Crash the renderer when WebSocket fails to allocate an ArrayBuffer to set to a MessageEvent.

See http://src.chromium.org/viewvc/blink?view=revision&revision=165278.
This changed behavior of ArrayBuffer allocation on OOM from crashing to
returning null. Add CRASH to keep old behavior.

BUG=357356

Review URL: https://codereview.chromium.org/242323003

git-svn-id: svn://svn.chromium.org/blink/trunk@173718 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Auto-rebaseline for r173673

http://src.chromium.org/viewvc/blink?view=revision&revision=173673

BUG=361729
TBR=enne@chromium.org

Review URL: https://codereview.chromium.org/272913002

git-svn-id: svn://svn.chromium.org/blink/trunk@173719 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Auto-rebaseline for r173673

http://src.chromium.org/viewvc/blink?view=revision&revision=173673

BUG=361729
TBR=enne@chromium.org

Review URL: https://codereview.chromium.org/276843003

git-svn-id: svn://svn.chromium.org/blink/trunk@173720 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Revert of Re-enable layer squashing (https://codereview.chromium.org/267343005/)

Reason for revert:
We still have open layer squashing bugs.

Original issue's description:
> Re-enable layer squashing
> 
> We've fixed all the know bugs. Hopefully this time it will stick. If you find
> that this CL caused a regression, please mark the bug as blocking
> http://crbug.com/365701
> 
> BUG=365701
> 
> Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=173696

TBR=chrishtr@chromium.org
NOTREECHECKS=true
NOTRY=true
BUG=365701

Review URL: https://codereview.chromium.org/279703002

git-svn-id: svn://svn.chromium.org/blink/trunk@173721 bbb929c8-8fbe-4397-9dbb-9b2b20218538
fast/transforms/shadows.html needs rebaselining post r173588

TBR=enne@chromium.org
BUG=371698

Review URL: https://codereview.chromium.org/271033002

git-svn-id: svn://svn.chromium.org/blink/trunk@173722 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Oilpan: Prepare to move FormAssociatedElement to Oilpan heap, part 2.

Replace FormAssociatedElement raw pointers with Member<>.

- Make FormAttributeTargetObserver GarbageCollectedFinalized in order to make
  FormAttributeTargetObserver::m_element traceable.
- Define a typedef for
  WillBeHeapVector<RawPtrWillBeMember<FormAssociatedElement>>. The raw name is
  long and the type is used in many places.

BUG=357163

Review URL: https://codereview.chromium.org/270823004

git-svn-id: svn://svn.chromium.org/blink/trunk@173723 bbb929c8-8fbe-4397-9dbb-9b2b20218538