Unreviewed, skip grid layout tests that are failing after r117613.

It looks like apple mac had grid layout enabled prior to r117613?
These tests shouldn't have been passing before.

* platform/mac/test_expectations.txt:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117639 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Standalone table-columns should be wrapped in anonymous tables
https://bugs.webkit.org/show_bug.cgi?id=86671

Reviewed by Julien Chaffraix.

Source/WebCore: 

The CSS2 spec specifies that table-columns misparented outside of a table or
table-column-group should be wrapped in an anonymous table. Updating 
RenderObject::addChild to follow the spec.
see http://www.w3.org/TR/CSS2/tables.html#anonymous-boxes for details.

Tests: fast/table/table-column-generates-anonymous-table.html
       fast/table/table-column-group-generates-anonymous-table.html

* rendering/RenderObject.cpp:
(WebCore::RenderObject::addChild):

LayoutTests: 

Adding 2 test cases and updating test results for two with changed expectations.

* fast/table/table-column-generates-anonymous-table-expected.html: Added.
* fast/table/table-column-generates-anonymous-table.html: Added.
* fast/table/table-column-group-generates-anonymous-table-expected.html: Added.
* fast/table/table-column-group-generates-anonymous-table.html: Added.
* platform/chromium-linux/fast/forms/form-hides-table-expected.txt: Added. An anonymous
table is now generated to enclose the misparented table column.
* platform/chromium-linux/fast/table/form-with-table-style-expected.txt: Added.
* platform/chromium-linux/fast/table/form-with-table-style-expected.png: Modified. The
expectations previously were wrong in that the table column occupied height the
equivalent of its line-height. This is correctly no longer the case.
* platform/chromium/test_expectations.txt: Modified. Skipping modified tests on other
platforms until I can rebaseline.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117640 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Remove one-space indentation from LayoutTests/fast/backgrounds/background-shorthand-with-backgroundSize-style.html
https://bugs.webkit.org/show_bug.cgi?id=86897

Patch by Joe Thomas <joethomas@motorola.com> on 2012-05-18
Reviewed by Tony Chang.

* fast/backgrounds/background-shorthand-with-backgroundSize-style.html:

2012-05-17  Levi Weintraub  <leviw@chromium.org>

Standalone table-columns should be wrapped in anonymous tables
https://bugs.webkit.org/show_bug.cgi?id=86671

Reviewed by Julien Chaffraix.

Adding 2 test cases and updating test results for two with changed expectations.

* fast/table/table-column-generates-anonymous-table-expected.html: Added.
* fast/table/table-column-generates-anonymous-table.html: Added.
* fast/table/table-column-group-generates-anonymous-table-expected.html: Added.
* fast/table/table-column-group-generates-anonymous-table.html: Added.
* platform/chromium-linux/fast/forms/form-hides-table-expected.txt: Added. An anonymous
table is now generated to enclose the misparented table column.
* platform/chromium-linux/fast/table/form-with-table-style-expected.txt: Added.
* platform/chromium-linux/fast/table/form-with-table-style-expected.png: Modified. The
expectations previously were wrong in that the table column occupied height the
equivalent of its line-height. This is correctly no longer the case.
* platform/chromium/test_expectations.txt: Modified. Skipping modified tests on other
platforms until I can rebaseline.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117641 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Unreviewed. Moving myself from committer to reviewer.

* Scripts/webkitpy/common/config/committers.py:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117642 268f45cc-cd09-0410-ab3c-d52691b4dbfc
scm.add() doesn't work properly with svn 1.7
https://bugs.webkit.org/show_bug.cgi?id=86779

Reviewed by Eric Seidel.

Re-land the change in r117526 with a fix to maintain
compatibility with SVN 1.4.4 (yay Leopard!); turns out
that "svn info foo" works correctly in 1.4.4 but
"svn info" from the directory "foo" doesn't if foo is
not part of a checkout. in_working_directory() and
value_from_svn_info() were using the arguments inconsistently,
leading to weird errors.

