?id=65467
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._messagesClicked):
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement):
+        * inspector/front-end/inspector.css:
+        (.properties-tree li):
+        (.properties-tree li.parent::before):
+        * inspector/front-end/treeoutline.js:
+        (TreeElement.treeElementToggled):
+
+2011-08-01  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: button + "New style rule"
+        https://bugs.webkit.org/show_bug.cgi?id=65409
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/styles/styles-add-new-rule.html
+
+        * inspector/front-end/StylesSidebarPane.js:
+        (WebInspector.StylesSidebarPane):
+        (WebInspector.BlankStylePropertiesSection.prototype.editingSelectorCommitted):
+
+2011-08-01  Luke Macpherson   <macpherson@chromium.org>
+
+        Don't set m_fontDirty when setting zoom unless zoom has actually changed
+        https://bugs.webkit.org/show_bug.cgi?id=65092
+
+        Reviewed by Darin Adler.
+
+        No new tests as no functionality changed - this is an optimization that
+        should be logically equivalent to the current code.
+
+        The intent here is to avoid setting m_fontDirty unless the fornt information is actually dirty.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForDocument):
+        (WebCore::CSSStyleSelector::applyProperty):
+        Use setZoom and setEffectiveZoom wrapper functions.
+        * css/CSSStyleSelector.h:
+        (WebCore::CSSStyleSelector::setZoom):
+        Wrapper for m_style->setZoom() that automatically updates m_fontDirty.
+        (WebCore::CSSStyleSelector::setEffectiveZoom):
+        Wrapper for m_style->setEffectiveZoom that automatically updates m_fontDirty.
+        * page/animation/AnimationBase.cpp:
+        (WebCore::AnimationBase::ensurePropertyMap):
+        Use 
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::setZoom):
+        Return true only if underlying values change.
+        (WebCore::InheritedFlags::setZoomWithoutReturnValue):
+        Return void to match function pointer type where required.
+        (WebCore::InheritedFlags::setEffectiveZoom):
+        Return true only if underlying values change.
+
+2011-08-01  Jean-luc Brouillet  <jeanluc@chromium.org>
+
+        Removing old source files in gyp files that slow build
+        https://bugs.webkit.org/show_bug.cgi?id=65503
+
+        Reviewed by Adam Barth.
+
+        A number of stale files are listed in the gyp files. These slow the
+        build on Visual Studio 2010. Removing them.
+
+        * WebCore.gypi:
+
+2011-08-01  Bradley Nelson  <bradnelson@chromium.org>
+
+        Shard webcore_remaining for msvs official builds
+
+        https://bugs.webkit.org/show_bug.cgi?id=65475
+
+        Reviewed by Darin Fisher.
+
+        webcore_remaining has consistently exceeded Visual Studio 2008's
+        capacity to link when link time code generation is turned on (full
+        release builds).  This has been dealt with the past by carving off
+        larger and larger pieces of webcore_remaining (ie webcore_html,
+        webcore_renderer etc).
+        A new option has been added to gyp to automate this sharding:
+        'msvs_shard': SHARD_COUNT,
+        Targets marked in this way will be built in several pieces
+        (target_0, target_1...).
+        Since the resulting project is less comprehensible in the IDE (and
+        since the linking limitation only afflicts official builds), this
+        option is only needed for those builds.
+        This patch shards webcore_remaining into 10 parts for official builds.
+
+        * WebCore.gyp/WebCore.gyp:
+
+2011-08-01  Alice Boxhall  <aboxhall@chromium.org>
+
+        WAI-ARIA textbox role should be AXTextArea for aria-multiline=true, AXTextField for aria-multiline=false
+        https://bugs.webkit.org/show_bug.cgi?id=65451
+
+        Reviewed by Chris Fleizach.
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::determineAriaRoleAttribute):
+
+2011-08-01  srikumar bonda  <srikumar.b@gmail.com>
+
+        Use threadsafeCopy() API when using Database Directory path variable 
+        https://bugs.webkit.org/show_bug.cgi?id=65436
+
+        Reviewed by David Levin.
+
+        Use threadsafeCopy() API while using m_databaseDirectoryPath string variable
+        when the databaseGuard lock hasn't been taken in DatabaseTracker class. 
+        This is just a safety fix.
+
+        No changes to functionality so no new tests.
+
+        * storage/DatabaseTracker.cpp:
+        (WebCore::DatabaseTracker::trackerDatabasePath):
+        (WebCore::DatabaseTracker::deleteOrigin):
+
+2011-08-01  Michael Nordman  <michaeln@google.com>
+
+        [Chromium] WebSQLDatabase version handling is broken in multi-process browsers.
+        https://bugs.webkit.org/show_bug.cgi?id=65486
+
+        The WebCore::AbstractDatabase class maintains a global in-memory map of
+        the version numbers associated with open database files, but that map is
+        not reliable in a multi-process system like Chrome. So instead of relying
+        on the cached values in that map, we read the value from the database (and
+        update the cached value) where possible. There are two edge cases where that's
+        not possible because the scriptable interface requires synchronous access
+        to the version: the .version attribute getter and the .openDatabase() method.
+        In those cases, we have no choice but to use the potentially stale cached value.
+
+        Reviewed by Darin Fisher.
+
+        No new tests. Existing layout tests cover the version handling functionality.
+
+        * storage/AbstractDatabase.cpp:
+        (WebCore::AbstractDatabase::version):
+        (WebCore::AbstractDatabase::performOpenAndVerify):
+        (WebCore::AbstractDatabase::getVersionFromDatabase):
+        (WebCore::AbstractDatabase::setVersionInDatabase):
+        (WebCore::AbstractDatabase::setExpectedVersion):
+        (WebCore::AbstractDatabase::getCachedVersion):
+        (WebCore::AbstractDatabase::setCachedVersion):
+        (WebCore::AbstractDatabase::getActualVersionForTransaction):
+        * storage/AbstractDatabase.h:
+        (WebCore::AbstractDatabase::expectedVersion):
+        * storage/ChangeVersionWrapper.cpp:
+        (WebCore::ChangeVersionWrapper::handleCommitFailedAfterPostflight):
+        * storage/ChangeVersionWrapper.h:
+        * storage/Database.cpp:
+        (WebCore::Database::openDatabase):
+        * storage/DatabaseSync.cpp:
+        (WebCore::DatabaseSync::openDatabaseSync):
+        (WebCore::DatabaseSync::changeVersion):
+        * storage/SQLTransaction.cpp:
+        (WebCore::SQLTransaction::SQLTransaction):
+        (WebCore::SQLTransaction::executeSQL):
+        (WebCore::SQLTransaction::openTransactionAndPreflight):
+        (WebCore::SQLTransaction::runCurrentStatement):
+        (WebCore::SQLTransaction::postflightAndCommit):
+        * storage/SQLTransaction.h:
+        * storage/SQLTransactionSync.cpp:
+        (WebCore::SQLTransactionSync::SQLTransactionSync):
+        (WebCore::SQLTransactionSync::executeSQL):
+        (WebCore::SQLTransactionSync::begin):
+        * storage/SQLTransactionSync.h:
+
+2011-08-01  Tim Horton  <timothy_horton@apple.com>
+
+        Severe shadow repaint issues with SVGText elements
+        https://bugs.webkit.org/show_bug.cgi?id=63648
+        <rdar://problem/7632269>
+
+        Reviewed by Darin Adler.
+
+        Make SVG elements which inherit from RenderSVGBlock take text-shadow
+        overflow into account when determining whether or not they should draw
+
+        Test: svg/custom/repaint-shadow.svg
+
+        * rendering/RenderBox.h:
+        (WebCore::RenderBox::visualOverflowRect):
+        * rendering/svg/RenderSVGBlock.cpp:
+        (WebCore::RenderSVGBlock::visualOverflowRect):
+        * rendering/svg/RenderSVGBlock.h:
+
+2011-08-01  Zhenyao Mo  <zmo@google.com>
+
+        Unreviewed, rolling out r92022.
+        http://trac.webkit.org/changeset/92022
+        https://bugs.webkit.org/show_bug.cgi?id=65203
+
+        try to see if this is causing a bunch of browser tests failues
+        on win bots - will recommit if not
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::init):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::initializeForGDI):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::~TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::~TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::hdc):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::~TransparencyAwareUniscribePainter):
+        (WebCore::drawGlyphsWin):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        (WebCore::PlatformContextSkia::isNativeFontRenderingAllowed):
+        * platform/graphics/skia/PlatformContextSkia.h:
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::windowsCanHandleDrawTextShadow):
+        (WebCore::windowsCanHandleTextDrawing):
+        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-08-01  Scott Graham  <scottmg@chromium.org>
+
+        REGRESSION (r39725?): Resources removed from document can not be freed
+        until the document is deleted
+        https://bugs.webkit.org/show_bug.cgi?id=61006
+
+        Reviewed by Antti Koivisto.
+
+        Upon completing a load start a Timer to iterate through
+        CachedResourceLoader's m_documentResources map to check for any items
+        that have only one reference (thus being the reference in the map
+        itself). The map should really be weak, but because the
+        CachedResourceHandle achieves bookkeeping work in addition to
+        reference counting, this is a simpler and more localized way to free
+        the used memory while maintaining the other behaviour (when
+        CachedResource is used as proxy).
+
+        With this patch the testcase at
+        https://bugs.webkit.org/attachment.cgi?id=93850 should no longer
+        consume 400MB of ram on load. Test added for crash discovered in
+        previous revision, but no tests for memory usage.
+
+        Test: http/tests/inspector/network/disabled-cache-crash.html
+
+        * WebCore.exp.in:
+        * loader/cache/CachedResource.h:
+        (WebCore::CachedResource::hasOneHandle):
+        * loader/cache/CachedResourceLoader.cpp:
+        (WebCore::CachedResourceLoader::CachedResourceLoader):
+        (WebCore::CachedResourceLoader::loadDone):
+        (WebCore::CachedResourceLoader::garbageCollectDocumentResourcesTimerFired):
+        * loader/cache/CachedResourceLoader.h:
+        * testing/Internals.cpp:
+        (WebCore::Internals::disableMemoryCache):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-08-01  Jochen Eisinger  <jochen@chromium.org>
+
+        Never override the policy URL on form submissions.
+        https://bugs.webkit.org/show_bug.cgi?id=61809
+
+        Reviewed by Adam Barth.
+
+        Tests: http/tests/security/cookies/third-party-cookie-blocking-main-frame.html
+               http/tests/security/cookies/third-party-cookie-blocking-user-action.html
+               http/tests/security/cookies/third-party-cookie-blocking.html
+
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadURL):
+        (WebCore::FrameLoader::addExtraFieldsToSubresourceRequest):
+        (WebCore::FrameLoader::addExtraFieldsToMainResourceRequest):
+        (WebCore::FrameLoader::addExtraFieldsToRequest):
+        (WebCore::FrameLoader::loadPostRequest):
+        (WebCore::FrameLoader::loadDifferentDocumentItem):
+        * loader/FrameLoader.h:
+
+
+2011-08-01  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Update comment added in r92139 per Darin's suggestion.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForElement):
+
+2011-08-01  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Search field in designMode causes a crash
+        https://bugs.webkit.org/show_bug.cgi?id=65362
+
+        Reviewed by Dimitri Glazkov.
+
+        The crashed was caused by editing code inadvertently deleting search and cancel buttons in the design mode.
+        Fixed the bug by avoid inheriting user-modify property from the shadow host.
+
+        Test: editing/input/search-field-crash-in-designmode.html
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::isAtShadowBoundary): Moved.
+        (WebCore::CSSStyleSelector::styleForElement): Overrides -webkit-user-modify by the initial value after m_style
+        inherited the values from m_parentStyle but before applying matched rules.
+        * dom/Node.cpp:
+        (WebCore::Node::rendererIsEditable): Ignore page's editability inside a shadow DOM.
+
+2011-08-01  Marco Peereboom  <marco@peereboom.us>
+
+        [Soup] Set default max-conns to a more sane default value and fix comment 
+        https://bugs.webkit.org/show_bug.cgi?id=65335
+
+        Reviewed by Martin Robinson.
+
+        Rigged the xxxterm web browser and validated that the default values were set properly.
+
+        * platform/network/soup/ResourceHandleSoup.cpp:
+        (WebCore::ResourceHandle::defaultSession):
+
+2011-07-28  Abhishek Arya  <inferno@chromium.org>
+
+        Regression(82144): Crash in TrailingObjects::updateMidpointsForTrailingBoxes
+        https://bugs.webkit.org/show_bug.cgi?id=65137
+
+        Fix the looping condition to prevent trailingSpaceMidpoint from becoming negative.
+
+        Reviewed by Dave Hyatt.
+
+        Test: fast/block/update-midpoints-for-trailing-boxes-crash.html
+
+        * rendering/RenderBlockLineLayout.cpp:
+        (WebCore::TrailingObjects::updateMidpointsForTrailingBoxes):
+
+2011-08-01  Benjamin Poulain  <benjamin@webkit.org>
+
+        [Qt] OpenGLShims does not build on ARM
+        https://bugs.webkit.org/show_bug.cgi?id=65465
+
+        Reviewed by Noam Rosenthal.
+
+        Fix the build with OpenGL ES 2:
+        -lookupOpenGLFunctionAddress() was defined but not used for OpenGL ES.
+        -glBlitFramebuffer() and glRenderbufferStorageMultisample() are not part of the specification.
+        When those are available as platform extension, the extension has been added.
+        -GLchar is not defined on some platform. The patch adds the same typedef as the official definition
+        to avoid conflicts.
+
+        * platform/graphics/cairo/OpenGLShims.cpp:
+        (lookupOpenGLFunctionAddress):
+        (WebCore::initializeOpenGLShims):
+        * platform/graphics/cairo/OpenGLShims.h:
+
+2011-08-01  Yury Semikhatsky  <yurys@chromium.org>
+
+        Unreviewed. Trivial fix for inspector/debugger/debugger-completions-on-call-frame.html after r92122.
+
+        * inspector/front-end/ConsoleView.js:
+
+2011-08-01  Hayato Ito  <hayato@chromium.org>
+
+        Add support for getting an element in shadow root by its id into a window.internals object.
+        https://bugs.webkit.org/show_bug.cgi?id=64587
+
+        Reviewed by Hajime Morita.
+
+        Test: fast/dom/shadow/get-element-by-id-in-shadow-root.html
+
+        * WebCore.exp.in:
+        * testing/Internals.cpp:
+        (WebCore::Internals::getElementByIdInShadowRoot):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-15  Hayato Ito  <hayato@chromium.org>
+
+        Add support for retrieving an element in TreeScope by id to window.internals object.
+        https://bugs.webkit.org/show_bug.cgi?id=64587
+
+        Reviewed by Hajime Morita.
+
+        Test: fast/dom/shadow/get-element-by-id-in-shadow.html
+
+        * WebCore.exp.in:
+        * testing/Internals.cpp:
+        (WebCore::Internals::getElementByIdInTreeScope):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-08-01  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: typing an expression in an iframe leads to multiple "Unsafe JavaScript attempt to access frame..." errors
+        https://bugs.webkit.org/show_bug.cgi?id=65457
+
+        Console completions are now done using evaluation which returns a JSON object with all property names rather than a remote
+        object. Also Runtime.evaluate and Runtime.callFunctionOn commands were extended with an optional parameter that allows to
+        get result as JSON value.
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/console-cd-completions.html
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::evaluate):
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        ():
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::asBool):
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._completions.evaluated.getCompletions):
+        (WebInspector.ConsoleView.prototype._completions.evaluated):
+        (WebInspector.ConsoleView.prototype._completions.receivedPropertySet):
+        (WebInspector.ConsoleView.prototype._completions):
+        (WebInspector.ConsoleView.prototype.evalInInspectedWindow):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject):
+        (WebInspector.RemoteObject.prototype.callFunction):
+        (WebInspector.RemoteObject.prototype.callFunctionJSON):
+        * inspector/front-end/WatchExpressionsSidebarPane.js:
+        (WebInspector.WatchExpressionsSection.prototype.update):
+
+2011-08-01  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        BORDER attribute with the object tag, using percentage values not working.
+        https://bugs.webkit.org/show_bug.cgi?id=65176
+
+        Reviewed by Hajime Morita.
+
+        When border presentational attribute for object element has % in it, it should be parsed using HTML parser rules.
+
+        Test: fast/borders/border-width-percent.html
+
+        * html/HTMLElement.cpp:
+        (WebCore::HTMLElement::parseBorderWidthAttribute):
+        * html/HTMLElement.h:
+        * html/HTMLImageElement.cpp:
+        * html/HTMLObjectElement.cpp:
+        (WebCore::HTMLObjectElement::parseMappedAttribute):
+
+2011-08-01  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Receive URL and subprotocol in WebSocketChannel::connect()
+        https://bugs.webkit.org/show_bug.cgi?id=65367
+
+        Reviewed by Kent Tamura.
+
+        To implement multiple subprotocols support (bug 65247), WebSocket::connect() will need to validate
+        the value of subprotocols after constructing WebSocketChannel, because the result depends on which
+        WebSocket protocol is used, which is obtained from WebSocketChannel::useHixie76Protocol(). This
+        means the subprotocol value will not be available at the time of WebSocketChannel construction.
+
+        This change moves URL and subprotocol arguments in WebSocketChannel constructor to
+        WebSocketChannel::connect(), which allows WebSocket::connect() function to check the subprotocol
+        value before the actual connection is established.
+
+        Relocating URL argument is technically not necessary, but seemed legitimate in terms of functional
+        correspondence between WebSocket and WebSocketChannel (constructor versus connect()).
+
+        No change in behavior, thus no new tests.
+
+        * websockets/ThreadableWebSocketChannel.cpp:
+        Remove "url" and "protocol" arguments from constructor and add them in connect().
+        (WebCore::ThreadableWebSocketChannel::create):
+        * websockets/ThreadableWebSocketChannel.h:
+        * websockets/WebSocket.cpp:
+        (WebCore::WebSocket::connect):
+        * websockets/WebSocketChannel.cpp: Same as ThreadableWebSocketChannel.
+        (WebCore::WebSocketChannel::WebSocketChannel):
+        (WebCore::WebSocketChannel::connect):
+        InspectorInstrumentation::didCreateWebSocket() call was moved to connect() because it needs URL.
+        This does not change behavior, because connect() is guaranteed to be called immediately after
+        WebSocketChannel is constructed.
+        * websockets/WebSocketChannel.h:
+        (WebCore::WebSocketChannel::create):
+        * websockets/WorkerThreadableWebSocketChannel.cpp: Same as ThreadableWebSocketChannel.
+        (WebCore::WorkerThreadableWebSocketChannel::WorkerThreadableWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::connect):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::Peer):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::connect):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::mainThreadCreateWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::Bridge):
+        (WebCore::WorkerThreadableWebSocketChannel::mainThreadConnect):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::connect):
+        * websockets/WorkerThreadableWebSocketChannel.h:
+        (WebCore::WorkerThreadableWebSocketChannel::create):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::create):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::create):
+
+2011-08-01  Luke Macpherson   <macpherson@chromium.org>
+
+        Add iterator to CSSValueList
+        https://bugs.webkit.org/show_bug.cgi?id=65297
+
+        Reviewed by Darin Adler.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValue.h:
+        (WebCore::CSSPrimitiveValue::isLength):
+        Add shorthand to determine if this primitive value is a length.
+        * css/CSSStyleSelector.cpp:
+        Use CSSValueListIterator throughout.
+        (WebCore::CSSStyleSelector::applyProperty):
+        (WebCore::CSSStyleSelector::applyPageSizeProperty):
+        (WebCore::CSSStyleSelector::createTransformOperations):
+        * css/CSSValueList.cpp:
+        (WebCore::CSSValueList::copy):
+        Use itemWithoutBoundsCheck() instead of item().
+        * css/CSSValueList.h:
+        Add CSSValueListIterator and CSSValueListInspector class definitions.
+        (WebCore::CSSValueList::item)
+        Provide inline definition of item.
+        (WebCore::CSSValueListIterator::CSSValueListIterator):
+        (WebCore::CSSValueListIterator::hasMore):
+        Return true if there are more values to consume, including the current value.
+        (WebCore::CSSValueListIterator::value):
+        Return the value at the current position.
+        (WebCore::CSSValueListIterator::next):
+        Move the iterator forward to the next item.
+        (WebCore::CSSValueListIterator::index):
+        Return the current position in the list.
+        (WebCore::CSSValueListInspector::item):
+        Return the item at a given index.
+        (WebCore::CSSValueListInspector::first):
+        Return the first item in the list.
+        (WebCore::CSSValueListInspector::second):
+        Return the second item in the list.
+        (WebCore::CSSValueListInspector::length):
+        Return the size of the underlying list.
+
+2011-08-01  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: group scripts by folder in the scripts selector.
+        https://bugs.webkit.org/show_bug.cgi?id=65321
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/debugger/scripts-sorting.html
+
+        * inspector/front-end/ScriptsPanel.js:
+        (WebInspector.ScriptsPanel.prototype._sourceFileAdded.get if):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect.insertOrdered.optionCompare):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect.insertOrdered):
+        (WebInspector.ScriptsPanel.prototype._addOptionToFilesSelect):
+        (WebInspector.ScriptsPanel.prototype._folderAndDisplayNameForScriptURL):
+        (WebInspector.ScriptsPanel.prototype.reset):
+        (WebInspector.SourceFrameDelegateForScriptsPanel.prototype.suggestedFileName):
+
+2011-07-28  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: [protocol] methods where all parameters are optional should not require empty params object.
+        https://bugs.webkit.org/show_bug.cgi?id=65331
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/CodeGeneratorInspector.pm:
+        (generateBackendFunction):
+        (generateArgumentGetters):
+
+2011-08-01  Adam Barth  <abarth@webkit.org>
+
+        application/json MIME type shouldn't cause warnings in <script> tags
+        https://bugs.webkit.org/show_bug.cgi?id=65448
+
+        Reviewed by Pavel Feldman.
+
+        This patch stops the web inspector from logging a ton of spam warnings
+        when a web page uses a JSONP service (which points script tags at
+        application/json resources).
+
+        * inspector/front-end/inspector.js:
+        (WebInspector.reset):
+
+2011-08-01  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Rename SocketStreamHandleClient member functions
+        https://bugs.webkit.org/show_bug.cgi?id=65374
+
+        Reviewed by Kent Tamura.
+
+        Rename SocketStreamHandleClient member functions to avoid conflict of the names of
+        FileReaderLoaderClient functions.
+
+        No change in behavior, thus no new tests are added.
+
+        * platform/network/SocketStreamHandleClient.h:
+        (WebCore::SocketStreamHandleClient::didOpenSocketStream):
+        (WebCore::SocketStreamHandleClient::didCloseSocketStream):
+        (WebCore::SocketStreamHandleClient::didReceiveSocketStreamData):
+        (WebCore::SocketStreamHandleClient::didFailSocketStream):
+        * platform/network/brew/SocketStreamHandleBrew.cpp:
+        (WebCore::SocketStreamHandlePrivate::socketConnected):
+        (WebCore::SocketStreamHandlePrivate::socketReadyRead):
+        (WebCore::SocketStreamHandlePrivate::socketClosed):
+        (WebCore::SocketStreamHandlePrivate::socketError):
+        * platform/network/cf/SocketStreamHandleCFNet.cpp:
+        (WebCore::SocketStreamHandle::addCONNECTCredentials):
+        (WebCore::SocketStreamHandle::readStreamCallback):
+        (WebCore::SocketStreamHandle::writeStreamCallback):
+        (WebCore::SocketStreamHandle::reportErrorToClient):
+        (WebCore::SocketStreamHandle::platformClose):
+        * platform/network/qt/SocketStreamHandleQt.cpp:
+        (WebCore::SocketStreamHandlePrivate::socketConnected):
+        (WebCore::SocketStreamHandlePrivate::socketReadyRead):
+        (WebCore::SocketStreamHandlePrivate::socketClosedCallback):
+        (WebCore::SocketStreamHandlePrivate::socketErrorCallback):
+        * platform/network/soup/SocketStreamHandleSoup.cpp:
+        (WebCore::SocketStreamHandle::connected):
+        (WebCore::SocketStreamHandle::readBytes):
+        (WebCore::SocketStreamHandle::platformSend):
+        (WebCore::SocketStreamHandle::platformClose):
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::didOpenSocketStream):
+        (WebCore::WebSocketChannel::didCloseSocketStream):
+        (WebCore::WebSocketChannel::didReceiveSocketStreamData):
+        (WebCore::WebSocketChannel::didFailSocketStream):
+        (WebCore::WebSocketChannel::resumeTimerFired):
+        * websockets/WebSocketChannel.h:
+
+2011-07-31  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r92094.
+        http://trac.webkit.org/changeset/92094
+        https://bugs.webkit.org/show_bug.cgi?id=65443
+
+        Triggered many asserts (Requested by abarth on #webkit).
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent):
+
+2011-07-31  Dominic Cooney  <dominicc@chromium.org>
+
+        Event target set to null post event dispatch
+        https://bugs.webkit.org/show_bug.cgi?id=63934
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/events/event-target-reset.html
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::dispatchEvent): Reset target to outermost
+        shadow host.
+
+2011-07-31  Sam Weinig  <sam@webkit.org>
+
+        REGRESSION: getBoundingClientRect() method of Range incorrectly returns null for collapsed Range
+        https://bugs.webkit.org/show_bug.cgi?id=65324
+
+        Reviewed by Ryosuke Niwa.
+
+        Update to more closely match the spec.
+
+        * dom/Range.cpp:
+        (WebCore::Range::getClientRects):
+        Return an empty ClientRectList instead of null when the range is empty.
+
+        (WebCore::Range::getBoundingClientRect):
+        Always return a ClientRect, even for an empty bounding rect.
+
+2011-07-29  Ryosuke Niwa  <rniwa@webkit.org>
+
+        [HTML5] Implement the selectionDirection property on input and textarea
+        https://bugs.webkit.org/show_bug.cgi?id=60403
+
+        Reviewed by Darin Adler.
+
+        Implements selectionDirection property as specified in HTML5 section 4.10.20:
+        http://www.whatwg.org/specs/web-apps/current-work/#textFieldSelection
+
+        selectionDirection is a property on input and textarea elements, which, on getting returns either "none",
+        "forward", or "backward" corresponding to the current selection direction, and on setting, modifies
+        the direction of the current selection. When selection doesn't exist or direction is unknown, "none"
+        is returned on getting. Setting the property value to neither of above values will result in setting "none".
+
+        This patch also adds the optional third argument, direction, to setSelectionRange.
+
+        Test: fast/forms/selection-direction.html
+              fast/forms/selection-wrongtype.html
+
+        * bindings/js/JSHTMLInputElementCustom.cpp:
+        (WebCore::JSHTMLInputElement::selectionDirection): Added.
+        (WebCore::JSHTMLInputElement::setSelectionDirection): Added.
+        (WebCore::JSHTMLInputElement::setSelectionRange): Processes the third argument.
+        * bindings/v8/custom/V8HTMLInputElementCustom.cpp:
+        (WebCore::V8HTMLInputElement::selectionDirectionAccessorGetter): Added.
+        (WebCore::V8HTMLInputElement::selectionDirectionAccessorSetter): Added.
+        (WebCore::V8HTMLInputElement::setSelectionRangeCallback): Processes the third argument.
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::updateFocusAppearance): Calls hasCachedSelection.
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::updateFocusAppearance): Ditto.
+        (WebCore::HTMLInputElement::setValue): Calls cacheSelection with SelectionHasNoDirection.
+        * html/HTMLTextAreaElement.idl: Added selectionDirection and the third argument to setSelectionRange.
+        * html/HTMLInputElement.idl: Ditto.
+        * html/HTMLTextFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::HTMLTextFormControlElement): Initializes
+        m_cachedSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::setSelectionStart): Calls setSelectionRange.
+        (WebCore::HTMLTextFormControlElement::setSelectionEnd): Ditto.
+        (WebCore::HTMLTextFormControlElement::setSelectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::select): Calls setSelectionRange with SelectionHasNoDirection.
+        (WebCore::HTMLTextFormControlElement::setSelectionRange): Added the version that takes direction
+        string as the third argument, which calls the version that takes two ints and TextFieldSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::selectionStart): Calls hasCachedSelection.
+        (WebCore::HTMLTextFormControlElement::selectionEnd): Ditto.
+        (WebCore::directionString): Added.
+        (WebCore::HTMLTextFormControlElement::selectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::computeSelectionDirection): Added.
+        (WebCore::HTMLTextFormControlElement::selection): Calls hasCachedSelection.
+        (WebCore::HTMLTextFormControlElement::restoreCachedSelection): Calls setSelectionRange.
+        (WebCore::HTMLTextFormControlElement::selectionChanged): Calls cacheSelection.
+        * html/HTMLTextFormControlElement.h:
+        (WebCore::HTMLTextFormControlElement::cacheSelection): Takes TextFieldSelectionDirection.
+        (WebCore::HTMLTextFormControlElement::hasCachedSelection): Extracted from hasCachedSelectionStart;
+        cacheSelection is the only function that modifies m_cacheSelectionStart and m_cacheSelectionEnd
+        and none of its callers ever set one of them be -1 so they are always both -1 or both non-negative.
+        Thus, having two separate functions for m_cacheSelectionStart and m_cacheSelectionEnd was redundant.
+
+2011-07-31  Daniel Bates  <dbates@webkit.org>
+
+        [GTK] Remove unused variable coreChild in WebCore::getChildForTable()
+        https://bugs.webkit.org/show_bug.cgi?id=65427
+
+        This variable was unused when it was initially added in <http://trac.webkit.org/changeset/89660> (bug #62718)
+        and it is unused today. We should remove it. This will also resolve a compiler warning.
+
+        Reviewed by Xan Lopez.
+
+        * accessibility/gtk/AccessibilityObjectWrapperAtk.cpp:
+        (getChildForTable):
+
+2011-07-30  Daniel Bates  <dbates@webkit.org>
+
+        Fix the WinCairo Debug build after <http://trac.webkit.org/changeset/91914>
+        (https://bugs.webkit.org/show_bug.cgi?id=64744)
+
+        * WebCore.vcproj/WebCore.vcproj: Remove ContextShadowCairo.cpp from the build since this
+          file was deleted in <http://trac.webkit.org/changeset/91914>.
+
+2011-07-30  Daniel Bates  <dbates@webkit.org>
+
+        Fix the Chromium Linux Release Flexbot build after <http://trac.webkit.org/changeset/92004>
+        (https://bugs.webkit.org/show_bug.cgi?id=65342)
+
+        * rendering/RenderFlexibleBox.cpp:
+        (WebCore::RenderFlexibleBox::layoutBlock): Update the definition of RenderFlexibleBox::layoutBlock()
+        to be consistent with its declaration in RenderFlexibleBox.h; Add argument layoutPass of type BlockLayoutPass.
+
+2011-07-30  Adam Barth  <abarth@webkit.org>
+
+        Update run-bindings-tests results after
+        http://trac.webkit.org/changeset/92068
+
+        * bindings/scripts/test/JS/JSTestCallback.cpp:
+
+2011-07-30  Patrick Gansterer  <paroga@webkit.org>
+
+        Remove inclusion of MainThread.h from Threading.h
+        https://bugs.webkit.org/show_bug.cgi?id=65081
+
+        Reviewed by Darin Adler.
+
+        Add missing include statements for MainThread.
+
+        * bindings/js/DOMWrapperWorld.cpp:
+        * bindings/js/JSDOMWindowBase.cpp:
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateCallbackImplementation):
+        * bindings/v8/DOMDataStore.cpp:
+        * bindings/v8/DOMWrapperWorld.cpp:
+        * bindings/v8/V8Binding.cpp:
+        * bindings/v8/V8DOMMap.cpp:
+        * bindings/v8/V8DOMWrapper.h:
+        * dom/EventTarget.cpp:
+        * fileapi/LocalFileSystem.cpp:
+        * loader/CrossOriginPreflightResultCache.cpp:
+        * loader/ResourceLoadScheduler.cpp:
+        * loader/WorkerThreadableLoader.cpp:
+        * loader/appcache/ApplicationCacheGroup.cpp:
+        * page/DOMWindow.cpp:
+        * page/History.cpp:
+        * page/SecurityOrigin.cpp:
+        * page/mac/EventHandlerMac.mm:
+        * platform/MIMETypeRegistry.cpp:
+        * platform/ThreadGlobalData.cpp:
+        * platform/ThreadTimers.cpp:
+        * platform/TreeShared.h:
+        * platform/audio/HRTFDatabaseLoader.cpp:
+        * platform/graphics/Font.cpp:
+        * platform/graphics/FontFallbackList.h:
+        * platform/graphics/FontFastPath.cpp:
+        * platform/graphics/Image.cpp:
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
+        * platform/graphics/ca/win/WKCACFViewLayerTreeHost.cpp:
+        * platform/graphics/cg/ImageBufferCG.cpp:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        * platform/graphics/chromium/cc/CCLayerTreeHostImplProxy.cpp:
+        * platform/mac/LocalizedStringsMac.mm:
+        * platform/mac/SharedBufferMac.mm:
+        * platform/network/BlobResourceHandle.cpp:
+        * platform/network/cf/DNSCFNet.cpp:
+        * platform/network/cf/LoaderRunLoopCF.cpp:
+        * platform/text/LocalizedNumberICU.cpp:
+        * platform/text/TextEncodingRegistry.cpp:
+        * platform/text/mac/LocalizedNumberMac.mm:
+        * platform/win/LocalizedStringsWin.cpp:
+        * storage/LocalStorageThread.cpp:
+        * storage/StorageAreaImpl.cpp:
+        * storage/StorageAreaSync.cpp:
+        * storage/StorageNamespaceImpl.cpp:
+        * storage/StorageSyncManager.cpp:
+        * webaudio/AsyncAudioDecoder.cpp:
+        * webaudio/AudioBufferSourceNode.cpp:
+        * webaudio/AudioContext.h
+        * webaudio/AudioContext.cpp:
+        * webaudio/AudioNode.cpp:
+        * webaudio/ConvolverNode.cpp:
+        * webaudio/OfflineAudioDestinationNode.cpp:
+        * webaudio/RealtimeAnalyser.cpp:
+        * webaudio/WaveShaperNode.cpp:
+        * websockets/WorkerThreadableWebSocketChannel.cpp:
+        * workers/WorkerMessagingProxy.cpp:
+
+2011-07-30  Enrica Casucci  <enrica@apple.com>
+
+        REGRESSION: culledInlineAbsoluteRects needs to translate a 0,0 point to absolute
+        coordinates so that the top left position is accurate.
+        https://bugs.webkit.org/show_bug.cgi?id=65419
+        <rdar://problem/9408862>
+
+        This patch fixes a regression introduced in r83075.
+        Make sure that culledInlineAbsoluteRects still does
+        a translation of a 0,0 point to absolute coordinates so that the top left position is
+        accurate.
+        This code path could not be tested via JavaScript. The patch
+        extends the Internals object to be able to test this case.
+
+        Reviewed by Dan Bernstein.
+
+        Test: fast/inline/skipped-whitespace-boundingBox.html
+
+        * WebCore.exp.in: Added some exports.
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::culledInlineAbsoluteRects):
+        * testing/Internals.cpp:
+        (WebCore::Internals::boundingBox):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-26  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: move location conversion functions to SourceFile.
+        https://bugs.webkit.org/show_bug.cgi?id=65185
+
+        Reviewed by Pavel Feldman.
+
+        Test: inspector/debugger/source-file.html
+
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation.didCreateSourceMapping):
+        (WebInspector.DebuggerPresentationModel.prototype._scriptLocationToUILocation):
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation.didCreateSourceMapping):
+        (WebInspector.DebuggerPresentationModel.prototype._uiLocationToScriptLocation):
+        * inspector/front-end/SourceFile.js:
+        (WebInspector.SourceFile.prototype.rawLocationToUILocation):
+        (WebInspector.SourceFile.prototype.uiLocationToRawLocation):
+        (WebInspector.SourceFile.prototype._scriptForRawLocation):
+        (WebInspector.SourceFile.prototype.createSourceMappingIfNeeded):
+        (WebInspector.FormattedSourceFile.prototype.createSourceMappingIfNeeded):
+        (WebInspector.FormattedSourceFile.prototype._didRequestContent):
+
+2011-07-29  Rob Buis  <rbuis@rim.com>
+
+        URL references are completely broken in SVG
+        https://bugs.webkit.org/show_bug.cgi?id=63283
+
+        Reviewed by Nikolas Zimmermann.
+
+        Change SVGURIElement::getTarget to be more strict about iri resolving and make it serve as a central
+        place to resolve a iri to a SVGElement. The iri can be same-document or external, for now we only handle
+        the former, the latter will be handled in bug 65344.
+        Accept as same-document if the iri combined with the base uri equals the document url (ignoring
+        the fragment identifier). For convenience a method is added to lookup the element, if found.
+
+        Tests: svg/custom/external-paintserver-reference.svg
+               svg/custom/linking-base-external-reference.xhtml
+               svg/custom/uri-reference-handling.svg
+
+        * css/CSSCursorImageValue.cpp:
+        (WebCore::resourceReferencedByCursorElement):
+        (WebCore::CSSCursorImageValue::~CSSCursorImageValue):
+        (WebCore::CSSCursorImageValue::updateIfSVGCursorIsUsed):
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::getFontData):
+        * css/CSSFontSelector.h:
+        (WebCore::CSSFontSelector::document):
+        * css/SVGCSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applySVGProperty):
+        * rendering/svg/RenderSVGTextPath.cpp:
+        (WebCore::RenderSVGTextPath::layoutPath):
+        * rendering/svg/SVGResources.cpp:
+        (WebCore::targetReferenceFromResource):
+        (WebCore::paintingResourceFromSVGPaint):
+        * svg/SVGAltGlyphElement.cpp:
+        (WebCore::SVGAltGlyphElement::hasValidGlyphElements):
+        * svg/SVGFEImageElement.cpp:
+        (WebCore::SVGFEImageElement::requestImageResource):
+        (WebCore::SVGFEImageElement::build):
+        * svg/SVGGlyphRefElement.cpp:
+        (WebCore::SVGGlyphRefElement::hasValidGlyphElement):
+        * svg/SVGLinearGradientElement.cpp:
+        (WebCore::SVGLinearGradientElement::collectGradientAttributes):
+        * svg/SVGMPathElement.cpp:
+        (WebCore::SVGMPathElement::pathElement):
+        * svg/SVGPaint.cpp:
+        (WebCore::SVGPaint::matchesTargetURI):
+        * svg/SVGPatternElement.cpp:
+        (WebCore::SVGPatternElement::collectPatternAttributes):
+        * svg/SVGRadialGradientElement.cpp:
+        (WebCore::SVGRadialGradientElement::collectGradientAttributes):
+        * svg/SVGTRefElement.cpp:
+        (WebCore::SVGTRefElement::updateReferencedText):
+        (WebCore::SVGTRefElement::svgAttributeChanged):
+        (WebCore::SVGTRefElement::buildPendingResource):
+        * svg/SVGTextPathElement.cpp:
+        (WebCore::SVGTextPathElement::insertedIntoDocument):
+        * svg/SVGURIReference.cpp:
+        (WebCore::SVGURIReference::fragmentIdentifierFromIRIString):
+        (WebCore::SVGURIReference::targetElementFromIRIString):
+        * svg/SVGURIReference.h:
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::buildPendingResource):
+        (WebCore::SVGUseElement::hasCycleUseReferencing):
+        (WebCore::SVGUseElement::expandUseElementsInShadowTree):
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::SVGSMILElement::targetElement):
+
+2011-07-29  James Simonsen  <simonjam@chromium.org>
+
+        Remove zipcar.com site specific hack added in r87361
+        https://bugs.webkit.org/show_bug.cgi?id=65405
+
+        Reviewed by Adam Barth.
+
+        * html/HTMLScriptElement.cpp:
+        (WebCore::HTMLScriptElement::insertedIntoDocument):
+
+2011-07-29  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Reorder functions in LayerRendererChromium.cpp to make bug 58840 easier to review
+        https://bugs.webkit.org/show_bug.cgi?id=65354
+
+        Reviewed by Kenneth Russell.
+
+        This moves a few function definitions in LayerRendererChromium around to make the patch on bug 58840 easier to
+        review.  In that patch, updatePropertiesAndRenderSurfaces() becomes a templated free function instead of a
+        member function, so it has to be near the top of the .cpp.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::calculateVisibleRect):
+        (WebCore::isScaleOrTranslation):
+        (WebCore::LayerRendererChromium::updatePropertiesAndRenderSurfaces):
+        (WebCore::LayerRendererChromium::updateLayers):
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Work-in-progress on Adopt AVCF media back end on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65400
+        <rdar://problem/9083559>
+        
+        Prepare WebCore.vcproj to support AVCF media back end on Windows.
+
+        Reviewed by Darin Adler.
+
+        No changes to functionality so no new tests.
+
+        * WebCore.vcproj/WebCore.vcproj: Added MediaPlayerPrivateAVFoundation and MediaPlayerPrivateAVFoundationCF sources.
+        * WebCore.vcproj/WebCoreMediaQT.vsprops: Added additional include directories and dleay load DLLs for AVCF.
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.cpp: Added, just a stub for now.
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundationCF.h: Added, just a stub for now.
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Work-in-progress on Adopt AVCF media back end on Windows
+        https://bugs.webkit.org/show_bug.cgi?id=65400
+        <rdar://problem/9083559>
+        
+        Make MediaPlayerPrivateAVFoundation::setDelayCallbacks() const and make the ivars
+        it references mutable so other const member functions can call it.
+
+        Reviewed by Darin Adler.
+
+        No changes to functionality so no new tests.
+
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.cpp:
+        (WebCore::MediaPlayerPrivateAVFoundation::setDelayCallbacks):
+        * platform/graphics/avfoundation/MediaPlayerPrivateAVFoundation.h:
+
+2011-07-29  Zhenyao Mo  <zmo@google.com>
+
+        Unreviewed, rolling out r92011.
+        http://trac.webkit.org/changeset/92011
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        break chromium win build
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        (WebCore::EventHandler::handleGestureEvent):
+        (WebCore::EventHandler::handleTouchEvent):
+        (WebCore::EventHandler::resetGestureRecognizer):
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        * platform/PlatformGestureEvent.h:
+        * platform/PlatformGestureRecognizer.h:
+        * platform/ScrollAnimatorWin.cpp:
+        * platform/chromium/FramelessScrollView.h:
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::dispatchSyntheticClick):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGesture):
+        (WebCore::InnerGestureRecognizer::scrollViaTouchMotion):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        * platform/chromium/GestureRecognizerChromium.h:
+        (WebCore::GestureRecognizerChromium::reset):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGesture):
+        * platform/chromium/PopupMenuChromium.cpp:
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+
+2011-07-29  Adrienne Walker  <enne@google.com>
+
+        [chromium] Only force slow scrolling for iframes under --force-compositing-mode
+        https://bugs.webkit.org/show_bug.cgi?id=65394
+
+        Reviewed by James Robinson.
+
+        The previous code introduced by r91591 made composited frames as well
+        as non-composited subframes go down the slow scrolling path.  Adjust
+        the check to use ownerElement to test for subframe and use
+        hasCompositedContent() which is a more correct test for compositing
+        than isEnclosedInCompositingLayer.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::useSlowRepaints):
+
+2011-07-29  Emil A Eklund  <eae@chromium.org>
+
+        -webkit-marquee with anonymous node causes segmentation fault in Node::document
+        https://bugs.webkit.org/show_bug.cgi?id=64693
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/css/webkit-marquee-anonymous-node-crash.html
+
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::scrollTo):
+        Add null check as renderer()->node() is null for anonymous nodes.
+
+2011-07-29  Mike Reed  <reed@google.com>
+
+        [skia] never draw with GDI, so that all text can be gpu-accelerated
+        https://bugs.webkit.org/show_bug.cgi?id=65203
+
+        Reviewed by Kenneth Russell.
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
+        (WebCore::drawGlyphsWin):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        * platform/graphics/skia/PlatformContextSkia.h:
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-07-29  Sam Weinig  <sam@webkit.org>
+
+        Move Region code from WebKit2 to WebCore
+        https://bugs.webkit.org/show_bug.cgi?id=65392
+
+        Reviewed by David Hyatt.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        Update project files.
+
+        * WebCore.exp.in:
+        Update exports.
+
+        * platform/graphics/Region.cpp: Copied from Source/WebKit2/Platform/Region.cpp.
+        * platform/graphics/Region.h: Copied from Source/WebKit2/Platform/Region.h.
+        Add files.
+
+2011-07-29  Robert Kroeger  <rjkroege@chromium.org>
+
+        [chromium] Layering violations in gesture recognizer
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        Reviewed by Adam Barth.
+
+        Divided the gesture recognizer up to correct a layering
+        violation by moving gesture implementation from it to
+        EventHandler::handleGestureEvent so that the gesture recognizer
+        could simply be an engine for generating gesture events from
+        touch events.
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        Added symbolic contstant for tick multiplier.
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        Removed construction of gesture recognizer.
+        (WebCore::EventHandler::handleGestureEvent):
+        Extended for new gesture events added in this patch.
+        (WebCore::EventHandler::handleTouchEvent):
+        Removed call into gesture recognizer.
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        Removed code to reset gesture recognizer.
+        * platform/PlatformGestureEvent.h:
+        (WebCore::PlatformGestureEvent::PlatformGestureEvent):
+        (WebCore::PlatformGestureEvent::deltaX):
+        (WebCore::PlatformGestureEvent::deltaY):
+        (WebCore::PlatformGestureEvent::shiftKey):
+        (WebCore::PlatformGestureEvent::ctrlKey):
+        (WebCore::PlatformGestureEvent::altKey):
+        (WebCore::PlatformGestureEvent::metaKey):
+        Added additional gesture types and parameters.
+        * platform/PlatformGestureRecognizer.h:
+        * platform/ScrollAnimatorWin.cpp:
+        (WebCore::ScrollAnimatorWin::handleGestureEvent):
+        Added missing method needed to fix the build on windows.
+        * platform/chromium/FramelessScrollView.h:
+        Added support for displatching gesture and touch events.
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::constructClickGestureEvent):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGestures):
+        Removed all depedencies on EventHandler. Instead, create gesture
+        events from touch event stream.
+        (WebCore::InnerGestureRecognizer::constructScrollGesture):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
+        (WebCore::GestureRecognizerChromium::reset):
+        * platform/chromium/GestureRecognizerChromium.h:
+        * platform/chromium/PopupMenuChromium.cpp:
+        Added support to handle touch events and gesture events.
+        (WebCore::PopupContainer::handleTouchEvent):
+        (WebCore::PopupContainer::handleGestureEvent):
+        (WebCore::PopupListBox::handleTouchEvent):
+        (WebCore::PopupListBox::handleGestureEvent):
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+        Ignores the newly added gesture event types.
