Make |node| a RefPtr in EventHandler::handleGestureScrollEnd()

It is possible for |m_scrollGestureHandlingNode| to be destroyed before
we attempt to use |node|, making |node| a dangling pointer and causing
a use-after-free error. Make |node| a RefPtr to avoid this.

BUG=275970

Review URL: https://codereview.chromium.org/26277002

git-svn-id: svn://svn.chromium.org/blink/trunk@159919 bbb929c8-8fbe-4397-9dbb-9b2b20218538
createElement('image') should create a HTMLElement

Create a HTMLElement when using createElement('image'), but keep
the HTML5 parser constructing HTMLImageElement for it.

BUG=305773

Review URL: https://codereview.chromium.org/26757002

git-svn-id: svn://svn.chromium.org/blink/trunk@159920 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move supportsStyleSharing to Element

This will let us use some private/protected APIs in Element or Node to
skip some of the branching in the future and also removes null checks that
were impossible to hit.

Review URL: https://codereview.chromium.org/26897004

git-svn-id: svn://svn.chromium.org/blink/trunk@159921 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fix ASSERT failure in RenderGeometryMap.

This ASSERT is too strong, and doesn't quite reflect the
intended behaviour. Invisible layers are skipped when
recomputing location in
RenderLayer::updateLayerPositionsAfterScroll(), but the
ASSERT assumes that even invisible layers should be correctly
positioned.

This patch changes the ASSERT to more accurately reflect
the correct intended behaviour, by skipping invisible
layers.

BUG=306100

Review URL: https://codereview.chromium.org/27104002

git-svn-id: svn://svn.chromium.org/blink/trunk@159922 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fixing bad usage patterns of WTF::RefPtr with SkRefCnt-derived objects

Before we can trun on run-time debug checks for RefPtr+SkRefCnt
adoption, we have to fix the cases where the checks are tripping.
None of the corrections in this patch fix actual memory leakis, but they
do fix fragile patterns in the code, like mixing OwnPtr with RefPtr on
the same object, and explicit deref() calls instead of adoptions.

BUG=304265

Review URL: https://codereview.chromium.org/27418002

git-svn-id: svn://svn.chromium.org/blink/trunk@159923 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Web Animations CSS: Support animation of -webkit-background-size and -webkit-mask-size

This patch extends animation of background-size introduced in
https://codereview.chromium.org/26259003/ to -webkit-background-size
and -webkit-mask-size which share the same logic.
The current animation implementation does not interpolate mismatched
values correctly and fails the newly added test.
The test passes under the Web Animations implementation.

BUG=257591

Review URL: https://codereview.chromium.org/27418005

git-svn-id: svn://svn.chromium.org/blink/trunk@159924 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Remove scrollOffsetX and scrollOffsetY from RenderLayer

Also removed adjustedScrollOffset that
depended on the previous functions.

BUG=260899

Review URL: https://codereview.chromium.org/27536012

git-svn-id: svn://svn.chromium.org/blink/trunk@159925 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move the logic to handle setHostAndPort to KURL.cpp

This was duplicated in DOMURLUtils.

There is one minor change. If setting location.host to "abc:" it used
remove the port, now it sets it to 0, to align with other usages of
URLs exposed to the web.

BUG=None

Review URL: https://codereview.chromium.org/27557005

git-svn-id: svn://svn.chromium.org/blink/trunk@159926 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Web Animations: Regularise unit test names

BUG=232278

Review URL: https://codereview.chromium.org/27664002

git-svn-id: svn://svn.chromium.org/blink/trunk@159927 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move the linux subpixel tests to a virtual test suite and re-enable

BUG=243378
R=dpranke@chromium.org

Review URL: https://codereview.chromium.org/27711007

git-svn-id: svn://svn.chromium.org/blink/trunk@159928 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Trace document.write/element.innerHTML

Turns out we were tracing async parse events
during main document parse, but not synchronous
parse events like innerHTML from javascript.

This just adds a simple trace event for
HTMLDocumentParser::insert which is the
synchronous parsing entry point.

R=abarth@chromium.org

Review URL: https://codereview.chromium.org/27781003

git-svn-id: svn://svn.chromium.org/blink/trunk@159929 bbb929c8-8fbe-4397-9dbb-9b2b20218538
IDL compiler: sync setters to rename value => jsValue, v => cppValue

This updates the setters in:
IDL compiler: Basic setters
https://codereview.chromium.org/27638002/

...per the renamings in:
IDL compiler: rename value => jsValue, v => cppValue
https://codereview.chromium.org/26887006/

(Both CLs were in CQ at same time, hence need a sync.)

BUG=239771
NOTRY=true

Review URL: https://codereview.chromium.org/27923002

git-svn-id: svn://svn.chromium.org/blink/trunk@159930 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Always use GDI implementation of GlyphPage::fill on Windows

The switch to use Skia for font metrics on windows in r158845 caused
a set of regressions for some non-latin pages. Most noticeable being
a 50+% regression on the intl_ja_zh page cycler on XP (about 20% on
Windows 7).

Until the root cause can be identified fall back on the GDI
implementation regardless of the Skia/GDI flag.

BUG=304868

Review URL: https://codereview.chromium.org/27711008

git-svn-id: svn://svn.chromium.org/blink/trunk@159931 bbb929c8-8fbe-4397-9dbb-9b2b20218538