* Scripts/webkitpy/common/checkout/scm/scm.py:
(SCM):
(SCM.in_working_directory):
* Scripts/webkitpy/common/checkout/scm/svn.py:
(SVN):
(SVN.in_working_directory):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117643 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL] Unreviewed gardening; unskip a few passing tests.

* platform/efl/Skipped:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117644 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[chromium] add back-face visibility check for renderSurfaces
https://bugs.webkit.org/show_bug.cgi?id=86870

Reviewed by Adrienne Walker.

Source/WebCore:

Test added CCLayerTreeHostCommonTest::verifyBackFaceCullingWithPreserves3dForFlatteningSurface

Chromium was not checking back-face visibility for renderSurfaces
that needed it. This patch adds that check and the appropriate
unit test.

* platform/graphics/chromium/cc/CCLayerTreeHostCommon.cpp:
(WebCore::layerIsInExisting3DRenderingContext):
(WebCore):
(WebCore::subtreeShouldRenderToSeparateSurface):
(WebCore::calculateDrawTransformsAndVisibilityInternal):

Source/WebKit/chromium:

* tests/CCLayerTreeHostCommonTest.cpp:
(WebKitTests::TEST):
(WebKitTests):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117645 268f45cc-cd09-0410-ab3c-d52691b4dbfc
DFG should have control flow graph simplification
https://bugs.webkit.org/show_bug.cgi?id=84553

Source/JavaScriptCore: 

Reviewed by Oliver Hunt.
        
Merged r115512 from dfgopt.

This change gives the DFG the ability to simplify the control flow graph
as part of an optimization fixpoint that includes CSE, CFA, and constant
folding. This required a number of interesting changes including:
        
- Solidifying the set of invariants that the DFG obeys. For example, the
  head and tail of each basic block must advertise the set of live locals
  and the set of available locals, respectively. It must do so by
  referring to the first access to the local in the block (for head) and
  the last one (for tail). This patch introduces the start of a
  validation step that may be turned on even with asserts disabled. To
  ensure that these invariants are preserved, I had to remove the
  redundant phi elimination phase. For now I just remove the call, but in
  the future we will probably remove it entirely unless we find a use for
  it.
        
- Making it easier to get the boolean version of a JSValue. This is a
  pure operation, but we previously did not treat it as such.
        
- Fixing the merging and filtering of AbstractValues that correspond to
  concrete JSValues. This was previously broken and was limiting the
  effect of running constant folding. Fixing this meant that I had to
  change how constant folding eliminates GetLocal nodes, so as to ensure
  that the resulting graph still obeys DFG rules.
        
- Introducing simplified getters for some of the things that DFG phases
  want to know about, like the Nth child of a node (now just
  graph.child(...) if you don't care about performance too much) or
  getting successors of a basic block.
        
The current CFG simplifier can handle almost all of the cases that it
ought to handle; the noteworthy one that is not yet handled is removing
basic blocks that just have jumps. To do this right we need to be able
to remove jump-only blocks that also perform keep-alive on some values.
To make this work, we need to be able to hoist the keep-alive into (or
just above) a Branch. This is not fundamentally difficult but I opted to
let this patch omit this optimization. We can handle this later.
        
This is a big win on programs that include inline functions that are
often called with constant arguments. Of course, SunSpider, V8, and
Kraken don't count. Those benchmarks are completely neutral with this
change.

