Make MediaStream objects ScriptWrappable
https://bugs.webkit.org/show_bug.cgi?id=120879

Reviewed by Jer Noble.

* Modules/mediastream/MediaStream.h: Inherit from ScriptWrappable.
* Modules/mediastream/MediaStreamTrack.h: Ditto.
* Modules/mediastream/RTCDTMFSender.h: Ditto.
* Modules/mediastream/RTCDataChannel.h: Ditto.
* Modules/mediastream/RTCIceCandidate.h: Ditto.
* Modules/mediastream/RTCPeerConnection.h: Ditto.
* Modules/mediastream/RTCSessionDescription.h: Ditto.
* Modules/mediastream/RTCStatsReport.h: Ditto.
* Modules/mediastream/RTCStatsResponse.h: Ditto.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155478 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Replace remaining "fast js" names in scripts.
https://bugs.webkit.org/show_bug.cgi?id=120899.

Rubber stamped by Filip Pizlo.

* BuildSlaveSupport/build.webkit.org-config/mastercfg_unittest.py:
(test_layout_failure_new_output):
(test_layout_crash_new_output):
(test_mozilla_and_layout_failure_new_output):
* Scripts/run-fast-jsc: Removed.
* Scripts/run-javascriptcore-tests:
* Scripts/run-layout-jsc: Copied from Tools/Scripts/run-fast-jsc.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155479 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Introduce a SpecInt48 type and be more careful about what we mean by "Top"
https://bugs.webkit.org/show_bug.cgi?id=121116

Reviewed by Oliver Hunt.
        
SpecInt48 will mean that we have something that would be a double if it was a JSValue,
but it's profitable to represent it as something other than a double.
        
SpecInt48AsDouble means that it has a value that could have been represented like
SpecInt48, but we're making a heuristic decision not to do it.

* bytecode/SpeculatedType.h:
(JSC::isInt48Speculation):
* dfg/DFGAbstractInterpreterInlines.h:
(JSC::DFG::::executeEffects):
(JSC::DFG::::clobberCapturedVars):
* dfg/DFGAbstractValue.cpp:
(JSC::DFG::AbstractValue::filter):
* dfg/DFGAbstractValue.h:
(JSC::DFG::AbstractValue::makeHeapTop):
(JSC::DFG::AbstractValue::makeBytecodeTop):
(JSC::DFG::AbstractValue::isHeapTop):
(JSC::DFG::AbstractValue::heapTop):
(JSC::DFG::AbstractValue::validateType):
(JSC::DFG::AbstractValue::validate):
(JSC::DFG::AbstractValue::makeTop):
* dfg/DFGInPlaceAbstractState.cpp:
(JSC::DFG::InPlaceAbstractState::initialize):
* dfg/DFGJITCompiler.h:
(JSC::DFG::JITCompiler::noticeOSREntry):
* dfg/DFGUseKind.h:
(JSC::DFG::typeFilterFor):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155480 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL][JHBUILD] Use a tarball for libseccomp, instead of git
https://bugs.webkit.org/show_bug.cgi?id=121114

Patch by Sergio Correia <sergio.correia@openbossa.org> on 2013-09-10
Reviewed by Christophe Dumez.

Use a tarball for libseccomp instead of git to avoid network issues on
the buildbots while checking out the git repo. Using tarballs has the
advantage of them being cached if the checksum matches, in which case
there will be no need to download them again.

* efl/jhbuild.modules:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155481 268f45cc-cd09-0410-ab3c-d52691b4dbfc
We should say Int32 when we mean Int32. Saying Integer is just weird.

Rubber stamped by Mark Hahnenberg.

