Fix V8 callback binding for "CallWith=ThisValue" attribute.

ThisValue should support "any" type other than "object".

BUG=382728

Review URL: https://codereview.chromium.org/330163004

git-svn-id: svn://svn.chromium.org/blink/trunk@176262 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Oilpan: Make sure XMLTreeViewer::m_document is traceable.

- Mark XMLTreeViewer STACK_ALLOCATED().
- Make m_document Member<>.

BUG=357163

Review URL: https://codereview.chromium.org/339703004

git-svn-id: svn://svn.chromium.org/blink/trunk@176263 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fix HTMLMediaElement "direction of playback" behavior.

This change cleans up the code a little to make it easier to see that
the "direction of playback" is being used and corrects the definition of
"forward" to include playbackRate == 0. New test cases were added to
expose the change in behavior.

BUG=385343
TESTS=LayoutTests/media/media-ended.html LayoutTests/media/video-seek-to-duration-with-playbackrate-zero.html

Review URL: https://codereview.chromium.org/331063006

git-svn-id: svn://svn.chromium.org/blink/trunk@176264 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Only FontCache should know about system font substitution

BUG=376377
TEST=no new test; just refactoring

Review URL: https://codereview.chromium.org/330543004

git-svn-id: svn://svn.chromium.org/blink/trunk@176265 bbb929c8-8fbe-4397-9dbb-9b2b20218538