Preserve shape-box order in non-computed values

When a shape and box are supplied for a shape-property, the order they
are input should be preserved in output from the CSSOM. This patch parses
the shape and box values as a CSSValueList to preserve that ordering,
and removes the need for BasicShapes to have a sizing box.

BUG=322165

Review URL: https://codereview.chromium.org/144143005

git-svn-id: svn://svn.chromium.org/blink/trunk@168477 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Disable some compositing state asserts seen on Mac builds

Test scenarios:
http://www.rbyers.net/eventTest.html - scrolling the page or div (has a wheel handler but doesn't call preventDefault)
Loading https://twitter.com/pwnall

BUG=343132

Review URL: https://codereview.chromium.org/180803012

git-svn-id: svn://svn.chromium.org/blink/trunk@168478 bbb929c8-8fbe-4397-9dbb-9b2b20218538
[SVG] Refactor getIntersectionList() and getEnclosureList()

This CL moves most of the implementation out of RenderSVGModelObject and
into SVGSVGElement (which is the only client). Some notes:

* use the consolidated SVGGraphicsElement::computeCTM() (which is
  accumulating localCoordinateSpaceTransform()s and not
  localToParentTransform()s like the old getElementCTM() did <- root
  cause for the zooming bug)
* only force a layout update once, at the entry point, instead of on each
  getElementCTM() call.
* detect the stopping element on the fly, instead of an additional upfront
  ancestor crawl.
* transforms are now correctly computed relative to the target <svg>
  element instead of the nearest viewport.

BUG=155277
R=pdr@chromium.org,schenney@chromium.org,fs@opera.com,rob.buis@samsung.com

Review URL: https://codereview.chromium.org/185333004

git-svn-id: svn://svn.chromium.org/blink/trunk@168479 bbb929c8-8fbe-4397-9dbb-9b2b20218538
DevTools: Prepare for recursive viewport in datagrid

No behavioral changes, architecture only:
  - padding rows are moved back to the datagrid
  - children access are made through Node.allChildren()
  - minor cosmetic changes

BUG=255363
R=yurys@chromium.org

Review URL: https://codereview.chromium.org/187703002

git-svn-id: svn://svn.chromium.org/blink/trunk@168480 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Revert 168457 "WebGL: Transfer ownership of WebGraphicsContext3D..."

Caused assertion failures on debug GPU bots. See Issue 344393 for details.

> WebGL: Transfer ownership of WebGraphicsContext3D from WebGLRenderingContext to DrawingBuffer.
> 
> Currently, the lifecycle of DrawingBuffer is different from it of
> WebGraphicsContext3D, so there is so many checks if the context is valid.
> This complexity is not necessary because DrawingBuffer does not own any
> objects when the context is lost or impossible to be created.
> 
> To be clear the lifecycle, this CL makes DrawingBuffer take ownership of WebGraphicsContext3D.
> 
> The DrawingBuffer creation or resize can fail if the memory is not enough. This
> logic is preserved.
> In detail,
> 1. If it occurs during WebGLRenderingContext creation, we give up creating
> WebGLRenderingContext.
> 2. If it occurs during restoration of lost context, we will try again.
> 3. If it occurs during resizing DrawingBuffer, we slightly ignore, because we
> can reuse different size FBO in this case.
> 
> In addition, this CL fixes two bugs.
> 1. maybeRestoreContext() pretends to success to restore although creating FBO in
> DrawingBuffer fails. As mentioned earlier, we will try again.
> 2. WebGLRenderingContext calls DrawingBuffer::reset() twice during creation,
> because the constructor of DrawingBuffer internally calls reset().
> 
> BUG=344393
> 
> Review URL: https://codereview.chromium.org/163773007

TBR=dongseong.hwang@intel.com

Review URL: https://codereview.chromium.org/184343005

git-svn-id: svn://svn.chromium.org/blink/trunk@168481 bbb929c8-8fbe-4397-9dbb-9b2b20218538