* dfg/DFGAbstractInterpreterInlines.h:
(JSC::DFG::::executeEffects):
* dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupNode):
(JSC::DFG::FixupPhase::fixupToPrimitive):
(JSC::DFG::FixupPhase::fixIntEdge):
(JSC::DFG::FixupPhase::truncateConstantsIfNecessary):
(JSC::DFG::FixupPhase::attemptToMakeIntegerAdd):
* dfg/DFGGraph.h:
(JSC::DFG::Graph::addSpeculationMode):
(JSC::DFG::Graph::valueAddSpeculationMode):
(JSC::DFG::Graph::arithAddSpeculationMode):
(JSC::DFG::Graph::addShouldSpeculateInt32):
(JSC::DFG::Graph::mulShouldSpeculateInt32):
(JSC::DFG::Graph::negateShouldSpeculateInt32):
(JSC::DFG::Graph::addImmediateShouldSpeculateInt32):
(JSC::DFG::Graph::mulImmediateShouldSpeculateInt32):
* dfg/DFGNode.h:
(JSC::DFG::Node::shouldSpeculateInt32):
(JSC::DFG::Node::shouldSpeculateInt32ForArithmetic):
(JSC::DFG::Node::shouldSpeculateInt32ExpectingDefined):
(JSC::DFG::Node::canSpeculateInt32):
* dfg/DFGNodeFlags.h:
(JSC::DFG::nodeCanSpeculateInt32):
* dfg/DFGPredictionPropagationPhase.cpp:
(JSC::DFG::PredictionPropagationPhase::propagate):
(JSC::DFG::PredictionPropagationPhase::doDoubleVoting):
* dfg/DFGSpeculativeJIT.cpp:
(JSC::DFG::SpeculativeJIT::arrayify):
(JSC::DFG::GPRTemporary::GPRTemporary):
(JSC::DFG::SpeculativeJIT::compilePeepHoleIntegerBranch):
(JSC::DFG::SpeculativeJIT::compileValueToInt32):
(JSC::DFG::SpeculativeJIT::compileUInt32ToNumber):
(JSC::DFG::SpeculativeJIT::compileInt32ToDouble):
(JSC::DFG::SpeculativeJIT::compileGetByValOnIntTypedArray):
(JSC::DFG::SpeculativeJIT::compilePutByValForIntTypedArray):
(JSC::DFG::SpeculativeJIT::compileAdd):
(JSC::DFG::SpeculativeJIT::compileArithSub):
(JSC::DFG::SpeculativeJIT::compileArithNegate):
(JSC::DFG::SpeculativeJIT::compileArithIMul):
(JSC::DFG::SpeculativeJIT::compileArithMul):
(JSC::DFG::SpeculativeJIT::compileArithDiv):
(JSC::DFG::SpeculativeJIT::compileArithMod):
(JSC::DFG::SpeculativeJIT::compileNewTypedArray):
(JSC::DFG::SpeculativeJIT::speculateInt32):
(JSC::DFG::SpeculativeJIT::emitSwitchImm):
* dfg/DFGSpeculativeJIT.h:
(JSC::DFG::SpeculateInt32Operand::SpeculateInt32Operand):
(JSC::DFG::SpeculateInt32Operand::~SpeculateInt32Operand):
* dfg/DFGSpeculativeJIT32_64.cpp:
(JSC::DFG::SpeculativeJIT::compileIntegerCompare):
(JSC::DFG::SpeculativeJIT::compileLogicalNot):
(JSC::DFG::SpeculativeJIT::emitBranch):
(JSC::DFG::SpeculativeJIT::compile):
* dfg/DFGSpeculativeJIT64.cpp:
(JSC::DFG::SpeculativeJIT::compileIntegerCompare):
(JSC::DFG::SpeculativeJIT::compileLogicalNot):
(JSC::DFG::SpeculativeJIT::emitBranch):
(JSC::DFG::SpeculativeJIT::compile):
* ftl/FTLLowerDFGToLLVM.cpp:
(JSC::FTL::LowerDFGToLLVM::compileUInt32ToNumber):
(JSC::FTL::LowerDFGToLLVM::compileGetByVal):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155482 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Unreviewed build fix after r155476.

* GNUmakefile.list.am: Remove reference to deleted OwnPtrWin.cpp file.
* WTF.pro: Ditto.
* wtf/CMakeLists.txt: Ditto.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155483 268f45cc-cd09-0410-ab3c-d52691b4dbfc
More WTF/Alignment.h removal
https://bugs.webkit.org/show_bug.cgi?id=121125

Reviewed by Andreas Kling.

Source/WebCore:

* platform/PODArena.h:

Source/WTF:

* wtf/Alignment.h:
* wtf/Vector.h:
(WTF::VectorBuffer::swap):
(WTF::VectorBuffer::inlineBuffer):
* wtf/text/ASCIIFastPath.h:
(WTF::isAlignedTo):
(WTF::isAlignedToMachineWord):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155484 268f45cc-cd09-0410-ab3c-d52691b4dbfc
AnimationController should have a Frame& internally.
<https://webkit.org/b/121078>

Reviewed by Anders Carlsson.

The AnimationController is owned by the Frame so make the back-pointer
a reference. This knocks off a couple of null checks.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155485 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Fix EFL build after r155477
https://bugs.webkit.org/show_bug.cgi?id=121126

Patch by Sergio Correia <sergio.correia@openbossa.org> on 2013-09-10
Reviewed by Antonio Gomes.

No new tests, build fix.

* CMakeLists.txt: MediaStreamComponent.cpp and MediaStreamDescriptor.cpp
were added with an incorrect path.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155486 268f45cc-cd09-0410-ab3c-d52691b4dbfc
MapData has some issues
https://bugs.webkit.org/show_bug.cgi?id=121118

Reviewed by Geoffrey Garen.

