Timeline

Jun 5, 2019:

10:21 PM Changeset in webkit [246145] by mitz@apple.com

• 83 moves in releases/Apple/Safari Technology Preview

Moved Safari Technology Preview releases into their own subdirectory.

10:21 PM Changeset in webkit [246144] by mitz@apple.com

• 1 add in releases/Apple/Safari Technology Preview

Prepared to move Safari Technology Preview releases into their own subdirectory.

8:55 PM Changeset in webkit [246143] by commit-queue@webkit.org

• 7 edits
  3 adds in trunk

[Curl] Report all request headers to web inspector.
​https://bugs.webkit.org/show_bug.cgi?id=191653

Patch by Takashi Komori <​Takashi.Komori@sony.com> on 2019-06-05
Reviewed by Fujii Hironori.

Source/WebCore:

Test: http/tests/inspector/network/resource-request-headers.html

• platform/network/curl/CurlContext.cpp:

(WebCore::CurlHandle::setDebugCallbackFunction):

• platform/network/curl/CurlContext.h:
• platform/network/curl/CurlRequest.cpp:

(WebCore::CurlRequest::setupTransfer):
(WebCore::CurlRequest::didReceiveDebugInfo):
(WebCore::CurlRequest::updateNetworkLoadMetrics):
(WebCore::CurlRequest::didReceiveDebugInfoCallback):

• platform/network/curl/CurlRequest.h:

LayoutTests:

• platform/wincairo/TestExpectations:
• platform/wincairo/http/tests/inspector/network/resource-request-headers-expected.txt: Added.

8:39 PM Changeset in webkit [246142] by commit-queue@webkit.org

• 11 edits in trunk/Source

[Cocoa] REGRESSION(r244182): Inspector thinks CA commits can be nested
​https://bugs.webkit.org/show_bug.cgi?id=198497

Patch by Said Abou-Hallawa <​sabouhallawa@apple.com> on 2019-06-05
Reviewed by Simon Fraser.

Source/WebCore:

WebInspecter should coalesce nested composites as one recorded composite.
This can be done by ensuring that we only process CA preCommit and postCommit
once per nested commits.

• inspector/InspectorController.cpp:

(WebCore::InspectorController::willComposite):

• inspector/InspectorController.h:

Export willComposite(). We want to call willComposite()/ didComposite()
from CA preCommit and postCommit handlers in flushLayers().

• inspector/agents/InspectorTimelineAgent.cpp:

(WebCore::InspectorTimelineAgent::didComposite):
Unrelated change: didComposite() should not assert that we're in the middle
of a composite. Web Inspector may connect in the middle of a composite.

• page/FrameView.cpp:

(WebCore::FrameView::flushCompositingStateIncludingSubframes):
InspectorController::willComposite() will be called form CA preCommit
handler of flushLayers().

Source/WebKit:

Call InspectorController::willComposite() from the CA preCommit handler
similar to the call to InspectorController::didComposite() in the CA
postCommit handler. Ensure these calls will be once for nested commits.

• WebProcess/WebPage/RemoteLayerTree/RemoteLayerTreeDrawingArea.h:
• WebProcess/WebPage/RemoteLayerTree/RemoteLayerTreeDrawingArea.mm:

(WebKit::RemoteLayerTreeDrawingArea::addCommitHandlers):
(WebKit::RemoteLayerTreeDrawingArea::flushLayers):

• WebProcess/WebPage/WebPage.h:

(WebKit::WebPage::firstFlushAfterCommit const):
(WebKit::WebPage::setFirstFlushAfterCommit):

• WebProcess/WebPage/mac/TiledCoreAnimationDrawingArea.h:
• WebProcess/WebPage/mac/TiledCoreAnimationDrawingArea.mm:

(WebKit::TiledCoreAnimationDrawingArea::addCommitHandlers):
(WebKit::TiledCoreAnimationDrawingArea::flushLayers):

8:24 PM Changeset in webkit [246141] by aestes@apple.com

• 5 edits
  1 move in trunk/Tools

[macOS] Stop calling -[NSDraggingItem setItem:]
​https://bugs.webkit.org/show_bug.cgi?id=198588
<rdar://problem/48297453>

On macOS Catalina, use -[NSDraggingItem _initWithItem:] instead.

Reviewed by Wenson Hsieh.

• DumpRenderTree/DumpRenderTree.xcodeproj/project.pbxproj: Fixed up file paths in the

TestRunnerShared group.

• DumpRenderTree/mac/DumpRenderTreeDraggingInfo.mm:

(-[DumpRenderTreeDraggingInfo enumerateDraggingItemsWithOptions:forView:classes:searchOptions:usingBlock:]):
Changed to call -[NSDraggingItem _initWithItem:] when available.

• TestRunnerShared/spi/AppKitTestSPI.h: Renamed from

Tools/DumpRenderTree/mac/AppKitTestSPI.h and moved NSDraggingItem internal interface
declarations here from DumpRenderTree.

• TestWebKitAPI/TestWebKitAPI.xcodeproj/project.pbxproj:

Added TestRunnerShared/spi/AppKitTestSPI.h.

• TestWebKitAPI/mac/TestDraggingInfo.mm:

(-[TestDraggingInfo enumerateDraggingItemsWithOptions:forView:classes:searchOptions:usingBlock:]):
Changed to call -[NSDraggingItem _initWithItem:] when available.

8:20 PM Changeset in webkit [246140] by commit-queue@webkit.org

• 6 edits in trunk/Websites/bugs.webkit.org

Add support of zxcvbn password strength checker to bugs.webkit.org website.
​https://bugs.webkit.org/show_bug.cgi?id=198391
rdar://problem/51278166

Patch by Ling Ho <​lingcherd_ho@apple.com> on 2019-06-05
Reviewed by David Kilzer.

• Bugzilla/Config/Auth.pm:

(get_param_list):

• Bugzilla/Install/Requirements.pm:

(REQUIRED_MODULES):

• Bugzilla/User.pm:

(validate_password_check):

• template/en/default/admin/params/auth.html.tmpl:
• template/en/default/global/user-error.html.tmpl:

8:14 PM Changeset in webkit [246139] by Justin Michaud

• 18 edits
  3 adds
  1 delete in trunk

[WASM-References] Add support for Anyref tables, Table.get and Table.set (for Anyref only).
​https://bugs.webkit.org/show_bug.cgi?id=198398

Reviewed by Saam Barati.

JSTests:

• wasm/references/anyref_table.js: Added.

(string_appeared_here.doGCSet):
(doGCTest):
(doGCSet.doGCTest.let.count.0.doBarrierSet):

• wasm/references/anyref_table_import.js: Added.

(makeImport):
(string_appeared_here.fullGC.assert.eq.1.exports.get_tbl.makeImport):
(string_appeared_here.fullGC.assert.eq.1.exports.get_tbl):

• wasm/references/is_null_error.js: Removed.
• wasm/references/validation.js: Added.

(assert.throws.new.WebAssembly.Module.bin):
(assert.throws):

• wasm/wasm.json:

Source/JavaScriptCore:

Create a new table subtype called FuncRefTable (note: Anyfunc was renamed to Funcref in the references spec).
Table now write-barriers and visits its children's wrapper objects. FuncRefTable caches some extra data to
support calling from wasm. A JSWebAssemblyTable is required to set an anyref element, but this is only because
we need to write barrier it (so it should not restrict how we implement threads). This patch does, however,
restrict the implementation of function references to require every Ref.func to have an associated wrapper. This
can be done statically, so this too should not restrict our threads implementation.

• wasm/WasmAirIRGenerator.cpp:

(JSC::Wasm::AirIRGenerator::addTableGet):
(JSC::Wasm::AirIRGenerator::addTableSet):
(JSC::Wasm::AirIRGenerator::addCallIndirect):

• wasm/WasmB3IRGenerator.cpp:

(JSC::Wasm::B3IRGenerator::addLocal):
(JSC::Wasm::B3IRGenerator::addTableGet):
(JSC::Wasm::B3IRGenerator::addTableSet):
(JSC::Wasm::B3IRGenerator::addCallIndirect):

• wasm/WasmFormat.h:

(JSC::Wasm::TableInformation::TableInformation):
(JSC::Wasm::TableInformation::type const):

• wasm/WasmFunctionParser.h:

(JSC::Wasm::FunctionParser<Context>::parseExpression):
(JSC::Wasm::FunctionParser<Context>::parseUnreachableExpression):

• wasm/WasmSectionParser.cpp:

(JSC::Wasm::SectionParser::parseTableHelper):

• wasm/WasmTable.cpp:

(JSC::Wasm::Table::Table):
(JSC::Wasm::Table::tryCreate):
(JSC::Wasm::Table::grow):
(JSC::Wasm::Table::clear):
(JSC::Wasm::Table::set):
(JSC::Wasm::Table::get):
(JSC::Wasm::Table::visitChildren):
(JSC::Wasm::FuncRefTable::FuncRefTable):
(JSC::Wasm::FuncRefTable::setFunction):
(JSC::Wasm::Table::~Table): Deleted.
(JSC::Wasm::Table::clearFunction): Deleted.
(JSC::Wasm::Table::setFunction): Deleted.

• wasm/WasmTable.h:

(JSC::Wasm::Table::length const):
(JSC::Wasm::Table::type const):
(JSC::Wasm::Table::setOwner):
(JSC::Wasm::FuncRefTable::offsetOfFunctions):
(JSC::Wasm::FuncRefTable::offsetOfInstances):
(JSC::Wasm::Table::offsetOfFunctions): Deleted.
(JSC::Wasm::Table::offsetOfInstances): Deleted.

• wasm/WasmValidate.cpp:

(JSC::Wasm::Validate::addTableGet):
(JSC::Wasm::Validate::addTableSet):
(JSC::Wasm::Validate::addCallIndirect):

• wasm/js/JSWebAssemblyTable.cpp:

(JSC::JSWebAssemblyTable::JSWebAssemblyTable):
(JSC::JSWebAssemblyTable::finishCreation):
(JSC::JSWebAssemblyTable::visitChildren):
(JSC::JSWebAssemblyTable::grow):
(JSC::JSWebAssemblyTable::get):
(JSC::JSWebAssemblyTable::set):
(JSC::JSWebAssemblyTable::clear):
(JSC::JSWebAssemblyTable::getFunction): Deleted.
(JSC::JSWebAssemblyTable::clearFunction): Deleted.
(JSC::JSWebAssemblyTable::setFunction): Deleted.

• wasm/js/JSWebAssemblyTable.h:
• wasm/js/WebAssemblyModuleRecord.cpp:

(JSC::WebAssemblyModuleRecord::link):
(JSC::WebAssemblyModuleRecord::evaluate):

• wasm/js/WebAssemblyTableConstructor.cpp:

(JSC::constructJSWebAssemblyTable):

• wasm/js/WebAssemblyTablePrototype.cpp:

(JSC::webAssemblyTableProtoFuncGet):
(JSC::webAssemblyTableProtoFuncSet):

• wasm/wasm.json:

7:17 PM Changeset in webkit [246138] by mmaxfield@apple.com

• 12 edits
  35 adds in trunk

[WHLSL] Educate the property resolver about IndexExpressions
​https://bugs.webkit.org/show_bug.cgi?id=198399

Reviewed by Saam Barati.

Source/WebCore:

This is part one of two patches which will allow buffers to work. This patch
adds support in the property resolver for index expressions. Index expressions
get turned into calls to "getter indexers", "setter indexers", or "ander
indexers". They work almost identically to dot expressions, except there is an
extra "index" expression which gets turned into an extra argument to those
functions.

There's actually a bit of a trick here. Let's say we need to run a getter and
a setter separately (e.g. "foo[3]++;"). The index expression can't be duplicated
for both the getter and the setter (e.g. the functions are
int operator[](Foo, uint) and Foo operator[]=(Foo, uint, int), and we aren't
allowed to execute the index expression multiple times. Consider if that "3"
in the example is actually "bar()" with some side effect. So, we have to run
the index expression once at the correct time, and save its result to a temporary
variable, and then pass in the temporary variable into the getter and setter.

So, if the code says "foo[bar()][baz()] = quux();" the following sequence of
functions get run:

• bar()
• operator[](Foo, uint)
• baz()
• quux()
• operator[]=(OtherType, uint, OtherOtherType)
• operator[]=(Foo, uint, OtherType)

The next patch will modify the WebGPU JavaScript implementation to send buffer
lengths to the shader, and for the shader compiler to correctly unpack this
information and place it inside the array references. That should be everything
that's needed to get buffers to work. After that, hooking up compute should be
fairly trivial.

Tests: webgpu/propertyresolver/ander-abstract-lvalue.html

webgpu/propertyresolver/ander-lvalue-3-levels.html
webgpu/propertyresolver/ander-lvalue.html
webgpu/propertyresolver/ander.html
webgpu/propertyresolver/getter.html
webgpu/propertyresolver/indexer-ander-abstract-lvalue.html
webgpu/propertyresolver/indexer-ander-lvalue-3-levels.html
webgpu/propertyresolver/indexer-ander-lvalue.html
webgpu/propertyresolver/indexer-ander.html
webgpu/propertyresolver/indexer-getter.html
webgpu/propertyresolver/indexer-setter-abstract-lvalue-3-levels.html
webgpu/propertyresolver/indexer-setter-abstract-lvalue.html
webgpu/propertyresolver/indexer-setter-lvalue.html
webgpu/propertyresolver/indexer-setter.html
webgpu/propertyresolver/setter-abstract-lvalue-3-levels.html
webgpu/propertyresolver/setter-abstract-lvalue.html
webgpu/propertyresolver/setter-lvalue.html

• Modules/webgpu/WHLSL/AST/WHLSLAddressSpace.h:

(WebCore::WHLSL::AST::toString):

• Modules/webgpu/WHLSL/AST/WHLSLEntryPointType.h:

(WebCore::WHLSL::AST::toString):

• Modules/webgpu/WHLSL/AST/WHLSLIndexExpression.h:

(WebCore::WHLSL::AST::IndexExpression::takeIndex):

• Modules/webgpu/WHLSL/AST/WHLSLReferenceType.h:
• Modules/webgpu/WHLSL/Metal/WHLSLNativeFunctionWriter.cpp:

(WebCore::WHLSL::Metal::writeNativeFunction):
(WebCore::WHLSL::Metal::convertAddressSpace): Deleted.

