Timeline

Jul 17, 2016:

11:53 PM Changeset in webkit [203341] by Carlos Garcia Campos

• 3 edits in trunk/Source/WebKit2

REGRESSION(r202855): [GTK] ASSERTION FAILED: m_webPage.bounds().contains(bounds)
​https://bugs.webkit.org/show_bug.cgi?id=159806

Reviewed by Žan Doberšek.

The problem is that since r202855, in case of non accelerated mode, the dirty region is updated too late when
updating backing store state.

• WebProcess/WebPage/DrawingAreaImpl.cpp:

(WebKit::DrawingAreaImpl::updateBackingStoreState): Update the dirty region to the new size when not in
accelerated compositing mode.

• WebProcess/WebPage/WebPage.cpp:

(WebKit::WebPage::setSize): Update the WebPage size before resizing the frame and calling setNeedsDisplay() to
ensure that any call to setNeedsDisplay() uses the new web page bounds. This is actually a regression introduced
in r143472, where setNeedsDisplay was changed to use the web page bounds as directy rectangle. Before r143472
the dirty rectangle was passed to setNeedsDisplay and it passed the right one.

11:13 PM Changeset in webkit [203340] by Gyuyoung Kim

• 21 edits in trunk/Source/WebCore

Clean up PassRefPtr uses in Modules/encryptedmedia, Modules/speech, and Modules/quota
​https://bugs.webkit.org/show_bug.cgi?id=159701

Reviewed by Alex Christensen.

No new tests, no behavior changes.

• Modules/encryptedmedia/CDM.h:
• Modules/encryptedmedia/MediaKeySession.h:
• Modules/encryptedmedia/MediaKeys.h:
• Modules/quota/DOMWindowQuota.cpp:
• Modules/quota/StorageErrorCallback.cpp:

(WebCore::StorageErrorCallback::CallbackTask::CallbackTask):

• Modules/quota/StorageErrorCallback.h:
• Modules/quota/StorageInfo.h:
• Modules/quota/StorageQuota.h:
• Modules/speech/DOMWindowSpeechSynthesis.cpp:
• Modules/speech/SpeechSynthesis.cpp:

(WebCore::SpeechSynthesis::getVoices):
(WebCore::SpeechSynthesis::startSpeakingImmediately):
(WebCore::SpeechSynthesis::speak):
(WebCore::SpeechSynthesis::cancel):
(WebCore::SpeechSynthesis::handleSpeakingCompleted):
(WebCore::SpeechSynthesis::boundaryEventOccurred):
(WebCore::SpeechSynthesis::didStartSpeaking):
(WebCore::SpeechSynthesis::didPauseSpeaking):
(WebCore::SpeechSynthesis::didResumeSpeaking):
(WebCore::SpeechSynthesis::didFinishSpeaking):
(WebCore::SpeechSynthesis::speakingErrorOccurred):

• Modules/speech/SpeechSynthesis.h:
• Modules/speech/SpeechSynthesisEvent.h:
• Modules/speech/SpeechSynthesisUtterance.h:
• Modules/speech/SpeechSynthesisVoice.cpp:

(WebCore::SpeechSynthesisVoice::create):
(WebCore::SpeechSynthesisVoice::SpeechSynthesisVoice):

• Modules/speech/SpeechSynthesisVoice.h:
• platform/PlatformSpeechSynthesizer.h:
• platform/efl/PlatformSpeechSynthesisProviderEfl.cpp:

(WebCore::PlatformSpeechSynthesisProviderEfl::fireSpeechEvent):

• platform/mock/PlatformSpeechSynthesizerMock.cpp:

(WebCore::PlatformSpeechSynthesizerMock::speakingFinished):
(WebCore::PlatformSpeechSynthesizerMock::speak):
(WebCore::PlatformSpeechSynthesizerMock::cancel):
(WebCore::PlatformSpeechSynthesizerMock::pause):
(WebCore::PlatformSpeechSynthesizerMock::resume):

11:08 PM Changeset in webkit [203339] by fred.wang@free.fr

• 6 edits in trunk/LayoutTests

Rebaseline Windows and EFL MathML pixel tests after r203289.
​https://bugs.webkit.org/show_bug.cgi?id=158866

Unreviewed test gardening.

Patch by Frederic Wang <​fwang@igalia.com> on 2016-07-17

• platform/efl/mathml/opentype/vertical-expected.txt:
• platform/efl/mathml/presentation/mo-stretch-expected.txt:
• platform/win/mathml/opentype/opentype-stretchy-expected.txt:
• platform/win/mathml/opentype/vertical-expected.txt:
• platform/win/mathml/presentation/mo-stretch-expected.txt:

6:07 PM Changeset in webkit [203338] by weinig@apple.com

• 51 edits
  6 adds in trunk

[WebKit API] Add SPI to track multiple navigations caused by a single user gesture
<rdar://problem/26554137>
​https://bugs.webkit.org/show_bug.cgi?id=159856

Reviewed by Dan Bernstein.

Source/WebCore:

• Adds a new RefCounted object to represent a unique user gesture, called UserGestureToken.
• Makes UserGestureIndicator track UserGestureToken.
• Refines UserGestureIndicator's interface to use Optional and a smaller enum set to represent the different initial states.
• Stores UserGestureTokens on objects that want to forward user gesture state (DOMTimer, postMessage, and ScheduledNavigation) rather than just a boolean.

• accessibility/AccessibilityNodeObject.cpp:

(WebCore::AccessibilityNodeObject::increment):
(WebCore::AccessibilityNodeObject::decrement):

• accessibility/AccessibilityObject.cpp:

(WebCore::AccessibilityObject::press):

• bindings/js/ScriptController.cpp:

(WebCore::ScriptController::executeScriptInWorld):
(WebCore::ScriptController::executeScript):
Update for new UserGestureIndicator interface.

• dom/UserGestureIndicator.cpp:

(WebCore::currentToken):
(WebCore::UserGestureToken::~UserGestureToken):
(WebCore::UserGestureIndicator::UserGestureIndicator):
(WebCore::UserGestureIndicator::~UserGestureIndicator):
(WebCore::UserGestureIndicator::currentUserGesture):
(WebCore::UserGestureIndicator::processingUserGesture):
(WebCore::UserGestureIndicator::processingUserGestureForMedia):
(WebCore::isDefinite): Deleted.

• dom/UserGestureIndicator.h:

(WebCore::UserGestureToken::create):
(WebCore::UserGestureToken::state):
(WebCore::UserGestureToken::processingUserGesture):
(WebCore::UserGestureToken::processingUserGestureForMedia):
(WebCore::UserGestureToken::addDestructionObserver):
(WebCore::UserGestureToken::UserGestureToken):
Add UserGestureToken and track the current one explicitly.

• html/HTMLMediaElement.cpp:

(WebCore::HTMLMediaElement::didReceiveRemoteControlCommand):

• inspector/InspectorFrontendClientLocal.cpp:

(WebCore::InspectorFrontendClientLocal::openInNewTab):

• inspector/InspectorFrontendHost.cpp:
• inspector/InspectorPageAgent.cpp:

(WebCore::InspectorPageAgent::navigate):
Update for new UserGestureIndicator interface.

• loader/NavigationAction.cpp:

(WebCore::NavigationAction::NavigationAction):

• loader/NavigationAction.h:

(WebCore::NavigationAction::userGestureToken):
(WebCore::NavigationAction::processingUserGesture):

• loader/NavigationScheduler.cpp:

(WebCore::ScheduledNavigation::ScheduledNavigation):
(WebCore::ScheduledNavigation::~ScheduledNavigation):
(WebCore::ScheduledNavigation::lockBackForwardList):
(WebCore::ScheduledNavigation::wasDuringLoad):
(WebCore::ScheduledNavigation::isLocationChange):
(WebCore::ScheduledNavigation::userGestureToForward):
(WebCore::ScheduledNavigation::clearUserGesture):
(WebCore::NavigationScheduler::mustLockBackForwardList):
(WebCore::NavigationScheduler::scheduleFormSubmission):
(WebCore::ScheduledNavigation::wasUserGesture): Deleted.

• page/DOMTimer.cpp:

(WebCore::shouldForwardUserGesture):
(WebCore::userGestureTokenToForward):
(WebCore::DOMTimer::DOMTimer):
(WebCore::DOMTimer::fired):

• page/DOMTimer.h:
• page/DOMWindow.cpp:

(WebCore::PostMessageTimer::PostMessageTimer):
Store the active UserGestureToken rather than just a bit.

• page/EventHandler.cpp:

(WebCore::EventHandler::handleMousePressEvent):
(WebCore::EventHandler::handleMouseDoubleClickEvent):
(WebCore::EventHandler::handleMouseReleaseEvent):
(WebCore::EventHandler::keyEvent):
(WebCore::EventHandler::handleTouchEvent):

• rendering/HitTestResult.cpp:

(WebCore::HitTestResult::toggleMediaFullscreenState):
(WebCore::HitTestResult::enterFullscreenForVideo):
(WebCore::HitTestResult::toggleEnhancedFullscreenForVideo):
Update for new UserGestureIndicator interface.

Source/WebKit/mac:

• Plugins/Hosted/NetscapePluginInstanceProxy.mm:

(WebKit::NetscapePluginInstanceProxy::evaluate):

• Plugins/WebNetscapePluginView.mm:

(-[WebNetscapePluginView sendEvent:isDrawRect:]):
Update for new UserGestureIndicator interface.

Source/WebKit/win:

• Plugins/PluginView.cpp:

(WebCore::PluginView::performRequest):

• WebCoreSupport/WebContextMenuClient.cpp:

(WebContextMenuClient::searchWithGoogle):
Update for new UserGestureIndicator interface.

Source/WebKit2:

• Shared/API/APIObject.h:
• Shared/Cocoa/APIObject.mm:

(API::Object::newObject):

• UIProcess/API/APIUserInitiatedAction.h: Added.

Add new APIObject type, UserInitiatedAction.

• UIProcess/API/Cocoa/WKNavigationAction.mm:
• UIProcess/API/Cocoa/WKNavigationActionPrivate.h:

Expose a _WKUserInitiatedAction on the WKNavigationAction.

• UIProcess/API/Cocoa/_WKUserInitiatedAction.h: Added.
• UIProcess/API/Cocoa/_WKUserInitiatedAction.mm: Added.

(-[_WKUserInitiatedAction consume]):
(-[_WKUserInitiatedAction isConsumed]):
(-[_WKUserInitiatedAction _apiObject]):

• UIProcess/API/Cocoa/_WKUserInitiatedActionInternal.h: Added.

Add new _WKUserInitiatedAction type wrapping API::UserInitiatedAction.

• Shared/NavigationActionData.cpp:

(WebKit::NavigationActionData::encode):
(WebKit::NavigationActionData::decode):

• Shared/NavigationActionData.h:

Store the userGestureTokenIdentifier (as determined from the WebProcess's map) rather
than just a single bit. This allows us to track if a user gesture is used for multiple navigations.

• UIProcess/API/APINavigationAction.h:

Add UserInitiatedAction member and re-implement isProcessingUserGesture in terms of it.

• UIProcess/API/C/WKPage.cpp:

(WKPageSetPageUIClient):

• UIProcess/Cocoa/UIDelegate.mm:

(WebKit::UIDelegate::UIClient::createNewPage):

• UIProcess/WebPageProxy.cpp:

(WebKit::WebPageProxy::decidePolicyForNavigationAction):
(WebKit::WebPageProxy::decidePolicyForNewWindowAction):
Get the API::UserInitiatedAction from the WebProcessProxy (if it exists), and pass
it along to the API::NavigationAction.

• UIProcess/WebProcessProxy.cpp:

(WebKit::WebProcessProxy::shutDown):
(WebKit::WebProcessProxy::userInitiatedActivity):
(WebKit::WebProcessProxy::didDestroyUserGestureToken):

• UIProcess/WebProcessProxy.h:

Keep a map of active userInitiatedActivity objects.

• UIProcess/WebProcessProxy.messages.in:

Add DidDestroyUserGestureToken message to manager API::UserInitiatedActivity lifetimes.

• WebKit2.xcodeproj/project.pbxproj:

Add new files.

• WebProcess/Notifications/WebNotificationManager.cpp:

(WebKit::WebNotificationManager::didClickNotification):

• WebProcess/Plugins/PluginView.cpp:

(WebKit::PluginView::performFrameLoadURLRequest):
(WebKit::PluginView::evaluate):

• WebProcess/WebCoreSupport/WebContextMenuClient.cpp:

(WebKit::WebContextMenuClient::searchWithGoogle):

• WebProcess/cocoa/WebPlaybackSessionManager.mm:

(WebKit::WebPlaybackSessionManager::play):
(WebKit::WebPlaybackSessionManager::pause):
(WebKit::WebPlaybackSessionManager::togglePlayState):
(WebKit::WebPlaybackSessionManager::beginScrubbing):
(WebKit::WebPlaybackSessionManager::endScrubbing):
(WebKit::WebPlaybackSessionManager::seekToTime):
(WebKit::WebPlaybackSessionManager::fastSeek):
(WebKit::WebPlaybackSessionManager::beginScanningForward):
(WebKit::WebPlaybackSessionManager::beginScanningBackward):
(WebKit::WebPlaybackSessionManager::endScanning):
(WebKit::WebPlaybackSessionManager::selectAudioMediaOption):
(WebKit::WebPlaybackSessionManager::selectLegibleMediaOption):
Update for new UserGestureIndicator interface.

