Fix read of destructed FrameView in PinchViewportTest

The read was meant to occur on the newly constructed FrameView, it was
instead still pointing to the old FrameView which was destructed.

TBR=alexclarke@chromium.org
BUG=419372

Review URL: https://codereview.chromium.org/619113003

git-svn-id: svn://svn.chromium.org/blink/trunk@183078 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Oilpan: fix build after r183074.

TBR=haraken
BUG=409031
NOTRY=true

Review URL: https://codereview.chromium.org/615843003

git-svn-id: svn://svn.chromium.org/blink/trunk@183079 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Gardening: Mac 10.6 rebaselines

TBR=eustas@chromium.org

Review URL: https://codereview.chromium.org/624473002

git-svn-id: svn://svn.chromium.org/blink/trunk@183080 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fix TextIterator::subrange wrt replaced elements

In my cl https://codereview.chromium.org/297003003/, i changed TextIterator::rangeLength
to always count replaced elements such as <img>, so that IME could manipulate them. However,
this introduced a regression that spellchecking markers are sometimes misaligned in the
presence of replaced elements. The reason is TextIterator::subrange was not updated accordingly,
that is it ignores replaced elements which are counted in TextIterator::rangeLength.


BUG=417145
TEST=go to http://fiddle.jshell.net/5fo65n8j/2/show/, put cursor at the end of the input box,
the spellchecking marker should be correctly aligned with "testt".

Review URL: https://codereview.chromium.org/611123002

git-svn-id: svn://svn.chromium.org/blink/trunk@183081 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move selection invalidations to the invalidation phase

This change is a very simple translation of the current code:
instead of generating invalidations on the fly, we just mark
renderers for selection invalidations later.

I am not super satisfied with this change but it removes
several stale compositing queries and puts us on the path
to integrating selection invalidations more tightly with
the paint invalidation path.

BUG=407416

Review URL: https://codereview.chromium.org/620553009

git-svn-id: svn://svn.chromium.org/blink/trunk@183082 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Remove unused GlyphBuffer methods.

  * clear() doesn't have any users
  * reverse() is never used for GlyphBufferWithOffsets

R=eae@chromium.org,rottsches@intel.com,jbroman@chromium.org

Review URL: https://codereview.chromium.org/615263003

git-svn-id: svn://svn.chromium.org/blink/trunk@183083 bbb929c8-8fbe-4397-9dbb-9b2b20218538
DevTools: unskip edit-dom-actions tests now that test harness is fixed.

TBR=vsevik

Review URL: https://codereview.chromium.org/621903002

git-svn-id: svn://svn.chromium.org/blink/trunk@183084 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Gardening: TextExpectations following r182920

BUG=334269
TBR=eae@chromium.org,eustas@chromium.org,wangxianzhu@chromium.org

Review URL: https://codereview.chromium.org/623483004

git-svn-id: svn://svn.chromium.org/blink/trunk@183085 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move painting code from RenderLayer to LayerPainter.

BUG=415087

Review URL: https://codereview.chromium.org/608253005

git-svn-id: svn://svn.chromium.org/blink/trunk@183086 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Gardening: battery-status/page-visibility.html is failing

BUG=419515
TBR=sigbjornf@opera.com,eustas@chromium.org

Review URL: https://codereview.chromium.org/616383003

git-svn-id: svn://svn.chromium.org/blink/trunk@183087 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Send initializeChildFrame from RenderFrameProxy instead of WebLocalFrame.

This is part 3 which removes setIsRemote.  WebRemoteFrame::initializeFromFrame now sends the initializeChildFrame message instead of setIsRemote.  WebLocalFrameImpl::m_isRemote isn't used anywhere, so it is also removed.

Part 1: https://codereview.chromium.org/591413004/
Part 2: https://codereview.chromium.org/592263002/

BUG=416102, 407160

Review URL: https://codereview.chromium.org/609633003

git-svn-id: svn://svn.chromium.org/blink/trunk@183088 bbb929c8-8fbe-4397-9dbb-9b2b20218538