• Modules/webgpu/WHLSL/WHLSLChecker.cpp:

(WebCore::WHLSL::checkOperatorOverload):
(WebCore::WHLSL::Checker::finishVisiting):
(WebCore::WHLSL::Checker::visit):

• Modules/webgpu/WHLSL/WHLSLInferTypes.h:
• Modules/webgpu/WHLSL/WHLSLPropertyResolver.cpp:

(WebCore::WHLSL::PropertyResolver::visit):
(WebCore::WHLSL::setterCall):
(WebCore::WHLSL::getterCall):
(WebCore::WHLSL::modify):
(WebCore::WHLSL::PropertyResolver::simplifyRightValue):
(WebCore::WHLSL::LeftValueSimplifier::finishVisiting):
(WebCore::WHLSL::LeftValueSimplifier::visit):

• Modules/webgpu/WHLSL/WHLSLStandardLibrary.txt:
• Modules/webgpu/WHLSL/WHLSLSynthesizeStructureAccessors.cpp:

(WebCore::WHLSL::synthesizeStructureAccessors):

LayoutTests:

• webgpu/propertyresolver/ander-abstract-lvalue-expected.html: Added.
• webgpu/propertyresolver/ander-abstract-lvalue.html: Added.
• webgpu/propertyresolver/ander-expected.html: Added.
• webgpu/propertyresolver/ander-lvalue-3-levels-expected.html: Added.
• webgpu/propertyresolver/ander-lvalue-3-levels.html: Added.
• webgpu/propertyresolver/ander-lvalue-expected.html: Added.
• webgpu/propertyresolver/ander-lvalue.html: Added.
• webgpu/propertyresolver/ander.html: Added.
• webgpu/propertyresolver/getter-expected.html: Added.
• webgpu/propertyresolver/getter.html: Added.
• webgpu/propertyresolver/indexer-ander-abstract-lvalue-expected.html: Added.
• webgpu/propertyresolver/indexer-ander-abstract-lvalue.html: Added.
• webgpu/propertyresolver/indexer-ander-expected.html: Added.
• webgpu/propertyresolver/indexer-ander-lvalue-3-levels-expected.html: Added.
• webgpu/propertyresolver/indexer-ander-lvalue-3-levels.html: Added.
• webgpu/propertyresolver/indexer-ander-lvalue-expected.html: Added.
• webgpu/propertyresolver/indexer-ander-lvalue.html: Added.
• webgpu/propertyresolver/indexer-ander.html: Added.
• webgpu/propertyresolver/indexer-getter-expected.html: Added.
• webgpu/propertyresolver/indexer-getter.html: Added.
• webgpu/propertyresolver/indexer-setter-abstract-lvalue-3-levels-expected.html: Added.
• webgpu/propertyresolver/indexer-setter-abstract-lvalue-3-levels.html: Added.
• webgpu/propertyresolver/indexer-setter-abstract-lvalue-expected.html: Added.
• webgpu/propertyresolver/indexer-setter-abstract-lvalue.html: Added.
• webgpu/propertyresolver/indexer-setter-expected.html: Added.
• webgpu/propertyresolver/indexer-setter-lvalue-expected.html: Added.
• webgpu/propertyresolver/indexer-setter-lvalue.html: Added.
• webgpu/propertyresolver/indexer-setter.html: Added.
• webgpu/propertyresolver/setter-abstract-lvalue-3-levels-expected.html: Added.
• webgpu/propertyresolver/setter-abstract-lvalue-3-levels.html: Added.
• webgpu/propertyresolver/setter-abstract-lvalue-expected.html: Added.
• webgpu/propertyresolver/setter-abstract-lvalue.html: Added.
• webgpu/propertyresolver/setter-lvalue-expected.html: Added.
• webgpu/propertyresolver/setter-lvalue.html: Added.

7:10 PM Changeset in webkit [246137] by achristensen@apple.com

• 17 edits
  6 adds in trunk/Source/WebKit

Introduce new SPI for context menus on iOS
​https://bugs.webkit.org/show_bug.cgi?id=198590

Reviewed by Tim Horton.

Also introduce WKContextMenuElementInfo which is API.
This is part of <rdar://problem/51003503>

• Shared/API/APIObject.h:
• Shared/API/Cocoa/WebKit.h:
• Shared/Cocoa/APIObject.mm:

(API::Object::newObject):

• Sources.txt:
• SourcesCocoa.txt:
• UIProcess/API/APIContextMenuElementInfo.cpp: Added.

(API::ContextMenuElementInfo::ContextMenuElementInfo):

• UIProcess/API/APIContextMenuElementInfo.h: Added.
• UIProcess/API/Cocoa/WKContextMenuElementInfo.h: Added.
• UIProcess/API/Cocoa/WKContextMenuElementInfo.mm: Added.

(-[WKContextMenuElementInfo linkURL]):
(-[WKContextMenuElementInfo _apiObject]):
(-[WKContextMenuElementInfo _activatedElementInfo]):

• UIProcess/API/Cocoa/WKContextMenuElementInfoInternal.h: Added.
• UIProcess/API/Cocoa/WKContextMenuElementInfoPrivate.h: Added.
• UIProcess/API/Cocoa/WKPreviewElementInfo.h:
• UIProcess/API/Cocoa/WKUIDelegatePrivate.h:
• UIProcess/API/Cocoa/_WKActivatedElementInfo.h:
• UIProcess/API/Cocoa/_WKActivatedElementInfo.mm:

(-[_WKActivatedElementInfo _initWithInteractionInformationAtPosition:]):
(-[_WKActivatedElementInfo isAnimatedImage]):

• UIProcess/ios/WKActionSheetAssistant.h:
• UIProcess/ios/WKActionSheetAssistant.mm:

(-[WKActionSheetAssistant defaultActionsForLinkSheet:]):
(-[WKActionSheetAssistant defaultActionsForImageSheet:]):

• UIProcess/ios/WKContentView.h:
• UIProcess/ios/WKContentViewInteraction.mm:
• WebKit.xcodeproj/project.pbxproj:

6:22 PM Changeset in webkit [246136] by jer.noble@apple.com

• 10 edits
  1 add in trunk

-[WKWebView _suspendAllMediaPlayback] does not persist across navigation.
​https://bugs.webkit.org/show_bug.cgi?id=198585

Reviewed by Chris Dumez.

Source/WebKit:

Add a new WebPageCreationParameters entry for mediaPlaybackIsSuspended, and pass
that value across during WebPage creation.

• Shared/WebPageCreationParameters.cpp:

(WebKit::WebPageCreationParameters::encode const):
(WebKit::WebPageCreationParameters::decode):

• Shared/WebPageCreationParameters.h:
• UIProcess/WebPageProxy.cpp:

(WebKit::WebPageProxy::suspendAllMediaPlayback):
(WebKit::WebPageProxy::resumeAllMediaPlayback):
(WebKit::WebPageProxy::creationParameters):

• UIProcess/WebPageProxy.h:
• WebProcess/WebPage/WebPage.cpp:

(WebKit::WebPage):

Tools:

• TestWebKitAPI/TestWebKitAPI.xcodeproj/project.pbxproj:
• TestWebKitAPI/Tests/WebKitCocoa/ProcessSwapOnNavigation.mm:
• TestWebKitAPI/Tests/WebKitCocoa/WKWebViewSuspendAllMediaPlayback.mm: Added.

(TEST):

• TestWebKitAPI/Tests/WebKitLegacy/ios/video-with-audio.html:

5:46 PM Changeset in webkit [246135] by rmorisset@apple.com

• 5 edits in trunk/Source/WebCore

[WHLSL] Parsing and lexing the standard library is slow
​https://bugs.webkit.org/show_bug.cgi?id=192890
<rdar://problem/50746335>

Reviewed by Myles Maxfield.

The main idea is to avoid backtracking by instead peeking at the next token (and occasionally at the one after that).
This implies a few things:

• We can replace the stack of tokens by a trivial ring buffer of size 2 (holding the next token and the one after, or WTF::nullopt if we are at the end of the file).
• We now have "completeFooExpression" functions, to avoid having to reparse the prefix of some expression, if we find half-way through what it is.

I also fixed the following parser bug:

• ​https://bugs.webkit.org/show_bug.cgi?id=198305 [WHLSL] Multiple variables with initializers in a declaration statement crashes the compiler

which was due to a mistake I made in the grammar

Finally I added two new macros: CONSUME_TYPE and PARSE to eliminate about 500 lines of error propagation boilerplate.

There are still lots of ways of improving the parser and lexer, such as:

• finishing the conversion of tokens in the lexer, not bothering with allocating string views
• make two special tokens Invalid and EOF, to remove the overhead of Optional
• make peekTypes and consumeTypes use templates to avoid constructing a Vector and calling find on it.
• Turn the entire lexer into a proper automata, not going through the same characters again and again (this is certainly the largest win by far)
• Remove the last few pieces of backtracking from the parser.

The current patch is already enough to make parsing the full standard library (something like 85k lines) approximately 260ms.
This is still longer than I would like, but nowhere near the bottleneck any longer because of some other parts of the compiler.

• Modules/webgpu/WHLSL/WHLSLLexer.h:

(WebCore::WHLSL::Lexer::Lexer):
(WebCore::WHLSL::Lexer::consumeToken):
(WebCore::WHLSL::Lexer::peek):
(WebCore::WHLSL::Lexer::peekFurther):
(WebCore::WHLSL::Lexer::state const):
(WebCore::WHLSL::Lexer::setState):
(WebCore::WHLSL::Lexer::unconsumeToken): Deleted.

• Modules/webgpu/WHLSL/WHLSLParser.cpp:

(WebCore::WHLSL::Parser::parse):
(WebCore::WHLSL::Parser::peek):
(WebCore::WHLSL::Parser::peekTypes):
(WebCore::WHLSL::Parser::tryType):
(WebCore::WHLSL::Parser::tryTypes):
(WebCore::WHLSL::Parser::consumeTypes):
(WebCore::WHLSL::Parser::parseConstantExpression):
(WebCore::WHLSL::Parser::parseTypeArgument):
(WebCore::WHLSL::Parser::parseTypeArguments):
(WebCore::WHLSL::Parser::parseTypeSuffixAbbreviated):
(WebCore::WHLSL::Parser::parseTypeSuffixNonAbbreviated):
(WebCore::WHLSL::Parser::parseType):
(WebCore::WHLSL::Parser::parseTypeDefinition):
(WebCore::WHLSL::Parser::parseResourceSemantic):
(WebCore::WHLSL::Parser::parseSpecializationConstantSemantic):
(WebCore::WHLSL::Parser::parseStageInOutSemantic):
(WebCore::WHLSL::Parser::parseSemantic):
(WebCore::WHLSL::Parser::parseQualifiers):
(WebCore::WHLSL::Parser::parseStructureElement):
(WebCore::WHLSL::Parser::parseStructureDefinition):
(WebCore::WHLSL::Parser::parseEnumerationDefinition):
(WebCore::WHLSL::Parser::parseEnumerationMember):
(WebCore::WHLSL::Parser::parseNativeTypeDeclaration):
(WebCore::WHLSL::Parser::parseNumThreadsFunctionAttribute):
(WebCore::WHLSL::Parser::parseAttributeBlock):
(WebCore::WHLSL::Parser::parseParameter):
(WebCore::WHLSL::Parser::parseParameters):
(WebCore::WHLSL::Parser::parseFunctionDefinition):
(WebCore::WHLSL::Parser::parseComputeFunctionDeclaration):
(WebCore::WHLSL::Parser::parseVertexFragmentFunctionDeclaration):
(WebCore::WHLSL::Parser::parseRegularFunctionDeclaration):
(WebCore::WHLSL::Parser::parseOperatorFunctionDeclaration):
(WebCore::WHLSL::Parser::parseFunctionDeclaration):
(WebCore::WHLSL::Parser::parseNativeFunctionDeclaration):
(WebCore::WHLSL::Parser::parseBlock):
(WebCore::WHLSL::Parser::parseBlockBody):
(WebCore::WHLSL::Parser::parseIfStatement):
(WebCore::WHLSL::Parser::parseSwitchStatement):
(WebCore::WHLSL::Parser::parseSwitchCase):
(WebCore::WHLSL::Parser::parseForLoop):
(WebCore::WHLSL::Parser::parseWhileLoop):
(WebCore::WHLSL::Parser::parseDoWhileLoop):
(WebCore::WHLSL::Parser::parseVariableDeclaration):
(WebCore::WHLSL::Parser::parseVariableDeclarations):
(WebCore::WHLSL::Parser::parseStatement):
(WebCore::WHLSL::Parser::parseEffectfulExpression):
(WebCore::WHLSL::Parser::parseEffectfulAssignment):
(WebCore::WHLSL::Parser::parseExpression):
(WebCore::WHLSL::Parser::parseTernaryConditional): Deleted.
(WebCore::WHLSL::Parser::completeTernaryConditional):
(WebCore::WHLSL::Parser::parseAssignment): Deleted.
(WebCore::WHLSL::Parser::completeAssignment):
(WebCore::WHLSL::Parser::parsePossibleTernaryConditional):
(WebCore::WHLSL::Parser::parsePossibleLogicalBinaryOperation):
(WebCore::WHLSL::Parser::completePossibleLogicalBinaryOperation):
(WebCore::WHLSL::Parser::parsePossibleRelationalBinaryOperation):
(WebCore::WHLSL::Parser::completePossibleRelationalBinaryOperation):
(WebCore::WHLSL::Parser::parsePossibleShift):
(WebCore::WHLSL::Parser::completePossibleShift):
(WebCore::WHLSL::Parser::parsePossibleAdd):
(WebCore::WHLSL::Parser::completePossibleAdd):
(WebCore::WHLSL::Parser::parsePossibleMultiply):
(WebCore::WHLSL::Parser::completePossibleMultiply):
(WebCore::WHLSL::Parser::parsePossiblePrefix):
(WebCore::WHLSL::Parser::parsePossibleSuffix):
(WebCore::WHLSL::Parser::parseCallExpression):
(WebCore::WHLSL::Parser::parseTerm):
(WebCore::WHLSL::Parser::parseAddressSpaceType): Deleted.
(WebCore::WHLSL::Parser::parseNonAddressSpaceType): Deleted.
(WebCore::WHLSL::Parser::parseEntryPointFunctionDeclaration): Deleted.
(WebCore::WHLSL::Parser::parseEffectfulPrefix): Deleted.
(WebCore::WHLSL::Parser::parseEffectfulSuffix): Deleted.

• Modules/webgpu/WHLSL/WHLSLParser.h:

(WebCore::WHLSL::Parser::Error::dump const):

5:28 PM Changeset in webkit [246134] by Justin Michaud

• 4 edits
  3 adds in trunk

WebAssembly: pow functions returns 0 when exponent 1.0 or -1.0
​https://bugs.webkit.org/show_bug.cgi?id=198106

Reviewed by Saam Barati.

JSTests:

• wasm/regress/selectf64.js: Added.
• wasm/regress/selectf64.wasm: Added.
• wasm/regress/selectf64.wat: Added.

Source/JavaScriptCore:

Fix bug caused by using fcsel sX instead of fcsel dX on an f64 value in moveDoubleConditionally32.

• assembler/MacroAssemblerARM64.h:

(JSC::MacroAssemblerARM64::moveDoubleConditionally32):

4:55 PM Changeset in webkit [246133] by Kocsen Chung

• 7 edits in branches/safari-608.1.27-branch/Source

Versioning.

4:05 PM Changeset in webkit [246132] by sihui_liu@apple.com

• 2 edits in trunk/Source/WebKit

TestWebKitAPI.WKWebView.LocalStorageProcessSuspends is flaky on release builds
​https://bugs.webkit.org/show_bug.cgi?id=198582

Reviewed by Youenn Fablet.

Initialize the state of StorageManager.

• NetworkProcess/WebStorage/StorageManager.h:

3:53 PM Changeset in webkit [246131] by achristensen@apple.com

• 2 edits in trunk/Source/WebCore

Revert part of r246126
​https://bugs.webkit.org/show_bug.cgi?id=197132

• platform/ios/WebItemProviderPasteboard.h:

This change broke an internal build, so I'm reverting it.

3:37 PM Changeset in webkit [246130] by Kocsen Chung

• 1 copy in tags/Safari-608.1.27.3

Tag Safari-608.1.27.3.

3:09 PM Changeset in webkit [246129] by dbates@webkit.org

• 3 edits
  2 adds in trunk

[CSP] Data URLs should inherit their CSP policy
​https://bugs.webkit.org/show_bug.cgi?id=198572
<rdar://problem/50660927>

Reviewed by Brent Fulgham.

Source/WebCore:

As per <​https://w3c.github.io/webappsec-csp/#security-inherit-csp> (Editor's Draft, 28 February 2019) data
URLs should inherit their CSP policy from their parent (if they have one).

Test: http/tests/security/contentSecurityPolicy/subframe-with-data-url-inheritance.html

• dom/Document.cpp:

(WebCore::Document::shouldInheritContentSecurityPolicyFromOwner const):

LayoutTests:

Add a test to ensure that a framed data URL inherits its CSP policy from its parent document.

• http/tests/security/contentSecurityPolicy/subframe-with-data-url-inheritance-expected.txt: Added.
• http/tests/security/contentSecurityPolicy/subframe-with-data-url-inheritance.html: Added.

