[CSSRegions] Fix fast/regions/assert-flow-thread-compositing.html test description
https://bugs.webkit.org/show_bug.cgi?id=126203

Reviewed by Dirk Schulze.

Correct description of successful behaviour for fast/regions/assert-flow-thread-compositing.html.

* fast/regions/assert-flow-thread-compositing-expected.txt:
* fast/regions/assert-flow-thread-compositing.html:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@161048 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Source/WebKit: Roll out r161043. It broke 32-bit Mac builds.

Source/WebKit/ios: Roll out r161043. It broke 32-bit Mac builds.

Source/WebKit/mac: Roll out r161043. It broke 32-bit Mac builds.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@161049 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Crash in ReplaceSelectionCommand
https://bugs.webkit.org/show_bug.cgi?id=126107

Reviewed by Benjamin Poulain.

Merge https://chromium.googlesource.com/chromium/blink/+/c1ebe5c1e808daf9db5e348a8d0ab32570b9f7a5
except the test since it doesn't reproduce the crash in WebKit.

* editing/ReplaceSelectionCommand.cpp:
(WebCore::ReplaceSelectionCommand::doApply):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@161050 268f45cc-cd09-0410-ab3c-d52691b4dbfc
XMLHttpRequest: status and statusText throw DOM Exception 11 when the state is UNSENT or OPENED.
https://bugs.webkit.org/show_bug.cgi?id=45994

Reviewed by Alexey Proskuryakov.

Source/WebCore:

Merged https://chromium.googlesource.com/chromium/blink/+/23c90460de16e04c5aba7ed942fba76cb79fdb9b.

Latest XHR spec says that XHR should return 0 and an empty string when it's in UNSENT or OPENED state
or error flag is set: http://www.w3.org/TR/2012/WD-XMLHttpRequest-20121206/#the-status-attribute

* xml/XMLHttpRequest.cpp:
(WebCore::XMLHttpRequest::status):
(WebCore::XMLHttpRequest::statusText):
* xml/XMLHttpRequest.h:
* xml/XMLHttpRequest.idl:

LayoutTests:

Rebaselined and fixed tests as done in https://chromium.googlesource.com/chromium/blink/+/23c90460de16e04c5aba7ed942fba76cb79fdb9b.

* http/tests/xmlhttprequest/exceptions-expected.txt:
* http/tests/xmlhttprequest/exceptions.html:
* http/tests/xmlhttprequest/status-after-abort-expected.txt:
* http/tests/xmlhttprequest/zero-length-response-expected.txt:

* js/dom/dfg-custom-getter-throw-expected.txt:
* js/dom/script-tests/dfg-custom-getter-throw-inlined.js: Fixed the test.
(foo): Use responseText instead of status so that it throws when responseType is "arraybuffer".
(bar): Set responseType to "arraybuffer" to cause an exception to be thrown.
* js/dom/script-tests/dfg-custom-getter-throw.js: Ditto.
(foo):
(bar):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@161051 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Add a test for reattaching collapsed whitespace when siblings change style
https://bugs.webkit.org/show_bug.cgi?id=126053

Reviewed by Dan Bernstein.

Merge the test from https://chromium.googlesource.com/chromium/blink/+/dd5636728643ff958aebeaf064d38754b0d5904b
so that we may not introduce the same regression in WebKit.

* fast/css/collapsed-whitespace-reattach-in-style-recalc-expected.txt: Added.
* fast/css/collapsed-whitespace-reattach-in-style-recalc.html: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@161052 268f45cc-cd09-0410-ab3c-d52691b4dbfc
32-bit Mac build fix attempt after r161045.

* WebProcess/Plugins/Netscape/mac/NetscapePluginMac.mm:
(WebKit::windowMap):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@161053 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[CSSRegions] Crash while repainting an invalid region
https://bugs.webkit.org/show_bug.cgi?id=126152

Reviewed by Daniel Bates.

Source/WebCore:

An invalid region, part of a dependency cycle, should not attempt to repaint content from
its associated named flow, otherwise there may be the case of an infinite repaint cycle,
resulting in a crash due to a stack overflow.

Test: fast/regions/repaint/invalid-region-repaint-crash.html

* rendering/RenderLayer.cpp:
(WebCore::RenderLayer::repaintIncludingDescendants):

LayoutTests:

* fast/regions/repaint/invalid-region-repaint-crash-expected.txt: Added.
* fast/regions/repaint/invalid-region-repaint-crash.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@161054 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Suppress assertions in js/dom/dfg-custom-getter-throw.html and js/dom/dfg-custom-getter-throw-inlined.html for now.

* TestExpectations:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@161055 268f45cc-cd09-0410-ab3c-d52691b4dbfc