* API/JSValueRef.cpp:
(JSValueToBoolean):
* CMakeLists.txt:
* GNUmakefile.list.am:
* JavaScriptCore.xcodeproj/project.pbxproj:
* Target.pri:
* bytecode/CodeBlock.h:
(JSC::CodeBlock::dfgOSREntryDataForBytecodeIndex):
* bytecode/Operands.h:
(JSC::Operands::setOperandFirstTime):
(Operands):
* dfg/DFGAbstractState.cpp:
(JSC::DFG::AbstractState::initialize):
(JSC::DFG::AbstractState::execute):
(JSC::DFG::AbstractState::mergeStateAtTail):
(JSC::DFG::AbstractState::mergeToSuccessors):
* dfg/DFGAbstractValue.h:
(JSC::DFG::AbstractValue::isClear):
(JSC::DFG::AbstractValue::operator!=):
(JSC::DFG::AbstractValue::merge):
(JSC::DFG::AbstractValue::filter):
(JSC::DFG::AbstractValue::validateIgnoringValue):
(AbstractValue):
* dfg/DFGAdjacencyList.h:
(JSC::DFG::AdjacencyList::child):
(JSC::DFG::AdjacencyList::setChild):
(AdjacencyList):
* dfg/DFGBasicBlock.h:
(JSC::DFG::BasicBlock::~BasicBlock):
(BasicBlock):
(JSC::DFG::BasicBlock::numNodes):
(JSC::DFG::BasicBlock::nodeIndex):
(JSC::DFG::BasicBlock::isPhiIndex):
(JSC::DFG::BasicBlock::isInPhis):
(JSC::DFG::BasicBlock::isInBlock):
* dfg/DFGByteCodeParser.cpp:
(ByteCodeParser):
(DFG):
(JSC::DFG::ByteCodeParser::parse):
* dfg/DFGCFAPhase.cpp:
(JSC::DFG::CFAPhase::run):
(JSC::DFG::CFAPhase::performBlockCFA):
(JSC::DFG::performCFA):
* dfg/DFGCFAPhase.h:
(DFG):
* dfg/DFGCFGSimplificationPhase.cpp: Added.
(DFG):
(CFGSimplificationPhase):
(JSC::DFG::CFGSimplificationPhase::CFGSimplificationPhase):
(JSC::DFG::CFGSimplificationPhase::run):
(JSC::DFG::CFGSimplificationPhase::killUnreachable):
(JSC::DFG::CFGSimplificationPhase::findOperandSource):
(JSC::DFG::CFGSimplificationPhase::keepOperandAlive):
(JSC::DFG::CFGSimplificationPhase::fixPossibleGetLocal):
(JSC::DFG::CFGSimplificationPhase::jettisonBlock):
(JSC::DFG::CFGSimplificationPhase::fixPhis):
(JSC::DFG::CFGSimplificationPhase::fixJettisonedPredecessors):
(JSC::DFG::CFGSimplificationPhase::removePotentiallyDeadPhiReference):
(JSC::DFG::CFGSimplificationPhase::OperandSubstitution::OperandSubstitution):
(OperandSubstitution):
(JSC::DFG::CFGSimplificationPhase::OperandSubstitution::dump):
(JSC::DFG::CFGSimplificationPhase::skipGetLocal):
(JSC::DFG::CFGSimplificationPhase::fixTailOperand):
(JSC::DFG::CFGSimplificationPhase::mergeBlocks):
(JSC::DFG::performCFGSimplification):
* dfg/DFGCFGSimplificationPhase.h: Added.
(DFG):
* dfg/DFGCSEPhase.cpp:
(JSC::DFG::CSEPhase::run):
(CSEPhase):
(JSC::DFG::CSEPhase::impureCSE):
(JSC::DFG::CSEPhase::globalVarLoadElimination):
(JSC::DFG::CSEPhase::getByValLoadElimination):
(JSC::DFG::CSEPhase::checkStructureLoadElimination):
(JSC::DFG::CSEPhase::getByOffsetLoadElimination):
(JSC::DFG::CSEPhase::getPropertyStorageLoadElimination):
(JSC::DFG::CSEPhase::getIndexedPropertyStorageLoadElimination):
(JSC::DFG::CSEPhase::performNodeCSE):
(JSC::DFG::CSEPhase::performBlockCSE):
(JSC::DFG::performCSE):
* dfg/DFGCSEPhase.h:
(DFG):
* dfg/DFGCommon.h:
* dfg/DFGConstantFoldingPhase.cpp:
(JSC::DFG::ConstantFoldingPhase::run):
(JSC::DFG::performConstantFolding):
* dfg/DFGConstantFoldingPhase.h:
(DFG):
* dfg/DFGDriver.cpp:
(JSC::DFG::compile):
* dfg/DFGEdge.h:
(Edge):
(JSC::DFG::Edge::operator UnspecifiedBoolType*):
* dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::run):
(JSC::DFG::FixupPhase::fixupBlock):
(JSC::DFG::performFixup):
* dfg/DFGFixupPhase.h:
(DFG):
* dfg/DFGGraph.cpp:
(JSC::DFG::Graph::dump):
(JSC::DFG::Graph::handleSuccessor):
(DFG):
(JSC::DFG::Graph::determineReachability):
(JSC::DFG::Graph::resetReachability):
* dfg/DFGGraph.h:
(JSC::DFG::Graph::deref):
(JSC::DFG::Graph::changeIndex):
