Web Animations: Correctly handle incomplete keyframes in CSS animations

BUG=240653
R=dstockwell

Review URL: https://codereview.chromium.org/23875044

git-svn-id: svn://svn.chromium.org/blink/trunk@158612 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Web Animations CSS: Support Animation of shape-inside and clip-path

Since this defers to the existing interpolation logic some errors around
clamping of radii are preserved.

Note that shape-inside is not yet shipped.

BUG=257591, 302068

Review URL: https://codereview.chromium.org/25191002

git-svn-id: svn://svn.chromium.org/blink/trunk@158613 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fix 1-pixel decodedSize mismatch of downsampled JPEG

decodedSize() needs to exactly match the output_width/output_height of
the JPEG decoder. The original code may result a 1-pixel mismatch of
the decoded size if the original width/height is not multiple of 8,
causing data corruption when the image buffer is used to create a
sub-image, and crashes when the sub-image is used.

BUG=276666,301973
TEST=JPEGImageDecoderTest.downsampleImageSizeMultipleOf8, JPEGImageDecoderTest.downsampleImageSizeNotMultipleOf8

Review URL: https://codereview.chromium.org/25382002

git-svn-id: svn://svn.chromium.org/blink/trunk@158615 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move lifecycle notification check to V8ScriptController.

This CL moves checks for lifecycle notofication reentrancy
from ScriptController to V8ScriptController so that more of
callsites is covered by the check.

TEST=none
BUG=297482
R=abarth@chromium.org

Review URL: https://codereview.chromium.org/25461002

git-svn-id: svn://svn.chromium.org/blink/trunk@158616 bbb929c8-8fbe-4397-9dbb-9b2b20218538