+
+2011-07-29  Eric Carlson  <eric.carlson@apple.com>
+
+        Load delegate not consulted before loading some poster images
+        https://bugs.webkit.org/show_bug.cgi?id=65270
+
+        Reviewed by Joseph Pecoraro.
+
+        * html/HTMLVideoElement.cpp:
+        (WebCore::HTMLVideoElement::setDisplayMode): Don't ask a load delegate if it is OK to 
+            load an empty poster url.
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Re-sort one more file in the WebCore project with Visual Studio.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-07-29  Jeff Miller  <jeffm@apple.com>
+
+        Re-sort the WebCore project with Visual Studio after recent changes that I assume were done by manually editing the XML.
+
+        * WebCore.vcproj/WebCore.vcproj:
+
+2011-07-29  Dan Bernstein  <mitz@apple.com>
+
+        Added the regional indicator symbols to the set of codepoints that force use of the complex text code path.
+
+        Fixes <rdar://problem/9864578> Regional indicator symbols do not combine into national flags
+        https://bugs.webkit.org/show_bug.cgi?id=65380
+
+        Reviewed by Anders Carlsson.
+
+        Test: fast/text/regional-indicator-symobls.html
+
+        * platform/graphics/Font.cpp:
+        (WebCore::Font::codePath): Added handling of surrogate pairs, which returns Complex for characters in
+        the range U+1F1E6..U+1F1FF.
+
+2011-07-28  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65342
+
+        Add support for positioned floats being placed into a RenderBlock's FloatingObject list and for
+        correct propagation of those floating objects into descendants.
+
+        Reviewed by Sam Weinig.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::layoutBlock):
+        The positioned float layout algorithm is 2-pass. You lay out without the positioned objects, and then
+        once they have been placed, you lay out again and use that placement to determine the float positions.
+        layoutBlock now has an extra parameter to indicate which layout pass you are in.
+        
+        (WebCore::RenderBlock::addOverflowFromFloats):
+        Don't add overflow from positioned floats ever, since the positioning overflow function takes care of that
+        already.
+
+        (WebCore::RenderBlock::layoutBlockChild):
+        Include positioned floats in the lowestFloatLogicalBottom we look at so that overhang is computed properly.
+
+        (WebCore::RenderBlock::simplifiedLayout):
+        If layoutPositionedObjects indicates that a positioned float moved, then we can't do simplified layout. Bail
+        instead and do a full layout.
+
+        (WebCore::RenderBlock::positionedFloatsNeedRelayout):
+        Helper for layoutBlock in order to bypass the 2-pass model if we can detect that none of the positioned objects
+        will actually need to lay out again. This allows incremental layout to not always fault back to 2-pass as normal
+        flow content streams in.
+
+        (WebCore::RenderBlock::layoutPositionedObjects):
+        Modified to return a boolean indicating whether a positioned float got a layout. If so, we will lay out again
+        once our positioned objects are placed.
+
+        (WebCore::RenderBlock::insertFloatingObject):
+        insertFloatingObject can now handle positioned objects being inserted.
+
+        (WebCore::RenderBlock::positionNewFloats):
+        positionNewFloats doesn't attempt to position this new type of float. It only handles left/right floats.
+
+        (WebCore::RenderBlock::addPositionedFloats):
+        Helper to add in the floating objects for positioned floats. This is used instead of positionNewFloats and
+        just walks the positioned objects instead.
+
+        (WebCore::RenderBlock::clearFloats):
+        clearFloats now handles adding in positioned floats if the layout pass says they should be included.
+
+        (WebCore::RenderBlock::marginLogicalLeftForChild):
+        (WebCore::RenderBlock::marginLogicalRightForChild):
+        New helpers used by addPositionedFloats.
+    
+        (WebCore::RenderBlock::FloatingObjects::clear):
+        (WebCore::RenderBlock::FloatingObjects::increaseObjectsCount):
+        (WebCore::RenderBlock::FloatingObjects::decreaseObjectsCount):
+        Make sure the object count tracking handles positioned floats as well as left/right floats.
+    
+        * rendering/RenderBlock.h:
+        (WebCore::RenderBlock::logicalLeftForChild):
+        New helper used by addPositionedFloats.
+
+        (WebCore::RenderBlock::FloatingObject::FloatingObject):
+        Change the constructor to take the RenderStyle enum. This makes the construction simpler.
+
+        (WebCore::RenderBlock::hasPositionedFloats):
+        A bit tracks whether or not a block has positioned floats in its positioned objects list.
+
+        (WebCore::RenderBlock::hasOverhangingFloats):
+        Modified to include positioned floats.
+
+        (WebCore::RenderBlock::lowestFloatLogicalBottom):
+        This function excludes positioned floats by default, so that places that - for example - expand to
+        encompass their lowestFloatLogicalBottom won't accidentally expand to encompass positioned objects.
+
+        (WebCore::RenderBlock::lowestFloatLogicalBottomIncludingPositionedFloats):
+        A new function that includes positioned floats for callers that care.
+
+        (WebCore::RenderBlock::FloatingObjects::FloatingObjects):
+        (WebCore::RenderBlock::FloatingObjects::hasPositionedObjects):
+        The object count tracking for positioned floats within a block's FloatingObjects list.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::updateBoxModelInfoFromStyle):
+        Make sure isFloating is set even if isPositioned is also set for the positioned float case.
+
+        * rendering/RenderDeprecatedFlexibleBox.cpp:
+        (WebCore::RenderDeprecatedFlexibleBox::layoutBlock):
+        Modified to do the extra layout pass if needed.
+
+2011-07-29  Scott Byer  <scottbyer@chromium.org>
+
+        Scroll animation refinements.
+        https://bugs.webkit.org/show_bug.cgi?id=65154
+
+        Reviewed by Adam Barth.
+
+        Fix scroll animation bugs when scrolling to the ends of a document. Smooth over slow event repeat rates
+        better. Fix tests to allow for unit testing of scrolling up and not just down.
+
+        Additional unit tests added to ScrollAnimatorNoneTest:
+        ScrollQuadraticSmoothed, ScrollLotsQuadraticSmoothed, ScrollDownToBumper, ScrollUpToBumper
+
+        * platform/ScrollAnimatorNone.cpp:
+        (WebCore::ScrollAnimatorNone::Parameters::Parameters):
+        (WebCore::ScrollAnimatorNone::PerAxisData::updateDataFromParameters):
+        (WebCore::ScrollAnimatorNone::scroll):
+        * platform/ScrollAnimatorNone.h:
+
+2011-07-29  Samuel White  <samuel_white@apple.com>
+
+        Add the ability to search the AccessibilityObject cache
+        https://bugs.webkit.org/show_bug.cgi?id=64994
+        
+        To support searching the AccessibilityObject cache, we first need to
+        implement a minimal set of functions that will allow AccessibilityObjects
+        to be identified when searching using common search criteria. The additional
+        functions below complement the existing identification functionality already
+        available and together provide a basic working set to build search on top of.
+        Additionally, the blockquoteLevel function has been moved into the AccessibilityObject
+        class to make it available to all platforms.
+
+        Reviewed by Chris Fleizach.
+
+        New tests will be included in the following patch that will also implement
+        basic search functionality.
+
+        * accessibility/AccessibilityObject.cpp:
+        (WebCore::AccessibilityObject::isBlockquote):
+        (WebCore::AccessibilityObject::isLandmark):
+        (WebCore::AccessibilityObject::hasMisspelling):
+        (WebCore::AccessibilityObject::blockquoteLevel):
+        * accessibility/AccessibilityObject.h:
+        (WebCore::AccessibilityObject::isUnvisited):
+        (WebCore::AccessibilityObject::hasBoldFont):
+        (WebCore::AccessibilityObject::hasItalicFont):
+        (WebCore::AccessibilityObject::hasPlainText):
+        (WebCore::AccessibilityObject::hasSameFont):
+        (WebCore::AccessibilityObject::hasSameFontColor):
+        (WebCore::AccessibilityObject::hasSameStyle):
+        (WebCore::AccessibilityObject::hasStaticText):
+        (WebCore::AccessibilityObject::hasUnderline):
+        (WebCore::AccessibilityObject::tableLevel):
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::isUnvisited):
+        (WebCore::AccessibilityRenderObject::hasBoldFont):
+        (WebCore::AccessibilityRenderObject::hasItalicFont):
+        (WebCore::AccessibilityRenderObject::hasPlainText):
+        (WebCore::AccessibilityRenderObject::hasSameFont):
+        (WebCore::AccessibilityRenderObject::hasSameFontColor):
+        (WebCore::AccessibilityRenderObject::hasSameStyle):
+        (WebCore::AccessibilityRenderObject::hasUnderline):
+        * accessibility/AccessibilityRenderObject.h:
+        * accessibility/AccessibilityTable.cpp:
+        (WebCore::AccessibilityTable::tableLevel):
+        * accessibility/AccessibilityTable.h:
+        * accessibility/mac/AccessibilityObjectWrapper.mm:
+        (AXAttributeStringSetBlockquoteLevel):
+        (-[AccessibilityObjectWrapper accessibilityAttributeValue:]):
+
+2011-07-29  Zeng Huiqing  <huiqing.zeng@intel.com>
+
+        Avoid calling animation timer updates while the page is loading
+        https://bugs.webkit.org/show_bug.cgi?id=64851
+
+        Reviewed by Simon Fraser.
+
+        There is no need to update the animation timer for a RenderObject that has not yet been inserted into the render tree, or that doesn't have animations. Our tests show that this improves page loading by up to 3x on pages with a large number of transitionable objects.
+
+        * page/animation/AnimationController.cpp:
+        (WebCore::AnimationController::updateAnimations):
+
+2011-07-29  Anders Carlsson  <andersca@apple.com>
+
+        Pass the HTTP referrer header for URLs loaded by plug-ins
+        https://bugs.webkit.org/show_bug.cgi?id=65379
+        <rdar://problem/9822116>
+
+        Reviewed by Sam Weinig.
+
+        Export a symbol needed by WebKit2.
+
+        * WebCore.exp.in:
+
+2011-07-28  Leandro Gracia Gil  <leandrogracia@chromium.org>
+
+        Fix speech input icon rect on RTL directions.
+        https://bugs.webkit.org/show_bug.cgi?id=65333
+
+        Reviewed by Tony Gentilcore.
+
+        No new tests. This is used by platforms, not WebCore, and
+        the base functionality is not changed but only the failing cases.
+
+        * html/shadow/TextControlInnerElements.cpp:
+        (WebCore::InputFieldSpeechButtonElement::defaultEventHandler):
+
+2011-07-29  Kent Tamura  <tkent@chromium.org>
+
+        Make the ExceptionCode argument of Element::setShadowPseudoId() ASSERT_NO_EXCEPTION by default
+        https://bugs.webkit.org/show_bug.cgi?id=65363
+
+        Reviewed by Hajime Morita.
+
+        No new tests. Cleanup-only.
+
+        * dom/Element.h: Make the ExceptionCode argument ASSERT_NO_EXCEPTION by default.
+        * html/ColorInputType.cpp:
+        (WebCore::ColorInputType::createShadowSubtree): Remove the ExceptionCode argument and ASSERT(!ec).
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::updatePlaceholderText): ditto.
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::createShadowSubtree): ditto.
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::createShadowSubtree): ditto.
+        (WebCore::TextFieldInputType::updatePlaceholderText): ditto.
+        * html/ValidationMessage.cpp:
+        (WebCore::ValidationMessage::buildBubbleTree): ditto.
+
+2011-07-28  Luke Macpherson   <macpherson@chromium.org>
+
+        Remove remaining uses of CSSPrimitiveValue::computeLengthIntForLength()
+        https://bugs.webkit.org/show_bug.cgi?id=64919
+
+        Reviewed by Darin Adler.
+
+        No new tests / cleanup only.
+
+        * css/CSSPrimitiveValue.cpp:
+        (WebCore::CSSPrimitiveValue::computeLength):
+        Remove implementation of computeLengthIntForLength()
+        * css/CSSPrimitiveValue.h:
+        Remove definition of computeLengthIntForLength()
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::ApplyPropertyLength::applyValue):
+        Remove use of computeLengthIntForLength()
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Remove use of computeLengthIntForLength()
+        * platform/Length.h:
+        (WebCore::Length::setQuirk):
+        Adds the ability to set the m_quirk member variable after construction.
+
+2011-07-28  Anders Carlsson  <andersca@apple.com>
+
+        Unreviewed, rolling out r88601. (Requested by Sam Weinig).
+        http://trac.webkit.org/changeset/88601
+        https://bugs.webkit.org/show_bug.cgi?id=62230
+
+        Caused a regression, see https://bugs.webkit.org/show_bug.cgi?id=64378
+
+        * dom/StyledElement.cpp:
+        * dom/StyledElement.h:
+        * html/HTMLBodyElement.cpp:
+        (WebCore::HTMLBodyElement::parseMappedAttribute):
+        (WebCore::HTMLBodyElement::insertedIntoDocument):
+        (WebCore::HTMLBodyElement::didMoveToNewOwnerDocument):
+        * html/HTMLBodyElement.h:
+
+2011-07-28  Justin Schuh  <jschuh@chromium.org>
+
+        Simplify createCanonicalUUIDString implementation.
+        https://bugs.webkit.org/show_bug.cgi?id=65157
+
+        All ports support OS_RANDOMNESS, so better to have one implementation.
+
+        Reviewed by Adam Barth.
+
+        Change covered by existing tests.
+
+        * platform/UUID.cpp:
+        (WebCore::createCanonicalUUIDString):
+
+2011-07-28  Devdatta Deshpande  <pwjd73@motorola.com>
+
+        Fixed gif animation dependency on system time
+        https://bugs.webkit.org/show_bug.cgi?id=64996
+
+        Reviewed by James Robinson.
+
+        Test: Load WebCore/manual-tests/animated-gif-looping.html
+        Change system time to a time in past
+
+        * platform/graphics/BitmapImage.cpp:
+        (WebCore::BitmapImage::startAnimation): Bitmap animation is now based
+        on monotonicallyIncreasingTime instead of currentTime
+
+2011-07-28  Luke Zarko  <lukezarko@gmail.com>
+
+        V8 should correctly serialize Boolean, Number and String objects.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65286
+
+        Reviewed by David Levin.
+        
+        New APIs were exposed to allow V8 to correctly serialize Boolean, Number and String objects, as well as detect certain native errors as required by the HTML5 Structured Clone algorithm (http://www.whatwg.org/specs/web-apps/current-work/multipage/urls.html#safe-passing-of-structured-data). SerializedScriptValue should make use of these APIs.
+
+        - Checks for and serializes Boolean, Number and String objects.
+        - Checks for native errors and aborts should a script attempt to serialize them.
+        - Small name change to clear up the code: m_objectReferenceStack => m_openCompositeReferenceStack
+
+        Tests: fast/dom/Window/window-postmessage-clone.html
+               fast/loader/stateobjects/pushstate-object-types.html
+
+        * bindings/v8/SerializedScriptValue.cpp:
+        (WebCore::V8ObjectMap::Writer::writeBooleanObject):
+        (WebCore::V8ObjectMap::Writer::writeStringObject):
+        (WebCore::V8ObjectMap::Writer::writeNumberObject):
+        (WebCore::V8ObjectMap::Serializer::writeStringObject):
+        (WebCore::V8ObjectMap::Serializer::writeNumberObject):
+        (WebCore::V8ObjectMap::Serializer::writeBooleanObject):
+        (WebCore::V8ObjectMap::Serializer::doSerialize):
+        (WebCore::V8ObjectMap::Reader::read):
+        (WebCore::V8ObjectMap::Reader::readStringObject):
+        (WebCore::V8ObjectMap::Reader::readNumberObject):
+        (WebCore::V8ObjectMap::Deserializer::deserialize):
+        (WebCore::V8ObjectMap::Deserializer::openComposite):
+        (WebCore::V8ObjectMap::Deserializer::closeComposite):
+
+2011-07-28  Adam Barth  <abarth@webkit.org>
+
+        Old code about empty security origins could use a bath
+        https://bugs.webkit.org/show_bug.cgi?id=64735
+
+        Reviewed by Dimitri Glazkov.
+
+        This patch cleans up some old code related to empty security origins.
+        It also removes some dodgy code that seems wrong.
+
+        Test: http/tests/security/inactive-document-with-empty-security-origin.html
+
+        * bindings/generic/BindingSecurityBase.cpp:
+        (WebCore::BindingSecurityBase::canAccess):
+        * page/SecurityOrigin.cpp:
+        (WebCore::SecurityOrigin::isEmpty):
+        (WebCore::SecurityOrigin::isSecureTransitionTo):
+        (WebCore::SecurityOrigin::toString):
+
+2011-07-28  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] Inspected tab crashes if navigated with inspector open and there are watch expressions added.
+        https://bugs.webkit.org/show_bug.cgi?id=65322
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorController.cpp:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/WorkerInspectorController.cpp:
+
+2011-07-28  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions]Add basic RenderRegion support
+        https://bugs.webkit.org/show_bug.cgi?id=64689
+
+        Reviewed by David Hyatt.
+
+        This patch introduces the RenderRegion object.
+        A RenderObject that takes its content from a "named" flow will become a RenderRegion, an element that is used to display the content from a RenderFlowThread.
+        A RenderRegion that is marked to take its content from a non existing flow, will have its content disconnected from the normal flow.
+
+        Tests: fast/regions/region-element-display-restriction.html
+               fast/regions/region-element-dynamic-attach-flow.html
+               fast/regions/region-element-dynamic-detach-flow.html
+               fast/regions/render-region-renderer.html
+
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/Node.cpp:
+        (WebCore::Node::diff):
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::createObject):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isRenderRegion):
+        * rendering/RenderRegion.cpp: Added.
+        (WebCore::RenderRegion::RenderRegion):
+        (WebCore::RenderRegion::~RenderRegion):
+        (WebCore::RenderRegion::layout):
+        (WebCore::RenderRegion::paint):
+        * rendering/RenderRegion.h: Added.
+        (WebCore::RenderRegion::isRenderRegion):
+        (WebCore::RenderRegion::renderName):
+        (WebCore::toRenderRegion):
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+
+2011-07-28  Marco Peereboom  <marco@peereboom.us>
+
+        [Soup] Cannot override default max-conns and max-conns-per-host Soup Session settings
+        https://bugs.webkit.org/show_bug.cgi?id=64355
+        Default max-conns and max-conns-per-host are set at "first contact" with
+        a site instead of at creation time.  This results in values being
+        overwritten if they are set prior to said "first contact"; which is the
+        most likely (or only) scenario.
+
+        Reviewed by Martin Robinson.
+
+        No new tests.  Rigged libsoup and xxxterm web browser to diagnose the
+        issue and validate the patch.
+
+        * platform/network/soup/ResourceHandleSoup.cpp:
+        (WebCore::ensureSessionIsInitialized): No longer ininitalize connection limits.
+        (WebCore::ResourceHandle::defaultSession): Initialize connection limits here instead.
+
+2011-07-28  Brady Eidson  <beidson@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65323
+        r91931 causes NOTREACHED to be hit via StorageTracker
+
+        Change the meaning of the "has been initialized" flag to "needs initialization", and only set it to true
+        if the ::initializeTracker() method has been called.
+
+        Reviewed by Sam Weinig.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker): Set m_needsInitialization to true since the calling WebKit port expects full
+          initialization instead of a dummy tracker.
+        (WebCore::StorageTracker::internalInitialize):
+        (WebCore::StorageTracker::tracker): Only initialize the tracker if it was created in the above initializeTracker().
+        (WebCore::StorageTracker::StorageTracker):
+        * storage/StorageTracker.h:
+
+2011-07-28  David Kilzer  <ddkilzer@apple.com>
+
+        <http://webkit.org/b/65289> Remove GeolocationPositionCache
+
+        Reviewed by Adam Barth.
+
+        * CMakeLists.txt: Remove references to GeolocationPositionCache.
+        * GNUmakefile.list.am: Ditto.
+        * WebCore.gypi: Ditto.
+        * WebCore.order: Ditto.
+        * WebCore.pro: Ditto.
+        * WebCore.vcproj/WebCore.vcproj: Ditto.
+        * WebCore.xcodeproj/project.pbxproj: Ditto.
+
+        * page/Geolocation.cpp: Switch from using m_positionCache to
+        m_cachedPosition.
+        (WebCore::Geolocation::makeCachedPositionCallbacks):
+        (WebCore::Geolocation::haveSuitableCachedPosition):
+        (WebCore::Geolocation::positionChangedInternal):
+        * page/Geolocation.h: Remove PositionCacheWrapper and replace
+        with RefPtr<Geoposition>.
+        * page/GeolocationPositionCache.cpp: Removed.
+        * page/GeolocationPositionCache.h: Removed.
+
+2011-07-28  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9589433> Displaying Japanese dictionary contents in vertical orientation takes a couple of seconds
+
+        Reviewed by Darin Adler.
+
+        * WebCore.exp.in: Exported wkGetVerticalGlyphsForCharacters.
+        * platform/graphics/mac/GlyphPageTreeNodeMac.cpp:
+        (WebCore::GlyphPage::fill): Use wkGetVerticalGlyphsForCharacters. If it returns false, proceed
+        with the existing, slower method of getting vertical glyphs.
+        * platform/mac/WebCoreSystemInterface.h:
+        * platform/mac/WebCoreSystemInterface.mm:
+
+2011-07-28  Brady Eidson  <beidson@apple.com>
+
+        <rdar://problem/9714337> and https://bugs.webkit.org/show_bug.cgi?id=65306
+        WebKitInitializeStorageIfNecessary() can take awhile performing i/o, isn't necessary for every WebView
+
+        Move the heavy lifting done in StorageTracker::initializeTracker() until when the global tracker is actually
+        accessed, therefore deferring it until a web page actually uses LocalStorage or the app uses the API.
+
+        Reviewed by Maciej Stachowiak.
+
+        No new tests. (Not possible to test this API implementation detail)
+
+        * WebCore.exp.in:
+
+        * storage/StorageAreaImpl.cpp:
+        (WebCore::StorageAreaImpl::StorageAreaImpl): Access the global StorageTracker to indicate that a web page
+          is actually using the storage APIs.
+
+        * storage/StorageTracker.cpp:
+        (WebCore::StorageTracker::initializeTracker): Moved the potentially hefty work from here...
+        (WebCore::StorageTracker::internalInitialize): ...to here.
+        (WebCore::StorageTracker::tracker): If the global tracker hasn't had internalInitialize() called, do so.
+        (WebCore::StorageTracker::StorageTracker):
+        * storage/StorageTracker.h:
+
+2011-07-28  Carlos Garcia Campos  <cgarcia@igalia.com>
+
+        [GTK] Copy and paste is broken in WebKit2
+        https://bugs.webkit.org/show_bug.cgi?id=65252
+
+        Reviewed by Martin Robinson.
+
+        Use gtk_clipboard_get_for_display() instead of
+        gtk_widget_get_clipboard(), using the the default display when
+        there's no page client widget, which is the case of WebKit2.
+
+        * platform/gtk/PasteboardHelper.cpp:
+        (WebCore::displayFromFrame): Return the display of the current
+        frame widget or the default display if there's no widget.
+        (WebCore::PasteboardHelper::getClipboard):
+        (WebCore::PasteboardHelper::getPrimarySelectionClipboard):
+
+2011-07-28  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Add resource initiator column to network panel.
+        https://bugs.webkit.org/show_bug.cgi?id=65105
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/network/network-initiator.html
+
+        * English.lproj/localizedStrings.js:
+        * dom/Document.cpp:
+        (WebCore::Document::scheduleStyleRecalc):
+        * inspector/Inspector.json:
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::willRecalculateStyleImpl):
+        (WebCore::InspectorInstrumentation::didRecalculateStyleImpl):
+        (WebCore::InspectorInstrumentation::didScheduleStyleRecalculationImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::didScheduleStyleRecalculation):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::willSendRequest):
+        (WebCore::InspectorResourceAgent::didLoadResourceFromMemoryCache):
+        (WebCore::InspectorResourceAgent::willRecalculateStyle):
+        (WebCore::InspectorResourceAgent::didRecalculateStyle):
+        (WebCore::InspectorResourceAgent::didScheduleStyleRecalculation):
+        (WebCore::InspectorResourceAgent::buildInitiatorObject):
+        (WebCore::InspectorResourceAgent::InspectorResourceAgent):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkDispatcher.prototype.requestWillBeSent):
+        (WebInspector.NetworkDispatcher.prototype.resourceLoadedFromMemoryCache):
+        (WebInspector.NetworkDispatcher.prototype._appendRedirect):
+        (WebInspector.NetworkDispatcher.prototype._createResource):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._createTable):
+        (WebInspector.NetworkLogView.prototype._createSortingFunctions):
+        (WebInspector.NetworkLogView.prototype.switchToDetailedView):
+        (WebInspector.NetworkLogView.prototype.switchToBriefView):
+        (WebInspector.NetworkLogView.prototype._toggleGridMode):
+        (WebInspector.NetworkLogView.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkDataGridNode.prototype.createCells):
+        (WebInspector.NetworkDataGridNode.prototype.refreshResource):
+        (WebInspector.NetworkDataGridNode.prototype._refreshInitiatorCell):
+        (WebInspector.NetworkDataGridNode.InitiatorComparator):
+        * inspector/front-end/networkLogView.css:
+        (.initiator-column a):
+
+2011-07-28  Rob Buis  <rbuis@rim.com>
+
+        Use styling test from ietestcenter fails
+        https://bugs.webkit.org/show_bug.cgi?id=62147 
+
+        Reviewed by Nikolas Zimmermann.
+
+        Make sure CSS selectors are applied to the DOM tree referenced by <use>, not the internal shadow tree. In order to quickly
+        find the corresponding DOM tree element store this info in SVGElementRareData. 
+
+        Test: svg/W3C-SVG-1.1-SE/struct-use-11-f.svg
+
+        * rendering/svg/SVGShadowTreeElements.cpp:
+        (WebCore::SVGShadowTreeContainerElement::styleForRenderer):
+        * rendering/svg/SVGShadowTreeElements.h:
+        * svg/SVGElement.cpp:
+        (WebCore::SVGElement::correspondingElement):
+        (WebCore::SVGElement::setCorrespondingElement):
+        (WebCore::SVGElement::styleForRenderer):
+        * svg/SVGElement.h:
+        * svg/SVGElementInstance.cpp:
+        (WebCore::SVGElementInstance::invalidateAllInstancesOfElement):
+        * svg/SVGElementRareData.h:
+        (WebCore::SVGElementRareData::SVGElementRareData):
+        (WebCore::SVGElementRareData::correspondingElement):
+        (WebCore::SVGElementRareData::setCorrespondingElement):
+        * svg/SVGStyledElement.cpp:
+        (WebCore::SVGStyledElement::removedFromDocument):
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::associateInstancesWithShadowTreeElements):
+        * svg/SVGUseElement.h:
+
+2011-07-28  Denis Oliver Kropp  <dok@directfb.org>
+
+        This fixes build without video enabled.
+        https://bugs.webkit.org/show_bug.cgi?id=65084
+
+        Reviewed by Philippe Normand.
+
+        Test with --disable-video.
+
+        * dom/EventDispatcher.cpp:
+        (WebCore::EventDispatcher::determineDispatchBehavior):
+
+2011-07-28  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Pass the value of useHixie76Protocol flag to WebSocket object
+        https://bugs.webkit.org/show_bug.cgi?id=65250
+
+        Reviewed by Alexey Proskuryakov.
+
+        Add useHixie76Protocol() method to WebSocketChannel and its family. To implement hybi-specific
+        attributes in WebSocket object, WebSocket class needs to be able to get the value of
+        useHixie76Protocol flag of WebSocketChannel.
+
+        If the WebSocket object is created in a worker thread, the flag value must be obtained from
+        WebSocketChannel which resides in the loader thread (through WorkerThreadableWebSocketChannel).
+        Since the value does not change after creation of WebSocketChannel, it can be cached in
+        the worker thread.
+
+        There is no change in behavior, thus no new tests.
+
+        * websockets/ThreadableWebSocketChannel.h:
+        * websockets/ThreadableWebSocketChannelClientWrapper.cpp:
+        (WebCore::ThreadableWebSocketChannelClientWrapper::ThreadableWebSocketChannelClientWrapper):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::useHixie76Protocol):
+        (WebCore::ThreadableWebSocketChannelClientWrapper::setUseHixie76Protocol):
+        * websockets/ThreadableWebSocketChannelClientWrapper.h:
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::useHixie76Protocol):
+        * websockets/WebSocketChannel.h:
+        * websockets/WorkerThreadableWebSocketChannel.cpp:
+        (WebCore::WorkerThreadableWebSocketChannel::useHixie76Protocol):
+        (WebCore::WorkerThreadableWebSocketChannel::Peer::useHixie76Protocol):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::setWebSocketChannel):
+        (WebCore::WorkerThreadableWebSocketChannel::Bridge::mainThreadCreateWebSocketChannel):
+        * websockets/WorkerThreadableWebSocketChannel.h:
+
+2011-07-28  Rob Buis  <rbuis@rim.com>
+
+        REGRESSION (r91125): Google Drawings is broken
+        https://bugs.webkit.org/show_bug.cgi?id=65257
+
+        Reviewed by Darin Adler.
+
+        Only consider zero-length path rendering code path when a stroke is defined.
+
+        Test: svg/custom/zero-path-square-cap-rendering2.svg
+
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::shouldStrokeZeroLengthSubpath):
+
+2011-07-22  Martin Robinson  <mrobinson@igalia.com>
+
+        [Cairo] Switch from ContextShadow to ShadowBlur
+        https://bugs.webkit.org/show_bug.cgi?id=64744
+
+        Use ShadowBlur in the Cairo backend instead of ContextShadow. This allows us
+        to share shadowing code with Qt and Mac ports and to correct some broken
+        shadow rendering.
+
+        Reviewed by Dirk Schulze.
+
+        * CMakeLists.txt: Remove ContextShadow from the build.
+        * CMakeListsEfl.txt: Ditto.
+        * GNUmakefile.list.am: Add ShadowBlur source files and remove ContextShadow
+        source files.
+        * platform/graphics/GraphicsContext.cpp:Add #ifdefs to support ShadowBlur for Cairo.
+        * platform/graphics/GraphicsContext.h: Remove Cairo ContextShadow code.
+        * platform/graphics/ShadowBlur.cpp:
+        (WebCore::ShadowBlur::drawInsetShadowWithTiling): Since the ShadowBlur is a property
+        of the GraphicsContext, we cannot clear the GraphicsContext shadow until we have
+        finished using properties like m_offset. If we clear the GrahpicsContext shadow
+        before using these properties, they will be zero when we try to use them.
+        (WebCore::ShadowBlur::drawRectShadowWithTiling):Ditto.
+        (WebCore::ShadowBlur::drawLayerPieces): Ditto.
+        (WebCore::ShadowBlur::beginShadowLayer):Cairo is the first port to keep ShadowBlur
+        as a persistent property of GraphicsContext and use drawRectShadow and drawInsetShadow.
+        Thus, we must manually clear the cached tiling values so that ShadowBlur does not
+        try to reuse the scratch buffer for rectangular shadows after using beginShadowLayer
+        and endShadowLayer.
+        (WebCore::ShadowBlur::mustUseShadowBlur): Moved this method from the Qt port to
+        this cross-platform location.
+        * platform/graphics/ShadowBlur.h: Added new method declaration.
+        * platform/graphics/cairo/ContextShadowCairo.cpp: Removed.
+        * platform/graphics/cairo/FontCairo.cpp: Switched to using ShadowBlur.
+        (WebCore::drawGlyphsShadow):Ditto.
+        * platform/graphics/cairo/GraphicsContextCairo.cpp: Switch to using ShadowBlur.
+        (WebCore::drawPathShadow): ShadowBlur has slightly different semantics than
+        ContextShadow. When filling the shadow layer, we do not need to use the fill
+        alpha. We also need to restore the Cairo path to the target context after
+        endShadowLayer as it destroys the current path.
+        * platform/graphics/cairo/GraphicsContextPlatformPrivateCairo.h: Switch to using ShadowBlur.
+        * platform/graphics/cairo/ImageCairo.cpp: Ditto.
+        * platform/graphics/cairo/PlatformContextCairo.cpp:
+        (WebCore::PlatformContextCairo::drawSurfaceToContext):Ditto.
+        (WebCore::PlatformContextCairo::prepareForStroking): Add a mode ignoring alpha.
+        * platform/graphics/cairo/PlatformContextCairo.h: Ditto.
+        (WebCore::PlatformContextCairo::shadowBlur):Added.
+        * platform/graphics/gtk/FontGtk.cpp: Update to use ShadowBlur.
+        * platform/graphics/qt/GraphicsContextQt.cpp: Switch to using the new version of mustUseShadowBlur.
+
+2011-07-27  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        [EFL] Add dummy NotificationPresenterClientEfl
+        https://bugs.webkit.org/show_bug.cgi?id=64064
+
+        Add two files to CMakeLists.txt for HTML5 Notification.
+
+        Reviewed by Antonio Gomes.
+
+        * CMakeLists.txt:
+
+2011-07-27  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Calling window.find immediately after mutating the document crashes WebKit.
+        https://bugs.webkit.org/show_bug.cgi?id=65296
+
+        Reviewed by Darin Adler.
+
+        Don't forget to layout first.
+
+        Test: editing/text-iterator/find-after-mutation.html
+
+        * editing/TextIterator.cpp:
+        (WebCore::findPlainText):
+
+2011-07-27  Ben Wells  <benwells@chromium.org>
+
+        Remove skia special case for outline rendering code
+        https://bugs.webkit.org/show_bug.cgi?id=65295
+
+        Reviewed by James Robinson.
+
+        The fix for bug 58999 (outlines with alpha channels showed artifacts in the corners) was
+        excluded from skia builds until bug 61369 (skia drawConvexPoly didn't pay attention to
+        shouldAntialias) was fixed. That bug is fixed so now the #if's can be removed.
+
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::paintOutline):
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::paintOutline):
+
+2011-07-27  Adam Barth  <abarth@webkit.org>
+
+        Crypto.idl doesn't need legacy optional arguments
+        https://bugs.webkit.org/show_bug.cgi?id=65298
+
+        Reviewed by Darin Adler.
+
+        This API is relatively new and useless to call without its only argument.
+
+        * page/Crypto.idl:
+
+2011-07-27  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Remove operator new from JSCell
+        https://bugs.webkit.org/show_bug.cgi?id=64999
+
+        Reviewed by Oliver Hunt.
+
+        No new tests.
+
+        Removed the implementation of operator new in JSCell, so any further uses
+        will not successfully link.  Also removed any remaining uses of operator new.
+
+        * bridge/c/CRuntimeObject.h:
+        (JSC::Bindings::CRuntimeObject::create):
+        * bridge/c/c_instance.cpp:
+        (JSC::Bindings::CInstance::newRuntimeObject):
+        (JSC::Bindings::CRuntimeMethod::create):
+        (JSC::Bindings::CRuntimeMethod::CRuntimeMethod):
+        (JSC::Bindings::CInstance::getMethod):
+        * bridge/jni/jsc/JavaInstanceJSC.cpp:
+        (JavaInstance::newRuntimeObject):
+        (JavaRuntimeMethod::create):
+        (JavaRuntimeMethod::JavaRuntimeMethod):
+        (JavaInstance::getMethod):
+        * bridge/jni/jsc/JavaRuntimeObject.h:
+        (JSC::Bindings::JavaRuntimeObject::create):
+        * bridge/objc/ObjCRuntimeObject.h:
+        (JSC::Bindings::ObjCRuntimeObject::create):
+        * bridge/objc/objc_class.mm:
+        (JSC::Bindings::ObjcClass::fallbackObject):
+        * bridge/objc/objc_instance.mm:
+        (ObjcInstance::newRuntimeObject):
+        (ObjCRuntimeMethod::create):
+        (ObjCRuntimeMethod::ObjCRuntimeMethod):
+        (ObjcInstance::getMethod):
+        * bridge/objc/objc_runtime.h:
+        (JSC::Bindings::ObjcFallbackObjectImp::create):
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Network panel sidebar should have width saved in preferences when resource is selected.
+        https://bugs.webkit.org/show_bug.cgi?id=65256
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._toggleViewingResourceMode):
+        (WebInspector.NetworkPanel.prototype.restoreSidebarWidth):
+        (WebInspector.NetworkPanel.prototype._showResource):
+        (WebInspector.NetworkPanel.prototype._closeVisibleResource):
+        (WebInspector.NetworkPanel.prototype._toggleViewingResourceMode):
+        * inspector/front-end/Panel.js:
+        (WebInspector.Panel.prototype.show):
+        (WebInspector.Panel.prototype.preferredSidebarWidth):
+        (WebInspector.Panel.prototype.get restoreSidebarWidth):
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] [Chromium] Opening link in new tab does not work properly.
+        https://bugs.webkit.org/show_bug.cgi?id=65279
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::InspectorPageAgent::open):
+
+2011-07-27  Adam Klein  <adamk@chromium.org>
+
+        [V8] Remove unused m_isWeak member of V8AbstractEventListener
+        https://bugs.webkit.org/show_bug.cgi?id=65273
+
+        Reviewed by Adam Barth.
+
+        m_isWeak is set to true in the constructor and never changed,
+        so the one if statement that tests it always executes; the
+        code has been updated to make this clear.
+
+        No behavior change, thus no tests.
+
+        * bindings/v8/V8AbstractEventListener.cpp:
+        (WebCore::V8AbstractEventListener::V8AbstractEventListener):
+        (WebCore::V8AbstractEventListener::setListenerObject):
+        * bindings/v8/V8AbstractEventListener.h:
+
+2011-07-27  Fady Samuel  <fsamuel@chromium.org>
+
+        Popups on Chromium now check the minimum row height set through the Chromium WebKit API when
+        computing the height of a row in a popup listbox.
+        https://bugs.webkit.org/show_bug.cgi?id=64897
+
+        Reviewed by Darin Fisher.
+
+        No new tests.
+
+        * platform/chromium/PopupMenuChromium.cpp:
+        (WebCore::PopupListBox::getRowHeight):
+        * platform/chromium/PopupMenuChromium.h:
+        (WebCore::PopupMenuChromium::minimumRowHeight):
+        (WebCore::PopupMenuChromium::setMinimumRowHeight):
+
+2011-07-27  MORITA Hajime  <morrita@google.com>
+
+        Inconsistent state of TreeScope reference.
+        https://bugs.webkit.org/show_bug.cgi?id=65235
+        
+        The tree scope pointers on shadow tree nodes didn't cleared.
+        even when the tree scope (shadow root) is destroyed.
+        This change clear these poitners before detaching the shadow root.
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/dom/shadow/tree-scope-crash.html
+
+        * dom/Element.cpp:
+        (WebCore::Element::removeShadowRoot):
+
+2011-07-27  Rachel Blum  <groby@chromium.org>
+
+        Implement sizes attribute for link tag from HTML5
+        https://bugs.webkit.org/show_bug.cgi?id=37674
+
+        Reviewed by Dimitri Glazkov.
+
+        Test: fast/dom/icon-size-property.html
+
+        * WebCore.gypi:
+        * WebCore.pro:
+        * bindings/js/JSHTMLLinkElementCustom.cpp:
+        (WebCore::JSHTMLLinkElement::sizes):
+        (WebCore::JSHTMLLinkElement::setSizes):
+        * bindings/v8/custom/V8HTMLLinkElementCustom.cpp: Added.
+        (WebCore::V8HTMLLinkElement::sizesAccessorGetter):
+        (WebCore::V8HTMLLinkElement::sizesAccessorSetter):
+        * html/HTMLAttributeNames.in:
+        * html/HTMLLinkElement.cpp:
+        (WebCore::HTMLLinkElement::HTMLLinkElement):
+        (WebCore::HTMLLinkElement::parseMappedAttribute):
+        (WebCore::HTMLLinkElement::sizes):
+        (WebCore::HTMLLinkElement::setSizes):
+        * html/HTMLLinkElement.h:
+        * html/HTMLLinkElement.idl:
+
+2011-07-27  Pratik Solanki  <psolanki@apple.com>
+
+        Incorrect arguments passed to LOG statement
+        https://bugs.webkit.org/show_bug.cgi?id=65293
+
+        Reviewed by Oliver Hunt.
+
+        * platform/network/mac/ResourceHandleMac.mm:
+        (-[WebCoreResourceHandleAsDelegate connection:canAuthenticateAgainstProtectionSpace:]):
+
+2011-07-27  Levi Weintraub  <leviw@chromium.org>
+
+        Switch transform operations to FloatSize
+        https://bugs.webkit.org/show_bug.cgi?id=64301
+
+        Reviewed by Simon Fraser.
+
+        Changing TransformOperation and its progeny to operate on FloatSizes instead of IntSizes.
+
+        * platform/graphics/transforms/IdentityTransformOperation.h:
+        (WebCore::IdentityTransformOperation::apply):
+        * platform/graphics/transforms/Matrix3DTransformOperation.cpp:
+        (WebCore::Matrix3DTransformOperation::blend):
+        * platform/graphics/transforms/Matrix3DTransformOperation.h:
+        (WebCore::Matrix3DTransformOperation::apply):
+        * platform/graphics/transforms/MatrixTransformOperation.cpp:
+        (WebCore::MatrixTransformOperation::blend):
+        * platform/graphics/transforms/MatrixTransformOperation.h:
+        (WebCore::MatrixTransformOperation::apply):
+        * platform/graphics/transforms/PerspectiveTransformOperation.h:
+        (WebCore::PerspectiveTransformOperation::apply):
+        * platform/graphics/transforms/RotateTransformOperation.h:
+        (WebCore::RotateTransformOperation::apply):
+        * platform/graphics/transforms/ScaleTransformOperation.h:
+        (WebCore::ScaleTransformOperation::apply):
+        * platform/graphics/transforms/SkewTransformOperation.h:
+        (WebCore::SkewTransformOperation::apply):
+        * platform/graphics/transforms/TransformOperation.h:
+        * platform/graphics/transforms/TransformOperations.h:
+        (WebCore::TransformOperations::apply):
+        * platform/graphics/transforms/TranslateTransformOperation.h:
+        (WebCore::TranslateTransformOperation::x):
+        (WebCore::TranslateTransformOperation::y):
+        (WebCore::TranslateTransformOperation::z):
+        (WebCore::TranslateTransformOperation::apply):
+
+2011-07-27  Levi Weintraub  <leviw@chromium.org>
+
+        unicode-bidi:-webkit-plaintext does not work on <textarea>
+        https://bugs.webkit.org/show_bug.cgi?id=65074
+
+        Reviewed by Ryosuke Niwa.
+
+        Fixing unicode-bidi style propagation into text control shadow trees.
+
+        Test: fast/text/international/unicode-bidi-plaintext-in-textarea.html
+
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::adjustInnerTextStyle):
+
+2011-07-27  Eric Carlson  <eric.carlson@apple.com>
+
+        Load delegate not consulted before loading some poster images
+        https://bugs.webkit.org/show_bug.cgi?id=65270
+
+        Reviewed by Darin Adler.
+
+        Test: media/video-poster-blocked-by-willsendrequest.html
+
+        * html/HTMLVideoElement.cpp:
+        (WebCore::HTMLVideoElement::setDisplayMode): Don't ask media engine to set poster if
+            willLoadMediaElementURL returns false.
+
+2011-07-27  Stephen White  <senorblanco@chromium.org>
+
+        Fix for printing with accelerated <canvas>
+        https://bugs.webkit.org/show_bug.cgi?id=62406
+
+        Reviewed by James Robinson.
+
+        The platform-independent side of this should be covered by existing
+        tests.  Printing itself in Chrome has few tests, sadly.  :(
+
+        * html/HTMLCanvasElement.cpp:
+        (WebCore::HTMLCanvasElement::paint):
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::draw):
+
+2011-07-25  Mihai Parparita  <mihaip@chromium.org>
+
+        [Chromium] Add better WebKit API for chrome.tabs.insertCSS extension API
+        https://bugs.webkit.org/show_bug.cgi?id=65158
+
+        Reviewed by David Hyatt.
+
+        Add per-Document instance user stylesheets (as opposed to the page 
+        group user styles and the global page stylesheet).
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::CSSStyleSelector):
+        * css/CSSStyleSelector.h:
+        * dom/Document.cpp:
+        (WebCore::Document::~Document):
+        (WebCore::Document::createStyleSelector):
+        (WebCore::Document::addUserSheet):
+        * dom/Document.h:
+
+2011-07-27  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Disable cache option should only clear memory cache, not disable it.
+        https://bugs.webkit.org/show_bug.cgi?id=65184
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorClient.h:
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::enable):
+        (WebCore::InspectorResourceAgent::disable):
+        (WebCore::InspectorResourceAgent::setCacheDisabled):
+        (WebCore::InspectorResourceAgent::mainFrameNavigated):
+
+2011-07-27  Rob Buis  <rbuis@rim.com>
+
+        Implement getIntersectionList(), getEnclosureList(), checkIntersection() and checkEnclosure() in SVGSVGElement
+        https://bugs.webkit.org/show_bug.cgi?id=11274
+
+        Reviewed by Nikolas Zimmermann.
+
+        Implement checkIntersection/checkEnclosure and use it to implement getIntersectionList and getEnclosureList as well.
+        The referenceElement is used to provide a DOM subtree to find matches in. Also we do not allow elements that specify
+        pointer-events=none in the list.
+
+        Tests: svg/W3C-SVG-1.1-SE/struct-dom-11-f.svg
+               svg/custom/intersection-list-clipping.svg
+               svg/custom/intersection-list-nested-svg.svg
+
+        * rendering/svg/RenderSVGModelObject.cpp:
+        (WebCore::getElementCTM):
+        (WebCore::intersectsAllowingEmpty):
+        (WebCore::isGraphicsElement):
+        (WebCore::RenderSVGModelObject::checkIntersection):
+        (WebCore::RenderSVGModelObject::checkEnclosure):
+        * rendering/svg/RenderSVGModelObject.h:
+        * svg/SVGSVGElement.cpp:
+        (WebCore::SVGSVGElement::checkIntersection):
+        (WebCore::SVGSVGElement::checkEnclosure):
+
+2011-07-27  Becsi Andras  <abecsi@webkit.org>
+
+        [Qt][V8] Fix the build.
+
+        Unreviewed build fix.
+
+        No new tests needed.
+
+        * platform/graphics/gstreamer/MediaPlayerPrivateGStreamer.cpp: Add missing CString.h include.
+
+2011-07-27  Alexis Menard  <alexis.menard@openbossa.org>
+
+        [Qt] Unreviewed build fix for mac.
