[regression] Security: Heap-use-after-free in WebCore::RenderBlock::logicalRightOffsetForLine
https://bugs.webkit.org/show_bug.cgi?id=111594

Patch by Bem Jones-Bey <bjonesbe@adobe.com> on 2013-04-05
Reviewed by David Hyatt.

Source/WebCore: 

Swapping the bases was causing any floats in the right base to be
lost, so change the code so that it no longer swaps the bases.

Test: fast/ruby/float-object-doesnt-crash.html

* rendering/RenderRubyRun.cpp:
(WebCore::RenderRubyRun::removeChild): Don't swap the bases anymore.

LayoutTests: 

Add test to verify that the use-after-free is fixed. Note that it will
only crash when run under a memory checking tool like ASAN.

* fast/ruby/float-object-doesnt-crash-expected.txt: Added.
* fast/ruby/float-object-doesnt-crash.html: Added.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147765 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Remove WTF_USE_GOOGLEURL-guarded code
https://bugs.webkit.org/show_bug.cgi?id=114028

Patch by Zan Dobersek <zdobersek@igalia.com> on 2013-04-05
Reviewed by Ryosuke Niwa.

Source/WebCore:

The only remaining usage of the USE(GOOGLEURL) guards is in LinkHashChromium.cpp that will
get removed when purging the Source/WebCore/platform/chromium directory.

* config.h: Remove the define that was Chromium-specific.
* platform/KURL.cpp:
(WebCore):
(WebCore::KURL::reportMemoryUsage):
(WebCore::KURL::isSafeToSendToAnotherThread):
* platform/KURL.h:
(KURL):
* platform/KURLGoogle.cpp: Removed.
* platform/KURLGooglePrivate.h: Removed.

Source/WebKit/blackberry:

* WebCoreSupport/AboutDataUseFeatures.in: Remove GOOGLEURL from the list.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147766 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Remove vestiges of Chromium bits from watchlists.
https://bugs.webkit.org/show_bug.cgi?id=114047

Reviewed by Ryosuke Niwa.

* Scripts/webkitpy/common/config/watchlist: Removed vestiges.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147767 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL] Enable indexed database
https://bugs.webkit.org/show_bug.cgi?id=107248

Patch by Rijubrata Bhaumik <rijubrata.bhaumik@intel.com> on 2013-04-05
Reviewed by Alexis Menard.

.:

* Source/cmake/OptionsEfl.cmake:

Tools:

* Scripts/webkitperl/FeatureList.pm:

LayoutTests:

* platform/efl-wk1/TestExpectations:
* platform/efl/TestExpectations:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147768 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[SOUP] Remove unnecessary explicit keyword in SocketStreamError.h
https://bugs.webkit.org/show_bug.cgi?id=113913

Patch by Seokju Kwon <seokju.kwon@gmail.com> on 2013-04-05
Reviewed by Martin Robinson.

No new tests, just removing an unnecessary code.

* platform/network/soup/SocketStreamError.h:
(WebCore::SocketStreamError::SocketStreamError):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147769 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Remove Chromium code from WebCore/storage
https://bugs.webkit.org/show_bug.cgi?id=114049

Reviewed by Anders Carlsson.

Removed.

* storage/StorageNamespace.cpp:
* storage/chromium: Removed.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147771 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Remove Chromium code from WebCore/workers
https://bugs.webkit.org/show_bug.cgi?id=114050

Reviewed by Anders Carlsson.

Removed.

* workers/WorkerLoaderProxy.h:
(WorkerLoaderProxy):
* workers/chromium: Removed.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147772 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Remove Chromium EWS bots from the queue status server
https://bugs.webkit.org/show_bug.cgi?id=113988

Reviewed by Benjamin Poulain.

Removed Chromium EWS bots.

* QueueStatusServer/config/queues.py:
* QueueStatusServer/model/queues.py:
(Queue.short_name):
(Queue.display_name):
* QueueStatusServer/model/queues_unittest.py:
(QueueTest.test_short_name):
(QueueTest.test_display_name):
(QueueTest.test_name_with_underscores):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147773 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Build fix.

* QueueStatusServer/model/queues.py:
(Queue.short_name):
(Queue.display_name):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147774 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Remove Chromium code from WebCore/platform
https://bugs.webkit.org/show_bug.cgi?id=114014

Reviewed by Anders Carlsson.

Removed.