2:28 PM Changeset in webkit [246128] by sbarati@apple.com

• 2 edits in trunk/Source/WebCore

Unreviewed. Follow up fix after r246115.
I changed the code to assert that we don't have duplicate native
functions. It turns out we do. I will fix that here, then add
back the assert. ​https://bugs.webkit.org/show_bug.cgi?id=198580

• Modules/webgpu/WHLSL/WHLSLCheckDuplicateFunctions.cpp:

(WebCore::WHLSL::checkDuplicateFunctions):

2:24 PM Changeset in webkit [246127] by commit-queue@webkit.org

• 9 edits in trunk

Re-enable safe browsing in WKWebView
​https://bugs.webkit.org/show_bug.cgi?id=196161
<rdar://problem/49171413>

Patch by Alex Christensen <​achristensen@webkit.org> on 2019-06-05
Reviewed by Ryosuke Niwa.

Source/WebKit:

This is mostly just reverting r241728.

• Shared/WebPreferences.yaml:
• UIProcess/API/Cocoa/WKPreferences.h:
• UIProcess/API/Cocoa/WKPreferences.mm:

(-[WKPreferences setSafeBrowsingEnabled:]):
(-[WKPreferences isSafeBrowsingEnabled]):

Tools:

• TestWebKitAPI/Tests/WebKitCocoa/ProcessSwapOnNavigation.mm:
• TestWebKitAPI/Tests/WebKitCocoa/SafeBrowsing.mm:

(TEST):
(safeBrowsingView):

LayoutTests:

• platform/mac-wk2/http/tests/navigation/keyboard-events-during-provisional-navigation-expected.txt:

2:11 PM Changeset in webkit [246126] by commit-queue@webkit.org

• 24 edits in trunk

Progress towards resurrecting Mac CMake build
​https://bugs.webkit.org/show_bug.cgi?id=197132

Patch by Alex Christensen <​achristensen@webkit.org> on 2019-06-05
Reviewed by Don Olmstead.

Source/JavaScriptCore:

• API/JSScript.mm:

(-[JSScript readCache]):
(-[JSScript sourceCode]):
(-[JSScript jsSourceCode]):
(-[JSScript writeCache:]):

• CMakeLists.txt:

Source/WebCore:

• CMakeLists.txt:
• PlatformMac.cmake:
• platform/cocoa/ContentFilterUnblockHandlerCocoa.mm:

Source/WebCore/PAL:

• pal/PlatformMac.cmake:

Source/WebKit:

• PlatformMac.cmake:

Source/WebKitLegacy:

• PlatformMac.cmake:

1:39 PM Changeset in webkit [246125] by youenn@apple.com

• 2 edits in trunk/Source/WebKit

Remove logSiteIdentifier from UserMediaPermissionRequestManagerProxy::requestUserMediaPermissionForFrame
​https://bugs.webkit.org/show_bug.cgi?id=198575

Reviewed by Eric Carlson.

• UIProcess/UserMediaPermissionRequestManagerProxy.cpp:

(WebKit::UserMediaPermissionRequestManagerProxy::requestUserMediaPermissionForFrame):

1:32 PM Changeset in webkit [246124] by Michael Catanzaro

• 7 edits
  7 copies in trunk

Rolled over to ChangeLog-2019-06-05

1:26 PM Changeset in webkit [246123] by Brent Fulgham

• 2 edits in trunk/Source/WebKit

[iOS] Update sandboxes to address iokit-get-property errors
​https://bugs.webkit.org/show_bug.cgi?id=198494
<rdar://problem/51322072> and <rdar://problem/50602737>

Reviewed by Alexey Proskuryakov.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

12:21 PM Changeset in webkit [246122] by commit-queue@webkit.org

• 10 edits in trunk

[Pointer Events] Fire pointerout and pointerleave events after firing pointercancel
​https://bugs.webkit.org/show_bug.cgi?id=198560

Patch by Antoine Quint <Antoine Quint> on 2019-06-05
Reviewed by Dean Jackson.

LayoutTests/imported/w3c:

Mark WPT progressions. Notably, the iOS-specific tests now have 100% PASS rate.

• web-platform-tests/pointerevents/pointerevent_mouse_capture_change_hover-expected.txt:
• web-platform-tests/pointerevents/pointerevent_pointercancel_touch-expected.txt:
• web-platform-tests/pointerevents/pointerevent_pointerleave_after_pointercancel_touch-expected.txt:
• web-platform-tests/pointerevents/pointerevent_pointerout_after_pointercancel_touch-expected.txt:

Source/WebCore:

The Pointer Events specification mandates that "pointerout" and "pointerleave" events must be dispatched
immediately after dispatching a "pointercancel" event.

Since we needed to determine the bubbling, cancelable and composed nature of those events in additional
places, we now have static methods to determine this defined in PointerEvent.h such that both PointerEvent.cpp
and PointerEventIOS.cpp may use them. This should guarantee consistency going forward.

• dom/PointerEvent.cpp:

(WebCore::PointerEvent::create):
(WebCore::PointerEvent::PointerEvent):

• dom/PointerEvent.h:
• dom/ios/PointerEventIOS.cpp:

(WebCore::pointerEventType):
(WebCore::PointerEvent::create):
(WebCore::PointerEvent::PointerEvent):
(WebCore::phaseIsCancelable): Deleted.
(WebCore::typeCanBubble): Deleted.

• page/PointerCaptureController.cpp:

(WebCore::PointerCaptureController::cancelPointer):

11:36 AM Changeset in webkit [246121] by sbarati@apple.com

• 10 edits
  18 adds in trunk

[WHLSL] Implement loop expressions
​https://bugs.webkit.org/show_bug.cgi?id=195808
<rdar://problem/50746309>

Reviewed by Myles Maxfield.

Source/WebCore:

This patch makes continue/break break for "do/while/for" loops
in WHLSL. Because of the way we emit code where every expression
turns into a Metal statement, it's not convenient to emit native
Metal loop constructs. Instead, we model break/continue as if
we had goto.

For example, this WHLSL program:
`
for (INIT; COND; INC) {

if (b)

continue;

if (b2)

break;

}
`
would become something like:
`
INIT;
while (1) {

if (!COND)

break;

if (b)

goto increment;

if (b2)

goto exit;

increment:

INC;

}
exit:
`

However, Metal doesn't have goto, so we model goto using a run-once
loop and a variable indicating if we should break out early. This
"break out early" variable is initially set to false. We "should
break out early" when executing a WHLSL "break" statement. "continue"
is modeled as breaking out of the run-once loop, but not touching the
"break out early" variable. "break" is modeled as setting the "break
out early" variable to true, followed by breaking out of the run-once loop.
The above WHLSL will turn into this Metal:
`
bool breakOutOfCurrentLoop = false;
INIT;
while (1) {

if (!COND)

break;

do {

if (b) {

WHLSL 'continue'
break;

}
if (b2) {

WHLSL 'break'
breakOutOfCurrentLoop = true;
break;

}

} while (0);
if (breakOutOfCurrentLoop)

break;

INC;

}
`

This patch also found a bug with ForLoop where it held a Variant<VariableDeclarationsStatement, Expression>.
This is invalid to do since we mutate the AST in place. This means some phase
could replace VariableDeclarationsStatement with some other Statement, and
we'd be breaking the C++ type system. So this patch migrates ForLoop to hold
a statement instead. In general, AST nodes that point to other AST nodes
should use broad types unless we know apriori that a certain type will
never be replaced.

Tests: webgpu/whlsl-do-while-loop-break.html

webgpu/whlsl-do-while-loop-continue.html
webgpu/whlsl-do-while-loop.html
webgpu/whlsl-loops-break.html
webgpu/whlsl-loops-continue.html
webgpu/whlsl-loops.html
webgpu/whlsl-nested-loop.html
webgpu/whlsl-while-loop-break.html
webgpu/whlsl-while-loop-continue.html

• Modules/webgpu/WHLSL/AST/WHLSLForLoop.h:

(WebCore::WHLSL::AST::ForLoop::ForLoop):
(WebCore::WHLSL::AST::ForLoop::initialization):

• Modules/webgpu/WHLSL/Metal/WHLSLFunctionWriter.cpp:

(WebCore::WHLSL::Metal::FunctionDefinitionWriter::visit):
(WebCore::WHLSL::Metal::FunctionDefinitionWriter::emitLoop):

• Modules/webgpu/WHLSL/WHLSLASTDumper.cpp:

(WebCore::WHLSL::ASTDumper::visit):

• Modules/webgpu/WHLSL/WHLSLChecker.cpp:

(WebCore::WHLSL::Checker::visit):

• Modules/webgpu/WHLSL/WHLSLParser.cpp:

(WebCore::WHLSL::Parser::parseForLoop):

• Modules/webgpu/WHLSL/WHLSLPrepare.cpp:
• Modules/webgpu/WHLSL/WHLSLStandardLibrary.txt:
• Modules/webgpu/WHLSL/WHLSLVisitor.cpp:

(WebCore::WHLSL::Visitor::visit):

LayoutTests:

• webgpu/whlsl-do-while-loop-break-expected.html: Added.
• webgpu/whlsl-do-while-loop-break.html: Added.
• webgpu/whlsl-do-while-loop-continue-expected.html: Added.
• webgpu/whlsl-do-while-loop-continue.html: Added.
• webgpu/whlsl-do-while-loop-expected.html: Added.
• webgpu/whlsl-do-while-loop.html: Added.
• webgpu/whlsl-loops-break-expected.html: Added.
• webgpu/whlsl-loops-break.html: Added.
• webgpu/whlsl-loops-continue-expected.html: Added.
• webgpu/whlsl-loops-continue.html: Added.
• webgpu/whlsl-loops-expected.html: Added.
• webgpu/whlsl-loops.html: Added.
• webgpu/whlsl-nested-loop-expected.html: Added.
• webgpu/whlsl-nested-loop.html: Added.
• webgpu/whlsl-while-loop-break-expected.html: Added.
• webgpu/whlsl-while-loop-break.html: Added.
• webgpu/whlsl-while-loop-continue-expected.html: Added.
• webgpu/whlsl-while-loop-continue.html: Added.

11:29 AM Changeset in webkit [246120] by Devin Rousso

• 2 edits in trunk/Source/WebInspectorUI

Web Inspector: Dark Mode: inactive tab bar tint is too light
​https://bugs.webkit.org/show_bug.cgi?id=198546

Reviewed by Joseph Pecoraro.

• UserInterface/Views/TabBar.css:

(@media (prefers-color-scheme: dark)):

11:23 AM Changeset in webkit [246119] by Jon Davis

• 2 edits in trunk/Websites/webkit.org

Fix icons positioned incorrectly when a featured image is used
​https://bugs.webkit.org/show_bug.cgi?id=198535

Reviewed by Devin Rousso.

• wp-content/themes/webkit/style.css:

(.tile .background-image.loaded svg):
(.tile .featured-image::before):

11:23 AM Changeset in webkit [246118] by Wenson Hsieh

• 40 edits
  1 move
  1 add
  1 delete in trunk

Upstream content mode support into open source from WebKitAdditions
​https://bugs.webkit.org/show_bug.cgi?id=198484
<rdar://problem/51355671>

Reviewed by Andy Estes.

Source/WebCore:

• Modules/modern-media-controls/media/media-controller.js:

(MediaController.prototype.get layoutTraits):

Adjust modern media controls code to use iOS-style controls on PLATFORM(IOS_FAMILY), instead of depending on the
navigator's platform name or the presence of touch events.

• page/Quirks.cpp:

(WebCore::shouldSuppressAutocorrectionAndAutocaptializationInHiddenEditableAreasForHost):
(WebCore::shouldEmulateUndoRedoInHiddenEditableAreasForHost):

• page/SettingsBase.h:
• rendering/RenderThemeIOS.mm:

(WebCore::RenderThemeIOS::mediaControlsScript):

Source/WebCore/PAL:

Add some new constants to MobileGestaltSPI.h.

• pal/spi/ios/MobileGestaltSPI.h:

Source/WebKit:

Move code for handling WKContentMode into open source. No change in behavior, for internal builds.

• Shared/API/Cocoa/WebKit.apinotes:
• Shared/WebContentMode.h: Renamed from Source/WebKit/Shared/WebCompatibilityMode.h.
• Shared/WebPreferences.yaml:
• UIProcess/API/APINavigation.h:

(API::Navigation::setEffectiveContentMode):
(API::Navigation::effectiveContentMode const):
(API::Navigation::setEffectiveCompatibilityMode): Deleted.
(API::Navigation::effectiveCompatibilityMode const): Deleted.

• UIProcess/API/APINavigationClient.h:

(API::NavigationClient::shouldBypassContentModeSafeguards const):
(API::NavigationClient::shouldBypassCompatibilityModeSafeguards const): Deleted.

• UIProcess/API/APIWebsitePolicies.cpp:

(API::WebsitePolicies::copy const):

• UIProcess/API/APIWebsitePolicies.h:
• UIProcess/API/Cocoa/WKNavigation.h:
• UIProcess/API/Cocoa/WKNavigation.mm:

(-[WKNavigation effectiveContentMode]):

• UIProcess/API/Cocoa/WKWebpagePreferences.h:
• UIProcess/API/Cocoa/WKWebpagePreferences.mm:

(WebKit::contentMode):
(WebKit::webContentMode):
(-[WKWebpagePreferences _allowSiteSpecificQuirksToOverrideCompatibilityMode]):
(-[WKWebpagePreferences _setAllowSiteSpecificQuirksToOverrideCompatibilityMode:]):
(-[WKWebpagePreferences setPreferredContentMode:]):
(-[WKWebpagePreferences preferredContentMode]):

• UIProcess/API/Cocoa/WKWebpagePreferencesInternal.h:
• UIProcess/Cocoa/NavigationState.h:
• UIProcess/Cocoa/NavigationState.mm:

(WebKit::NavigationState::NavigationClient::shouldBypassContentModeSafeguards const):
(WebKit::NavigationState::NavigationClient::shouldBypassCompatibilityModeSafeguards const): Deleted.

• UIProcess/WebPageProxy.cpp:

(WebKit::WebPageProxy::decidePolicyForNavigationAction):
(WebKit::WebPageProxy::effectiveContentModeAfterAdjustingPolicies):
(WebKit::WebPageProxy::effectiveCompatibilityModeAfterAdjustingPolicies): Deleted.

• UIProcess/WebPageProxy.h:
• UIProcess/ios/WebPageProxyIOS.mm:

(WebKit::desktopClassBrowsingSupported):
(WebKit::webViewSizeIsNarrow):
(WebKit::desktopClassBrowsingRecommendedForRequest):
(WebKit::desktopClassBrowsingRecommended):
(WebKit::WebPageProxy::effectiveContentModeAfterAdjustingPolicies):

• WebKit.xcodeproj/project.pbxproj:

Tools:

Change the "useModernCompatibilityMode" layout test option to instead be "contentMode", with values of either
"mobile" or "desktop".

• TestWebKitAPI/TestWebKitAPI.xcodeproj/project.pbxproj:
• TestWebKitAPI/ios/PreferredCompatibilityMode.mm: Removed.
• TestWebKitAPI/ios/PreferredContentMode.mm: Added.

(-[ContentModeNavigationDelegate setDecidePolicyForNavigationActionWithPreferences:]):
(-[ContentModeNavigationDelegate decidePolicyForNavigationActionWithPreferences]):
(-[ContentModeNavigationDelegate webView:decidePolicyForNavigationAction:preferences:decisionHandler:]):
(+[WKWebpagePreferences preferencesWithContentMode:]):
(-[WKWebView navigatorUserAgent]):
(-[WKWebView navigatorPlatform]):
(-[WKWebView loadTestPageNamed:withPolicyDecisionHandler:]):
(-[WKWebView loadHTMLString:withPolicyDecisionHandler:]):
(-[WKWebView loadTestPageNamed:andExpectEffectiveContentMode:withPolicyDecisionHandler:]):
(-[NSString shouldContainStrings:]):
(IPhoneUserInterfaceSwizzler::IPhoneUserInterfaceSwizzler):
(IPhoneUserInterfaceSwizzler::phoneUserInterfaceIdiom):
(TestWebKitAPI::setUpWebViewForPreferredContentModeTestingWithoutNavigationDelegate):
(TestWebKitAPI::setUpWebViewForPreferredContentModeTesting):
(TestWebKitAPI::makeContentModeDecisionHandler):
(TestWebKitAPI::TEST):

• WebKitTestRunner/TestController.cpp:

(WTR::updateTestOptionsFromTestHeader):

• WebKitTestRunner/TestController.h:
• WebKitTestRunner/TestOptions.h:

(WTR::TestOptions::hasSameInitializationOptions const):

• WebKitTestRunner/cocoa/TestControllerCocoa.mm:

(WTR::TestController::platformCreateWebView):
(WTR::TestController::configureContentMode):
(WTR::TestController::enableModernCompatibilityMode): Deleted.

