Fix android build error about already defined struct.

Minimum API version is 9, which already defines this struct in elf.h

Also see qtscript/49ab1bd9838dc3c069be780ff6d69a2543c06ed6 which does
the same thing there.

Change-Id: Ia56f8399156a93edc569e7bb982bd7186a16a445
Reviewed-by: BogDan Vatra <bogdan@kde.org>
Prevent interpreting URL parameter for Qt plugins as content URLs.

This prevents a compatibility workaround for NPAPI plugins from
interfering with the Qt plugins.

Task-number: QTBUG-39483
Change-Id: Ic9342d3bdeec4c26c21f56b475d3d3751b30f057
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@digia.com>
Actually load icc.prf for the Intel compiler

Nothing sets CONFIG += icc, so the .prf file was not getting loaded at
all. So force it on both Windows and Unix.

Change-Id: I0c9a0ab07b5637716e37fb2066d6013fa28c4012
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@digia.com>
define DOUBLE_CONVERSION_CORRECT_DOUBLE_OPERATIONS on HPPA

Solves building WebKit on HPPA.

Change-Id: I00a455ad03d3f896de589aaf6e6f4dc0e71398ac
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@digia.com>
use after free in WebCore::DocumentOrderedMap::remove / WebCore::TreeScope::removeElementById

https://bugs.webkit.org/show_bug.cgi?id=121324

Reviewed by Ryosuke Niwa.

Update the document ordered map for an image element before dispatching
load or error events
when it's inserted into a document.

Source/WebCore:

Test: fast/dom/modify-node-and-while-in-the-callback-too-crash.html

* dom/DocumentOrderedMap.cpp: defensive fix to avoid use after free
issues.
(WebCore::DocumentOrderedMap::remove):
* html/HTMLImageElement.cpp:
(WebCore::HTMLImageElement::insertedInto):
* loader/ImageLoader.cpp:
(WebCore::ImageLoader::updateFromElement): setting m_failedLoadURL makes
repeated updateFromElement calls return early.

Change-Id: I305e56de969d0efe3dc67930cdf585a201e8c6a5
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@159481 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Reviewed-by: Michael Bruning <michael.bruning@digia.com>
Bad cast from CSSInitialValue to CSSValueList

https://bugs.webkit.org/show_bug.cgi?id=121729

Reviewed by Beth Dakin.

Add a regression test. This is not a merge since the test in the Blink change involves
superfluous execCommand calls.

Change-Id: I13e08031516548a5915f8ad4c42486e9ba0e3d96
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@156222 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Reviewed-by: Michael Bruning <michael.bruning@digia.com>
Crash during exception unwinding

https://webkit.org/b/119860

Reviewed by Filip Pizlo.

Add an "Unreachable" NodeType, and then rearrange op_throw and op_throw_reference_error
to plant Throw or ThrowReferenceError followed by a flush and then the Unreachable node.

We need this so that Throw and ThrowReferenceError no longer need to be treated as
terminals and the subsequent flush keeps the activation (and other registers) live.

* dfg/DFGAbstractInterpreterInlines.h:
(JSC::DFG::::executeEffects):
* dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::parseBlock):
* dfg/DFGClobberize.h:
(JSC::DFG::clobberize):
* dfg/DFGFixupPhase.cpp:
(JSC::DFG::FixupPhase::fixupNode):
* dfg/DFGNode.h:
(JSC::DFG::Node::isTerminal):
* dfg/DFGNodeType.h:
* dfg/DFGPredictionPropagationPhase.cpp:
(JSC::DFG::PredictionPropagationPhase::propagate):
* dfg/DFGSafeToExecute.h:
(JSC::DFG::safeToExecute):
* dfg/DFGSpeculativeJIT32_64.cpp:
(JSC::DFG::SpeculativeJIT::compile):
* dfg/DFGSpeculativeJIT64.cpp:
(JSC::DFG::SpeculativeJIT::compile):

Change-Id: Idb894e780cd3ebe15515d1796c58a339ae54d55f
git-svn-id: http://svn.webkit.org/repository/webkit/trunk@154290 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Reviewed-by: Jocelyn Turcotte <jocelyn.turcotte@digia.com>
Merge remote-tracking branch 'origin/5.3' into dev

Change-Id: Ic15a117b8136e64fd4268583f1220d0e9d381497