• WebProcess/WebCoreSupport/WebChromeClient.cpp:

(WebKit::WebChromeClient::createWindow):

• WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp:

(WebKit::WebFrameLoaderClient::dispatchDecidePolicyForNewWindowAction):
(WebKit::WebFrameLoaderClient::dispatchDecidePolicyForNavigationAction):
Get an identifier for the UserGestureToken from the WebProcess singleton
to pass to the WebProcess.

• WebProcess/WebProcess.cpp:

(WebKit::nextUserGestureTokenIdentifier):
(WebKit::WebProcess::userGestureTokenIdentifier):
(WebKit::WebProcess::userGestureTokenDestroyed):

• WebProcess/WebProcess.h:

Track UserGestureToken lifetimes utilizing the destructionObserver mechanism
off the tokens to indicate destruction. When destroyed, notify the UIProcess
to avoid leaks.

Tools:

• MiniBrowser/mac/WK2BrowserWindowController.m:

(-[WK2BrowserWindowController webView:createWebViewWithConfiguration:forNavigationAction:windowFeatures:]):
Add basic window.open implementation.

(-[WK2BrowserWindowController webView:decidePolicyForNavigationAction:decisionHandler:]):
Add basic navigation policy implementation which implements a rule where a user gesture is only allowed
to open a single non-web URL, all others are dropped.

• TestWebKitAPI/TestWebKitAPI.xcodeproj/project.pbxproj:
• TestWebKitAPI/Tests/WebKit2Cocoa/UserInitiatedActionInNavigationAction.mm: Added.
• TestWebKitAPI/Tests/WebKit2Cocoa/open-multiple-external-url.html: Added.

Add API for the new SPI.

5:39 PM Changeset in webkit [203337] by rniwa@webkit.org

• 54 edits in trunk/Source

Rename fastHasAttribute to hasAttributeWithoutSynchronization
​https://bugs.webkit.org/show_bug.cgi?id=159864

Reviewed by Chris Dumez.

Source/WebCore:

Renamed Rename fastHasAttribute to hasAttributeWithoutSynchronization for clarity.

• accessibility/AccessibilityListBoxOption.cpp:

(WebCore::AccessibilityListBoxOption::isEnabled):

• accessibility/AccessibilityObject.cpp:

(WebCore::AccessibilityObject::hasAttribute):
(WebCore::AccessibilityObject::getAttribute):

• accessibility/AccessibilityRenderObject.cpp:

(WebCore::AccessibilityRenderObject::determineAccessibilityRole):

• bindings/scripts/CodeGenerator.pm:

(GetterExpression):

• bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
• bindings/scripts/test/JS/JSTestObj.cpp:

(WebCore::jsTestObjReflectedBooleanAttr):
(WebCore::jsTestObjReflectedCustomBooleanAttr):

• bindings/scripts/test/ObjC/DOMTestObj.mm:

(-[DOMTestObj reflectedBooleanAttr]):
(-[DOMTestObj setReflectedBooleanAttr:]):
(-[DOMTestObj reflectedCustomBooleanAttr]):
(-[DOMTestObj setReflectedCustomBooleanAttr:]):

• dom/Document.cpp:

(WebCore::Document::hasManifest):
(WebCore::Document::doctype):

• dom/Element.h:

(WebCore::Node::parentElement):
(WebCore::Element::hasAttributeWithoutSynchronization):
(WebCore::Element::fastHasAttribute): Deleted.

• editing/ApplyStyleCommand.cpp:

(WebCore::ApplyStyleCommand::removeEmbeddingUpToEnclosingBlock):

• editing/DeleteSelectionCommand.cpp:

(WebCore::DeleteSelectionCommand::makeStylingElementsDirectChildrenOfEditableRootToPreventStyleLoss):

• editing/markup.cpp:

(WebCore::createMarkupInternal):

• html/ColorInputType.cpp:

(WebCore::ColorInputType::shouldShowSuggestions):

• html/FileInputType.cpp:

(WebCore::FileInputType::handleDOMActivateEvent):
(WebCore::FileInputType::receiveDroppedFiles):

• html/FormAssociatedElement.cpp:

(WebCore::FormAssociatedElement::didMoveToNewDocument):
(WebCore::FormAssociatedElement::insertedInto):
(WebCore::FormAssociatedElement::removedFrom):
(WebCore::FormAssociatedElement::formAttributeChanged):

• html/FormController.cpp:

(WebCore::ownerFormForState):

• html/GenericCachedHTMLCollection.cpp:

(WebCore::GenericCachedHTMLCollection<traversalType>::elementMatches):

• html/HTMLAnchorElement.cpp:

(WebCore::HTMLAnchorElement::draggable):
(WebCore::HTMLAnchorElement::href):
(WebCore::HTMLAnchorElement::sendPings):

• html/HTMLAppletElement.cpp:

(WebCore::HTMLAppletElement::rendererIsNeeded):

• html/HTMLElement.cpp:

(WebCore::HTMLElement::collectStyleForPresentationAttribute):
(WebCore::elementAffectsDirectionality):
(WebCore::setHasDirAutoFlagRecursively):

• html/HTMLEmbedElement.cpp:

(WebCore::HTMLEmbedElement::rendererIsNeeded):

• html/HTMLFieldSetElement.cpp:

(WebCore::updateFromControlElementsAncestorDisabledStateUnder):
(WebCore::HTMLFieldSetElement::disabledAttributeChanged):
(WebCore::HTMLFieldSetElement::disabledStateChanged):
(WebCore::HTMLFieldSetElement::childrenChanged):

• html/HTMLFormControlElement.cpp:

(WebCore::HTMLFormControlElement::formNoValidate):
(WebCore::HTMLFormControlElement::formAction):
(WebCore::HTMLFormControlElement::computeIsDisabledByFieldsetAncestor):
(WebCore::shouldAutofocus):

• html/HTMLFormElement.cpp:

(WebCore::HTMLFormElement::formElementIndex):
(WebCore::HTMLFormElement::noValidate):

• html/HTMLFrameElement.cpp:

(WebCore::HTMLFrameElement::noResize):
(WebCore::HTMLFrameElement::didAttachRenderers):

• html/HTMLFrameElementBase.cpp:

(WebCore::HTMLFrameElementBase::parseAttribute):
(WebCore::HTMLFrameElementBase::location):

• html/HTMLHRElement.cpp:

(WebCore::HTMLHRElement::collectStyleForPresentationAttribute):

• html/HTMLImageElement.cpp:

(WebCore::HTMLImageElement::isServerMap):

• html/HTMLInputElement.cpp:

(WebCore::HTMLInputElement::finishParsingChildren):
(WebCore::HTMLInputElement::matchesDefaultPseudoClass):
(WebCore::HTMLInputElement::isActivatedSubmit):
(WebCore::HTMLInputElement::reset):
(WebCore::HTMLInputElement::multiple):
(WebCore::HTMLInputElement::setSize):
(WebCore::HTMLInputElement::shouldUseMediaCapture):

• html/HTMLMarqueeElement.cpp:

(WebCore::HTMLMarqueeElement::minimumDelay):

• html/HTMLMediaElement.cpp:

(WebCore::HTMLMediaElement::insertedInto):
(WebCore::HTMLMediaElement::selectMediaResource):
(WebCore::HTMLMediaElement::loadResource):
(WebCore::HTMLMediaElement::autoplay):
(WebCore::HTMLMediaElement::preload):
(WebCore::HTMLMediaElement::loop):
(WebCore::HTMLMediaElement::setLoop):
(WebCore::HTMLMediaElement::controls):
(WebCore::HTMLMediaElement::setControls):
(WebCore::HTMLMediaElement::muted):
(WebCore::HTMLMediaElement::setMuted):
(WebCore::HTMLMediaElement::selectNextSourceChild):
(WebCore::HTMLMediaElement::sourceWasAdded):
(WebCore::HTMLMediaElement::mediaSessionTitle):

• html/HTMLObjectElement.cpp:

(WebCore::HTMLObjectElement::parseAttribute):

• html/HTMLOptGroupElement.cpp:

(WebCore::HTMLOptGroupElement::isDisabledFormControl):
(WebCore::HTMLOptGroupElement::isFocusable):

• html/HTMLOptionElement.cpp:

(WebCore::HTMLOptionElement::matchesDefaultPseudoClass):
(WebCore::HTMLOptionElement::text):

• html/HTMLProgressElement.cpp:

(WebCore::HTMLProgressElement::isDeterminate):
(WebCore::HTMLProgressElement::didElementStateChange):

• html/HTMLScriptElement.cpp:

(WebCore::HTMLScriptElement::async):
(WebCore::HTMLScriptElement::setCrossOrigin):
(WebCore::HTMLScriptElement::asyncAttributeValue):
(WebCore::HTMLScriptElement::deferAttributeValue):
(WebCore::HTMLScriptElement::hasSourceAttribute):
(WebCore::HTMLScriptElement::dispatchLoadEvent):

• html/HTMLSelectElement.cpp:

(WebCore::HTMLSelectElement::reset):

• html/HTMLTrackElement.cpp:

(WebCore::HTMLTrackElement::isDefault):
(WebCore::HTMLTrackElement::ensureTrack):
(WebCore::HTMLTrackElement::loadTimerFired):

• html/MediaElementSession.cpp:

(WebCore::MediaElementSession::wirelessVideoPlaybackDisabled):
(WebCore::MediaElementSession::requiresFullscreenForVideoPlayback):
(WebCore::MediaElementSession::allowsAutomaticMediaDataLoading):

• html/SearchInputType.cpp:

(WebCore::SearchInputType::searchEventsShouldBeDispatched):
(WebCore::SearchInputType::didSetValueByUserEdit):

• inspector/InspectorDOMAgent.cpp:

(WebCore::InspectorDOMAgent::buildObjectForNode):

• loader/FrameLoader.cpp:

(WebCore::FrameLoader::shouldTreatURLAsSrcdocDocument):
(WebCore::FrameLoader::findFrameForNavigation):

• loader/ImageLoader.cpp:

(WebCore::ImageLoader::notifyFinished):

• mathml/MathMLSelectElement.cpp:

(WebCore::MathMLSelectElement::getSelectedSemanticsChild):

• rendering/RenderTableCell.cpp:

(WebCore::RenderTableCell::computePreferredLogicalWidths):

• rendering/RenderThemeIOS.mm:

(WebCore::RenderThemeIOS::adjustMenuListButtonStyle):

• rendering/SimpleLineLayout.cpp:

(WebCore::SimpleLineLayout::canUseForWithReason):

• rendering/svg/RenderSVGResourceClipper.cpp:

(WebCore::RenderSVGResourceClipper::drawContentIntoMaskImage):

• svg/SVGAnimateMotionElement.cpp:

(WebCore::SVGAnimateMotionElement::updateAnimationPath):

• svg/SVGAnimationElement.cpp:

(WebCore::SVGAnimationElement::startedActiveInterval):
(WebCore::SVGAnimationElement::updateAnimation):

• svg/animation/SVGSMILElement.cpp:

(WebCore::SVGSMILElement::insertedInto):

Source/WebKit2:

• WebProcess/WebPage/ios/WebPageIOS.mm:

(WebKit::WebPage::getAssistedNodeInformation):

3:00 PM Changeset in webkit [203336] by fpizlo@apple.com

• 2 edits
  1 add in trunk/Source/JavaScriptCore

DFG CSE is broken for MultiGetByOffset
​https://bugs.webkit.org/show_bug.cgi?id=159858

Reviewed by Saam Barati.

This disabled CSE for MultiGetByOffset. I opened bug 159859 for the long-term fix, which
would teach CSE (and other passes also) how to decay a removed MultiGetByOffset to a
CheckStructure. Since we currently just decay MultiGetByOffset to Check, we forget the
structure checks. So, if we CSE a MultiGetByOffset that checks for one set of structures with
a heap access on the same property and base that checks for different structures, then we
will forget some structure checks that we had previously. It's unsound to forget checks in
DFG IR.

This bug mostly manifested as a high-volume crash at Unreachable in FTL, because we'd prove
that the code after the MultiGetByOffset was unreachable due to the structure checks and then
CSE would remove everything but the Unreachable.

• dfg/DFGClobberize.h:

(JSC::DFG::clobberize): Remove the def() for MultiGetByOffset to disable CSE for this node for now.

• tests/stress/cse-multi-get-by-offset-remove-checks.js: Added. This used to fail with FTL eanbled.

(Cons1):
(Cons2):
(Cons3):
(foo):
(bar):

1:35 PM Changeset in webkit [203335] by commit-queue@webkit.org

• 3 edits in trunk/Source/WebKit2

REGRESSION (r191907): Maxthon Browser -After exit full screen video playback the browser window is blank with audio running
​https://bugs.webkit.org/show_bug.cgi?id=159731
<rdar://problem/26674003>

Patch by Jeremy Jones <​jeremyj@apple.com> on 2016-07-17
Reviewed by Tim Horton.

Primarily written by Jer Noble <​jer.noble@apple.com>.