LayoutTests:

Explicitly opt a few tests into desktop or mobile content mode.

• fast/media/ios/ipad/enable-MediaSource-API-in-modern-compatibility-mode.html:
• fast/scrolling/ipad/overflow-scrolling-touch-enabled-stacking-modern-compatibility-mode-expected.html:
• fast/scrolling/ipad/overflow-scrolling-touch-enabled-stacking-modern-compatibility-mode.html:
• media/modern-media-controls/media-controller/ios/media-controller-ios-layout-traits-modern-compatibility-mode.html:
• platform/ipad/fast/css/webkit-overflow-scrolling-parsing-modern-compatibility-mode.html:
• platform/ipad/fast/viewport/empty-meta.html:
• platform/ipad/fast/viewport/viewport-unchanged-by-minimum-effective-width-if-not-ignore-meta-viewport.html:
• platform/ipad/media/modern-media-controls/media-documents/media-document-audio-ios-sizing.html:

11:02 AM Changeset in webkit [246117] by Shawn Roberts

• 2 edits in trunk/LayoutTests

imported/w3c/web-platform-tests/IndexedDB/keypath-special-identifiers.htm is a flaky failure
​https://bugs.webkit.org/show_bug.cgi?id=198573

Unreviewed test gardening.

• platform/ios-simulator-wk2/TestExpectations: Updating expectations for flaky test

11:01 AM Changeset in webkit [246116] by timothy_horton@apple.com

• 7 edits in trunk/Source/WebKit

Remove some unused selection code
​https://bugs.webkit.org/show_bug.cgi?id=198451

Reviewed by Wenson Hsieh.

• Platform/spi/ios/UIKitSPI.h:
• Shared/ios/GestureTypes.h:
• UIProcess/ios/WKContentViewInteraction.mm:

(toGestureType):
(toUIWKGestureType):

• UIProcess/ios/WKPDFView.mm:

(-[WKPDFView actionSheetAssistant:shareElementWithURL:rect:]):

• WebProcess/WebPage/WebPage.h:
• WebProcess/WebPage/ios/WebPageIOS.mm:

(WebKit::WebPage::selectWithGesture):
(WebKit::WebPage::selectTextWithGranularityAtPoint):
(WebKit::canShrinkToTextSelection): Deleted.
(WebKit::hasCustomLineHeight): Deleted.
(WebKit::WebPage::rangeForWebSelectionAtPosition): Deleted.

10:40 AM Changeset in webkit [246115] by sbarati@apple.com

• 8 edits in trunk/Source/WebCore

[WHLSL] checkDuplicateFunctions() should not be O(n^{2)
​https://bugs.webkit.org/show_bug.cgi?id=198155
<rdar://problem/51288811>}

Reviewed by Myles Maxfield.

Originally, we filed this bug because we thought checkDuplicateFunctions()
would take on the order of hundreds of milliseconds when using the
full standard library. However, I was never able to reproduce that phase
taking that long. I was seeing it take 3.5-4ms. Anyways, it makes sense
to make this phase not be O(N^{2), since the number of functions is a user
controlled value. I am now seeing ~2.5ms to run this phase against the
full standard library. On a microbenchmark I checked against, where there
were 100,000 unique functions, this pass runs twice as fast as it used
to, now taking 450ms instead of 900ms.}

• Modules/webgpu/WHLSL/AST/WHLSLArrayReferenceType.h:

(WebCore::WHLSL::AST::ArrayReferenceType::ArrayReferenceType):

• Modules/webgpu/WHLSL/AST/WHLSLArrayType.h:
• Modules/webgpu/WHLSL/AST/WHLSLPointerType.h:

(WebCore::WHLSL::AST::PointerType::PointerType):

• Modules/webgpu/WHLSL/AST/WHLSLReferenceType.h:
• Modules/webgpu/WHLSL/AST/WHLSLTypeReference.h:
• Modules/webgpu/WHLSL/AST/WHLSLUnnamedType.h:
• Modules/webgpu/WHLSL/WHLSLCheckDuplicateFunctions.cpp:

(WebCore::WHLSL::DuplicateFunctionKey::DuplicateFunctionKey):
(WebCore::WHLSL::DuplicateFunctionKey::isEmptyValue const):
(WebCore::WHLSL::DuplicateFunctionKey::isHashTableDeletedValue const):
(WebCore::WHLSL::DuplicateFunctionKey::hash const):
(WebCore::WHLSL::DuplicateFunctionKey::operator== const):
(WebCore::WHLSL::DuplicateFunctionKey::Hash::hash):
(WebCore::WHLSL::DuplicateFunctionKey::Hash::equal):
(WebCore::WHLSL::DuplicateFunctionKey::Traits::isEmptyValue):
(WebCore::WHLSL::checkDuplicateFunctions):

10:34 AM Changeset in webkit [246114] by Alan Bujtas

• 3 edits in trunk/Source/WebCore

[LFC][IFC] LineLayout::placeInlineItems should not apply float contraint.
​https://bugs.webkit.org/show_bug.cgi?id=198565
<rdar://problem/51440718>

Reviewed by Antti Koivisto.

This patch moves float constraint handling from placeInlineItems() to LineLayout::layout().
When placeInlineItems() is called by the preferred width computation, intruding floats should be ignored
since they don't constrain the "min/max lines".

• layout/inlineformatting/InlineFormattingContext.h:
• layout/inlineformatting/InlineFormattingContextLineLayout.cpp:

(WebCore::Layout::InlineFormattingContext::LineLayout::LineInput::HorizontalConstraint::HorizontalConstraint):
(WebCore::Layout::InlineFormattingContext::LineLayout::LineInput::LineInput):
(WebCore::Layout::InlineFormattingContext::LineLayout::placeInlineItems const):
(WebCore::Layout::InlineFormattingContext::LineLayout::layout const):
(WebCore::Layout::constructLine): Deleted.

10:33 AM Changeset in webkit [246113] by Alan Bujtas

• 2 edits in trunk/LayoutTests

REGRESSION (~r244378) fast/events/touch/ios/content-observation/stuck-with-hover-state.html is flaky
​https://bugs.webkit.org/show_bug.cgi?id=198571
<rdar://problem/50349265>

Reviewed by Brent Fulgham.

testRunner.notifyDone() is called prematurely.

• fast/events/touch/ios/content-observation/stuck-with-hover-state.html:

10:03 AM Changeset in webkit [246112] by Jon Davis

• 3 edits in trunk/Websites/webkit.org

Improve accessibility on webkit.org
​https://bugs.webkit.org/show_bug.cgi?id=198531

Reviewed by Devin Rousso.

• wp-content/themes/webkit/functions.php: Added menuitem ARIA role to links
• wp-content/themes/webkit/widgets/post.php: Added aria-label to SVG icons

10:02 AM Changeset in webkit [246111] by Shawn Roberts

• 2 edits in trunk/LayoutTests

http/tests/websocket/tests/hybi/handshake-ok-with-legacy-websocket-response-headers.html is a flaky failure on Mojave
​https://bugs.webkit.org/show_bug.cgi?id=176240

Unreviewed test gardening.

• platform/mac-wk2/TestExpectations:

10:01 AM Changeset in webkit [246110] by Chris Dumez

• 2 edits in trunk/Source/WebKit

Unreviewed assertion fix for macOS after r246097.

• UIProcess/WebsiteData/WebsiteDataStore.cpp:

(WebKit::WebsiteDataStore::processPoolForCookieStorageOperations):

9:56 AM Changeset in webkit [246109] by Philippe Normand

• 1 edit
  2 adds in trunk/LayoutTests

Unreviewed, add GTK baselines for new mediacapabilities test.

This test was added in r245636 with baselines for the mac port, but not for the GTK port.

• platform/gtk/media/mediacapabilities/mediacapabilities-types-expected.txt: Added.

9:48 AM Changeset in webkit [246108] by Truitt Savell

• 4 edits in trunk/Source/WebCore

Unreviewed, rolling out r246052.

Caused 3 webgpu/ failures.

Reverted changeset:

"[WHLSL] Parsing and lexing the standard library is slow"
​https://bugs.webkit.org/show_bug.cgi?id=192890
​https://trac.webkit.org/changeset/246052

9:41 AM Changeset in webkit [246107] by Michael Catanzaro

• 2 edits in trunk/Source/WebCore

[GStreamer] Crash in MediaPlayerPrivateGStreamerBase::ensureGstGLContext
​https://bugs.webkit.org/show_bug.cgi?id=198567

Reviewed by Philippe Normand.

MediaPlayerPrivateGStreamerBase::ensureGstGLContext is currently a guaranteed crash because
it expects PlatformDisplay::sharedDisplayForCompositing() to return a PlatformDisplayLibWPE
if compiled with USE(WPE_RENDERER), but PlatformDisplayLibWPE has lower precedence than
PlatformDisplayX11 and PlatformDisplayWayland. When running our layout tests with
run-webkit-tests --gtk, it's guaranteed to be a PlatformDisplayX11.

I think Carlos was clearly expecting PlatformDisplayLibWPE, so I don't know what the ideal
desired behavior is, but the crashes go away if we change the code to allow any type of
PlatformDisplay. This should hopefully fix our bots, which are still exiting early.

• platform/graphics/gstreamer/MediaPlayerPrivateGStreamerBase.cpp:

(WebCore::MediaPlayerPrivateGStreamerBase::ensureGstGLContext):

7:52 AM Changeset in webkit [246106] by Truitt Savell

• 2 edits in trunk/LayoutTests

Mark two tests added in r246016 as slow.
​https://bugs.webkit.org/show_bug.cgi?id=198459

Unreviewed test gardening.

• platform/mac-wk1/TestExpectations:

7:47 AM Changeset in webkit [246105] by Alan Bujtas

• 4 edits in trunk/Source/WebCore

[LFC][IFC] Move inline item height computation to a dedicated function
​https://bugs.webkit.org/show_bug.cgi?id=198550
<rdar://problem/51424223>

Reviewed by Antti Koivisto.

The inlineItem height value is not available during preferred width computation (hence optional).

• layout/inlineformatting/InlineFormattingContextLineLayout.cpp:

(WebCore::Layout::UncommittedContent::add):
(WebCore::Layout::inlineItemWidth):
(WebCore::Layout::inlineItemHeight):
(WebCore::Layout::InlineFormattingContext::LineLayout::placeInlineItems const):

• layout/inlineformatting/InlineLine.cpp:

(WebCore::Layout::Line::appendInlineContainerStart):
(WebCore::Layout::Line::appendInlineContainerEnd):
(WebCore::Layout::Line::appendTextContent):
(WebCore::Layout::Line::appendNonReplacedInlineBox):
(WebCore::Layout::Line::appendReplacedInlineBox):

• layout/inlineformatting/InlineLine.h:

6:22 AM Changeset in webkit [246104] by jfernandez@igalia.com

• 22 edits
  8 copies
  10 adds in trunk/LayoutTests

Update the CSS Text WPT test suite
​https://bugs.webkit.org/show_bug.cgi?id=197929

Reviewed by Myles C. Maxfield.

Import the last changes in the CSS Text suite.

LayoutTests/imported/w3c:

• web-platform-tests/css/css-text/line-break/line-break-anywhere-001.html:
• web-platform-tests/css/css-text/line-break/line-break-anywhere-002.html:
• web-platform-tests/css/css-text/line-break/line-break-anywhere-013-expected.html: Added.
• web-platform-tests/css/css-text/line-break/line-break-anywhere-013.html: Copied from LayoutTests/imported/w3c/web-platform-tests/css/css-text/word-break/word-break-break-all-024.html.
• web-platform-tests/css/css-text/line-break/line-break-anywhere-014-expected.html: Added.
• web-platform-tests/css/css-text/line-break/line-break-anywhere-014.html: Copied from LayoutTests/imported/w3c/web-platform-tests/css/css-text/word-break/word-break-break-all-024.html.
• web-platform-tests/css/css-text/line-break/line-break-anywhere-015-expected.html: Added.
• web-platform-tests/css/css-text/line-break/line-break-anywhere-015.html: Copied from LayoutTests/imported/w3c/web-platform-tests/css/css-text/word-break/word-break-break-all-024.html.
• web-platform-tests/css/css-text/line-break/line-break-anywhere-016-expected.html: Added.
• web-platform-tests/css/css-text/line-break/line-break-anywhere-016.html: Copied from LayoutTests/imported/w3c/web-platform-tests/css/css-text/word-break/word-break-break-all-024.html.
• web-platform-tests/css/css-text/line-break/w3c-import.log:
• web-platform-tests/css/css-text/overflow-wrap/overflow-wrap-break-word-008.html:
• web-platform-tests/css/css-text/white-space/break-spaces-009.html:
• web-platform-tests/css/css-text/white-space/break-spaces-010-expected.html: Added.
• web-platform-tests/css/css-text/white-space/break-spaces-010.html: Added.
• web-platform-tests/css/css-text/white-space/w3c-import.log:
• web-platform-tests/css/css-text/white-space/white-space-intrinsic-size-004-expected.html:
• web-platform-tests/css/css-text/white-space/white-space-intrinsic-size-004.html:
• web-platform-tests/css/css-text/white-space/white-space-pre-wrap-trailing-spaces-002-expected.html:
• web-platform-tests/css/css-text/white-space/white-space-pre-wrap-trailing-spaces-002.html:
• web-platform-tests/css/css-text/white-space/white-space-pre-wrap-trailing-spaces-003-expected.html:
• web-platform-tests/css/css-text/white-space/white-space-pre-wrap-trailing-spaces-003.html:
• web-platform-tests/css/css-text/word-break/w3c-import.log:
• web-platform-tests/css/css-text/word-break/word-break-break-all-017.html:
• web-platform-tests/css/css-text/word-break/word-break-break-all-023.html:
• web-platform-tests/css/css-text/word-break/word-break-break-all-024.html:
• web-platform-tests/css/css-text/word-break/word-break-break-all-025-expected.html: Added.
• web-platform-tests/css/css-text/word-break/word-break-break-all-025.html: Copied from LayoutTests/imported/w3c/web-platform-tests/css/css-text/word-break/word-break-break-all-024.html.
• web-platform-tests/css/css-text/word-break/word-break-break-all-026-expected.html: Added.
• web-platform-tests/css/css-text/word-break/word-break-break-all-026.html: Copied from LayoutTests/imported/w3c/web-platform-tests/css/css-text/word-break/word-break-break-all-024.html.
• web-platform-tests/css/css-text/word-break/word-break-break-all-027-expected.html: Added.
• web-platform-tests/css/css-text/word-break/word-break-break-all-027.html: Copied from LayoutTests/imported/w3c/web-platform-tests/css/css-text/word-break/word-break-break-all-024.html.
• web-platform-tests/css/css-text/word-break/word-break-break-all-028-expected.html: Added.
• web-platform-tests/css/css-text/word-break/word-break-break-all-028.html: Copied from LayoutTests/imported/w3c/web-platform-tests/css/css-text/word-break/word-break-break-all-024.html.

LayoutTests:

• TestExpectations: A few tests pass now
  • white-space-intrinsic-size-004.html
  • white-space-pre-wrap-trailing-spaces-003.html

1:41 AM Changeset in webkit [246103] by graouts@webkit.org

• 36 edits
  2 copies
  5 adds in trunk

[Pointer Events] Add support for chorded button interactions
​https://bugs.webkit.org/show_bug.cgi?id=198462

Reviewed by Dean Jackson.

