http/tests/security/dataURL/xss-DENIED-to-data-url-in-foreign-domain-subframe-location-change.html is MISSING flaky but frequently on Linux and Mac

BUG=240700
TBR=

Review URL: https://codereview.chromium.org/14843018

git-svn-id: svn://svn.chromium.org/blink/trunk@150326 bbb929c8-8fbe-4397-9dbb-9b2b20218538
fast/js/dfg-double-vote-fuzz.html is slow

BUG=24182
TBR=

Review URL: https://codereview.chromium.org/15175002

git-svn-id: svn://svn.chromium.org/blink/trunk@150327 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Mark some tests in fast/css/getComputedStyle/ as flaky MISSING on mac

BUG=240700
TBR=

Review URL: https://codereview.chromium.org/14607016

git-svn-id: svn://svn.chromium.org/blink/trunk@150328 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Replace custom indexed getter with auto-generated one

auto-generate V8HTMLFormElement::indexedPropertyGetter

R=haraken@chromium.org
BUG=229740
TEST=No tests. refactoring.

Review URL: https://chromiumcodereview.appspot.com/14874024

git-svn-id: svn://svn.chromium.org/blink/trunk@150329 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Add safety when the .src attribute of an <audio> or <video> element is changed and it's used with the Web Audio API

When this happens, the underlying WebMediaPlayer is changed, with the old one destroyed and the new one created.
We need to take care to synchronize this destruction of the old WebMediaPlayer.

Part of this change involves making sure WebMediaPlayerClientImpl::AudioSourceProviderImpl::wrap(0)
calls WebAudioSourceProvider::setClient(0) for the old WebAudioSourceProvider.

We also add locking in the WebMediaPlayerClientImpl::AudioSourceProviderImpl methods.

BUG=239897
R=abarth@chromium.org, dalecurtis@chromium.org, kbr@chromium.org

Review URL: https://codereview.chromium.org/15077011

git-svn-id: svn://svn.chromium.org/blink/trunk@150330 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Unreviewed Pre-emptive build fix

BUG=none
TBR=crogers@google.com

Review URL: https://codereview.chromium.org/14974007

git-svn-id: svn://svn.chromium.org/blink/trunk@150331 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Add tests for regions and lists/counters after https://src.chromium.org/viewvc/blink?revision=149561&view=revision . The tests are imported from the CSS Regions specification test suit.
An important addition is the inclusion of a new stylesheet font-smoothing-disabler.css that sets -webkit-font-smoothing: none on body. This necessary until content overflow is correctly handled by regions.

R=esprehn@chromium.org, jchaffraix@chromium.org
BUG=236686

Review URL: https://chromiumcodereview.appspot.com/15029005

git-svn-id: svn://svn.chromium.org/blink/trunk@150332 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Use INT_MAX instead of UINT_MAX to indicate end-of-segment

Our text rendering, editing and line break logic uses signed and
unsigned types interchangeably causing problems.

Change to use INT_MAX to indicate end-of-segment to avoid this
and add ASSERTS to catch similar problems in the future.

BUG=227157, 240537
R=eseidel@chromium.org, inferno@chromium.org
TESTED=No new tests, covered by existing tests

Review URL: https://codereview.chromium.org/14622017

git-svn-id: svn://svn.chromium.org/blink/trunk@150333 bbb929c8-8fbe-4397-9dbb-9b2b20218538