When a view is removed from it's superview, and that superview's constraints property references
the removed superview, those constraints are removed as well. Make sure to save off a copy of
the superview's constraints before swapping in the placeholder view, and reapply those constraints
when swapping the web view back into its original superview.

• UIProcess/mac/WKFullScreenWindowController.h:
• UIProcess/mac/WKFullScreenWindowController.mm:

(-[WKFullScreenWindowController setSavedConstraints:]):
(-[WKFullScreenWindowController savedConstraints]):
(-[WKFullScreenWindowController enterFullScreen:]):
(-[WKFullScreenWindowController finishedEnterFullScreenAnimation:]):
(-[WKFullScreenWindowController finishedExitFullScreenAnimation:]):

12:12 PM Changeset in webkit [203334] by beidson@apple.com

• 7 edits in trunk/Source/WebCore

Exceptions logged to the JS console should use toString().
​https://bugs.webkit.org/show_bug.cgi?id=159855

Reviewed by Darin Adler.

No new tests (No change in behavior).

• bindings/js/JSDOMBinding.cpp:

(WebCore::reportException):

• dom/DOMCoreException.h:

(WebCore::DOMCoreException::DOMCoreException):

• dom/ExceptionBase.cpp:

(WebCore::ExceptionBase::ExceptionBase):
(WebCore::ExceptionBase::toString):
(WebCore::ExceptionBase::consoleErrorMessage): Deleted.

• dom/ExceptionBase.h:

(WebCore::ExceptionBase::description): Deleted.

• svg/SVGException.h:

• xml/XPathException.h:

(WebCore::XPathException::XPathException):

9:47 AM Changeset in webkit [203333] by beidson@apple.com

• 477 edits in trunk

Update DOMCoreException to use the description in toString().
​https://bugs.webkit.org/show_bug.cgi?id=159857

Reviewed by Darin Adler.

LayoutTests/imported/w3c:

• web-platform-tests/XMLHttpRequest/send-authentication-basic-setrequestheader-and-arguments-expected.txt:
• web-platform-tests/XMLHttpRequest/send-non-same-origin.sub-expected.txt:
• web-platform-tests/XMLHttpRequest/setrequestheader-bogus-name-expected.txt:
• web-platform-tests/XMLHttpRequest/setrequestheader-bogus-value-expected.txt:
• web-platform-tests/XMLHttpRequest/xmlhttprequest-sync-block-defer-scripts-expected.txt:
• web-platform-tests/XMLHttpRequest/xmlhttprequest-sync-block-scripts-expected.txt:
• web-platform-tests/XMLHttpRequest/xmlhttprequest-sync-not-hang-scriptloader-expected.txt:
• web-platform-tests/XMLHttpRequest/xmlhttprequest-timeout-worker-synconworker-expected.txt:
• web-platform-tests/dom/events/ProgressEvent-expected.txt:
• web-platform-tests/dom/interfaces-expected.txt:
• web-platform-tests/dom/nodes/Document-createElementNS-expected.txt:
• web-platform-tests/dom/nodes/Document-createEvent-expected.txt:
• web-platform-tests/dom/nodes/Element-closest-expected.txt:
• web-platform-tests/dom/nodes/Element-matches-expected.txt:
• web-platform-tests/dom/nodes/ParentNode-querySelector-All-expected.txt:
• web-platform-tests/dom/nodes/ParentNode-querySelector-All-xht-expected.txt:
• web-platform-tests/dom/nodes/insert-adjacent-expected.txt:
• web-platform-tests/domparsing/createContextualFragment-expected.txt:
• web-platform-tests/html/dom/interfaces-expected.txt:
• web-platform-tests/html/semantics/embedded-content/media-elements/volume_nonfinite-expected.txt:
• web-platform-tests/html/semantics/forms/the-input-element/month-expected.txt:
• web-platform-tests/html/semantics/forms/the-input-element/range-expected.txt:
• web-platform-tests/html/semantics/forms/the-input-element/time-expected.txt:
• web-platform-tests/html/semantics/forms/the-meter-element/meter-expected.txt:

Source/WebCore:

No new tests (Covered by changes to existing tests).

• bindings/js/JSDOMBinding.cpp:

(WebCore::createDOMException):

• dom/DOMCoreException.h:

(WebCore::DOMCoreException::DOMCoreException):
(WebCore::DOMCoreException::createWithDescriptionAsMessage): Deleted.

LayoutTests:

• canvas/philip/tests/2d.missingargs.html:
• crypto/crypto-random-values-limits-expected.txt:
• crypto/crypto-random-values-types-expected.txt:
• crypto/subtle/aes-cbc-wrong-key-class-expected.txt:
• crypto/subtle/aes-kw-key-manipulation-expected.txt:
• crypto/subtle/argument-conversion-expected.txt:
• crypto/subtle/hmac-check-algorithm-expected.txt:
• crypto/subtle/hmac-generate-key-expected.txt:
• crypto/subtle/rsa-oaep-key-manipulation-expected.txt:
• crypto/subtle/sha-1-expected.txt:
• crypto/subtle/unwrapKey-check-usage-expected.txt:
• crypto/subtle/wrapKey-check-usage-expected.txt:
• css3/supports-cssom-expected.txt:
• editing/pasteboard/data-transfer-items-expected.txt:
• editing/selection/extend-expected.txt:
• fast/canvas/canvas-createImageData-expected.txt:
• fast/canvas/canvas-ellipse-negative-radius-expected.txt:
• fast/canvas/canvas-getImageData-invalid-expected.txt:
• fast/canvas/canvas-getImageData-invalid-result-buffer-crash-expected.txt:
• fast/canvas/canvas-gradient-addStop-error-expected.txt:
• fast/canvas/canvas-imageData-expected.txt:
• fast/canvas/canvas-overloads-drawImage-expected.txt:
• fast/canvas/canvas-pattern-behaviour-expected.txt:
• fast/canvas/gradient-addColorStop-with-invalid-color-expected.txt:
• fast/canvas/script-tests/canvas-createImageData.js:
• fast/canvas/script-tests/canvas-getImageData-invalid.js:
• fast/canvas/script-tests/canvas-imageData.js:
• fast/canvas/script-tests/canvas-overloads-drawImage.js:
• fast/canvas/script-tests/gradient-addColorStop-with-invalid-color.js:
• fast/css/CSSPrimitiveValue-exceptions-expected.txt:
• fast/css/css3-nth-tokens-script-expected.txt:
• fast/css/css3-nth-tokens-script.html:
• fast/css/getFloatValueForUnit-expected.txt:
• fast/css/getFloatValueForUnit.html:
• fast/css/insert-rule-overflow-rule-data-expected.txt:
• fast/css/parsing-css-attribute-case-insensitive-value-1-expected.txt:
• fast/css/parsing-css-attribute-case-insensitive-value-2-expected.txt:
• fast/css/parsing-css-attribute-case-insensitive-value-3-expected.txt:
• fast/css/parsing-css-attribute-case-insensitive-value-3.html:
• fast/css/parsing-css-descendant-combinator-doubled-child-syntax-expected.txt:
• fast/css/parsing-css-descendant-combinator-doubled-child-syntax.html:
• fast/css/parsing-css-matches-5-expected.txt:
• fast/css/parsing-css-matches-5.html:
• fast/css/parsing-css-matches-6-expected.txt:
• fast/css/parsing-css-matches-6.html:
• fast/css/parsing-css-matches-7-expected.txt:
• fast/css/parsing-css-matches-7.html:
• fast/css/parsing-css-matches-8-expected.txt:
• fast/css/parsing-css-matches-8.html:
• fast/css/parsing-css-not-5-expected.txt:
• fast/css/parsing-css-not-5.html:
• fast/css/parsing-css-not-6-expected.txt:
• fast/css/parsing-css-not-6.html:
• fast/css/parsing-css-not-7-expected.txt:
• fast/css/parsing-css-not-7.html:
• fast/css/parsing-css-not-8-expected.txt:
• fast/css/parsing-css-not-8.html:
• fast/css/parsing-css-not-9-expected.txt:
• fast/css/parsing-css-not-9.html:
• fast/css/parsing-css-nth-child-of-3-expected.txt:
• fast/css/parsing-css-nth-child-of-3.html:
• fast/css/parsing-css-nth-child-of-4-expected.txt:
• fast/css/parsing-css-nth-child-of-4.html:
• fast/css/parsing-css-nth-last-child-of-3-expected.txt:
• fast/css/parsing-css-nth-last-child-of-3.html:
• fast/css/parsing-css-nth-last-child-of-4-expected.txt:
• fast/css/parsing-css-nth-last-child-of-4.html:
• fast/css/resources/CSSPrimitiveValue-exceptions.js:
• fast/dom/DOMException/prototype-object-expected.txt:
• fast/dom/DOMException/prototype-object.html:
• fast/dom/DOMException/stack-trace-expected.txt:
• fast/dom/DOMException/stack-trace.html:
• fast/dom/Document/createElement-invalid-names-expected.txt:
• fast/dom/Document/createElement-invalid-names.html:
• fast/dom/Document/invalid-domain-change-throws-exception-expected.txt:
• fast/dom/Document/replace-child-expected.txt:
• fast/dom/Document/script-tests/invalid-domain-change-throws-exception.js:
• fast/dom/Element/class-list-toggle-expected.txt:
• fast/dom/Element/class-list-toggle.html:
• fast/dom/Element/prefix-setter-exception-expected.txt:
• fast/dom/Geolocation/argument-types-expected.txt:
• fast/dom/Geolocation/not-enough-arguments-expected.txt:
• fast/dom/Geolocation/script-tests/argument-types.js:

(test):

