Oilpan: Prepare to move form control ua shadow elements to Oilpan heap.

BUG=357163

Review URL: https://codereview.chromium.org/267283007

git-svn-id: svn://svn.chromium.org/blink/trunk@173628 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Call setPosition with valid offset in another layout test.

Some layout tests call setPosition(node, offset) with large |offset| which is larger than |node|'s length but it is invalid in the standard:
https://dvcs.w3.org/hg/editing/raw-file/tip/editing.html#dom-selection-collapse

A typically case is that, image following HTML:
<div>text</div>
if you want to set a caret to between 'x' and 't', you should call Selection.setPostion(div.firstChild, 3).
However, many layout tests call Selection.setPosition(div, 3), which is invalid.
Many of those tests want to just set a caret to a last position of the node so this CL changes to call setPosition(node, node.childNodes.length).

I'm going to change Selection.setPosition to throw an exception for such a invalid call through Range.setStart/End.

This CL is similar to previous one:
https://src.chromium.org/viewvc/blink?revision=173167&view=revision

BUG=

Review URL: https://codereview.chromium.org/272703007

git-svn-id: svn://svn.chromium.org/blink/trunk@173629 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Gardening: remove expectation for fast/transforms/shadows.html on Maveric from TestExpectations

BUG=
TBR=enne, ojan
NOTRY=true

Review URL: https://codereview.chromium.org/268353012

git-svn-id: svn://svn.chromium.org/blink/trunk@173630 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Gardening: clean a few expectations

marked as mac only
virtual/gpu/compositedscrolling/scrollbars/custom-scrollbar-with-incomplete-style.html [ ImageOnlyFailure ]

removed:
svg/as-object/nested-embedded-svg-size-changes.html [ Crash ]
editing/context-menu-leak-document.html [ Failure ]

marked as Debug only
svg/as-object/deep-nested-embedded-svg-size-changes-no-layout-triggers-1.html [ Crash ]
svg/as-object/deep-nested-embedded-svg-size-changes-no-layout-triggers-2.html [ Crash ]

BUG=
TBR=ojan
NOTRY=true

Review URL: https://codereview.chromium.org/270633011

git-svn-id: svn://svn.chromium.org/blink/trunk@173631 bbb929c8-8fbe-4397-9dbb-9b2b20218538