+
+        QtKit is now our default media player, the define is WTF_USE_QTKIT and it's not part
+        of the options passed to build-webkit, therefore DerivedSources should now generate the
+        includes when it's mac.
+
+        * DerivedSources.pro:
+        * WebCore.pro:
+
+2011-07-27  Yury Semikhatsky  <yurys@chromium.org>
+
+        Inspector should support cd(window) in the command line
+        https://bugs.webkit.org/show_bug.cgi?id=19872
+
+        Added dropdown list with all iframes to allow selecting current evaluation context for console expressions.
+
+        Reviewed by Pavel Feldman.
+
+        Test: http/tests/inspector/console-cd.html
+
+        * WebCore.gypi:
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::InspectorController):
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::InspectorRuntimeAgent):
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/WorkerInspectorController.cpp:
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype.addContext):
+        (WebInspector.ConsoleView.prototype.removeContext):
+        (WebInspector.ConsoleView.prototype._contextUpdated):
+        (WebInspector.ConsoleView.prototype.get _currentEvaluationContextId):
+        (WebInspector.ConsoleView.prototype.evalInInspectedWindow):
+        * inspector/front-end/ContextManager.js: Added.
+        (WebInspector.ContextManager):
+        (WebInspector.ContextManager.prototype._frameAdded):
+        (WebInspector.ContextManager.prototype._frameNavigated):
+        (WebInspector.ContextManager.prototype._frameDetached):
+        (WebInspector.FrameEvaluationContext):
+        (WebInspector.FrameEvaluationContext.prototype._frameNavigated):
+        (WebInspector.FrameEvaluationContext.prototype.get id):
+        (WebInspector.FrameEvaluationContext.prototype.get url):
+        (WebInspector.FrameEvaluationContext.prototype.get displayName):
+        * inspector/front-end/ResourceTreeModel.js:
+        (WebInspector.ResourceTreeModel.prototype._cleanupFramesAfterNavigation):
+        (WebInspector.ResourceTreeModel.prototype._addFramesRecursively):
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/inspector.html:
+        * inspector/front-end/inspector.js:
+
+2011-07-27  Shinya Kawanaka  <shinyak@google.com>
+
+        Uses isHTMLSpace to normalize white spaces.
+        https://bugs.webkit.org/show_bug.cgi?id=57746
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/forms/option-strip-unicode-spaces.html
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+          Uses isHTMLSpace to trim and replace white spaces.
+
+2011-05-15  Holger Hans Peter Freyther  <holger@moiji-mobile.com>
+
+        [chromium] Remove include of skia/ext/platform_canvas.h
+        https://bugs.webkit.org/show_bug.cgi?id=60852
+
+        Reviewed by Hajime Morita.
+
+        In https://bugs.webkit.org/show_bug.cgi?id=57563 the usage of the
+        skia::PlatformCanvas was eliminated in favor of directly using
+        SkCanvas directly. The include of platform_canvas.h was not removed
+        leaving the dependency on Chromium in the header files. Remove
+        that dependency now.
+
+        * platform/graphics/skia/PlatformContextSkia.h: Remove platform_canvas.h
+
+2011-07-27  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: [Chromium] REGRESSION: Uncaught TypeError: Cannot read property 'isTracingToWindowObjects' of undefined
+        https://bugs.webkit.org/show_bug.cgi?id=65213
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/DetailedHeapshotView.js:
+        (WebInspector.HeapSnapshotRetainingPathsList.prototype.refresh):
+
+2011-07-27  Shinya Kawanaka  <shinyak@google.com>
+
+        Knob of a disabled or readonly range control should not be draggable.
+        https://bugs.webkit.org/show_bug.cgi?id=54820
+
+        Reviewed by Kent Tamura.
+
+        Made disabled or readonly range control undraggable.
+
+        Test: fast/forms/range-drag.html
+
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::handleMouseDownEvent):
+          Added check that the element is readonly or disabled.
+        * html/shadow/SliderThumbElement.cpp:
+        (WebCore::SliderThumbElement::defaultEventHandler): ditto.
+
+2011-07-27  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: CloseEvent attribute is not available on WebWorkers in JSC
+        https://bugs.webkit.org/show_bug.cgi?id=65232
+
+        Reviewed by Kent Tamura.
+
+        Add [NoStaticTables] attribute to CloseEvent interface definition. This attribute
+        makes the code generator obtain the attributes table used for building ClassInfo
+        through JSGlobalData, instead of directly using a statically-allocated table.
+
+        Generally speaking, NoStaticTables needs to be specified in interfaces which
+        may be accessed from workers.
+
+        Tests: http/tests/websocket/tests/hybi/workers/shared-worker-simple.html (updated)
+               http/tests/websocket/tests/hybi/workers/worker-simple.html (updated)
+
+        * websockets/CloseEvent.idl: Fixed the formatting, too.
+
+2011-07-26  James Robinson  <jamesr@chromium.org>
+
+        [chromium] REGRESSION(90963): Content layers are not redrawn after losing the compositor context
+        https://bugs.webkit.org/show_bug.cgi?id=65224
+
+        Reviewed by Kenneth Russell.
+
+        There's no automated way to test lost compositor contexts (yet), but to test manually open up the poster circle
+        page and kill the GPU process.
+
+        * platform/graphics/chromium/ContentLayerChromium.cpp:
+        (WebCore::ContentLayerChromium::cleanupResources):
+        * platform/graphics/chromium/ContentLayerChromium.h:
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91805.
+        http://trac.webkit.org/changeset/91805
+        https://bugs.webkit.org/show_bug.cgi?id=65226
+
+        Breaks @ symbols and changes other font rendering on Windows
+        (Requested by enne on #webkit).
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::init):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::initializeForGDI):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareFontPainter::~TransparencyAwareFontPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::~TransparencyAwareGlyphPainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::hdc):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::TransparencyAwareUniscribePainter):
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareUniscribePainter::~TransparencyAwareUniscribePainter):
+        (WebCore::drawGlyphsWin):
+        (WebCore::Font::drawComplexText):
+        * platform/graphics/chromium/UniscribeHelper.cpp:
+        (WebCore::UniscribeHelper::draw):
+        * platform/graphics/skia/PlatformContextSkia.cpp:
+        (WebCore::PlatformContextSkia::isNativeFontRenderingAllowed):
+        * platform/graphics/skia/PlatformContextSkia.h:
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::windowsCanHandleDrawTextShadow):
+        (WebCore::windowsCanHandleTextDrawing):
+        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
+        * platform/graphics/skia/SkiaFontWin.h:
+
+2011-07-26  Adrienne Walker  <enne@google.com>
+
+        Unreviewed, rolling out r91812.
+        http://trac.webkit.org/changeset/91812
+        https://bugs.webkit.org/show_bug.cgi?id=65210
+
+        Breaks OSX GPU tests.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawLayers):
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91809.
+        http://trac.webkit.org/changeset/91809
+        https://bugs.webkit.org/show_bug.cgi?id=65225
+
+        Does not build on Chromium Windows (Requested by abarth on
+        #webkit).
+
+        * dom/WheelEvent.cpp:
+        (WebCore::WheelEvent::WheelEvent):
+        (WebCore::WheelEvent::initWheelEvent):
+        * dom/WheelEvent.h:
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        (WebCore::EventHandler::handleGestureEvent):
+        (WebCore::EventHandler::handleTouchEvent):
+        (WebCore::EventHandler::resetGestureRecognizer):
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        * platform/PlatformGestureEvent.h:
+        * platform/PlatformGestureRecognizer.h:
+        * platform/chromium/FramelessScrollView.h:
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::dispatchSyntheticClick):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGesture):
+        (WebCore::InnerGestureRecognizer::scrollViaTouchMotion):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        * platform/chromium/GestureRecognizerChromium.h:
+        (WebCore::GestureRecognizerChromium::reset):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGesture):
+        * platform/chromium/PopupMenuChromium.cpp:
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+
+2011-07-26  Dmitry Lomov  <dslomov@google.com>
+
+        [V8][Chromium] Run workers in a separate v8::Isolate 
+        https://bugs.webkit.org/show_bug.cgi?id=65004
+        This patch allocates a new v8::Isolate for every worker and enters it on worker thread.
+
+        Reviewed by David Levin.
+
+        Covered by existing chromium tests.
+
+        * bindings/v8/DOMDataStore.cpp:
+        (WebCore::DOMDataStore::DOMDataStore):
+        (WebCore::DOMDataStore::~DOMDataStore):
+        * bindings/v8/StaticDOMDataStore.cpp:
+        (WebCore::StaticDOMDataStore::StaticDOMDataStore):
+        (WebCore::StaticDOMDataStore::~StaticDOMDataStore):
+        * bindings/v8/StaticDOMDataStore.h:
+        * bindings/v8/V8Binding.h:
+        (WebCore::V8BindingPerIsolateData::registerDOMDataStore):
+        (WebCore::V8BindingPerIsolateData::unregisterDOMDataStore):
+        * bindings/v8/V8DOMMap.cpp:
+        (WebCore::DOMDataStoreHandle::DOMDataStoreHandle):
+        (WebCore::DOMDataStoreHandle::~DOMDataStoreHandle):
+        * bindings/v8/WorkerContextExecutionProxy.cpp:
+        (WebCore::WorkerContextExecutionProxy::WorkerContextExecutionProxy):
+        (WebCore::WorkerContextExecutionProxy::initV8):
+        * bindings/v8/WorkerContextExecutionProxy.h:
+        * bindings/v8/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::WorkerScriptController):
+        (WebCore::WorkerScriptController::~WorkerScriptController):
+        * bindings/v8/WorkerScriptController.h:
+
+2011-07-26  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Avoid clearing the framebuffer when compositing in release builds
+        https://bugs.webkit.org/show_bug.cgi?id=65210
+
+        Reviewed by Kenneth Russell.
+
+        We clear the default framebuffer to blue when compositing so it's
+        easier to spot regions we miss. This is useful for debugging, but eats
+        bandwidth unnecessarily in release builds.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::drawLayers):
+
+2011-07-26  Jeffrey Pfau  <jpfau@apple.com>
+
+        New XML tokenizer
+        https://bugs.webkit.org/show_bug.cgi?id=64566
+
+        Reviewed by Adam Barth.
+
+        Add tokenizer for XML and tests in NewXMLDocumentParser for printing results of tokenization.
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * xml/parser/NewXMLDocumentParser.cpp:
+        (WebCore::NewXMLDocumentParser::NewXMLDocumentParser):
+        (WebCore::NewXMLDocumentParser::append):
+        * xml/parser/NewXMLDocumentParser.h:
+        * xml/parser/XMLToken.h:
+        * xml/parser/XMLTokenizer.cpp: Added.
+        (WebCore::XMLTokenizer::XMLTokenizer):
+        (WebCore::::shouldSkipNullCharacters):
+        (WebCore::XMLTokenizer::nextToken):
+        (WebCore::XMLTokenizer::bufferCharacter):
+        (WebCore::XMLTokenizer::parseError):
+        * xml/parser/XMLTokenizer.h: Added.
+        (WebCore::XMLTokenizer::create):
+        (WebCore::XMLTokenizer::gotError):
+        (WebCore::XMLTokenizer::shouldSkipNullCharacters):
+
+2011-07-26  Robert Kroeger  <rjkroege@chromium.org>
+
+        [chromium] Layering violations in gesture recognizer
+        https://bugs.webkit.org/show_bug.cgi?id=65044
+
+        Reviewed by Adam Barth.
+
+        Divided the gesture recognizer up to correct a layering
+        violation by moving gesture implementation from it to
+        EventHandler::handleGestureEvent so that the gesture recognizer
+        could simply be an engine for generating gesture events from
+        touch events.
+
+        * page/EventHandler.cpp:
+        (WebCore::EventHandler::EventHandler):
+        Removed construction of gesture recognizer.
+        (WebCore::EventHandler::handleGestureEvent):
+        Extended for new gesture events added in this patch.
+        (WebCore::EventHandler::handleTouchEvent):
+        Removed call into gesture recognizer.
+        * page/EventHandler.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::reset):
+        Removed code to reset gesture recognizer.
+        * platform/PlatformGestureEvent.h:
+        (WebCore::PlatformGestureEvent::PlatformGestureEvent):
+        (WebCore::PlatformGestureEvent::deltaX):
+        (WebCore::PlatformGestureEvent::deltaY):
+        (WebCore::PlatformGestureEvent::shiftKey):
+        (WebCore::PlatformGestureEvent::ctrlKey):
+        (WebCore::PlatformGestureEvent::altKey):
+        (WebCore::PlatformGestureEvent::metaKey):
+        Added additional gesture types and parameters.
+        * platform/PlatformGestureRecognizer.h:
+        * platform/chromium/FramelessScrollView.h:
+        Added support for displatching gesture and touch events.
+        * platform/chromium/GestureRecognizerChromium.cpp:
+        (WebCore::InnerGestureRecognizer::InnerGestureRecognizer):
+        (WebCore::InnerGestureRecognizer::reset):
+        (WebCore::InnerGestureRecognizer::constructClickGestureEvent):
+        (WebCore::InnerGestureRecognizer::processTouchEventForGestures):
+        Removed all depedencies on EventHandler. Instead, create gesture
+        events from touch event stream.
+        (WebCore::InnerGestureRecognizer::constructScrollGesture):
+        (WebCore::touchDown):
+        (WebCore::noGesture):
+        (WebCore::click):
+        (WebCore::isClickOrScroll):
+        (WebCore::inScroll):
+        (WebCore::GestureRecognizerChromium::processTouchEventForGestures):
+        (WebCore::GestureRecognizerChromium::reset):
+        * platform/chromium/GestureRecognizerChromium.h:
+        * platform/chromium/PopupMenuChromium.cpp:
+        Added support to handle touch events and gesture events.
+        (WebCore::PopupContainer::handleTouchEvent):
+        (WebCore::PopupContainer::handleGestureEvent):
+        (WebCore::PopupListBox::handleTouchEvent):
+        (WebCore::PopupListBox::handleGestureEvent):
+        * platform/chromium/PopupMenuChromium.h:
+        * platform/mac/ScrollAnimatorMac.mm:
+        (WebCore::ScrollAnimatorMac::handleGestureEvent):
+        Ignores the newly added gesture event types.
+
+2011-07-26  Joseph Pecoraro  <joepeck@webkit.org>
+
+        Restore Composited Layers Faster from PageCache
+        https://bugs.webkit.org/show_bug.cgi?id=65216
+
+        Reviewed by Simon Fraser.
+
+        Restore the layer tree hierarchy a little sooner, when
+        restoring from the page cache. This more closely matches
+        original restore behavior.
+
+        Existing test showed no change.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::restoreBackingStores):
+
+2011-07-26  Mike Reed  <reed@google.com>
+
+        [skia] never draw with GDI, so that all text can be gpu-accelerated
+        https://bugs.webkit.org/show_bug.cgi?id=65203
+
+        Reviewed by Kenneth Russell.
+
+        No new tests. existing tests apply to the new drawing path
+
+        * platform/graphics/chromium/FontChromiumWin.cpp:
+        (WebCore::TransparencyAwareFontPainter::TransparencyAwareGlyphPainter::drawGlyphs):
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::windowsCanHandleDrawTextShadow):
+        (WebCore::windowsCanHandleTextDrawing):
+        (WebCore::windowsCanHandleTextDrawingWithoutShadow):
+
+2011-07-26  Kenneth Russell  <kbr@google.com>
+
+        Float32Array(ArrayBuffer, index, length) constructor working incorrectly.
+        https://bugs.webkit.org/show_bug.cgi?id=57042
+
+        Reviewed by James Robinson.
+
+        * bindings/js/JSArrayBufferViewHelper.h:
+        (WebCore::constructArrayBufferViewWithArrayBufferArgument):
+        * bindings/v8/custom/V8ArrayBufferViewCustom.h:
+        (WebCore::constructWebGLArrayWithArrayBufferArgument):
+
+2011-07-26  Chris Rogers  <crogers@google.com>
+
+        V8 custom bindings for AudioNode must do proper object checking and throw exception in case of error
+        https://bugs.webkit.org/show_bug.cgi?id=65222
+
+        Reviewed by James Robinson.
+
+        No new tests - this fixes upcoming audionode.html layout test
+
+        * bindings/v8/custom/V8AudioNodeCustom.cpp:
+        (WebCore::V8AudioNode::connectCallback):
+
+2011-07-26  Chris Rogers  <crogers@google.com>
+
+        AudioContext is not correctly accounting for hardware resources
+        https://bugs.webkit.org/show_bug.cgi?id=65217
+
+        Reviewed by Kenneth Russell.
+
+        No new tests since audio API is not yet implemented.
+
+        * webaudio/AudioContext.cpp:
+        (WebCore::AudioContext::create):
+        (WebCore::AudioContext::AudioContext):
+        (WebCore::AudioContext::lazyInitialize):
+
+2011-07-26  Luke Macpherson   <macpherson@chromium.org>
+
+        Handle CSS Properties that can be either auto or a primitive value in CSSStyleApplyProperty
+        https://bugs.webkit.org/show_bug.cgi?id=65164
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests / refactoring only.
+
+        * css/CSSPrimitiveValueMappings.h:
+        Add casts to/from various numeric types.
+        (WebCore::CSSPrimitiveValue::operator short):
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        (WebCore::CSSPrimitiveValue::operator unsigned short):
+        (WebCore::CSSPrimitiveValue::operator int):
+        (WebCore::CSSPrimitiveValue::operator float):
+        * css/CSSStyleApplyProperty.cpp:
+        Add class to handle properties that set an "auto" boolean on RenderStyle.
+        (WebCore::ApplyPropertyAuto::ApplyPropertyAuto):
+        (WebCore::ApplyPropertyAuto::applyInheritValue):
+        (WebCore::ApplyPropertyAuto::applyInitialValue):
+        (WebCore::ApplyPropertyAuto::applyValue):
+        (WebCore::ApplyPropertyAuto::hasAuto):
+        (WebCore::ApplyPropertyAuto::setAuto):
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        * css/CSSStyleSelector.cpp:
+        Remove existing implementations.
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-07-26  Pratik Solanki  <psolanki@apple.com>
+
+        Add protection space authentication callback code to CFNetwork loader on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=65190
+        <rdar://problem/9842424>
+
+        Reviewed by Oliver Hunt.
+
+        Port over protection space authentication callback code from ResourceHandleMac.mm to
+        ResourceHandleCFNet.cpp.
+
+        * platform/network/ResourceHandle.h:
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::canRespondToProtectionSpace):
+        (WebCore::ResourceHandle::createCFURLConnection):
+        (WebCore::ResourceHandle::canAuthenticateAgainstProtectionSpace):
+        (WebCore::WebCoreSynchronousLoaderClient::canAuthenticateAgainstProtectionSpace):
+        * platform/network/mac/ResourceHandleMac.mm:
+        (-[WebCoreResourceHandleAsDelegate connection:canAuthenticateAgainstProtectionSpace:]): Add logging.
+
+2011-07-26  Sadrul Habib Chowdhury  <sadrul@chromium.org>
+
+        Add support for download='filename' attribute in anchors.
+        https://bugs.webkit.org/show_bug.cgi?id=64580
+
+        Reviewed by Adam Barth.
+
+        The download attribute allows the author of the hyperlink to cause the
+        browser to download the linked URL.  The author can also supply a
+        suggested file name in the attribute value.  This feature is a recent
+        addition to HTML to better support offline applications that use blob
+        URLs.  Traditionally, web sites use the HTTP Content-Disposition header
+        to trigger downloads, but that option isn't available when working
+        offline.
+
+        There is some question about whether we should initiate a download when
+        we receive a DOM-created click event.  This patch does initiate the
+        download, but we might revise that decision in the future as part of a
+        larger change in how WebKit treats the interaction between default
+        event handlers and DOM-created events.
+
+        Tests: fast/dom/HTMLAnchorElement/anchor-download.html
+               fast/dom/HTMLAnchorElement/anchor-nodownload.html
+               fast/dom/HTMLAnchorElement/anchor-download-unset.html
+               fast/dom/HTMLAnchorElement/anchor-nodownload-set.html
+
+        * html/HTMLAnchorElement.cpp:
+        (WebCore::HTMLAnchorElement::defaultEventHandler):
+        (WebCore::HTMLAnchorElement::handleClick):
+        * html/HTMLAnchorElement.h:
+        * html/HTMLAnchorElement.idl:
+        * html/HTMLAttributeNames.in:
+        * loader/EmptyClients.h:
+        (WebCore::EmptyFrameLoaderClient::startDownload):
+        * loader/FrameLoaderClient.h:
+
+2011-07-26  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Refactor automatically generated JS DOM bindings to replace operator new with static create methods
+        https://bugs.webkit.org/show_bug.cgi?id=64732
+
+        Reviewed by Oliver Hunt.
+
+        No new tests.
+
+        Replacing the public constructors in the automatically generated JS DOM bindings in CodeGeneratorJS.pm
+        with static create methods.  This is part of a larger refactoring effort to use static create methods
+        in the headers of the generated files (so as to be inline-able) in favor of public constructors throughout JSC.
+
+        * bindings/js/JSAudioConstructor.h:
+        (WebCore::JSAudioConstructor::create):
+        * bindings/js/JSDOMBinding.h:
+        (WebCore::createWrapper):
+        * bindings/js/JSDOMGlobalObject.h:
+        (WebCore::getDOMConstructor):
+        * bindings/js/JSDOMWindowCustom.cpp:
+        (WebCore::JSDOMWindow::history):
+        (WebCore::JSDOMWindow::location):
+        * bindings/js/JSDOMWindowShell.cpp:
+        (WebCore::JSDOMWindowShell::setWindow):
+        * bindings/js/JSDocumentCustom.cpp:
+        (WebCore::JSDocument::location):
+        * bindings/js/JSImageConstructor.h:
+        (WebCore::JSImageConstructor::create):
+        * bindings/js/JSImageDataCustom.cpp:
+        (WebCore::toJS):
+        * bindings/js/JSOptionConstructor.h:
+        (WebCore::JSOptionConstructor::create):
+        * bindings/js/WorkerScriptController.cpp:
+        (WebCore::WorkerScriptController::initScript):
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (AddIncludesForTypeInImpl):
+        (AddIncludesForTypeInHeader):
+        (AddIncludesForType):
+        (GenerateHeader):
+        (GenerateImplementation):
+        (GenerateCallbackImplementation):
+        (GenerateConstructorDeclaration):
+        * bindings/scripts/test/JS/JSTestInterface.cpp:
+        (WebCore::JSTestInterfaceConstructor::create):
+        (WebCore::JSTestInterface::createPrototype):
+        * bindings/scripts/test/JS/JSTestInterface.h:
+        (WebCore::JSTestInterface::create):
+        (WebCore::JSTestInterfacePrototype::create):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.cpp:
+        (WebCore::JSTestMediaQueryListListenerConstructor::create):
+        (WebCore::JSTestMediaQueryListListener::createPrototype):
+        * bindings/scripts/test/JS/JSTestMediaQueryListListener.h:
+        (WebCore::JSTestMediaQueryListListener::create):
+        (WebCore::JSTestMediaQueryListListenerPrototype::create):
+        * bindings/scripts/test/JS/JSTestObj.cpp:
+        (WebCore::JSTestObjConstructor::create):
+        (WebCore::JSTestObj::createPrototype):
+        * bindings/scripts/test/JS/JSTestObj.h:
+        (WebCore::JSTestObj::create):
+        (WebCore::JSTestObjPrototype::create):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.cpp:
+        (WebCore::JSTestSerializedScriptValueInterfaceConstructor::create):
+        (WebCore::JSTestSerializedScriptValueInterface::createPrototype):
+        * bindings/scripts/test/JS/JSTestSerializedScriptValueInterface.h:
+        (WebCore::JSTestSerializedScriptValueInterface::create):
+        (WebCore::JSTestSerializedScriptValueInterfacePrototype::create):
+        * bridge/jni/jsc/JavaArrayJSC.cpp:
+        (JavaArray::convertJObjectToArray):
+        * bridge/jsc/BridgeJSC.cpp:
+        (JSC::Bindings::Instance::newRuntimeObject):
+        * bridge/objc/objc_utility.mm:
+        (JSC::Bindings::convertObjcValueToValue):
+        * bridge/qt/qt_runtime.cpp:
+        (JSC::Bindings::convertQVariantToValue):
+        * bridge/runtime_array.h:
+        (JSC::RuntimeArray::create):
+        * bridge/runtime_object.h:
+        (JSC::Bindings::RuntimeObject::create):
+
+2011-07-26  Xiaomei Ji  <xji@chromium.org>
+
+        --webkit-visual-word does not work in multi-line
+        https://bugs.webkit.org/show_bug.cgi?id=61344
+
+        Reviewed by Ryosuke Niwa.
+
+        Replace Position(node, offset, PositionIsOffsetInAnchor) with 
+        createPositionAvoidingIgnoredNode(node, offset) which takes care of creating position 
+        before/after <br/> etc. editingIgnoresContent node. 
+
+        When iterate InlineBox, replace prevLeafChild and nextLeafChild (which only returns 
+        InlineBox within the same line) with leftInlineBox and rightInlineBox (which returns 
+        InlineBox across multiple lines).
+
+        * editing/htmlediting.cpp:
+        (WebCore::createPositionAvoidingIgnoredNode):
+        * editing/htmlediting.h:
+        * editing/visible_units.cpp:
+        (WebCore::previousWordBreakInBoxInsideBlockWithSameDirectionality): Replace Position() with
+        createPositionAvoidingIgnoredNode().
+        (WebCore::leftmostPositionInRTLBoxInLTRBlock): Ditto.
+        (WebCore::rightmostPositionInLTRBoxInRTLBlock): Ditto.
+        (WebCore::nextWordBreakInBoxInsideBlockWithDifferentDirectionality): Ditto.
+        (WebCore::blockWithPreviousLineBox): Added.
+        (WebCore::previousRootInlineBox): Added.
+        (WebCore::blockWithNextLineBox): Added.
+        (WebCore::nextRootInlineBox): Added.
+        (WebCore::leftInlineBox): Added.
+        (WebCore::rightInlineBox): Added.
+        (WebCore::leftWordBoundary): Replace prevLeafChild/nextLeafChild with leftInlineBox()
+        and rightInlineBox().
+        (WebCore::rightWordBoundary): Ditto.
+        (WebCore::leftWordPositionAcrossBoundary): Ditto.
+        (WebCore::rightWordPositionAcrossBoundary): Ditto.
+
+2011-07-26  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=60778
+
+        Use after free because of line box culling optimization regression.
+
+        In the case of a child with no line box being removed (typically
+        a <br> in quirks mode), if there is no previous sibling with a line
+        box, then we have a potential problem with the culling optimization.
+
+        The culled inline may still have other leaf line box children, but
+        they may follow the removed <br>. In this case we can't rely on
+        them, since we need a line box that comes before the <br>.
+
+        The fix is to simply recur up to the parent if we are a culled inline
+        and could not find a previous line box.
+
+        Reviewed by Dan Bernstein.
+
+        Added editing/execCommand/crash-line-break-after-outdent.html
+
+        * rendering/RenderLineBoxList.cpp:
+        (WebCore::RenderLineBoxList::dirtyLinesFromChangedChild):
+
+2011-07-26  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9842889> Add a generic pictograph font family
+        https://bugs.webkit.org/show_bug.cgi?id=65197
+
+        Reviewed by Anders Carlsson.
+
+        Test: fast/css/font-family-pictograph.html
+
+        * WebCore.exp.in: Export Settings::setPictographFontFamily().
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::identifierForFamily): Added -webkit-pictograph.
+        * css/CSSFontSelector.cpp:
+        (WebCore::CSSFontSelector::addFontFaceRule): Ditto.
+        (WebCore::fontDataForGenericFamily): Ditto.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty): Ditto.
+        * css/CSSValueKeywords.in:
+        * inspector/front-end/CSSKeywordCompletions.js: Ditto.
+        * inspector/front-end/SourceCSSTokenizer.js: Ditto.
+        (WebInspector.SourceCSSTokenizer):
+        * inspector/front-end/SourceCSSTokenizer.re2js: Ditto.
+        * page/Settings.cpp:
+        (WebCore::Settings::pictographFontFamily): Added this getter.
+        (WebCore::Settings::setPictographFontFamily): Added this setter.
+        * page/Settings.h:
+        * platform/graphics/FontDescription.h: Added PictographFamily to the GenericFamilyType enum.
+
+2011-07-26  Viet-Trung Luu  <viettrungluu@chromium.org>
+
+        Improve (i.e., speed up) .gyp(i) files for Chromium
+        https://bugs.webkit.org/show_bug.cgi?id=65032
+
+        Reviewed by Adam Barth.
+
+        This re-applies r91595 with the source exclusion fixed.
+
+        Test by building (in all supported configurations).
+
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+
+2011-07-26  Alexis Menard  <alexis.menard@openbossa.org>
+
+        [Qt] Disable video support on linux if the dependencies are not found.
+
+        If we can't find the necessary dependencies to build the GStreamer media player
+        we disable the video support. This is related to http://trac.webkit.org/changeset/91752.
+
+        Reviewed by Holger Freyther.
+
+        No new tests, it's a build fix.
+
+        * features.pri:
+
+2011-07-26  Evan Martin  <evan@chromium.org>
+
+        regression: generating CSSValueKeywords should not print by default
+        https://bugs.webkit.org/show_bug.cgi?id=65195
+
+        Reviewed by Tony Chang.
+
+        Some refactoring made some callers no longer pass the final 'beQuiet'
+        parameter to applyPreprocessor.  This flag was only used to print the
+        input filename anyway, so remove the flag and just make the caller
+        print the filename if it wants this.
+
+        * bindings/scripts/IDLParser.pm:
+        (Parse): print before calling applyPreprocessor, if necessary.
+        * bindings/scripts/preprocessor.pm:
+        (applyPreprocessor): remove the beQuiet flag; just always be quiet.
+
+2011-07-26  Raphael Kubo da Costa  <kubo@profusion.mobi>
+
+        [EFL] Do not crash on the isSlider() assert.
+        https://bugs.webkit.org/show_bug.cgi?id=65191
+
+        Reviewed by Antonio Gomes.
+
+        RenderThemeEfl's paintSliderThumb() just forwarded the call to
+        paintSliderTrack(), which, on its turn, called code that assumed that
+        object->isSlider() was true. That does not seem to be the case for
+        slidethumbs, so any page with an <input type="range"> tag would crash
+        WebKit.
+
+        We now do what RenderThemeQt does, and assume everything was properly
+        done in the call to paintSliderTrack().
+
+        No new tests, as this has been uncovered by an existing test.
+
+        * platform/efl/RenderThemeEfl.cpp:
+        (WebCore::RenderThemeEfl::paintSliderThumb):
+
+2011-07-26  Brian Salomon  <bsalomon@google.com>
+
+        [SKIA] Make the skia GL context current when drawing text to gpu backed platform context.
+        https://bugs.webkit.org/show_bug.cgi?id=65182
+
+        Reviewed by Stephen White.
+
+        No new tests. Not sure how to test wrong-ctx bugs in layout tests.
+
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::paintSkiaText):
+
+2011-07-26  Emil A Eklund  <eae@chromium.org>
+
+        RenderText::absoluteRectsForRange() and absoluteQuadsForRange() have nearly duplicate code
+        https://bugs.webkit.org/show_bug.cgi?id=62478
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/dom/Range/getClientRects.html
+
+        * platform/graphics/FloatRect.h:
+        (WebCore::FloatRect::isZero):
+        Add izZero method, unlike isEmpty this checks if both the width and the
+        height are zero.
+
+        * rendering/RenderText.cpp:
+        (WebCore::absoluteQuadForTextBox):
+        (WebCore::RenderText::absoluteRectsForRange):
+        (WebCore::RenderText::absoluteQuadsForRange):
+        Break duplicate code out of absoluteRectsForRange and
+        absoluteQuadsForRange into shared static function.
+        
+        Fix what I presume to be a bug in the absoluteQuadsForRange where the
+        logicalHeight was always used to set the size in absoluteQuadForTextBox
+        as oppsued to the absoluteRectsForRange implementation that uses the
+        logicalWidth or the logicalHeight depending on whether it's horizontal or
+        vertical.
+
+2011-07-26  Alexandru Chiculita  <achicu@adobe.com>
+
+        [CSSRegions] Collect flowed elements in different render element
+        https://bugs.webkit.org/show_bug.cgi?id=64516
+
+        All the RenderObjects that have a specified "flow" name are moved out of the
+        normal flow. A RenderFlowThread will collect all such RenderObjects. There is
+        a RenderFlowThread for each flow name. The new RenderFlowThread is an anonymous
+        RenderBlock that is positioned absolute and will not render directly. In a
+        different bug/patch we will add RenderRegion that will take care of rendering the
+        RenderFlowThread on screen.
+
+        Reviewed by Simon Fraser.
+
+        Tests: fast/regions/webkit-flow-renderer-layer.html
+               fast/regions/webkit-flow-renderer-nested.html
+               fast/regions/webkit-flow-renderer.html
+
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/Node.cpp:
+        (WebCore::Node::diff):
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRenderingContext::NodeRenderingContext):
+        (WebCore::NodeRenderingContext::setStyle):
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+        (WebCore::NodeRenderingContext::parentRenderer):
+        (WebCore::NodeRenderingContext::moveToFlowThreadIfNeeded):
+        (WebCore::NodeRendererFactory::createRendererIfNeeded):
+        * dom/NodeRenderingContext.h:
+        (WebCore::NodeRenderingContext::hasFlowThreadParent):
+        (WebCore::NodeRenderingContext::parentFlowRenderer):
+        * rendering/RenderFlowThread.cpp: Added.
+        (WebCore::RenderFlowThread::RenderFlowThread):
+        (WebCore::RenderFlowThread::createFlowThreadStyle):
+        (WebCore::RenderFlowThread::nextRendererForNode):
+        (WebCore::RenderFlowThread::previousRendererForNode):
+        (WebCore::RenderFlowThread::addChild):
+        (WebCore::RenderFlowThread::removeChild):
+        * rendering/RenderFlowThread.h: Added.
+        (WebCore::toRenderFlowThread):
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::collectLayers):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isRenderFlowThread):
+        * rendering/RenderTreeAsText.cpp:
+        (WebCore::RenderTreeAsText::writeRenderObject):
+        (WebCore::writeLayers):
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::renderFlowThreadWithName):
+        * rendering/RenderView.h:
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+
+2011-07-26  Patrick Dubroy  <dubroy@chromium.org>
+
+        Filename text in file upload controls is not aligned with button text on
+        chromium-linux, chromium-win, and gtk.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64692
+
+        The fix is to not include the margin, border, and padding in the calculation,
+        because those are already accounted for by RenderBlock::baselinePosition().
+
+        Reviewed by Dimitri Glazkov.
+
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::paintObject):
+
+2011-07-26  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91746.
+        http://trac.webkit.org/changeset/91746
+        https://bugs.webkit.org/show_bug.cgi?id=65180
+
+        It broke SL build (Requested by Ossy on #webkit).
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Better represent custom getters in the properties pane
+        https://bugs.webkit.org/show_bug.cgi?id=16734
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/runtime/runtime-getProperties.html
+
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+
+2011-07-26  Alexis Menard  <alexis.menard@openbossa.org>
+
+        Reviewed by Andreas Kling.
+
+        [Qt] Change default backend to use GStreamer on Linux and QuickTime on Mac.
+        https://bugs.webkit.org/show_bug.cgi?id=63472
+
+        Enable the GStreamer backend and the QuickTime backend as default media players
+        for the Qt port on Mac and Linux. QtMultimedia is now a fallback option that you
+        can enable by passing DEFINES+=USE_QT_MULTIMEDIA=1 to enforce its usage.
+
+        No new tests. The media layout tests are disabled on the Qt port but hopefully with this
+        switch we can enable them again.
+
+        * WebCore.pri:
+        * WebCore.pro:
+        * features.pri:
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: Implement setPropertyValue using evaluate and callFunctionOn
+        https://bugs.webkit.org/show_bug.cgi?id=65112
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/runtime/runtime-setPropertyValue.html
+
+        * inspector/InjectedScript.cpp:
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject.prototype.setPropertyValue.evaluatedCallback.setPropertyValue):
+        (WebInspector.RemoteObject.prototype.setPropertyValue.evaluatedCallback):
+        (WebInspector.RemoteObject.prototype.setPropertyValue.propertySetCallback):
+        (WebInspector.RemoteObject.prototype.setPropertyValue):
+
+2011-07-26  Pavel Feldman  <pfeldman@google.com>
+
+        Re-applying r91665 and r91668 with JSC issues fixed.
+
+        Web Inspector: use dedicated type for object id in the protocol.
+        Web Inspector: refactor remote object structure to contain value for primitive values.
+
+        https://bugs.webkit.org/show_bug.cgi?id=65103
+        https://bugs.webkit.org/show_bug.cgi?id=65110
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorValues.cpp:
+        (WebCore::InspectorBasicValue::writeJSON):
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._format):
+        (WebInspector.ConsoleView.prototype._formatAsArrayEntry):
+        (WebInspector.ConsoleMessage.prototype._format):
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeElement.prototype._createTooltipForNode.setTooltip):
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+        * inspector/front-end/PropertiesSidebarPane.js:
+        (WebInspector.PropertiesSidebarPane.prototype.update.nodePrototypesReady):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject):
+        (WebInspector.RemoteObject.fromPrimitiveValue):
+        (WebInspector.RemoteObject.fromPayload):
+        (WebInspector.RemoteObject.prototype.get subtype):
+        (WebInspector.RemoteObject.prototype.callFunction):
+        (WebInspector.LocalJSONObject.prototype.get description):
+        (WebInspector.LocalJSONObject.prototype.get type):
+        (WebInspector.LocalJSONObject.prototype.get subtype):
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype._showPopup.showObjectPopup):
+        (WebInspector.SourceFrame.prototype._showPopup):
+        * inspector/front-end/inspector.js:
+        (WebInspector.log.logMessage):
+        (WebInspector.log):
+        (WebInspector.inspect):
+
+2011-07-26  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        Prepare animVal support - phase 2
+        https://bugs.webkit.org/show_bug.cgi?id=65167
+
+        Reviewed by Dirk Schulze.
+
+        Next patch preparing animVal support. Modify the SVGAnimatedProperty* classes & macros to assure that calling someElement->someProperty()
+        will return the animVal, when the property is being animated. Not yet hooked into SVGAnimateElement, this is just a preparation.
+
+        Doesn't affect any tests, yet.
+
+        * svg/SVGPathElement.cpp: Adapt to SVGAnimatedProperty::lookupWrapper changes (new template parameters have been added).
+        (WebCore::SVGPathElement::svgAttributeChanged):
+        * svg/SVGPathSegWithContext.h: Ditto.
+        (WebCore::SVGPathSegWithContext::animatedProperty):
+        * svg/SVGPolyElement.cpp: Ditto.
+        (WebCore::SVGPolyElement::parseMappedAttribute):
+        * svg/properties/SVGAnimatedEnumerationPropertyTearOff.h: Implement currentAnimatedValue, an abstract way to retrieve the underlying animated value for any animated type.
+        (WebCore::SVGAnimatedEnumerationPropertyTearOff::currentAnimatedValue): Forward call to SVGAnimatedStaticPropertyTearOff<int>, our base.
+        * svg/properties/SVGAnimatedListPropertyTearOff.h:
+        (WebCore::SVGAnimatedListPropertyTearOff::isAnimating): Returns whether this property is being animated or not.
+        (WebCore::SVGAnimatedListPropertyTearOff::currentAnimatedValue):
+        * svg/properties/SVGAnimatedProperty.h:
+        (WebCore::SVGAnimatedProperty::updateAnimVal): Will be used from SVGAnim*Element to update the current animVal, exposed to JS.
+        (WebCore::SVGAnimatedProperty::lookupOrCreateWrapper): Share more code with lookupWrapper.
+        (WebCore::SVGAnimatedProperty::lookupWrapper): Cleanup code, avoid doing any work for non-SVGElement derived objects, like SVGViewSpec.
+        * svg/properties/SVGAnimatedPropertyMacros.h: Make all lowerProperty() calls (eg. myRectElement->x()) return the animVal, if the property is being animated.
+        * svg/properties/SVGAnimatedPropertyTearOff.h: Main logic for the new animVal stuff.
+        (WebCore::SVGAnimatedPropertyTearOff::isAnimating):
+        (WebCore::SVGAnimatedPropertyTearOff::currentAnimatedValue):
+        (WebCore::SVGAnimatedPropertyTearOff::updateAnimVal):
+        (WebCore::SVGAnimatedPropertyTearOff::SVGAnimatedPropertyTearOff):
+        * svg/properties/SVGAnimatedStaticPropertyTearOff.h:
+        (WebCore::SVGAnimatedStaticPropertyTearOff::isAnimating):
+        (WebCore::SVGAnimatedStaticPropertyTearOff::currentAnimatedValue):
+        * svg/properties/SVGPropertyTearOff.h:
+        (WebCore::SVGPropertyTearOff::updateAnimVal):
+
+2011-07-26  Shinya Kawanaka  <shinyak@google.com>
+
+        Uses isHTMLSpace to normalize white spaces.
+        https://bugs.webkit.org/show_bug.cgi?id=57746
+
+        Reviewed by Kent Tamura.
+
+        Test: fast/forms/option-strip-unicode-spaces.html
+
+        * dom/OptionElement.cpp:
+        (WebCore::OptionElement::normalizeText):
+          Uses isHTMLSpace to trim and replace white spaces.
+
+2011-07-25  Ryuan Choi  <ryuan.choi@samsung.com>
+
+        [CMAKE] Split JSC related files from WebCore/CMakeLists.txt
+        https://bugs.webkit.org/show_bug.cgi?id=61350
+
+        Reviewed by Daniel Bates.
+
+        No new tests, just moving jsc related files from CMakeLists.txt to UseJSC.cmake.
+
+        * CMakeLists.txt:
+        * UseJSC.cmake:
+
+2011-07-25  Dan Bernstein  <mitz@apple.com>
+
+        Fix the build by committing a rename in this file that I neglected to include in the previous commit.
+
+        * css/CSSFontFaceSource.h:
+
+2011-07-25  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9835028> Font loading during layout can cause layout code to be re-entered via resource load delegate
+        https://bugs.webkit.org/show_bug.cgi?id=65123
+
+        Reviewed by Anders Carlsson and Darin Adler.
+
+        Since CSSFontFaceSource::getFontData() can get called during layout, avoid calling out to loader
+        code from under it, and instead defer that work using a zero-delay timer.
+
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::~CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::getFontData): Rather than starting the font load here, schedule
+        a zero-delay timer to do it.
+        (WebCore::CSSFontFaceSource::startLoadingTimerFired): Added. Starts loading the font if needed.
+        * css/CSSFontFaceSource.h:
+
+2011-07-25  Al Patrick  <apatrick@chromium.org>
+
+        Removed support for the GL_latch_CHROMIUM extension which Chromium no longer supports.
+        Replaced calls to SetLatch with calls to Flush since Flush now has barrier semantics in Chromium.
+        https://bugs.webkit.org/show_bug.cgi?id=65043
+
+        Reviewed by James Robinson.
+
+        * platform/graphics/chromium/Canvas2DLayerChromium.cpp:
+        (WebCore::Canvas2DLayerChromium::updateCompositorResources):
+        * platform/graphics/chromium/DrawingBufferChromium.cpp:
+        (WebCore::DrawingBuffer::publishToPlatformLayer):
+        * platform/graphics/chromium/Extensions3DChromium.h:
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::LayerRendererChromium):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::addChildContext):
+        (WebCore::LayerRendererChromium::removeChildContext):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+
+2011-07-25  Sam Weinig  <sam@webkit.org>
+
+        Refactor ScrollableArea pinned predicates to be more generally useful
+        <rdar://problem/9740379>
+
+        Reviewed by Dan Bernstein.
+
+        * platform/ScrollableArea.cpp:
+        (WebCore::ScrollableArea::isPinnedInBothDirections):
+        (WebCore::ScrollableArea::isPinnedHorizontallyInDirection):
+        (WebCore::ScrollableArea::isPinnedVerticallyInDirection):
+        * platform/ScrollableArea.h:
+
+2011-07-25  Nico Weber  <thakis@chromium.org>
+
+        [chromium] components/mac: Make webcore not depend on CoreAnimation
+        https://bugs.webkit.org/show_bug.cgi?id=65143
+
+        Reviewed by James Robinson.
+
+        * platform/chromium/ScrollAnimatorChromiumMac.mm:
+
+2011-07-25  Ian Henderson  <ianh@apple.com>
+
+        WebFrame should have a method to determine its visual emptiness
+        https://bugs.webkit.org/show_bug.cgi?id=64223
+
+        Reviewed by Dan Bernstein.
+
+        * page/FrameView.h:
+        (WebCore::FrameView::isVisuallyNonEmpty): Add an accessor to FrameView
+        so we can tell whether it's visually non-empty.
+
+2011-07-25  Scott Graham  <scottmg@chromium.org>
+
+        REGRESSION (r39725?): Resources removed from document can not be freed until the document is deleted
+        https://bugs.webkit.org/show_bug.cgi?id=61006
+
+        Reviewed by Nate Chapin.
+
+        Rollback previous patch. Occasional crashes seen caused by
+        CachedResource being deleted twice.
+
+        * loader/cache/CachedResourceLoader.cpp:
+        (WebCore::CachedResourceLoader::CachedResourceLoader):
+        (WebCore::CachedResourceLoader::loadDone):
+        * loader/cache/CachedResourceLoader.h:
+
+2011-07-25  Chris Rogers  <crogers@google.com>
+
+        Deprecate AudioBufferSourceNode .looping attribute and implement .loop
+        https://bugs.webkit.org/show_bug.cgi?id=65133
+
+        Reviewed by Kenneth Russell.
+
+        No new tests since audio API is not yet implemented.
+
+        * webaudio/AudioBufferSourceNode.cpp:
+        (WebCore::AudioBufferSourceNode::renderFromBuffer):
+        (WebCore::AudioBufferSourceNode::totalPitchRate):
+        (WebCore::AudioBufferSourceNode::looping):
+        (WebCore::AudioBufferSourceNode::setLooping):
+        * webaudio/AudioBufferSourceNode.h:
+        (WebCore::AudioBufferSourceNode::loop):
+        (WebCore::AudioBufferSourceNode::setLoop):
+        * webaudio/AudioBufferSourceNode.idl:
+
+2011-07-25  James Robinson  <jamesr@chromium.org>
+
+        [chromium] HUD texture must be unreserved after drawing
+        https://bugs.webkit.org/show_bug.cgi?id=65122
+
+        Unreserve the HUD texture after drawing.  To test, start chrome in debug with --show-fps-counter.  Since this is
+        a debugging option, no tests.