• fast/dom/HTMLElement/insertAdjacentHTML-errors-expected.txt:
• fast/dom/HTMLElement/script-tests/insertAdjacentHTML-errors.js:
• fast/dom/HTMLElement/set-invalid-value-expected.txt:
• fast/dom/HTMLElement/set-invalid-value.html:
• fast/dom/HTMLInputElement/input-size-attribute-expected.txt:
• fast/dom/HTMLInputElement/input-size-attribute.html:
• fast/dom/HTMLMeterElement/script-tests/set-meter-properties.js:
• fast/dom/HTMLMeterElement/set-meter-properties-expected.txt:
• fast/dom/HTMLProgressElement/script-tests/set-progress-properties.js:
• fast/dom/HTMLProgressElement/set-progress-properties-expected.txt:
• fast/dom/HTMLSelectElement/options-collection-add-expected.txt:
• fast/dom/HTMLSelectElement/select-add-optgroup-expected.txt:
• fast/dom/HTMLSelectElement/select-selectedIndex-expected.txt:
• fast/dom/HTMLSelectElement/select-selectedIndex-multiple-expected.txt:
• fast/dom/HTMLTableElement/nullable-attributes-expected.txt:
• fast/dom/HTMLTableElement/nullable-attributes.html:
• fast/dom/HTMLTemplateElement/cycles-expected.txt:
• fast/dom/HTMLTemplateElement/cycles-in-shadow-expected.txt:
• fast/dom/Node/initial-values-expected.txt:
• fast/dom/ParentNode-append-expected.txt:
• fast/dom/ParentNode-prepend-expected.txt:
• fast/dom/Range/31684-expected.txt:
• fast/dom/Range/clone-contents-document-type-expected.txt:
• fast/dom/Range/clone-contents-document-type.html:
• fast/dom/Range/compareBoundaryPoints-1.html:
• fast/dom/Range/compareBoundaryPoints-compareHow-exception-expected.txt:
• fast/dom/Range/compareBoundaryPoints-compareHow-exception.html:
• fast/dom/Range/extract-contents-document-type-expected.txt:
• fast/dom/Range/extract-contents-document-type.html:
• fast/dom/Range/range-comparePoint-detached-nodes-expected.txt:
• fast/dom/Range/range-comparePoint-detached-nodes.html:
• fast/dom/Range/range-exceptions-expected.txt:
• fast/dom/Range/range-intersectsNode-expected.txt:
• fast/dom/Range/script-tests/31684.js:
• fast/dom/Range/script-tests/range-exceptions.js:
• fast/dom/Range/surroundContents-1.html:
• fast/dom/Selection/collapseToX-empty-selection-expected.txt:
• fast/dom/Selection/script-tests/collapseToX-empty-selection.js:
• fast/dom/SelectorAPI/dumpNodeList-almost-strict-expected.txt:
• fast/dom/SelectorAPI/dumpNodeList-expected.txt:
• fast/dom/SelectorAPI/not-supported-namespace-in-selector-expected.txt:
• fast/dom/Text/splitText-expected.txt:
• fast/dom/Text/splitText.html:
• fast/dom/Window/anonymous-slot-with-changes-expected.txt:
• fast/dom/Window/atob-btoa-expected.txt:
• fast/dom/Window/custom-constructors-expected.txt:
• fast/dom/Window/dispatchEvent-expected.txt:
• fast/dom/Window/invalid-protocol-expected.txt:
• fast/dom/Window/window-postmessage-clone-expected.txt:
• fast/dom/computed-style-set-property-expected.txt:
• fast/dom/createElementNS-namespace-errors-expected.txt:
• fast/dom/createElementNS-namespace-errors.html:
• fast/dom/css-mediarule-functions-expected.txt:
• fast/dom/css-mediarule-functions.html:
• fast/dom/custom/document-register-basic-expected.txt:
• fast/dom/custom/document-register-basic.html:
• fast/dom/custom/document-register-type-extensions-expected.txt:
• fast/dom/custom/document-register-type-extensions.html:
• fast/dom/dataset-expected.txt:
• fast/dom/dataset-xhtml-expected.txt:
• fast/dom/document-set-body-null-expected.txt:
• fast/dom/document-set-body-null.html:
• fast/dom/element-attribute-js-null-expected.txt:
• fast/dom/insertAdjacentHTML-DocumentFragment-crash-expected.txt:
• fast/dom/node-prefix-setter-namespace-exception-expected.txt:
• fast/dom/outerText-no-element-expected.txt:
• fast/dom/processing-instruction-appendChild-exceptions-expected.txt:
• fast/dom/processing-instruction-appendChild-exceptions.xhtml:
• fast/dom/rel-list-expected.txt:
• fast/dom/script-tests/dataset-xhtml.js:
• fast/dom/script-tests/dataset.js:
• fast/dom/setAttributeNS-namespace-errors-expected.txt:
• fast/dom/setAttributeNS-namespace-errors.html:
• fast/dom/setPrimitiveValue-exceptions-expected.txt:
• fast/dom/setPrimitiveValue-expected.txt:
• fast/dynamic/insertAdjacentElement-expected.txt:
• fast/dynamic/insertAdjacentHTML-expected.txt:
• fast/dynamic/insertAdjacentText-expected.txt:
• fast/dynamic/outerHTML-no-element-expected.txt:
• fast/events/dispatch-event-being-dispatched-expected.txt:
• fast/events/dispatch-event-being-dispatched.html:
• fast/events/message-port-clone-expected.txt:
• fast/events/message-port-multi-expected.txt:
• fast/events/mutation-during-append-child-expected.txt:
• fast/events/mutation-during-append-child.html:
• fast/events/mutation-during-insert-before-expected.txt:
• fast/events/mutation-during-insert-before.html:
• fast/events/mutation-during-replace-child-2-expected.txt:
• fast/events/mutation-during-replace-child-2.html:
• fast/events/mutation-during-replace-child-expected.txt:
• fast/events/mutation-during-replace-child.html:
• fast/eventsource/eventsource-constructor-expected.txt:
• fast/forms/color/color-setrangetext-expected.txt:
• fast/forms/date/date-setrangetext-expected.txt:
• fast/forms/date/date-stepup-stepdown-expected.txt:
• fast/forms/date/date-stepup-stepdown.html:
• fast/forms/date/input-valueasnumber-date-expected.txt:
• fast/forms/date/input-valueasnumber-date.html:
• fast/forms/datetime/datetime-setrangetext-expected.txt:
• fast/forms/datetime/datetime-stepup-stepdown-expected.txt:
• fast/forms/datetime/datetime-stepup-stepdown.html:
• fast/forms/datetime/input-valueasnumber-datetime-expected.txt:
• fast/forms/datetime/input-valueasnumber-datetime.html:
• fast/forms/datetimelocal/datetimelocal-setrangetext-expected.txt:
• fast/forms/datetimelocal/datetimelocal-stepup-stepdown-expected.txt:
• fast/forms/datetimelocal/datetimelocal-stepup-stepdown.html:
• fast/forms/datetimelocal/input-valueasnumber-datetimelocal-expected.txt:
• fast/forms/datetimelocal/input-valueasnumber-datetimelocal.html:
• fast/forms/file/file-setrangetext-expected.txt:
• fast/forms/file/input-file-value-expected.txt:
• fast/forms/hidden/hidden-setrangetext-expected.txt:
• fast/forms/image/image-setrangetext-expected.txt:
• fast/forms/input-maxlength-expected.txt:
• fast/forms/input-maxlength.html:
• fast/forms/input-stepup-stepdown-expected.txt:
• fast/forms/input-stepup-stepdown.html:
• fast/forms/input-valueasnumber-unsupported-expected.txt:
• fast/forms/input-valueasnumber-unsupported.html:
• fast/forms/month/input-valueasdate-expected.txt:
• fast/forms/month/input-valueasdate.html:
• fast/forms/month/input-valueasnumber-month-expected.txt:
• fast/forms/month/input-valueasnumber-month.html:
• fast/forms/month/month-setrangetext-expected.txt:
• fast/forms/month/month-stepup-stepdown-expected.txt:
• fast/forms/month/month-stepup-stepdown.html:
• fast/forms/number/number-setrangetext-expected.txt:
• fast/forms/number/number-size-expected.txt:
• fast/forms/number/number-size.html:
• fast/forms/number/number-stepup-stepdown-expected.txt:
• fast/forms/number/number-stepup-stepdown-from-renderer.html:
• fast/forms/number/number-stepup-stepdown.html:
• fast/forms/number/number-valueasnumber-expected.txt:
• fast/forms/number/number-valueasnumber.html:
• fast/forms/range/input-valueasnumber-range-expected.txt:
• fast/forms/range/input-valueasnumber-range.html:
• fast/forms/range/range-setrangetext-expected.txt:
• fast/forms/range/range-stepup-stepdown-expected.txt:
• fast/forms/range/range-stepup-stepdown-from-renderer.html:
• fast/forms/range/range-stepup-stepdown.html:
• fast/forms/search/search-setrangetext-expected.txt:
• fast/forms/setrangetext-expected.txt:
• fast/forms/textarea-maxlength-expected.txt:
• fast/forms/textarea-maxlength.html:
• fast/forms/textarea/textarea-setrangetext-expected.txt:
• fast/forms/time/time-setrangetext-expected.txt:
• fast/forms/time/time-stepup-stepdown-expected.txt:
• fast/forms/time/time-stepup-stepdown.html:
• fast/forms/time/time-valueasnumber-expected.txt:
• fast/forms/time/time-valueasnumber.html:
• fast/forms/week/input-valueasnumber-week-expected.txt:
• fast/forms/week/input-valueasnumber-week.html:
• fast/forms/week/week-setrangetext-expected.txt:
• fast/forms/week/week-stepup-stepdown-expected.txt:
• fast/forms/week/week-stepup-stepdown.html:
• fast/frames/adopt-iframe-into-itself-expected.txt:
• fast/frames/adopt-object-into-itself-expected.txt:
• fast/frames/resources/sandboxed-iframe-storage-disallowed.html:
• fast/frames/sandboxed-iframe-storage-expected.txt:
• fast/html/marquee-element-expected.txt:
• fast/innerHTML/innerHTML-changing-document-properties-expected.txt:
• fast/inspector-support/uncaught-dom1-exception-expected.txt:
• fast/inspector-support/uncaught-dom3-exception-expected.txt:
• fast/inspector-support/uncaught-dom8-exception-expected.txt:
• fast/loader/stateobjects/pushstate-frequency-expected.txt:
• fast/loader/stateobjects/pushstate-frequency-iframe-expected.txt:
• fast/loader/stateobjects/replacestate-frequency-expected.txt:
• fast/loader/stateobjects/replacestate-frequency-iframe-expected.txt:
• fast/media/mq-js-media-except-01-expected.html:
• fast/media/mq-js-media-except-02-expected.html:
• fast/media/mq-js-media-except-03-expected.html:
• fast/mediastream/MediaDevices-getUserMedia-expected.txt:
• fast/mediastream/RTCPeerConnection-addIceCandidate-expected.txt:
• fast/mediastream/RTCPeerConnection-closed-state-expected.txt:
• fast/mediastream/RTCPeerConnection-createAnswer-expected.txt:
• fast/mediastream/RTCPeerConnection-createOffer-expected.txt:
• fast/mediastream/RTCPeerConnection-datachannel-expected.txt:
• fast/mediastream/RTCPeerConnection-dtmf-expected.txt:
• fast/mediastream/RTCPeerConnection-have-local-offer-expected.txt:
• fast/mediastream/RTCPeerConnection-have-remote-offer-expected.txt:
• fast/mediastream/RTCPeerConnection-setLocalDescription-offer-expected.txt:
• fast/mediastream/RTCPeerConnection-setRemoteDescription-offer-expected.txt:
• fast/mediastream/RTCPeerConnection-stable-expected.txt:
• fast/mediastream/RTCRtpSender-replaceTrack-expected.txt:
• fast/notifications/notifications-document-close-crash-expected.txt:
• fast/regions/selection/crash-deselect-expected.txt:
• fast/selectors/closest-general-expected.txt:
• fast/selectors/invalid-functional-pseudo-class-expected.txt:
• fast/selectors/lang-empty-expected.txt:
• fast/selectors/lang-extended-filtering-expected.txt:
• fast/selectors/lang-extended-filtering-with-string-arguments-expected.txt:
• fast/selectors/lang-invalid-expected.txt:
• fast/selectors/lang-multiple-expected.txt:
• fast/selectors/querySelector-pseudo-element-inside-functional-pseudo-class-not-expected.txt:
• fast/text/font-face-empty-string-expected.txt:
• fast/text/font-face-javascript-expected.txt:
• fast/text/font-face-set-javascript-expected.txt:
• fast/text/text-combine-crash-expected.txt:
• fast/workers/atob-btoa-expected.txt:
• fast/workers/worker-constructor-expected.txt:
• fast/workers/worker-context-multi-port-expected.txt:
• fast/workers/worker-multi-port-expected.txt:
• fast/xmlhttprequest/xmlhttprequest-responseXML-xml-text-responsetype-expected.txt:
• fast/xmlhttprequest/xmlhttprequest-responsetype-arraybuffer-expected.txt:
• fast/xmlhttprequest/xmlhttprequest-responsetype-before-open-sync-request-expected.txt:
• fast/xmlhttprequest/xmlhttprequest-responsetype-document-expected.txt:
• fast/xmlhttprequest/xmlhttprequest-responsetype-set-at-headers-received-expected.txt:
• fast/xmlhttprequest/xmlhttprequest-responsetype-sync-request-expected.txt:
• fast/xmlhttprequest/xmlhttprequest-responsetype-text-expected.txt:
• fast/xmlhttprequest/xmlhttprequest-sync-disabled-expected.txt:
• fast/xpath/attr-namespace-expected.txt:
• fast/xpath/detached-subtree-invalidate-iterator-expected.txt:
• fast/xpath/py-dom-xpath/nodetests-expected.txt:
• http/tests/contentextensions/sync-xhr-blocked-expected.txt:
• http/tests/loading/state-object-security-exception-expected.txt:
• http/tests/local/fileapi/send-sliced-dragged-file-expected.txt:
• http/tests/notifications/legacy/show-expected.txt:
• http/tests/security/canvas-remote-read-data-url-image-redirect-expected.txt:
• http/tests/security/canvas-remote-read-remote-image-blocked-no-crossorigin-expected.txt:
• http/tests/security/canvas-remote-read-remote-image-expected.txt:
• http/tests/security/canvas-remote-read-remote-image-redirect-expected.txt:
• http/tests/security/canvas-remote-read-remote-video-blocked-no-crossorigin-expected.txt:
• http/tests/security/canvas-remote-read-remote-video-localhost-expected.txt:
• http/tests/security/canvas-remote-read-remote-video-redirect-expected.txt:
• http/tests/security/contentSecurityPolicy/1.1/child-src/worker-blocked-expected.txt:
• http/tests/security/contentSecurityPolicy/connect-src-xmlhttprequest-blocked-expected.txt:
• http/tests/security/contentSecurityPolicy/connect-src-xmlhttprequest-blocked.html:
• http/tests/security/contentSecurityPolicy/worker-blob-inherits-csp-importScripts-block-aborts-all-subsequent-imports-expected.txt:
• http/tests/security/contentSecurityPolicy/worker-blob-inherits-csp-importScripts-redirect-cross-origin-blocked-expected.txt:
• http/tests/security/contentSecurityPolicy/worker-csp-blocks-xhr-redirect-cross-origin-expected.txt:
• http/tests/security/contentSecurityPolicy/worker-csp-importScripts-redirect-cross-origin-blocked-expected.txt:
• http/tests/security/contentSecurityPolicy/worker-importscripts-blocked-expected.txt:
• http/tests/security/contentSecurityPolicy/worker-importscripts-blocked.html:
• http/tests/security/history-username-password-expected.txt:
• http/tests/security/postMessage/invalid-origin-throws-exception-expected.txt:
• http/tests/security/postMessage/target-origin-expected.txt:
• http/tests/security/resources/canvas-video-crossorigin.js:

(testDataRetrievalAllowed):
(testDataRetrievalForbidden):

