Fix non-mac builds.

* wtf/IndexedIterator.h:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176616 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Null deref under TextIndicator::createWithSelectionInFrame using find-in-page on bugzilla
https://bugs.webkit.org/show_bug.cgi?id=139164
<rdar://problem/19107247>

Reviewed by Beth Dakin.

* page/TextIndicator.cpp:
(WebCore::TextIndicator::createWithSelectionInFrame):
Null-check the ImageBuffer in addition to the Image.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176617 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Try to fix the Mac build.

* WebView/WebView.mm:
(-[WebView _commonInitializationWithFrameName:groupName:]):
(-[WebView _close]):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176618 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Twitter avatar moves when hovering/unhovering the "follow" button.
https://bugs.webkit.org/show_bug.cgi?id=139147
rdar://problem/19096508

Reviewed by Simon Fraser.

This patch ensures that the out of flow positioned render boxes (RenderReplaced) do not
get repositioned when their inline box wrappers move.
Ideally, out of flow positioned renderers do not have inline wrappers by the time we start
placing inline boxes, but in certain case (optimized code path for descendantsHaveSameLineHeightAndBaseline()),
they are still part of the inline box tree.
This patch prevents those renderer boxes from getting positioned as part of the inline box placement.
They will get removed later at RenderBlockFlow::computeBlockDirectionPositionsForLine().

Source/WebCore:

Test: fast/inline/out-of-flow-positioned-render-replaced-box-moves.html

* rendering/InlineBox.cpp:
(WebCore::InlineBox::adjustPosition):

LayoutTests:

* fast/inline/out-of-flow-positioned-render-replaced-box-moves-expected.html: Added.
* fast/inline/out-of-flow-positioned-render-replaced-box-moves.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176619 268f45cc-cd09-0410-ab3c-d52691b4dbfc
[EFL] Add a ENABLE_CSS_SCROLL_SNAP macro to CMake build system
https://bugs.webkit.org/show_bug.cgi?id=139085

Reviewed by Andreas Kling.

.:

* Source/cmake/OptionsEfl.cmake: Add ENABLE_CSS_SCROLL_SNAP.
* Source/cmake/WebKitFeatures.cmake: ditto.
* Source/cmakeconfig.h.cmake: ditto.

Source/WebCore:

* PlatformEfl.cmake:
    Include page/scrolling/AxisScrollSnapOffsets.cpp to EFL build files to fix build break.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176620 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Move 'text-shadow' / 'box-shadow' / '-webkit-box-shadow' to the new StyleBuilder
https://bugs.webkit.org/show_bug.cgi?id=138938

Reviewed by Sam Weinig.

Move 'text-shadow' / 'box-shadow' / '-webkit-box-shadow' CSS properties
from StyleResolver to the new StyleBuilder by using custom code.

No new tests, no behavior change.

* css/CSSPropertyNames.in:
* css/StyleBuilderCustom.h:
(WebCore::StyleBuilderCustom::applyTextOrBoxShadowValue):
(WebCore::StyleBuilderCustom::applyInitialTextShadow):
(WebCore::StyleBuilderCustom::applyInheritTextShadow):
(WebCore::StyleBuilderCustom::applyValueTextShadow):
(WebCore::StyleBuilderCustom::applyInitialBoxShadow):
(WebCore::StyleBuilderCustom::applyInheritBoxShadow):
(WebCore::StyleBuilderCustom::applyValueBoxShadow):
(WebCore::StyleBuilderCustom::applyInitialWebkitBoxShadow):
(WebCore::StyleBuilderCustom::applyInheritWebkitBoxShadow):
(WebCore::StyleBuilderCustom::applyValueWebkitBoxShadow):
* css/StyleResolver.cpp:
(WebCore::StyleResolver::applyProperty):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176621 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Optimize constructing JSC::Identifier from AtomicString.
<https://webkit.org/b/139157>

Reviewed by Michael Saboff.

Source/JavaScriptCore:

Add constructors for Identifier taking AtomicString and AtomicStringImpl.
This avoids branching on the string's isAtomic flag, which is obviously
always true for AtomicString & AtomicStringImpl.

Had to add a Identifier(const char*) constructor to resolve implicit
ambiguity between String / AtomicString.

Also made PrivateName::uid() return AtomicStringImpl* to take advantage
of the new constructor in a few places.

* runtime/Identifier.h:
(JSC::Identifier::Identifier):
* runtime/IdentifierInlines.h:
(JSC::Identifier::Identifier):
* runtime/PrivateName.h:
(JSC::PrivateName::uid):

Source/WTF:

Make AtomicString::isInAtomicStringTable() public so it can be used
in some Identifier assertions.

* wtf/text/AtomicString.h:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176622 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Add the dynamic specificity of the selector list argument when matching :nth-child() and :nth-last-child()
https://bugs.webkit.org/show_bug.cgi?id=139001

Reviewed by Andreas Kling.

Source/WebCore:

When matching :nth-child(An+B of selector list) or :nth-last-child(An+B of selector list),
we were previously ignoring the arguments.

That behavior seems to be confusing for users. We made the proposal to include the selector list
like when using :matches():
    http://lists.w3.org/Archives/Public/www-style/2014Oct/0533.html
David Baron also agrees with this behavior:
    http://lists.w3.org/Archives/Public/www-style/2014Oct/0534.html

This patch adds the specificity computation.

Tests: fast/css/nth-child-specificity-1.html
       fast/css/nth-child-specificity-2.html
       fast/css/nth-last-child-specificity-1.html
       fast/css/nth-last-child-specificity-2.html

* css/CSSSelector.cpp:
(WebCore::simpleSelectorFunctionalPseudoClassStaticSpecificity):
* css/SelectorChecker.cpp:
(WebCore::SelectorChecker::checkOne):
(WebCore::SelectorChecker::matchSelectorList):
* css/SelectorChecker.h:
* cssjit/SelectorCompiler.cpp:
(WebCore::SelectorCompiler::addPseudoClassType):

LayoutTests:

* fast/css/nth-child-specificity-1-expected.html: Added.
* fast/css/nth-child-specificity-1.html: Added.
* fast/css/nth-child-specificity-2-expected.html: Added.
* fast/css/nth-child-specificity-2.html: Added.
* fast/css/nth-child-specificity-3-expected.html: Added.
* fast/css/nth-child-specificity-3.html: Added.
* fast/css/nth-child-specificity-4-expected.html: Added.
* fast/css/nth-child-specificity-4.html: Added.
* fast/css/nth-last-child-specificity-1-expected.html: Added.
* fast/css/nth-last-child-specificity-1.html: Added.
* fast/css/nth-last-child-specificity-2-expected.html: Added.
* fast/css/nth-last-child-specificity-2.html: Added.
* fast/css/nth-last-child-specificity-3-expected.html: Added.
* fast/css/nth-last-child-specificity-3.html: Added.
* fast/css/nth-last-child-specificity-4-expected.html: Added.
* fast/css/nth-last-child-specificity-4.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176623 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Crash (integer overflow) beneath ByteCodeParser::handleGetById typing in search field on weather.com
https://bugs.webkit.org/show_bug.cgi?id=139165

Reviewed by Oliver Hunt.

If we don't have any getById or putById variants, emit non-cached versions of these operations.

* dfg/DFGByteCodeParser.cpp:
(JSC::DFG::ByteCodeParser::handleGetById):
(JSC::DFG::ByteCodeParser::handlePutById):


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@176624 268f45cc-cd09-0410-ab3c-d52691b4dbfc