+
+        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
+        (WebCore::CCHeadsUpDisplay::draw):
+
+2011-07-25  David Grogan  <dgrogan@chromium.org>
+
+        Fix leveldb crash when compacting during destruction
+        https://bugs.webkit.org/show_bug.cgi?id=64494
+
+        Reviewed by Nate Chapin.
+
+        Only tested manually so far by following the repro instructions at
+        crbug.com/88944
+
+        * platform/leveldb/LevelDBDatabase.cpp:
+        (WebCore::LevelDBDatabase::~LevelDBDatabase):
+        * storage/IDBLevelDBBackingStore.cpp:
+        (WebCore::IDBLevelDBBackingStore::~IDBLevelDBBackingStore):
+
+2011-07-25  David Reveman  <reveman@chromium.org>
+
+        [Chromium] Use correct vertex shader when rendering video layer.
+        https://bugs.webkit.org/show_bug.cgi?id=65131
+
+        Reviewed by James Robinson.
+
+        Add new VertexShaderQuad program that is used by LayerTilerChromium.
+        Change VertexShaderPosTexTransform so it works with CCVideoLayerImpl.
+
+        * platform/graphics/chromium/LayerTilerChromium.h:
+        * platform/graphics/chromium/ShaderChromium.cpp:
+        (WebCore::VertexShaderPosTexTransform::VertexShaderPosTexTransform):
+        (WebCore::VertexShaderPosTexTransform::init):
+        (WebCore::VertexShaderPosTexTransform::getShaderString):
+        (WebCore::VertexShaderQuad::VertexShaderQuad):
+        (WebCore::VertexShaderQuad::init):
+        (WebCore::VertexShaderQuad::getShaderString):
+        * platform/graphics/chromium/ShaderChromium.h:
+        (WebCore::VertexShaderQuad::matrixLocation):
+        (WebCore::VertexShaderQuad::texTransformLocation):
+
+2011-07-25  Patrick Gansterer  <paroga@webkit.org>
+
+        Fix AtomicString vs. String usage in accessibility code
+        https://bugs.webkit.org/show_bug.cgi?id=65086
+
+        Reviewed by Darin Adler.
+
+        Use AtomicString instead of String where appropriate
+        to avoid implicit type conversations.
+        Also fix a invalid reference to a temporary String.
+
+        * accessibility/AccessibilityObject.h:
+        (WebCore::AccessibilityObject::setAccessibleName):
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::elementsFromAttribute):
+        (WebCore::AccessibilityRenderObject::ariaAccessibilityDescription):
+        (WebCore::AccessibilityRenderObject::setAccessibleName):
+        * accessibility/AccessibilityRenderObject.h:
+
+2011-07-25  Dan Bernstein  <mitz@apple.com>
+
+        Reverted r91699 due to
+        <http://webkit.org/b/65134> REGRESSION: r91699 broke some font tests (image+text)
+
+        Many tests relied on font loading occurring synchronously in the cached and local cases.
+
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::~CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::getFontData):
+        * css/CSSFontFaceSource.h:
+
+2011-06-07  Martin Robinson  <mrobinson@igalia.com>
+
+        Reviewed by Gustavo Noronha Silva.
+
+        [GTK] Use WebCore scrollbars for the DRT instead of GtkScrolledWindow
+        https://bugs.webkit.org/show_bug.cgi?id=62252
+
+        Properly handle the situation where the GtkWidget wants WebCore to draw its
+        own main frame scrollbars.
+
+        * platform/gtk/ScrollViewGtk.cpp:
+        (WebCore::shouldCreateMainFrameScrollbar): Abstract this logic into a helper function.
+        (WebCore::ScrollView::createScrollbar): Use the new helper.
+        (WebCore::ScrollView::visibleContentRect): Use the new helper.
+
+2011-07-25  David Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65125
+        
+        (1) Add the new CSS3 positioned value for floats.
+        (2) Rename FLEFT, FRIGHT and FNONE to our more modern convention: NoFloat, LeftFloat, RightFloat.
+        (3) Replace uses of == FNONE and != FNONE with isFloating and !isFloating.
+
+        Reviewed by Dan Bernstein.
+
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        * css/CSSPrimitiveValueMappings.h:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        (WebCore::CSSPrimitiveValue::operator EFloat):
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::adjustRenderStyle):
+        * css/CSSValueKeywords.in:
+        * editing/ReplaceSelectionCommand.cpp:
+        (WebCore::ReplaceSelectionCommand::removeRedundantStylesAndKeepStyleSpanInline):
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::insertFloatingObject):
+        (WebCore::RenderBlock::positionNewFloats):
+        (WebCore::RenderBlock::computeInlinePreferredLogicalWidths):
+        (WebCore::RenderBlock::computeBlockPreferredLogicalWidths):
+        * rendering/RenderObjectChildList.cpp:
+        (WebCore::RenderObjectChildList::updateBeforeAfterContent):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::isFloating):
+        (WebCore::InheritedFlags::initialFloating):
+        * rendering/style/RenderStyleConstants.h:
+
+2011-07-25  Dan Bernstein  <mitz@apple.com>
+
+        <rdar://problem/9835028> Font loading during layout can cause layout code to be re-entered via resource load delegate
+        https://bugs.webkit.org/show_bug.cgi?id=65123
+
+        Reviewed by Anders Carlsson.
+
+        Since CSSFontFaceSource::getFontData() can get called during layout, avoid calling out to loader
+        code from under it, and instead defer that work using a zero-delay timer.
+
+        * css/CSSFontFaceSource.cpp:
+        (WebCore::CSSFontFaceSource::CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::~CSSFontFaceSource):
+        (WebCore::CSSFontFaceSource::getFontData): Rather than starting the font load here, schedule
+        a zero-delay timer to do it.
+        (WebCore::CSSFontFaceSource::startLoadingTimerFired): Added. Starts loading the font if needed.
+        * css/CSSFontFaceSource.h:
+
+2011-07-25  Andrew Wason  <rectalogic@rectalogic.com>
+
+        [Qt] Adopt GraphicsContext3DOpenGL.cpp and ANGLE (part 2)
+        https://bugs.webkit.org/show_bug.cgi?id=64878
+
+        Reviewed by Noam Rosenthal.
+
+        Existing WebGL layout tests should test this.
+
+        Adopt GraphicsContext3DOpenGL.cpp and ANGLE compiler for Qt.
+
+        * WebCore.pro: Build ANGLE compiler and GraphicsContext3DOpenGL.cpp.
+        * platform/graphics/ANGLEWebKitBridge.h:
+        * platform/graphics/GraphicsContext3D.h: Expose exising ANGLEWebKitBridge compiler member for Qt.
+        * platform/graphics/opengl/GraphicsContext3DOpenGL.cpp:
+        * platform/graphics/qt/GraphicsContext3DQt.cpp:
+        (WebCore::GraphicsContext3D::GraphicsContext3D): Initialize ANGLE resources.
+
+2011-07-25  Daniel Bates  <dbates@rim.com>
+
+        REGRESSION (r85964): Improper relayout of some nested positioned elements
+        https://bugs.webkit.org/show_bug.cgi?id=64286
+
+        Reviewed by David Hyatt.
+
+        Fixes an issue when traversing up the containing block hierarchy after skipping
+        relatively positioned inlines.
+
+        When processing a positioned element we skip any intermediate inlines to get to
+        to enclosing block B, but don't use the containing block for B (call this P_B) to
+        properly continue traversing up the containing block hierarchy. So, B may be
+        considered again instead of looking at P_B. Hence, we don't set the correct dirty
+        bits for P_B and may not schedule a relayout with respect to the correct layout node.
+
+        Test: fast/block/positioning/relayout-nested-positioned-elements-crash.html
+
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::markContainingBlocksForLayout):
+
+2011-07-25  Arno Renevier  <arno@renevier.net>
+
+        removes last ENABLE(DRAG_SUPPORT) gtk check
+        https://bugs.webkit.org/show_bug.cgi?id=64518
+
+        Reviewed by Martin Robinson.
+
+        * platform/gtk/ClipboardGtk.h:
+
+2011-07-25  Alexandru Chiculita  <achicu@adobe.com>
+
+        [CSS Exclusions] Use HANDLE_INHERIT_AND_INITIAL when parsing -webkit-wrap-shape
+        https://bugs.webkit.org/show_bug.cgi?id=65096
+
+        Also the 'inherit' keyword is now treated correctly. It will
+        copy the value from the parent style.
+
+        Reviewed by Tony Chang.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-07-25  Andrew Wason  <rectalogic@rectalogic.com>
+
+        glActiveTexture(0) is invalid
+        https://bugs.webkit.org/show_bug.cgi?id=65115
+
+        Reviewed by Kenneth Russell.
+
+        Existing WebGL layout tests.
+
+        Fix invalid glActiveTexture(0) call.
+
+        * platform/graphics/opengl/GraphicsContext3DOpenGL.cpp:
+        (WebCore::GraphicsContext3D::prepareTexture):
+
+2011-07-25  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91665.
+        http://trac.webkit.org/changeset/91665
+        https://bugs.webkit.org/show_bug.cgi?id=65118
+
+        Breaks inspector tests on JSC (Requested by pfeldman on
+        #webkit).
+
+        * inspector/InjectedScriptSource.js:
+        (.):
+        ():
+        * inspector/Inspector.json:
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._format):
+        (WebInspector.ConsoleView.prototype._formatAsArrayEntry):
+        (WebInspector.ConsoleMessage.prototype._format):
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeElement.prototype._createTooltipForNode.setTooltip):
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+        * inspector/front-end/PropertiesSidebarPane.js:
+        (WebInspector.PropertiesSidebarPane.prototype.update.nodePrototypesReady):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject):
+        (WebInspector.RemoteObject.fromPrimitiveValue):
+        (WebInspector.RemoteObject.fromPayload):
+        (WebInspector.RemoteObject.prototype.callFunction):
+        (WebInspector.LocalJSONObject.prototype.get type):
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype._showPopup.showObjectPopup):
+        (WebInspector.SourceFrame.prototype._showPopup):
+        * inspector/front-end/inspector.js:
+        (WebInspector.log.logMessage):
+        (WebInspector.log):
+        (WebInspector.inspect):
+
+2011-07-25  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91668.
+        http://trac.webkit.org/changeset/91668
+        https://bugs.webkit.org/show_bug.cgi?id=65117
+
+        Breaks inspector tests on JSC (Requested by pfeldman on
+        #webkit).
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+
+2011-07-25  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: use dedicated type for object id in the protocol.
+        https://bugs.webkit.org/show_bug.cgi?id=65110
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+
+2011-07-25  Yury Semikhatsky  <yurys@chromium.org>
+
+        [Chromium] Web Inspector: live edit error should be revealed in Console
+        https://bugs.webkit.org/show_bug.cgi?id=65109
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype.commitEditing.didEditContent):
+        (WebInspector.SourceFrame.prototype.commitEditing):
+
+2011-07-25  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: refactor remote object structure to contain value for primitive values.
+        https://bugs.webkit.org/show_bug.cgi?id=65103
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/InjectedScriptSource.js:
+        * inspector/Inspector.json:
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype._format):
+        (WebInspector.ConsoleView.prototype._formatAsArrayEntry):
+        (WebInspector.ConsoleMessage.prototype._format):
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeElement.prototype._createTooltipForNode.setTooltip):
+        * inspector/front-end/ObjectPropertiesSection.js:
+        (WebInspector.ObjectPropertyTreeElement.prototype.update):
+        * inspector/front-end/PropertiesSidebarPane.js:
+        (WebInspector.PropertiesSidebarPane.prototype.update.nodePrototypesReady):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject):
+        (WebInspector.RemoteObject.fromPrimitiveValue):
+        (WebInspector.RemoteObject.fromPayload):
+        (WebInspector.RemoteObject.prototype.get subtype):
+        (WebInspector.RemoteObject.prototype.callFunction):
+        (WebInspector.LocalJSONObject.prototype.get type):
+        (WebInspector.LocalJSONObject.prototype.get subtype):
+        * inspector/front-end/SourceFrame.js:
+        (WebInspector.SourceFrame.prototype._showPopup.showObjectPopup):
+        (WebInspector.SourceFrame.prototype._showPopup):
+        * inspector/front-end/inspector.js:
+        (WebInspector.log.logMessage):
+        (WebInspector.log):
+        (WebInspector.inspect):
+
+2011-07-25  Mikhail Naganov  <mnaganov@chromium.org>
+
+        Web Inspector: [Chromium] Fix mixing of retaining path in heap profiler.
+        https://bugs.webkit.org/show_bug.cgi?id=65028
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/DetailedHeapshotView.js:
+        (WebInspector.HeapSnapshotPathFinderState): Added
+        (WebInspector.HeapSnapshotRetainingPathsList): Extracted State-specific code
+
+2011-07-25  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: worker inspector should show Scripts panel by default
+        https://bugs.webkit.org/show_bug.cgi?id=65099
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/inspector.js:
+        (WebInspector._defaultPanelName):
+        (WebInspector.showPanel):
+
+2011-07-24  Luke Macpherson   <macpherson@chromium.org>
+
+        Small cleanup of m_fontDirty tracking in CSSStyleSelector
+        https://bugs.webkit.org/show_bug.cgi?id=65090
+
+        Reviewed by Darin Adler.
+
+        1) Use existing setFontDescription helper where appropriate.
+        2) Move always used m_fontDirty check into updateFont()
+
+        No new tests / cleanup only.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::styleForElement):
+        (WebCore::CSSStyleSelector::styleForKeyframe):
+        (WebCore::CSSStyleSelector::pseudoStyleForElement):
+        (WebCore::CSSStyleSelector::styleForPage):
+        (WebCore::CSSStyleSelector::updateFontIfDirty):
+        (WebCore::CSSStyleSelector::applyProperty):
+        * css/CSSStyleSelector.h:
+
+2011-07-24  Kent Tamura  <tkent@chromium.org>
+
+        Validation message bubble position is incorrect if the containing block has paddings.
+        https://bugs.webkit.org/show_bug.cgi?id=65091
+
+        Reviewed by Hajime Morita.
+
+        * html/ValidationMessage.cpp:
+        (WebCore::adjustBubblePosition):
+        We don't need to subtract paddings because the origin of
+        position:aboslute is inside borders and outside of the padding.
+
+2011-07-24  Rob Buis  <rbuis@rim.com>
+
+        Crash in SVGUseElement::updateContainerOffsets on <use> with no parent
+        https://bugs.webkit.org/show_bug.cgi?id=63646
+
+        Reviewed by Darin Adler.
+
+        Prevent using invalid targetElementInstance->shadowTreeElement after shadow render tree recreation. This situation can
+        only occur when there was a valid shadowTreeElement before setting xlink:href to empty/invalid.
+
+        Test: svg/custom/use-shadow-root-parent-removal.svg
+
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::svgAttributeChanged):
+
+2011-07-24  Patrick Gansterer  <paroga@webkit.org>
+
+        Fix AtomicString vs. String usage in JSC binding
+        https://bugs.webkit.org/show_bug.cgi?id=65085
+
+        Reviewed by Darin Adler.
+
+        Use ustringToAtomicString instead of ustringToString where appropriate.
+
+        * bindings/js/JSHTMLAllCollectionCustom.cpp:
+        * bindings/js/JSHTMLCollectionCustom.cpp:
+
+2011-07-24  Luke Macpherson   <macpherson@chromium.org>
+
+        Implement CSSPropertyOutlineOffset in CSSStyleApplyProperty.
+        https://bugs.webkit.org/show_bug.cgi?id=64773
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests / refactoring only.
+
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-07-24  Rob Buis  <rbuis@rim.com>
+
+        SVG <use> element is not repositioned when moved to x=0 y=0 through script 
+        https://bugs.webkit.org/show_bug.cgi?id=53767
+
+        Reviewed by Nikolas Zimmermann.
+
+        Only bail out on zero offset if it is not explicitly set.
+
+        Test: svg/custom/use-move-to-offset.svg
+
+        * rendering/svg/RenderSVGTransformableContainer.cpp:
+        (WebCore::RenderSVGTransformableContainer::calculateLocalTransform):
+        * rendering/svg/SVGShadowTreeElements.cpp:
+        (WebCore::SVGShadowTreeContainerElement::SVGShadowTreeContainerElement):
+        (WebCore::SVGShadowTreeContainerElement::setContainerOffset):
+        * rendering/svg/SVGShadowTreeElements.h:
+        (WebCore::SVGShadowTreeContainerElement::containerOffsetChanged):
+        (WebCore::SVGShadowTreeContainerElement::setContainerOffsetChanged):
+
+2011-07-24  Jeffrey Pfau  <jpfau@apple.com>
+
+        Refactor HTML tokenizer code in preparation for a new XML tokenizer
+        https://bugs.webkit.org/show_bug.cgi?id=65000
+
+        Reviewed by Adam Barth.
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * html/parser/HTMLDocumentParser.cpp:
+        (WebCore::HTMLNames::tokenizerStateForContextElement):
+        (WebCore::HTMLDocumentParser::pumpTokenizer):
+        * html/parser/HTMLTokenizer.cpp:
+        (WebCore::HTMLNames::isEndTagBufferingState):
+        (WebCore::HTMLTokenizer::HTMLTokenizer):
+        (WebCore::::shouldSkipNullCharacters):
+        (WebCore::HTMLTokenizer::reset):
+        (WebCore::HTMLTokenizer::flushEmitAndResumeIn):
+        (WebCore::HTMLTokenizer::nextToken):
+        (WebCore::HTMLTokenizer::updateStateFor):
+        * html/parser/HTMLTokenizer.h:
+        (WebCore::HTMLTokenizer::emitAndResumeIn):
+        (WebCore::HTMLTokenizer::emitAndReconsumeIn):
+        (WebCore::HTMLTokenizer::saveEndTagNameIfNeeded):
+        * html/parser/HTMLTreeBuilder.cpp:
+        (WebCore::HTMLTreeBuilder::processStartTagForInBody):
+        (WebCore::HTMLTreeBuilder::processEndTag):
+        (WebCore::HTMLTreeBuilder::processGenericRCDATAStartTag):
+        (WebCore::HTMLTreeBuilder::processGenericRawTextStartTag):
+        (WebCore::HTMLTreeBuilder::processScriptStartTag):
+        * html/parser/TextDocumentParser.cpp:
+        (WebCore::TextDocumentParser::TextDocumentParser):
+        * html/parser/TextViewSourceParser.cpp:
+        (WebCore::TextViewSourceParser::TextViewSourceParser):
+        * xml/parser/MarkupTokenBase.h:
+        (WebCore::MarkupTokenBase::type):
+        * xml/parser/MarkupTokenizerBase.h: Added.
+        (WebCore::MarkupTokenizerBase::~MarkupTokenizerBase):
+        (WebCore::MarkupTokenizerBase::lineNumber):
+        (WebCore::MarkupTokenizerBase::columnNumber):
+        (WebCore::MarkupTokenizerBase::state):
+        (WebCore::MarkupTokenizerBase::setState):
+        (WebCore::MarkupTokenizerBase::forceNullCharacterReplacement):
+        (WebCore::MarkupTokenizerBase::setForceNullCharacterReplacement):
+        (WebCore::MarkupTokenizerBase::InputStreamPreprocessor::InputStreamPreprocessor):
+        (WebCore::MarkupTokenizerBase::InputStreamPreprocessor::nextInputCharacter):
+        (WebCore::MarkupTokenizerBase::InputStreamPreprocessor::peek):
+        (WebCore::MarkupTokenizerBase::InputStreamPreprocessor::advance):
+        (WebCore::MarkupTokenizerBase::InputStreamPreprocessor::shouldTreatNullAsEndOfFileMarker):
+        (WebCore::MarkupTokenizerBase::MarkupTokenizerBase):
+        (WebCore::MarkupTokenizerBase::bufferCharacter):
+        (WebCore::MarkupTokenizerBase::emitAndResumeIn):
+        (WebCore::MarkupTokenizerBase::emitAndReconsumeIn):
+        (WebCore::MarkupTokenizerBase::emitEndOfFile):
+        (WebCore::MarkupTokenizerBase::reset):
+        (WebCore::MarkupTokenizerBase::haveBufferedCharacterToken):
+        * xml/parser/MarkupTokenizerInlineMethods.h: Added.
+        (WebCore::isTokenizerWhitespace):
+        (WebCore::advanceStringAndASSERTIgnoringCase):
+        (WebCore::advanceStringAndASSERT):
+
+2011-07-23  Patrick Gansterer  <paroga@webkit.org>
+
+        Remove WTF namespace from isMainThread() calls
+        https://bugs.webkit.org/show_bug.cgi?id=65068
+
+        Reviewed by Sam Weinig.
+
+        Because of the using WTF::isMainThread in the header there is no
+        reason to include the namespace name when calling this function.
+
+        * bindings/js/JSMainThreadExecState.h:
+        * bindings/v8/DOMDataStore.cpp:
+        * bindings/v8/V8Binding.cpp:
+        * bindings/v8/V8DOMMap.cpp:
+        * bindings/v8/V8DOMWrapper.h:
+        * page/DOMWindow.cpp:
+        * page/History.cpp:
+
+2011-07-23  Alok Priyadarshi  <alokp@chromium.org>
+
+        Switching off acceleration for small canvas broke gpu tests
+        https://bugs.webkit.org/show_bug.cgi?id=65053
+
+        Reviewed by Stephen White.
+
+        No new tests. These are supposed to fix existing canvas tests on gpu.
+
+        * html/canvas/CanvasRenderingContext2D.cpp:
+        (WebCore::shouldAccelerateCanvas):
+        * page/Settings.cpp:
+        (WebCore::Settings::Settings):
+        (WebCore::Settings::setLegacyAccelerated2dCanvasEnabled):
+        (WebCore::Settings::setMinimumAccelerated2dCanvasSize):
+        * page/Settings.h:
+        (WebCore::Settings::minimumAccelerated2dCanvasSize):
+
+2011-07-23  Rob Buis  <rbuis@rim.com>
+
+        Freed SVGTRefElement used in SVGStyledElement::buildPendingResourcesIfNeeded
+        https://bugs.webkit.org/show_bug.cgi?id=64758
+
+        Reviewed by Nikolas Zimmermann.
+
+        Fix the crash by storing referenced content inside a shadow tree. This way removing child nodes of
+        the <tref> does not remove the referenced content.
+
+        * dom/Text.cpp:
+        (WebCore::Text::recalcStyle):
+        * dom/Text.h:
+        * svg/SVGTRefElement.cpp:
+        (WebCore::SVGShadowText::create):
+        (WebCore::SVGShadowText::SVGShadowText):
+        (WebCore::SVGShadowText::createRenderer):
+        (WebCore::SVGShadowText::recalcStyle):
+        (WebCore::SVGTRefElement::updateReferencedText):
+        (WebCore::SVGTRefElement::childShouldCreateRenderer):
+
+2011-07-23  Shinya Kawanaka  <shinyak@google.com>
+
+        Display number field without using a thousand separator.
+        https://bugs.webkit.org/show_bug.cgi?id=65064
+
+        Reviewed by Kent Tamura.
+
+        Separated formatters for parsing and displaying.
+        Removed a test for thousand separator.
+
+        * manual-tests/input-number-localization.html:
+        Removed a test for thousand separator.
+        Made the test description more specific.
+        * platform/text/LocalizedNumberICU.cpp:
+        (WebCore::createFormatterForCurrentLocaleToDisplay):
+        Added to introduce a formatter for display.
+        (WebCore::numberFormatterForParsing):
+        Changed the name to be clear.
+        (WebCore::numberFormatterForDisplay): Added.
+        (WebCore::parseLocalizedNumber): Used numberFormatterForParsing.
+        (WebCore::formatLocalizedNumber): Used numberFormatterForDisplay.
+        * platform/text/mac/LocalizedNumberMac.mm:
+        (WebCore::createFormatterForCurrentLocaleForDisplay):
+        Added to introduce a formatter for display.
+        (WebCore::numberFormatterForParsing):
+        Changed the name to be clear.
+        (WebCore::numberFormatterForDisplay): Added.
+        (WebCore::parseLocalizedNumber): Used numberFormatterForParsing.
+        (WebCore::formatLocalizedNumber): Used numberFormatterForDisplay.
+
+2011-07-22  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Seperate texture management for contents textures vs render surface textures
+        https://bugs.webkit.org/show_bug.cgi?id=64771
+
+        Reviewed by Kenneth Russell.
+
+        Splits the chromium texture management across two TextureManagers, one for contents textures and one for render
+        surfaces.  The lifetimes and relative evicition costs for these types of textures are significantly different.
+        Content textures need to be managed from paint time through draw time and evicting them is generally expensive,
+        since replacing the texture requires doing a software repaint into a buffer, creating a new texture, and
+        uploading the contents into the texture.  Render surface textures are only used while drawing and never contain
+        useful contents between frames.  The only reason to preserve a render surface texture between frames is to avoid
+        having to create the texture on the next frame, they never contain useful contents across frames.
+
+        The contents texture limits remain the same.  Render surfaces are allocated the difference between the high
+        memory bound and the contents texture memory use during a frame and the difference between the low memory bound
+        and the contents texture memory use between frames.
+
+        Covered by existing compositing tests.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::releaseTextures):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::updateLayers):
+        (WebCore::LayerRendererChromium::initializeSharedObjects):
+        (WebCore::LayerRendererChromium::cleanupSharedObjects):
+        * platform/graphics/chromium/LayerRendererChromium.h:
+        (WebCore::LayerRendererChromium::contentsTextureManager):
+        (WebCore::LayerRendererChromium::renderSurfaceTextureManager):
+        * platform/graphics/chromium/LayerTilerChromium.cpp:
+        (WebCore::LayerTilerChromium::createTile):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::prepareContentsTexture):
+        * platform/graphics/chromium/TextureManager.cpp:
+        (WebCore::TextureManager::TextureManager):
+        (WebCore::TextureManager::setMemoryLimitBytes):
+        (WebCore::TextureManager::requestTexture):
+        * platform/graphics/chromium/TextureManager.h:
+        (WebCore::TextureManager::create):
+        (WebCore::TextureManager::currentMemoryUseBytes):
+        * platform/graphics/chromium/cc/CCHeadsUpDisplay.cpp:
+        (WebCore::CCHeadsUpDisplay::draw):
+
+2011-07-22  Simon Fraser  <simon.fraser@apple.com>
+
+        Avoiding painting backgrounds if they are fully obscures by an object's foreground
+        https://bugs.webkit.org/show_bug.cgi?id=65030
+
+        Reviewed by Dan Bernstein.
+
+        Some pages use animated loading GIFs as the background of <img>,
+        but WebKit keeps animating these after the <img> has loaded.
+        
+        Thwart this by avoiding the painting of such backgrounds, if we can
+        determine that they are completely obscured by the border and content
+        of the element.
+
+        * platform/graphics/BitmapImage.h:
+        (WebCore::BitmapImage::currentFrameHasAlpha): Utility method, since currentFrame()
+        is protected.
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::paintBoxDecorations): Call paintBackground().
+        (WebCore::RenderBox::paintBackground): New wrapper for the paintFillLayers() which
+        paints the background layers, plus some code we call in a couple of places. This
+        checks the new backgroundIsObscured() method before doing any painting.
+        * rendering/RenderBox.h:
+        (WebCore::RenderBox::backgroundIsObscured): New virtual method that determines
+        whether any of the background is visible.
+        * rendering/RenderBoxModelObject.h:
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::BorderEdge::obscuresBackground): Returns true if this edge will
+        entirely hide the background under it.
+        (WebCore::RenderBoxModelObject::borderObscuresBackground): Determine whether
+        the border hides the background.
+        * rendering/RenderImage.cpp:
+        (WebCore::RenderImage::backgroundIsObscured): Override the RenderBox method
+        and return true if the image is a loaded, opaque bitmap image, and the background
+        won't show in the border or padding areas.
+        * rendering/RenderImage.h:
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::paintBoxDecorations): Use paintBackground().
+
+2011-07-22  Kenneth Russell  <kbr@google.com>
+
+        HTMLImageElement::crossOrigin is hard to use because of caching
+        https://bugs.webkit.org/show_bug.cgi?id=64813
+
+        Reviewed by Adam Barth.
+
+        Reload the resource if the allowCredentials flag doesn't match that in the request.
+
+        Test: http/tests/security/canvas-remote-read-remote-image-blocked-then-allowed.html
+
+        * loader/cache/CachedResourceLoader.cpp:
+        (WebCore::CachedResourceLoader::requestResource):
+        (WebCore::CachedResourceLoader::determineRevalidationPolicy):
+        * loader/cache/CachedResourceLoader.h:
+
+2011-07-22  Simon Fraser  <simon.fraser@apple.com>
+
+        Need to update the acceleratesDrawing status on a layer when switching to/from tiled layers
+        https://bugs.webkit.org/show_bug.cgi?id=65057
+
+        Reviewed by Joseph Pecoraro.
+
+        When switching to or from tiled layers, we need to update the new layer's
+        acceleratesDrawing status.
+
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::swapFromOrToTiledLayer):
+
+2011-07-22  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Add [Optional=CallWithDefaultValues] flag and use it in initXXXEvent declarations
+        https://bugs.webkit.org/show_bug.cgi?id=64973
+
+        Reviewed by Adam Barth.
+
+        We are doing away with the interface-level LegacyDefaultOptionalArguments
+        flag. To handle some cases of the old behavior, we need to define a new
+        (argument-level) flag so that functions can define optional arguments
+        but not have to declare every single combination of arguments in C++.
+        The old code generator handled this by calling a single C++ function
+        with all arguments, but with default values for the "optional" arguments.
+        Thus, this patch invents a new argument-level flag called
+        [Optional=CallWithDefaultValue] that emulates the old behavior.
+
+        This patch also fixes all the initXXXEvent declarations to remove the
+        LegacyDefaultOptionalArguments flag and use the new
+        [Optional=CallWithDefaultValue] flag only on the specific arguments that
+        require it for backward compatibility.
+
+        No new tests, all existing tests pass.
+
+        * bindings/scripts/CodeGeneratorJS.pm:
+        (GenerateImplementation):
+        * bindings/scripts/CodeGeneratorV8.pm:
+        (GenerateFunctionCallback):
+        * dom/BeforeLoadEvent.idl:
+        * dom/BeforeProcessEvent.idl:
+        * dom/CompositionEvent.idl:
+        * dom/CustomEvent.idl:
+        * dom/DeviceMotionEvent.idl:
+        * dom/DeviceOrientationEvent.idl:
+        * dom/ErrorEvent.idl:
+        * dom/Event.idl:
+        * dom/HashChangeEvent.idl:
+        * dom/KeyboardEvent.idl:
+        * dom/MessageEvent.idl:
+        * dom/MouseEvent.idl:
+        * dom/MutationEvent.idl:
+        * dom/OverflowEvent.idl:
+        * dom/PageTransitionEvent.idl:
+        * dom/PopStateEvent.idl:
+        * dom/ProgressEvent.idl:
+        * dom/StreamEvent.idl:
+        * dom/TextEvent.idl:
+        * dom/TouchEvent.idl:
+        * dom/UIEvent.idl:
+        * dom/WebKitAnimationEvent.idl:
+        * dom/WebKitTransitionEvent.idl:
+        * dom/WheelEvent.idl:
+        * html/canvas/WebGLContextEvent.idl:
+        * storage/StorageEvent.idl:
+        * websockets/CloseEvent.idl:
+
+2011-07-22  Jessie Berlin  <jberlin@apple.com>
+
+        [WebKit2] Changing the cookie accept policy in Private Browsing doesn’t work
+        https://bugs.webkit.org/show_bug.cgi?id=64997
+
+        Reviewed by Ada Chan.
+
+        * WebCore.exp.in:
+        * platform/mac/WebCoreSystemInterface.h:
+        * platform/mac/WebCoreSystemInterface.mm:
+
+2011-07-22  Sergey Glazunov  <serg.glazunov@gmail.com>
+
+        Perform the JavaScript navigation check on a complete URL
+        https://bugs.webkit.org/show_bug.cgi?id=65038
+
+        Reviewed by Adam Barth.
+
+        Test: http/tests/security/xss-DENIED-document-baseURI-javascript.html
+
+        * page/DOMWindow.cpp:
+        (WebCore::DOMWindow::setLocation):
+        (WebCore::DOMWindow::createWindow):
+        (WebCore::DOMWindow::open):
+
+2011-07-22  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Revert r91595 for it broke Chromium Windows build.
+
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+
+2011-07-22  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        BORDER attribute with the IMG tag, using percentage values not working.
+        https://bugs.webkit.org/show_bug.cgi?id=20226
+
+        Reviewed by Simon Fraser.
+
+        When border presentational attribute of image element has % in it, it should be parsed using
+        HTML parser rules. In this case, the algorithm is the one used described in:
+        http://www.whatwg.org/specs/web-apps/current-work/#rules-for-parsing-non-negative-integers
+
+        * html/HTMLImageElement.cpp:
+        (WebCore::parseBorderWidthAttribute):
+        (WebCore::HTMLImageElement::parseMappedAttribute):
+        * html/parser/HTMLParserIdioms.cpp:
+        (WebCore::parseHTMLNonNegativeInteger):
+        * html/parser/HTMLParserIdioms.h:
+
+2011-07-22  Scott Graham  <scottmg@chromium.org>
+
+        DocumentLoader keeps a reference to all URL strings ever loaded in m_resourcesClientKnowsAbout leading to lots of memory waste
+        https://bugs.webkit.org/show_bug.cgi?id=61894
+
+        Reviewed by James Robinson.
+
+        DocumentLoader::m_resourcesClientKnowsAbout is a set of all the URLs
+        that have passed through FrameLoader::dispatchWillSendRequest() and is
+        used by FrameLoader::loadedResourceFromMemoryCached to decide whether
+        to inform the FrameLoader's m_client about this load.  Unfortunately,
+        this set holds a reference to the URL string for every resource
+        loaded, so on pages that use data URLs to "load" large amounts of data
+        this leaks lots of memory. The cache improves performance going through
+        FrameLoader::loadResourceFromMemoryCache, so rather than removing it,
+        simply exclude 'data:' urls from the cache to save the majority of
+        memory that is held for too long.
+
+        * loader/DocumentLoader.h:
+        (WebCore::DocumentLoader::didTellClientAboutLoad):
+
+2011-07-22  Alok Priyadarshi  <alokp@chromium.org>
+
+        Use software rendering for small canvas
+        https://bugs.webkit.org/show_bug.cgi?id=64958
+
+        Reviewed by Stephen White.
+
+        No new tests. Does not affect rendering output, just canvas backing.
+        If there is a regression, they should be caught by existing canvas tests.
+
+        * html/HTMLCanvasElement.cpp:
+        (WebCore::HTMLCanvasElement::reset):
+        * html/canvas/CanvasRenderingContext2D.cpp:
+        (WebCore::shouldAccelerateCanvas):
+        (WebCore::CanvasRenderingContext2D::CanvasRenderingContext2D):
+        (WebCore::CanvasRenderingContext2D::reset):
+        (WebCore::CanvasRenderingContext2D::platformLayer):
+        (WebCore::CanvasRenderingContext2D::clearAcceleration):
+        (WebCore::CanvasRenderingContext2D::resetAcceleration):
+        * html/canvas/CanvasRenderingContext2D.h:
+
+2011-07-21  Adrienne Walker  <enne@google.com>
+
+        Fix repainting of composited fixed position elements in iframes
+        https://bugs.webkit.org/show_bug.cgi?id=64010
+
+        Reviewed by Simon Fraser.
+
+        In cases where an iframe's contents have their own graphics layer, the
+        invalidation during scrolling was being sent to the wrong render
+        layer. Fixed by checking if such a layer exists and routing scrolling
+        invalidations there first.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::scrollContentsSlowPath):
+
+2011-07-22  Viet-Trung Luu  <viettrungluu@chromium.org>
+
+        Improve (i.e., speed up) .gyp(i) files for Chromium
+        https://bugs.webkit.org/show_bug.cgi?id=65032
+
+        Reviewed by Adam Barth.
+
+        Begin splitting off webcore_(privateheader_)files into separate lists
+        (dom/html/svg in this patch), to avoid the very slow pattern of
+        excluding all files and then filtering to include selected files.
+
+        Test by building (in all supported configurations).
+
+        * WebCore.gyp/WebCore.gyp:
+        * WebCore.gypi:
+
+2011-07-22  Tony Chang  <tony@chromium.org>
+
+        add placeholder RenderFlexibleBox.cpp files
+        https://bugs.webkit.org/show_bug.cgi?id=64982
+
+        Reviewed by Ojan Vafai.
+
+        No new tests, just adding new files and making sure it compiles.
+        Also adding the isFlexibleBox identifier to RenderObject.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * rendering/RenderFlexibleBox.cpp: Added.
+        (WebCore::RenderFlexibleBox::RenderFlexibleBox): Inherit from RenderBlock like the old flexbox.
+        (WebCore::RenderFlexibleBox::~RenderFlexibleBox):
+        (WebCore::RenderFlexibleBox::renderName):
+        (WebCore::RenderFlexibleBox::layoutBlock):
+        * rendering/RenderFlexibleBox.h: Added.
+        (WebCore::RenderFlexibleBox::isFlexibleBox):
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isFlexibleBox):
+
+2011-07-22  James Robinson  <jamesr@chromium.org>
+
+        [chromium] Force slow scrolling path for non-composited frames in a composited page
+        https://bugs.webkit.org/show_bug.cgi?id=64991
+
+        Reviewed by Darin Fisher.
+
+        The chromium compositor does not properly handle fast path scrolls for non-composited iframe in a composited
+        page.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::useSlowRepaints):
+
+2011-07-22  Andrew Scherkus  <scherkus@chromium.org>
+
+        Remove surfaceType() and texture() methods from Chromium video frame classes.
+        https://bugs.webkit.org/show_bug.cgi?id=64818
+
+        Reviewed by Kenneth Russell.
+
+        No tests as code was never being executed.
+
+        * platform/graphics/chromium/VideoFrameChromium.h:
+        * platform/graphics/chromium/VideoLayerChromium.cpp:
+        (WebCore::VideoLayerChromium::updateCompositorResources):
+        * platform/graphics/chromium/VideoLayerChromium.h:
+
+2011-07-22  Nate Chapin  <japhet@chromium.org>
+
+        Don't treat child frame loads as back-forward navigations
+        after the load event fires. This can lead to loading
+        the wrong url in the child frame.
+        https://bugs.webkit.org/show_bug.cgi?id=64895
+
+        Reviewed by Mihai Parparita.
+
+        Test: fast/loader/child-frame-add-after-back-forward.html
+
+        * dom/Document.h: Drive-by FIXME.
+        * loader/DocumentLoader.h: Drive-by FIXME.
+        * loader/FrameLoader.cpp:
+        (WebCore::FrameLoader::loadURLIntoChildFrame):
+
+2011-07-22  Kent Tamura  <tkent@google.com>
+
+        REGRESSION(r88757): The thumb of a vertical range slider is offset to the right on non-Mac.
+        https://bugs.webkit.org/show_bug.cgi?id=65011
+
+        Reviewed by Dimitri Glazkov.
+
+        We need to update the apeearance of thumbs before the layout of RenderSlider.
+
+        * html/shadow/SliderThumbElement.cpp:
+        (WebCore::RenderSliderThumb::updateAppearance):
+        Added. This function adjsuts the apparance of a thumb for the appearance of an <input>.
+        (WebCore::RenderSliderThumb::isSliderThumb):
+        Added.  Returns true.
+        (WebCore::RenderSliderThumb::layout):
+        Remove the appearance adjustment code. It is unnecessary because it is
+        done in RenderSlider::layout().
+        (WebCore::trackLimiterElementOf): Added.
+        * html/shadow/SliderThumbElement.h: Move RenderSliderThumb from SliderThumbElement.cpp.
+        * rendering/RenderObject.h:
+        (WebCore::RenderObject::isSliderThumb): Added. Returns false.
+        * rendering/RenderSlider.cpp:
+        (WebCore::RenderSlider::layout):
+        If the renderers for the thumb element and the limiter element is
+        RenderSliderThumb, updates its appearance.
+
+2011-07-22  Kent Tamura  <tkent@chromium.org>
+
+        Validation message bubble is incorrectly positioned in a relative body.
+        https://bugs.webkit.org/show_bug.cgi?id=65018
+
+        Reviewed by Dimitri Glazkov.
+
+        We use position:aboslute for validation message bubbles, and the
+        origin of the absolute position can be not only the page, but also
+        an ancestor block with non-static position.
+
+        Test: fast/forms/validation-message-in-relative-body.html
+
+        * html/ValidationMessage.cpp:
+        (WebCore::adjustBubblePosition):
+        Subtract the containing block position from the host position.
+        (WebCore::ValidationMessage::buildBubbleTree):
+        Change the order of appendChild() and adjustBubblePosition() in
+        order to use RenderObject::containingBlock() in
+        adjustbubbleposition().
+
+2011-07-22  David Grogan  <dgrogan@chromium.org>
+
+        Fix crash in IDBRequest::abort
+        https://bugs.webkit.org/show_bug.cgi?id=64740
+
+        Reviewed by Nate Chapin.
+
+        Tested manually with the testcase in the bug.
+
+        * storage/IDBRequest.cpp:
+        (WebCore::IDBRequest::~IDBRequest):
+        (WebCore::IDBRequest::abort):
+
+2011-07-22  Patrick Gansterer  <paroga@webkit.org>
+
+        Replace preprocessor statements in IDL files with Conditional attribute
+        https://bugs.webkit.org/show_bug.cgi?id=64961
+
+        Reviewed by Darin Adler.
+
+        Replaced ENABLE_DATALIST, ENABLE_DIRECTORY_UPLOAD, ENABLE_INPUT_SPEECH, ENABLE_MEDIA_STATISTICS
+        and ENABLE_ORIENTATION_EVENTS with the corresponding Conditional attribute.
+
+        * html/HTMLBodyElement.idl:
+        * html/HTMLFrameSetElement.idl:
+        * html/HTMLInputElement.idl:
+        * html/HTMLMediaElement.idl:
+        * html/HTMLVideoElement.idl:
+
+2011-07-22  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: [Extensions API] add webInspector.resources.onContentEdited
+        https://bugs.webkit.org/show_bug.cgi?id=65024
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/ExtensionAPI.js:
+        (WebInspector.injectedExtensionAPI):
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer.prototype.notifyResourceContentEdited):
+        * inspector/front-end/Resource.js:
+        (WebInspector.Resource.prototype.addRevision):
+
+2011-07-22  Pavel Podivilov  <podivilov@chromium.org>
+
+        Web Inspector: fix exception when paused in internal script.
+        https://bugs.webkit.org/show_bug.cgi?id=64995
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/debugger/pause-in-internal-script.html
+
+        * inspector/front-end/DebuggerPresentationModel.js:
+        (WebInspector.PresenationCallFrame.prototype.sourceLine):
+
+2011-07-22  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: sometimes ReceiveResponse event is attached to wrong parent.
+        https://bugs.webkit.org/show_bug.cgi?id=65016
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/timeline/timeline-receive-response-event.html
+
+        * inspector/InspectorTimelineAgent.cpp:
+        (WebCore::InspectorTimelineAgent::didInstallTimer):
+        (WebCore::InspectorTimelineAgent::didRemoveTimer):
+        (WebCore::InspectorTimelineAgent::didScheduleResourceRequest):
+        (WebCore::InspectorTimelineAgent::didFinishLoadingResource):
+        (WebCore::InspectorTimelineAgent::didTimeStamp):
+        (WebCore::InspectorTimelineAgent::didMarkDOMContentEvent):
+        (WebCore::InspectorTimelineAgent::didMarkLoadEvent):
+        (WebCore::InspectorTimelineAgent::appendRecord):
+        * inspector/InspectorTimelineAgent.h:
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel.prototype._innerAddRecordToTimeline):
+
+2011-07-22  Kentaro Hara  <haraken@google.com>
+
+        REGRESSION(r89535): Form reset does not repaint a file upload control.
+        https://bugs.webkit.org/show_bug.cgi?id=65008
+
+        Reviewed by Kent Tamura.
+
+        This patch fixes the code so that the file upload control is repainted
+        in updateFromElement() if no files are selected.
+
+        Tests: fast/forms/file-input-reset.html
+
+        * rendering/RenderFileUploadControl.cpp:
+        (WebCore::RenderFileUploadControl::updateFromElement): Calls repaint() if no files are selected.
+
+2011-07-22  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: the max depth of the Timeline events' stack trace should be customizable.
+        https://bugs.webkit.org/show_bug.cgi?id=65023
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::startTimelineProfiler):
+        * inspector/InspectorTimelineAgent.cpp:
+        (WebCore::InspectorTimelineAgent::pushGCEventRecords):
+        (WebCore::InspectorTimelineAgent::restore):
+        (WebCore::InspectorTimelineAgent::start):
+        (WebCore::InspectorTimelineAgent::didInstallTimer):
+        (WebCore::InspectorTimelineAgent::didRemoveTimer):
+        (WebCore::InspectorTimelineAgent::didScheduleResourceRequest):
+        (WebCore::InspectorTimelineAgent::willSendResourceRequest):
+        (WebCore::InspectorTimelineAgent::didFinishLoadingResource):
+        (WebCore::InspectorTimelineAgent::didTimeStamp):
+        (WebCore::InspectorTimelineAgent::didMarkDOMContentEvent):
+        (WebCore::InspectorTimelineAgent::didMarkLoadEvent):
+        (WebCore::InspectorTimelineAgent::InspectorTimelineAgent):
+        (WebCore::InspectorTimelineAgent::pushCurrentRecord):
+        * inspector/InspectorTimelineAgent.h:
+        * inspector/TimelineRecordFactory.cpp:
+        (WebCore::TimelineRecordFactory::createGenericRecord):
+        * inspector/TimelineRecordFactory.h:
+        * inspector/front-end/TimelineManager.js:
+        (WebInspector.TimelineManager.prototype.start):
+
+2011-07-22  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91024.
+        http://trac.webkit.org/changeset/91024
+        https://bugs.webkit.org/show_bug.cgi?id=65017
+
+        number of problems happened with invisible elements which grab
+        pointer events. (Requested by loislo on #webkit).
+
+        * inspector/front-end/inspector.css:
+        (.panel):
+        (.panel.visible):
+
+2011-07-22  Jia Pu  <jpu@apple.com>
+
+        Reviewed by Darin Adler.
+
+        [Mac] Need to make sure autocorrection panel is dismissed in Document::setFocusNode().
+        https://bugs.webkit.org/show_bug.cgi?id=64824
+        <rdar://problem/9624232>
+
+        * editing/Editor.cpp:
+        (WebCore::Editor::textFieldDidEndEditing): Dismiss autocorrection panel when current node losing focus.
+
+2011-07-21  Kent Tamura  <tkent@chromium.org>
+
+        A trivial fix for r91550.