• http/tests/security/setDomainRelaxationForbiddenForURLScheme-expected.txt:
• http/tests/security/webgl-remote-read-remote-image-blocked-no-crossorigin-expected.txt:
• http/tests/websocket/tests/hybi/bad-sub-protocol-control-chars-expected.txt:
• http/tests/websocket/tests/hybi/bad-sub-protocol-empty-expected.txt:
• http/tests/websocket/tests/hybi/bad-sub-protocol-non-ascii-expected.txt:
• http/tests/websocket/tests/hybi/binary-type-expected.txt:
• http/tests/websocket/tests/hybi/binary-type.html:
• http/tests/websocket/tests/hybi/invalid-subprotocol-characters-expected.txt:
• http/tests/websocket/tests/hybi/invalid-subprotocol-characters.html:
• http/tests/websocket/tests/hybi/invalid-subprotocols-expected.txt:
• http/tests/websocket/tests/hybi/invalid-subprotocols.html:
• http/tests/websocket/tests/hybi/url-parsing-expected.txt:
• http/tests/workers/worker-importScripts-expected.txt:
• http/tests/workers/worker-redirect-expected.txt:
• http/tests/xmlhttprequest/XMLHttpRequestException-expected.txt:
• http/tests/xmlhttprequest/XMLHttpRequestException.html:
• http/tests/xmlhttprequest/access-control-and-redirects-expected.txt:
• http/tests/xmlhttprequest/access-control-basic-denied-expected.txt:
• http/tests/xmlhttprequest/access-control-basic-get-fail-non-simple-expected.txt:
• http/tests/xmlhttprequest/access-control-basic-non-simple-deny-cached-expected.txt:
• http/tests/xmlhttprequest/access-control-basic-post-fail-non-simple-content-type-expected.txt:
• http/tests/xmlhttprequest/access-control-sandboxed-iframe-denied-expected.txt:
• http/tests/xmlhttprequest/access-control-sandboxed-iframe-denied-without-wildcard-expected.txt:
• http/tests/xmlhttprequest/connection-error-sync-expected.txt:
• http/tests/xmlhttprequest/cross-origin-no-authorization-expected.txt:
• http/tests/xmlhttprequest/exceptions-expected.txt:
• http/tests/xmlhttprequest/inject-header-expected.txt:
• http/tests/xmlhttprequest/origin-exact-matching-expected.txt:
• http/tests/xmlhttprequest/origin-whitelisting-https-expected.txt:
• http/tests/xmlhttprequest/origin-whitelisting-ip-addresses-with-subdomains-expected.txt:
• http/tests/xmlhttprequest/origin-whitelisting-removal-expected.txt:
• http/tests/xmlhttprequest/workers/access-control-basic-get-fail-non-simple-expected.txt:
• http/tests/xmlhttprequest/xmlhttprequest-open-empty-method-expected.txt:
• http/tests/xmlhttprequest/xmlhttprequest-overridemimetype-invalidstaterror-expected.txt:
• http/tests/xmlhttprequest/xmlhttprequest-setrequestheader-no-name-expected.txt:
• http/tests/xmlhttprequest/xmlhttprequest-sync-no-progress-events-expected.txt:
• http/tests/xmlhttprequest/xmlhttprequest-unsafe-redirect-expected.txt:
• inspector/debugger/command-line-api-exception-expected.txt:
• inspector/debugger/regress-133182-expected.txt:
• inspector/debugger/resources/exceptions.js:

(triggerUncaughtDOMException):

• inspector/debugger/setPauseOnExceptions-all-expected.txt:
• inspector/debugger/setPauseOnExceptions-none-expected.txt:
• inspector/debugger/setPauseOnExceptions-uncaught-expected.txt:
• inspector/model/remote-object-expected.txt:
• js/dom/dfg-custom-getter-throw-expected.txt:
• js/dom/reflect-set-onto-dom-expected.txt:
• js/dom/script-tests/dfg-custom-getter-throw-inlined.js:

(i.dfgIncrement):

• js/dom/script-tests/dfg-custom-getter-throw.js:
• loader/stateobjects/pushstate-size-expected.txt:
• loader/stateobjects/pushstate-size-iframe-expected.txt:
• loader/stateobjects/replacestate-size-expected.txt:
• loader/stateobjects/replacestate-size-iframe-expected.txt:
• media/track/regions-webvtt/vtt-region-constructor-expected.txt:
• media/track/regions-webvtt/vtt-region-list-expected.txt:
• platform/efl/fast/dynamic/015-expected.txt:
• platform/gtk/fast/dynamic/015-expected.txt:
• platform/ios-simulator-wk2/editing/selection/caret-ltr-2-expected.txt:
• platform/ios-simulator-wk2/editing/selection/caret-ltr-2-left-expected.txt:
• platform/ios-simulator-wk2/editing/selection/caret-ltr-expected.txt:
• platform/ios-simulator-wk2/editing/selection/caret-ltr-right-expected.txt:
• platform/ios-simulator-wk2/editing/selection/caret-rtl-2-expected.txt:
• platform/ios-simulator-wk2/editing/selection/caret-rtl-2-left-expected.txt:
• platform/ios-simulator-wk2/editing/selection/caret-rtl-expected.txt:
• platform/ios-simulator-wk2/editing/selection/caret-rtl-right-expected.txt:
• platform/ios-simulator/fast/attachment/attachment-select-on-click-expected.txt:
• platform/ios-simulator/fast/dynamic/015-expected.txt:
• platform/ios-simulator/imported/w3c/web-platform-tests/html/dom/interfaces-expected.txt:
• platform/ios-simulator/imported/w3c/web-platform-tests/html/semantics/forms/the-input-element/time-expected.txt:
• platform/ios-simulator/imported/w3c/web-platform-tests/html/semantics/interfaces-expected.txt:
• platform/ios-simulator/webaudio/analyser-exception-expected.txt:
• platform/ios-simulator/webaudio/audiobuffersource-exception-expected.txt:
• platform/ios-simulator/webaudio/delaynode-maxdelaylimit-expected.txt:
• platform/mac/TestExpectations:
• platform/mac/canvas/philip/tests/2d.missingargs-expected.txt:
• platform/mac/fast/dynamic/015-expected.txt:
• platform/mac/inspector/model/remote-object-expected.txt:
• platform/win/fast/dynamic/015-expected.txt:
• security/contentSecurityPolicy/worker-inherits-blocks-xhr-expected.txt:
• storage/domstorage/localstorage/blocked-file-access-expected.txt:
• storage/domstorage/localstorage/private-browsing-affects-storage-expected.txt:
• storage/domstorage/sessionstorage/private-browsing-affects-storage-expected.txt:
• storage/indexeddb/removed-expected.txt:
• storage/indexeddb/removed-private-expected.txt:
• storage/websql/open-database-set-empty-version-expected.txt:
• svg/animations/animate-gradient-transform-expected.txt:
• svg/as-image/svg-canvas-pattern-with-link-tainted-expected.txt:
• svg/as-image/svg-canvas-svg-with-feimage-with-link-tainted-expected.txt:
• svg/as-image/svg-canvas-svg-with-image-with-link-tainted-expected.txt:
• svg/as-image/svg-canvas-xhtml-tainted-expected.txt:
• svg/custom/acid3-test-77-expected.txt:
• svg/custom/baseval-animval-equality-expected.txt:
• svg/custom/getSubStringLength-expected.txt:
• svg/custom/selectSubString-expected.txt:
• svg/dom/SVGAngle-expected.txt:
• svg/dom/SVGColor-expected.txt:
• svg/dom/SVGLength-expected.txt:
• svg/dom/SVGLength-px-expected.txt:
• svg/dom/SVGLengthList-appendItem-expected.txt:
• svg/dom/SVGLengthList-basics-expected.txt:
• svg/dom/SVGLengthList-getItem-expected.txt:
• svg/dom/SVGLengthList-initialize-expected.txt:
• svg/dom/SVGLengthList-insertItemBefore-expected.txt:
• svg/dom/SVGLengthList-removeItem-expected.txt:
• svg/dom/SVGLengthList-replaceItem-expected.txt:
• svg/dom/SVGNumberList-basics-expected.txt:
• svg/dom/SVGPaint-expected.txt:
• svg/dom/SVGPathSegList-clear-and-initialize-expected.txt:
• svg/dom/SVGPointList-basics-expected.txt:
• svg/dom/SVGPreserveAspectRatio-expected.txt:
• svg/dom/SVGStringList-basics-expected.txt:
• svg/dom/SVGTransformList-basics-expected.txt:
• svg/dom/SVGTransformList-expected.txt:
• svg/dom/SVGViewSpec-defaults-expected.txt:
• svg/dom/altGlyph-dom-expected.txt:
• svg/dom/svglist-exception-on-out-bounds-error-expected.txt:
• transforms/cssmatrix-2d-interface-expected.txt:
• transforms/cssmatrix-3d-interface-expected.txt:
• webaudio/analyser-exception-expected.txt:
• webaudio/analyser-exception.html:
• webaudio/audiobuffersource-channels-expected.txt:
• webaudio/audiobuffersource-exception-expected.txt:
• webaudio/audiobuffersource-exception.html:
• webaudio/convolver-channels-expected.txt:
• webaudio/convolver-channels.html:
• webaudio/convolver-setBuffer-different-samplerate-expected.txt:
• webaudio/convolver-setBuffer-different-samplerate.html:
• webaudio/delaynode-maxdelaylimit-expected.txt:
• webaudio/offlineaudiocontext-constructor-expected.txt:

7:39 AM Changeset in webkit [203332] by Yusuke Suzuki

• 5 edits in trunk

[JSC] Enable test262 module tests
​https://bugs.webkit.org/show_bug.cgi?id=159854

Reviewed by Saam Barati.

Source/JavaScriptCore:

This patch enables test262 module tests. Before this patch, the modules tests in test262 do not work fine.
This patch fixes the following 2 things.

1. Test harness

Before this patch, there is only one global switch "-m" in jsc shell. So we cannot load the test262 test harness before evaluating the module tests.
This patch adds a new option, "--module-file=". It is similar to "--strict-file=". When we specify the file with "--module-file=", it is evaluated as
a module, while the other files are evaluated by following the JSC's default manner. This option allows us to load the test harness files into the
global context before loading the module tests.

2. Module's asynchronous errors

Before this patch, the errors caused in the module evaluation are not handled as the same to the usual sync files. In synchronous execution, we have
"--exception=" option to pass the expected exception to the JSC shell. But this option does not work in the module evaluation.
This patch correctly handles this expected exception in the module evaluation promise's fulfill and reject handlers.

And we fix the YAML file. Now the recorded :fail and :normal are the correct test results for the module tests.

• jsc.cpp:

(Script::Script):
(checkUncaughtException):
(runWithScripts):
(printUsageStatement):
(CommandLine::parseArguments):
(dumpException): Deleted.

• tests/test262.yaml:

Tools:

Use --module-file instead.

• Scripts/run-jsc-stress-tests:

7:33 AM Changeset in webkit [203331] by Yusuke Suzuki

• 10 edits in trunk/Source/JavaScriptCore

[JSC] Mask TrustedImm32 to 8bit in MacroAssembler for 8bit operations
​https://bugs.webkit.org/show_bug.cgi?id=159334

Reviewed by Filip Pizlo.

Previously, in 8bit operations (like add8, compare8, test8, branch8, branchTest8 etc.),
we require that the given TrustedImm32 is in range of 8bit. While achieving this in
the manual MacroAssembler calling is easy, in Air, we don't guarantee that the higher bit
of the 8bit argument is cleared. So the current assertions are invalid.

This patch relaxes the above restriction. By removing this assertion,
8bit operations can take arbitrary 32bit imms. And only lower 8bit are effective when
emitting the code in these methods.

• assembler/MacroAssembler.h:

(JSC::MacroAssembler::branchTest8):

• assembler/MacroAssemblerARM.h:

(JSC::MacroAssemblerARM::store8):
(JSC::MacroAssemblerARM::branch8):
(JSC::MacroAssemblerARM::branchTest8):
(JSC::MacroAssemblerARM::compare8):
(JSC::MacroAssemblerARM::test8):

• assembler/MacroAssemblerARM64.h:

(JSC::MacroAssemblerARM64::store8):
(JSC::MacroAssemblerARM64::branch8):
(JSC::MacroAssemblerARM64::branchTest8):
(JSC::MacroAssemblerARM64::compare8):
(JSC::MacroAssemblerARM64::test8):

• assembler/MacroAssemblerARMv7.h:

(JSC::MacroAssemblerARMv7::store8):
(JSC::MacroAssemblerARMv7::branch8):
(JSC::MacroAssemblerARMv7::branchTest8):
(JSC::MacroAssemblerARMv7::compare8):
(JSC::MacroAssemblerARMv7::test8):

• assembler/MacroAssemblerMIPS.h:

(JSC::MacroAssemblerMIPS::store8):
(JSC::MacroAssemblerMIPS::branch8):
(JSC::MacroAssemblerMIPS::compare8):
(JSC::MacroAssemblerMIPS::branchTest8):
(JSC::MacroAssemblerMIPS::test8):

• assembler/MacroAssemblerSH4.h:

(JSC::MacroAssemblerSH4::store8):
(JSC::MacroAssemblerSH4::branchTest8):
(JSC::MacroAssemblerSH4::branch8):
(JSC::MacroAssemblerSH4::compare8):
(JSC::MacroAssemblerSH4::test8):

• assembler/MacroAssemblerX86.h:

(JSC::MacroAssemblerX86::store8):
(JSC::MacroAssemblerX86::branch8):
(JSC::MacroAssemblerX86::branchTest8):

• assembler/MacroAssemblerX86Common.h:

(JSC::MacroAssemblerX86Common::add8):
(JSC::MacroAssemblerX86Common::store8):
(JSC::MacroAssemblerX86Common::branch8):
(JSC::MacroAssemblerX86Common::branchTest8):
(JSC::MacroAssemblerX86Common::compare8):
(JSC::MacroAssemblerX86Common::test8):

• assembler/MacroAssemblerX86_64.h:

(JSC::MacroAssemblerX86_64::store8):
(JSC::MacroAssemblerX86_64::branch8):
(JSC::MacroAssemblerX86_64::branchTest8):

12:16 AM Changeset in webkit [203330] by mmaxfield@apple.com

• 9 edits
  52 adds in trunk

Support new emoji group candidates
​https://bugs.webkit.org/show_bug.cgi?id=159755
<rdar://problem/27325521>

Reviewed by Dean Jackson.