LayoutTests/imported/w3c:

Mark the progression for web-platform-tests/pointerevents/pointerevent_mouse_capture_change_hover.html which
proves the correct implementation of the chorded button interactions section of the Pointer Events spec. To do that,
we also had to make use of the "button" parameter used in WPT tests action sequences, which allows the test to indicate
which mouse button is pressed. Finally, there is now a change in the pointerevent_pointermove_on_chorded_mouse_button.html
results, another source change is required to get this test to fully pass.

• web-platform-tests/pointerevents/pointerevent_mouse_capture_change_hover-expected.txt:
• web-platform-tests/pointerevents/pointerevent_pointermove_on_chorded_mouse_button-expected.txt:
• web-platform-tests/resources/testdriver-vendor.js:

(dispatchMouseActions):

Source/WebCore:

Pointer events differ from mouse events in that pressing a button on a mouse and then pressing a second button
would yield two "mousedown" events but a single "pointerdown" event, for the first time we're transitioning from
a state where no button is pressed at all, and then a "pointermove" event to indicate an additional button has been
pressed. This is what the Pointer Events specification calls "chorded button interactions".
See ​https://w3c.github.io/pointerevents/#chorded-button-interactions for the full details.

To implement this, we no longer directly call PointerEvent::create() from Element::dispatchMouseEvent() but instead
call the new PointerCaptureController::pointerEventForMouseEvent() which implements the required logic to determine
for "mousedown" and "mouseup" mouse events, if we're transitioning from or to a state where no button is pressed at
all.

While that basic change is pretty small, a wider change was required to report the correct value for a PointerEvents'
"button" property which should return "-1" when there is no change in pressed button state compared to any previous
pointer event.

Up until now, MouseEvent.button was an "unsigned short", as specified up to and including DOM Level 2 Events. But the
UI Events spec says that property is a "short", and PointerEvent is the only interface where a "-1" value is used. This
required some changes throughout our codebase since we used a "-1" value to specify that no button was pressed when dealing
with NSEvent input and going through PlatformMouseEvent and eventually MouseEvent. So now we change the various NoButton
enum values to be "-2" and use that value, which is not going to be used for any mouse button, as the value reflected as
"0" through MouseEvent.button, as specified by UI Events.

Furthermore, we identified another issue: MouseEvent.buttons would always return 0 in DRT and WKTR. We rely upon that
value in PointerCaptureController::pointerEventForMouseEvent() and so we had to make that work for the relevant WPT test,
web-platform-tests/pointerevents/pointerevent_mouse_capture_change_hover.html, to pass and show a correct implementation
of chorded button interactions. The details of the work required for this is in Tools/ChangeLog.

• dom/Element.cpp:

(WebCore::Element::dispatchMouseEvent):

• dom/MouseEvent.cpp:

(WebCore::MouseEvent::create):
(WebCore::MouseEvent::MouseEvent):
(WebCore::MouseEvent::initMouseEvent):
(WebCore::MouseEvent::initMouseEventQuirk):

• dom/MouseEvent.h:

(WebCore::MouseEvent::button const):

• dom/MouseEvent.idl:
• dom/MouseEventInit.h:
• dom/MouseEventInit.idl:
• dom/PointerEvent.cpp:

(WebCore::PointerEvent::create):
(WebCore::PointerEvent::PointerEvent):

• dom/PointerEvent.h:
• loader/NavigationAction.h:
• page/PointerCaptureController.cpp:

(WebCore::PointerCaptureController::pointerEventForMouseEvent):

• page/PointerCaptureController.h:
• platform/PlatformMouseEvent.h:

Source/WebKit:

Update to use -2 instead of -1 for NoButton.

• Shared/API/c/WKEvent.h:
• Shared/WebEvent.h:

Source/WebKitLegacy/mac:

Update -[DOMMouseEvent button] to be a "short" and update the noButton value from -1 to -2.

• DOM/DOMMouseEvent.h:
• DOM/DOMMouseEvent.mm:

(-[DOMMouseEvent button]):

• WebView/WebPDFView.mm:

(-[WebPDFView PDFViewWillClickOnLink:withURL:]):

Tools:

Until now, MouseEvent.buttons would always return 0 when used within DRT and WKTR as [NSEvent pressedMouseButtons], used
by PlatformMouseEventBuilder to set the m_buttons value eventually used to set MouseEvent.buttons, not account for the
NSEvent created through the eventSender JS object in tests. To fix this, we now track the pressed mouse buttons within
DRT and WKTR as mouseDown() and mouseUp() are called, and swizzle [NSEvent pressedMouseButtons] to return that value.

In the case of DRT, one test would fail when swizzling this method in the case where the target view for the event would
be the DRTMockScroller, a subclass of NSScroller. So we only swizzle when the target view is *not* an NSScroller or a
subclass.

Finally, we change the NoMouseButton enum value from -1 to -2 to adjust to MouseEvent.button now being a "short".

• DumpRenderTree/mac/EventSendingController.mm:

(swizzledEventPressedMouseButtons):
(-[EventSendingController mouseDown:withModifiers:]):
(-[EventSendingController mouseUp:withModifiers:]):
(-[EventSendingController mouseMoveToX:Y:]):

• TestWebKitAPI/Tests/mac/IsNavigationActionTrusted.mm:
• WebKitTestRunner/EventSenderProxy.h:

(WTR::EventSenderProxy::mouseButtonsCurrentlyDown const):

• WebKitTestRunner/mac/EventSenderProxy.mm:

(WTR::swizzledEventPressedMouseButtons):
(WTR::EventSenderProxy::mouseDown):
(WTR::EventSenderProxy::mouseUp):
(WTR::EventSenderProxy::mouseMoveTo):

LayoutTests:

Update some tests and their expectations due to MouseEvent.buttons now returning the correct value in DRT and WKTR
and MouseEvent.button now being a "short" instead of an "unsigned short".

• fast/events/constructors/mouse-event-constructor-expected.txt:
• fast/events/constructors/mouse-event-constructor.html: Update the test to test the boundary values for "short" instead

of "unsigned short" as well as the new "magic" value of -2 for no button, which ends up being reported as 0.

• fast/events/constructors/wheel-event-constructor-expected.txt:
• fast/events/constructors/wheel-event-constructor.html: Update the test to test the boundary values for "short" instead

of "unsigned short" as well as the new "magic" value of -2 for no button, which ends up being reported as 0.

• fast/events/fire-mousedown-while-pressing-mouse-button.html: Rewrite this test to always use MouseEvent.buttons and

adjust the bitmask expectations which were way off.

• platform/mac-wk1/imported/w3c/web-platform-tests/pointerevents/pointerevent_mouse_capture_change_hover-expected.txt:
• platform/mac-highsierra/imported/w3c/web-platform-tests/pointerevents/pointerevent_mouse_capture_change_hover-expected.txt:
• platform/mac-highsierra-wk1/imported/w3c/web-platform-tests/pointerevents/pointerevent_mouse_capture_change_hover-expected.txt:

This test fails differently in WK1 and WK2 and will be addressed in a future patch.

12:56 AM Changeset in webkit [246102] by Michael Catanzaro

• 5 edits in trunk/Source

REGRESSION(r245796): [WPE][GTK] Web process crash on startup
​https://bugs.webkit.org/show_bug.cgi?id=198485

Reviewed by Chris Dumez.

Source/WebCore:

ResourceRequest's PageIdentifier may be unset, which causes coding to fail as
ObjectIdentifiers are required to be valid (nonzero). We need to use Optional here.
Previously, 0 was used to indicate unset page ID. This is clearer.

• platform/network/soup/ResourceRequest.h:

(WebCore::ResourceRequest::initiatingPageID const):
(WebCore::ResourceRequest::decodeWithPlatformData):

• platform/network/soup/ResourceRequestSoup.cpp:

(WebCore::ResourceRequest::updateSoupRequest const):

Source/WebKit:

• UIProcess/API/glib/WebKitURISchemeRequest.cpp:

(webkitURISchemeRequestCreate):

12:42 AM Changeset in webkit [246101] by Carlos Garcia Campos

• 4 edits in trunk/Source/WebKit

[GTK][WPE] Re-enable process warming
​https://bugs.webkit.org/show_bug.cgi?id=198526

Reviewed by Michael Catanzaro.

It was disabled in r243490 because bubblewrap sandbox needs a valid WebsiteDataStore before launching the web
process. We can use the default WebsiteDataStore from the WebProcessPool and only use the prewarmed process
later if the given WebsiteDataStore is the same as the WebProcessPool one.

• UIProcess/WebProcessPool.cpp:

(WebKit::WebProcessPool::tryTakePrewarmedProcess): Do not use the prewarmed process if WebsiteDataStore is
different than the one used to launch the process when sandboxing is enabled.

• UIProcess/glib/WebProcessPoolGLib.cpp:

(WebKit::WebProcessPool::platformInitialize): Do not disable process warming.

• UIProcess/glib/WebProcessProxyGLib.cpp:

(WebKit::WebProcessProxy::platformGetLaunchOptions): Use the WebsiteDataStore from the WebProcessPool if process
is prewarmed and sandboxing is enabled.

Jun 4, 2019:

11:34 PM Changeset in webkit [246100] by bshafiei@apple.com

• 2 edits in branches/safari-608.1.27-branch/Source/WebCore

Cherry-pick r246099. rdar://problem/48006291

iPadOS: Google calendars new event picker moves and flickers in landscape with software keyboard
​https://bugs.webkit.org/show_bug.cgi?id=198556

Reviewed by Wenson Hsieh.

Fix the issuse that it's really hard to create a new event using Google calendar on iPadOS with
a software keyboard enabled because tapping on date brings up software keyboard and erratically
shifts up/down the new event dialog/pane.

Add a site specific quirk to pretend these input elements have inputmode=none for now.

No new tests since this is a site specific quirk.

• page/Quirks.cpp: (WebCore::Quirks::needsInputModeNoneImplicitly const):

git-svn-id: ​https://svn.webkit.org/repository/webkit/trunk@246099 268f45cc-cd09-0410-ab3c-d52691b4dbfc

11:09 PM Changeset in webkit [246099] by rniwa@webkit.org

• 2 edits in trunk/Source/WebCore

iPadOS: Google calendars new event picker moves and flickers in landscape with software keyboard
​https://bugs.webkit.org/show_bug.cgi?id=198556

Reviewed by Wenson Hsieh.

Fix the issuse that it's really hard to create a new event using Google calendar on iPadOS with
a software keyboard enabled because tapping on date brings up software keyboard and erratically
shifts up/down the new event dialog/pane.

Add a site specific quirk to pretend these input elements have inputmode=none for now.

No new tests since this is a site specific quirk.

• page/Quirks.cpp:

(WebCore::Quirks::needsInputModeNoneImplicitly const):

10:41 PM Changeset in webkit [246098] by bshafiei@apple.com

• 2 edits in branches/safari-608.1.27-branch/Source/WebKit

Cherry-pick r246077. rdar://problem/51164741

Uploading third-party applications from /Applications needs additional syscall access
​https://bugs.webkit.org/show_bug.cgi?id=198537
<rdar://problem/51164741>

Reviewed by Brent Fulgham.

• WebProcess/com.apple.WebProcess.sb.in:

git-svn-id: ​https://svn.webkit.org/repository/webkit/trunk@246077 268f45cc-cd09-0410-ab3c-d52691b4dbfc

10:00 PM Changeset in webkit [246097] by Chris Dumez

• 4 edits in trunk

Cookies set via [WKHTTPCookieStore setCookie:] on store right after constructing WKWebView get lost
​https://bugs.webkit.org/show_bug.cgi?id=198553
<rdar://problem/51317144>

Reviewed by Geoffrey Garen.

Source/WebKit:

If you call [WKHTTPCookieStore setCookie:] right after you construct the WKWebView and before the
WebContent process has finished launching, then WebsiteDataStore::processPoolForCookieStorageOperations()
would return null, even though there is already a view/page/WebProcessProxy/WebProcessPool for this data
store. As a result, the cookie would get added to the WebsiteDataStore's m_pendingCookies but it will
not be used since we've already previously launched a network process when we constructed the web view.

The reason processPoolForCookieStorageOperations() would return null is because WebsiteDataStore::processPools()
relies on WebProcessLifetimeObserver::processes() but processes only register themselves with the
WebProcessLifetimeObservers when they have pages *and* after they are finished launching.

This patch updates processPoolForCookieStorageOperations() to fallback to iterating over all process pools
and find a process pool with a process using the current data store and which has pages. This way, even if
the process is still launching, we'll properly find its associated process pool.

• UIProcess/WebsiteData/WebsiteDataStore.cpp:

(WebKit::WebsiteDataStore::processPoolForCookieStorageOperations):

Tools:

Add API test coverage.

• TestWebKitAPI/Tests/WebKitCocoa/WKHTTPCookieStore.mm:

(-[CheckSessionCookieUIDelegate webView:runJavaScriptAlertPanelWithMessage:initiatedByFrame:completionHandler:]):
(TEST):

9:15 PM Changeset in webkit [246096] by Alan Bujtas

• 4 edits
  2 adds in trunk

[ContentChangeObserver] Gmail text editing controls require two taps
​https://bugs.webkit.org/show_bug.cgi?id=198541
<rdar://problem/51375055>

Reviewed by Simon Fraser.

Source/WebCore:

When the animation completes we should also check if the newly visible content is also clickable and report it accordingly.
When the animated content is not clickable, we need to proceed with click instead of stopping at hover.

Test: fast/events/touch/ios/content-observation/100ms-delay-10ms-transition-on-mousemove-no-clickable.html

• page/ios/ContentChangeObserver.cpp:

(WebCore::isConsideredClickable):
(WebCore::ContentChangeObserver::didFinishTransition):
(WebCore::ContentChangeObserver::adjustObservedState):
(WebCore::ContentChangeObserver::StyleChangeScope::~StyleChangeScope):
(WebCore::ContentChangeObserver::StyleChangeScope::isConsideredClickable const): Deleted. -> Turn it into a static function so that didFinishTransition could call it as well.

• page/ios/ContentChangeObserver.h:

LayoutTests:

• fast/events/touch/ios/content-observation/100ms-delay-10ms-transition-on-mousemove-no-clickable.html: Added.

8:14 PM Changeset in webkit [246095] by Michael Catanzaro

• 10 edits in trunk

Fix miscellaneous build warnings
​https://bugs.webkit.org/show_bug.cgi?id=198544

Reviewed by Don Olmstead.

Source/JavaScriptCore:

Silence -Wclass-memaccess warning in this dangerous code.

• wasm/WasmInstance.cpp:

(JSC::Wasm::Instance::Instance):

Source/WebCore:

Carefully silence -Wsign-compare warnings.

• contentextensions/DFABytecodeCompiler.cpp:

(WebCore::ContentExtensions::DFABytecodeCompiler::compile):

• inspector/InspectorCanvas.cpp:

(WebCore::InspectorCanvas::indexForData):

• xml/XSLStyleSheetLibxslt.cpp:

(WebCore::XSLStyleSheet::parseString):

Source/WebKit:

Carefully silence -Wsign-compare warnings.

• NetworkProcess/cache/NetworkCacheData.cpp:

(WebKit::NetworkCache::readOrMakeSalt):

Tools:

When converting to PRIVATE include directories, we accidentally dropped SYSTEM here. The
naming convention used here is a bit confusing: the *_SYSTEM_INCLUDE_DIRECTORIES actually
uses both SYSTEM and PRIVATE. We should probably clarify this.

• TestWebKitAPI/PlatformGTK.cmake:

7:21 PM Changeset in webkit [246094] by Jon Davis

• 2 edits in trunk/Websites/webkit.org

Improve performance of the lazy image loader
​https://bugs.webkit.org/show_bug.cgi?id=198530

Reviewed by Devin Rousso.