* platform/audio/chromium: Removed.
* platform/audio/chromium/AudioBusChromium.cpp: Removed.
* platform/audio/chromium/AudioDestinationChromium.cpp: Removed.
* platform/audio/chromium/AudioDestinationChromium.h: Removed.
* platform/audio/chromium/FFTFrameOpenMAXDLAndroid.cpp: Removed.
* platform/graphics/FontPlatformData.h:
* platform/graphics/chromium: Removed.
* platform/graphics/chromium/AnimationTranslationUtil.cpp: Removed.
* platform/graphics/chromium/AnimationTranslationUtil.h: Removed.
* platform/graphics/chromium/Canvas2DLayerBridge.cpp: Removed.
* platform/graphics/chromium/Canvas2DLayerBridge.h: Removed.
* platform/graphics/chromium/Canvas2DLayerManager.cpp: Removed.
* platform/graphics/chromium/Canvas2DLayerManager.h: Removed.
* platform/graphics/chromium/CrossProcessFontLoading.h: Removed.
* platform/graphics/chromium/CrossProcessFontLoading.mm: Removed.
* platform/graphics/chromium/DeferredImageDecoder.cpp: Removed.
* platform/graphics/chromium/DeferredImageDecoder.h: Removed.
* platform/graphics/chromium/DiscardablePixelRef.cpp: Removed.
* platform/graphics/chromium/DiscardablePixelRef.h: Removed.
* platform/graphics/chromium/DrawingBufferChromium.cpp: Removed.
* platform/graphics/chromium/Extensions3DChromium.h: Removed.
* platform/graphics/chromium/FontCacheAndroid.cpp: Removed.
* platform/graphics/chromium/FontCacheChromiumLinux.cpp: Removed.
* platform/graphics/chromium/FontCacheChromiumWin.cpp: Removed.
* platform/graphics/chromium/FontChromiumWin.cpp: Removed.
* platform/graphics/chromium/FontPlatformData.h: Removed.
* platform/graphics/chromium/FontPlatformDataChromiumWin.cpp: Removed.
* platform/graphics/chromium/FontPlatformDataChromiumWin.h: Removed.
* platform/graphics/chromium/FontRenderStyle.h: Removed.
* platform/graphics/chromium/FontUtilsChromiumWin.cpp: Removed.
* platform/graphics/chromium/FontUtilsChromiumWin.h: Removed.
* platform/graphics/chromium/GlyphPageTreeNodeChromiumWin.cpp: Removed.
* platform/graphics/chromium/GraphicsLayerChromium.cpp: Removed.
* platform/graphics/chromium/GraphicsLayerChromium.h: Removed.
* platform/graphics/chromium/IconChromium.cpp: Removed.
* platform/graphics/chromium/IconChromiumAndroid.cpp: Removed.
* platform/graphics/chromium/ImageBufferDataSkia.h: Removed.
* platform/graphics/chromium/ImageChromium.cpp: Removed.
* platform/graphics/chromium/ImageDecodingStore.cpp: Removed.
* platform/graphics/chromium/ImageDecodingStore.h: Removed.
* platform/graphics/chromium/ImageFrameGenerator.cpp: Removed.
* platform/graphics/chromium/ImageFrameGenerator.h: Removed.
* platform/graphics/chromium/LayerPainterChromium.h: Removed.
* platform/graphics/chromium/LazyDecodingPixelRef.cpp: Removed.
* platform/graphics/chromium/LazyDecodingPixelRef.h: Removed.
* platform/graphics/chromium/MediaPlayerPrivateChromium.cpp: Removed.
* platform/graphics/chromium/MediaPlayerPrivateChromium.h: Removed.
* platform/graphics/chromium/OpaqueRectTrackingContentLayerDelegate.cpp: Removed.
* platform/graphics/chromium/OpaqueRectTrackingContentLayerDelegate.h: Removed.
* platform/graphics/chromium/PlatformIcon.h: Removed.
* platform/graphics/chromium/ScaledImageFragment.cpp: Removed.
* platform/graphics/chromium/ScaledImageFragment.h: Removed.
* platform/graphics/chromium/SimpleFontDataChromiumWin.cpp: Removed.
* platform/graphics/chromium/SkSizeHash.h: Removed.
* platform/graphics/chromium/TextureUploader.h: Removed.
* platform/graphics/chromium/ThreadSafeDataTransport.cpp: Removed.
* platform/graphics/chromium/ThreadSafeDataTransport.h: Removed.
* platform/graphics/chromium/TransformSkMatrix44Conversions.cpp: Removed.
* platform/graphics/chromium/TransformSkMatrix44Conversions.h: Removed.
* platform/graphics/chromium/TransparencyWin.cpp: Removed.
* platform/graphics/chromium/TransparencyWin.h: Removed.
* platform/graphics/chromium/UniscribeHelper.cpp: Removed.
* platform/graphics/chromium/UniscribeHelper.h: Removed.
* platform/graphics/chromium/UniscribeHelperTextRun.cpp: Removed.
* platform/graphics/chromium/UniscribeHelperTextRun.h: Removed.
* platform/graphics/chromium/VDMXParser.cpp: Removed.
* platform/graphics/chromium/VDMXParser.h: Removed.
* platform/graphics/gpu/DrawingBuffer.cpp:
(WebCore):
* platform/graphics/gpu/SharedGraphicsContext3D.cpp:
(WebCore::SharedGraphicsContext3DImpl::getOrCreateContext):
* platform/mediastream/chromium: Removed.
* platform/mediastream/chromium/MediaStreamCenterChromium.cpp: Removed.
* platform/mediastream/chromium/MediaStreamCenterChromium.h: Removed.
* platform/mediastream/chromium/RTCDTMFSenderHandlerChromium.cpp: Removed.
* platform/mediastream/chromium/RTCDTMFSenderHandlerChromium.h: Removed.
* platform/mediastream/chromium/RTCDataChannelHandlerChromium.cpp: Removed.
* platform/mediastream/chromium/RTCDataChannelHandlerChromium.h: Removed.
* platform/mediastream/chromium/RTCPeerConnectionHandlerChromium.cpp: Removed.
* platform/mediastream/chromium/RTCPeerConnectionHandlerChromium.h: Removed.
* platform/network/chromium: Removed.
* platform/network/chromium/AuthenticationChallenge.h: Removed.
* platform/network/chromium/AuthenticationChallengeChromium.cpp: Removed.
* platform/network/chromium/BlobRegistryProxy.cpp: Removed.
* platform/network/chromium/BlobRegistryProxy.h: Removed.
* platform/network/chromium/CookieJarChromium.cpp: Removed.
* platform/network/chromium/DNSChromium.cpp: Removed.
* platform/network/chromium/ResourceError.h: Removed.
* platform/network/chromium/ResourceHandle.cpp: Removed.
* platform/network/chromium/ResourceHandleInternal.h: Removed.
* platform/network/chromium/ResourceRequest.cpp: Removed.
* platform/network/chromium/ResourceRequest.h: Removed.
* platform/network/chromium/ResourceResponse.cpp: Removed.
* platform/network/chromium/ResourceResponse.h: Removed.
* platform/network/chromium/SocketStreamError.h: Removed.
* platform/network/chromium/SocketStreamHandle.cpp: Removed.
* platform/network/chromium/SocketStreamHandle.h: Removed.
* platform/network/chromium/SocketStreamHandleInternal.h: Removed.
* platform/sql/chromium: Removed.
* platform/sql/chromium/SQLiteFileSystemChromium.cpp: Removed.
* platform/sql/chromium/SQLiteFileSystemChromiumPosix.cpp: Removed.
* platform/sql/chromium/SQLiteFileSystemChromiumWin.cpp: Removed.
* platform/text/chromium: Removed.
* platform/text/chromium/Hyphenation.cpp: Removed.
* platform/text/chromium/TextBreakIteratorInternalICUChromium.cpp: Removed.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147775 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL][WK2] --no-tiled-backing-store build fails because of not used #if USE(COORDINATED_GRAPHICS)
https://bugs.webkit.org/show_bug.cgi?id=113629

