Replaced elements avoid floats, including check boxes and radio boxes.

Check boxes and radio boxes are the odd man out among form control
elements: they neither have their own renderer class with which to
override avoidFloats nor are they isReplaced(). If the case for
making form control elements isReplaced() builds further than it may
be worth looking at including them in that effort but for now just
replaced the isReplaced() check in avoidsFloats() with a more inclusive
alternative.

BUG=322093

Review URL: https://codereview.chromium.org/296153006

git-svn-id: svn://svn.chromium.org/blink/trunk@178201 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Clamp colspan to 8190

The RenderTableCell logic crashes if we try to set a
column index that would overflow the bitfield. The
assumption was that it would be rarely hit in the wild:
having such a big column index means a giant table, which
would be slow. Unfortunately, it seems like people (not to
mention fuzzers) are testing big values for colspan that
triggers the previous crash frequently. As a work-around,
this change clamps colspan - like rowspan - to 8190, which
should reduce greatly the amount of crashes.

BUG=386260

Review URL: https://codereview.chromium.org/393673002

git-svn-id: svn://svn.chromium.org/blink/trunk@178202 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Move Source/core/fileapi/Stream to Source/core/streams/Stream.

Create Source/core/streams and move Stream class to the directory.

BUG=240603
R=tyoshino

Review URL: https://codereview.chromium.org/391953002

git-svn-id: svn://svn.chromium.org/blink/trunk@178203 bbb929c8-8fbe-4397-9dbb-9b2b20218538
DevTools: fix flakiness of inspector/console/console-viewport-selection.html

Due to the specificity of viewport, ViewportControl.forceScrollItemToBeLast(X)
scrolls viewport so that the element number X will be last, but with precision
of a couple of pixels. Given this, viewport might render additional elements
to cover the visible area.

That said, dumping the last rendered element index was a bad idea which
resulted in flakiness.

This patch eliminates any dumping of last rendered element, substituting it
with a first element index and a flag whether sufficient amount of elements
was rendered to cover viewport.

BUG=390204
TBR=vsevik

Review URL: https://codereview.chromium.org/393853002

git-svn-id: svn://svn.chromium.org/blink/trunk@178204 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Added a NeedsRebaseline for a test that this patch broke on XP:
https://src.chromium.org/viewvc/blink?view=rev&revision=177310

BUG=173443

Review URL: https://codereview.chromium.org/368033004

git-svn-id: svn://svn.chromium.org/blink/trunk@178205 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Fix scrollbar snapback test to match https://codereview.chromium.org/390183008

BUG=

Review URL: https://codereview.chromium.org/396663003

git-svn-id: svn://svn.chromium.org/blink/trunk@178206 bbb929c8-8fbe-4397-9dbb-9b2b20218538
InFile.load_from_files should try to load only '.in' files

InFile.load_from_files() should assert the input file is a '.in' file.

Review URL: https://codereview.chromium.org/397513003

git-svn-id: svn://svn.chromium.org/blink/trunk@178207 bbb929c8-8fbe-4397-9dbb-9b2b20218538