(Graph):
(JSC::DFG::Graph::changeEdge):
(JSC::DFG::Graph::numSuccessors):
(JSC::DFG::Graph::successor):
(JSC::DFG::Graph::successorForCondition):
(JSC::DFG::Graph::isPredictedNumerical):
(JSC::DFG::Graph::byValIsPure):
(JSC::DFG::Graph::clobbersWorld):
(JSC::DFG::Graph::numChildren):
(JSC::DFG::Graph::child):
* dfg/DFGNode.h:
(JSC::DFG::Node::convertToConstant):
(JSC::DFG::Node::numSuccessors):
(Node):
(JSC::DFG::Node::successor):
(JSC::DFG::Node::successorForCondition):
* dfg/DFGNodeType.h:
(DFG):
* dfg/DFGOSREntry.cpp:
(JSC::DFG::prepareOSREntry):
* dfg/DFGOperations.cpp:
* dfg/DFGPhase.cpp:
(JSC::DFG::Phase::endPhase):
* dfg/DFGPhase.h:
(JSC::DFG::runPhase):
* dfg/DFGPredictionPropagationPhase.cpp:
(JSC::DFG::PredictionPropagationPhase::run):
(JSC::DFG::performPredictionPropagation):
* dfg/DFGPredictionPropagationPhase.h:
(DFG):
* dfg/DFGRedundantPhiEliminationPhase.cpp:
(JSC::DFG::RedundantPhiEliminationPhase::run):
(JSC::DFG::performRedundantPhiElimination):
* dfg/DFGRedundantPhiEliminationPhase.h:
(DFG):
* dfg/DFGScoreBoard.h:
(JSC::DFG::ScoreBoard::use):
(ScoreBoard):
(JSC::DFG::ScoreBoard::useIfHasResult):
* dfg/DFGSpeculativeJIT.cpp:
(JSC::DFG::SpeculativeJIT::compilePeepHoleObjectEquality):
(JSC::DFG::SpeculativeJIT::compilePeepHoleIntegerBranch):
(JSC::DFG::SpeculativeJIT::compile):
(JSC::DFG::SpeculativeJIT::createOSREntries):
(JSC::DFG::SpeculativeJIT::linkOSREntries):
(JSC::DFG::SpeculativeJIT::compileStrictEqForConstant):
(JSC::DFG::SpeculativeJIT::compileRegExpExec):
* dfg/DFGSpeculativeJIT.h:
(JSC::DFG::SpeculativeJIT::nextBlock):
(SpeculativeJIT):
(JSC::DFG::SpeculativeJIT::use):
(JSC::DFG::SpeculativeJIT::jump):
* dfg/DFGSpeculativeJIT32_64.cpp:
(JSC::DFG::SpeculativeJIT::nonSpeculativePeepholeBranchNull):
(JSC::DFG::SpeculativeJIT::nonSpeculativePeepholeBranch):
(JSC::DFG::SpeculativeJIT::nonSpeculativePeepholeStrictEq):
(JSC::DFG::SpeculativeJIT::emitBranch):
(JSC::DFG::SpeculativeJIT::compile):
* dfg/DFGSpeculativeJIT64.cpp:
(JSC::DFG::SpeculativeJIT::nonSpeculativePeepholeBranchNull):
(JSC::DFG::SpeculativeJIT::nonSpeculativePeepholeBranch):
(JSC::DFG::SpeculativeJIT::nonSpeculativePeepholeStrictEq):
(JSC::DFG::SpeculativeJIT::emitBranch):
(JSC::DFG::SpeculativeJIT::compile):
* dfg/DFGValidate.cpp: Added.
(DFG):
(Validate):
(JSC::DFG::Validate::Validate):
(JSC::DFG::Validate::validate):
(JSC::DFG::Validate::reportValidationContext):
(JSC::DFG::Validate::dumpData):
(JSC::DFG::Validate::dumpGraphIfAppropriate):
(JSC::DFG::validate):
* dfg/DFGValidate.h: Added.
(DFG):
(JSC::DFG::validate):
* dfg/DFGVirtualRegisterAllocationPhase.cpp:
(JSC::DFG::VirtualRegisterAllocationPhase::run):
(JSC::DFG::performVirtualRegisterAllocation):
* dfg/DFGVirtualRegisterAllocationPhase.h:
(DFG):
* interpreter/Interpreter.cpp:
(JSC::Interpreter::privateExecute):
* jit/JITStubs.cpp:
(JSC::DEFINE_STUB_FUNCTION):
* llint/LLIntSlowPaths.cpp:
(JSC::LLInt::LLINT_SLOW_PATH_DECL):
* runtime/ArrayPrototype.cpp:
(JSC::arrayProtoFuncFilter):
(JSC::arrayProtoFuncEvery):
(JSC::arrayProtoFuncSome):
* runtime/BooleanConstructor.cpp:
(JSC::constructBoolean):
(JSC::callBooleanConstructor):
* runtime/JSCell.h:
(JSCell):
* runtime/JSObject.cpp:
(JSC):
* runtime/JSObject.h:
* runtime/JSString.cpp:
(JSC::JSString::toBoolean):
* runtime/JSString.h:
(JSString):
(JSC::JSCell::toBoolean):
(JSC::JSValue::toBoolean):
* runtime/JSValue.h:
* runtime/ObjectConstructor.cpp:
(JSC::toPropertyDescriptor):
* runtime/RegExpConstructor.cpp:
(JSC::setRegExpConstructorMultiline):
* runtime/RegExpPrototype.cpp:
(JSC::regExpProtoFuncToString):