Source/WebCore:

There are a few code points which should be able to be joined (with ZWJ) to
either U+2640 or U+2642 to change the gender of the emoji. These patterns
should also work with an additional 0xFE0F variation selector. This patch
adds these new patterns to our existing emoji group candidate infrastructure.

Tests: fast/text/emoji-gender-2-3.html

fast/text/emoji-gender-2-4.html
fast/text/emoji-gender-2-5.html
fast/text/emoji-gender-2-6.html
fast/text/emoji-gender-2-7.html
fast/text/emoji-gender-2-8.html
fast/text/emoji-gender-2-9.html
fast/text/emoji-gender-2.html
fast/text/emoji-gender-3.html
fast/text/emoji-gender-4.html
fast/text/emoji-gender-5.html
fast/text/emoji-gender-6.html
fast/text/emoji-gender-7.html
fast/text/emoji-gender-8.html
fast/text/emoji-gender-9.html
fast/text/emoji-gender-fe0f-3.html
fast/text/emoji-gender-fe0f-4.html
fast/text/emoji-gender-fe0f-5.html
fast/text/emoji-gender-fe0f-6.html
fast/text/emoji-gender-fe0f-7.html
fast/text/emoji-gender-fe0f-8.html
fast/text/emoji-gender-fe0f-9.html
fast/text/emoji-gender.html
fast/text/emoji-num-glyphs.html
fast/text/emoji-single-parent-family-2.html
fast/text/emoji-single-parent-family.html

• platform/graphics/mac/ComplexTextControllerCoreText.mm:

(WebCore::ComplexTextController::ComplexTextRun::ComplexTextRun): Removed incorrect ASSERT()s.

• platform/graphics/FontCascade.cpp:

(WebCore::FontCascade::characterRangeCodePath):

• platform/text/CharacterProperties.h:

(WebCore::isEmojiGroupCandidate):

Source/WTF:

This patch doesn't update the rules for our cursor movement iterator, because
I don't know the language used for implementing these rules. These rules will
be updated in the near future. When they do,
editing/deleting/delete-emoji-expected.txt will need to be updated.

• wtf/text/TextBreakIterator.cpp:

(WTF::cursorMovementIterator):

LayoutTests:

Because this patch doesn't update the rules for our cursor movement
iterator, the new expected result for editing/deleting/delete-emoji.html
expects incorrect results. In the patch where we update these rules,
the expected result should also be updated.

Because these new emoji require system support, TestExpectations has
been updated to mark the tests as failing until the system support has
been added.

• TestExpectations:
• editing/deleting/delete-emoji-expected.txt:
• fast/text/emoji-gender-2-3-expected.html: Added.
• fast/text/emoji-gender-2-3.html: Added.
• fast/text/emoji-gender-2-4-expected.html: Added.
• fast/text/emoji-gender-2-4.html: Added.
• fast/text/emoji-gender-2-5-expected.html: Added.
• fast/text/emoji-gender-2-5.html: Added.
• fast/text/emoji-gender-2-6-expected.html: Added.
• fast/text/emoji-gender-2-6.html: Added.
• fast/text/emoji-gender-2-7-expected.html: Added.
• fast/text/emoji-gender-2-7.html: Added.
• fast/text/emoji-gender-2-8-expected.html: Added.
• fast/text/emoji-gender-2-8.html: Added.
• fast/text/emoji-gender-2-9-expected.html: Added.
• fast/text/emoji-gender-2-9.html: Added.
• fast/text/emoji-gender-2-expected-mismatch.html: Added.
• fast/text/emoji-gender-2.html: Added.
• fast/text/emoji-gender-3-expected.html: Added.
• fast/text/emoji-gender-3.html: Added.
• fast/text/emoji-gender-4-expected.html: Added.
• fast/text/emoji-gender-4.html: Added.
• fast/text/emoji-gender-5-expected.html: Added.
• fast/text/emoji-gender-5.html: Added.
• fast/text/emoji-gender-6-expected.html: Added.
• fast/text/emoji-gender-6.html: Added.
• fast/text/emoji-gender-7-expected.html: Added.
• fast/text/emoji-gender-7.html: Added.
• fast/text/emoji-gender-8-expected.html: Added.
• fast/text/emoji-gender-8.html: Added.
• fast/text/emoji-gender-9-expected.html: Added.
• fast/text/emoji-gender-9.html: Added.
• fast/text/emoji-gender-expected-mismatch.html: Added.
• fast/text/emoji-gender-fe0f-3-expected.html: Added.
• fast/text/emoji-gender-fe0f-3.html: Added.
• fast/text/emoji-gender-fe0f-4-expected.html: Added.
• fast/text/emoji-gender-fe0f-4.html: Added.
• fast/text/emoji-gender-fe0f-5-expected.html: Added.
• fast/text/emoji-gender-fe0f-5.html: Added.
• fast/text/emoji-gender-fe0f-6-expected.html: Added.
• fast/text/emoji-gender-fe0f-6.html: Added.
• fast/text/emoji-gender-fe0f-7-expected.html: Added.
• fast/text/emoji-gender-fe0f-7.html: Added.
• fast/text/emoji-gender-fe0f-8-expected.html: Added.
• fast/text/emoji-gender-fe0f-8.html: Added.
• fast/text/emoji-gender-fe0f-9-expected.html: Added.
• fast/text/emoji-gender-fe0f-9.html: Added.
• fast/text/emoji-gender.html: Added.
• fast/text/emoji-num-glyphs-expected.txt: Added.
• fast/text/emoji-num-glyphs.html: Added.
• fast/text/emoji-single-parent-family-2-expected-mismatch.html: Added.
• fast/text/emoji-single-parent-family-2.html: Added.
• fast/text/emoji-single-parent-family-expected-mismatch.html: Added.
• fast/text/emoji-single-parent-family.html: Added.

Jul 16, 2016:

5:19 PM Changeset in webkit [203329] by Chris Dumez

• 5 edits in trunk

Unreviewed, rolling out r203318.

Regressed most JS Benchmarks on MacBook Air by ~2% (7% on
SunSpider)

Reverted changeset:

"[JSC] Change some parameters based on a random search"
​https://bugs.webkit.org/show_bug.cgi?id=158514
​http://trac.webkit.org/changeset/203318

2:33 PM Changeset in webkit [203328] by beidson@apple.com

• 36 edits in trunk

Update SVGException to use the description in toString().
​https://bugs.webkit.org/show_bug.cgi?id=159847

Reviewed by Darin Adler.

Source/WebCore:

No new tests (Covered by changes to existing tests).

• bindings/js/JSDOMBinding.cpp:

(WebCore::reportException): use consoleErrorMessage for now.

• dom/ExceptionBase.cpp:

(WebCore::ExceptionBase::consoleErrorMessage):

• dom/ExceptionBase.h:

• svg/SVGException.h:

LayoutTests:

• svg/animations/animate-marker-orient-from-angle-to-autostartreverse-expected.txt:
• svg/custom/SVGException-expected.txt:
• svg/custom/polyline-points-crash-expected.txt:
• svg/custom/script-tests/SVGException.js:
• svg/dom/SVGAnimatedEnumeration-SVGClipPathElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGComponentTransferFunctionElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGFEBlendElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGFEColorMatrixElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGFECompositeElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGFEConvolveMatrixElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGFEDisplacementMapElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGFEMorphologyElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGFETurbulenceElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGFilterElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGGradientElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGMarkerElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGMaskElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGPatternElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGTextContentElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-SVGTextPathElement-expected.txt:
• svg/dom/SVGAnimatedEnumeration-expected.txt:
• svg/dom/SVGLengthList-basics-expected.txt:
• svg/dom/SVGMatrix-interface-expected.txt:
• svg/dom/SVGNumberList-basics-expected.txt:
• svg/dom/SVGPointList-basics-expected.txt:
• svg/dom/SVGTransformList-basics-expected.txt:
• svg/dom/svglist-exception-on-out-bounds-error-expected.txt:
• svg/filters/feBlend-invalid-mode-expected.txt:
• svg/filters/feComponentTransfer-style-crash-expected.txt:
• svg/filters/feDisplacementMap-crash-test-expected.txt:

11:31 AM Changeset in webkit [203327] by ddkilzer@apple.com

• 2 edits in trunk/Websites/bugs.webkit.org

Use secure (https) links on enter_bug.cgi
<​https://webkit.org/b/159853>

Reviewed by Alexey Proskuryakov.

• template/en/default/global/choose-product.html.tmpl:

Use https instead of http for links to webkit.org.

10:21 AM Changeset in webkit [203326] by Chris Dumez

• 7 edits in trunk/Source/WebCore

Use fastHasAttribute() when possible
​https://bugs.webkit.org/show_bug.cgi?id=159838

Reviewed by Ryosuke Niwa.

Use fastHasAttribute() when possible, for performance.

• editing/DeleteSelectionCommand.cpp:

(WebCore::DeleteSelectionCommand::makeStylingElementsDirectChildrenOfEditableRootToPreventStyleLoss):

• editing/markup.cpp:

(WebCore::createMarkupInternal):

• html/HTMLAnchorElement.cpp:

(WebCore::HTMLAnchorElement::draggable):

• html/HTMLFrameElementBase.cpp:

(WebCore::HTMLFrameElementBase::parseAttribute):

• mathml/MathMLSelectElement.cpp:

(WebCore::MathMLSelectElement::getSelectedSemanticsChild):

• rendering/RenderThemeIOS.mm:

(WebCore::RenderThemeIOS::adjustMenuListButtonStyle):

9:33 AM Changeset in webkit [203325] by Chris Dumez

• 4 edits in trunk

Add move constructor / assignment operator to ListHashSet
​https://bugs.webkit.org/show_bug.cgi?id=159837

Reviewed by Darin Adler.

Source/WTF:

Add move constructor / assignment operator to ListHashSet.

• wtf/ListHashSet.h:

(WTF::ListHashSetConstIterator::operator++):
(WTF::U>::ListHashSet):
(WTF::=):
(WTF::U>::clear):
(WTF::U>::appendNode):
(WTF::U>::prependNode):
(WTF::U>::deleteAllNodes):
(WTF::ListHashSetNode::ListHashSetNode): Deleted.

Tools:

Add API tests.

• TestWebKitAPI/Tests/WTF/ListHashSet.cpp:

(TestWebKitAPI::TEST):

8:21 AM Changeset in webkit [203324] by rniwa@webkit.org

• 133 edits in trunk/Source

Rename fastGetAttribute to attributeWithoutSynchronization
​https://bugs.webkit.org/show_bug.cgi?id=159852

Reviewed by Darin Adler.

Source/WebCore:

Renamed fastGetAttribute to attributeWithoutSynchronization for clarity.

• accessibility/AXObjectCache.cpp:

(WebCore::AXObjectCache::findAriaModalNodes):
(WebCore::nodeHasRole):
(WebCore::AXObjectCache::handleLiveRegionCreated):
(WebCore::AXObjectCache::handleMenuItemSelected):
(WebCore::AXObjectCache::handleAriaModalChange):
(WebCore::isNodeAriaVisible):

• accessibility/AccessibilityNodeObject.cpp:

(WebCore::siblingWithAriaRole):
(WebCore::AccessibilityNodeObject::titleElementText):
(WebCore::AccessibilityNodeObject::alternativeTextForWebArea):
(WebCore::AccessibilityNodeObject::hierarchicalLevel):
(WebCore::AccessibilityNodeObject::stringValue):
(WebCore::accessibleNameForNode):

• accessibility/AccessibilityObject.cpp:

(WebCore::AccessibilityObject::contentEditableAttributeIsEnabled):
(WebCore::AccessibilityObject::getAttribute):

• accessibility/AccessibilityRenderObject.cpp:

(WebCore::AccessibilityRenderObject::stringValue):
(WebCore::AccessibilityRenderObject::exposesTitleUIElement):

• accessibility/AccessibilitySVGElement.cpp:

(WebCore::AccessibilitySVGElement::childElementWithMatchingLanguage):
(WebCore::AccessibilitySVGElement::accessibilityDescription):

• bindings/objc/DOM.mm:

(-[DOMHTMLLinkElement _mediaQueryMatches]):

• bindings/scripts/CodeGenerator.pm:

(GetterExpression):

• bindings/scripts/CodeGeneratorObjC.pm:

(GenerateImplementation):

• bindings/scripts/test/GObject/WebKitDOMTestObj.cpp:
• bindings/scripts/test/JS/JSTestObj.cpp:

(WebCore::jsTestObjReflectedStringAttr):

• dom/AuthorStyleSheets.cpp:

(WebCore::AuthorStyleSheets::collectActiveStyleSheets):

• dom/Document.cpp:

(WebCore::Document::buildAccessKeyMap):
(WebCore::Document::processBaseElement):

• dom/DocumentOrderedMap.cpp:

(WebCore::DocumentOrderedMap::getElementByLabelForAttribute):

• dom/Element.cpp:

(WebCore::Element::imageSourceURL):
(WebCore::Element::rendererIsNeeded):
(WebCore::Element::insertedInto):
(WebCore::Element::removedFrom):
(WebCore::Element::pseudo):
(WebCore::Element::setPseudo):
(WebCore::Element::spellcheckAttributeState):
(WebCore::Element::canContainRangeEndPoint):
(WebCore::Element::completeURLsInAttributeValue):

• dom/Element.h:

(WebCore::Element::fastHasAttribute):
(WebCore::Element::attributeWithoutSynchronization):
(WebCore::Element::fastGetAttribute): Deleted.

