Completed the implementation of RasterShape::firstIncludedIntervalLogicalTop(). The method now computes first logical top location where a line segment can be laid out within a RasterShape, i.e. a shape derived from an image valued URL resource. A detailed description of the algorithm can be found in http://hansmuller-webkit.blogspot.com/2013/08/first-fit-location-for-image-shapes.html.

The new tests exposed a bug in the existing getIncludedIntervals() method. A shape with a vertical gap that spans the entire line now causes the method to short circuit and return an empty interval list.


BUG=273834

Review URL: https://chromiumcodereview.appspot.com/22985010

git-svn-id: svn://svn.chromium.org/blink/trunk@156415 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Avoid some unneeded malloc in GridIterator

The issue was that the local variables didn't have the same type
(Vector<RenderBox*>) as that of the grid representation
(Vector<RenderBox*, 1>), which forced a hidden copy. The fix is
to add the missing typedefs to avoid type mismatchs in the future.

This caused PerformanceTests/Layout/auto-grid-lots-of-data.html to
severely regress after crrev.com/22867006. On a Z620, this improves
the test from 83.5 run/s to 88 run/s (a 5% improvement).

BUG=275745

Review URL: https://chromiumcodereview.appspot.com/23137008

git-svn-id: svn://svn.chromium.org/blink/trunk@156416 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Add a layout test for testing snapshot file reference issue

The last file reference to a snapshot file can be lost if
a File reference is being GC'ed while second .file() is
being called to create another snapshot.

Chromium-side patch: https://codereview.chromium.org/22854018

BUG=275224
TEST=fast/filesystem/snapshot-file-with-gc.html

Review URL: https://chromiumcodereview.appspot.com/23179006

git-svn-id: svn://svn.chromium.org/blink/trunk@156417 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Throw a SecurityError when accessing 'window.event' cross-origin.

Currently, we return 'undefined' when reading 'window.event' cross-origin
and ignore cross-origin writes. We should throw instead.

Gecko does not support 'window.event', so they don't throw here.

BUG=17325

Review URL: https://chromiumcodereview.appspot.com/22991005

git-svn-id: svn://svn.chromium.org/blink/trunk@156418 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Improve SecurityError message on verifyProtocolHandlerScheme()

Added more detailed security error message.

BUG=N/A

Review URL: https://chromiumcodereview.appspot.com/22791007

git-svn-id: svn://svn.chromium.org/blink/trunk@156419 bbb929c8-8fbe-4397-9dbb-9b2b20218538
MessageEvent constructor should accept a MessagePort as source

MessageEvent constructor should accept a MessagePort as source in the
MessageEventInit dictionary. Previously, it was only accepting a
Window object as source.

The specification was updated recently to address this issue:
https://www.w3.org/Bugs/Public/show_bug.cgi?id=23011
http://html5.org/tools/web-apps-tracker?from=8147&to=8148

R=abarth
BUG=276474

Review URL: https://chromiumcodereview.appspot.com/22915005

git-svn-id: svn://svn.chromium.org/blink/trunk@156420 bbb929c8-8fbe-4397-9dbb-9b2b20218538