+        https://bugs.webkit.org/show_bug.cgi?id=65001
+
+        Need to update placeholder visibility when the owner elemnent style is changed.
+
+        * html/HTMLTextFormControlElement.h: Make updatePlaceholderVisibility() public.
+        * rendering/RenderTextControl.cpp:
+        (WebCore::RenderTextControl::styleDidChange):
+        Call updatePlaceholderVisibility().
+
+2011-07-21  Pratik Solanki  <psolanki@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=65002
+        Get authentication to work with USE(CFNETWORK) on Mac
+
+        Reviewed by David Kilzer.
+
+        Instead of creating a new CFURLAuthChallengeRef, we save and reuse the same object as the
+        one given to us by CFNetwork.
+
+        * platform/network/mac/AuthenticationMac.mm:
+        (-[WebCoreAuthenticationClientAsChallengeSender setCFChallenge:]): Accessor methods for the
+        new CFURLAuthChallengeRef ivar.
+        (-[WebCoreAuthenticationClientAsChallengeSender cfChallenge]):
+        (WebCore::core): Create AuthenticationChallenge using the saved CFURLAuthChallengeRef.
+        (WebCore::mac): Use the CFURLAuthChallengeRef object in AuthenticationChallenge instead of
+        creating a new one.
+
+2011-07-21  Kent Tamura  <tkent@chromium.org>
+
+        REGRESSION(r90971): Placeholder and search cancel button are visible even in elements with visibility:hidden.
+        https://bugs.webkit.org/show_bug.cgi?id=65001
+
+        Reviewed by Dimitri Glazkov.
+
+        Tests: fast/forms/placeholder-in-invisible-elements.html
+               fast/forms/search-cancel-in-invisible-elements.html
+
+        * html/HTMLTextFormControlElement.cpp:
+        (WebCore::HTMLTextFormControlElement::placeholderShouldBeVisible):
+        Don't show the placeholder if the 'visibility' property of the owner element is 'hidden.'
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::visibilityForCancelButton): ditto.
+
+2011-07-21  Shinya Kawanaka  <shinyak@google.com>
+
+        The input[type="number"] with step="any" should not suffer from step mismatch.
+        https://bugs.webkit.org/show_bug.cgi?id=64858
+
+        Reviewed by Kent Tamura.
+
+        Added check step="any" not to suffer from step mismatch.
+
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::applyStep): Added check step="any".
+        (WebCore::HTMLInputElement::alignValueForStep): Added.
+
+2011-07-21  MORITA Hajime  <morrita@google.com>
+
+        [Refactoring] ShadowContentSelector should be ShadowInclusionSelector
+        https://bugs.webkit.org/show_bug.cgi?id=64850
+
+        Reviewed by Dimitri Glazkov.
+
+        Renamed:
+        - ShadowContentSelector -> ShadowInclusionSelector
+        - ShadowContentSelector::findInclusionFor -> ShadowInclusionSelector::findFor
+        - ShadowContentSelector::selectInclusion -> ShadowInclusionSelector::select
+        - ShadowContentSelector::unselectInclusion -> ShadowInclusionSelector::unselect
+        - ShadowContentSelector::didSelectInclusion -> ShadowInclusionSelector::didSelect
+        - ShadowContentSelector::willSelectInclusionOver -> ShadowInclusionSelector::willSelectOver
+        - ShadowContentSelector::hasChildren -> ShadowInclusionSelector::hasCandidates
+        
+        No new tests. Just a textual change.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * dom/DOMAllInOne.cpp:
+        * dom/NodeRenderingContext.cpp:
+        * dom/ShadowContentElement.cpp:
+        (WebCore::ShadowContentElement::attach):
+        (WebCore::ShadowContentElement::detach):
+        * dom/ShadowInclusionSelector.cpp: Renamed from Source/WebCore/dom/ShadowContentSelector.cpp.
+        (WebCore::ShadowInclusion::append):
+        (WebCore::ShadowInclusion::unlink):
+        (WebCore::ShadowInclusionList::ShadowInclusionList):
+        (WebCore::ShadowInclusionList::~ShadowInclusionList):
+        (WebCore::ShadowInclusionList::find):
+        (WebCore::ShadowInclusionList::clear):
+        (WebCore::ShadowInclusionList::append):
+        (WebCore::ShadowInclusionSelector::ShadowInclusionSelector):
+        (WebCore::ShadowInclusionSelector::~ShadowInclusionSelector):
+        (WebCore::ShadowInclusionSelector::select):
+        (WebCore::ShadowInclusionSelector::unselect):
+        (WebCore::ShadowInclusionSelector::findFor):
+        (WebCore::ShadowInclusionSelector::didSelect):
+        (WebCore::ShadowInclusionSelector::willSelectOver):
+        * dom/ShadowInclusionSelector.h: Renamed from Source/WebCore/dom/ShadowContentSelector.h.
+        (WebCore::ShadowInclusion::includer):
+        (WebCore::ShadowInclusion::content):
+        (WebCore::ShadowInclusion::next):
+        (WebCore::ShadowInclusion::previous):
+        (WebCore::ShadowInclusion::ShadowInclusion):
+        (WebCore::ShadowInclusion::create):
+        (WebCore::ShadowInclusionList::first):
+        (WebCore::ShadowInclusionList::last):
+        (WebCore::ShadowInclusionList::isEmpty):
+        (WebCore::ShadowInclusionSet::add):
+        (WebCore::ShadowInclusionSet::remove):
+        (WebCore::ShadowInclusionSet::isEmpty):
+        (WebCore::ShadowInclusionSet::Translator::hash):
+        (WebCore::ShadowInclusionSet::Translator::equal):
+        (WebCore::ShadowInclusionSet::Hash::hash):
+        (WebCore::ShadowInclusionSet::Hash::equal):
+        (WebCore::ShadowInclusionSet::find):
+        (WebCore::ShadowInclusionSelector::hasCandidates):
+        * dom/ShadowRoot.cpp:
+        (WebCore::ShadowRoot::includerFor):
+        (WebCore::ShadowRoot::attach):
+        (WebCore::ShadowRoot::inclusions):
+        (WebCore::ShadowRoot::ensureInclusions):
+        * dom/ShadowRoot.h:
+
+2011-07-21  Robin Qiu  <robin.qiu.dev@gmail.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=60737
+
+        ThumbPosition() in ScrollbarTheme should be ceiled before returned.
+        Otherwise, some topest/leftest content can not be shown by dragging
+        scrollbar thumb.
+
+
+        Reviewed by Antonio Gomes.
+
+        Test: scrollbars/scrollbar-drag-thumb-with-large-content.html
+
+        * platform/ScrollbarThemeComposite.cpp:
+        (WebCore::ScrollbarThemeComposite::thumbPosition):
+        * platform/qt/ScrollbarThemeQt.cpp:
+        (WebCore::ScrollbarThemeQt::thumbPosition):
+
+2011-07-21  Simon Fraser  <simon.fraser@apple.com>
+
+        GraphicsLayers in subframes can get sync'd multiple times
+        https://bugs.webkit.org/show_bug.cgi?id=52489
+
+        Reviewed by James Robinson.
+        
+        Avoid doing a 'syncCompositingState' pass on the GraphicsLayers
+        for subframes, when those GraphicsLayers are rooted in the
+        parent document.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::syncCompositingStateForThisFrame): Add a parameter
+        that contains the rootmost frame on which sync was called. This is used
+        to indicate to the compositor whether it's the root of the sync.
+        (WebCore::FrameView::syncCompositingStateIncludingSubframes): Pass the current
+        Frame in.
+        (WebCore::FrameView::paintContents): The sync is for this frame, so pass m_frame.
+        * page/FrameView.h:
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::flushPendingLayerChanges): New parameter
+        to specify whether this compositor is in the rootmost Frame being flushed.
+        We can avoid doing work if we know that flushing some ancestor frame would
+        have also traversed our GraphicsLayers.
+        * rendering/RenderLayerCompositor.h:
+        (WebCore::RenderLayerCompositor::isFlushingLayers): Make this private, since
+        callers are probably most intersted in enclosingCompositorFlushingLayers().
+
+2011-07-21  Rafael Brandao  <rafael.lobo@openbossa.org>
+
+        Local files cannot load icons.
+        https://bugs.webkit.org/show_bug.cgi?id=62459
+        
+        Previous policy only allowed favicons for pages whose protocol was part of HTTP family.
+        Changed that to allow to any url that's not empty and whose protocol is not "about".
+        Also added this check where it attempts to start loading the favicon, so it can avoid
+        wasting time downloading a resource that won't be stored and won't be used.
+
+        Reviewed by Adam Barth.
+
+        Test: manual-tests/resources/favicon-loads-for-local-files.html
+
+        * loader/icon/IconController.cpp:
+        (WebCore::IconController::startLoader): Added check to avoid to request a favicon
+        when there's no way to store it.
+        
+        * loader/icon/IconDatabase.cpp:
+        (WebCore::IconDatabase::documentCanHaveIcon): Renamed function "pageCanHaveIcon"
+        to reflect better which url we're handling.
+        
+        (WebCore::IconDatabase::synchronousIconForPageURL): Ditto.
+        (WebCore::IconDatabase::synchronousIconURLForPageURL): Ditto.
+        (WebCore::IconDatabase::retainIconForPageURL): Ditto.
+        (WebCore::IconDatabase::releaseIconForPageURL): Ditto.
+        (WebCore::IconDatabase::setIconURLForPageURL): Ditto.
+        (WebCore::IconDatabase::getOrCreatePageURLRecord): Ditto.
+        (WebCore::IconDatabase::importIconURLForPageURL): Ditto.
+        (WebCore::IconDatabase::performURLImport): Ditto.
+        * loader/icon/IconDatabase.h:
+        * loader/icon/IconDatabaseBase.h:
+        (WebCore::IconDatabaseBase::documentCanHaveIcon): Added it as virtual to replace its
+        default behavior of not allowing favicons when we have IconDatabase enabled.
+        
+        * manual-tests/resources/favicon-loads-for-local-files.html: Added.
+        * manual-tests/resources/favicon.png: Added.
+
+2011-07-21  Kulanthaivel Palanichamy  <kulanthaivel@codeaurora.org>
+
+        Fix for bug 64046 - Wrong image height in absolutely positioned div in
+        relatively positioned parent with bottom padding.
+        https://bugs.webkit.org/show_bug.cgi?id=64046
+
+        Reviewed by David Hyatt.
+
+        Test: fast/css/absolute-child-with-percent-height-inside-relative-parent.html
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::availableLogicalHeightUsing):
+
+2011-07-21  Gavin Peters  <gavinp@chromium.org>
+
+        Extend the protector of a CSS style sheet.  Because checkLoaded() can recursively delete
+        parent style elements, the protector should be extended to include the parent call.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64736
+
+        Reviewed by Simon Fraser.
+
+        Test: fast/css/css-imports-2.html
+
+        * css/CSSStyleSheet.cpp:
+        (WebCore::CSSStyleSheet::checkLoaded):
+
+2011-07-21  Kenneth Russell  <kbr@google.com>
+
+        Update webglcontextlost / webglcontextrestored delivery to match spec changes
+        https://bugs.webkit.org/show_bug.cgi?id=58621
+
+        Reviewed by James Robinson.
+
+        Updated conditions under which webglcontextrestored event is
+        delivered to be spec compliant.
+
+        * html/canvas/WebGLRenderingContext.cpp:
+        (WebCore::WebGLRenderingContext::WebGLRenderingContext):
+        (WebCore::WebGLRenderingContext::loseContext):
+        (WebCore::WebGLRenderingContext::maybeRestoreContext):
+        * html/canvas/WebGLRenderingContext.h:
+
+2011-07-21  Dave Hyatt  <hyatt@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=64975
+        Elements that have columns (e.g., column-width or column-count non-auto) and elements that have
+        column-spans establish block formatting contexts, and therefore they should not be allowing
+        child margins to collapse with their own margins.
+
+        Reviewed by Beth Dakin.
+
+        Covered by existing tests.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::MarginInfo::MarginInfo):
+
+2011-07-21  Matthew Delaney  <mdelaney@apple.com>
+
+        Add fast path for ImageBuffer::draw, Take 2.
+        https://bugs.webkit.org/show_bug.cgi?id=64535
+
+        Reviewed by Simon Fraser.
+
+        No new tests. This patch doesn't change behavior; current tests are sufficient.
+
+        * platform/graphics/GraphicsContext.cpp:
+        (WebCore::GraphicsContext::drawImage): Moved the main method version next to wrapper versions.
+
+        * platform/graphics/ImageBuffer.h:
+        1) Added BackingStoreCopy enum for choosing to copy backing store or not in copyImage().
+        2) Added copyNativeImage() behind USE(CG) - same as copyImage() but gives NativeImagePtr.
+        * platform/graphics/cg/ImageBufferCG.cpp: Added new methods described above.
+
+        * platform/graphics/GraphicsContext.h: Adding drawNativeImage() for fast draw path.
+        * platform/graphics/cg/GraphicsContextCG.cpp:
+        (WebCore::GraphicsContext::drawNativeImage): Added. Draws a nativeImagePtr into context.
+
+        * platform/graphics/Image.h: Added imageWithColorSpace behind CG platform ifdef
+        * platform/graphics/cg/ImageCG.cpp:
+        (WebCore::BitmapImage::draw): Refactored out actual image drawing code into GraphicsContext,
+        so that it can be used by more than just BitmapImage without having to copy code.
+        (WebCore::Image::imageWithColorSpace): Made into an Image class function.
+
+        Updated copyImage() to use BackingStoreCopy:
+        * platform/graphics/qt/ImageBufferQt.cpp
+        * platform/graphics/filters/FETile.cpp
+        * platform/graphics/cairo/ImageBufferCairo.cpp
+        * platform/graphics/skia/ImageBufferSkia.cpp
+        * platform/graphics/wx/ImageBufferWx.cpp
+        * platform/graphics/wince/ImageBufferWinCE.cpp
+        * svg/SVGFEImageElement.cpp
+        * svg/graphics/SVGImage.cpp
+        * html/HTMLCanvasElement.cpp
+        * html/canvas/WebGLRenderingContext.cpp
+        * rendering/svg/RenderSVGResourcePattern.cpp
+
+2011-07-21  David Kilzer  <ddkilzer@apple.com>
+
+        <http://webkit.org/b/64972> Clean up generated HTMLEntityTable.cpp output
+
+        Reviewed by Eric Seidel.
+
+        * html/parser/create-html-entity-table:
+        - Fix duplicate "EntityName" suffix on local variables (changes
+          fooSemicolonEntityNameEntityName to fooSemicolonEntityName)
+          for all 2138 symbols.
+        - Add newlines to make source file human-readable (as originally
+          intended).
+        - Add static (const) keywords to local variables that are never
+          referenced externally.
+
+2011-07-21  Mark Pilgrim  <pilgrim@chromium.org>
+
+        Remove LegacyDefaultOptionalArguments flag from FileAPI
+        https://bugs.webkit.org/show_bug.cgi?id=64539
+
+        Reviewed by Adam Barth.
+
+        No new tests, all existing tests pass.
+
+        * fileapi/Blob.idl:
+        * fileapi/DirectoryEntry.idl:
+        * fileapi/DirectoryEntrySync.idl:
+        * fileapi/DirectoryReader.idl:
+        * fileapi/EntriesCallback.idl:
+        * fileapi/Entry.idl:
+        * fileapi/EntryArray.idl:
+        * fileapi/EntryArraySync.idl:
+        * fileapi/EntryCallback.idl:
+        * fileapi/EntrySync.idl:
+        * fileapi/ErrorCallback.idl:
+        * fileapi/FileCallback.idl:
+        * fileapi/FileEntry.idl:
+        * fileapi/FileList.idl:
+        * fileapi/FileReader.idl:
+        * fileapi/FileReaderSync.idl:
+        * fileapi/FileSystemCallback.idl:
+        * fileapi/FileWriter.idl:
+        * fileapi/FileWriterCallback.idl:
+        * fileapi/FileWriterSync.idl:
+        * fileapi/MetadataCallback.idl:
+        * fileapi/WebKitBlobBuilder.idl:
+
+2011-07-21  Tony Chang  <tony@chromium.org>
+
+        sort WebCore.xcodeproj
+        https://bugs.webkit.org/show_bug.cgi?id=64901
+
+        Unreviewed, just using sort-Xcode-project-file.
+
+        * WebCore.xcodeproj/project.pbxproj:
+
+2011-07-21  Enrica Casucci  <enrica@apple.com>
+
+        Cannot click to position the caret to the right of an image with display:block style.
+        https://bugs.webkit.org/show_bug.cgi?id=64962
+        <rdar://problem/9446343>
+
+        Reviewed by David Hyatt.
+
+        Test: editing/selection/click-on-block-image.html
+
+        The current implementation of positionForPoint always returns the visible
+        position to the left of the image, if the image has a block style.
+        This patch changes the behavior for block styled images to match the behavior
+        for inline images.
+
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::positionForPoint): Modified to avoid relying entirely
+        on InlineBox to calculate the position.
+
+2011-07-21  Pavel Feldman  <pfeldman@google.com>
+
+        Not reviewed: one liner typo fix in Inspector.json.
+
+        * inspector/Inspector.json:
+
+2011-07-21  Sam Weinig  <sam@webkit.org>
+
+        CSS top margin collapses when paginating
+        https://bugs.webkit.org/show_bug.cgi?id=64906
+
+        Reviewed by David Hyatt.
+
+        * rendering/RenderBlock.cpp:
+        (WebCore::RenderBlock::collapseMargins):
+        (WebCore::RenderBlock::estimateLogicalTopPosition):
+        Update to only go down paginated path when we actually have a page height (so
+        not in the case that we are just gathering breaks) and to call the version of
+        of nextPageLogicalTop that actually returns the next page, even if we are at
+        the boundary point.
+
+        (WebCore::RenderBlock::nextPageLogicalTopExcludingBoundaryPoint):
+        (WebCore::RenderBlock::nextPageLogicalTopIncludingBoundaryPoint):
+        Split into two functions which differ in how they deal with the boundary condition.
+
+        (WebCore::RenderBlock::applyBeforeBreak):
+        (WebCore::RenderBlock::applyAfterBreak):
+        Switch to call nextPageLogicalTopIncludingBoundaryPoint.
+
+        * rendering/RenderBlock.h:
+        Add new functions declarations and comment them.
+
+2011-07-21  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: RuntimeAgent.evaluateOn should not require "return X;" syntax.
+        https://bugs.webkit.org/show_bug.cgi?id=64691
+
+        Reviewed by Yury Semikhatsky.
+
+        I'm introducing callFunctionOn that receives function declaration in order
+        to make call site syntax clear.
+
+        Test: inspector/runtime/runtime-callFunctionOn.html
+
+        * inspector/InjectedScript.cpp:
+        (WebCore::InjectedScript::callFunctionOn):
+        * inspector/InjectedScript.h:
+        * inspector/InjectedScriptSource.js:
+        (.):
+        * inspector/Inspector.json:
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::callFunctionOn):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeElement.prototype._createTooltipForNode.resolvedNode.dimensions):
+        (WebInspector.ElementsTreeElement.prototype._createTooltipForNode.resolvedNode):
+        (WebInspector.ElementsTreeElement.prototype._createTooltipForNode):
+        * inspector/front-end/PropertiesSidebarPane.js:
+        (WebInspector.PropertiesSidebarPane.prototype.update.nodeResolved.protoList):
+        (WebInspector.PropertiesSidebarPane.prototype.update.nodeResolved):
+        * inspector/front-end/RemoteObject.js:
+        (WebInspector.RemoteObject.prototype.callFunction):
+
+2011-07-21  Andrew Wason  <rectalogic@rectalogic.com>
+
+        [Qt] Adopt existing GraphicsContext3D members (part 1)
+        https://bugs.webkit.org/show_bug.cgi?id=64877
+
+        Reviewed by Noam Rosenthal.
+
+        Existing WebGL layout tests should test this.
+
+        Remove GraphicsContext3DInternal members and use the existing
+        corresponding members from GraphicsContext3D instead.
+        Move most of the GraphicsContext3DInternal constructor, destructor
+        and the reshape() method into GraphicsContext3D.
+        The GraphicsContext3D members will be needed when we adopt
+        GraphicsContext3DOpenGL.cpp.
+
+        * platform/graphics/GraphicsContext3D.h:
+        * platform/graphics/qt/GraphicsContext3DQt.cpp:
+        (WebCore::GraphicsContext3DInternal::GraphicsContext3DInternal):
+        (WebCore::GraphicsContext3DInternal::~GraphicsContext3DInternal):
+        (WebCore::GraphicsContext3DInternal::paintToTextureMapper):
+        (WebCore::GraphicsContext3DInternal::boundingRect):
+        (WebCore::GraphicsContext3DInternal::paint):
+        (WebCore::GraphicsContext3D::GraphicsContext3D):
+        (WebCore::GraphicsContext3D::~GraphicsContext3D):
+        (WebCore::GraphicsContext3D::platformTexture):
+        (WebCore::GraphicsContext3D::reshape):
+        (WebCore::GraphicsContext3D::bindFramebuffer):
+        (WebCore::GraphicsContext3D::getContextAttributes):
+        (WebCore::GraphicsContext3D::getError):
+        (WebCore::GraphicsContext3D::synthesizeGLError):
+        (WebCore::GraphicsContext3D::markLayerComposited):
+        (WebCore::GraphicsContext3D::markContextChanged):
+        (WebCore::GraphicsContext3D::layerComposited):
+        (WebCore::GraphicsContext3D::getExtensions):
+
+2011-07-21  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: [protocol] extend setBreakpointByUrl request to accept incomplete URL (predicates)
+        https://bugs.webkit.org/show_bug.cgi?id=60762
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/debugger/debugger-set-breakpoint-regex.html
+
+        * inspector/Inspector.json:
+        * inspector/InspectorDebuggerAgent.cpp:
+        (WebCore::buildObjectForBreakpointCookie):
+        (WebCore::matches):
+        (WebCore::InspectorDebuggerAgent::setBreakpointByUrl):
+        (WebCore::InspectorDebuggerAgent::didParseSource):
+        * inspector/InspectorDebuggerAgent.h:
+
+2011-07-21  Kent Tamura  <tkent@chromium.org>
+
+        REGRESSION(r88757): input[type=range] renders incorrectly in RTL context.
+        https://bugs.webkit.org/show_bug.cgi?id=64904
+
+        Reviewed by Ryosuke Niwa.
+
+        Tests: fast/forms/input-appearance-range-rtl.html
+
+        * html/shadow/SliderThumbElement.cpp:
+        (WebCore::RenderSliderThumb::layout):
+        The thumb should be positioned based on 'right' CSS property instead of 'left.'
+        (WebCore::SliderThumbElement::setPositionFromPoint):
+        The fraction should be flipped in RTL.
+
+2011-07-18  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Remove networkDataRemoved field from resource.
+        https://bugs.webkit.org/show_bug.cgi?id=64749
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkManager.prototype.requestContent):
+        (WebInspector.NetworkDispatcher.prototype._appendRedirect):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._frameNavigated):
+
+2011-07-21  Tommy Widenflycht  <tommyw@google.com>
+
+        MediaStream API: Merging MediaStreamContainer and MediaStreamList
+        https://bugs.webkit.org/show_bug.cgi?id=64794
+
+        Reviewed by Tony Gentilcore.
+
+        * GNUmakefile.list.am:
+        * dom/MediaStreamContainer.h: Removed.
+        * dom/MediaStreamList.cpp:
+        (WebCore::MediaStreamList::create):
+        (WebCore::MediaStreamList::MediaStreamList):
+        (WebCore::MediaStreamList::length):
+        (WebCore::MediaStreamList::item):
+        (WebCore::MediaStreamList::add):
+        (WebCore::MediaStreamList::remove):
+        (WebCore::MediaStreamList::contains):
+        (WebCore::MediaStreamList::get):
+        * dom/MediaStreamList.h:
+
+2011-07-20  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: always open dedicated worker inspector in a new window not a new tab
+        https://bugs.webkit.org/show_bug.cgi?id=64872
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/WorkerManager.js:
+        (WebInspector.WorkerManager.prototype.openWorkerInspector):
+
+2011-07-21  MORITA Hajime  <morrita@google.com>
+
+        [Refactoring] Shadow inclusion cache should be managed by ShadowContentSelector
+        https://bugs.webkit.org/show_bug.cgi?id=64849
+
+        Reviewed by Dimitri Glazkov.
+
+        This change is a reorg around Shadow inclusion mechanism.
+        - Moved definition of ShadowInclusion, ShadowInclusionSet and ShadowInclusionList
+          from ShadowContentElement.h to ShadowContentSelector.h, which is included
+          from smaller number of places.
+        - Moved ShadowInclusionSet from ShadowRoot to ShadowContentSelector
+        - Made ShadowContentSelector's lifetime managed by ShadowRoot
+          because ShadowInclusionSet is held by the selector.
+        - Thus, there is no longer "active" selector (ShadowContentSelector::s_currentInstance)
+          Because the selector is associated for each ShadowRoot object.
+        
+        No new tests. No behavior change.
+
+        * dom/NodeRenderingContext.cpp:
+        * dom/ShadowContentElement.cpp:
+        (WebCore::ShadowContentElement::ShadowContentElement):
+        (WebCore::ShadowContentElement::attach):
+        (WebCore::ShadowContentElement::detach):
+        * dom/ShadowContentElement.h:
+        (WebCore::ShadowContentElement::inclusions):
+        * dom/ShadowContentSelector.cpp:
+        (WebCore::ShadowInclusion::append):
+        (WebCore::ShadowInclusion::unlink):
+        (WebCore::ShadowInclusionList::ShadowInclusionList):
+        (WebCore::ShadowInclusionList::~ShadowInclusionList):
+        (WebCore::ShadowInclusionList::find):
+        (WebCore::ShadowInclusionList::clear):
+        (WebCore::ShadowInclusionList::append):
+        (WebCore::ShadowContentSelector::ShadowContentSelector):
+        (WebCore::ShadowContentSelector::~ShadowContentSelector):
+        (WebCore::ShadowContentSelector::selectInclusion):
+        (WebCore::ShadowContentSelector::unselectInclusion):
+        (WebCore::ShadowContentSelector::findInclusionFor):
+        (WebCore::ShadowContentSelector::didSelectInclusion):
+        (WebCore::ShadowContentSelector::willSelectInclusionOver):
+        * dom/ShadowContentSelector.h:
+        (WebCore::ShadowInclusion::includer):
+        (WebCore::ShadowInclusion::content):
+        (WebCore::ShadowInclusion::next):
+        (WebCore::ShadowInclusion::previous):
+        (WebCore::ShadowInclusion::ShadowInclusion):
+        (WebCore::ShadowInclusion::create):
+        (WebCore::ShadowInclusionList::first):
+        (WebCore::ShadowInclusionList::last):
+        (WebCore::ShadowInclusionList::isEmpty):
+        (WebCore::ShadowInclusionSet::add):
+        (WebCore::ShadowInclusionSet::remove):
+        (WebCore::ShadowInclusionSet::isEmpty):
+        (WebCore::ShadowInclusionSet::Translator::hash):
+        (WebCore::ShadowInclusionSet::Translator::equal):
+        (WebCore::ShadowInclusionSet::Hash::hash):
+        (WebCore::ShadowInclusionSet::Hash::equal):
+        (WebCore::ShadowInclusionSet::find):
+        (WebCore::ShadowContentSelector::hasChildren):
+        * dom/ShadowRoot.cpp:
+        (WebCore::ShadowRoot::~ShadowRoot):
+        (WebCore::ShadowRoot::includerFor):
+        (WebCore::ShadowRoot::attach):
+        (WebCore::ShadowRoot::inclusions):
+        (WebCore::ShadowRoot::ensureInclusions):
+        * dom/ShadowRoot.h:
+
+2011-07-21  Rohan McGovern  <rohan@mcgovern.id.au>
+
+        Reviewed by Noam Rosenthal.
+
+        [Qt] Qt5 Build Fix: remove useless use of qRound(int)
+        https://bugs.webkit.org/show_bug.cgi?id=64907
+
+        Rounding an integer doesn't make sense.
+        Since 2dcd3939a8bd5ff743e4c87f87b2d81b1a101467 in qtbase, this is not
+        permitted to compile.
+
+        No new tests needed.
+
+        * platform/graphics/qt/FontPlatformDataQt.cpp:
+        (WebCore::FontPlatformData::FontPlatformData): Eliminate qRound(int).
+        * platform/qt/PlatformScreenQt.cpp:
+        (WebCore::screenDepthPerComponent): Ditto.
+
+2011-07-20  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Fix a Valgrind failure caused by r91435.
+
+        * platform/ScrollableArea.cpp:
+        (WebCore::ScrollableArea::ScrollableArea):
+
+2011-07-20  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91332.
+        http://trac.webkit.org/changeset/91332
+        https://bugs.webkit.org/show_bug.cgi?id=64925
+
+        Crashes css3/images/optimize-contrast-canvas.html on safari-
+        mac,chromium-mac (Requested by mikelawther on #webkit).
+
+        * html/HTMLCanvasElement.cpp:
+        (WebCore::HTMLCanvasElement::makePresentationCopy):
+        (WebCore::HTMLCanvasElement::copiedImage):
+        * html/canvas/WebGLRenderingContext.cpp:
+        (WebCore::WebGLRenderingContext::videoFrameToImage):
+        * platform/graphics/GraphicsContext.cpp:
+        (WebCore::GraphicsContext::drawImage):
+        * platform/graphics/GraphicsContext.h:
+        * platform/graphics/Image.h:
+        * platform/graphics/ImageBuffer.h:
+        * platform/graphics/cairo/ImageBufferCairo.cpp:
+        (WebCore::ImageBuffer::copyImage):
+        * platform/graphics/cg/GraphicsContextCG.cpp:
+        * platform/graphics/cg/ImageBufferCG.cpp:
+        (WebCore::ImageBuffer::copyImage):
+        (WebCore::cgImage):
+        (WebCore::ImageBuffer::draw):
+        (WebCore::ImageBuffer::drawPattern):
+        (WebCore::ImageBuffer::clip):
+        (WebCore::ImageBuffer::toDataURL):
+        * platform/graphics/cg/ImageCG.cpp:
+        (WebCore::imageWithColorSpace):
+        (WebCore::BitmapImage::draw):
+        (WebCore::Image::drawPattern):
+        * platform/graphics/filters/FETile.cpp:
+        (WebCore::FETile::apply):
+        * platform/graphics/qt/ImageBufferQt.cpp:
+        (WebCore::ImageBuffer::copyImage):
+        (WebCore::ImageBuffer::draw):
+        (WebCore::ImageBuffer::drawPattern):
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::ImageBuffer::copyImage):
+        * platform/graphics/wince/ImageBufferWinCE.cpp:
+        (WebCore::ImageBuffer::copyImage):
+        (WebCore::ImageBuffer::draw):
+        (WebCore::ImageBuffer::drawPattern):
+        * platform/graphics/wx/ImageBufferWx.cpp:
+        (WebCore::ImageBuffer::copyImage):
+        (WebCore::ImageBuffer::draw):
+        (WebCore::ImageBuffer::drawPattern):
+        * rendering/svg/RenderSVGResourcePattern.cpp:
+        (WebCore::RenderSVGResourcePattern::applyResource):
+        * svg/SVGFEImageElement.cpp:
+        (WebCore::SVGFEImageElement::build):
+        * svg/graphics/SVGImage.cpp:
+        (WebCore::SVGImage::nativeImageForCurrentFrame):
+
+2011-07-20  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Chromium build fix after r91440.
+
+        * platform/chromium/ScrollbarThemeChromiumMac.mm:
+        (WebCore::ScrollbarThemeChromiumMac::paint):
+
+2011-07-20  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Build fix after r91435.
+
+        * platform/mac/ScrollViewMac.mm:
+        (WebCore::ScrollView::platformSetScrollbarOverlayStyle):
+
+2011-07-20  Tim Horton  <timothy_horton@apple.com>
+
+        Reviewed by Darin Adler.
+
+        Errors encountered within SVG documents should be reported to the console
+        https://bugs.webkit.org/show_bug.cgi?id=62599
+        <rdar://problem/9727074>
+
+        Add SVGLength::construct, which can be used to construct an SVGLength
+        as normal, but returns an SVGParsingError via a reference argument.
+        The function also takes another argument, which is whether or not
+        the SVGLength value is allowed to be negative. If not, an error is
+        thrown. It defaults to allowing negatives if not specified.
+
+        * GNUmakefile.list.am:
+        * svg/SVGLength.cpp:
+        (WebCore::SVGLength::construct):
+        (WebCore::SVGLength::rawValue):
+        * svg/SVGLength.h:
+        * svg/SVGElement.h:
+        * svg/SVGParsingError.h: Added.
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+
+2011-07-20  Levi Weintraub  <leviw@chromium.org>
+
+        Switch getTransformFromContainer and its uses to new layout types
+        https://bugs.webkit.org/show_bug.cgi?id=64908
+
+        Reviewed by Simon Fraser.
+
+        Switching getTransformFromContainer and its uses to use the new Layout
+        Types from strictly integer ones.
+
+        No new tests, no new functionality.
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::mapLocalToContainer):
+        * rendering/RenderInline.cpp:
+        (WebCore::RenderInline::mapLocalToContainer):
+        * rendering/RenderLayer.cpp:
+        (WebCore::RenderLayer::createLocalTransformState):
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::getTransformFromContainer):
+        * rendering/RenderObject.h:
+        * rendering/RenderView.cpp:
+        (WebCore::RenderView::mapLocalToContainer):
+        (WebCore::RenderView::mapAbsoluteToLocalPoint):
+
+2011-07-20  Tim Horton  <timothy_horton@apple.com>
+
+        Scrollbar color heuristic needs to be hooked up in WebKit1
+        https://bugs.webkit.org/show_bug.cgi?id=64220
+        <rdar://problem/9589140>
+
+        Reviewed by Darin Adler.
+
+        Store the scroller style on ScrollableArea, and recompute it whenever
+        the document or body element background color changes or the base background
+        color of the scrollview changes. Also, make sure to repaint the scrollbars
+        whenever the style changes.
+
+        No new tests, since this code is only enabled on future versions of Mac OS X.
+
+        * WebCore.exp.in:
+        * page/Frame.cpp:
+        (WebCore::Frame::getDocumentBackgroundColor):
+        * page/Frame.h:
+        * page/FrameView.cpp:
+        (WebCore::FrameView::recalculateScrollbarOverlayStyle):
+        (WebCore::FrameView::setBaseBackgroundColor):
+        (WebCore::FrameView::documentBackgroundColor): Renamed.
+        * page/FrameView.h:
+        * platform/ScrollView.cpp:
+        (WebCore::ScrollView::setScrollbarOverlayStyle):
+        * platform/ScrollView.h:
+        * platform/ScrollableArea.cpp:
+        (WebCore::ScrollableArea::setScrollbarOverlayStyle):
+        * platform/ScrollableArea.h:
+        (WebCore::ScrollableArea::scrollbarOverlayStyle):
+        * platform/ScrollbarTheme.h:
+        (WebCore::ScrollbarTheme::updateScrollbarOverlayStyle):
+        * platform/mac/ScrollViewMac.mm:
+        (WebCore::toNSScrollerKnobStyle):
+        (WebCore::ScrollView::platformSetScrollbarOverlayStyle):
+        * platform/mac/ScrollbarThemeMac.h:
+        * platform/mac/ScrollbarThemeMac.mm:
+        (WebCore::toScrollbarPainterKnobStyle):
+        (WebCore::ScrollbarThemeMac::updateScrollbarOverlayStyle):
+        (WebCore::ScrollbarThemeMac::paint):
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::styleDidChange):
+
+2011-07-20  Luke Macpherson   <macpherson@chromium.org>
+
+        Implement CSSPropertyWebkitTransformOriginZ and Origin in CSSStyleApplyProperty.
+        https://bugs.webkit.org/show_bug.cgi?id=64785
+        Note that this changes a cast from
+          computed length double -> 28 bit int -> float
+        to
+          computed length double -> float
+        I couldn't see any reason in the code that this was strictly necessary,
+        however it may have been so that X,Y,Z all have the same behavior, even though Z itself is not stored in a Length.
+
+        Reviewed by Simon Fraser.
+
+        No new tests / refactoring.
+
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-07-20  Tony Chang  <tony@chromium.org>
+
+        Remove stray reference to StyleFlexibleBoxData.h that was accidentally
+        added in r91402.
+
+        * WebCore.xcodeproj/project.pbxproj:
+
+2011-07-20  Levi Weintraub  <leviw@chromium.org>
+
+        Bring Int/Float graphics classes closer to parity
+        https://bugs.webkit.org/show_bug.cgi?id=64833
+
+        Reviewed by James Robinson.
+
+        In preparation of switching to Floating point data structures, bringing the
+        functionality and method names of the Int/Float graphics classes close together.
+
+        Also fixing some compiler errors when using Floats for layout units along the way.
+
+        No new tests, no functionality change.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::convertFromRenderer):
+        * platform/ScrollView.cpp:
+        (WebCore::ScrollView::wheelEvent):
+        * platform/ScrollView.h:
+        (WebCore::ScrollView::convertChildToSelf):
+        (WebCore::ScrollView::convertSelfToChild):
+        * platform/graphics/FloatPoint.h:
+        (WebCore::operator-): Adding a single-parameter version.
+        * platform/graphics/FloatSize.cpp:
+        (WebCore::FloatSize::isZero): Adding isZero that uses epsilon for floats.
+        * platform/graphics/FloatSize.h:
+        * platform/graphics/IntPoint.h:
+        (WebCore::IntPoint::moveBy): Renaming IntPoint version to moveBy to mirror FloatPoint.
+        * platform/graphics/RoundedRect.cpp:
+        (WebCore::RoundedRect::Radii::expand): Switching to specific templatized max.
+        * platform/graphics/filters/FilterEffect.cpp:
+        (WebCore::FilterEffect::requestedRegionOfInputImageData):
+        * rendering/RenderBlock.cpp: Moving outstanding Int* functions to Layout units.
+        (WebCore::RenderBlock::paintContinuationOutlines):
+        (WebCore::RenderBlock::logicalRectToPhysicalRect):
+        * rendering/RenderBlock.h:
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::positionForPoint):
+        * rendering/RenderTable.cpp:
+        (WebCore::RenderTable::subtractCaptionRect):
+        * rendering/RenderTable.h:
+        * rendering/RenderTableCell.cpp:
+        (WebCore::RenderTableCell::styleOrColLogicalWidth):
+        (WebCore::RenderTableCell::setOverrideSizeFromRowHeight):
+        (WebCore::RenderTableCell::paintCollapsedBorder):
+        (WebCore::RenderTableCell::paintBackgroundsBehindCell):
+        * rendering/RenderTableCell.h:
+        * rendering/RenderView.h:
+        (WebCore::RenderView::pushLayoutState):
+        (WebCore::LayoutStateMaintainer::LayoutStateMaintainer):
+        (WebCore::LayoutStateMaintainer::push):
+        * rendering/RootInlineBox.cpp:
+        (WebCore::RootInlineBox::paddedLayoutOverflowRect):
+        (WebCore::setAscentAndDescent):
+        * rendering/RootInlineBox.h:
+
+2011-07-20  Scott Graham  <scottmg@chromium.org>
+
+        mouseover reporting incorrect mouse button, when the button isn't
+        down. https://bugs.webkit.org/show_bug.cgi?id=64882
+
+        Reviewed by Eric Seidel.
+
+        Don't increment the button returned in 'which' unless the button is
+        actually down.
+
+        Test: fast/events/mouseover-button.html
+
+        * dom/MouseEvent.cpp:
+        (WebCore::MouseEvent::which):
+
+2011-07-20  Kenneth Russell  <kbr@google.com>
+
+        Add restoreContext() to WEBKIT_lose_context
+        https://bugs.webkit.org/show_bug.cgi?id=58626
+
+        Reviewed by James Robinson.
+
+        Added the restoreContext() entry point to the WEBKIT_lose_context
+        extension. Refactored and simplified the logic associated with context
+        loss and restoration.
+
+        A subsequent patch will make the delivery of the webglcontextrestored
+        event spec compliant.
+
+        * html/canvas/WebGLRenderingContext.cpp:
+        (WebCore::WebGLRenderingContext::WebGLRenderingContextRestoreTimer::fired):
+        (WebCore::WebGLRenderingContextLostCallback::WebGLRenderingContextLostCallback):
+        (WebCore::WebGLRenderingContextLostCallback::onContextLost):
+        (WebCore::WebGLRenderingContext::isContextLost):
+        (WebCore::WebGLRenderingContext::forceLostContext):
+        (WebCore::WebGLRenderingContext::forceRestoreContext):
+        (WebCore::WebGLRenderingContext::loseContext):
+        (WebCore::WebGLRenderingContext::maybeRestoreContext):
+        * html/canvas/WebGLRenderingContext.h:
+        (WebCore::WebGLRenderingContext::WebGLRenderingContextRestoreTimer::WebGLRenderingContextRestoreTimer):
+        * html/canvas/WebKitLoseContext.cpp:
+        (WebCore::WebKitLoseContext::loseContext):
+        (WebCore::WebKitLoseContext::restoreContext):
+        * html/canvas/WebKitLoseContext.h:
+        * html/canvas/WebKitLoseContext.idl:
+
+2011-07-20  Tony Chang  <tony@chromium.org>
+
+        Pass -webkit-flex() values on to RenderStyle
+        https://bugs.webkit.org/show_bug.cgi?id=64038
+
+        Reviewed by Eric Seidel.
+
+        No new tests, this just copies data to RenderStyle, which we can
+        then access when doing layout.  Tests will come with the layout
+        changes.
+
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::ApplyPropertyLength::applyValue):
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+
+2011-07-20  Daniel Bates  <dbates@rim.com>
+
+        Attempt to fix the GTK build after changeset 91396 <http://trac.webkit.org/changeset/91396>
+        (https://bugs.webkit.org/show_bug.cgi?id=64764).
+
+        * xml/parser/MarkupTokenBase.h: #include <stdio.h> in debug build for printf(3), which is used in
+        MarkupTokenBase::printString() and MarkupTokenBase::printAttrs().
+
+2011-07-19  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Add support for disabling cache in web inspector.
+        https://bugs.webkit.org/show_bug.cgi?id=64097
+
+        Reviewed by Pavel Feldman.
+
+        Tests: http/tests/inspector/network/network-disable-cache-memory.html
+               http/tests/inspector/network/network-disable-cache-xhrs.html
+
+        * English.lproj/localizedStrings.js:
+        * inspector/Inspector.json:
+        * inspector/InspectorClient.h:
+        (WebCore::InspectorClient::setCacheDisabled):
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::willSendRequest):
+        (WebCore::InspectorResourceAgent::enable):
+        (WebCore::InspectorResourceAgent::disable):
+        (WebCore::InspectorResourceAgent::setCacheDisabled):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/front-end/NetworkManager.js:
+        (WebInspector.NetworkManager.prototype.inflightResourceForURL):
+        (WebInspector.NetworkManager.prototype._cacheDisabledSettingChanged):
+        * inspector/front-end/Settings.js:
+        (WebInspector.Settings):
+        * inspector/front-end/SettingsScreen.js:
+        (WebInspector.SettingsScreen):
+
+2011-07-20  Peter Kasting  <pkasting@google.com>
+
+        Remove "const" from obviously-non-const accessors
+        https://bugs.webkit.org/show_bug.cgi?id=62302
+
+        Reviewed by Darin Adler.
+
+        No functional change, so no new tests.
+
+        * WebCore.exp.in: Adjust function names to reflect non-constness.
+        * dom/Element.cpp:
+        (WebCore::Element::cloneElementWithoutAttributesAndChildren): Not const, calls non-const function Document::createElement().
+        (WebCore::Element::scrollLeft): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Element::scrollTop): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Element::scrollWidth): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Element::scrollHeight): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Element::boundsInWindowSpace): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Element::getClientRects): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Element::getBoundingClientRect): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Element::innerText): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Element::outerText): Not const, calls newly non-const function Element::innerText().
+        * dom/Element.h:
+        * dom/Node.cpp:
+        (WebCore::Node::isContentEditable): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::Node::shouldUseInputMethod): Not const, calls newly non-const function Node::isContentEditable().
+        * dom/Node.h:
+        * dom/OptionElement.h: Virtual function OptionElement::selected() not const because HTMLOptionElement implementation is non-const.
+        * html/HTMLAnchorElement.cpp:
+        (WebCore::HTMLAnchorElement::text): Not const, calls newly non-const function Element::innerText().
+        * html/HTMLAnchorElement.h:
+        * html/HTMLAppletElement.cpp:
+        (WebCore::HTMLAppletElement::renderWidgetForJSBindings): Not const, calls non-const function RenderApplet::createWidgetIfNecessary().
+        * html/HTMLAppletElement.h:
+        * html/HTMLAreaElement.cpp:
+        (WebCore::HTMLAreaElement::imageElement): Not const, calls newly non-const function HTMLMapElement::imageElement().
+        * html/HTMLAreaElement.h:
+        * html/HTMLBodyElement.cpp:
+        (WebCore::HTMLBodyElement::scrollLeft): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::HTMLBodyElement::scrollTop): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::HTMLBodyElement::scrollHeight): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::HTMLBodyElement::scrollWidth): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        * html/HTMLBodyElement.h:
+        * html/HTMLEmbedElement.cpp:
+        (WebCore::HTMLEmbedElement::renderWidgetForJSBindings): Not const, calls non-const function Document::createElement().
+        * html/HTMLEmbedElement.h:
+        * html/HTMLFrameElementBase.cpp:
+        (WebCore::HTMLFrameElementBase::width): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::HTMLFrameElementBase::height): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        * html/HTMLFrameElementBase.h:
+        * html/HTMLImageElement.cpp:
+        (WebCore::HTMLImageElement::width): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::HTMLImageElement::height): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        * html/HTMLImageElement.h:
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::shouldUseInputMethod): Virtual function not const because Node implementation is non-const.
+        * html/HTMLInputElement.h:
+        * html/HTMLKeygenElement.cpp:
+        (WebCore::KeygenSelectElement::cloneElementWithoutAttributesAndChildren): Virtual function not const because Element implementation is non-const.
+        * html/HTMLMapElement.cpp:
+        (WebCore::HTMLMapElement::imageElement): Not const, calls non-const function Document::images().
+        * html/HTMLMapElement.h:
+        * html/HTMLObjectElement.cpp:
+        (WebCore::HTMLObjectElement::renderWidgetForJSBindings): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        * html/HTMLObjectElement.h:
+        * html/HTMLOptionElement.cpp:
+        (WebCore::HTMLOptionElement::selected): Not const, calls non-const function HTMLSelectElement::recalcListItemsIfNeeded().