• dom/InlineStyleSheetOwner.cpp:

(WebCore::InlineStyleSheetOwner::createSheet):

• dom/ScriptElement.cpp:

(WebCore::ScriptElement::requestScript):
(WebCore::ScriptElement::executeScript):

• dom/SlotAssignment.cpp:

(WebCore::slotNameFromSlotAttribute):
(WebCore::SlotAssignment::SlotAssignment):
(WebCore::recursivelyFireSlotChangeEvent):
(WebCore::SlotAssignment::didChangeSlot):
(WebCore::SlotAssignment::hostChildElementDidChange):
(WebCore::SlotAssignment::assignedNodesForSlot):
(WebCore::SlotAssignment::resolveAllSlotElements):

• dom/TreeScope.cpp:

(WebCore::TreeScope::labelElementForId):

• dom/VisitedLinkState.cpp:

(WebCore::linkAttribute):

• editing/ApplyStyleCommand.cpp:

(WebCore::isLegacyAppleStyleSpan):
(WebCore::hasNoAttributeOrOnlyStyleAttribute):

• editing/EditingStyle.cpp:

(WebCore::EditingStyle::elementIsStyledSpanOrHTMLEquivalent):

• editing/ReplaceSelectionCommand.cpp:

(WebCore::isInterchangeNewlineNode):
(WebCore::isInterchangeConvertedSpaceSpan):
(WebCore::positionAvoidingPrecedingNodes):
(WebCore::isMailPasteAsQuotationNode):
(WebCore::isHeaderElement):
(WebCore::isInlineNodeWithStyle):

• editing/TextIterator.cpp:

(WebCore::isRendererReplacedElement):

• editing/cocoa/DataDetection.mm:

(WebCore::DataDetection::isDataDetectorLink):
(WebCore::DataDetection::requiresExtendedContext):
(WebCore::DataDetection::dataDetectorIdentifier):
(WebCore::DataDetection::shouldCancelDefaultAction):
(WebCore::removeResultLinksFromAnchor):
(WebCore::searchForLinkRemovingExistingDDLinks):

• editing/gtk/EditorGtk.cpp:

(WebCore::elementURL):

• editing/htmlediting.cpp:

(WebCore::isTabSpanNode):
(WebCore::isTabSpanTextNode):
(WebCore::isMailBlockquote):
(WebCore::caretMinOffset):

• editing/markup.cpp:

(WebCore::createFragmentFromMarkup):

• html/Autofill.cpp:

(WebCore::AutofillData::createFromHTMLFormControlElement):

• html/BaseTextInputType.cpp:

(WebCore::BaseTextInputType::patternMismatch):

• html/DateInputType.cpp:

(WebCore::DateInputType::createStepRange):

• html/DateTimeInputType.cpp:

(WebCore::DateTimeInputType::createStepRange):

• html/DateTimeLocalInputType.cpp:

(WebCore::DateTimeLocalInputType::createStepRange):

• html/FormAssociatedElement.cpp:

(WebCore::FormAssociatedElement::findAssociatedForm):
(WebCore::FormAssociatedElement::resetFormAttributeTargetObserver):
(WebCore::FormAssociatedElement::formAttributeTargetChanged):

• html/HTMLAnchorElement.cpp:

(WebCore::HTMLAnchorElement::draggable):
(WebCore::HTMLAnchorElement::href):
(WebCore::HTMLAnchorElement::setHref):
(WebCore::HTMLAnchorElement::target):
(WebCore::HTMLAnchorElement::origin):
(WebCore::HTMLAnchorElement::sendPings):
(WebCore::HTMLAnchorElement::handleClick):

• html/HTMLAnchorElement.h:

(WebCore::HTMLAnchorElement::visitedLinkHash):

• html/HTMLAppletElement.cpp:

(WebCore::HTMLAppletElement::updateWidget):

• html/HTMLAreaElement.cpp:

(WebCore::HTMLAreaElement::target):

• html/HTMLAttachmentElement.cpp:

(WebCore::HTMLAttachmentElement::attachmentTitle):
(WebCore::HTMLAttachmentElement::attachmentType):

• html/HTMLBaseElement.cpp:

(WebCore::HTMLBaseElement::target):
(WebCore::HTMLBaseElement::href):

• html/HTMLBodyElement.cpp:

(WebCore::HTMLBodyElement::addSubresourceAttributeURLs):

• html/HTMLButtonElement.cpp:

(WebCore::HTMLButtonElement::value):
(WebCore::HTMLButtonElement::computeWillValidate):

• html/HTMLCanvasElement.cpp:

(WebCore::HTMLCanvasElement::reset):

• html/HTMLDocument.cpp:

(WebCore::HTMLDocument::bgColor):
(WebCore::HTMLDocument::setBgColor):
(WebCore::HTMLDocument::fgColor):
(WebCore::HTMLDocument::setFgColor):
(WebCore::HTMLDocument::alinkColor):
(WebCore::HTMLDocument::setAlinkColor):
(WebCore::HTMLDocument::linkColor):
(WebCore::HTMLDocument::setLinkColor):
(WebCore::HTMLDocument::vlinkColor):
(WebCore::HTMLDocument::setVlinkColor):

• html/HTMLElement.cpp:

(WebCore::contentEditableType):
(WebCore::HTMLElement::collectStyleForPresentationAttribute):
(WebCore::HTMLElement::dir):
(WebCore::HTMLElement::setDir):
(WebCore::HTMLElement::draggable):
(WebCore::HTMLElement::setDraggable):
(WebCore::HTMLElement::title):
(WebCore::HTMLElement::tabIndex):
(WebCore::HTMLElement::translateAttributeMode):
(WebCore::HTMLElement::hasDirectionAuto):
(WebCore::HTMLElement::directionality):

• html/HTMLEmbedElement.cpp:

(WebCore::HTMLEmbedElement::imageSourceURL):
(WebCore::HTMLEmbedElement::addSubresourceAttributeURLs):

• html/HTMLFormControlElement.cpp:

(WebCore::HTMLFormControlElement::formEnctype):
(WebCore::HTMLFormControlElement::formMethod):
(WebCore::HTMLFormControlElement::formAction):
(WebCore::HTMLFormControlElement::autocorrect):
(WebCore::HTMLFormControlElement::autocapitalizeType):

• html/HTMLFormElement.cpp:

(WebCore::HTMLFormElement::autocorrect):
(WebCore::HTMLFormElement::autocapitalizeType):
(WebCore::HTMLFormElement::autocapitalize):
(WebCore::HTMLFormElement::action):
(WebCore::HTMLFormElement::setAction):
(WebCore::HTMLFormElement::target):
(WebCore::HTMLFormElement::wasUserSubmitted):
(WebCore::HTMLFormElement::shouldAutocomplete):
(WebCore::HTMLFormElement::finishParsingChildren):
(WebCore::HTMLFormElement::autocomplete):

• html/HTMLFrameElementBase.cpp:

(WebCore::HTMLFrameElementBase::location):
(WebCore::HTMLFrameElementBase::setLocation):

• html/HTMLHtmlElement.cpp:

(WebCore::HTMLHtmlElement::insertedByParser):

• html/HTMLImageElement.cpp:

(WebCore::HTMLImageElement::imageSourceURL):
(WebCore::HTMLImageElement::setBestFitURLAndDPRFromImageCandidate):
(WebCore::HTMLImageElement::bestFitSourceFromPictureElement):
(WebCore::HTMLImageElement::selectImageSource):
(WebCore::HTMLImageElement::altText):
(WebCore::HTMLImageElement::createElementRenderer):
(WebCore::HTMLImageElement::width):
(WebCore::HTMLImageElement::height):
(WebCore::HTMLImageElement::alt):
(WebCore::HTMLImageElement::draggable):
(WebCore::HTMLImageElement::setHeight):
(WebCore::HTMLImageElement::src):
(WebCore::HTMLImageElement::setSrc):
(WebCore::HTMLImageElement::addSubresourceAttributeURLs):
(WebCore::HTMLImageElement::didMoveToNewDocument):
(WebCore::HTMLImageElement::isServerMap):
(WebCore::HTMLImageElement::crossOrigin):

• html/HTMLInputElement.cpp:

(WebCore::HTMLInputElement::updateType):
(WebCore::HTMLInputElement::initializeInputType):
(WebCore::HTMLInputElement::altText):
(WebCore::HTMLInputElement::value):
(WebCore::HTMLInputElement::defaultValue):
(WebCore::HTMLInputElement::setDefaultValue):
(WebCore::HTMLInputElement::acceptMIMETypes):
(WebCore::HTMLInputElement::acceptFileExtensions):
(WebCore::HTMLInputElement::accept):
(WebCore::HTMLInputElement::alt):
(WebCore::HTMLInputElement::effectiveMaxLength):
(WebCore::HTMLInputElement::src):
(WebCore::HTMLInputElement::setAutoFilled):
(WebCore::HTMLInputElement::dataList):
(WebCore::HTMLInputElement::resetListAttributeTargetObserver):

• html/HTMLKeygenElement.cpp:

(WebCore::HTMLKeygenElement::isKeytypeRSA):
(WebCore::HTMLKeygenElement::appendFormData):

• html/HTMLLIElement.cpp:

(WebCore::HTMLLIElement::didAttachRenderers):
(WebCore::HTMLLIElement::parseValue):

• html/HTMLLabelElement.cpp:

(WebCore::HTMLLabelElement::control):

• html/HTMLLinkElement.cpp:

(WebCore::HTMLLinkElement::crossOrigin):
(WebCore::HTMLLinkElement::process):
(WebCore::HTMLLinkElement::href):
(WebCore::HTMLLinkElement::rel):
(WebCore::HTMLLinkElement::target):
(WebCore::HTMLLinkElement::type):
(WebCore::HTMLLinkElement::iconType):

• html/HTMLMarqueeElement.cpp:

(WebCore::HTMLMarqueeElement::scrollAmount):
(WebCore::HTMLMarqueeElement::setScrollAmount):
(WebCore::HTMLMarqueeElement::scrollDelay):
(WebCore::HTMLMarqueeElement::setScrollDelay):
(WebCore::HTMLMarqueeElement::loop):

• html/HTMLMediaElement.cpp:

(WebCore::HTMLMediaElement::insertedInto):
(WebCore::HTMLMediaElement::crossOrigin):
(WebCore::HTMLMediaElement::networkState):
(WebCore::HTMLMediaElement::mediaSessionTitle):
(WebCore::HTMLMediaElement::doesHaveAttribute):

• html/HTMLMetaElement.cpp:

(WebCore::HTMLMetaElement::process):
(WebCore::HTMLMetaElement::content):
(WebCore::HTMLMetaElement::httpEquiv):
(WebCore::HTMLMetaElement::name):

• html/HTMLMeterElement.cpp:

(WebCore::HTMLMeterElement::min):
(WebCore::HTMLMeterElement::setMin):
(WebCore::HTMLMeterElement::max):
(WebCore::HTMLMeterElement::setMax):
(WebCore::HTMLMeterElement::value):
(WebCore::HTMLMeterElement::low):
(WebCore::HTMLMeterElement::high):
(WebCore::HTMLMeterElement::optimum):

• html/HTMLObjectElement.cpp:

(WebCore::HTMLObjectElement::shouldAllowQuickTimeClassIdQuirk):
(WebCore::HTMLObjectElement::hasValidClassId):
(WebCore::HTMLObjectElement::imageSourceURL):
(WebCore::HTMLObjectElement::renderFallbackContent):
(WebCore::HTMLObjectElement::containsJavaApplet):
(WebCore::HTMLObjectElement::addSubresourceAttributeURLs):

• html/HTMLOptGroupElement.cpp:

(WebCore::HTMLOptGroupElement::groupLabelText):

• html/HTMLOptionElement.cpp:

(WebCore::HTMLOptionElement::value):
(WebCore::HTMLOptionElement::label):

• html/HTMLParamElement.cpp:

(WebCore::HTMLParamElement::value):
(WebCore::HTMLParamElement::isURLParameter):

• html/HTMLProgressElement.cpp:

(WebCore::HTMLProgressElement::value):
(WebCore::HTMLProgressElement::max):

• html/HTMLScriptElement.cpp:

(WebCore::HTMLScriptElement::crossOrigin):
(WebCore::HTMLScriptElement::src):
(WebCore::HTMLScriptElement::sourceAttributeValue):
(WebCore::HTMLScriptElement::charsetAttributeValue):
(WebCore::HTMLScriptElement::typeAttributeValue):
(WebCore::HTMLScriptElement::languageAttributeValue):
(WebCore::HTMLScriptElement::forAttributeValue):
(WebCore::HTMLScriptElement::eventAttributeValue):
(WebCore::HTMLScriptElement::asyncAttributeValue):

