Bug, assignment within subscript of prefix/postfix increment of bracket access
https://bugs.webkit.org/show_bug.cgi?id=95913

Reviewed by Oliver Hunt.

Source/JavaScriptCore: 

javascript:alert((function(){ var a = { x:1 }; var b = { x:1 }; a[a=b,"x"]++; return a.x; })())

* bytecompiler/NodesCodegen.cpp:
(JSC::PostfixNode::emitBracket):
(JSC::PrefixNode::emitBracket):
    - Should check for assigments in the subscript when loading the base.
* parser/Nodes.h:
(JSC::BracketAccessorNode::subscriptHasAssignments):
(BracketAccessorNode):
    - Used by emitBracket methods.

LayoutTests: 

Added test cases.

* fast/js/inc-bracket-assign-subscript-expected.txt: Added.
* fast/js/inc-bracket-assign-subscript.html: Added.
* fast/js/script-tests/inc-bracket-assign-subscript.js: Added.
(testPreIncBracketAccessWithAssignSubscript):
(testPostIncBracketAccessWithAssignSubscript):
    - Tests a pre/post increment to a bracket access, where subscript contains assignment.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127666 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[Chromium] unreviewed test expectation update

* platform/chromium/TestExpectations:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127667 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[Tests] We should have mouse events test for multiple fields time input UI
https://bugs.webkit.org/show_bug.cgi?id=95829

Reviewed by Kent Tamura.

This patch adds test cases of mouse actions on multiple fields time
input UI.

The test checks:
 - Mouse click to set focus to field under mouse pointer
 - Mouse click on spin button

This patch affects ports which enable both ENABLE_INPUT_TYPE_TIME and
ENABLE_INPUT_TYPE_TIME_MULTIPLE_FIELDS.

* fast/forms/time-multiple-fields/time-multiple-fields-mouse-events-expected.txt: Added.
* fast/forms/time-multiple-fields/time-multiple-fields-mouse-events.html: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127668 268f45cc-cd09-0410-ab3c-d52691b4dbfc
IndexedDB: Integer version lost after first open/close/open cycle
https://bugs.webkit.org/show_bug.cgi?id=95864

Reviewed by Tony Chang.

Source/WebCore:

New backing stores were being created with an old schema version, causing migration
to occur when the backing store was re-opened, which would overwrite valid integer
version metadata. New backing stores should be created with the latest schema version
since no migration is desired.

Test: storage/indexeddb/intversion-persistence.html

* Modules/indexeddb/IDBLevelDBBackingStore.cpp:
(WebCore::setUpMetadata):

LayoutTests:

Ensure integer versions are persisted across open/close/open cycles.

Note that although this is a useful and valid test in general, the specific bug that
prompted adding this test will only repro if the origin has no pre-existing backing
store, which is not guaranteed by DRT or other shells. See http://webkit.org/b/92166

* storage/indexeddb/intversion-persistence-expected.txt: Added.
* storage/indexeddb/intversion-persistence.html: Added.
* storage/indexeddb/resources/intversion-persistence.js: Added.
(test):
(openFirstTime.request.onupgradeneeded):
(openFirstTime.request.onsuccess):
(openFirstTime):
(openSecondTime.request.onsuccess):
(openSecondTime):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127669 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[BlackBerry] Assignment operators missing self-check
https://bugs.webkit.org/show_bug.cgi?id=95774

Reviewed by Rob Buis.

Add a test for self-assignment.

* Api/WebAnimation.cpp:
(BlackBerry::WebKit::WebAnimation::operator=):
* Api/WebString.cpp:
(BlackBerry::WebKit::WebString::operator=):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127670 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[BlackBerry] Match th ebuild flags from the platform library
https://bugs.webkit.org/show_bug.cgi?id=95423

Reviewed by Antonio Gomes.

Unaligned build flags can cause crashes and other strange behavior.
These two were not defined here but were defined on the system.

* Source/cmake/OptionsBlackBerry.cmake:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127671 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[chromium] Move static WebCompositor functions to WebCompositorSupport
https://bugs.webkit.org/show_bug.cgi?id=95785

Reviewed by Darin Fisher.

The statics on WebCompositor need to be moved to WebCompositorSupport so the embedder can inject an
implementation for these via PlatformSupport. This adds the interface for the statics to WebCompositorSupport.
After an implementation of these lands on the chromium side, I'll switch all callers over to use these and
remove the WebCompositor interface from the API.

* chromium/public/WebCompositorSupport.h:
(WebCompositorSupport):
(WebKit::WebCompositorSupport::initialize):
(WebKit::WebCompositorSupport::threadingEnabled):
(WebKit::WebCompositorSupport::shutdown):
(WebKit::WebCompositorSupport::setPerTilePaintingEnabled):
(WebKit::WebCompositorSupport::setPartialSwapEnabled):
(WebKit::WebCompositorSupport::setAcceleratedAnimationEnabled):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127672 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[Chromium] unreviewed gardening after r127564

Added missing text expectation.

* fast/forms/datetime/datetime-interactive-validation-required-expected.txt: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127673 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[Chromium] history.{push,replace}State should no longer be V8EnabledAtRuntime
https://bugs.webkit.org/show_bug.cgi?id=95865

Reviewed by Darin Fisher.

Source/WebCore:

r55549 made them be runtime-enabled (since the Chromium implementation
was not complete at the time), but they've been enabled by default
since http://crrev.com/41850

* bindings/generic/RuntimeEnabledFeatures.cpp:
(WebCore):
* bindings/generic/RuntimeEnabledFeatures.h:
(RuntimeEnabledFeatures):
* page/History.idl:

Source/WebKit/chromium:

Make WebRuntimeFeatures::{enablePushState,isPushStateEnabled} into
no-ops.

* public/WebRuntimeFeatures.h:
(WebRuntimeFeatures):
* src/WebRuntimeFeatures.cpp:
(WebKit::WebRuntimeFeatures::enablePushState):
(WebKit::WebRuntimeFeatures::isPushStateEnabled):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@127674 268f45cc-cd09-0410-ab3c-d52691b4dbfc