+        * html/HTMLOptionElement.h:
+        * html/HTMLPlugInElement.cpp: Virtual function HTMLPlugInElement::renderWidgetForJSBindings() not const because various subclass implementations are non-const.
+        (WebCore::HTMLPlugInElement::getInstance): Not const, calls newly non-const function HTMLPlugInElement::pluginWidget().
+        (WebCore::HTMLPlugInElement::pluginWidget): Not const, calls newly non-const function HTMLPlugInElement::renderWidgetForJSBindings().
+        * html/HTMLPlugInElement.h:
+        * html/HTMLScriptElement.cpp:
+        (WebCore::HTMLScriptElement::cloneElementWithoutAttributesAndChildren): Virtual function not const because Element implementation is non-const.
+        * html/HTMLScriptElement.h:
+        * html/HTMLTextAreaElement.cpp:
+        (WebCore::HTMLTextAreaElement::shouldUseInputMethod): Virtual function not const because Node implementation is non-const.
+        * html/HTMLTextAreaElement.h:
+        * html/shadow/SliderThumbElement.h:
+        (WebCore::SliderThumbElement::cloneElementWithoutAttributesAndChildren): Virtual function not const because Element implementation is non-const.
+        * rendering/svg/SVGShadowTreeElements.cpp:
+        (WebCore::SVGShadowTreeContainerElement::cloneElementWithoutAttributesAndChildren): Virtual function not const because Element implementation is non-const.
+        * rendering/svg/SVGShadowTreeElements.h:
+        * svg/SVGAnimateElement.cpp:
+        (WebCore::SVGAnimateElement::hasValidAttributeType): Not const, calls newly non-const function SVGSMILElement::targetElement().
+        * svg/SVGAnimateElement.h:
+        * svg/SVGAnimateMotionElement.cpp:
+        (WebCore::SVGAnimateMotionElement::hasValidAttributeType): Not const, calls newly non-const function SVGSMILElement::targetElement().
+        * svg/SVGAnimateMotionElement.h:
+        * svg/SVGAnimateTransformElement.cpp:
+        (WebCore::SVGAnimateTransformElement::hasValidAttributeType): Not const, calls newly non-const function SVGSMILElement::targetElement().
+        * svg/SVGAnimateTransformElement.h:
+        * svg/SVGAnimationElement.cpp:
+        (WebCore::SVGAnimationElement::currentValuesForValuesAnimation): Not const, calls newly non-const function SVGSMILElement::targetElement().
+        * svg/SVGAnimationElement.h:
+        * svg/SVGElement.cpp:
+        (WebCore::SVGElement::accessDocumentSVGExtensions): Not const, calls non-const function Document::accessSVGExtensions().
+        (WebCore::SVGElement::boundingBox): Not const, calls newly non-const function SVGStyledLocatableElement::getBBox().
+        * svg/SVGElement.h:
+        * svg/SVGLocatable.cpp:
+        (WebCore::SVGLocatable::getBBox): Argument not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets() on argument.
+        (WebCore::SVGLocatable::computeCTM): Argument not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets() on argument.
+        (WebCore::SVGLocatable::getTransformToElement): Not const, calls newly non-const function SVGLocatable::getCTM().
+        * svg/SVGLocatable.h: Virtual functions SVGLocatable::getBBox(), SVGLocatable::getCTM(), and SVGLocatable::getScreenCTM() not const because various subclass implementations are non-const.
+        * svg/SVGScriptElement.cpp:
+        (WebCore::SVGScriptElement::cloneElementWithoutAttributesAndChildren): Virtual function not const because Element implementation is non-const.
+        * svg/SVGScriptElement.h:
+        * svg/SVGStyledElement.cpp:
+        (WebCore::SVGStyledElement::buildPendingResourcesIfNeeded): Not const, calls non-const function Document::accessSVGExtensions().
+        * svg/SVGStyledElement.h:
+        * svg/SVGStyledLocatableElement.cpp:
+        (WebCore::SVGStyledLocatableElement::getBBox): Not const, calls newly non-const static function SVGLocatable::getBBox().
+        (WebCore::SVGStyledLocatableElement::getCTM): Not const, calls newly non-const static function SVGLocatable::computeCTM().
+        (WebCore::SVGStyledLocatableElement::getScreenCTM): Not const, calls newly non-const static function SVGLocatable::computeCTM().
+        * svg/SVGStyledLocatableElement.h:
+        * svg/SVGStyledTransformableElement.cpp:
+        (WebCore::SVGStyledTransformableElement::getCTM): Not const, calls newly non-const static function SVGLocatable::computeCTM().
+        (WebCore::SVGStyledTransformableElement::getScreenCTM): Not const, calls newly non-const static function SVGLocatable::computeCTM().
+        (WebCore::SVGStyledTransformableElement::getBBox): Not const, calls newly non-const static function SVGLocatable::getBBox().
+        (WebCore::SVGStyledTransformableElement::toClipPath): Virtual function not const because SVGUseElement implementation is non-const.
+        * svg/SVGStyledTransformableElement.h:
+        * svg/SVGTextContentElement.cpp:
+        (WebCore::SVGTextContentElement::getNumberOfChars): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::SVGTextContentElement::getComputedTextLength): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::SVGTextContentElement::getSubStringLength): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::SVGTextContentElement::getStartPositionOfChar): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::SVGTextContentElement::getEndPositionOfChar): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::SVGTextContentElement::getExtentOfChar): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::SVGTextContentElement::getRotationOfChar): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::SVGTextContentElement::getCharNumAtPosition): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::SVGTextContentElement::selectSubString): Not const, calls newly non-const static function SVGTextContentElement::getNumberOfChars().
+        * svg/SVGTextContentElement.h:
+        * svg/SVGTextElement.cpp:
+        (WebCore::SVGTextElement::getBBox): Not const, calls newly non-const static function SVGLocatable::getBBox().
+        (WebCore::SVGTextElement::getCTM): Not const, calls newly non-const static function SVGLocatable::computeCTM().
+        (WebCore::SVGTextElement::getScreenCTM): Not const, calls newly non-const static function SVGLocatable::computeCTM().
+        * svg/SVGTextElement.h:
+        * svg/SVGUseElement.cpp:
+        (WebCore::SVGUseElement::instanceRoot): Not const, calls non-const function Document::updateLayoutIgnorePendingStylesheets().
+        (WebCore::isDirectReference):
+        (WebCore::SVGUseElement::toClipPath): Not const, calls non-const function Document::accessSVGExtensions().
+        * svg/SVGUseElement.h:
+        * svg/animation/SVGSMILElement.cpp:
+        (WebCore::SVGSMILElement::eventBaseFor): Not const, calls newly non-const function SVGSMILElement::targetElement().
+        (WebCore::SVGSMILElement::targetElement): Not const, calls non-const function Document::accessSVGExtensions().
+        * svg/animation/SVGSMILElement.h: Virtual function SVGSMILElement::hasValidAttributeType() not const because various subclass implementations are non-const.
+
+2011-07-20  Andy Estes  <aestes@apple.com>
+
+        Fix the Mac build after r91392.
+
+        * WebCore.xcodeproj/project.pbxproj: StyleFlexibleBoxData.h should be a
+        private forwarding header of WebCore.
+
+2011-07-20  Jeffrey Pfau  <jpfau@apple.com>
+
+        New Token class for XML
+        https://bugs.webkit.org/show_bug.cgi?id=64764
+
+        Reviewed by Adam Barth.
+
+        Refactor HTMLToken into MarkupTokenBase and add new XMLToken
+
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * html/HTMLViewSourceDocument.cpp:
+        (WebCore::HTMLViewSourceDocument::addSource):
+        * html/parser/HTMLConstructionSite.cpp:
+        (WebCore::HTMLConstructionSite::insertDoctype):
+        (WebCore::HTMLConstructionSite::insertComment):
+        (WebCore::HTMLConstructionSite::insertCommentOnDocument):
+        (WebCore::HTMLConstructionSite::insertCommentOnHTMLHtmlElement):
+        (WebCore::HTMLConstructionSite::insertSelfClosingHTMLElement):
+        (WebCore::HTMLConstructionSite::insertForeignElement):
+        (WebCore::HTMLConstructionSite::createHTMLElementFromSavedElement):
+        * html/parser/HTMLMetaCharsetParser.cpp:
+        (WebCore::HTMLMetaCharsetParser::checkForMetaCharset):
+        * html/parser/HTMLPreloadScanner.cpp:
+        (WebCore::HTMLPreloadScanner::processToken):
+        * html/parser/HTMLSourceTracker.cpp:
+        (WebCore::HTMLSourceTracker::start):
+        (WebCore::HTMLSourceTracker::sourceForToken):
+        * html/parser/HTMLToken.h:
+        (WebCore::HTMLTokenTypes::DoctypeData::DoctypeData):
+        (WebCore::HTMLToken::appendToName):
+        (WebCore::HTMLToken::name):
+        (WebCore::HTMLToken::forceQuirks):
+        (WebCore::HTMLToken::setForceQuirks):
+        (WebCore::AtomicHTMLToken::AtomicHTMLToken):
+        (WebCore::AtomicHTMLToken::type):
+        (WebCore::AtomicHTMLToken::selfClosing):
+        (WebCore::AtomicHTMLToken::characters):
+        (WebCore::AtomicHTMLToken::comment):
+        (WebCore::AtomicHTMLToken::publicIdentifier):
+        (WebCore::AtomicHTMLToken::systemIdentifier):
+        (WebCore::AtomicHTMLToken::forceQuirks):
+        (WebCore::AtomicHTMLToken::usesName):
+        (WebCore::AtomicHTMLToken::usesAttributes):
+        * html/parser/HTMLTokenizer.cpp:
+        (WebCore::HTMLTokenizer::saveEndTagNameIfNeeded):
+        (WebCore::HTMLTokenizer::flushBufferedEndTag):
+        (WebCore::HTMLTokenizer::nextToken):
+        (WebCore::HTMLTokenizer::haveBufferedCharacterToken):
+        * html/parser/HTMLTreeBuilder.cpp:
+        (WebCore::HTMLTreeBuilder::constructTreeFromToken):
+        (WebCore::HTMLTreeBuilder::processToken):
+        (WebCore::HTMLTreeBuilder::processDoctypeToken):
+        (WebCore::HTMLTreeBuilder::processFakeStartTag):
+        (WebCore::HTMLTreeBuilder::processFakeEndTag):
+        (WebCore::HTMLTreeBuilder::processFakePEndTagIfPInButtonScope):
+        (WebCore::HTMLTreeBuilder::processIsindexStartTagForInBody):
+        (WebCore::HTMLTreeBuilder::processStartTagForInBody):
+        (WebCore::HTMLTreeBuilder::processStartTagForInTable):
+        (WebCore::HTMLTreeBuilder::processStartTag):
+        (WebCore::HTMLTreeBuilder::processBodyEndTagForInBody):
+        (WebCore::HTMLTreeBuilder::processAnyOtherEndTagForInBody):
+        (WebCore::HTMLTreeBuilder::processEndTagForInTableBody):
+        (WebCore::HTMLTreeBuilder::processEndTagForInRow):
+        (WebCore::HTMLTreeBuilder::processEndTagForInCell):
+        (WebCore::HTMLTreeBuilder::processEndTagForInBody):
+        (WebCore::HTMLTreeBuilder::processEndTagForInTable):
+        (WebCore::HTMLTreeBuilder::processEndTag):
+        (WebCore::HTMLTreeBuilder::processComment):
+        (WebCore::HTMLTreeBuilder::processCharacter):
+        (WebCore::HTMLTreeBuilder::processEndOfFile):
+        (WebCore::HTMLTreeBuilder::defaultForBeforeHTML):
+        (WebCore::HTMLTreeBuilder::defaultForBeforeHead):
+        (WebCore::HTMLTreeBuilder::defaultForInHead):
+        (WebCore::HTMLTreeBuilder::defaultForInHeadNoscript):
+        (WebCore::HTMLTreeBuilder::defaultForAfterHead):
+        (WebCore::HTMLTreeBuilder::processStartTagForInHead):
+        (WebCore::HTMLTreeBuilder::processGenericRCDATAStartTag):
+        (WebCore::HTMLTreeBuilder::processGenericRawTextStartTag):
+        (WebCore::HTMLTreeBuilder::processScriptStartTag):
+        * html/parser/HTMLViewSourceParser.cpp:
+        (WebCore::HTMLViewSourceParser::updateTokenizerState):
+        * html/parser/TextDocumentParser.cpp:
+        (WebCore::TextDocumentParser::insertFakePreElement):
+        * html/parser/XSSAuditor.cpp:
+        (WebCore::XSSAuditor::filterTokenInitial):
+        (WebCore::XSSAuditor::filterTokenAfterScriptStartTag):
+        (WebCore::XSSAuditor::filterScriptToken):
+        (WebCore::XSSAuditor::filterObjectToken):
+        (WebCore::XSSAuditor::filterParamToken):
+        (WebCore::XSSAuditor::filterEmbedToken):
+        (WebCore::XSSAuditor::filterAppletToken):
+        (WebCore::XSSAuditor::filterIframeToken):
+        (WebCore::XSSAuditor::filterMetaToken):
+        (WebCore::XSSAuditor::filterBaseToken):
+        (WebCore::XSSAuditor::filterFormToken):
+        * xml/parser/MarkupTokenBase.h: Added.
+        (WebCore::DoctypeDataBase::DoctypeDataBase):
+        (WebCore::MarkupTokenBase::MarkupTokenBase):
+        (WebCore::MarkupTokenBase::~MarkupTokenBase):
+        (WebCore::MarkupTokenBase::clear):
+        (WebCore::MarkupTokenBase::isUninitialized):
+        (WebCore::MarkupTokenBase::startIndex):
+        (WebCore::MarkupTokenBase::endIndex):
+        (WebCore::MarkupTokenBase::setBaseOffset):
+        (WebCore::MarkupTokenBase::end):
+        (WebCore::MarkupTokenBase::makeEndOfFile):
+        (WebCore::MarkupTokenBase::beginStartTag):
+        (WebCore::MarkupTokenBase::beginEndTag):
+        (WebCore::MarkupTokenBase::ensureIsCharacterToken):
+        (WebCore::MarkupTokenBase::beginComment):
+        (WebCore::MarkupTokenBase::beginDOCTYPE):
+        (WebCore::MarkupTokenBase::appendToCharacter):
+        (WebCore::MarkupTokenBase::appendToComment):
+        (WebCore::MarkupTokenBase::addNewAttribute):
+        (WebCore::MarkupTokenBase::beginAttributeName):
+        (WebCore::MarkupTokenBase::endAttributeName):
+        (WebCore::MarkupTokenBase::beginAttributeValue):
+        (WebCore::MarkupTokenBase::endAttributeValue):
+        (WebCore::MarkupTokenBase::appendToAttributeName):
+        (WebCore::MarkupTokenBase::appendToAttributeValue):
+        (WebCore::MarkupTokenBase::type):
+        (WebCore::MarkupTokenBase::selfClosing):
+        (WebCore::MarkupTokenBase::setSelfClosing):
+        (WebCore::MarkupTokenBase::attributes):
+        (WebCore::MarkupTokenBase::eraseCharacters):
+        (WebCore::MarkupTokenBase::eraseValueOfAttribute):
+        (WebCore::MarkupTokenBase::characters):
+        (WebCore::MarkupTokenBase::comment):
+        (WebCore::MarkupTokenBase::publicIdentifier):
+        (WebCore::MarkupTokenBase::systemIdentifier):
+        (WebCore::MarkupTokenBase::setPublicIdentifierToEmptyString):
+        (WebCore::MarkupTokenBase::setSystemIdentifierToEmptyString):
+        (WebCore::MarkupTokenBase::appendToPublicIdentifier):
+        (WebCore::MarkupTokenBase::appendToSystemIdentifier):
+        (WebCore::MarkupTokenBase::printString):
+        (WebCore::MarkupTokenBase::printAttrs):
+        (WebCore::MarkupTokenBase::appendToName):
+        (WebCore::MarkupTokenBase::name):
+        * xml/parser/XMLToken.h: Added.
+        (WebCore::XMLToken::XMLToken):
+        (WebCore::XMLToken::clear):
+        (WebCore::XMLToken::appendToName):
+        (WebCore::XMLToken::name):
+        (WebCore::XMLToken::beginDOCTYPE):
+        (WebCore::XMLToken::beginXMLDeclaration):
+        (WebCore::XMLToken::appendToXMLVersion):
+        (WebCore::XMLToken::beginXMLEncoding):
+        (WebCore::XMLToken::appendToXMLEncoding):
+        (WebCore::XMLToken::setXMLStandalone):
+        (WebCore::XMLToken::beginProcessingInstruction):
+        (WebCore::XMLToken::appendToProcessingInstructionTarget):
+        (WebCore::XMLToken::appendToProcessingInstructionData):
+        (WebCore::XMLToken::beginCDATA):
+        (WebCore::XMLToken::appendToCDATA):
+        (WebCore::XMLToken::beginEntity):
+        (WebCore::XMLToken::print):
+        (WebCore::XMLToken::XMLDeclarationData::XMLDeclarationData):
+
+2011-07-20  Kulanthaivel Palanichamy  <kulanthaivel@codeaurora.org>
+
+        WebKit crashes on selection when documentElement is removed.
+        https://bugs.webkit.org/show_bug.cgi?id=63908
+
+        This patch adds NULL pointer validation for documentElement
+        in WebCore::startOfDocument
+
+        Reviewed by Eric Seidel.
+
+        Test: editing/selection/selection-empty-documentElement.html
+
+        * editing/visible_units.cpp:
+        (WebCore::startOfDocument):
+
+2011-07-20  Mike Reed  <reed@google.com>
+
+        [skia] use nocheck version of pixel packer when caller already has premultiplied data
+        https://bugs.webkit.org/show_bug.cgi?id=64881
+
+        Reviewed by Kenneth Russell.
+
+        No new tests. existing canvas and svg test exercise this
+
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        (WebCore::putImageData):
+
+2011-07-20  Tony Chang  <tony@chromium.org>
+
+        add new flexbox data to StyleRareNonInheritedData
+        https://bugs.webkit.org/show_bug.cgi?id=64765
+
+        Reviewed by David Hyatt.
+
+        Add placeholders for the positive and negative flex values for the
+        width and the height.  When we get to the other properties (flex-pack,
+        flex-align, etc), we'll add more to the StyleFlexibleBoxData class
+
+        No new tests, these values aren't hooked up to anything yet.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::RenderStyle):
+        (WebCore::RenderStyle::diff):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::flexboxWidthPositiveFlex):
+        (WebCore::InheritedFlags::flexboxWidthNegativeFlex):
+        (WebCore::InheritedFlags::flexboxHeightPositiveFlex):
+        (WebCore::InheritedFlags::flexboxHeightNegativeFlex):
+        (WebCore::InheritedFlags::setFlexboxWidthPositiveFlex):
+        (WebCore::InheritedFlags::setFlexboxWidthNegativeFlex):
+        (WebCore::InheritedFlags::setFlexboxHeightPositiveFlex):
+        (WebCore::InheritedFlags::setFlexboxHeightNegativeFlex):
+        (WebCore::InheritedFlags::initialFlexboxWidthPositiveFlex):
+        (WebCore::InheritedFlags::initialFlexboxWidthNegativeFlex):
+        (WebCore::InheritedFlags::initialFlexboxHeightPositiveFlex):
+        (WebCore::InheritedFlags::initialFlexboxHeightNegativeFlex):
+        * rendering/style/StyleAllInOne.cpp:
+        * rendering/style/StyleFlexibleBoxData.cpp: Added.
+        (WebCore::StyleFlexibleBoxData::StyleFlexibleBoxData):
+        (WebCore::StyleFlexibleBoxData::operator==):
+        * rendering/style/StyleFlexibleBoxData.h: Added.
+        (WebCore::StyleFlexibleBoxData::create):
+        (WebCore::StyleFlexibleBoxData::copy):
+        (WebCore::StyleFlexibleBoxData::operator!=):
+        * rendering/style/StyleRareNonInheritedData.cpp:
+        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
+        (WebCore::StyleRareNonInheritedData::operator==):
+        * rendering/style/StyleRareNonInheritedData.h:
+
+2011-07-20  Cary Clark  <caryclark@google.com>
+
+        update FontSkia to match platform context convention
+        https://bugs.webkit.org/show_bug.cgi?id=64795
+
+        Reviewed by James Robinson.
+
+        No new tests. This platform variant is not
+        built at this time.
+
+        * platform/graphics/skia/FontSkia.cpp:
+        (WebCore::Font::drawGlyphs):
+        Call makeGrContextCurrent instead of the obsolete prepareForSoftwareDraw.
+
+2011-07-20  Brian Weinstein  <bweinstein@apple.com>
+
+        Build fix after r91384. Add an ASSERT_UNSED for the timer.
+
+        * loader/cache/CachedResourceLoader.cpp:
+        (WebCore::CachedResourceLoader::garbageCollectDocumentResourcesTimerFired):
+
+2011-07-20  Tony Chang  <tony@chromium.org>
+
+        Stale pointer due to floats not removed (flexible box display)
+        https://bugs.webkit.org/show_bug.cgi?id=64603
+
+        Reviewed by David Hyatt.
+
+        Flexbox items should avoid floats.
+
+        Test: fast/flexbox/horizontal-box-float-crash.html
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::avoidsFloats):
+        * rendering/RenderBox.h:
+        (WebCore::RenderBox::isDeprecatedFlexItem):
+
+2011-07-20  Scott Graham  <scottmg@chromium.org>
+
+        Reviewed by Antti Koivisto.
+
+        REGRESSION (r39725?): Resources removed from document can not be freed
+        until the document is deleted
+        https://bugs.webkit.org/show_bug.cgi?id=61006
+
+        Upon completing a load start a Timer to iterate through
+        CachedResourceLoader's m_documentResources map to check for any items
+        that have only one reference (thus being the reference in the map
+        itself). The map should really be weak, but because the
+        CachedResourceHandle achieves bookkeeping work in addition to
+        reference counting, this is a simpler and more localized way to free
+        the used memory while maintaining the other behaviour (when
+        CachedResource is used as proxy).
+
+        No new layout tests, but with this patch the testcase at
+        https://bugs.webkit.org/attachment.cgi?id=93850 should no longer
+        consume 400MB of ram on load.
+
+        * loader/cache/CachedResource.h:
+        (WebCore::CachedResource::getHandleCount):
+        * loader/cache/CachedResourceLoader.cpp:
+        (WebCore::CachedResourceLoader::loadDone):
+        (WebCore::CachedResourceLoader::garbageCollectDocumentResources):
+        * loader/cache/CachedResourceLoader.h:
+
+2011-07-20  James Robinson  <jamesr@chromium.org>
+
+        Revert worker and WebKit2 runloops to use currentTime() for scheduling instead of the monotonic clock
+        https://bugs.webkit.org/show_bug.cgi?id=64841
+
+        Reviewed by Mark Rowe.
+
+        http://trac.webkit.org/changeset/91206 converted most of WebKit's deferred work scheduling to using the
+        monotonic clock instead of WTF::currentTime().  This broke many plugin tests on WebKit2 for reasons that are
+        unclear.  This reverts everything except for WebCore::ThreadTimers back to the previous behavior.
+
+        * workers/WorkerRunLoop.cpp:
+        (WebCore::WorkerSharedTimer::setFireInterval):
+
+2011-07-20  James Simonsen  <simonjam@chromium.org>
+
+        Refuse to run scripts inside the SVG shadow DOM
+        https://bugs.webkit.org/show_bug.cgi?id=64776
+
+        This is a rollback of r90970. The hack that was removed there was also protecting us from
+        two further bugs that have been discovered. So, the hack is going back in.
+
+        Reviewed by Tony Gentilcore.
+
+        * dom/ScriptElement.cpp:
+        (WebCore::ScriptElement::prepareScript):
+
+2011-07-20  David Levin  <levin@chromium.org>
+
+        gtk shouldn't have global variables for timers.
+        https://bugs.webkit.org/show_bug.cgi?id=64871
+
+        Reviewed by Martin Robinson.
+
+        No new functionality exposed so no new tests.
+
+        * platform/graphics/cairo/ContextShadowCairo.cpp:
+        (WebCore::scheduleScratchBufferPurge): Changed global variable to DEFINE_STATIC_LOCAL.
+        * platform/gtk/WidgetRenderingContext.cpp:
+        (WebCore::scheduleScratchBufferPurge): Ditto.
+
+2011-07-20  Gustavo Noronha Silva  <gustavo.noronha@collabora.co.uk>
+
+        [GTK] REGRESSION(r86436): does not add newlines when return is pressed with some modifiers held
+        https://bugs.webkit.org/show_bug.cgi?id=64867
+
+        Reviewed by Martin Robinson.
+
+        * platform/gtk/KeyBindingTranslator.cpp:
+        (WebCore::KeyBindingTranslator::getEditorCommandsForKeyEvent):
+        special-case enter keys so that their commands are returned
+        whatever the modifiers state.
+
+2011-07-20  Mike Reed  <reed@google.com>
+
+        [skia] disable lcd text when drawing on a transparent layer or canvas
+        https://bugs.webkit.org/show_bug.cgi?id=64873
+
+        Reviewed by Stephen White.
+
+        No new tests. canvas sites illustrate the bug. DRT disables LCD
+        so existing layouttests are not affected by this change.
+
+        * platform/graphics/skia/SkiaFontWin.cpp:
+        (WebCore::isCanvasMultiLayered):
+        (WebCore::disableTextLCD):
+        (WebCore::setupPaintForFont):
+        (WebCore::paintSkiaText):
+
+2011-07-20  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: add keyboard shortcuts to load/save operations in Timeline panel.
+        https://bugs.webkit.org/show_bug.cgi?id=64864
+
+        Export/import were renamed to save/load.
+        Ctrl|Meta-S/Ctrl|Meta-O shortcuts were added for Save and Load operations.
+        Ctrl|Meta-E shortcut toggles Record button;
+        Ctrl|Meta-Shift-F shortcut toggles short records filter button;
+        All the shortcuts were added to the shortcuts help screen.
+        There was a problem with saving empty data.
+
+        Reviewed by Yury Semikhatsky.
+
+        * English.lproj/localizedStrings.js:
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel.prototype._registerShortcuts):
+        (WebInspector.TimelinePanel.prototype._createFileSelector):
+        (WebInspector.TimelinePanel.prototype._contextMenu):
+        (WebInspector.TimelinePanel.prototype._saveToFile):
+        (WebInspector.TimelinePanel.prototype._loadFromFile):
+        (WebInspector.TimelineModel.prototype._loadNextChunk):
+        (WebInspector.TimelineModel.prototype._loadFromFile):
+        (WebInspector.TimelineModel.prototype._loadFromFile.onError):
+        (WebInspector.TimelineModel.prototype._saveToFile):
+
+2011-07-20  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Speculative build fix after r91355.
+
+        * bridge/jni/jsc/JavaInstanceJSC.cpp:
+        (JavaInstance::invokeMethod):
+
+2011-07-20  Tommy Widenflycht  <tommyw@google.com>
+
+        MediaStream API: Update the tracklists to the latest spec
+        https://bugs.webkit.org/show_bug.cgi?id=64791
+
+        Reviewed by Tony Gentilcore.
+
+        The test harness will be forthcoming very soon now, introducing tests for this.
+
+        * CMakeLists.txt:
+        * CodeGenerators.pri:
+        * DerivedSources.cpp:
+        * DerivedSources.make:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/js/JSEventTarget.cpp:
+        (WebCore::toJS):
+        * bindings/v8/V8DOMWrapper.cpp:
+        (WebCore::V8DOMWrapper::convertEventTargetToV8Object):
+        * dom/DOMAllInOne.cpp:
+        * dom/EventTarget.cpp:
+        * dom/EventTarget.h:
+        * dom/ExclusiveTrackList.cpp: Removed.
+        * dom/LocalMediaStream.cpp:
+        (WebCore::LocalMediaStream::create):
+        (WebCore::LocalMediaStream::LocalMediaStream):
+        (WebCore::LocalMediaStream::streamEnded):
+        (WebCore::LocalMediaStream::stop):
+        * dom/LocalMediaStream.h:
+        (WebCore::LocalMediaStream::isLocalMediaStream):
+        * dom/LocalMediaStream.idl:
+        * dom/MediaStream.cpp:
+        (WebCore::MediaStream::create):
+        (WebCore::MediaStream::MediaStream):
+        * dom/MediaStream.h:
+        (WebCore::MediaStream::tracks):
+        * dom/MediaStream.idl:
+        * dom/MediaStreamTrack.cpp: Copied from Source/WebCore/dom/ExclusiveTrackList.h.
+        (WebCore::MediaStreamTrack::create):
+        (WebCore::MediaStreamTrack::MediaStreamTrack):
+        (WebCore::MediaStreamTrack::~MediaStreamTrack):
+        (WebCore::MediaStreamTrack::kind):
+        (WebCore::MediaStreamTrack::label):
+        (WebCore::MediaStreamTrack::enabled):
+        (WebCore::MediaStreamTrack::setEnabled):
+        * dom/MediaStreamTrack.h: Renamed from Source/WebCore/dom/MultipleTrackList.h.
+        * dom/MediaStreamTrack.idl: Renamed from Source/WebCore/dom/ExclusiveTrackList.idl.
+        * dom/MediaStreamTrackList.cpp: Renamed from Source/WebCore/dom/ExclusiveTrackList.h.
+        (WebCore::MediaStreamTrackList::create):
+        (WebCore::MediaStreamTrackList::MediaStreamTrackList):
+        (WebCore::MediaStreamTrackList::~MediaStreamTrackList):
+        (WebCore::MediaStreamTrackList::length):
+        (WebCore::MediaStreamTrackList::item):
+        * dom/MediaStreamTrackList.h: Renamed from Source/WebCore/dom/TrackList.idl.
+        (WebCore::MediaStreamTrackList::associateStream):
+        * dom/MediaStreamTrackList.idl: Renamed from Source/WebCore/dom/MultipleTrackList.idl.
+        * dom/MultipleTrackList.cpp: Removed.
+        * dom/TrackList.cpp: Removed.
+        * dom/TrackList.h: Removed.
+        * page/MediaStreamClient.h:
+        * page/MediaStreamController.cpp:
+        (WebCore::MediaStreamController::setMediaStreamTrackEnabled):
+        (WebCore::MediaStreamController::streamGenerated):
+        * page/MediaStreamController.h:
+        * page/MediaStreamFrameController.cpp:
+        (WebCore::MediaStreamFrameController::setMediaStreamTrackEnabled):
+        (WebCore::MediaStreamFrameController::streamGenerated):
+        * page/MediaStreamFrameController.h:
+
+2011-07-20  Andrew Wason  <rectalogic@rectalogic.com>
+
+        [Qt] Make OpenGL symbol resolver transparent
+        https://bugs.webkit.org/show_bug.cgi?id=57154
+
+        Reviewed by Noam Rosenthal.
+
+        Adopting new resolver should be transparent,
+        existing tests should apply.
+
+        Adopt OpenGLShims symbol resolver from cairo for Qt.
+        Update TextureMapperGL and Qt GraphicsContext3D to use the resolver.
+
+        * WebCore.pro:
+        * platform/graphics/cairo/OpenGLShims.cpp:
+        (WebCore::getProcAddress):
+        * platform/graphics/cairo/OpenGLShims.h:
+        * platform/graphics/opengl/TextureMapperGL.cpp:
+        (WebCore::TextureMapperGL::beginPainting):
+        * platform/graphics/qt/GraphicsContext3DQt.cpp:
+        (WebCore::GraphicsContext3DInternal::GraphicsContext3DInternal):
+        (WebCore::GraphicsContext3DInternal::~GraphicsContext3DInternal):
+        (WebCore::GraphicsContext3DInternal::reshape):
+        (WebCore::GraphicsContext3DInternal::paintToTextureMapper):
+        (WebCore::GraphicsContext3DInternal::paint):
+        (WebCore::GraphicsContext3D::activeTexture):
+        (WebCore::GraphicsContext3D::attachShader):
+        (WebCore::GraphicsContext3D::getAttachedShaders):
+        (WebCore::GraphicsContext3D::bindAttribLocation):
+        (WebCore::GraphicsContext3D::bindBuffer):
+        (WebCore::GraphicsContext3D::bindFramebuffer):
+        (WebCore::GraphicsContext3D::bindRenderbuffer):
+        (WebCore::GraphicsContext3D::blendColor):
+        (WebCore::GraphicsContext3D::blendEquation):
+        (WebCore::GraphicsContext3D::blendEquationSeparate):
+        (WebCore::GraphicsContext3D::blendFuncSeparate):
+        (WebCore::GraphicsContext3D::bufferData):
+        (WebCore::GraphicsContext3D::bufferSubData):
+        (WebCore::GraphicsContext3D::checkFramebufferStatus):
+        (WebCore::GraphicsContext3D::compileShader):
+        (WebCore::GraphicsContext3D::detachShader):
+        (WebCore::GraphicsContext3D::disableVertexAttribArray):
+        (WebCore::GraphicsContext3D::enableVertexAttribArray):
+        (WebCore::GraphicsContext3D::framebufferRenderbuffer):
+        (WebCore::GraphicsContext3D::framebufferTexture2D):
+        (WebCore::GraphicsContext3D::generateMipmap):
+        (WebCore::GraphicsContext3D::getActiveAttrib):
+        (WebCore::GraphicsContext3D::getActiveUniform):
+        (WebCore::GraphicsContext3D::getAttribLocation):
+        (WebCore::GraphicsContext3D::isBuffer):
+        (WebCore::GraphicsContext3D::isFramebuffer):
+        (WebCore::GraphicsContext3D::isProgram):
+        (WebCore::GraphicsContext3D::isRenderbuffer):
+        (WebCore::GraphicsContext3D::isShader):
+        (WebCore::GraphicsContext3D::linkProgram):
+        (WebCore::GraphicsContext3D::renderbufferStorage):
+        (WebCore::GraphicsContext3D::sampleCoverage):
+        (WebCore::GraphicsContext3D::shaderSource):
+        (WebCore::GraphicsContext3D::stencilFuncSeparate):
+        (WebCore::GraphicsContext3D::stencilMaskSeparate):
+        (WebCore::GraphicsContext3D::stencilOpSeparate):
+        (WebCore::GraphicsContext3D::uniform1f):
+        (WebCore::GraphicsContext3D::uniform1fv):
+        (WebCore::GraphicsContext3D::uniform2f):
+        (WebCore::GraphicsContext3D::uniform2fv):
+        (WebCore::GraphicsContext3D::uniform3f):
+        (WebCore::GraphicsContext3D::uniform3fv):
+        (WebCore::GraphicsContext3D::uniform4f):
+        (WebCore::GraphicsContext3D::uniform4fv):
+        (WebCore::GraphicsContext3D::uniform1i):
+        (WebCore::GraphicsContext3D::uniform1iv):
+        (WebCore::GraphicsContext3D::uniform2i):
+        (WebCore::GraphicsContext3D::uniform2iv):
+        (WebCore::GraphicsContext3D::uniform3i):
+        (WebCore::GraphicsContext3D::uniform3iv):
+        (WebCore::GraphicsContext3D::uniform4i):
+        (WebCore::GraphicsContext3D::uniform4iv):
+        (WebCore::GraphicsContext3D::uniformMatrix2fv):
+        (WebCore::GraphicsContext3D::uniformMatrix3fv):
+        (WebCore::GraphicsContext3D::uniformMatrix4fv):
+        (WebCore::GraphicsContext3D::useProgram):
+        (WebCore::GraphicsContext3D::validateProgram):
+        (WebCore::GraphicsContext3D::vertexAttrib1f):
+        (WebCore::GraphicsContext3D::vertexAttrib1fv):
+        (WebCore::GraphicsContext3D::vertexAttrib2f):
+        (WebCore::GraphicsContext3D::vertexAttrib2fv):
+        (WebCore::GraphicsContext3D::vertexAttrib3f):
+        (WebCore::GraphicsContext3D::vertexAttrib3fv):
+        (WebCore::GraphicsContext3D::vertexAttrib4f):
+        (WebCore::GraphicsContext3D::vertexAttrib4fv):
+        (WebCore::GraphicsContext3D::vertexAttribPointer):
+        (WebCore::GraphicsContext3D::getBufferParameteriv):
+        (WebCore::GraphicsContext3D::getFramebufferAttachmentParameteriv):
+        (WebCore::GraphicsContext3D::getProgramiv):
+        (WebCore::GraphicsContext3D::getProgramInfoLog):
+        (WebCore::GraphicsContext3D::getRenderbufferParameteriv):
+        (WebCore::GraphicsContext3D::getShaderiv):
+        (WebCore::GraphicsContext3D::getShaderInfoLog):
+        (WebCore::GraphicsContext3D::getShaderSource):
+        (WebCore::GraphicsContext3D::getUniformfv):
+        (WebCore::GraphicsContext3D::getUniformiv):
+        (WebCore::GraphicsContext3D::getUniformLocation):
+        (WebCore::GraphicsContext3D::getVertexAttribfv):
+        (WebCore::GraphicsContext3D::getVertexAttribiv):
+        (WebCore::GraphicsContext3D::getVertexAttribOffset):
+        (WebCore::GraphicsContext3D::createBuffer):
+        (WebCore::GraphicsContext3D::createFramebuffer):
+        (WebCore::GraphicsContext3D::createProgram):
+        (WebCore::GraphicsContext3D::createRenderbuffer):
+        (WebCore::GraphicsContext3D::createShader):
+        (WebCore::GraphicsContext3D::deleteBuffer):
+        (WebCore::GraphicsContext3D::deleteFramebuffer):
+        (WebCore::GraphicsContext3D::deleteProgram):
+        (WebCore::GraphicsContext3D::deleteRenderbuffer):
+        (WebCore::GraphicsContext3D::deleteShader):
+
+2011-07-20  Steve Block  <steveblock@google.com>
+
+        [V8] JavaMethodJobject::signature() incorrectly encodes arguments of type JavaTypeString
+        https://bugs.webkit.org/show_bug.cgi?id=62389
+
+        Reviewed by Tony Gentilcore.
+
+        Covered by existing tests.
+
+        * bridge/jni/JavaMethodJobject.cpp:
+        (JavaMethodJobject::signature):
+
+2011-07-20  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: sidebar width sometimes is not restored
+        https://bugs.webkit.org/show_bug.cgi?id=64869
+
+        Make sure sidebar width is restored even if window initial size has not been set yet.
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/Panel.js:
+        (WebInspector.Panel.prototype.show):
+        (WebInspector.Panel.prototype.updateSidebarWidth):
+
+2011-07-20  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: remove dead code (WebInspector.drawLoadingPieChart)
+        https://bugs.webkit.org/show_bug.cgi?id=64868
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/inspector.js:
+
+2011-07-20  Andrey Kosyakov  <caseq@chromium.org>
+
+        Web Inspector: move Network log view to an iframe
+        https://bugs.webkit.org/show_bug.cgi?id=62006
+
+        Reviewed by Pavel Feldman.
+
+        * WebCore.gypi:
+        * WebCore.vcproj/WebCore.vcproj:
+        * inspector/front-end/ExtensionServer.js:
+        (WebInspector.ExtensionServer.prototype._onWindowMessage):
+        * inspector/front-end/IFrameView.js: Added.
+        (WebInspector.IFrameView):
+        (WebInspector.IFrameView.prototype._innerShow):
+        (WebInspector.IFrameView.prototype._innerHide):
+        (WebInspector.IFrameView.prototype.attach):
+        (WebInspector.IFrameView.prototype._attachIFrameAndInitialize):
+        (WebInspector.IFrameView.prototype.addStylesheets):
+        (WebInspector.IFrameView.prototype._setDocumentType):
+        (WebInspector.IFrameView.prototype._propagateBodyStyle):
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView):
+        (WebInspector.NetworkLogView.prototype.initializeView):
+        (WebInspector.NetworkLogView.prototype.elementsToRestoreScrollPositionsFor):
+        (WebInspector.NetworkLogView.prototype._createTable):
+        (WebInspector.NetworkLogView.prototype._updateDividersIfNeeded):
+        (WebInspector.NetworkLogView.prototype.show):
+        (WebInspector.NetworkLogView.prototype._reset):
+        (WebInspector.NetworkLogView.prototype.switchToDetailedView):
+        (WebInspector.NetworkLogView.prototype.switchToBriefView):
+        (WebInspector.NetworkLogView.prototype.get _setLargerResources):
+        (WebInspector.NetworkLogView.prototype._updateHighlightIfMatched):
+        (WebInspector.NetworkLogView.prototype.performSearch):
+        (WebInspector.NetworkLogView.prototype.searchCanceled):
+        (WebInspector.NetworkPanel):
+        (WebInspector.NetworkPanel.prototype._onSearchCountUpdated):
+        (WebInspector.NetworkDataGridNode.prototype.select):
+        * inspector/front-end/Popover.js:
+        (WebInspector.Popover.prototype._positionElement):
+        * inspector/front-end/View.js:
+        (WebInspector.View.prototype._innerShow):
+        (WebInspector.View.prototype.show):
+        (WebInspector.View.prototype._innerHide):
+        (WebInspector.View.prototype.hide):
+        * inspector/front-end/WebKit.qrc:
+        * inspector/front-end/dataGrid.css: Added.
+        * inspector/front-end/inspectorCommon.css: Added.
+        * inspector/front-end/networkLogView.css: Copied from Source/WebCore/inspector/front-end/networkPanel.css.
+
+2011-07-20  Steve Block  <steveblock@google.com>
+
+        JobjectWrapper should inherit from RefCounted rather than implementing its own ref counting
+        https://bugs.webkit.org/show_bug.cgi?id=55786
+
+        Also adds static create() method and cleans up use of data members.
+
+        Reviewed by Tony Gentilcore.
+
+        No new tests, refactoring only.
+
+        * bridge/jni/JobjectWrapper.cpp:
+        (JobjectWrapper::JobjectWrapper):
+        * bridge/jni/JobjectWrapper.h:
+        (JSC::Bindings::JobjectWrapper::create):
+        * bridge/jni/jsc/JavaArrayJSC.cpp:
+        (JavaArray::JavaArray):
+        * bridge/jni/jsc/JavaArrayJSC.h:
+        (JSC::Bindings::JavaArray::javaArray):
+        * bridge/jni/jsc/JavaFieldJSC.cpp:
+        (JavaField::JavaField):
+        (JavaField::dispatchValueFromInstance):
+        (JavaField::dispatchSetValueToInstance):
+        * bridge/jni/jsc/JavaInstanceJSC.cpp:
+        (JavaInstance::JavaInstance):
+        (JavaInstance::getClass):
+        (JavaInstance::stringValue):
+        (JavaInstance::numberValue):
+        (JavaInstance::booleanValue):
+        (JavaInstance::invokeMethod):
+        * bridge/jni/jsc/JavaInstanceJSC.h:
+        (JSC::Bindings::JavaInstance::javaInstance):
+        * bridge/jni/v8/JavaFieldJobjectV8.cpp:
+        (JavaFieldJobject::JavaFieldJobject):
+        * bridge/jni/v8/JavaInstanceJobjectV8.cpp:
+        (JavaInstanceJobject::JavaInstanceJobject):
+        * bridge/jni/v8/JavaInstanceJobjectV8.h:
+        (JSC::Bindings::JavaInstanceJobject::javaInstance):
+
+2011-07-20  Kentaro Hara  <haraken@google.com>
+
+        The value of a number input form continues to increase/decrease even if we disable the input form.
+        https://bugs.webkit.org/show_bug.cgi?id=64786
+
+        Reviewed by Kent Tamura.
+
+        The value of the number input form continues to increase/decrease in the following scenario:
+        (1) Click the spin button of the input form.
+        (2) Hook the 'mouseup' event and disable the input form.
+        (3) Enable the input form after some delay (e.g. 50ms).
+
+        What is happening above is as follows:
+        (1) When the 'mousedown' event happens, the repeating timer of the spin button starts.
+        (2) If the input form is not disabled, the repeating timer stops at the 'mouseup' event.
+        However, if the input form is disabled, the 'mouseup' event is ignored, failing to stop
+        the repeating timer.
+        (3) The value continues to increase/decrease, since the repeating timer is still working.
+
+        This patch stops the repeating timer when the input form gets disabled or readonly.
+
+        Test: fast/forms/spin-button-gets-disabled-or-readonly.html
+
+        * html/HTMLInputElement.cpp:
+        (WebCore::HTMLInputElement::parseMappedAttribute): Calls disabledAttributeChanged() when 'disabled' attribute gets changed. Calls readonlyAttributeChanged() when 'readonly' attribute gets changed.
+        * html/InputType.cpp:
+        (WebCore::InputType::disabledAttributeChanged): Stops the repeating timer and releases mouse capturing.
+        (WebCore::InputType::readonlyAttributeChanged): Ditto.
+        * html/InputType.h:
+        * html/TextFieldInputType.cpp:
+        (WebCore::TextFieldInputType::disabledAttributeChanged): Ditto.
+        (WebCore::TextFieldInputType::readonlyAttributeChanged): Ditto.
+        * html/TextFieldInputType.h:
+        * html/shadow/TextControlInnerElements.cpp:
+        (WebCore::SpinButtonElement::detach): Replased the code with releaseCapture().
+        (WebCore::SpinButtonElement::defaultEventHandler): Ditto.
+        (WebCore::SpinButtonElement::releaseCapture): Stops the repeating timer and releases mouse capturing.
+        * html/shadow/TextControlInnerElements.h:
+
+2011-07-20  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91285.
+        http://trac.webkit.org/changeset/91285
+        https://bugs.webkit.org/show_bug.cgi?id=64854
+
+        "Assertion hit in svg/custom/crash-textPath-attributes.html"
+        (Requested by mihnea on #webkit).
+
+        * rendering/RenderObjectChildList.cpp:
+        (WebCore::RenderObjectChildList::updateBeforeAfterContent):
+
+2011-07-20  Yury Semikhatsky  <yurys@chromium.org>
+
+        Web Inspector: don't send Console.enable messages in case of workers
+        https://bugs.webkit.org/show_bug.cgi?id=64853
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/inspector.js:
+
+2011-07-20  Boris Smus  <smus@chromium.org>
+
+        Add a resourceLink audit formatter to make it possible for devtools
+        extensions to link to specific lines in HTML/JS/CSS resources from the
+        audit results panel.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64315
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/AuditFormatters.js: resourceLink implementation
+        * inspector/front-end/ExtensionAPI.js: registering resourceLink FormattedValue
+
+
+2011-07-20  Kent Tamura  <tkent@chromium.org>
+
+        input type=number doesn't render correctly in rtl.
+        https://bugs.webkit.org/show_bug.cgi?id=59703
+
+        Reviewed by Ryosuke Niwa.