Source/WebCore: 

Reviewed by Oliver Hunt.

Merged r115512 from dfgopt.

JSValue::toBoolean(ExecState*) -> JSValue::toBoolean()
        
No new tests, because no new behavior.

* bindings/js/JSCustomSQLStatementErrorCallback.cpp:
(WebCore::JSSQLStatementErrorCallback::handleEvent):
* bindings/js/JSDOMWindowCustom.cpp:
(WebCore::JSDOMWindow::addEventListener):
(WebCore::JSDOMWindow::removeEventListener):
* bindings/js/JSDataViewCustom.cpp:
(WebCore::getDataViewMember):
* bindings/js/JSDeviceMotionEventCustom.cpp:
(WebCore::JSDeviceMotionEvent::initDeviceMotionEvent):
* bindings/js/JSDeviceOrientationEventCustom.cpp:
(WebCore::JSDeviceOrientationEvent::initDeviceOrientationEvent):
* bindings/js/JSDictionary.cpp:
(WebCore::JSDictionary::convertValue):
* bindings/js/JSDirectoryEntryCustom.cpp:
(WebCore::JSDirectoryEntry::getFile):
(WebCore::JSDirectoryEntry::getDirectory):
* bindings/js/JSDirectoryEntrySyncCustom.cpp:
(WebCore::getFlags):
* bindings/js/JSHTMLCanvasElementCustom.cpp:
(WebCore::JSHTMLCanvasElement::getContext):
* bindings/js/JSInspectorFrontendHostCustom.cpp:
(WebCore::JSInspectorFrontendHost::showContextMenu):
* bindings/js/JSMessageEventCustom.cpp:
(WebCore::handleInitMessageEvent):
* bindings/js/JSWebGLRenderingContextCustom.cpp:
(WebCore::dataFunctionMatrix):
* bindings/js/JSXMLHttpRequestCustom.cpp:
(WebCore::JSXMLHttpRequest::open):
* bindings/js/ScriptDebugServer.cpp:
(WebCore::ScriptDebugServer::hasBreakpoint):
* bindings/scripts/CodeGeneratorJS.pm:
(GenerateEventListenerCall):
(GenerateImplementation):
(JSValueToNative):
* bridge/c/c_utility.cpp:
(JSC::Bindings::convertValueToNPVariant):
* bridge/jni/jni_jsobject.mm:
(JavaJSObject::convertValueToJObject):

Source/WebKit/mac: 

Reviewed by Oliver Hunt.
        
