[Chromium] GesturePinchBegin and friends are gesture events
https://bugs.webkit.org/show_bug.cgi?id=89398

Reviewed by James Robinson.

* public/WebInputEvent.h:
(WebKit::WebInputEvent::isGestureEventType):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@120659 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Make serve-video.php serve 206 responses
https://bugs.webkit.org/show_bug.cgi?id=89252

Reviewed by Adam Barth.

* http/tests/media/resources/serve-video.php:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@120660 268f45cc-cd09-0410-ab3c-d52691b4dbfc
RenderLayerBacking sometimes doesn't attach scrollbars to graphics layer tree
https://bugs.webkit.org/show_bug.cgi?id=89402

Reviewed by James Robinson.

Source/WebCore:

RenderLayerBacking only attaches scrollbar layers to the graphics
layer tree if there's a clip layer. This is wrong, because these
scrollbars become orphans and other code expects them to handle
repainting the scrollbars (which now become invisible). Fix by always
attaching scrollbar layers.

Test: compositing/overflow/image-load-overflow-scrollbars.html

* rendering/RenderLayerBacking.cpp:
(WebCore::RenderLayerBacking::updateInternalHierarchy):

LayoutTests:

Add a test where an image load creates overflow.

* compositing/overflow/image-load-overflow-scrollbars-expected.png: Added.
* compositing/overflow/image-load-overflow-scrollbars-expected.txt: Added.
* compositing/overflow/image-load-overflow-scrollbars.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@120661 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Crash when setting title dynamically
https://bugs.webkit.org/show_bug.cgi?id=88083

Reviewed by Dan Bernstein.

Source/WebCore:

Test: fast/text/title-crash.html

The crashing code takes a rare branch in StyleResolver::styleForElement() where
m_parentStyle is set to point to m_style. Consequently, while applying properties
to m_style we end up mutating m_parentStyle.

In this situation, we clone style() and point m_parentStyle at the clone. The
clone is destroyed at the end of StyleResolver::styleForElement().

* css/StyleResolver.cpp:
(WebCore::StyleResolver::collectMatchingRulesForList):

LayoutTests:

* fast/text/title-crash.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@120662 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[JSC] In JSGlobalData.cpp, enableAssembler() sometimes leaks two CF objects
https://bugs.webkit.org/show_bug.cgi?id=89415

Reviewed by Sam Weinig.

In the case where canUseJIT was a non-NULL CFBooleanRef,
enableAssembler() would leak both canUseJITKey and canUseJIT by
returning before calling CFRelease. Fix this by using RetainPtr.

* runtime/JSGlobalData.cpp:
(JSC::enableAssembler):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@120663 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Fix r120663, which didn't land the change that was reviewed.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@120664 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Unreviewed test marking. Marked border-radius-clip-002.htm as a failure.

* platform/chromium/TestExpectations:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@120665 268f45cc-cd09-0410-ab3c-d52691b4dbfc