• wp-content/themes/webkit/scripts/global.js:

(enableScrollableTables):
(lazyLoadImages):
(findParentMenu): Deleted.
(i.m.menus.m.targetMenu.targetMenuClass.indexOf): Deleted.
(inView): Deleted.
(): Deleted.
(loadImage.else.img.onload): Deleted.
(loadImage): Deleted.
(onMovement): Deleted.
(updateImages): Deleted.

6:03 PM Changeset in webkit [246093] by youenn@apple.com

• 8 edits in trunk

getUserMedia requests should be processed sequentially in UIProcess
​https://bugs.webkit.org/show_bug.cgi?id=198430
<rdar://problem/51311420>

Reviewed by Eric Carlson.

Source/WebKit:

Before the patch, we process all incoming gum/gdm requests in parallel.
We now queueu them and process them one at a time.
This allows to take into consideration state changes triggered by one request for the next one.
In particular, if a user grants a request, this might grant the next one as well.

To implement that, we keep a reference of the current request to process.
We queue other requests happening whenever another request comes.
When the request is processed, we look at the next one in the queue.
To ensure we do not stop processing the queue for no good reason, some refactoring is done:

• queue processing happens when sending back IPC response to WebProcess.
• denyRequest/grantRequest are consistently called in the manager proxy.

• UIProcess/UserMediaPermissionRequestManagerProxy.cpp:

(WebKit::UserMediaPermissionRequestManagerProxy::invalidatePendingRequests):
Invalidate pregranted requests as well.
(WebKit::UserMediaPermissionRequestManagerProxy::denyRequest):
Renamed from userMediaAccessWasDenied to denyRequest.
This method is now consistently used whenever the manager proxy wants to deny the request.
It does the IPC to the WebProcess and triggers processing of the next request.
(WebKit::UserMediaPermissionRequestManagerProxy::grantRequest):
Renamed from userMediaAccessWasGranted to grantRequest.
(WebKit::UserMediaPermissionRequestManagerProxy::finishGrantingRequest):
This method is now consistently used whenever the manager proxy wants to deny the request.
It does the IPC to the WebProcess and triggers processing of the next request.
(WebKit::UserMediaPermissionRequestManagerProxy::rejectionTimerFired):
We now keep a queue of request instead of request IDs to make the deny code path more consistent.
(WebKit::UserMediaPermissionRequestManagerProxy::requestUserMediaPermissionForFrame):
(WebKit::UserMediaPermissionRequestManagerProxy::processNextUserMediaRequestIfNeeded):
(WebKit::UserMediaPermissionRequestManagerProxy::startProcessingUserMediaPermissionRequest):
(WebKit::UserMediaPermissionRequestManagerProxy::processUserMediaPermissionRequest):
To make sure we do not process a different request, we keep a pointer to the request and compare it with the current media request.
(WebKit::UserMediaPermissionRequestManagerProxy::processUserMediaPermissionInvalidRequest):
(WebKit::UserMediaPermissionRequestManagerProxy::processUserMediaPermissionValidRequest):
(WebKit::UserMediaPermissionRequestManagerProxy::viewIsBecomingVisible):

• UIProcess/UserMediaPermissionRequestManagerProxy.h:

(WebKit::UserMediaPermissionRequestManagerProxy::denyRequest):

• UIProcess/UserMediaPermissionRequestProxy.cpp:

(WebKit::setDeviceAsFirst):
(WebKit::UserMediaPermissionRequestProxy::allow):
(WebKit::UserMediaPermissionRequestProxy::deny):

• UIProcess/UserMediaPermissionRequestProxy.h:

Tools:

• TestWebKitAPI/Tests/WebKit/GetUserMediaReprompt.mm:

(-[GetUserMediaRepromptUIDelegate _webView:requestMediaCaptureAuthorization:decisionHandler:]):
(TestWebKitAPI::TEST):

• TestWebKitAPI/Tests/WebKit/getUserMedia.html:

5:40 PM Changeset in webkit [246092] by Keith Rollin

• 2 edits in trunk/Source/WebCore

Fix 64-bit vs 32-bit mismatch in ISOFairPlayStreamingPsshBox.cpp
​https://bugs.webkit.org/show_bug.cgi?id=198539
<rdar://problem/51410358>

Reviewed by Alex Christensen.

Both ISOFairPlayStreamingKeyAssetIdBox and
ISOFairPlayStreamingKeyContextBox have Vector<> data members. The
parse() members of these classes call Vector<>::resize() on these
members. In both cases, the type of the parameter passed is a
uint64_t. However, resize() takes a size_t. On some platforms, size_t
is a 32-bit value, leading to a compile-time type mismatch error. Fix
this by changing the type of the value passed to parse() into a
size_t.

No new tests -- no new functionality.

• platform/graphics/avfoundation/ISOFairPlayStreamingPsshBox.cpp:

(WebCore::ISOFairPlayStreamingKeyAssetIdBox::parse):
(WebCore::ISOFairPlayStreamingKeyContextBox::parse):

5:26 PM Changeset in webkit [246091] by Keith Rollin

• 2 edits in trunk/Source/WebCore

Fix 64-bit vs 32-bit mismatch in TileController.cpp
​https://bugs.webkit.org/show_bug.cgi?id=198540
<rdar://problem/51410851>

Reviewed by Alex Christensen.

TileController::blankPixelCountForTiles calculates its result as a
uint64_t, but returns it as an unsigned. The former is a 64-bit value,
while the latter can be a 32-bit value on some platforms. This
mismatch can lead to a compile-time error. Fix this by explicitly
casting the 64-bit value to an "unsigned".

No new tests -- no new functionality.

• platform/graphics/ca/TileController.cpp:

(WebCore::TileController::blankPixelCountForTiles):

5:23 PM Changeset in webkit [246090] by commit-queue@webkit.org

• 7 edits in trunk/Source/WebKit

Unreviewed, rolling out r246086.
​https://bugs.webkit.org/show_bug.cgi?id=198549

Causing Internal build failures (Requested by ShawnRoberts on
#webkit).

Reverted changeset:

"Remove some unused selection code"
​https://bugs.webkit.org/show_bug.cgi?id=198451
​https://trac.webkit.org/changeset/246086

5:11 PM Changeset in webkit [246089] by youenn@apple.com

• 3 edits in trunk/LayoutTests

Layout test landed flaky in 245873 [ Release ] http/wpt/service-workers/service-worker-networkprocess-crash.html is a flaky failure
​https://bugs.webkit.org/show_bug.cgi?id=198435
<rdar://problem/51314295>

Reviewed by Alex Christensen.

Make the test more robust by retrying the null test more than once.

• http/wpt/service-workers/service-worker-networkprocess-crash-expected.txt:
• http/wpt/service-workers/service-worker-networkprocess-crash.html:

4:44 PM Changeset in webkit [246088] by timothy_horton@apple.com

• 2 edits in trunk/Source/WebKit

Turn on background color estimation for all link indicators
​https://bugs.webkit.org/show_bug.cgi?id=198547
<rdar://problem/51140196>

Reviewed by Dean Jackson.

• WebProcess/WebPage/ios/WebPageIOS.mm:

(WebKit::WebPage::computeAndSendEditDragSnapshot):
(WebKit::linkIndicatorPositionInformation):

4:31 PM Changeset in webkit [246087] by Chris Dumez

• 3 edits
  3 adds in trunk

Crash when calling XMLHttpRequest.setRequestHeader() in a worker
​https://bugs.webkit.org/show_bug.cgi?id=198534
<rdar://problem/51393912>

Reviewed by Alex Christensen.

Source/WebCore:

Make sure the script execution context is a Document because calling document()
to get the settings.

Test: fast/workers/worker-xhr-setRequestHeader.html

• xml/XMLHttpRequest.cpp:

(WebCore::XMLHttpRequest::setRequestHeader):

LayoutTests:

Add layout test coverage.

• fast/workers/resources/worker-xhr-setRequestHeader.js: Added.
• fast/workers/worker-xhr-setRequestHeader-expected.txt: Added.
• fast/workers/worker-xhr-setRequestHeader.html: Added.

4:27 PM Changeset in webkit [246086] by timothy_horton@apple.com

• 7 edits in trunk/Source/WebKit

Remove some unused selection code
​https://bugs.webkit.org/show_bug.cgi?id=198451

Reviewed by Wenson Hsieh.

• Platform/spi/ios/UIKitSPI.h:
• Shared/ios/GestureTypes.h:
• UIProcess/ios/WKContentViewInteraction.mm:

(toGestureType):
(toUIWKGestureType):

• UIProcess/ios/WKPDFView.mm:

(-[WKPDFView actionSheetAssistant:shareElementWithURL:rect:]):

• WebProcess/WebPage/WebPage.h:
• WebProcess/WebPage/ios/WebPageIOS.mm:

(WebKit::WebPage::selectWithGesture):
(WebKit::WebPage::selectTextWithGranularityAtPoint):
(WebKit::canShrinkToTextSelection): Deleted.
(WebKit::hasCustomLineHeight): Deleted.
(WebKit::WebPage::rangeForWebSelectionAtPosition): Deleted.

3:56 PM Changeset in webkit [246085] by ddkilzer@apple.com

• 2 edits in trunk/Tools

REGRESSION (r244557): Leak of WKNSString in WTR::runOpenPanel() while running WebKit layout tests
<​https://webkit.org/b/198538>
<rdar://problem/51407719>

Reviewed by Darin Adler.

• WebKitTestRunner/TestController.cpp:

(WTR::runOpenPanel): Use adoptWK() to fix the leak.

3:08 PM Changeset in webkit [246084] by ysuzuki@apple.com

• 2 edits in trunk/Source/JavaScriptCore

Unreviewed, update exception scope for putByIndexBeyondVectorLength
​https://bugs.webkit.org/show_bug.cgi?id=198477

• runtime/JSObject.cpp:

(JSC::JSObject::putByIndexBeyondVectorLength):

2:53 PM Changeset in webkit [246083] by Antti Koivisto

• 9 edits
  12 adds in trunk

Sticky positioning is jumpy in many overflow cases
​https://bugs.webkit.org/show_bug.cgi?id=198532
<rdar://problem/51400532>

Reviewed by Simon Fraser.

Source/WebCore:

Tests: scrollingcoordinator/ios/sticky-overflow-no-stacking-context-no-stick-1.html

scrollingcoordinator/ios/sticky-overflow-no-stacking-context-no-stick-2.html
scrollingcoordinator/ios/sticky-overflow-no-stacking-context-stick-1.html
scrollingcoordinator/ios/sticky-overflow-no-stacking-context-stick-2.html
scrollingcoordinator/ios/sticky-overflow-stacking-context-no-stick.html
scrollingcoordinator/ios/sticky-overflow-stacking-context-stick.html

• page/scrolling/ScrollingTree.cpp:

(WebCore::ScrollingTree::notifyRelatedNodesAfterScrollPositionChange):
(WebCore::ScrollingTree::notifyRelatedNodesRecursive):

Simplify for relatedNodeScrollPositionDidChange removal.

• page/scrolling/ScrollingTree.h:
• page/scrolling/ScrollingTreeNode.cpp:

(WebCore::ScrollingTreeNode::relatedNodeScrollPositionDidChange): Deleted.

• page/scrolling/ScrollingTreeNode.h:
• page/scrolling/cocoa/ScrollingTreeFixedNode.mm:

(WebCore::ScrollingTreeFixedNode::applyLayerPositions):

• page/scrolling/cocoa/ScrollingTreePositionedNode.h:
• page/scrolling/cocoa/ScrollingTreePositionedNode.mm:

(WebCore::ScrollingTreePositionedNode::scrollOffsetSinceLastCommit const):

Factor into a function.

(WebCore::ScrollingTreePositionedNode::applyLayerPositions):
(WebCore::ScrollingTreePositionedNode::relatedNodeScrollPositionDidChange): Deleted.

We can't bail out based on changed node as that makes us compute different positions based on what the change root is.
Since all relatedNodeScrollPositionDidChange functions now always simply call applyLayerPositions we can remove the whole thing.

• page/scrolling/cocoa/ScrollingTreeStickyNode.mm:

(WebCore::ScrollingTreeStickyNode::applyLayerPositions):

Implement taking into account that the containing scroller may not be our ancestor.

LayoutTests:

• scrollingcoordinator/ios/sticky-overflow-no-stacking-context-no-stick-1-expected.html: Added.
• scrollingcoordinator/ios/sticky-overflow-no-stacking-context-no-stick-1.html: Added.
• scrollingcoordinator/ios/sticky-overflow-no-stacking-context-no-stick-2-expected.html: Added.
• scrollingcoordinator/ios/sticky-overflow-no-stacking-context-no-stick-2.html: Added.
• scrollingcoordinator/ios/sticky-overflow-no-stacking-context-stick-1-expected.html: Added.
• scrollingcoordinator/ios/sticky-overflow-no-stacking-context-stick-1.html: Added.
• scrollingcoordinator/ios/sticky-overflow-no-stacking-context-stick-2-expected.html: Added.
• scrollingcoordinator/ios/sticky-overflow-no-stacking-context-stick-2.html: Added.
• scrollingcoordinator/ios/sticky-overflow-stacking-context-no-stick-expected.html: Added.
• scrollingcoordinator/ios/sticky-overflow-stacking-context-no-stick.html: Added.
• scrollingcoordinator/ios/sticky-overflow-stacking-context-stick-expected.html: Added.
• scrollingcoordinator/ios/sticky-overflow-stacking-context-stick.html: Added.

2:40 PM Changeset in webkit [246082] by aakash_jain@apple.com

• 2 edits in trunk/Tools

[ews-app] Add authentication while fetching bugs
​https://bugs.webkit.org/show_bug.cgi?id=198415
<rdar://problem/51298710>

Reviewed by Jonathan Bedard.

• BuildSlaveSupport/ews-app/ews/common/bugzilla.py:

(Bugzilla._fetch_attachment_json): Use api_key if configured in environment variable.
(BugzillaBeautifulSoup.authenticate): Method to authenticate, logic copied from webkitpy/common/net/bugzilla/bugzilla.py
(BugzillaBeautifulSoup._load_query):

2:27 PM Changeset in webkit [246081] by Kocsen Chung

• 7 edits in branches/safari-608.1.27-branch/Source

Versioning.

2:27 PM Changeset in webkit [246080] by aakash_jain@apple.com

• 2 edits in trunk/Tools

[ews-build] Do not display unnecessary steps in the Buildbot build page UI
​https://bugs.webkit.org/show_bug.cgi?id=198218
<rdar://problem/51104544>

Reviewed by Jonathan Bedard.

• BuildSlaveSupport/ews-build/steps.py:

1:54 PM Changeset in webkit [246079] by sihui_liu@apple.com

• 9 edits in trunk

WKWebsiteDataStore API fails to fetch web storage data for non-persistent data store
​https://bugs.webkit.org/show_bug.cgi?id=198317
Source/WebKit:

<rdar://problem/51244662>

Reviewed by Alex Christensen.

Use LocalStorageNameSpace instead of SessionStorageNameSpace for localStorage in ephemeral session or
websiteDataStore.

Reland r245943 as test has been fixed in r246012.

• NetworkProcess/WebStorage/StorageManager.cpp:

(WebKit::StorageManager::StorageArea::isEphemeral const):
(WebKit::StorageManager::StorageArea::removeListener):
(WebKit::StorageManager::StorageArea::setItems):
(WebKit::StorageManager::StorageArea::openDatabaseAndImportItemsIfNeeded const):
(WebKit::StorageManager::LocalStorageNamespace::~LocalStorageNamespace):
(WebKit::StorageManager::LocalStorageNamespace::getOrCreateStorageArea):
(WebKit::StorageManager::LocalStorageNamespace::clearAllStorageAreas):
(WebKit::StorageManager::LocalStorageNamespace::ephemeralOrigins const):
(WebKit::StorageManager::LocalStorageNamespace::cloneTo):
(WebKit::StorageManager::StorageManager):
(WebKit::StorageManager::cloneSessionStorageNamespace):
(WebKit::StorageManager::getLocalStorageOrigins):
(WebKit::StorageManager::getLocalStorageOriginDetails):
(WebKit::StorageManager::deleteLocalStorageEntriesForOrigin):
(WebKit::StorageManager::deleteLocalStorageOriginsModifiedSince):
(WebKit::StorageManager::deleteLocalStorageEntriesForOrigins):
(WebKit::StorageManager::createLocalStorageMap):
(WebKit::StorageManager::createTransientLocalStorageMap):
(WebKit::StorageManager::createSessionStorageMap):
(WebKit::StorageManager::destroyStorageMap):
(WebKit::StorageManager::getValues):
(WebKit::StorageManager::setItem):
(WebKit::StorageManager::removeItem):
(WebKit::StorageManager::clear):
(WebKit::StorageManager::suspend):
(WebKit::StorageManager::resume):
(WebKit::StorageManager::StorageArea::isSessionStorage const): Deleted.