Merged r115512 from dfgopt.

JSValue::toBoolean(ExecState*) -> JSValue::toBoolean()
        
* Plugins/Hosted/NetscapePluginInstanceProxy.mm:
(WebKit::NetscapePluginInstanceProxy::addValueToArray):

Source/WebKit2: 

Reviewed by Oliver Hunt.

Merged r115512 from dfgopt.

JSValue::toBoolean(ExecState*) -> JSValue::toBoolean()
        
* WebProcess/Plugins/Netscape/NPRuntimeObjectMap.cpp:
(WebKit::NPRuntimeObjectMap::convertJSValueToNPVariant):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117646 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL] Gardening; run CSS grid layout tests after r117613.

* platform/efl/test_expectations.txt:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117647 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL] Unreviewed gardening.

Try to add the right expectation for fast/forms/plaintext-mode-2.html
after r117597.

* platform/efl/test_expectations.txt:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117648 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL] Gardening; update results after r117640.

* platform/efl/fast/forms/form-hides-table-expected.txt:
* platform/efl/fast/table/form-with-table-style-expected.txt:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117649 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Fix remaining uses of JSValue::toBoolean()
https://bugs.webkit.org/show_bug.cgi?id=86912

Reviewed by Filip Pizlo.

And unbreak Qt build.

* bindings/scripts/test/JS/JSTestEventTarget.cpp:
(WebCore::jsTestEventTargetPrototypeFunctionAddEventListener):
(WebCore::jsTestEventTargetPrototypeFunctionRemoveEventListener):
* bindings/scripts/test/JS/JSTestObj.cpp:
(WebCore::setJSTestObjCreate):
(WebCore::setJSTestObjReflectedBooleanAttr):
(WebCore::setJSTestObjReflectedCustomBooleanAttr):
(WebCore::jsTestObjPrototypeFunctionAddEventListener):
(WebCore::jsTestObjPrototypeFunctionRemoveEventListener):
* bridge/qt/qt_runtime.cpp:
(JSC::Bindings::convertValueToQVariant):
* bridge/qt/qt_runtime_qt4.cpp:
(JSC::Bindings::convertValueToQVariant):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117650 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[chromium] More expectations updates, mostly for flaky tests.
http://code.google.com/p/chromium/issues/detail?id=24182
https://bugs.webkit.org/show_bug.cgi?id=54151
https://bugs.webkit.org/show_bug.cgi?id=85174
https://bugs.webkit.org/show_bug.cgi?id=86592
https://bugs.webkit.org/show_bug.cgi?id=86907
https://bugs.webkit.org/show_bug.cgi?id=86908
https://bugs.webkit.org/show_bug.cgi?id=86909

Unreviewed, test expectations update.

* platform/chromium/test_expectations.txt:



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117651 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Build fix after r117607.

* platform/mac/WebCoreNSCellExtras.m:



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117652 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL] More random gardening.

Remove a few tests which do not exist anymore from the skipped
list, and rebaseline and add expectations for a few others.

* platform/efl/Skipped:
* platform/efl/fast/html/font-weight-bold-for-b-and-strong-expected.txt: Added.
* platform/efl/fast/invalid/004-expected.txt:
* platform/efl/fast/invalid/010-expected.png:
* platform/efl/fast/invalid/010-expected.txt:
* platform/efl/fast/text/zero-font-size-expected.png: Added.
* platform/efl/fast/text/zero-font-size-expected.txt: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117653 268f45cc-cd09-0410-ab3c-d52691b4dbfc
DFG CFG simplification crashes if it's trying to remove an unreachable block
that has an already-killed-off unreachable successor
https://bugs.webkit.org/show_bug.cgi?id=86918

Reviewed by Oliver Hunt.
        