• html/HTMLSlotElement.cpp:

(WebCore::HTMLSlotElement::insertedInto):
(WebCore::HTMLSlotElement::removedFrom):

• html/HTMLSourceElement.cpp:

(WebCore::HTMLSourceElement::media):
(WebCore::HTMLSourceElement::setMedia):
(WebCore::HTMLSourceElement::type):
(WebCore::HTMLSourceElement::setType):

• html/HTMLTableCellElement.cpp:

(WebCore::HTMLTableCellElement::colSpanForBindings):
(WebCore::HTMLTableCellElement::rowSpan):
(WebCore::HTMLTableCellElement::rowSpanForBindings):
(WebCore::HTMLTableCellElement::cellIndex):
(WebCore::HTMLTableCellElement::abbr):
(WebCore::HTMLTableCellElement::axis):
(WebCore::HTMLTableCellElement::setColSpanForBindings):
(WebCore::HTMLTableCellElement::headers):
(WebCore::HTMLTableCellElement::setRowSpanForBindings):
(WebCore::HTMLTableCellElement::scope):
(WebCore::HTMLTableCellElement::addSubresourceAttributeURLs):
(WebCore::HTMLTableCellElement::cellAbove):

• html/HTMLTableColElement.cpp:

(WebCore::HTMLTableColElement::width):

• html/HTMLTableElement.cpp:

(WebCore::HTMLTableElement::rules):
(WebCore::HTMLTableElement::summary):
(WebCore::HTMLTableElement::addSubresourceAttributeURLs):

• html/HTMLTableSectionElement.cpp:

(WebCore::HTMLTableSectionElement::align):
(WebCore::HTMLTableSectionElement::setAlign):
(WebCore::HTMLTableSectionElement::ch):
(WebCore::HTMLTableSectionElement::setCh):
(WebCore::HTMLTableSectionElement::chOff):
(WebCore::HTMLTableSectionElement::setChOff):
(WebCore::HTMLTableSectionElement::vAlign):
(WebCore::HTMLTableSectionElement::setVAlign):

• html/HTMLTextAreaElement.cpp:

(WebCore::HTMLTextAreaElement::appendFormData):

• html/HTMLTextFormControlElement.cpp:

(WebCore::HTMLTextFormControlElement::strippedPlaceholder):
(WebCore::HTMLTextFormControlElement::isPlaceholderEmpty):
(WebCore::HTMLTextFormControlElement::directionForFormData):

• html/HTMLTrackElement.cpp:

(WebCore::HTMLTrackElement::srclang):
(WebCore::HTMLTrackElement::label):
(WebCore::HTMLTrackElement::isDefault):
(WebCore::HTMLTrackElement::ensureTrack):
(WebCore::HTMLTrackElement::mediaElementCrossOriginAttribute):

• html/HTMLVideoElement.cpp:

(WebCore::HTMLVideoElement::parseAttribute):
(WebCore::HTMLVideoElement::imageSourceURL):

• html/ImageInputType.cpp:

(WebCore::ImageInputType::height):
(WebCore::ImageInputType::width):

• html/InputType.cpp:

(WebCore::InputType::applyStep):

• html/MediaElementSession.cpp:

(WebCore::MediaElementSession::wirelessVideoPlaybackDisabled):

• html/MonthInputType.cpp:

(WebCore::MonthInputType::createStepRange):

• html/NumberInputType.cpp:

(WebCore::NumberInputType::createStepRange):
(WebCore::NumberInputType::sizeShouldIncludeDecoration):

• html/RangeInputType.cpp:

(WebCore::RangeInputType::createStepRange):
(WebCore::RangeInputType::handleKeydownEvent):

• html/TextFieldInputType.cpp:

(WebCore::TextFieldInputType::appendFormData):
(WebCore::TextFieldInputType::updateAutoFillButton):

• html/TimeInputType.cpp:

(WebCore::TimeInputType::createStepRange):

• html/ValidationMessage.cpp:

(WebCore::ValidationMessage::updateValidationMessage):

• html/WeekInputType.cpp:

(WebCore::WeekInputType::createStepRange):

• html/track/WebVTTElement.cpp:

(WebCore::WebVTTElement::createEquivalentHTMLElement):

• inspector/InspectorPageAgent.cpp:

(WebCore::InspectorPageAgent::buildObjectForFrame):

• loader/FormSubmission.cpp:

(WebCore::FormSubmission::create):

• loader/FrameLoader.cpp:

(WebCore::FrameLoader::defaultSubstituteDataForURL):

• loader/ImageLoader.cpp:

(WebCore::ImageLoader::updateFromElement):

• loader/SubframeLoader.cpp:

(WebCore::SubframeLoader::isPluginContentAllowedByContentSecurityPolicy):

• mathml/MathMLElement.cpp:

(WebCore::MathMLElement::colSpan):
(WebCore::MathMLElement::rowSpan):
(WebCore::MathMLElement::childShouldCreateRenderer):
(WebCore::MathMLElement::defaultEventHandler):
(WebCore::MathMLElement::cachedMathMLLength):

• mathml/MathMLFractionElement.cpp:

(WebCore::MathMLFractionElement::lineThickness):
(WebCore::MathMLFractionElement::cachedFractionAlignment):

• mathml/MathMLSelectElement.cpp:

(WebCore::MathMLSelectElement::getSelectedActionChildAndIndex):
(WebCore::MathMLSelectElement::getSelectedActionChild):
(WebCore::MathMLSelectElement::getSelectedSemanticsChild):
(WebCore::MathMLSelectElement::defaultEventHandler):
(WebCore::MathMLSelectElement::willRespondToMouseClickEvents):
(WebCore::MathMLSelectElement::toggle):

• page/EventHandler.cpp:

(WebCore::findDropZone):

• page/Frame.cpp:

(WebCore::Frame::matchLabelsAgainstElement):

• page/PageSerializer.cpp:

(WebCore::PageSerializer::serializeFrame):

• platform/win/PasteboardWin.cpp:

(WebCore::Pasteboard::writeImageToDataObject):

• rendering/HitTestResult.cpp:

(WebCore::HitTestResult::altDisplayString):

• rendering/RenderDetailsMarker.cpp:

(WebCore::RenderDetailsMarker::isOpen):

• rendering/RenderImage.cpp:

(WebCore::RenderImage::imageMap):
(WebCore::RenderImage::nodeAtPoint):

• rendering/RenderMenuList.cpp:

(RenderMenuList::itemAccessibilityText):
(RenderMenuList::itemToolTip):

• rendering/RenderSearchField.cpp:

(WebCore::RenderSearchField::autosaveName):

• rendering/RenderThemeIOS.mm:

(WebCore::getAttachmentProgress):
(WebCore::AttachmentInfo::AttachmentInfo):

• rendering/RenderThemeMac.mm:

(WebCore::AttachmentLayout::layOutSubtitle):
(WebCore::RenderThemeMac::paintAttachment):

• rendering/mathml/MathMLStyle.cpp:

(WebCore::MathMLStyle::resolveMathMLStyle):

• rendering/mathml/RenderMathMLFenced.cpp:

(WebCore::RenderMathMLFenced::updateFromElement):

• rendering/mathml/RenderMathMLOperator.cpp:

(WebCore::RenderMathMLOperator::setOperatorFlagFromAttribute):
(WebCore::RenderMathMLOperator::setOperatorFlagFromAttributeValue):
(WebCore::RenderMathMLOperator::setOperatorProperties):

• rendering/mathml/RenderMathMLScripts.cpp:

(WebCore::RenderMathMLScripts::getScriptMetricsAndLayoutIfNeeded):

• rendering/mathml/RenderMathMLUnderOver.cpp:

(WebCore::RenderMathMLUnderOver::hasAccent):

• style/StyleSharingResolver.cpp:

(WebCore::Style::SharingResolver::canShareStyleWithElement):
(WebCore::Style::SharingResolver::sharingCandidateHasIdenticalStyleAffectingAttributes):

• svg/SVGAElement.cpp:

(WebCore::SVGAElement::title):
(WebCore::SVGAElement::defaultEventHandler):

• svg/SVGAltGlyphElement.cpp:

(WebCore::SVGAltGlyphElement::glyphRef):
(WebCore::SVGAltGlyphElement::setFormat):
(WebCore::SVGAltGlyphElement::format):
(WebCore::SVGAltGlyphElement::childShouldCreateRenderer):

• svg/SVGAnimationElement.cpp:

(WebCore::SVGAnimationElement::toValue):
(WebCore::SVGAnimationElement::byValue):
(WebCore::SVGAnimationElement::fromValue):
(WebCore::SVGAnimationElement::isAdditive):
(WebCore::SVGAnimationElement::isAccumulated):

• svg/SVGElement.cpp:

(WebCore::SVGElement::xmlbase):
(WebCore::SVGElement::setXmlbase):

• svg/SVGFontFaceElement.cpp:

(WebCore::SVGFontFaceElement::unitsPerEm):
(WebCore::SVGFontFaceElement::xHeight):
(WebCore::SVGFontFaceElement::capHeight):
(WebCore::SVGFontFaceElement::horizontalOriginX):
(WebCore::SVGFontFaceElement::horizontalOriginY):
(WebCore::SVGFontFaceElement::horizontalAdvanceX):
(WebCore::SVGFontFaceElement::verticalOriginX):
(WebCore::SVGFontFaceElement::verticalOriginY):
(WebCore::SVGFontFaceElement::verticalAdvanceY):
(WebCore::SVGFontFaceElement::ascent):
(WebCore::SVGFontFaceElement::descent):

• svg/SVGFontFaceNameElement.cpp:

(WebCore::SVGFontFaceNameElement::srcValue):

• svg/SVGFontFaceUriElement.cpp:

(WebCore::SVGFontFaceUriElement::srcValue):

• svg/SVGGlyphRefElement.cpp:

(WebCore::SVGGlyphRefElement::glyphRef):
(WebCore::SVGGlyphRefElement::setGlyphRef):

• svg/SVGHKernElement.cpp:

(WebCore::SVGHKernElement::buildHorizontalKerningPair):

• svg/SVGSVGElement.cpp:

(WebCore::SVGSVGElement::contentScriptType):
(WebCore::SVGSVGElement::contentStyleType):

• svg/SVGStyleElement.cpp:

(WebCore::SVGStyleElement::media):
(WebCore::SVGStyleElement::title):
(WebCore::SVGStyleElement::setTitle):

• svg/SVGToOTFFontConversion.cpp:

(WebCore::SVGToOTFFontConverter::appendOS2Table):
(WebCore::SVGToOTFFontConverter::appendCFFTable):
(WebCore::SVGToOTFFontConverter::appendArabicReplacementSubtable):
(WebCore::SVGToOTFFontConverter::appendVORGTable):
(WebCore::SVGToOTFFontConverter::transcodeGlyphPaths):
(WebCore::SVGToOTFFontConverter::processGlyphElement):
(WebCore::SVGToOTFFontConverter::compareCodepointsLexicographically):
(WebCore::SVGToOTFFontConverter::SVGToOTFFontConverter):

• svg/SVGVKernElement.cpp:

(WebCore::SVGVKernElement::buildVerticalKerningPair):

• svg/animation/SVGSMILElement.cpp:

(WebCore::SVGSMILElement::insertedInto):
(WebCore::SVGSMILElement::parseAttribute):
(WebCore::SVGSMILElement::svgAttributeChanged):
(WebCore::SVGSMILElement::restart):
(WebCore::SVGSMILElement::fill):
(WebCore::SVGSMILElement::dur):
(WebCore::SVGSMILElement::repeatDur):
(WebCore::SVGSMILElement::repeatCount):
(WebCore::SVGSMILElement::maxValue):
(WebCore::SVGSMILElement::minValue):

Source/WebKit/mac:

• WebView/WebHTMLRepresentation.mm:

(matchLabelsAgainstElement):

Source/WebKit/win:

• DOMHTMLClasses.cpp:

(DOMHTMLElement::idName):

Source/WebKit2:

• WebProcess/WebPage/ios/WebPageIOS.mm:

(WebKit::WebPage::getPositionInformation):
(WebKit::WebPage::performActionOnElement):
(WebKit::WebPage::getAssistedNodeInformation):

4:33 AM Changeset in webkit [203323] by commit-queue@webkit.org

• 2 edits in trunk/Source/WebCore

ASSERTION FAILED: isMainThread() in ~UniqueIDBDatabase() since r201997
​https://bugs.webkit.org/show_bug.cgi?id=159809

Patch by Carlos Garcia Campos <​cgarcia@igalia.com> on 2016-07-16
Reviewed by Brady Eidson.

In r201997 the UniqueIDBDatabase was protected in executeNextDatabaseTask() because the last reference could be
removed while the task is performed. However UniqueIDBDatabase is expected to be deleted in the main thread, and
the destructor asserts when not called in the main thread, but executeNextDatabaseTask() is always called on a
secondary thread. So, if the protector contains the last reference, the object is deleted in the secondary thread.

• Modules/indexeddb/server/UniqueIDBDatabase.cpp:

(WebCore::IDBServer::UniqueIDBDatabase::executeNextDatabaseTask): Use callOnMainThread to ensure the object is
deleted in the main thread in case the protector contains the last reference.