• NetworkProcess/WebStorage/StorageManager.h:

(): Deleted.

• WebProcess/WebStorage/StorageAreaMap.cpp:

(WebKit::StorageAreaMap::dispatchStorageEvent):
(WebKit::StorageAreaMap::dispatchSessionStorageEvent):
(WebKit::StorageAreaMap::connect):

• WebProcess/WebStorage/StorageNamespaceImpl.cpp:

(WebKit::StorageNamespaceImpl::createEphemeralLocalStorageNamespace):
(WebKit::StorageNamespaceImpl::createLocalStorageNamespace):

• WebProcess/WebStorage/StorageNamespaceImpl.h:
• WebProcess/WebStorage/WebStorageNamespaceProvider.cpp:

(WebKit::WebStorageNamespaceProvider::createLocalStorageNamespace):

Tools:

Reviewed by Alex Christensen.

• TestWebKitAPI/Tests/WebKitCocoa/WKWebsiteDatastore.mm:

(TestWebKitAPI::TEST):

1:42 PM Changeset in webkit [246078] by Alan Coon

• 1 copy in tags/Safari-608.1.27.2

Tag Safari-608.1.27.2.

12:37 PM Changeset in webkit [246077] by achristensen@apple.com

• 2 edits in trunk/Source/WebKit

Uploading third-party applications from /Applications needs additional syscall access
​https://bugs.webkit.org/show_bug.cgi?id=198537
<rdar://problem/51164741>

Reviewed by Brent Fulgham.

• WebProcess/com.apple.WebProcess.sb.in:

12:15 PM Changeset in webkit [246076] by commit-queue@webkit.org

• 9 edits
  1 copy
  1 add in trunk

[WinCairo] Implement cpu and memory measuring functions.
​https://bugs.webkit.org/show_bug.cgi?id=198466

Patch by Takashi Komori <​Takashi.Komori@sony.com> on 2019-06-04
Reviewed by Don Olmstead.

.:

• Source/cmake/OptionsWin.cmake:

Source/WebCore:

Tests: inspector/memory/tracking.html

inspector/cpu-profiler/tracking.html

• PlatformWinCairo.cmake:
• page/ResourceUsageThread.h:
• page/win/ResourceUsageOverlayWin.cpp: Copied from Tools/WebKitTestRunner/InjectedBundle/win/TestRunnerWin.cpp.

(WebCore::ResourceUsageOverlay::platformInitialize):
(WebCore::ResourceUsageOverlay::platformDestroy):

• page/win/ResourceUsageThreadWin.cpp: Added.

(WebCore::ResourceUsageThread::platformSaveStateBeforeStarting):
(WebCore::fileTimeToUint64):
(WebCore::getCurrentCpuTime):
(WebCore::cpuUsage):
(WebCore::memoryUsage):
(WebCore::ResourceUsageThread::platformCollectCPUData):
(WebCore::ResourceUsageThread::platformCollectMemoryData):

Tools:

• WebKitTestRunner/InjectedBundle/win/TestRunnerWin.cpp:

(WTR::TestRunner::inspectorTestStubURL):

LayoutTests:

• platform/wincairo/TestExpectations:

12:06 PM Changeset in webkit [246075] by Tadeu Zagallo

• 3 edits
  1 add in trunk

Argument elimination should check transitive dependents for interference
​https://bugs.webkit.org/show_bug.cgi?id=198520
<rdar://problem/50863343>

Reviewed by Filip Pizlo.

JSTests:

• stress/argument-elimination-inline-rest-past-kill.js: Added.

(f2):
(f3):

Source/JavaScriptCore:

Consider the following program:

a: CreateRest
-->

b: CreateRest

<--
c: Spread(@a)
d: Spread(@b)
e: NewArrayWithSpread(@a, @b)
f: KillStack(locX)
g: LoadVarargs(@e)

Suppose @b reads locX, then we cannot transform @e to PhantomNewArraySpread, since that would
move the stack access from @b into @g, and that stack location is no longer valid at that point.

We fix that by computing a set of all inline call frames that any argument elimination candidate
depends on and checking each of them for interference in eliminateCandidatesThatInterfere.

• dfg/DFGArgumentsEliminationPhase.cpp:

12:00 PM Changeset in webkit [246074] by commit-queue@webkit.org

• 4 edits in trunk

[Pointer Events] Only allow pointer capture if the pointer is in the active buttons state
​https://bugs.webkit.org/show_bug.cgi?id=198479

Patch by Antoine Quint <Antoine Quint> on 2019-06-04
Reviewed by Dean Jackson.

LayoutTests/imported/w3c:

Mark WPT progression.

• web-platform-tests/pointerevents/pointerevent_setpointercapture_inactive_button_mouse-expected.txt:

Source/WebCore:

The Pointer Events specification says that pointer capture can only be engaged provided the pointer is
in the active buttons state, which means that it has dispatched a "pointerdown" event more recently than
it has a "pointerup" event.

This is tested by web-platform-tests/pointerevents/pointerevent_setpointercapture_inactive_button_mouse.html.

That test showed a few issues that this patch addresses. First, we would update the pointerIsPressed state to
"true" only after a "pointerdown" event had been dispatched. This is incorrect since setPointerCapture() can,
and is likely to, be called during handling of a "pointerdown" event. So we now call pointerEventWillBeDispatched()
prior to dispatching a PointerEvent with a mouse type, which we only did previously for a PointerEvent with a
touch or pen type. If the event is "pointerdown", we set "pointerIsPressed" to true on the CapturingData object
matching the given pointer, and to false if the event is "pointerup".

Finally, we must also ensure that "pointerIsPressed" is set to true when creating CapturingData for a PointerEvent
with a touch or pen type since these types of pointer events implictly set capture.

• page/PointerCaptureController.cpp:

(WebCore::PointerCaptureController::setPointerCapture):
(WebCore::PointerCaptureController::dispatchEvent):
(WebCore::PointerCaptureController::pointerEventWillBeDispatched):
(WebCore::PointerCaptureController::pointerEventWasDispatched):

11:27 AM Changeset in webkit [246073] by ysuzuki@apple.com

• 25 edits
  2 copies
  1 delete in trunk/Source/JavaScriptCore

[JSC] InferredValue should not be a JSCell
​https://bugs.webkit.org/show_bug.cgi?id=198407

Reviewed by Filip Pizlo.

Allocating InferredValue as a JSCell is too costly in terms of memory. Gmail has 90000 FunctionExecutables. And each gets
InferredValue, which takes 32 bytes. So it takes 2.7 MB memory footprint.

In this patch, we introduce a new container InferredValue<>. Which is similar to WriteBarrier<> container, but it replaces
the existing InferredValue cells with one pointer size field. The implementation of InferredValue<> is similar to
InlineWatchpointSet. But we encode JSCell* too to the pointer data of InlineWatchpointSet. So sizeof(InferredValue<>) is one
pointer size while it keeps Watchpoint feature and JSCell holder feature.

InferredValue<> needs validation in GC finalize phase. So this patch also makes SymbolTable Iso-allocated.

• JavaScriptCore.xcodeproj/project.pbxproj:
• Sources.txt:
• bytecode/ObjectAllocationProfileInlines.h:

(JSC::ObjectAllocationProfileBase<Derived>::initializeProfile):

• bytecode/Watchpoint.h:
• dfg/DFGAbstractInterpreterInlines.h:

(JSC::DFG::AbstractInterpreter<AbstractStateType>::executeEffects):

• dfg/DFGByteCodeParser.cpp:

(JSC::DFG::ByteCodeParser::get):
(JSC::DFG::ByteCodeParser::parseBlock):

• dfg/DFGClobberize.h:

(JSC::DFG::clobberize):

• dfg/DFGClobbersExitState.cpp:

(JSC::DFG::clobbersExitState):

• dfg/DFGDesiredWatchpoints.cpp:

(JSC::DFG::SymbolTableAdaptor::add):
(JSC::DFG::FunctionExecutableAdaptor::add):
(JSC::DFG::DesiredWatchpoints::addLazily):
(JSC::DFG::DesiredWatchpoints::reallyAdd):
(JSC::DFG::DesiredWatchpoints::areStillValid const):
(JSC::DFG::DesiredWatchpoints::dumpInContext const):
(JSC::DFG::InferredValueAdaptor::add): Deleted.

• dfg/DFGDesiredWatchpoints.h:

(JSC::DFG::SymbolTableAdaptor::hasBeenInvalidated):
(JSC::DFG::SymbolTableAdaptor::dumpInContext):
(JSC::DFG::FunctionExecutableAdaptor::hasBeenInvalidated):
(JSC::DFG::FunctionExecutableAdaptor::dumpInContext):
(JSC::DFG::DesiredWatchpoints::isWatched):
(JSC::DFG::InferredValueAdaptor::hasBeenInvalidated): Deleted.
(JSC::DFG::InferredValueAdaptor::dumpInContext): Deleted.

• dfg/DFGObjectAllocationSinkingPhase.cpp:
• dfg/DFGSpeculativeJIT.cpp:

(JSC::DFG::SpeculativeJIT::compileNewFunction):
(JSC::DFG::SpeculativeJIT::compileCreateActivation):

• ftl/FTLLowerDFGToB3.cpp:

(JSC::FTL::DFG::LowerDFGToB3::compileCreateActivation):
(JSC::FTL::DFG::LowerDFGToB3::compileNewFunction):

• heap/Heap.cpp:

(JSC::Heap::finalizeUnconditionalFinalizers):

• runtime/FunctionExecutable.cpp:

(JSC::FunctionExecutable::FunctionExecutable):
(JSC::FunctionExecutable::finishCreation):
(JSC::FunctionExecutable::visitChildren):

• runtime/FunctionExecutable.h:
• runtime/FunctionExecutableInlines.h: Copied from Source/JavaScriptCore/runtime/InferredValueInlines.h.

(JSC::FunctionExecutable::finalizeUnconditionally):

• runtime/InferredValue.cpp: Removed.
• runtime/InferredValue.h:

(JSC::InferredValue::inferredValue):
(JSC::InferredValue::InferredValue):
(JSC::InferredValue::~InferredValue):
(JSC::InferredValue::stateOnJSThread const):
(JSC::InferredValue::state const):
(JSC::InferredValue::hasBeenInvalidated const):
(JSC::InferredValue::isStillValid const):
(JSC::InferredValue::invalidate):
(JSC::InferredValue::isBeingWatched const):
(JSC::InferredValue::notifyWrite):
(JSC::InferredValue::isThin):
(JSC::InferredValue::isFat):
(JSC::InferredValue::decodeState):
(JSC::InferredValue::encodeState):
(JSC::InferredValue::isThin const):
(JSC::InferredValue::isFat const):
(JSC::InferredValue::fat):
(JSC::InferredValue::fat const):
(JSC::InferredValue::inflate):
(JSC::InferredValue<JSCellType>::InferredValueWatchpointSet::notifyWriteSlow):
(JSC::InferredValue<JSCellType>::notifyWriteSlow):
(JSC::InferredValue<JSCellType>::add):
(JSC::InferredValue<JSCellType>::inflateSlow):
(JSC::InferredValue<JSCellType>::freeFat):

• runtime/InferredValueInlines.h:

(JSC::InferredValue<JSCellType>::finalizeUnconditionally):
(JSC::InferredValue::finalizeUnconditionally): Deleted.

• runtime/JSFunctionInlines.h:

(JSC::JSFunction::createWithInvalidatedReallocationWatchpoint):

• runtime/JSSymbolTableObject.h:

(JSC::JSSymbolTableObject::setSymbolTable):

• runtime/SymbolTable.cpp:

(JSC::SymbolTable::finishCreation):
(JSC::SymbolTable::visitChildren):

• runtime/SymbolTable.h:
• runtime/SymbolTableInlines.h: Copied from Source/JavaScriptCore/runtime/InferredValueInlines.h.

(JSC::SymbolTable::finalizeUnconditionally):

• runtime/VM.cpp:

(JSC::VM::VM):

• runtime/VM.h:

10:59 AM Changeset in webkit [246072] by Keith Rollin

• 2 edits in trunk/Source/WebCore

Fix 32-bit/64-bit mismatch in PointerCaptureController::elementWasRemoved
​https://bugs.webkit.org/show_bug.cgi?id=198501
<rdar://problem/51370464>

Reviewed by Chris Dumez.

keyAndValue.key is assigned to pointerId. KeyAndValue.key is a
int64_t, whereas pointerId is a PointerID, aka int32_t. This mismatch
is normally just a warning, but breaks builds where warnings are
treated as errors.

This issue is not encountered in most builds because the warning is
disabled in the majority of build configurations. But there are some
where the warning is not disabled, and so those builds break.

Address this conversion error/warning by explicitly casting
keyAndValue.key to a PointerID (and adding a debug check to make sure
the cast is OK).

No new tests -- no new functionality.

• page/PointerCaptureController.cpp:

(WebCore::PointerCaptureController::elementWasRemoved):

10:56 AM Changeset in webkit [246071] by Tadeu Zagallo

• 4 edits
  1 add in trunk

Argument elimination should check for negative indices in GetByVal
​https://bugs.webkit.org/show_bug.cgi?id=198302
<rdar://problem/51188095>

Reviewed by Filip Pizlo.

JSTests:

• stress/eliminate-arguments-negative-rest-access.js: Added.

(inlinee):
(opt):

Source/JavaScriptCore:

In DFG::ArgumentEliminationPhase, the index is treated as unsigned, but there's no check
for overflow in the addition. In compileGetMyArgumentByVal, there's a check for overflow,
but the index is treated as signed, resulting in an index lower than numberOfArgumentsToSkip.

• dfg/DFGArgumentsEliminationPhase.cpp:
• ftl/FTLLowerDFGToB3.cpp:

(JSC::FTL::DFG::LowerDFGToB3::compileGetMyArgumentByVal):

10:45 AM Changeset in webkit [246070] by graouts@webkit.org

• 14 edits
  4 adds in trunk

[Pointer Events] Expose navigator.maxTouchPoints
​https://bugs.webkit.org/show_bug.cgi?id=198468
<rdar://problem/51273029>

Reviewed by Chris Dumez.

Source/WebCore:

Expose the navigator.maxTouchPoints property when Pointer Events are enabled both at compile-time and run-time.
We return a canned value for this on iOS touch-enabled devices that matches the number of simultaneous touches
supported by the system, which is 5. In fact, iPad support more simultaneous touches, but it doesn't seem worthy
to expose this level of granularity due to fingerprinting practices. In practice, what really matters is returning
0, 1 or more than 1 for this value to identify multi-touch support.

Test: js/dom/navigator-maxtouchpoints.html

• CMakeLists.txt:
• DerivedSources-input.xcfilelist:
• DerivedSources-output.xcfilelist:
• DerivedSources.make:
• Sources.txt:
• WebCore.xcodeproj/project.pbxproj:
• dom/NavigatorMaxTouchPoints.idl: Added.
• page/Navigator.idl:
• page/Navigator.h:

(WebCore::Navigator::maxTouchPoints const):

LayoutTests:

• js/dom/navigator-maxtouchpoints-expected.txt: Added.
• js/dom/navigator-maxtouchpoints.html: Added.
• platform/mac-highsierra-wk1/fast/dom/navigator-detached-no-crash-expected.txt:
• platform/mac-highsierra/fast/dom/navigator-detached-no-crash-expected.txt:
• platform/mac-wk1/fast/dom/navigator-detached-no-crash-expected.txt:
• platform/mac-wk2/fast/dom/navigator-detached-no-crash-expected.txt:
• platform/win/js/dom/navigator-maxtouchpoints-expected.txt: Added.

