| Commit message (Collapse) | Author | Age | Files | Lines |
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Bug: 7074134
There are early returns in the TextIterator ctor that would result
in m_needsAnotherNewline being left unitialized. This results in
the first call to advance() crashing due to m_needsAnotherNewline
taking an earlier path that doesn't have all the same initialized
checks
Change-Id: I1d89912532275323f71de8055c33257619b93cbb
|
|\ \
| |/
|/|
| |
| | |
* commit '4d33d9fbe70f0b56bd2c9bf8e6269ae21b4a5521':
Crash on Orange media portal
|
| |\
| | |
| | |
| | |
| | | |
* commit '5fe0a0bed6096da8fb7beef2708c36972d67b723':
Crash on Orange media portal
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Visit orange.deezer.com, press tab marked "My Music".
Browser crashes every time.
Pressing the button will trigger a re-layout of the page.
This in turn will cause some rendering nodes of type
RenderLayer to be removed from the rendering tree.
When such a node is removed, it is important to also
update certain lists in ancestor nodes that may hold references
to this node. A node that may hold such a reference is
identified as being a "stacking context".
However, in Android, when the symbol ENABLE_COMPOSITED_FIXED_ELEMENTS
is defined, the definition of what is a stacking context
is expanded. In this case, a node that is a stacking context
and holds references to descendants, changes one of the conditions
that form part of Android's expanded stacking context definition.
So, now it is no longer a stacking context, but the reference list
is not deleted/updated. When the descendant node is removed a
search for an ancestral stacking context is made, but it will
not find this node since it is no longer a stacking context.
The solution is to make sure that the list of references is
updated/cleared whenever the node changes a condition that
may cause its status as a stacking context to also change.
Change-Id: If5a7b63715020bc3d23749a7c09003a86d90e28d
|
|\ \ \
| |/ /
| | |
| | |
| | | |
* commit 'f2b8b88d1a8fefaf6de6c6bce24ae092abdf9584':
Fix memory leak caused by CSSRuleList wrapper
|
| |\ \
| | |/
| | |
| | |
| | | |
* commit '5161915319ca55318d2ef68a84b735f01c3d202f':
Fix memory leak caused by CSSRuleList wrapper
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Accessing cssrulelist in javascript will create a new
CSSRuleList object and wrapper JS object. The wrapper
JS object will be added into hidden array in parent JS
object which is alive during the whole execution. Thus
memory leak happens (CSSRuleList in webkit, wrapper object
and weak global handle in v8).
Cherry pick 2 patches from upstream solves the problem:
http://trac.webkit.org/changeset/90949
This patch changes hidden reference from array to named
property. So new wrapper will replace old wrappper. But the
memory leak still exists because the CSSRuleList wrapper
will be added into an object group of current document. So
they will still be alive during execution.
http://trac.webkit.org/changeset/91256
This patch avoids to adding CSSRuleList wrapper into document
object group. Combined with the first patch, it can resolve
the memory leak problem.
Change-Id: Icb523db52963726f27b6c02596822cfb6e8d5049
Author: Vitaly Repeshko <vitalyr@chromium.org>
Signed-off-by: Xi Qian <xi.qian@intel.com>
Signed-off-by: Shuo Gao <shuo.gao@intel.com>
Signed-off-by: Bruce Beare <bruce.j.beare@intel.com>
Signed-off-by: Jack Ren <jack.ren@intel.com>
Author-tracking-BZ: 32630
|
| |\ \
| | | |
| | | |
| | | |
| | | | |
* commit '465864a6d72a2505b7a725ddaadfff05cdece8fc':
DO NOT MERGE Null check
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Cherry pick
Bug: 6975836
Fixes a crash in find on page
Change-Id: I20e1597f2f3a381ee693c1bcef944243ca654110
|
| |\ \ \
| | |/ /
| | | |
| | | |
| | | | |
* commit '28c43cfac56492d4d307386c44ab9a1121f7d3bf':
DO NOT MERGE Fix memory leak
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Cherry pick
Bug: 6952980
GraphicsContext::createOffscreenContext creates an instance of both
PlatformGraphicsSkia and GraphicsContext for ImageBuffer. However,
ImageBuffer will only call delete on the GraphicsContext. In normal
GC usage, the PlatformGraphicsContext's lifecycle is longer than the
GCs, and is cleaned up by itself. This will result in leaking the
PlatformGraphicsSkia context, though. We need to make sure to call
delete on the PlatformGraphicsSkia context if we were initialized
with the deleteUs() flag, which is used to indicate just this scenario.