Patch by Ed Bartosh <bartosh@gmail.com> on 2013-04-05
Reviewed by Simon Fraser.

Wrapped code related to coordinated graphics with #if USE(COORDINATED_GRAPHICS)
* UIProcess/API/CoordinatedGraphics/WKCoordinatedScene.cpp:
* UIProcess/efl/WebView.cpp:
(WebKit::WebView::initialize):
(WebKit):
(WebKit::WebView::paintToCairoSurface):
(WebKit::WebView::updateViewportSize):

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147776 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Actually delete platform/chromium.

* platform/chromium: Removed.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147777 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Cleanup after git svn left empty directories.

* loader/chromium: Removed.
* page/chromium: Removed.
* page/scrolling/chromium: Removed.
* plugins/chromium: Removed.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147778 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Removed a chunk of the v8 bindings.  Reviewed by Sam 'Anders Carlsson' Weinig.  I'm using a direct http commit to reduce email traffic.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147779 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Removed a chunk of the v8 bindings.  Reviewed by Sam 'Anders Carlsson' Weinig.  I'm using a direct http commit to reduce email traffic.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147780 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Removed a chunk of the v8 bindings.  Reviewed by Sam 'Anders Carlsson' Weinig.  I'm using a direct http commit to reduce email traffic.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147781 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Removed a chunk of the v8 bindings.  Reviewed by Sam 'Anders Carlsson' Weinig.  I'm using a direct http commit to reduce email traffic.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147782 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Removed a chunk of the v8 bindings.  Reviewed by Sam 'Anders Carlsson' Weinig.  I'm using a direct http commit to reduce email traffic.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147783 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Removed a chunk of the v8 bindings.  Reviewed by Sam 'Anders Carlsson' Weinig.  I'm using a direct http commit to reduce email traffic.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147784 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Removed a chunk of the v8 bindings.  Reviewed by Sam 'Anders Carlsson' Weinig.  I'm using a direct http commit to reduce email traffic.

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@147785 268f45cc-cd09-0410-ab3c-d52691b4dbfc