flex shorthand incorrectly accepting 1 auto 1 (i.e. flex-basis in the middle)

This patch is in continuation with the given CL
https://codereview.chromium.org/396263003/
which fixes the bug of flex shorthand incorrectly accepting
values in which flex-basis is in the middle and does not have value
"auto". It does not took care of the case 1 auto 1 which according to
the grammar of te flex shorthand is incorrect.

This patch is adding support for the given missed case "1 auto 1"
by modifying the condition to check for if flex-basis is in the
middle or not in the argument list for all the different types of
values of flex-basis.

BUG=380984

Review URL: https://codereview.chromium.org/408683002

git-svn-id: svn://svn.chromium.org/blink/trunk@178738 bbb929c8-8fbe-4397-9dbb-9b2b20218538
During editing, merge inline style with overriding other author styles

Inline styles need to override other author styles even on DoNotOverrideValues mode.
So, merge and override inline styles to other author styles before merging them to m_mutableStyle.

Test: editing/deleting/merge-div-with-inline-style.html

Merge from WebKit: http://webkit.org/b/122874

BUG=371312

Review URL: https://codereview.chromium.org/272753003

git-svn-id: svn://svn.chromium.org/blink/trunk@178739 bbb929c8-8fbe-4397-9dbb-9b2b20218538
[CSS Grid Layout] Small refactoring in grid-auto-flow-get-set.html test

Add new helper methods to grid-definitions-parsing-utils.js and use them
in grid-auto-flow-get-set.html. This will ease future modifications of
this test.

This has been done in WebKit as part of r171183:
http://trac.webkit.org/changeset/171183

BUG=384099

Review URL: https://codereview.chromium.org/398013004

git-svn-id: svn://svn.chromium.org/blink/trunk@178740 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Clear FontFaceCache when CSSFontSelector is detached from Document

CSSFontSelector can outlive Document because it is referenced by
Font too (via FontFallbackList), which can live long time (e.g.
HarfBuzzFontCache holds Font).

This patch allows us to free up font resources referenced by
FontFaceCache when the Document is destroyed. 

BUG=366048
TEST=pass all layout tests

Review URL: https://codereview.chromium.org/399593002

git-svn-id: svn://svn.chromium.org/blink/trunk@178741 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Add a test for MediaQueryList::stop().

This CL adds a test for r178732.

BUG=395409
R=haraken@chromium.org

Review URL: https://codereview.chromium.org/404363007

git-svn-id: svn://svn.chromium.org/blink/trunk@178742 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Revert r176393 "Oilpan: Change Persistent<> data members to Member<> in HitTestResult."     https://codereview.chromium.org/326393003/

Reason for revert:
Caused performance regression on Android WebView.
Creating WebHitTestResult with HitTestResult is costly with the CL.

> Oilpan: Change Persistent<> data members to Member<> in HitTestResult.
>
> - Disallow new/delete operations for HitTestResult.
> HitTestResult was used
> -- with new/delete operators
> -- as part objects of ContextMenuController and MouseEventWithHitTestResult.
> -- as stack allocated objects
>
> We'd like to avoid to make such classes in Oilpan.
> So, this CL disallows new/delete, and WebHitTestResult owns another
> class to hold only required data copied from a HitTestResult.
>
> - Move ContextMenuController to Oilpan heap, and trace HitTestResult member.
>
> - Mark MouseEventWithHitTestResults STACK_ALLOCATED.
>
> - We can't get HitTestResult from a WebHitTestResult. So we need to
> introduce new function to WebViewImpl for WebSubstringUtil.mm.
>
> BUG=357163

TBR=aelias@chromium.org,haraken@chromium.org
BUG=395859

Review URL: https://codereview.chromium.org/406413003

git-svn-id: svn://svn.chromium.org/blink/trunk@178743 bbb929c8-8fbe-4397-9dbb-9b2b20218538