10:09 AM Changeset in webkit [246069] by Chris Dumez

• 3 edits in trunk/Source/WebKit

Lazily construct the NetworkHTTPSUpgradeChecker
​https://bugs.webkit.org/show_bug.cgi?id=198500

Reviewed by Alex Christensen.

Lazily construct the NetworkHTTPSUpgradeChecker since the feature is off by default and this
avoids unnecessarily opening its database in the common case.

• NetworkProcess/NetworkProcess.h:
• NetworkProcess/cocoa/NetworkProcessCocoa.mm:

(WebKit::NetworkProcess::networkHTTPSUpgradeChecker):

9:11 AM Changeset in webkit [246068] by youenn@apple.com

• 2 edits in trunk/Source/WebKit

REGRESSION (r245913) [ Debug ] ASSERTION FAILED: m_swConnectionsByIdentifier.contains(connection.serverConnectionIdentifier()) Layout Test http/wpt/service-workers/update-service-worker.https.html is a flaky crash
​https://bugs.webkit.org/show_bug.cgi?id=198434
<rdar://problem/51313917>

Reviewed by Alex Christensen.

Iterate through the connectionID-based connection map instead of the sessionID-based map to notify them their connection is lost.

• WebProcess/Network/NetworkProcessConnection.cpp:

(WebKit::NetworkProcessConnection::didClose):

8:52 AM Changeset in webkit [246067] by Alan Bujtas

• 4 edits in trunk/Source/WebCore

[LFC][IFC] Decouple float placement and line shrinking
​https://bugs.webkit.org/show_bug.cgi?id=198528
<rdar://problem/51397638>

Reviewed by Antti Koivisto.

In LineLayout::placeInlineItems() float handling should be only about shrinking the current line, the actual
float placement should happen later when we construct the the display boxes/runs. It enables the preferred width
computation to call placeInlineItems() to gather line widths without accidentally mutating the layout context.

• layout/inlineformatting/InlineFormattingContext.h:
• layout/inlineformatting/InlineFormattingContextLineLayout.cpp:

(WebCore::Layout::InlineFormattingContext::LineLayout::placeInlineItems const):
(WebCore::Layout::InlineFormattingContext::LineLayout::layout const):
(WebCore::Layout::InlineFormattingContext::LineLayout::createDisplayRuns const):
(WebCore::Layout::InlineFormattingContext::LineLayout::handleFloat const): Deleted.

• layout/inlineformatting/InlineItem.h:

8:49 AM Changeset in webkit [246066] by Alan Bujtas

• 4 edits in trunk/Source/WebCore

[LFC][IFC] Add hard line break handling to LineBreaker
​https://bugs.webkit.org/show_bug.cgi?id=198503
<rdar://problem/51373482>

Reviewed by Antti Koivisto.

LineBreaker should simply return BreakingContext::Keep with the breaking opportunity of yes.

• layout/inlineformatting/InlineFormattingContextLineLayout.cpp:

(WebCore::Layout::InlineFormattingContext::LineLayout::placeInlineItems const):

• layout/inlineformatting/InlineLineBreaker.cpp:

(WebCore::Layout::LineBreaker::breakingContext):
(WebCore::Layout::LineBreaker::wordBreakingBehavior const):
(WebCore::Layout::LineBreaker::isAtBreakingOpportunity):

• layout/inlineformatting/InlineLineBreaker.h:

8:48 AM Changeset in webkit [246065] by Alan Bujtas

• 4 edits in trunk/Source/WebCore

[LFC][IFC] Remove InlineItem::width
​https://bugs.webkit.org/show_bug.cgi?id=198502
<rdar://problem/51371744>

Reviewed by Antti Koivisto.

InlineItems are supposd to work across subsequent layouts (and in preferred width computation as well) so they should
not hold on to layout information (run width). This would not work with split runs either.

• layout/inlineformatting/InlineFormattingContext.h:
• layout/inlineformatting/InlineFormattingContextLineLayout.cpp:

(WebCore::Layout::UncommittedContent::runs):
(WebCore::Layout::UncommittedContent::isEmpty const):
(WebCore::Layout::UncommittedContent::size const):
(WebCore::Layout::UncommittedContent::add):
(WebCore::Layout::UncommittedContent::reset):
(WebCore::Layout::InlineFormattingContext::LineLayout::placeInlineItems const):
(WebCore::Layout::InlineFormattingContext::LineLayout::computedIntrinsicWidth const):
(WebCore::Layout::InlineFormattingContext::LineLayout::createDisplayRuns const):
(): Deleted.
(WebCore::Layout::InlineFormattingContext::LineLayout::commitInlineItemToLine const): Deleted.

• layout/inlineformatting/InlineItem.h:

(WebCore::Layout::InlineItem::style const):
(): Deleted.
(WebCore::Layout::InlineItem::setWidth): Deleted.
(WebCore::Layout::InlineItem::width const): Deleted.

8:46 AM Changeset in webkit [246064] by Chris Dumez

• 2 edits in trunk/Source/WebKit

[iOS] UIProcess' background task expiration handler may get called after the app is foreground again
​https://bugs.webkit.org/show_bug.cgi?id=198380
<rdar://problem/49762471>

Reviewed by Geoff Garen.

UIProcess' background task expiration handler may get called after the app is foreground again. When
this happens, we already have a foreground assertion on behalf of the WebContent process, and the view
is visible. We would send the WillSuspendImminently IPC to the WebContent process, which would freeze
its layers, even though it is visible on screen.

To address the issue, we now check if the app is visible in the expiration handler. If it is visible,
we do not notify clients of imminent suspension. Instead, we end the background task right away and
call _updateBackgroundTask asynchronously to start a new background task if necessary.

• UIProcess/ios/ProcessAssertionIOS.mm:

(-[WKProcessAssertionBackgroundTaskManager _updateBackgroundTask]):

8:26 AM Changeset in webkit [246063] by Alan Bujtas

• 4 edits in trunk/Source/WebCore

[LFC][IFC] Move run width measuring out of LineBreaker
​https://bugs.webkit.org/show_bug.cgi?id=198491
<rdar://problem/51363554>

Reviewed by Antti Koivisto.

LineBreaker should not need to deal with measuring runs.
This is also in preparation for removing InlineItem::width().

• layout/inlineformatting/InlineFormattingContextLineLayout.cpp:

(WebCore::Layout::inlineItemWidth):
(WebCore::Layout::InlineFormattingContext::LineLayout::placeInlineItems const):
(WebCore::Layout::InlineFormattingContext::LineLayout::computedIntrinsicWidth const):

• layout/inlineformatting/InlineLineBreaker.cpp:

(WebCore::Layout::LineBreaker::breakingContext):
(WebCore::Layout::LineBreaker::LineBreaker): Deleted.
(WebCore::Layout::LineBreaker::runWidth const): Deleted.
(WebCore::Layout::LineBreaker::textWidth const): Deleted.

• layout/inlineformatting/InlineLineBreaker.h:

7:54 AM Changeset in webkit [246062] by Alan Bujtas

• 4 edits in trunk/Source/WebCore

[LFC][IFC] Remove redundant InlineItem::width() calls.
​https://bugs.webkit.org/show_bug.cgi?id=198489
<rdar://problem/51360390>

Reviewed by Antti Koivisto.

This is in preparation for removing InlineItem::width().

• layout/inlineformatting/InlineFormattingContextLineLayout.cpp:

(WebCore::Layout::InlineFormattingContext::LineLayout::handleFloat const):
(WebCore::Layout::InlineFormattingContext::LineLayout::commitInlineItemToLine const):

• layout/inlineformatting/InlineLine.cpp:

(WebCore::Layout::Line::appendNonBreakableSpace):
(WebCore::Layout::Line::appendInlineContainerStart):
(WebCore::Layout::Line::appendInlineContainerEnd):

• layout/inlineformatting/InlineLine.h:

7:34 AM Changeset in webkit [246061] by commit-queue@webkit.org

• 15 edits
  4 adds in trunk

The "mouseenter" and "pointerenter" events are fired from the bottom up
​https://bugs.webkit.org/show_bug.cgi?id=198036
<rdar://problem/50940350>

Patch by Antoine Quint <Antoine Quint> on 2019-06-04
Reviewed by Darin Adler.

Source/WebCore:

Ensure "mouseenter" and "pointerenter" events are dispatched from the bottom up to match the UI Events spec
at ​https://w3c.github.io/uievents/#events-mouseevent-event-order. We also fix the issue where "pointerevent"
and "pointerleave" events were dispatched as bubbling events on iOS which is not correct and was caught by the
new iOS test.

Tests: pointerevents/ios/enter-leave-order.html

pointerevents/mouse/enter-leave-order.html

• dom/ios/PointerEventIOS.cpp:

(WebCore::typeCanBubble):
(WebCore::PointerEvent::PointerEvent):

• page/EventHandler.cpp:

(WebCore::EventHandler::updateMouseEventTargetNode):

• page/PointerCaptureController.cpp:

(WebCore::PointerCaptureController::dispatchEventForTouchAtIndex):

LayoutTests:

• fast/events/mouseenter-mouseleave-capture-expected.txt:
• fast/events/mouseenter-mouseleave-expected.txt:
• fast/events/mouseenterleave-on-subframe-expected.txt:
• fast/events/shadow-event-path-expected.txt:
• fast/shadow-dom/mouseenter-mouseleave-across-shadow-boundary-expected.txt:
• fast/shadow-dom/mouseenter-mouseleave-inside-shadow-tree-expected.txt:
• fast/shadow-dom/mouseenter-mouseleave-on-slot-parent-expected.txt:
• platform/mac-wk1/TestExpectations:
• platform/mac-wk2/fast/events/shadow-event-path-expected.txt:
• platform/mac/fast/events/shadow-event-path-2-expected.txt:
• pointerevents/ios/enter-leave-order-expected.txt: Added.
• pointerevents/ios/enter-leave-order.html: Added.
• pointerevents/mouse/enter-leave-order-expected.txt: Added.
• pointerevents/mouse/enter-leave-order.html: Added.

4:14 AM Changeset in webkit [246060] by Tadeu Zagallo

• 15 edits
  2 adds in trunk/Source/JavaScriptCore

JSScript should not keep bytecode cache in memory
​https://bugs.webkit.org/show_bug.cgi?id=198482

Reviewed by Saam Barati.

When JSScript writes to the cache, we keep the in-memory serialized bytecode alive.
Instead, we should only ever hold the memory mapped bytecode cache to avoid using
too much memory.

• API/JSScript.mm:

(-[JSScript writeCache:]):

• API/tests/testapi.mm:

(testBytecodeCacheWithSyntaxError):

• CMakeLists.txt:
• JavaScriptCore.xcodeproj/project.pbxproj:
• Sources.txt:
• jsc.cpp:
• parser/SourceProvider.h:
• runtime/BytecodeCacheError.cpp: Added.

(JSC::BytecodeCacheError::StandardError::isValid const):
(JSC::BytecodeCacheError::StandardError::message const):
(JSC::BytecodeCacheError::WriteError::isValid const):
(JSC::BytecodeCacheError::WriteError::message const):
(JSC::BytecodeCacheError::operator=):
(JSC::BytecodeCacheError::isValid const):
(JSC::BytecodeCacheError::message const):

• runtime/BytecodeCacheError.h: Added.

(JSC::BytecodeCacheError::StandardError::StandardError):
(JSC::BytecodeCacheError::WriteError::WriteError):

• runtime/CachedBytecode.h:

(JSC::CachedBytecode::create):

• runtime/CachedTypes.cpp:

(JSC::Encoder::Encoder):
(JSC::Encoder::release):
(JSC::Encoder::releaseMapped):
(JSC::encodeCodeBlock):
(JSC::encodeFunctionCodeBlock):

• runtime/CachedTypes.h:
• runtime/CodeCache.cpp:

(JSC::serializeBytecode):

• runtime/CodeCache.h:
• runtime/Completion.cpp:

(JSC::generateProgramBytecode):
(JSC::generateModuleBytecode):

• runtime/Completion.h:

3:37 AM Changeset in webkit [246059] by zandobersek@gmail.com

• 4 edits in trunk/Tools

[misc] Remove JSCOnly ARMv7 Traditional bot
​https://bugs.webkit.org/show_bug.cgi?id=198524

Reviewed by Carlos Garcia Campos.

This is not a supported configuration anymore, so the buildbot slave can
be removed from configuration.

• BuildSlaveSupport/build.webkit.org-config/config.json:
• BuildSlaveSupport/build.webkit.org-config/public_html/dashboard/Scripts/WebKitBuildbot.js:

(WebKitBuildbot):

• BuildSlaveSupport/build.webkit.org-config/steps_unittest.py:

3:04 AM Changeset in webkit [246058] by Carlos Garcia Campos

• 2 edits in trunk/Source/WebKit

[GTK] Crash when re-entering AC mode after r245957
​https://bugs.webkit.org/show_bug.cgi?id=198522

Reviewed by Žan Doberšek.

When AcceleratedBackingStoreWayland::displayBuffer() is called and we have already left AC mode, we early
dispatch the image and release it. The problem is that images are reused, so the given image can be the
committed one. In that case we end up freeing it again in the next AcceleratedBackingStoreWayland::paint()
call.

• UIProcess/gtk/AcceleratedBackingStoreWayland.cpp:

(WebKit::AcceleratedBackingStoreWayland::displayBuffer): Do not release the given image if it's the committed one.

12:38 AM Changeset in webkit [246057] by commit-queue@webkit.org

• 8 edits
  1 copy
  7 adds in trunk

JS wrapper of target in ResizeObserverEntry/ResizeObserver shouldn't get collected ahead
​https://bugs.webkit.org/show_bug.cgi?id=197457

Patch by Cathie Chen <cathiechen> on 2019-06-04
Reviewed by Ryosuke Niwa.

Source/WebCore:

Add JSCustomMarkFunction to make sure JS wrappers wouldn't be collected when JSResizeObserverEntry live.

For ResizeObserver, if targets are removed, it will get fired for the last time. We also need to keep these JS
wrappers live. So add these targets to a GCReachableRef list once they're observed.

Add element-leak.html to test the targets with entry.target.myEntry = entry could be released properly.

Tests: resize-observer/element-leak.html

resize-observer/resize-observer-entry-keeps-js-wrapper-of-target-alive.html
resize-observer/resize-observer-keeps-js-wrapper-of-target-alive.html

• Sources.txt:
• WebCore.xcodeproj/project.pbxproj:
• bindings/js/JSResizeObserverEntryCustom.cpp: Added.

(WebCore::JSResizeObserverEntry::visitAdditionalChildren):

• page/ResizeObserver.cpp:

(WebCore::ResizeObserver::observe):
(WebCore::ResizeObserver::removeAllTargets):
(WebCore::ResizeObserver::removeObservation):
(WebCore::ResizeObserver::stop):

• page/ResizeObserver.h:
• page/ResizeObserverEntry.idl:

LayoutTests:

• platform/win/TestExpectations:
• resize-observer/element-leak-expected.txt: Added.
• resize-observer/element-leak.html: Added.
• resize-observer/resize-observer-entry-keeps-js-wrapper-of-target-alive-expected.txt: Added.
• resize-observer/resize-observer-entry-keeps-js-wrapper-of-target-alive.html: Added.
• resize-observer/resize-observer-keeps-js-wrapper-of-target-alive-expected.txt: Added.
• resize-observer/resize-observer-keeps-js-wrapper-of-target-alive.html: Added.
• resize-observer/resources/element-leak-frame.html: Added.