Heap-buffer-overflow in sk_getMetrics_glyph_00

Incorrect size argument passed to paintGlyphs in Font::drawGlyphs for
complex text.

BUG=316339
R=inferno@chromium.org,reed@chromium.org
TEST=https://cluster-fuzz.appspot.com/testcase?key=5492915463782400

Review URL: https://codereview.chromium.org/66513003

git-svn-id: svn://svn.chromium.org/blink/trunk@161657 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Partial revert of r161493.

It caused a bunch of test flakiness. The onload appears to be firing
after we dump the text in some cases. Don't really understand how
that's happening.

Didn't revert the compositing/gestures tests since that was just removing
unused includes of js-test.js from reftests.

R=kbr@chromium.org
TBR=kbr@chromium.org
BUG=316429, 316425, 316460

Review URL: https://codereview.chromium.org/66113002

git-svn-id: svn://svn.chromium.org/blink/trunk@161658 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Exclude Uniscribe-only function from harfbuzz builds

Exclude the HFONT version of paintSkiaText for HarfBuzz builds in
SkiaFonWin.h. The implementation is already guarded by an ifdef in
the cpp file.

R=dglazkov@chromium.org
BUG=313423

Review URL: https://codereview.chromium.org/66863006

git-svn-id: svn://svn.chromium.org/blink/trunk@161659 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move KillRing to platform/

BUG=297477

Review URL: https://codereview.chromium.org/64713002

git-svn-id: svn://svn.chromium.org/blink/trunk@161660 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Replace redundant <track> runtime checks with asserts

The IDL as RuntimeEnabled=VideoTrack for these two cases.

BUG=313287

Review URL: https://codereview.chromium.org/61763017

git-svn-id: svn://svn.chromium.org/blink/trunk@161661 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move RTCDTMFSenderHandler(Client) to platform/

BUG=297477

Review URL: https://codereview.chromium.org/64203004

git-svn-id: svn://svn.chromium.org/blink/trunk@161662 bbb929c8-8fbe-4397-9dbb-9b2b20218538