+
+        Test: fast/forms/input-appearance-number-rtl.html
+
+        * css/html.css:
+        (input[type="search"]::-webkit-textfield-decoration-container):
+        Set "direction: ltr;" only for type=search because we'd like to
+        respect text direction except type=search.
+        (input[x-webkit-speech][di=rtl]::-webkit-input-speech-button):
+        Remove a workaround.
+        * rendering/RenderTextControlSingleLine.cpp:
+        (WebCore::RenderTextControlSingleLine::layout):
+        Support for RTL in the spin button location adjustment.
+
+2011-07-19  Steve Lacey  <sjl@chromium.org>
+
+        [chromium] Media player controls do not fade out.
+        https://bugs.webkit.org/show_bug.cgi?id=64837
+
+        Media controls were not fading out when the mouse leaves the video
+        due to underlying changes in webkit media controls.
+        Fix was to copy missing code from MediaControlRootElement to
+        MediaControlRootElementChromium.
+
+        Reviewed by Dimitri Glazkov.
+
+        * html/shadow/MediaControlRootElementChromium.cpp:
+        (WebCore::MediaControlRootElementChromium::MediaControlRootElementChromium):
+        (WebCore::MediaControlRootElementChromium::playbackProgressed):
+        (WebCore::MediaControlRootElementChromium::containsRelatedTarget):
+        (WebCore::MediaControlRootElementChromium::defaultEventHandler):
+        * html/shadow/MediaControlRootElementChromium.h:
+
+2011-07-19  Luke Macpherson   <macpherson@chromium.org>
+
+        Implement CSSPropertyCounterIncrement and CounterReset in CSSStyleApplyProperty.
+        https://bugs.webkit.org/show_bug.cgi?id=64846
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests / refactoring only.
+
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::ApplyPropertyCounter
+        Added class to handle counter properties.
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        Initialize counter property handlers.
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        Remove old handlers.
+
+2011-07-19  Kent Tamura  <tkent@chromium.org>
+
+        REGRESSION(r89004): Video pauses and never resumes playing if scrubbed during playback.
+        https://bugs.webkit.org/show_bug.cgi?id=64314
+
+        Reviewed by Sam Weinig.
+
+        No new tests because it's hard to make a non-flaky test for this behavior.
+
+        * html/RangeInputType.cpp:
+        (WebCore::RangeInputType::handleMouseDownEvent):
+        Don't call SliderThumbElement::dragFrom() for events on the thumb.
+        * html/shadow/SliderThumbElement.cpp:
+        (WebCore::SliderThumbElement::defaultEventHandler):
+        Do not call setDefaultHandled() for mouse events in order to
+        propagate them to ancestor elements.
+
+2011-07-19  Matthew Delaney  <mdelaney@apple.com>
+
+        Add fast path for ImageBuffer::draw
+        https://bugs.webkit.org/show_bug.cgi?id=64535
+
+        Reviewed by Simon Fraser.
+
+        No new tests. This patch doesn't change behavior; current tests are sufficient.
+
+        * platform/graphics/GraphicsContext.cpp:
+        (WebCore::GraphicsContext::drawImage): Moved the main method version next to wrapper versions.
+
+        * platform/graphics/ImageBuffer.h:
+        1) Added BackingStoreCopy enum for choosing to copy backing store or not in copyImage().
+        2) Added copyNativeImage() behind USE(CG) - same as copyImage() but gives NativeImagePtr.
+        * platform/graphics/cg/ImageBufferCG.cpp: Added new methods described above.
+
+        * platform/graphics/GraphicsContext.h: Adding drawNativeImage() for fast draw path.
+        * platform/graphics/cg/GraphicsContextCG.cpp:
+        (WebCore::GraphicsContext::drawNativeImage): Added. Draws a nativeImagePtr into context.
+
+        * platform/graphics/Image.h: Added imageWithColorSpace behind CG platform ifdef
+        * platform/graphics/cg/ImageCG.cpp:
+        (WebCore::BitmapImage::draw): Refactored out actual image drawing code into GraphicsContext,
+        so that it can be used by more than just BitmapImage without having to copy code.
+        (WebCore::Image::imageWithColorSpace): Made into an Image class function.
+
+        Updated copyImage() to for BackingStoreCopy:
+        * platform/graphics/qt/ImageBufferQt.cpp
+        * platform/graphics/filters/FETile.cpp
+        * platform/graphics/cairo/ImageBufferCairo.cpp
+        * platform/graphics/skia/ImageBufferSkia.cpp
+        * platform/graphics/wx/ImageBufferWx.cpp
+        * platform/graphics/wince/ImageBufferWinCE.cpp
+        * svg/SVGFEImageElement.cpp
+        * svg/graphics/SVGImage.cpp
+        * html/HTMLCanvasElement.cpp
+        * html/canvas/WebGLRenderingContext.cpp
+        * rendering/svg/RenderSVGResourcePattern.cpp
+
+2011-07-19  Leo Yang  <leoyang.webkit@gmail.com>
+
+        SVG: Missing implementation of <altGlyphDef>, <altGlyphItem> and <glyphRef>
+        https://bugs.webkit.org/show_bug.cgi?id=60850
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVG spec: http://www.w3.org/TR/SVG/text.html#AlternateGlyphDefinitions.
+        This patch is to implement SVG <altGlyphDef>, <altGlyphItem> and <glyphRef>
+        elements for alternative glyph features.
+
+        NOTE: x, y, dx, dy, format and glyphRef attributes on <glyphRef> are not
+        honored yet, so neither are the reaction of dynamic change of them. They
+        will be honored in separated patches.
+
+        Test: svg/W3C-SVG-1.1/text-altglyph-01-b.svg
+        With this patch this test works as expected.
+
+        * CMakeLists.txt:
+        * CodeGenerators.pri:
+        * DerivedSources.cpp:
+        * DerivedSources.make:
+        * GNUmakefile.list.am:
+        * WebCore.exp.in:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/objc/DOM.mm:
+        (WebCore::createElementClassMap):
+        * bindings/objc/DOMSVG.h:
+        * page/DOMWindow.idl:
+        * svg/SVGAllInOne.cpp:
+        * svg/SVGAltGlyphDefElement.cpp: Added.
+        (WebCore::SVGAltGlyphDefElement::SVGAltGlyphDefElement):
+        (WebCore::SVGAltGlyphDefElement::create):
+        (WebCore::SVGAltGlyphDefElement::hasValidGlyphElements):
+        * svg/SVGAltGlyphDefElement.h: Added.
+        * svg/SVGAltGlyphDefElement.idl: Added.
+        * svg/SVGAltGlyphElement.cpp:
+        (WebCore::SVGAltGlyphElement::hasValidGlyphElements):
+        * svg/SVGAltGlyphElement.h:
+        * svg/SVGAltGlyphItemElement.cpp: Added.
+        (WebCore::SVGAltGlyphItemElement::SVGAltGlyphItemElement):
+        (WebCore::SVGAltGlyphItemElement::create):
+        (WebCore::SVGAltGlyphItemElement::hasValidGlyphElements):
+        * svg/SVGAltGlyphItemElement.h: Added.
+        * svg/SVGAltGlyphItemElement.idl: Added.
+        * svg/SVGFontData.cpp:
+        (WebCore::SVGFontData::applySVGGlyphSelection):
+        * svg/SVGGlyphRefElement.cpp: Added.
+        (WebCore::SVGGlyphRefElement::SVGGlyphRefElement):
+        (WebCore::SVGGlyphRefElement::create):
+        (WebCore::SVGGlyphRefElement::hasValidGlyphElement):
+        (WebCore::SVGGlyphRefElement::parseMappedAttribute):
+        (WebCore::SVGGlyphRefElement::glyphRef):
+        (WebCore::SVGGlyphRefElement::setGlyphRef):
+        (WebCore::SVGGlyphRefElement::setX):
+        (WebCore::SVGGlyphRefElement::setY):
+        (WebCore::SVGGlyphRefElement::setDx):
+        (WebCore::SVGGlyphRefElement::setDy):
+        * svg/SVGGlyphRefElement.h: Added.
+        * svg/SVGGlyphRefElement.idl: Added.
+        * svg/svgtags.in:
+
+2011-07-19  Adam Roben  <aroben@apple.com>
+
+        Remove some unused code in FormDataStreamCFNet
+
+        Rubber-stamped by Steve Falkenburg.
+
+        * platform/network/cf/FormDataStreamCFNet.cpp:
+
+2011-07-19  Simon Fraser  <simon.fraser@apple.com>
+
+        REGRESSION (r91136-r91146): 40 tests failing on Windows 7 Release (Tests)
+        https://bugs.webkit.org/show_bug.cgi?id=64808
+
+        Reviewed by Adam Roben.
+
+        Initializing m_uncommittedChanges to a non-zero value
+        caused the first call to noteLayerPropertyChanged() to
+        not call m_client->notifySyncRequired(). This resulted in
+        animations never getting committed on Windows, which broke
+        a lot of tests.
+
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::GraphicsLayerCA):
+
+2011-07-19  James Robinson  <jamesr@chromium.org>
+
+        [chromium] LayerRendererChromium shouldn't be a friend of RenderSurfaceChromium
+        https://bugs.webkit.org/show_bug.cgi?id=64834
+
+        Reviewed by Kenneth Russell.
+
+        Uses setters and getters to access RenderSurfaceChromium's private member variables instead of directly
+        accessing them via a friend declaration. This cleans up a minor code smell and will be helpful for future
+        refactoring.
+
+        Refactor only, no change in behavior.  Tested by compositing/ tests.
+
+        * platform/graphics/chromium/LayerRendererChromium.cpp:
+        (WebCore::LayerRendererChromium::updateLayers):
+        (WebCore::LayerRendererChromium::paintLayerContents):
+        (WebCore::LayerRendererChromium::drawLayers):
+        (WebCore::LayerRendererChromium::updatePropertiesAndRenderSurfaces):
+        (WebCore::LayerRendererChromium::updateCompositorResources):
+        (WebCore::LayerRendererChromium::getOffscreenLayerTexture):
+        (WebCore::LayerRendererChromium::copyOffscreenTextureToDisplay):
+        (WebCore::LayerRendererChromium::useRenderSurface):
+        (WebCore::LayerRendererChromium::drawLayer):
+        (WebCore::LayerRendererChromium::setScissorToRect):
+        * platform/graphics/chromium/RenderSurfaceChromium.cpp:
+        (WebCore::RenderSurfaceChromium::clearLayerList):
+        * platform/graphics/chromium/RenderSurfaceChromium.h:
+        (WebCore::RenderSurfaceChromium::layerList):
+        (WebCore::RenderSurfaceChromium::contentRect):
+        (WebCore::RenderSurfaceChromium::setContentRect):
+        (WebCore::RenderSurfaceChromium::drawOpacity):
+        (WebCore::RenderSurfaceChromium::setDrawOpacity):
+        (WebCore::RenderSurfaceChromium::drawTransform):
+        (WebCore::RenderSurfaceChromium::setDrawTransform):
+        (WebCore::RenderSurfaceChromium::maskLayer):
+        (WebCore::RenderSurfaceChromium::setMaskLayer):
+        (WebCore::RenderSurfaceChromium::originTransform):
+        (WebCore::RenderSurfaceChromium::setOriginTransform):
+        (WebCore::RenderSurfaceChromium::replicaDrawTransform):
+        (WebCore::RenderSurfaceChromium::setReplicaDrawTransform):
+        (WebCore::RenderSurfaceChromium::scissorRect):
+        (WebCore::RenderSurfaceChromium::setScissorRect):
+        (WebCore::RenderSurfaceChromium::skipsDraw):
+        (WebCore::RenderSurfaceChromium::setSkipsDraw):
+        (WebCore::RenderSurfaceChromium::contentsTexture):
+
+2011-07-19  Jessie Berlin  <jberlin@apple.com>
+
+        GTK + QT build fix.
+
+        Rubber-stamped by Daniel Bates and Alexey Proskuryakov.
+
+        * loader/ResourceLoader.cpp:
+        (WebCore::ResourceLoader::willSendRequest):
+        (WebCore::ResourceLoader::didSendData):
+        (WebCore::ResourceLoader::didReceiveResponse):
+        (WebCore::ResourceLoader::didReceiveData):
+        (WebCore::ResourceLoader::didFinishLoading):
+        (WebCore::ResourceLoader::didFail):
+        (WebCore::ResourceLoader::wasBlocked):
+        (WebCore::ResourceLoader::cannotShowURL):
+        (WebCore::ResourceLoader::shouldUseCredentialStorage):
+        (WebCore::ResourceLoader::willCacheResponse):
+
+2011-07-19  Chris Rogers  <crogers@google.com>
+
+        Fix web audio compile on mac port
+        https://bugs.webkit.org/show_bug.cgi?id=64836
+
+        Unreviewed build fix.
+
+        * bindings/js/JSAudioContextCustom.cpp:
+        (WebCore::JSAudioContextConstructor::constructJSAudioContext):
+        (WebCore::JSAudioContext::createBuffer):
+
+2011-07-19  Jessie Berlin  <jberlin@apple.com>
+
+        Work towards determining the cause of frequent crashes due to null frame below
+        ApplicationCacheHost::scheduleLoadFallbackResourceFromApplicationCache.
+        https://bugs.webkit.org/show_bug.cgi?id=62764
+
+        Reviewed by Alexey Proskuryakov.
+
+        Make these unexpected cases crash in the WebKit nightlies so we can gather more
+        information and potentially find a repro case.
+
+        * loader/ResourceLoader.cpp:
+        (WebCore::ResourceLoader::willSendRequest):
+        (WebCore::ResourceLoader::didSendData):
+        (WebCore::ResourceLoader::didReceiveResponse):
+        (WebCore::ResourceLoader::didReceiveData):
+        (WebCore::ResourceLoader::didFinishLoading):
+        (WebCore::ResourceLoader::didFail):
+        (WebCore::ResourceLoader::wasBlocked):
+        (WebCore::ResourceLoader::cannotShowURL):
+        (WebCore::ResourceLoader::shouldUseCredentialStorage):
+        (WebCore::ResourceLoader::willCacheResponse):
+
+2011-07-19  Dan Bernstein  <mitz@apple.com>
+
+        Nothing printed when specifying a very large maximum layout width
+        https://bugs.webkit.org/show_bug.cgi?id=64831
+
+        Reviewed by Beth Dakin.
+
+        I am not adding a test because the DumpRenderTree printing test machinery is based on PrintContext,
+        which does not exercise the code path on which this bug lies.
+
+        * page/FrameView.cpp:
+        (WebCore::FrameView::forceLayoutForPagination): Fixed an integer overflow.
+
+2011-07-19  Nate Chapin  <japhet@chromium.org>
+
+        [V8] Wait until no v8 context is on the stack before
+        cancelling pending indexed db transactions.
+        https://bugs.webkit.org/show_bug.cgi?id=64552
+
+        Reviewed by Adam Barth.
+
+        Test: storage/indexeddb/transaction-abort-with-js-recursion.html
+
+        * bindings/v8/V8Proxy.cpp:
+        (WebCore::V8Proxy::didLeaveScriptContext):
+
+2011-07-19  MORITA Hajime  <morrita@google.com>
+
+        Crash in CompositeEditCommand::replaceTextInNodePreservingMarkers.
+        https://bugs.webkit.org/show_bug.cgi?id=64738
+
+        Reviewed by Ryosuke Niwa.
+
+        Test: editing/undo/replace-text-in-node-preserving-markers-crash.html
+
+        * editing/CompositeEditCommand.cpp:
+        (WebCore::copyMarkers):
+        (WebCore::CompositeEditCommand::replaceTextInNodePreservingMarkers):
+
+2011-07-19  Mike West  <mkwst@chromium.org>
+
+        Sending a `Ping-From` header for cross-origin pings from non-HTTPS documents.
+        https://bugs.webkit.org/show_bug.cgi?id=64789
+
+        Also a drive-by cleanup of whitespace.
+
+        Reviewed by Nate Chapin.
+
+        * loader/PingLoader.cpp:
+        (WebCore::PingLoader::loadImage):
+        (WebCore::PingLoader::sendPing):
+
+2011-07-15  Luke Zarko  <lukezarko@gmail.com>
+
+       Bring V8's SerializedScriptValue implementation up to date.
+
+        https://bugs.webkit.org/show_bug.cgi?id=63481
+
+        Reviewed by David Levin.
+        
+        The HTML5 Structured Clone algorithm (http://www.whatwg.org/specs/web-apps/current-work/multipage/urls.html#safe-passing-of-structured-data) has been updated since the V8 version of SerializedScriptValue was first implemented. This patch aims to bring this implementation up to date. It:
+        
+        - Introduces the new HTML5 DOM error codes for TIMEOUT_ERR, INVALID_NODE_TYPE_ERR, DATA_CLONE_ERR
+        - Handles cyclic structures and equality of reference preservation for cloned values
+        - Allows DataViews to be constructed on the native side using the existing wrapper techniques
+        - Amends tests and introduces new ones to check for correctness (the bulk of the patch)
+        - Tolerates the old version of the serialized object format
+        
+        The patch permits the cloning of JavaScript typed arrays. This functionality is in active use already and was supported (somewhat inefficiently) by the existing code through an artifact of implementation.
+
+        Tests: fast/dom/Window/window-postmessage-clone-deep-array.html
+               fast/dom/Window/window-postmessage-clone-really-deep-array.html
+               fast/dom/Window/window-postmessage-clone.html
+               fast/canvas/webgl/array-message-passing.html
+
+        * bindings/v8/SerializedScriptValue.cpp:
+        (WebCore::V8ObjectMap::Writer::writeVersion):
+        (WebCore::V8ObjectMap::Writer::writeArrayBuffer):
+        (WebCore::V8ObjectMap::Writer::writeArrayBufferView):
+        (WebCore::V8ObjectMap::Writer::writeObjectReference):
+        (WebCore::V8ObjectMap::Writer::writeReferenceCount):
+        (WebCore::V8ObjectMap::Writer::writeGenerateFreshObject):
+        (WebCore::V8ObjectMap::Writer::writeGenerateFreshArray):
+        (WebCore::V8ObjectMap::Writer::doWriteArrayBuffer):
+        (WebCore::V8ObjectMap::Serializer::Serializer):
+        (WebCore::V8ObjectMap::Serializer::serialize):
+        (WebCore::V8ObjectMap::Serializer::StateBase::execDepth):
+        (WebCore::V8ObjectMap::Serializer::AbstractObjectState::AbstractObjectState):
+        (WebCore::V8ObjectMap::Serializer::AbstractObjectState::advance):
+        (WebCore::V8ObjectMap::Serializer::AbstractObjectState::execDepth):
+        (WebCore::V8ObjectMap::Serializer::execDepth):
+        (WebCore::V8ObjectMap::Serializer::push):
+        (WebCore::V8ObjectMap::Serializer::pop):
+        (WebCore::V8ObjectMap::Serializer::handleError):
+        (WebCore::V8ObjectMap::Serializer::writeAndGreyArrayBufferView):
+        (WebCore::V8ObjectMap::Serializer::writeArrayBuffer):
+        (WebCore::V8ObjectMap::Serializer::greyObject):
+        (WebCore::V8ObjectMap::Serializer::doSerialize):
+        (WebCore::V8ObjectMap::Reader::Reader):
+        (WebCore::V8ObjectMap::Reader::read):
+        (WebCore::V8ObjectMap::Reader::readVersion):
+        (WebCore::V8ObjectMap::Reader::setVersion):
+        (WebCore::V8ObjectMap::Reader::undoReadTag):
+        (WebCore::V8ObjectMap::Reader::readArrayBufferViewSubTag):
+        (WebCore::V8ObjectMap::Reader::doReadArrayBuffer):
+        (WebCore::V8ObjectMap::Reader::readArrayBuffer):
+        (WebCore::V8ObjectMap::Reader::readArrayBufferView):
+        (WebCore::V8ObjectMap::Deserializer::Deserializer):
+        (WebCore::V8ObjectMap::Deserializer::deserialize):
+        (WebCore::V8ObjectMap::Deserializer::newArray):
+        (WebCore::V8ObjectMap::Deserializer::consumeTopOfStack):
+        (WebCore::V8ObjectMap::Deserializer::completeArray):
+        (WebCore::V8ObjectMap::Deserializer::newObject):
+        (WebCore::V8ObjectMap::Deserializer::completeObject):
+        (WebCore::V8ObjectMap::Deserializer::completeSparseArray):
+        (WebCore::V8ObjectMap::Deserializer::pushObjectReference):
+        (WebCore::V8ObjectMap::Deserializer::tryGetObjectFromObjectReference):
+        (WebCore::V8ObjectMap::Deserializer::objectReferenceCount):
+        (WebCore::V8ObjectMap::Deserializer::openComposite):
+        (WebCore::V8ObjectMap::Deserializer::closeComposite):
+        (WebCore::SerializedScriptValue::SerializedScriptValue):
+        * bindings/v8/V8Binding.cpp:
+        (WebCore::isHostObject):
+        * bindings/v8/V8Binding.h:
+        * bindings/v8/custom/V8DataViewCustom.cpp:
+        (WebCore::V8DataView::constructorCallback):
+        * dom/DOMCoreException.idl:
+        * dom/ExceptionCode.cpp:
+        * dom/ExceptionCode.h:
+        * html/canvas/ArrayBuffer.cpp:
+        (WebCore::ArrayBuffer::create):
+        * html/canvas/ArrayBuffer.h:
+        * html/canvas/DataView.cpp:
+        (WebCore::DataView::create):
+        * html/canvas/DataView.h:
+
+2011-07-19  Simon Fraser  <simon.fraser@apple.com>
+
+        Possible recursion in GraphicsLayerCA::updateGeometry()
+        https://bugs.webkit.org/show_bug.cgi?id=64815
+
+        Reviewed by Sam Weinig.
+        
+        It was possible to recurse via updateGeometry/swapFromOrToTiledLayer/
+        updateContentsScale because updateGeometry() and updateContentsScale()
+        used different sizes; updateGeometry() used the scaled size, while
+        updateContentsScale() used the unscaled size.
+        
+        Always use the unscaled size; the scaled size will be at most a couple
+        of pixels bigger, and our threshold is not close to the max texture
+        size limit, so using the slightly smaller size is OK.
+
+        Test: compositing/scaling/tiled-layer-recursion.html
+
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::updateGeometry):
+        (WebCore::GraphicsLayerCA::updateLayerDrawsContent):
+        (WebCore::GraphicsLayerCA::updateContentsScale):
+        (WebCore::GraphicsLayerCA::requiresTiledLayer):
+        * platform/graphics/ca/GraphicsLayerCA.h:
+
+2011-07-19  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [CSSRegions]Parse -webkit-region-overflow property
+        https://bugs.webkit.org/show_bug.cgi?id=64444
+
+        Reviewed by David Hyatt.
+
+        Test: fast/regions/webkit-region-overflow-parsing.html
+
+        * css/CSSComputedStyleDeclaration.cpp:
+        (WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue):
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValue):
+        * css/CSSPrimitiveValueMappings.h:
+        (WebCore::CSSPrimitiveValue::CSSPrimitiveValue):
+        (WebCore::CSSPrimitiveValue::operator RegionOverflow):
+        * css/CSSPropertyNames.in:
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+        * css/CSSValueKeywords.in:
+        * rendering/style/RenderStyle.cpp:
+        (WebCore::RenderStyle::diff):
+        * rendering/style/RenderStyle.h:
+        (WebCore::InheritedFlags::regionOverflow):
+        (WebCore::InheritedFlags::setRegionOverflow):
+        (WebCore::InheritedFlags::initialRegionOverflow):
+        * rendering/style/RenderStyleConstants.h:
+        * rendering/style/StyleRareNonInheritedData.cpp:
+        (WebCore::StyleRareNonInheritedData::StyleRareNonInheritedData):
+        (WebCore::StyleRareNonInheritedData::operator==):
+        * rendering/style/StyleRareNonInheritedData.h:
+
+2011-07-19  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        hover then un-hover makes state change
+        https://bugs.webkit.org/show_bug.cgi?id=56401
+
+        When a 'before' pseudo-element is re-added, we should check whether the insertion point is an anonymous
+        block with inline children. If it is, then we should change the insertion point to the first child of the
+        anonymous block, otherwise the 'before' pseudo-element ends up in a different block.
+
+        Reviewed by David Hyatt.
+
+        Test: fast/dynamic/hover-before-position-after-style-change.html
+
+        * rendering/RenderObjectChildList.cpp:
+        (WebCore::RenderObjectChildList::updateBeforeAfterContent):
+
+2011-07-19  Luke Macpherson   <macpherson@chromium.org>
+
+        Implement CSSPropertyWebkitPerspectiveOrigin in CSSStyleApplyProperty.
+        https://bugs.webkit.org/show_bug.cgi?id=64784
+
+        Reviewed by Simon Fraser.
+
+        No new tests / refactoring.
+
+        * css/CSSStyleApplyProperty.cpp:
+        (WebCore::CSSStyleApplyProperty::CSSStyleApplyProperty):
+        * css/CSSStyleSelector.cpp:
+        (WebCore::CSSStyleSelector::applyProperty):
+
+2011-07-19  Chris Rogers  <crogers@google.com>
+
+        Implement WaveShaperNode for Web Audio API
+        https://bugs.webkit.org/show_bug.cgi?id=64644
+
+        Reviewed by Kenneth Russell.
+        
+        No new tests since audio API is not yet implemented.
+
+        * DerivedSources.make:
+        * WebCore.gypi:
+        * WebCore.xcodeproj/project.pbxproj:
+        * bindings/js/JSWaveShaperNodeCustom.cpp: Added.
+        (WebCore::JSWaveShaperNode::setCurve):
+        * webaudio/AudioContext.cpp:
+        (WebCore::AudioContext::createWaveShaper):
+        * webaudio/AudioContext.h:
+        * webaudio/AudioContext.idl:
+        * webaudio/AudioNode.h:
+        * webaudio/WaveShaperDSPKernel.cpp: Added.
+        (WebCore::WaveShaperDSPKernel::process):
+        * webaudio/WaveShaperDSPKernel.h: Added.
+        (WebCore::WaveShaperDSPKernel::WaveShaperDSPKernel):
+        (WebCore::WaveShaperDSPKernel::reset):
+        (WebCore::WaveShaperDSPKernel::waveShaperProcessor):
+        * webaudio/WaveShaperNode.cpp: Added.
+        (WebCore::WaveShaperNode::WaveShaperNode):
+        (WebCore::WaveShaperNode::setCurve):
+        (WebCore::WaveShaperNode::curve):
+        * webaudio/WaveShaperNode.h: Added.
+        (WebCore::WaveShaperNode::create):
+        (WebCore::WaveShaperNode::waveShaperProcessor):
+        * webaudio/WaveShaperNode.idl: Added.
+        * webaudio/WaveShaperProcessor.cpp: Added.
+        (WebCore::WaveShaperProcessor::WaveShaperProcessor):
+        (WebCore::WaveShaperProcessor::~WaveShaperProcessor):
+        (WebCore::WaveShaperProcessor::createKernel):
+        (WebCore::WaveShaperProcessor::setCurve):
+        (WebCore::WaveShaperProcessor::process):
+        * webaudio/WaveShaperProcessor.h: Added.
+        (WebCore::WaveShaperProcessor::curve):
+
+2011-07-19  Robert Hogan  <robert@webkit.org>
+
+        REGRESSION: Incorrect layout at recline-online.com
+        https://bugs.webkit.org/show_bug.cgi?id=64030
+
+        Reviewed by David Hyatt.
+
+        http://trac.webkit.org/changeset/68362 dropped the check for cases
+        where the render box is floating or inline. When the box is left or right
+        aligned it is considered to be floating and needs to its margins set appropriately.
+
+        Test: fast/table/align-right-within-left-aligned-div.html
+              created by Dominic Cooney <dominicc@chromium.org>
+
+        * rendering/RenderBox.cpp:
+        (WebCore::RenderBox::computeInlineDirectionMargins):
+
+2011-07-19  Abhishek Arya  <inferno@chromium.org>
+
+        Crash when removing unrenderered nodes in replacement fragment.
+        https://bugs.webkit.org/show_bug.cgi?id=64801
+
+        Reviewed by Ryosuke Niwa.
+
+        Test: editing/pasteboard/replacement-fragment-remove-unrendered-node-crash.html
+
+        * editing/ReplaceSelectionCommand.cpp:
+        (WebCore::ReplacementFragment::removeUnrenderedNodes):
+
+2011-07-19  Rob Buis  <rbuis@rim.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=64673
+        REGRESSION (Safari 5.0.5 - ToT): crash in SVG test http://dev.w3.org/SVG/profiles/1.1F2/test/harness/htmlObjectApproved/styling-pres-02-f.html
+
+        Reviewed by Nikolas Zimmermann.
+
+        Prevent calling back to the owning SVGTRefElement upon handling DOMSubtreeModified events.
+
+        Test: svg/W3C-SVG-1.1-SE/styling-pres-02-f.svg
+
+        * svg/SVGTRefElement.cpp:
+        (WebCore::SubtreeModificationEventListener::handleEvent):
+
+2011-07-19  Tony Chang  <tony@chromium.org>
+
+        use more specific types in CSSFlexValue
+        https://bugs.webkit.org/show_bug.cgi?id=64763
+
+        Reviewed by Ojan Vafai.
+
+        No new tests because no change in functionality.
+
+        * css/CSSFlexValue.h:
+        (WebCore::CSSFlexValue::create):
+        (WebCore::CSSFlexValue::isFlexValue): Make it possible to tell if
+            we're a flex value or not.  Will be needed when we're copying
+            values to RenderStyle.
+        (WebCore::CSSFlexValue::positiveFlex): Use floats for positive and
+            negative flex because in the render code, we use floats.
+        (WebCore::CSSFlexValue::negativeFlex): Add accessors for these since
+            we'll need it when reading the flex values.
+        (WebCore::CSSFlexValue::preferredSize):
+        (WebCore::CSSFlexValue::CSSFlexValue):
+        * css/CSSParser.cpp:
+        (WebCore::CSSParser::parseValidPrimitive): Make the type more
+            specific.
+        (WebCore::CSSParser::parseFlex):
+        * css/CSSParser.h:
+        * css/CSSValue.h:
+        (WebCore::CSSValue::isFlexValue):
+
+2011-07-19  Chris Fleizach  <cfleizach@apple.com>
+
+        If the control associated with a <label> is hidden, the label is also hidden (incorrectly)
+        https://bugs.webkit.org/show_bug.cgi?id=64752
+
+        Reviewed by Darin Adler.
+
+        Test: platform/mac/accessibility/label-element-with-hidden-control.html
+
+        * accessibility/AccessibilityRenderObject.cpp:
+        (WebCore::AccessibilityRenderObject::exposesTitleUIElement):
+
+2011-07-19  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Backend should provide network resource identifiers that are unique across navigation.
+        https://bugs.webkit.org/show_bug.cgi?id=64746
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/ConsoleMessage.cpp:
+        (WebCore::ConsoleMessage::ConsoleMessage):
+        (WebCore::ConsoleMessage::addToFrontend):
+        * inspector/ConsoleMessage.h:
+        * inspector/IdentifiersFactory.cpp:
+        (WebCore::IdentifiersFactory::createIdentifier):
+        (WebCore::IdentifiersFactory::resourceId):
+        (WebCore::IdentifiersFactory::addProcessIdPrefixTo):
+        * inspector/IdentifiersFactory.h:
+        * inspector/Inspector.json:
+        * inspector/InspectorConsoleAgent.cpp:
+        (WebCore::InspectorConsoleAgent::didReceiveResponse):
+        (WebCore::InspectorConsoleAgent::didFailLoading):
+        * inspector/InspectorPageAgent.h:
+        * inspector/InspectorResourceAgent.cpp:
+        (WebCore::InspectorResourceAgent::willSendRequest):
+        (WebCore::InspectorResourceAgent::markResourceAsCached):
+        (WebCore::InspectorResourceAgent::didReceiveResponse):
+        (WebCore::InspectorResourceAgent::didReceiveData):
+        (WebCore::InspectorResourceAgent::didFinishLoading):
+        (WebCore::InspectorResourceAgent::didFailLoading):
+        (WebCore::InspectorResourceAgent::didLoadResourceFromMemoryCache):
+        (WebCore::InspectorResourceAgent::setInitialScriptContent):
+        (WebCore::InspectorResourceAgent::setInitialXHRContent):
+        (WebCore::InspectorResourceAgent::didReceiveXHRResponse):
+        (WebCore::InspectorResourceAgent::didCreateWebSocket):
+        (WebCore::InspectorResourceAgent::willSendWebSocketHandshakeRequest):
+        (WebCore::InspectorResourceAgent::didReceiveWebSocketHandshakeResponse):
+        (WebCore::InspectorResourceAgent::didCloseWebSocket):
+        (WebCore::InspectorResourceAgent::getResourceContent):
+        * inspector/InspectorResourceAgent.h:
+        * inspector/InspectorTimelineAgent.cpp:
+        (WebCore::InspectorTimelineAgent::willSendResourceRequest):
+        (WebCore::InspectorTimelineAgent::willReceiveResourceData):
+        (WebCore::InspectorTimelineAgent::willReceiveResourceResponse):
+        (WebCore::InspectorTimelineAgent::didFinishLoadingResource):
+        * inspector/NetworkResourcesData.cpp:
+        (WebCore::NetworkResourcesData::ResourceData::ResourceData):
+        (WebCore::NetworkResourcesData::resourceCreated):
+        (WebCore::NetworkResourcesData::responseReceived):
+        (WebCore::NetworkResourcesData::setResourceType):
+        (WebCore::NetworkResourcesData::resourceType):
+        (WebCore::NetworkResourcesData::setResourceContent):
+        (WebCore::NetworkResourcesData::maybeAddResourceData):
+        (WebCore::NetworkResourcesData::maybeDecodeDataToContent):
+        (WebCore::NetworkResourcesData::addCachedResource):
+        (WebCore::NetworkResourcesData::addResourceSharedBuffer):
+        (WebCore::NetworkResourcesData::data):
+        (WebCore::NetworkResourcesData::clear):
+        (WebCore::NetworkResourcesData::ensureNoDataForResourceId):
+        (WebCore::NetworkResourcesData::ensureFreeSpace):
+        * inspector/NetworkResourcesData.h:
+        (WebCore::NetworkResourcesData::ResourceData::resourceId):
+        * inspector/TimelineRecordFactory.cpp:
+        (WebCore::TimelineRecordFactory::createResourceSendRequestData):
+        (WebCore::TimelineRecordFactory::createResourceReceiveResponseData):
+        (WebCore::TimelineRecordFactory::createResourceFinishData):
+        (WebCore::TimelineRecordFactory::createReceiveResourceData):
+        * inspector/TimelineRecordFactory.h:
+
+2011-07-19  Jessie Berlin  <jberlin@apple.com>
+
+        Fix assertion failure seen in plugins/return-npobject.html on Windows XP Debug bots.
+
+        Rubber-stamped by Adam Roben.
+
+        * loader/ResourceLoader.cpp:
+        (WebCore::ResourceLoader::didReceiveData):
+        It is possible for a subclass to cancel the load from within didReceiveData, which would
+        set m_documentLoader to 0.
+        Remove the assertion I added that the DocumentLoader's frame is non-null.
+
+2011-07-19  Steve Block  <steveblock@google.com>
+
+        REGRESSION (r82194): jvalueToJavaValue() does not correctly set length of String property
+        https://bugs.webkit.org/show_bug.cgi?id=64730
+
+        Reviewed by Alexey Proskuryakov.
+
+        Covered by existing tests.
+
+        * bridge/jni/v8/JNIUtilityPrivate.cpp:
+        (JSC::Bindings::jvalueToJavaValue):
+
+2011-07-19  Vitaly Repeshko  <vitalyr@chromium.org>
+
+        [V8] Don't put CSSRuleLists in object groups.
+        https://bugs.webkit.org/show_bug.cgi?id=64798
+
+        Reviewed by Pavel Feldman.
+
+        Retention of CSSRuleLists should be implemented using hidden
+        references from holder objects. By putting lists in groups we
+        artificially extend their lifetimes much more than necessary.
+
+        * bindings/v8/V8GCController.cpp:
+        (WebCore::GrouperVisitor::visitDOMWrapper):
+
+2011-07-19  Gyuyoung Kim  <gyuyoung.kim@samsung.com>
+
+        [EFL] Add ewk_network.cpp|h files.
+        https://bugs.webkit.org/show_bug.cgi?id=63315
+
+        Enable setOnLine(bool) on EFL port as well as Android and Chromium.
+
+        Reviewed by Antonio Gomes.
+
+        * platform/network/NetworkStateNotifier.cpp:
+        * platform/network/NetworkStateNotifier.h:
+
+2011-07-19  Ilya Tikhonovsky  <loislo@chromium.org>
+
+        Web Inspector: implement import/export for timeline data.
+        https://bugs.webkit.org/show_bug.cgi?id=64601
+
+        Reviewed by Yury Semikhatsky.
+
+        Test: inspector/timeline/timeline-load.html
+
+        * English.lproj/localizedStrings.js:
+        * inspector/InspectorFrontendHost.cpp:
+        (WebCore::FrontendMenuProvider::contextMenuItemSelected):
+        * inspector/front-end/TimelinePanel.js:
+        (WebInspector.TimelinePanel):
+        (WebInspector.TimelinePanel.prototype._createFileSelector):
+        (WebInspector.TimelinePanel.prototype._contextMenu):
+        (WebInspector.TimelinePanel.prototype._exportToFile):
+        (WebInspector.TimelinePanel.prototype._importFromFile):
+        (WebInspector.TimelinePanel.prototype._addRecordToTimeline):
+        (WebInspector.TimelinePanel.prototype._clearPanel):
+        (WebInspector.TimelineModel):
+        (WebInspector.TimelineModel.prototype._addRecord):
+        (WebInspector.TimelineModel.prototype._importNextChunk):
+        (WebInspector.TimelineModel.prototype._importFromFile):
+        (WebInspector.TimelineModel.prototype._importFromFile.onError):
+        (WebInspector.TimelineModel.prototype._exportToFile):
+        (WebInspector.TimelineModel.prototype._reset):
+        * inspector/front-end/utilities.js:
+        ():
+
+2011-07-19  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Rename agentIdentifierPrefix to processId, move out from page agent and make static.
+        https://bugs.webkit.org/show_bug.cgi?id=64729
+
+        Reviewed by Pavel Feldman.
+
+        * CMakeLists.txt:
+        * GNUmakefile.list.am:
+        * WebCore.gypi:
+        * WebCore.pro:
+        * WebCore.vcproj/WebCore.vcproj:
+        * WebCore.xcodeproj/project.pbxproj:
+        * inspector/IdentifiersFactory.cpp: Added.
+        (WebCore::IdentifiersFactory::createIdentifier):
+        * inspector/IdentifiersFactory.h: Added.
+        (WebCore::IdentifiersFactory::setProcessId):
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::setProcessId):
+        * inspector/InspectorController.h:
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::InspectorPageAgent::frameId):
+        (WebCore::InspectorPageAgent::loaderId):
+        * inspector/InspectorPageAgent.h:
+
+2011-07-19  Jeremy Moskovich  <jeremy@chromium.org>
+
+        Fix microphone icon placement in speech input control for dir=rtl.
+        https://bugs.webkit.org/show_bug.cgi?id=64668
+
+        Reviewed by Dimitri Glazkov.
+
+        Modify default stylesheet to propagate dir=rtl from the outer input
+        control to the shadow DOM container.  This makes the microphone
+        icon appear on the left for dir=rtl, which is the desired behavior.
+
+        Test: fast/speech/speech-bidi-rendering.html
+
+        * css/html.css:
+        (input[x-webkit-speech][dir=rtl]::-webkit-textfield-decoration-container):
+
+2011-07-19  Raphael Kubo da Costa  <kubo@profusion.mobi>
+
+        [EFL] Account for the invalid pointer case in WebCore::screenRect()
+        https://bugs.webkit.org/show_bug.cgi?id=64543
+
+        Reviewed by Antonio Gomes.
+
+        Fix a regression introduced in r88245: it assumes the pointer passed
+        to screenRect() is always valid.
+        fast/frames/crash-removed-iframe.html proves this is not always true,
+        so we need to do some sanity check on the pointer before using it.
+        No new tests as this has been caught by the current test suite.
+
+        * platform/efl/PlatformScreenEfl.cpp:
+        (WebCore::screenRect):
+
+2011-07-19  Robin Qiu  <robin.qiu@torchmobile.com.cn>
+
+        Reviewed by Antonio Gomes.
+
+        ScrollBar should initialize current position in constructor.
+        https://bugs.webkit.org/show_bug.cgi?id=39284
+
+        When ScrollBar is created, m_currentPos should be initialized to
+        m_scrollableArea's current scrollPosition. Because scrollbars may
+        be created after the content of m_scrollableArea has been scrolled.
+
+        Test: scrollbars/scrollbar-initial-position.html
+
+        * platform/Scrollbar.cpp:
+        (WebCore::Scrollbar::Scrollbar):
+
+2011-07-19  Yuta Kitamura  <yutak@chromium.org>
+
+        WebSocket: Implement hybi framing
+        https://bugs.webkit.org/show_bug.cgi?id=64522
+
+        Reviewed by Kent Tamura.
+
+        Implement WebSocket framing protocol which is mainly described in
+        <http://tools.ietf.org/html/draft-ietf-hybi-thewebsocketprotocol-10#section-4> and
+        <http://tools.ietf.org/html/draft-ietf-hybi-thewebsocketprotocol-10#section-6>.
+
+        Hybi protocol introduces a new frame format which is drastically different from
+        the old one. Notable differences are:
+        - Binary data support.
+        - Fragmentation support: a single message can be fragmented to multiple frames.
+        - Ping-pong support.
+        - Masking: frame content of a client must be masked to prevent cross-protocol attacks.
+
+        This patch covers the following features:
+        - Send a pong frame when a ping frame is received.
+        - Receive fragmented frames.
+        - Receive masked frames. (Servers do not have to mask frames, but they may if they wish.)
+
+        The following features are NOT implemented yet:
+        - Send or receive binary messages.
+        - Send a ping message.
+        - Send fragmented frames. (It is unclear whether this is necessary.)
+        - Rewrite the frame content by WebSocket protocol extensions (like frame compression).
+
+        New tests: http/tests/websocket/tests/hybi/broken-utf8.html
+                   http/tests/websocket/tests/hybi/fragmented-control-frame.html
+                   http/tests/websocket/tests/hybi/fragmented-frames.html
+                   http/tests/websocket/tests/hybi/interleaved-fragments.html
+                   http/tests/websocket/tests/hybi/long-control-frame.html
+                   http/tests/websocket/tests/hybi/masked-frames.html
+                   http/tests/websocket/tests/hybi/pong.html
+                   http/tests/websocket/tests/hybi/reserved-bits.html
+                   http/tests/websocket/tests/hybi/reserved-opcodes.html
+                   http/tests/websocket/tests/hybi/too-long-payload.html
+
+        * websockets/WebSocketChannel.cpp:
+        (WebCore::WebSocketChannel::WebSocketChannel):
+        (WebCore::WebSocketChannel::send):
+        The original content of send() was moved to a private method sendFrameHixie76().
+        (WebCore::WebSocketChannel::fail):
+        Stop handling incoming data after the WebSocket connection is failed.
+        It was unclear to me whether we should do the same thing for hixie-76 connection;
+        for now, I kept the original behavior.
+        (WebCore::WebSocketChannel::processBuffer):
+        (WebCore::WebSocketChannel::resumeTimerFired):
+        (WebCore::WebSocketChannel::startClosingHandshake):
+        (WebCore::WebSocketChannel::closingTimerFired):
+        (WebCore::WebSocketChannel::parseFrame):
+        (WebCore::WebSocketChannel::processFrame):
+        (WebCore::WebSocketChannel::processFrameHixie76):
+        (WebCore::WebSocketChannel::sendFrame):
+        (WebCore::WebSocketChannel::sendFrameHixie76):
+        * websockets/WebSocketChannel.h:
+        (WebCore::WebSocketChannel::isNonControlOpCode):
+        (WebCore::WebSocketChannel::isControlOpCode):
+        (WebCore::WebSocketChannel::isReservedOpCode):
+
+2011-07-19  Nikolas Zimmermann  <nzimmermann@rim.com>
+
+        REGRESSION (r88913): Preview in Safari's snippet editor has a fixed height instead of filling the entire pane
+        https://bugs.webkit.org/show_bug.cgi?id=64059
+
+        REGRESSION (r88913): <object> has wrong computed height
+        https://bugs.webkit.org/show_bug.cgi?id=62769
+
+        Reviewed by Rob Buis.
+
+        Fix misinterpretation of CSS 2.1 - "10.5 Content height: the 'height' property".
+        It says "If the height of the containing block is not specified explicitelz (i.e. it depends on the
+        content height), and this element is not absolutely positioned, the value computes to 'auto'".
+
+        Checking whether the containing block height depends on the content height is not equal to checking
+        whether the height property is set on the containing block, there are other ways to implicitly specify
+        the height by setting top & bottom. Fix that by checking whether the containing block has a height
+        property or top & bottom set.
+
+        While I was at it, make computeReplacedLogicalWidth/Height a bit more explicit to make it easier to compare
+        the code with the spec quoatations - this doesn't change the functionality only the readability.
+        
+        Test: fast/css/replaced-element-implicit-size.html
+
+        * rendering/RenderReplaced.cpp:
+        (WebCore::RenderReplaced::computeReplacedLogicalWidth): Cleanup comment, make code more explicit.
+        (WebCore::RenderReplaced::logicalHeightIsAuto): Add helper method used by computeReplacedLogicalHeight.
+        (WebCore::RenderReplaced::computeReplacedLogicalHeight): Fix height=auto detection.
+        * rendering/RenderReplaced.h:
+
+2011-07-18  Ryosuke Niwa  <rniwa@webkit.org>
+
+        REGRESSION(91209?): fast/css/custom-font-xheight.html is failing on Leopard
+        https://bugs.webkit.org/show_bug.cgi?id=64767
+
+        Add a runtime check for font cascading optimization.
+
+        It's a constant value in Mac port so hopefully gcc will constant-propagate the value
+        and eliminate the function altogether.
+
+        * platform/graphics/cocoa/FontPlatformDataCocoa.mm:
+        (WebCore::canSetCascadeListForCustomFont): Added.
+        (WebCore::FontPlatformData::ctFont):
+
+2011-07-18  MORITA Hajime  <morrita@google.com>
+
+        [ShadowContentElement] forwarded node should be able to access its hosting content element.
+        https://bugs.webkit.org/show_bug.cgi?id=64251
+        
+        Reviewed by Dimitri Glazkov.
+
+        - Introduced ShadowInclusionSet to manage included nodes to its includer content element.
