Assert that Supplementable objects is only used in their creator thread.
https://bugs.webkit.org/show_bug.cgi?id=107717.

Reviewed by Adam Barth.

No new tests.

* platform/Supplementable.h:
(WebCore):
(WebCore::Supplementable::provideSupplement):
(WebCore::Supplementable::removeSupplement):
(WebCore::Supplementable::requireSupplement):
(Supplementable):
(WebCore::Supplementable::Supplementable):



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@140580 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[chromium] Layout test rebaselines

Unreviewed rebaseline

* platform/chromium-win-xp/media/media-can-play-ogg-expected.txt: Added.
* platform/chromium-win/media/media-can-play-ogg-expected.txt: Added.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@140581 268f45cc-cd09-0410-ab3c-d52691b4dbfc
        <rdar://problem/13064414> REGRESSION(r139514): didFailToSendSyncMessage is not called by Connection
        https://bugs.webkit.org/show_bug.cgi?id=107715

        Reviewed by Anders Carlsson.

        * Platform/CoreIPC/Connection.cpp:
        (CoreIPC::Connection::sendSyncMessage):
        (CoreIPC::Connection::sendSyncMessageFromSecondaryThread):
        Correcting a misapplied edit - didFailToSendSyncMessage should be kept in main
        thread message sending, not in secondary thread.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@140582 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[CSS Grid Layout] Add support for max-content
https://bugs.webkit.org/show_bug.cgi?id=107604

Reviewed by Tony Chang.

Source/WebCore:

Tests: fast/css-grid-layout/minmax-max-content-resolution-columns.html
       fast/css-grid-layout/minmax-max-content-resolution-rows.html

This change implements max-content on top of the infrastructure introduced as part
of implementing min-content (bug 106474). No effort was made to share code, which
is what was done for min-content. The sharing will occur in follow-up refactoring(s)
to benefit from the extra testing but also the extra code to make the direction more
obvious.

* rendering/RenderGrid.cpp:
(WebCore::RenderGrid::maxContentForChild):
Added this helper, similar to minContentForChild.

(WebCore::RenderGrid::resolveContentBasedTrackSizingFunctions):
Patched the function to handle max-content per the specification's algorithm.

* rendering/RenderGrid.h:
Added maxContentForChild.

LayoutTests:

* fast/css-grid-layout/minmax-max-content-resolution-columns-expected.txt: Added.
* fast/css-grid-layout/minmax-max-content-resolution-columns.html: Added.
* fast/css-grid-layout/minmax-max-content-resolution-rows-expected.txt: Added.
* fast/css-grid-layout/minmax-max-content-resolution-rows.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@140583 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Replace numerous manual CRASH's in JSC with RELEASE_ASSERT
https://bugs.webkit.org/show_bug.cgi?id=107726

Reviewed by Filip Pizlo.

Fairly manual change from if (foo) CRASH(); to RELEASE_ASSERT(!foo);

* assembler/MacroAssembler.h:
(JSC::MacroAssembler::branchAdd32):
(JSC::MacroAssembler::branchMul32):
* bytecode/CodeBlockHash.cpp:
(JSC::CodeBlockHash::CodeBlockHash):
* heap/BlockAllocator.h:
(JSC::Region::create):
(JSC::Region::createCustomSize):
* heap/GCAssertions.h:
* heap/HandleSet.cpp:
(JSC::HandleSet::visitStrongHandles):
(JSC::HandleSet::writeBarrier):
* heap/HandleSet.h:
(JSC::HandleSet::allocate):
* heap/Heap.cpp:
(JSC::Heap::collect):
* heap/SlotVisitor.cpp:
(JSC::SlotVisitor::validate):
* interpreter/Interpreter.cpp:
(JSC::Interpreter::execute):
* jit/ExecutableAllocator.cpp:
(JSC::DemandExecutableAllocator::allocateNewSpace):
(JSC::ExecutableAllocator::allocate):
* jit/ExecutableAllocator.h:
(JSC::roundUpAllocationSize):
* jit/ExecutableAllocatorFixedVMPool.cpp:
(JSC::FixedVMPoolExecutableAllocator::FixedVMPoolExecutableAllocator):
(JSC::ExecutableAllocator::allocate):
* runtime/ButterflyInlines.h:
(JSC::Butterfly::createUninitialized):
* runtime/Completion.cpp:
(JSC::evaluate):
* runtime/JSArray.h:
(JSC::constructArray):
* runtime/JSGlobalObject.cpp:
(JSC::slowValidateCell):
* runtime/JSObject.cpp:
(JSC::JSObject::enterDictionaryIndexingModeWhenArrayStorageAlreadyExists):
(JSC::JSObject::createArrayStorage):
* tools/TieredMMapArray.h:
(JSC::TieredMMapArray::append):
* yarr/YarrInterpreter.cpp:
(JSC::Yarr::Interpreter::allocDisjunctionContext):
(JSC::Yarr::Interpreter::allocParenthesesDisjunctionContext):
(JSC::Yarr::Interpreter::InputStream::readChecked):
(JSC::Yarr::Interpreter::InputStream::uncheckInput):
(JSC::Yarr::Interpreter::InputStream::atEnd):
(JSC::Yarr::Interpreter::interpret):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@140584 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Layout Test platform/chromium-win/fast/events/panScroll-panIcon.html is failing
https://bugs.webkit.org/show_bug.cgi?id=107729

Unreviewed gardening.

* platform/chromium/TestExpectations:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@140585 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[Chromium] Remove WebArrayBufferView and WebSerializedScriptValue from chromium/public/platform/
https://bugs.webkit.org/show_bug.cgi?id=107720

Reviewed by Darin Fisher.

These headers have been moved to chromium/public/ and all
references downstream were changed in
https://codereview.chromium.org/11946050/.
No DEPS roll necessary because it's already above 177695.

* WebKit.gyp:
* public/platform/WebArrayBufferView.h: Removed.
* public/platform/WebSerializedScriptValue.h: Removed.
* src/DeliveredIntentClientImpl.cpp:
* src/IDBCallbacksProxy.cpp:
* src/IDBCursorBackendProxy.cpp:
* src/WebArrayBufferView.cpp:
* src/WebBindings.cpp:
* src/WebDOMCustomEvent.cpp:
* src/WebDOMMessageEvent.cpp:
* src/WebFrameImpl.cpp:
* src/WebHistoryItem.cpp:
* src/WebIDBCallbacksImpl.cpp:
* src/WebIntent.cpp:
* src/WebIntentRequest.cpp:
* src/WebSerializedScriptValue.cpp:


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@140586 268f45cc-cd09-0410-ab3c-d52691b4dbfc