* heap/CopiedBlock.h: Added some debug-only consistency checking logic. We now make sure that
m_liveBytes is consistent with another field, m_liveObjects. m_liveObjects is the number of
"objects" that currently reside in the CopiedBlock. If we have zero live bytes then we should have
zero live objects. The converse and the inverse should also be true.
(JSC::CopiedBlock::CopiedBlock):
(JSC::CopiedBlock::didSurviveGC):
(JSC::CopiedBlock::didEvacuateBytes):
(JSC::CopiedBlock::canBeRecycled):
(JSC::CopiedBlock::shouldEvacuate):
(JSC::CopiedBlock::liveBytes):
(JSC::CopiedBlock::checkConsistency):
* heap/CopiedBlockInlines.h:
(JSC::CopiedBlock::reportLiveBytes):
* heap/CopyVisitorInlines.h:
(JSC::CopyVisitor::didCopy):
* runtime/MapData.cpp:
(JSC::MapData::replaceAndPackBackingStore): Renamed parameter to be consistent with its meaning.
(JSC::MapData::replaceBackingStore): Ditto. Also removed an unnecessary local variable.
(JSC::MapData::visitChildren): Before we passed the size of the MapData to copyLater(), which
was wrong. Now we pass capacity * sizeof(Entry).
(JSC::MapData::copyBackingStore): Before when we reassigned the newly copied backing store, we
set the capacity (in elements) to the size (in bytes) of the backing store. This made us think
we're way bigger than we actually are. Now we just pass the old capacity in.
* runtime/MapData.h:
(JSC::MapData::capacityInBytes): Helper function to calculate the size of the backing store.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155487 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Adding another screenshot for a potential blog post.

* blog-files/regions/unstyled-article.png: Added.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155488 268f45cc-cd09-0410-ab3c-d52691b4dbfc
run-jsc-stress-tests should have a mode for always running the copy phase
https://bugs.webkit.org/show_bug.cgi?id=121128

Reviewed by Geoffrey Garen.

This will increase test coverage of the copying phase, which might not always get
triggered normally with our default parameters for required Heap/CopiedBlock utilization.

* Scripts/run-jsc-stress-tests:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155489 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[Qt] Add FloatingObjects.h to Target.pri
https://bugs.webkit.org/show_bug.cgi?id=121117

Reviewed by Andreas Kling.

No new tests, no behavior change.

* Target.pri:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155490 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Remove wtf/Alignment.h
https://bugs.webkit.org/show_bug.cgi?id=121077

Reviewed by Andreas Kling.

Source/WebCore:

* platform/PODArena.h:
(WebCore::PODArena::minAlignment):
* platform/graphics/cpu/arm/filters/FELightingNEON.h:
(WebCore::FELighting::platformApplyNeon):

Source/WTF:

* GNUmakefile.list.am:
* WTF.pro:
* WTF.vcxproj/WTF.vcxproj:
* WTF.vcxproj/WTF.vcxproj.filters:
* WTF.xcodeproj/project.pbxproj:
* wtf/Alignment.h: Removed.
* wtf/CMakeLists.txt:
* wtf/text/ASCIIFastPath.h:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155491 268f45cc-cd09-0410-ab3c-d52691b4dbfc
AX: AXValue/AXMenuItemMarkChar not defined for menuitemradio (should be false (0) with aria-checked=mixed | undefined)
https://bugs.webkit.org/show_bug.cgi?id=120372

Reviewed by Mario Sanchez Prada.

Source/WebCore: 

Add new roles to make the distinction between menu item, menu item radio and menu item checkbox.
Expose AXValue for menu items, so that they can convey the, on/off/mixed state of aria-checked.

Test: platform/mac/accessibility/menu-item-values.html

* accessibility/AccessibilityNodeObject.cpp:
(WebCore::AccessibilityNodeObject::isMenuRelated):
(WebCore::AccessibilityNodeObject::isMenuItem):
(WebCore::AccessibilityNodeObject::isChecked):
(WebCore::AccessibilityNodeObject::actionElement):
(WebCore::AccessibilityNodeObject::visibleText):
(WebCore::AccessibilityNodeObject::title):
* accessibility/AccessibilityObject.cpp:
(WebCore::createARIARoleMap):
(WebCore::AccessibilityObject::checkboxOrRadioValue):
* accessibility/AccessibilityObject.h:
* accessibility/AccessibilityRenderObject.cpp:
(WebCore::AccessibilityRenderObject::computeAccessibilityIsIgnored):
* accessibility/ios/WebAccessibilityObjectWrapperIOS.mm:
(-[WebAccessibilityObjectWrapper accessibilityCanFuzzyHitTest]):
(-[WebAccessibilityObjectWrapper accessibilityTraits]):
* accessibility/mac/WebAccessibilityObjectWrapperMac.mm:
(-[WebAccessibilityObjectWrapper accessibilityAttributeNames]):
(createAccessibilityRoleMap):
(-[WebAccessibilityObjectWrapper accessibilityAttributeValue:]):

LayoutTests: 

* platform/mac/accessibility/menu-item-values-expected.txt: Added.
* platform/mac/accessibility/menu-item-values.html: Added.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@155492 268f45cc-cd09-0410-ab3c-d52691b4dbfc