+          ShadowInclusionSet instance is owned by ShadowRoot.
+        - Updated the set on inclusion list changes.
+        - Used the set to retrieve the content element of NodeRenderingContext.
+        
+        There are also related refactoring and cleanup:
+        - Renamed NodeRenderingContext::m_contentElement to m_includer
+        - ShadowContentSelector::m_activeElement is no longer used, thus removed.
+        
+        Test: fast/dom/shadow/content-element-includer.html
+
+        * WebCore.exp.in:
+        * dom/NodeRenderingContext.cpp:
+        (WebCore::NodeRenderingContext::NodeRenderingContext):
+        (WebCore::NodeRenderingContext::nextRenderer):
+        (WebCore::NodeRenderingContext::previousRenderer):
+        * dom/NodeRenderingContext.h:
+        (WebCore::NodeRenderingContext::includer):
+        * dom/ShadowContentElement.cpp:
+        (WebCore::removeFromSet):
+        (WebCore::addToSet):
+        (WebCore::ShadowContentElement::attach):
+        (WebCore::ShadowContentElement::detach):
+        * dom/ShadowContentElement.h:
+        (WebCore::ShadowInclusionSet::add):
+        (WebCore::ShadowInclusionSet::remove):
+        (WebCore::ShadowInclusionSet::isEmpty):
+        (WebCore::ShadowInclusionSet::Translator::hash):
+        (WebCore::ShadowInclusionSet::Translator::equal):
+        (WebCore::ShadowInclusionSet::Hash::hash):
+        (WebCore::ShadowInclusionSet::Hash::equal):
+        (WebCore::ShadowInclusionSet::find):
+        * dom/ShadowContentSelector.cpp:
+        (WebCore::ShadowContentSelector::ShadowContentSelector):
+        (WebCore::ShadowContentSelector::selectInclusion):
+        * dom/ShadowContentSelector.h:
+        * dom/ShadowRoot.cpp:
+        (WebCore::ShadowRoot::~ShadowRoot):
+        (WebCore::ShadowRoot::includerFor):
+        (WebCore::ShadowRoot::inclusions):
+        (WebCore::ShadowRoot::ensureInclusions):
+        * dom/ShadowRoot.h:
+        (WebCore::toShadowRoot):
+        * testing/Internals.cpp:
+        (WebCore::Internals::includerFor):
+        * testing/Internals.h:
+        * testing/Internals.idl:
+
+2011-07-18  Dean Jackson  <dino@apple.com>
+
+        https://bugs.webkit.org/show_bug.cgi?id=64742
+        Expose WebPreferences for media playback requiring user gestures and inline playback
+
+        Reviewed by Simon Fraser.
+
+        Media playback already tested if it should require user gestures, but
+        no setting was ever exposed to clients. Also, some ports only allow media
+        playback to be fullscreen, so exposing a new setting for them.
+
+        * html/HTMLMediaElement.cpp:
+        (WebCore::HTMLMediaElement::HTMLMediaElement): Examine the new Setting
+        for user gestures.
+        * page/Settings.cpp:
+        (WebCore::Settings::Settings):
+        * page/Settings.h: Two new settings.
+        (WebCore::Settings::setMediaPlaybackRequiresUserGesture):
+        (WebCore::Settings::mediaPlaybackRequiresUserGesture):
+        (WebCore::Settings::setMediaPlaybackAllowsInline):
+        (WebCore::Settings::mediaPlaybackAllowsInline):
+
+2011-07-18  Ryosuke Niwa  <rniwa@webkit.org>
+
+        Leopard build fix after r91229.
+
+        * platform/graphics/cocoa/FontPlatformDataCocoa.mm:
+        (WebCore::FontPlatformData::ctFont):
+
+2011-07-18  Dan Bernstein  <mitz@apple.com>
+
+        REGRESSION(91209?): fast/css/custom-font-xheight.html is failing on Leopard
+        https://bugs.webkit.org/show_bug.cgi?id=64767
+
+        Reviewed by Sam Weinig.
+
+        * platform/graphics/Font.h:
+        * platform/graphics/cocoa/FontPlatformDataCocoa.mm:
+        (WebCore::FontPlatformData::ctFont): Undo the cascade list optimization on Leopard for custom
+        fonts, because adding a cascade list apparently breaks the font.
+
+2011-07-18  Matthew Delaney  <mdelaney@apple.com>
+
+        Remove drawsUsingCopy now that all ports handle the copying
+        https://bugs.webkit.org/show_bug.cgi?id=64768
+        
+        Introduced in https://bugs.webkit.org/show_bug.cgi?id=43507, ImageBuffer::drawsUsingCopy
+        was used to know whether or not an ImageBuffer should be explicitly copied before being
+        painted into a context (as was used in HTMLCanvasElement::paint). All platforms now
+        handle the logic of copying or not in their ImageBuffer::draw() implementations, so
+        drawsUsingCopy() is no longer needed. This patch removes it.
+
+        Reviewed by Dan Bernstein.
+
+        No new tests; does not affect behavior.
+
+        * html/HTMLCanvasElement.cpp:
+        (WebCore::HTMLCanvasElement::paint):
+        * platform/graphics/ImageBuffer.h:
+        (WebCore::ImageBuffer::isAccelerated):
+        * platform/graphics/cairo/ImageBufferCairo.cpp:
+        * platform/graphics/cg/ImageBufferCG.cpp:
+        * platform/graphics/qt/ImageBufferQt.cpp:
+        * platform/graphics/skia/ImageBufferSkia.cpp:
+        * platform/graphics/wince/ImageBufferWinCE.cpp:
+        * platform/graphics/wx/ImageBufferWx.cpp:
+
+2011-07-18  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: [REGRESSION] Resource preserving fails when frameNavigated event is dispatched on NetworkPanel.
+        https://bugs.webkit.org/show_bug.cgi?id=64748
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/front-end/NetworkPanel.js:
+        (WebInspector.NetworkLogView.prototype._frameNavigated):
+
+2011-07-18  Brian Weinstein  <bweinstein@apple.com>
+
+        Prep work for: Crash under WebPage::platformDragEnded when dragging on Mac
+        https://bugs.webkit.org/show_bug.cgi?id=64766
+        <rdar://problem/9548174>
+        
+        Reviewed by Darin Adler.
+
+        Add a DragClient function that is called when a drag is ended, and call it from DragController::dragEnded.
+        This isn't used yet, but will be used by WebKit2 on Mac.
+        
+        This patch also cleans up style in DragClient.h.
+
+        No change in behavior, no tests needed.
+
+        * page/DragClient.h:
+        (WebCore::DragClient::dragEnded): Stub virtual implementation for now, this will be used by
+            WebKit2 on Mac.
+        * page/DragController.cpp:
+        (WebCore::DragController::dragEnded): Call DragClient::dragEnded.
+
+2011-07-18  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        Focus and selection events are not fired when a <select>'s selection
+        changes
+        https://bugs.webkit.org/show_bug.cgi?id=64504
+        <rdar://problem/9319881>
+
+        Reviewed by Alice Liu.
+
+        Test: platform/win/accessibility/option-element-selection-and-focus-events.html
+
+        * accessibility/chromium/AXObjectCacheChromium.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        Add new notification type to the section of unhandled notifications.
+
+        * accessibility/AXObjectCache.h:
+        Declare a new notification, AXMenuListItemSelected.
+
+        * accessibility/AccessibilityMenuList.cpp:
+        (WebCore::AccessibilityMenuList::didUpdateActiveOption):
+        Tell our child popup that the active option changed, and post a
+        notification that our value changed.
+
+        * accessibility/AccessibilityMenuList.h:
+        Declare didUpdateActiveOption().
+
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        (WebCore::AccessibilityMenuListPopup::didUpdateActiveOption):
+        Get the child <option> element that is selected, and fire focus and
+        selection events for it.
+
+        * accessibility/AccessibilityMenuListPopup.h:
+        Declare didUpdateActiveOption().
+
+        * accessibility/win/AXObjectCacheWin.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        Map AXMenuListItemSelected -> EVENT_OBJECT_SELECTION.
+
+        * dom/SelectElement.cpp:
+        (WebCore::SelectElement::setSelectedIndex):
+        Pass the newly-selected index.
+
+        * rendering/RenderMenuList.cpp:
+        (WebCore::RenderMenuList::RenderMenuList):
+        Update the initialization list for the renamed m_lastActiveIndex.
+        (WebCore::RenderMenuList::setTextFromOption):
+        A new selection has been made in the popup; call
+        didUpdateActiveOption().
+        (WebCore::RenderMenuList::didSetSelectedIndex):
+        Call didUpdateActiveOption(), passing the index of the newly-selected
+        <option>.
+        (WebCore::RenderMenuList::didUpdateActiveOption):
+        If accessibility is disabled, or if the active option has not changed,
+        return early. Check whether the option index is in the range of list
+        items, and assert that the item at that index is an <option> element.
+        Tell the AccessibilityMenuList for this element that we updated the
+        active option.
+
+        * rendering/RenderMenuList.h:
+        Updated the declaration of didSetSelectedIndex() to take the selected
+        index. Declared didUpdateActiveOption(). Renamed m_lastSelectedIndex to
+        m_lastActiveIndex.
+
+2011-07-18  Dan Bernstein  <mitz@apple.com>
+
+        Specify a cascade list consisting of the last resort font for Core Text
+        https://bugs.webkit.org/show_bug.cgi?id=64747
+
+        Reviewed by Sam Weinig.
+
+        No new tests, because this does not affect behavior.
+
+        This prevents Core Text from taking its default, longer fallback list when the primary font does
+        not include a character. This is OK to do because WebKit never uses the results of Core Text
+        fallback anyway.
+
+        * platform/graphics/cocoa/FontPlatformDataCocoa.mm:
+        (WebCore::cascadeToLastResortFontDescriptor): Added. Returns a CTFontDescriptor with a cascade
+        list consisting of the last resort font.
+        (WebCore::FontPlatformData::ctFont): Changed to include the cascadeToLastResortFontDescriptor
+        in the returned font.
+
+2011-07-18  James Robinson  <jamesr@chromium.org>
+
+        Timer scheduling should be based off the monotonic clock
+        https://bugs.webkit.org/show_bug.cgi?id=64544
+
+        Reviewed by Darin Adler.
+
+        Changes the Timer scheduling logic from using absolute values in terms of currentTime() to using relative
+        intervals in terms of monotonicallyIncreasingTime().  This provides better standards compliance, compatibility,
+        and predictability when the system clock is adjusted.
+
+        No automated tests since there is no way to modify the system clock from DRT.
+
+        * platform/SharedTimer.h:
+        (WebCore::MainThreadSharedTimer::setFireInterval):
+        * platform/ThreadTimers.cpp:
+        (WebCore::ThreadTimers::updateSharedTimer):
+        (WebCore::ThreadTimers::sharedTimerFiredInternal):
+        * platform/Timer.cpp:
+        (WebCore::TimerBase::start):
+        (WebCore::TimerBase::nextFireInterval):
+        * platform/android/SharedTimerAndroid.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/brew/SharedTimerBrew.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/chromium/PlatformBridge.h:
+        * platform/chromium/SharedTimerChromium.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/efl/SharedTimerEfl.cpp:
+        (WebCore::addNewTimer):
+        (WebCore::setSharedTimerFireInterval):
+        * platform/gtk/SharedTimerGtk.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/haiku/SharedTimerHaiku.cpp:
+        (WebCore::SharedTimerHaiku::start):
+        (WebCore::setSharedTimerFireInterval):
+        * platform/mac/SharedTimerMac.mm:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/qt/SharedTimerQt.cpp:
+        (WebCore::SharedTimerQt::start):
+        (WebCore::setSharedTimerFireInterval):
+        * platform/win/SharedTimerWin.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/wince/SharedTimerWinCE.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * platform/wx/SharedTimerWx.cpp:
+        (WebCore::setSharedTimerFireInterval):
+        * workers/WorkerRunLoop.cpp:
+        (WebCore::WorkerSharedTimer::setFireInterval):
+
+2011-07-18  Pratik Solanki  <psolanki@apple.com>
+
+        Unreviewed. Fix Windows build. Move static function defaultSessionCookieStorage() to before
+        its use in defaultCookieStorage().
+
+        * platform/network/cf/CookieStorageCFNet.cpp:
+        (WebCore::defaultSessionCookieStorage):
+
+2011-07-18  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        Get coookie storage code to work with USE(CFNETWORK) enabled on Mac.
+
+        No new tests because no change in functionality.
+
+        * platform/network/cf/CookieStorageCFNet.cpp:
+        (WebCore::defaultCookieStorage):
+        (WebCore::defaultSessionCookieStorage):
+        * platform/network/cf/ResourceHandleCFNet.cpp:
+        (WebCore::ResourceHandle::createPrivateBrowsingStorageSession):
+        * platform/network/mac/CookieStorageMac.mm:
+
+2011-07-18  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        * WebCore.exp.in:
+
+2011-07-18  Gavin Barraclough  <barraclough@apple.com>
+
+        Speculative fix for Leopard assertions caused by 91095.
+
+        Rubber stamped by Sam Weinig.
+
+        * bridge/NP_jsobject.cpp:
+        (_NPN_Invoke):
+            - ensure we pass the window shell, not the global object.
+
+2011-07-18  Mark Hahnenberg  <mhahnenberg@apple.com>
+
+        Refactor JSC to replace JSCell::operator new with static create method
+        https://bugs.webkit.org/show_bug.cgi?id=64466
+
+        Reviewed by Oliver Hunt (oliver@apple.com) and Darin Adler (darin@apple.com).
+
+        First step in a longer refactoring process to remove the use of
+        operator new overloading in order to allocate GC objects and to replace
+        this method with static create methods for each individual type of heap-allocated
+        JS object.  This particular patch only deals with replacing uses of
+        operator new within JSC proper.  Future patches will remove it from the
+        parts that interface with the DOM.  Due to the DOM's continued dependence
+        on it, operator new has not actually been removed from JSCell.
+
+        * bindings/js/JSDOMBinding.cpp:
+        (WebCore::jsDateOrNull):
+        (WebCore::objectToStringFunctionGetter):
+        * bindings/js/JSDOMWindowCustom.cpp:
+        (WebCore::nonCachingStaticFunctionGetter):
+        * bindings/js/JSHistoryCustom.cpp:
+        (WebCore::nonCachingStaticBackFunctionGetter):
+        (WebCore::nonCachingStaticForwardFunctionGetter):
+        (WebCore::nonCachingStaticGoFunctionGetter):
+        * bindings/js/JSLocationCustom.cpp:
+        (WebCore::nonCachingStaticReplaceFunctionGetter):
+        (WebCore::nonCachingStaticReloadFunctionGetter):
+        (WebCore::nonCachingStaticAssignFunctionGetter):
+        * bindings/js/SerializedScriptValue.cpp:
+        (WebCore::CloneDeserializer::readTerminal):
+        * bridge/qt/qt_runtime.cpp:
+        (JSC::Bindings::convertQVariantToValue):
+
+2011-07-18  Viatcheslav Ostapenko  <ostapenko.viatcheslav@nokia.com>
+
+        [Texmap] [Qt] [WK2] Unsync in TextureMapperNode between parent and child lists cause crashes on WK2.
+        https://bugs.webkit.org/show_bug.cgi?id=62587
+
+        Reviewed by Noam Rosenthal.
+
+        Fix unsync between m_parent and m_children list in child and parent texture mapper nodes 
+        in syncCompositingStateSelf.
+
+        * platform/graphics/texmap/TextureMapperNode.cpp:
+        (WebCore::TextureMapperNode::syncCompositingStateSelf):
+
+2011-07-18  Rob Buis  <rbuis@rim.com>
+
+        Stroking of zero-length paths in SVG should change according to erratum
+        https://bugs.webkit.org/show_bug.cgi?id=18356
+
+        Reviewed by Nikolas Zimmermann.
+
+        Do not rely on toolkits to correctly render zero-length path with stroke-linecap=round, render
+        it ourselves just like for stroke-linecap=square.
+
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::shouldStrokeZeroLengthSubpath):
+        (WebCore::RenderSVGPath::setupSquareCapPath):
+
+2011-07-18  Mihnea Ovidenie  <mihnea@adobe.com>
+
+        [REGRESSION] Value 'none' breaks multiple background-image display
+        https://bugs.webkit.org/show_bug.cgi?id=59274
+
+        Reviewed by Simon Fraser.
+
+        When taking fast path for simple color background, we should draw
+        the background only if it is the last in the list of backgrounds.
+        Otherwise, it will obscure the previously drawn backgrounds.
+
+        Test: fast/backgrounds/background-fast-path-simple-color.html
+
+        * rendering/RenderBoxModelObject.cpp:
+        (WebCore::RenderBoxModelObject::paintFillLayerExtended):
+
+2011-07-18  Yi Shen  <yi.4.shen@nokia.com>
+
+        [Qt] ASSERTION FAILED in ResourceHandle::setDefersLoading causes crash
+        https://bugs.webkit.org/show_bug.cgi?id=62808
+
+        The assertion in ResourceHandle::setDefersLoading assumes asynchronous
+        content delivery -- To resume a page, first, its main resource loader
+        calls setDefersLoading to resume loading the main content; then all the
+        sub-resource loaders calls setDefersLoading to resume sub-contents.
+        However, since QNetworkReplyHandler delivers content synchronously,
+        some new sub-resource loaders get created as soon as the main resource
+        loader resumed, and all these new sub-resource loaders set their
+        defersLoading flag to false. Then, the assertion fails for these new
+        sub-resource loaders when calling setDefersLoading on them. As a fix,
+        this path makes QNetworkReplyHandler deliver content asynchronously
+        when its load type is set to SynchronousLoad.
+
+        Reviewed by Benjamin Poulain.
+
+        Test: loader/load-defer-resume-crash.html
+
+        * platform/network/qt/QNetworkReplyHandler.cpp:
+        (WebCore::QNetworkReplyHandlerCallQueue::setDeferSignals):
+        * platform/network/qt/QNetworkReplyHandler.h:
+        (WebCore::QNetworkReplyHandler::setLoadingDeferred):
+
+2011-07-18  Young Han Lee  <joybro@company100.net>
+
+        AnimationBase asserts if a test tries to pause during the delay phase
+        https://bugs.webkit.org/show_bug.cgi?id=59475
+
+        Reviewed by Simon Fraser.
+
+        There is no more assertion failure after r90765, but the testcase still fails due to
+        the miscalculation of the pauseTime. This patch pauses the animation at its startTime
+        if a test tries to pause it during the delay phase.
+
+        Test: transitions/transition-in-delay-phase.html
+
+        * page/animation/AnimationBase.cpp:
+        (WebCore::AnimationBase::freezeAtTime):
+
+2011-07-18  Vsevolod Vlasov  <vsevik@chromium.org>
+
+        Web Inspector: Web Inspector: provide unique identifiers for loaders
+        https://bugs.webkit.org/show_bug.cgi?id=64599
+
+        Reviewed by Pavel Feldman.
+
+        * inspector/InspectorInstrumentation.cpp:
+        (WebCore::InspectorInstrumentation::loaderDetachedFromFrameImpl):
+        * inspector/InspectorInstrumentation.h:
+        (WebCore::InspectorInstrumentation::frameDestroyed):
+        (WebCore::InspectorInstrumentation::loaderDetachedFromFrame):
+        * inspector/InspectorPageAgent.cpp:
+        (WebCore::InspectorPageAgent::loaderId):
+        (WebCore::InspectorPageAgent::loaderDetachedFromFrame):
+        * inspector/InspectorPageAgent.h:
+        * loader/DocumentLoader.cpp:
+        (WebCore::DocumentLoader::detachFromFrame):
+
+2011-07-18  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: "Reveal in Elements Panel" is broken.
+        https://bugs.webkit.org/show_bug.cgi?id=64688
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/front-end/ElementsTreeOutline.js:
+        (WebInspector.ElementsTreeOutline):
+        (WebInspector.ElementsTreeOutline.prototype._contextMenuEventFired.focusElement):
+        (WebInspector.ElementsTreeOutline.prototype._contextMenuEventFired):
+        (WebInspector.ElementsTreeOutline.prototype.populateContextMenu):
+
+2011-07-18  Julien Chaffraix  <jchaffraix@webkit.org>
+
+        Remove RenderObject::addLayers second argument
+        https://bugs.webkit.org/show_bug.cgi?id=64649
+
+        Reviewed by Benjamin Poulain.
+
+        No change in behavior.
+
+        The code was always passing |this| as the second argument. Thus just
+        removed the argument for clarity.
+
+        * rendering/RenderObject.h:
+        * rendering/RenderObject.cpp:
+        (WebCore::RenderObject::addLayers): Removed the argument, replaced
+        by |this|.
+
+        * rendering/RenderObjectChildList.cpp:
+        (WebCore::RenderObjectChildList::appendChildNode):
+        (WebCore::RenderObjectChildList::insertChildNode):
+        Removed the second argument at those 2 call sites.
+
+2011-07-18  Pavel Feldman  <pfeldman@google.com>
+
+        Web Inspector: do not pause on caught exceptions while typing in the console.
+        https://bugs.webkit.org/show_bug.cgi?id=64379
+
+        Reviewed by Yury Semikhatsky.
+
+        * inspector/Inspector.json:
+        * inspector/InspectorController.cpp:
+        (WebCore::InspectorController::InspectorController):
+        * inspector/InspectorRuntimeAgent.cpp:
+        (WebCore::InspectorRuntimeAgent::InspectorRuntimeAgent):
+        (WebCore::InspectorRuntimeAgent::evaluate):
+        (WebCore::InspectorRuntimeAgent::setScriptDebugServer):
+        * inspector/InspectorRuntimeAgent.h:
+        * inspector/WorkerInspectorController.cpp:
+        (WebCore::WorkerInspectorController::WorkerInspectorController):
+        * inspector/front-end/ConsoleView.js:
+        (WebInspector.ConsoleView.prototype.evalInInspectedWindow):
+        * inspector/front-end/WatchExpressionsSidebarPane.js:
+        (WebInspector.WatchExpressionsSection.prototype.update):
+
+2011-07-18  Sheriff Bot  <webkit.review.bot@gmail.com>
+
+        Unreviewed, rolling out r91132 and r91135.
+        http://trac.webkit.org/changeset/91132
+        http://trac.webkit.org/changeset/91135
+        https://bugs.webkit.org/show_bug.cgi?id=64681
+
+        Broke GTK and Chromium debug bots (Requested by rniwa on
+        #webkit).
+
+        * accessibility/AXObjectCache.h:
+        * accessibility/AccessibilityMenuList.cpp:
+        * accessibility/AccessibilityMenuList.h:
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        * accessibility/AccessibilityMenuListPopup.h:
+        * accessibility/chromium/AXObjectCacheChromium.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        * accessibility/win/AXObjectCacheWin.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        * dom/SelectElement.cpp:
+        (WebCore::SelectElement::setSelectedIndex):
+        * rendering/RenderMenuList.cpp:
+        (WebCore::RenderMenuList::RenderMenuList):
+        (WebCore::RenderMenuList::setTextFromOption):
+        (WebCore::RenderMenuList::didSetSelectedIndex):
+        * rendering/RenderMenuList.h:
+
+2011-07-17  Luke Macpherson   <macpherson@chromium.org>
+
+        Implement CSSPropertyCursor in CSSStyleApplyProperty
+        https://bugs.webkit.org/show_bug.cgi?id=64432
+
+        Reviewed by Dimitri Glazkov.
+
+        No new tests / refectoring only.
+
+        * css/CSSStyleApplyProperty.cpp:
+        Add handler for CSSPropertyCursor.
+        * css/CSSStyleSelector.cpp:
+        Remove current handler of CSSPropertyCursor.
+        * css/CSSStyleSelector.h:
+        Make styleImage and cachedOrPendingFromValue public.
+
+2011-07-16  Simon Fraser  <simon.fraser@apple.com>
+
+        Add code to attempt to align compositing layers to pixel boundaries when page scale changes
+        https://bugs.webkit.org/show_bug.cgi?id=64658
+
+        Reviewed by Dan Bernstein.
+        
+        Implemented a new behavior on GraphicsLayerCA which attempts to keep layers pixel
+        aligned as page scale changes.
+        
+        This requires denoting which layer has the page scale on it (it is assumed to be
+        already aligned), via setAppliesPageScale(). We also now pass a scale and offset
+        down through the GraphicsLayer commits, which are used to map layer bounds to display
+        coordinates for rounding.
+
+        * platform/graphics/GraphicsLayer.h: New flags and getters/setters for pixel alignment,
+        and the layer that is the applier of the scale.
+        (WebCore::GraphicsLayer::setMaintainsPixelAlignment):
+        (WebCore::GraphicsLayer::maintainsPixelAlignment):
+        (WebCore::GraphicsLayer::setAppliesPageScale):
+        (WebCore::GraphicsLayer::appliesPageScale):
+
+        * platform/graphics/GraphicsLayer.cpp:
+        (WebCore::GraphicsLayer::GraphicsLayer): Initialize the new flags.
+        (WebCore::GraphicsLayer::backingScaleFactor): Utility method that calls the client if there is one.
+        (WebCore::GraphicsLayer::pageScaleFactor): Ditto.
+
+        * platform/graphics/GraphicsLayerClient.h:
+        (WebCore::GraphicsLayerClient::backingScaleFactor): Provide default implementation.
+        (WebCore::GraphicsLayerClient::pageScaleFactor): Ditto.
+
+        * platform/graphics/ca/GraphicsLayerCA.h: Pass scale and base-relative offset around
+        to methods that need to update geometry during commit.
+        Some new methods related to pixel alignment.
+        
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::computePositionRelativeToBase): For single-layer commits,
+        we have to compute the base-relative offset, and whether we're under the layer
+        applying the scale by walking up the tree.
+        
+        (WebCore::GraphicsLayerCA::syncCompositingStateForThisLayerOnly): Call
+        computePositionRelativeToBase() to get scaling parameters for the target layer.
+        
+        (WebCore::GraphicsLayerCA::recursiveCommitChanges): Pass flags related to scaling.
+        positionRelativeToBase is an offset relative to the ancestor layer known to be pixel
+        aligned. affectedByPageScale is true for layers which are descendants of the layer
+        which applies the scale.
+        
+        (WebCore::GraphicsLayerCA::commitLayerChangesBeforeSublayers): Pass scale and offset.
+        (WebCore::GraphicsLayerCA::updateGeometry): Call computePixelAlignment() to get
+        pixel-aligned geometry. This only needs to be applied to layers which render content,
+        so re-organize the code to use the unchanged layer geometry for the structural layer,
+        but to apply the adjusted geometry to the m_layer.
+        
+        (WebCore::GraphicsLayerCA::updateStructuralLayer): Pass scale and offset.
+        (WebCore::GraphicsLayerCA::ensureStructuralLayer): Ditto.
+        (WebCore::GraphicsLayerCA::updateLayerDrawsContent): Ditto.
+        (WebCore::GraphicsLayerCA::updateContentsScale): Ditto.
+        (WebCore::GraphicsLayerCA::requiresTiledLayer): Ditto.
+        (WebCore::GraphicsLayerCA::swapFromOrToTiledLayer): Ditto.
+        (WebCore::GraphicsLayerCA::setKeepPixelAligned): When set, dirties flags
+        for properties that need to be recomputed.
+        (WebCore::GraphicsLayerCA::noteChangesForScaleSensitiveProperties):
+        (WebCore::isIntegral):
+        (WebCore::GraphicsLayerCA::computePixelAlignment): Map our bounds to screen
+        scale, round out to an integral rect, then map it back, adding a fudge factor
+        so that CA backing stores don't end up being smaller than we expect because
+        of integer truncation.
+
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::createGraphicsLayer): Turn on pixel alignment if
+        the compositor says so.
+        (WebCore::RenderLayerBacking::createPrimaryGraphicsLayer): Set the RenderView's
+        layer as the one applying the scale, for the main frame.
+
+        * rendering/RenderLayerCompositor.h: New method.
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::keepLayersPixelAligned): Master switch for
+        pixel alignment. Default to on.
+        (WebCore::RenderLayerCompositor::ensureRootLayer): Give the two root-ish layers
+        a client so they can ask for page scale if necessary.
+
+2011-07-16  Enrica Casucci  <enrica@apple.com>
+
+        REGRESSION: Pressing return in a particular document sends the cursor to the end of the document.
+        https://bugs.webkit.org/show_bug.cgi?id=64140
+        <rdar://problem/9737491>
+
+        Inserting a paragraph separator at a break element, inside an inline, generates redundant markup
+        and moves the selection at the end of the inserted block.
+        The fix consists in detecting that the insertion point is a break element and simply inserting another
+        break element. This solves the problem of the wrong final selection and also produces less redundant
+        markup.
+
+        Reviewed by Simon Fraser.
+
+        Test: editing/inserting/insert-paragraph-separator-at-break.html
+
+        * editing/InsertParagraphSeparatorCommand.cpp:
+        (WebCore::InsertParagraphSeparatorCommand::doApply): Modified logic for insertion at a break
+        element.
+
+2011-07-16  Pratik Solanki  <psolanki@apple.com>
+
+        SubresourceLoader::didReceiveDataArray can crash when calling m_client->didReceiveData()
+        https://bugs.webkit.org/show_bug.cgi?id=64656
+        <rdar://problem/9754425>
+
+        Reviewed by Alexey Proskuryakov.
+
+        * loader/cf/SubresourceLoaderCF.cpp:
+        (WebCore::SubresourceLoader::didReceiveDataArray): Check for m_client before calling
+        m_client->didReceiveData().
+
+2011-07-16  Dinu Jacob  <dinu.jacob@nokia.com>
+
+        [Qt] Compilation fails on disabling TextureMapper
+        https://bugs.webkit.org/show_bug.cgi?id=64408
+
+        Fix compilation error due to API name change in GraphicsLayer
+
+        Reviewed by Noam Rosenthal.
+
+        * platform/graphics/qt/GraphicsLayerQt.cpp:
+        (WebCore::GraphicsLayerQt::setContentsToBackgroundColor):
+        * platform/graphics/qt/GraphicsLayerQt.h:
+
+2011-07-15  Pratik Solanki  <psolanki@apple.com>
+
+        Part of https://bugs.webkit.org/show_bug.cgi?id=63674
+        Get webkit to compile with USE(CFNETWORK) enabled on Mac
+
+        Reviewed by David Kilzer.
+
+        New WebKitSystemInterface functions for CFNetwork-based loader.
+
+        * WebCore.exp.in:
+        * platform/mac/WebCoreSystemInterface.h:
+        * platform/mac/WebCoreSystemInterface.mm:
+
+2011-07-16  Jessie Berlin  <jberlin@apple.com>
+
+        Work towards determining the cause of frequent crashes due to null frame below
+        ApplicationCacheHost::scheduleLoadFallbackResourceFromApplicationCache.
+        https://bugs.webkit.org/show_bug.cgi?id=62764
+
+        Reviewed by Darin Adler.
+
+        No loads should be going on for a DocumentLoader that has been detached from its frame, but
+        that appears to be what is happening in this bug.
+
+        Add assertions with the hope that someone will run into this while debugging and thereby find
+        a reproducible case.
+
+        * loader/ResourceLoader.cpp:
+        (WebCore::ResourceLoader::willSendRequest):
+        (WebCore::ResourceLoader::didSendData):
+        (WebCore::ResourceLoader::didReceiveResponse):
+        (WebCore::ResourceLoader::didReceiveData):
+        (WebCore::ResourceLoader::didFinishLoading):
+        (WebCore::ResourceLoader::didFail):
+        (WebCore::ResourceLoader::wasBlocked):
+        (WebCore::ResourceLoader::cannotShowURL):
+        (WebCore::ResourceLoader::shouldUseCredentialStorage):
+        (WebCore::ResourceLoader::willCacheResponse):
+
+2011-07-16  Sergey Glazunov  <serg.glazunov@gmail.com>
+
+        DOMWindow::open performs a security check on a wrong window
+        https://bugs.webkit.org/show_bug.cgi?id=64651
+
+        Reviewed by Adam Barth.
+
+        Test: http/tests/security/xss-DENIED-window-open-parent.html
+
+        * page/DOMWindow.cpp:
+        (WebCore::DOMWindow::open):
+
+2011-07-16  Sam Weinig  <sam@webkit.org>
+
+        Attribute selectors don't handle glob namespaces (e.g. *|E)
+        https://bugs.webkit.org/show_bug.cgi?id=64567
+
+        Reviewed by Anders Carlsson.
+
+        Change checking of attribute selectors to match CSS 3 Selectors in
+        the presence of namespaces. This entails changing the algorithm to
+        check each attribute on an element as a match for the attribute selector
+        and taking into account a prefix of *.
+
+        * css/CSSStyleSelector.cpp:
+        (WebCore::attributeQualifiedNameMatches):
+        Checks if the a particular attributes qualified name matches
+        the attribute selector, taking into account a prefix of *.
+
+        (WebCore::attributeValueMatches):
+        Checks if a particular attribute on an element, matches
+        the attribute selector.
+
+        (WebCore::anyAttributeMatches):
+        Top level attribute check. Checks if any of an elements attributes
+        match the attribute selector.
+        
+        (WebCore::CSSStyleSelector::SelectorChecker::checkOneSelector):
+        Factor out attribute checking code into the above functions.
+
+2011-07-16  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        WinCE build fix. Unreviewed.
+
+        * dom/SelectElement.cpp:
+
+2011-07-16  Kulanthaivel Palanichamy  <kulanthaivel@codeaurora.org>
+
+        Reviewed by Nikolas Zimmermann.
+
+        SVG animation API crashes on SVGAnimateTransform
+        https://bugs.webkit.org/show_bug.cgi?id=64104
+
+        This patch ensures the update in AnimatedTransform list in
+        SVGAnimateTransformElement.cpp is in sync with its wrapper list.
+
+        Test: svg/animations/svgtransform-animation-discrete.html
+
+        * svg/SVGAnimateTransformElement.cpp:
+        (WebCore::animatedTransformListFor):
+        (WebCore::SVGAnimateTransformElement::resetToBaseValue):
+        (WebCore::SVGAnimateTransformElement::calculateAnimatedValue):
+        (WebCore::SVGAnimateTransformElement::applyResultsToTarget):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Fix the build.
+
+        * platform/mac/ScrollbarThemeMac.mm:
+        (WebCore::ScrollbarThemeMac::updateEnabledState):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Another Windows build fix; make this method non-pure virtual.
+
+        * platform/graphics/GraphicsLayerClient.h:
+        (WebCore::GraphicsLayerClient::didCommitChangesForLayer):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Fix build error in 32-bit builds.
+
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::zeroLengthSubpathRect):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Fix Windows build.
+
+        * platform/graphics/win/MediaPlayerPrivateQuickTimeWin.h:
+        (WebCore::MediaPlayerPrivate::backingScaleFactor):
+        (WebCore::MediaPlayerPrivate::pageScaleFactor):
+
+2011-07-15  Simon Fraser  <simon.fraser@apple.com>
+
+        Have GraphicsLayer pull their contentsScale, rather than pushing it onto them
+        https://bugs.webkit.org/show_bug.cgi?id=64643
+
+        Reviewed by Darin Adler.
+
+        RenderLayerBacking would set the contentsScale on GraphicsLayers
+        on creation, and update it when the pageScaleFactor changed. However,
+        RenderLayerBacking doesn't really know what contentsScale is best
+        for a layer, so instead, have GraphicsLayers call back through the
+        GraphicsLayerClient to get the two relevant scale factors, and do
+        their own computation of contentsScale.
+
+        No testable behavior changes.
+
+        * page/Frame.cpp:
+        (WebCore::Frame::pageScaleFactorChanged): No need to pass the scale.
+
+        * platform/graphics/GraphicsLayer.cpp:
+        (WebCore::GraphicsLayer::notePageScaleFactorChangedIncludingDescendants):
+        Recurse through the GraphicsLayer tree, calling pageScaleFactorChanged() on 
+        each layer.
+
+        * platform/graphics/GraphicsLayer.h:
+        (WebCore::GraphicsLayer::pageScaleFactorChanged):
+        Remove contentsScale/setContentsScale
+        
+        * platform/graphics/GraphicsLayerClient.h:
+        Add methods to fetch the backingScaleFactor() and pageScaleFactor().
+        
+        * platform/graphics/ca/GraphicsLayerCA.cpp:
+        (WebCore::GraphicsLayerCA::GraphicsLayerCA): m_uncommittedChanges
+        defaults to ContentsScaleChanged so we update contentsScale on
+        the first flush.
+        
+        (WebCore::GraphicsLayerCA::setContentsToBackgroundColor):
+        This was the wrong time to call updateContentsRect() and setupContentsLayer();
+        those should be done at commit time, so moved to updateLayerBackgroundColor().
+        (WebCore::GraphicsLayerCA::recursiveCommitChanges): Note whether we
+        have any changes, and call didCommitChangesForLayer() on the client.
+        (WebCore::GraphicsLayerCA::updateLayerBackgroundColor): Code moved to here.
+        (WebCore::clampedContentsScaleForScale): No longer has any hysteresis
+        on the scale, and now just clamps.
+        (WebCore::GraphicsLayerCA::updateContentsScale): Fetch the scales
+        from the client, and multiply them, then clamp.
+        (WebCore::GraphicsLayerCA::requiresTiledLayer): This now takes
+        contentsScale into account when deciding to use tiled layer,
+        so that zooming in will cause layers to start tiling.
+        (WebCore::GraphicsLayerCA::swapFromOrToTiledLayer): Don't call
+        setContentsScale(), but rather updateContentsScale().
+        (WebCore::GraphicsLayerCA::pageScaleFactorChanged): Set the bits
+        for properties that depend on the scale.
+        (WebCore::GraphicsLayerCA::noteChangesForScaleSensitiveProperties):
+        Note that contentsScale needs to be updated. At some point we might also
+        need to dirty other properties.
+        * platform/graphics/ca/GraphicsLayerCA.h: Moved the m_allowTiledLayer
+        bool for better packing. No need for a m_contentsScale member now.
+        * rendering/RenderLayer.cpp: Removed pageScaleFactorChanged().
+        * rendering/RenderLayer.h: Ditto.
+        * rendering/RenderLayerBacking.cpp:
+        (WebCore::RenderLayerBacking::createPrimaryGraphicsLayer): No need
+        to push the contents scale.
+        (WebCore::RenderLayerBacking::updateForegroundLayer): Ditto.
+        (WebCore::RenderLayerBacking::updateMaskLayer): Ditto.
+        (WebCore::RenderLayerBacking::pageScaleFactor): GraphicsLayerClient method.
+        (WebCore::RenderLayerBacking::backingScaleFactor): GraphicsLayerClient method.
+        (WebCore::RenderLayerBacking::didCommitChangesForLayer): Send through
+        to the compositor.
+        * rendering/RenderLayerBacking.h: GraphicsLayerClient methods.
+        * rendering/RenderLayerCompositor.cpp:
+        (WebCore::RenderLayerCompositor::didFlushChangesForLayer): We'll use
+        this later.
+        (WebCore::RenderLayerCompositor::backingScaleFactor): GraphicsLayerClient method.
+        (WebCore::RenderLayerCompositor::pageScaleFactor): Ditto.
+        (WebCore::RenderLayerCompositor::didCommitChangesForLayer): Ditto.
+        (WebCore::RenderLayerCompositor::ensureRootLayer): No need to push the contents scale.
+        (WebCore::RenderLayerCompositor::pageScaleFactorChanged): Just call notePageScaleFactorChangedIncludingDescendants()
+        on the root GraphicsLayer.
+        * rendering/RenderLayerCompositor.h: Added GraphicsLayerClient methods.
+
+2011-07-15  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        Build fix. Unreviewed.
+
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        (WebCore::AccessibilityMenuListPopup::didUpdateActiveOption):
+        Cast size_t to int for comparison.
+
+2011-07-15  Andy Estes  <aestes@apple.com>
+
+        Rename applicationIsSolarWalk() to applicationIsSolarWalkMac().
+        https://bugs.webkit.org/show_bug.cgi?id=64641
+
+        Reviewed by Brian Weinstein.
+
+        * WebCore.exp.in: Update to new symbol.
+        * platform/RuntimeApplicationChecks.cpp:
+        (WebCore::applicationIsSolarWalkMac): Renamed from applicationIsSolarWalk.
+        * platform/RuntimeApplicationChecks.h: Ditto.
+
+2011-07-15  Mark Rowe  <mrowe@apple.com>
+
+        Fix the build.
+
+        * platform/graphics/GraphicsContext.h:
+        (WebCore::GraphicsContextStateSaver::context): Remove a bogus type qualifier.
+
+2011-07-13  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        Focus and selection events are not fired when a <select>'s selection
+        changes
+        https://bugs.webkit.org/show_bug.cgi?id=64504
+        <rdar://problem/9319881>
+
+        Reviewed by Alice Liu.
+
+        Test: platform/win/accessibility/option-element-selection-and-focus-events.html
+
+        * accessibility/chromium/AXObjectCacheChromium.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        Add new notification type to the section of unhandled notifications.
+
+        * accessibility/AXObjectCache.h:
+        Declare a new notification, AXMenuListItemSelected.
+
+        * accessibility/AccessibilityMenuList.cpp:
+        (WebCore::AccessibilityMenuList::didUpdateActiveOption):
+        Tell our child popup that the active option changed, and post a
+        notification that our value changed.
+
+        * accessibility/AccessibilityMenuList.h:
+        Declare didUpdateActiveOption().
+
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        (WebCore::AccessibilityMenuListPopup::didUpdateActiveOption):
+        Get the child <option> element that is selected, and fire focus and
+        selection events for it.
+
+        * accessibility/AccessibilityMenuListPopup.h:
+        Declare didUpdateActiveOption().
+
+        * accessibility/win/AXObjectCacheWin.cpp:
+        (WebCore::AXObjectCache::postPlatformNotification):
+        Map AXMenuListItemSelected -> EVENT_OBJECT_SELECTION.
+
+        * dom/SelectElement.cpp:
+        (WebCore::SelectElement::setSelectedIndex):
+        Pass the newly-selected index.
+
+        * rendering/RenderMenuList.cpp:
+        (WebCore::RenderMenuList::RenderMenuList):
+        Update the initialization list for the renamed m_lastActiveIndex.
+        (WebCore::RenderMenuList::setTextFromOption):
+        A new selection has been made in the popup; call
+        didUpdateActiveOption().
+        (WebCore::RenderMenuList::didSetSelectedIndex):
+        Call didUpdateActiveOption(), passing the index of the newly-selected
+        <option>.
+        (WebCore::RenderMenuList::didUpdateActiveOption):
+        If accessibility is disabled, or if the active option has not changed,
+        return early. Check whether the option index is in the range of list
+        items, and assert that the item at that index is an <option> element.
+        Tell the AccessibilityMenuList for this element that we updated the
+        active option.
+
+        * rendering/RenderMenuList.h:
+        Updated the declaration of didSetSelectedIndex() to take the selected
+        index. Declared didUpdateActiveOption(). Renamed m_lastSelectedIndex to
+        m_lastActiveIndex.
+
+2011-07-13  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        ALT + DOWN arrow key does not open select
+
+        https://bugs.webkit.org/show_bug.cgi?id=14407
+        <rdar://problem/5319507>
+
+        Reviewed by Alexey Proskuryakov.
+
+        No test, because eventSender sends events to the WebView, rather than
+        the popup menu, so the popup isn't closed.
+
+        * WebCore.vcproj/WebCore.vcproj:
+        Add SelectElementWin.cpp to project.
+
+        * dom/SelectElement.cpp:
+        (WebCore::SelectElement::platformHandleKeydownEvent):
+        Moved ARROW_KEYS_POP_MENU code here. Updated to return whether the
+        function has handled the key, or whether the caller needs to process it
+        further.
+        (WebCore::SelectElement::menuListDefaultEventHandler):
+        Allow the platform the first chance at handling the keyboard event.
+
+        * dom/SelectElement.h:
+        Declare platformHandleKeydownEvent().
+        * dom/SelectElementWin.cpp: Added.
+        (WebCore::SelectElement::platformHandleKeyboardEvent):
+        Allow (Shift) F4 and (Ctrl/Shift) Alt/AltGr + Up/Down
+        arrow to show the popup. After the popup is dismissed, call
+        setSelectedIndex(), and report that we handled the event.
+
+        * platform/win/PopupMenuWin.cpp:
+        Declare HIGH_BIT_MASK_SHORT.
+        (WebCore::PopupMenuWin::show):
+        Forward WM_SYSKEYDOWN to the popup's HWND.
+        (WebCore::PopupMenuWin::wndProc):
+        Allow the same shortcuts that show the menu to hide it, matching
+        Firefox.
+
+2011-07-12  Jon Honeycutt  <jhoneycutt@apple.com>
+
+        Ensure that a single select element's child option elements are
+        reported correctly to accessibility clients if the children are
+        changed.
+
+        https://bugs.webkit.org/show_bug.cgi?id=64500
+        <rdar://problem/9773066>
+
+        Reviewed by Beth Dakin.
+
+        Test: platform/win/accessibility/single-select-children-changed.html
+
+        * accessibility/AccessibilityMenuListPopup.cpp:
+        (WebCore::AccessibilityMenuListPopup::addChildren):
+        Remove a comment about WML, which we no longer support.
+        (WebCore::AccessibilityMenuListPopup::childrenChanged):
+        Don't just remove children that were detached - this will miss childen
+        that were dynamically added. Clear the children and re-add them.
+
+2011-07-15  Rob Buis  <rbuis@rim.com>
+
+        Stroking of zero-length paths in SVG should change according to erratum
+        https://bugs.webkit.org/show_bug.cgi?id=18356
+
+        Reviewed by Nikolas Zimmermann.
+
+        Ensure rendering of zero-length paths with stroke-linecap=square works by
+        creating the square rectangle manually.
+
+        Tests: svg/W3C-SVG-1.1-SE/painting-control-04-f.svg
+               svg/custom/zero-path-square-cap-rendering.svg
+
+        * platform/graphics/GraphicsContext.h:
+        (WebCore::GraphicsContextStateSaver::context):
+        * rendering/svg/RenderSVGPath.cpp:
+        (WebCore::RenderSVGPath::strokeContains):
+        (WebCore::RenderSVGPath::shouldStrokeZeroLengthSubpath):
+        (WebCore::RenderSVGPath::zeroLengthSubpathRect):
+        (WebCore::RenderSVGPath::setupSquareCapPath):
+        (WebCore::RenderSVGPath::setupNonScalingStrokePath):
+        (WebCore::RenderSVGPath::fillAndStrokePath):
+        (WebCore::RenderSVGPath::updateCachedBoundaries):
+        * rendering/svg/RenderSVGPath.h:
+
 2011-06-27  Adrienne Walker  <enne@google.com>
 
         Reviewed by Simon Fraser.