This fixes crashes in:
inspector/styles/styles-computed-trace.html
inspector/console/console-big-array.html

* dfg/DFGCFGSimplificationPhase.cpp:
(JSC::DFG::CFGSimplificationPhase::fixPhis):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117654 268f45cc-cd09-0410-ab3c-d52691b4dbfc
REGRESSION (r117640) fast/table/form-with-table and fast/forms/form-hides-table fail on Mac
https://bugs.webkit.org/show_bug.cgi?id=86920

Unreviewed. Updating expectations after r117640.

* platform/mac/fast/forms/form-hides-table-expected.txt:
* platform/mac/fast/table/form-with-table-style-expected.txt:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117655 268f45cc-cd09-0410-ab3c-d52691b4dbfc
BitmapImage::BitmapImage(CGImageRef, ImageObserver*) needs to set m_sizeRespectingOrientation
https://bugs.webkit.org/show_bug.cgi?id=86915

Reviewed by Oliver Hunt.

Set m_sizeRespectingOrientation to be the same as m_size. Otherwise it stays at 0x0 since
this constructor also sets m_haveSize to true for the BitmapImage.

* platform/graphics/cg/ImageCG.cpp:
(WebCore::BitmapImage::BitmapImage):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117656 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Unreviewed. Updating non-mac platform expectations after r117640.

* fast/forms/form-hides-table-expected.txt: Added.
* fast/table/form-with-table-style-expected.txt: Added.
* platform/chromium-mac-leopard/fast/table/form-with-table-style-expected.png:
* platform/chromium-mac-snowleopard/fast/table/form-with-table-style-expected.png:
* platform/chromium-mac/fast/table/form-with-table-style-expected.png:
* platform/chromium/test_expectations.txt:
* platform/gtk/fast/forms/form-hides-table-expected.txt: Removed.
* platform/gtk/fast/table/form-with-table-style-expected.txt: Removed.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117657 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Assertion failure in BidiResolver::commitExplicitEmbedding() (!inIsolate() || m_currentExplicitEmbeddingSequence.isEmpty()) at wikipedia.org
https://bugs.webkit.org/show_bug.cgi?id=76574

Reviewed by Levi Weintraub.

Source/WebCore:

Consider this example:
<span style="unicode-bidi: embed"><span style="unicode-bidi: isolate">a</span></span>
Before this patch, we would ASSERT when computing the text runs, as we would have encountered
the "embed LTR" directive from the outer span, but not try to "commit" this embedding until
we encountered the first charater (an optimization to avoid creating unnecessary bidi embedding contexts).
The ASSERT we were hitting was to ensure that embedding directives inside an isolated span
did not bleed out and effect the surrounding text.

bidi "isolate" support uses a multi-pass Unicode Bidi Algorithm (UBA), which when encountering
"isolated" sections of text ignores them in the first pass, and then goes back and runs
a separate instance of the UBA on those isolated sections.

Once we scan into an "isolate" section (during an outer UBA application) we should not respect
any embedding directives inside that "isolate" section.

However, in the above example, our "don't commit embeddings until we need them" and
"assert we don't respect embeddings inside isolated spans" were conflicting.
The fix is to make sure we always commit any pending embedding directives *before*
we enter an isolate section.

Luckly there was no functional bug here as we were still respecting
the embedding directives we were belatedly committing. After this change we're commiting
those directives at a more appropriate time, thus avoiding the ASSERT.

Test: fast/text/bidi-isolate-embedding-crash.html

* platform/text/BidiResolver.h:
(WebCore::::commitExplicitEmbedding):
* rendering/InlineIterator.h:
(WebCore::notifyObserverEnteredObject):
(WebCore::IsolateTracker::commitExplicitEmbedding):

LayoutTests:

* fast/text/bidi-isolate-embedding-crash-expected.txt: Added.
* fast/text/bidi-isolate-embedding-crash.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@117658 268f45cc-cd09-0410-ab3c-d52691b4dbfc