Change-Id: If908dcb44e99568b92ee63d6337ce9f84adc9adf
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Avoids region & matrix computation work for small ops. Area value of 750
determined empirically.
Change-Id: Iffc041ff69cd47c152ae4f71a474f4f6ccdc0bc5
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
bug:6389297
This improves performance in capturePicture, since it avoids all of the clipping
and opaque region tracking logic.
Change-Id: If1db553b2568573f94cdee7b801c67be0c47c056
|
|\ \ \ \
| | | | |
| | | | |
| | | | | |
into jb-mr1-dev
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
bug:7002755
This prevents the SurfaceCollectionManager from getting stuck in fast swap mode,
where because swaps are occuring in process mode, and not in draw mode, which
would previously have prevented the flag from being cleared.
Change-Id: Ie888438c73aabeeff0534caad68b58e4acd2c440
|
|\ \ \ \ \ |
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Cherry-pick I2a69f2834ca50c37302dcd4816edb630b1208a41 from master.
This change allows WebView to continue to function as before,
displaying text using the system default fallback font chain.
Change-Id: Ibcb8924d270cc602295158684bd700cfcbb1ec46
|
|/ / / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
bug:7003352
Correctly handle state pushing/manipulation, shaders, and transfer mode.
Change-Id: I9f6591711b15ff99a182fc9956f7ef389320e9c3
|
|\ \ \ \ \ |
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Change-Id: Iab18e8b5e2f0e37c380c8a15e51255121c3b1966
|
|\ \ \ \ \ \
| |/ / / / /
|/| | | | | |
|
| |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Fixes logspam due to merged layers unnecessarily painting when fully clipped.
Change-Id: I0f2f1b851c9386dcebda58bf844fd68073338e1c
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Bug: 7003956
Don't pack data
Change-Id: I659a8b4cbf47ece9af16532949466f3fe2f6e61b
|
|\ \ \ \ \ |
|
| |/ / / /
| | | | |
| | | | |
| | | | |
| | | | | |
bug:6968485
Change-Id: I8691d34fc5d4da1d03f31fd45c2d6d6abc39c53b
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Move RecordingData to LinearAllocator
Consolidate 4 heaps into 1
Minimize initial RAM usage
Add page size growth
Change-Id: I997ee6d88d0ae500ed85b9d20e6ed095069f2b04
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
bug:6843244
Current implementation only works for HW acceleration.
Change-Id: I009090132a8f3859ab9e57e609c1754f9021d4d7
|
| | | | |
| | | | |
| | | | |
| | | | | |
Change-Id: I3ef492679e94bdb452033ee3af3162b88d323d57
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Share SkPaints between drawPosText calls
Change-Id: Idf25c937a70e2969a864c829e566688b977720c0
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Bug: 6975836
Change-Id: I085e2099d016730ba1fdcce71e0452b2026c9617
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Fast path for same-color rect drawing in InstrumentedPlatformCanvas
Also minimize unnecessary clipping recording-side.
Change-Id: I8e9ebcfce8d137ca0b27d17c42c5045a0d3b3a36
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | | | |
| | | | |
| | | | |
| | | | | |
Change-Id: I96df41fc2b8e040e0e98b991c71b1d9bda40788e
|
|\ \ \ \ \
| |/ / / /
|/| | | | |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
bug:6925835
Change-Id: Idaf37156cd0c42f59151dc2dca95acfef542d312
|
|\ \ \ \ \ |
|
| |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Implementation is similar to PicturePile::drawWithClipRecursive. When an opaque
paint operation (currently either a DrawBitmapRect/Pattern or FillRect) will
cover up a section of the output, avoid painting things underneath it.
Track this covered region by recursing backwards through paint operations, and
clipping out opaque areas when operations beneath them paint.
Change-Id: Id3ae7508aada27f90246feb689d9e7f53f03ae32
|
|/ / / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Bug: 6952980
GraphicsContext::createOffscreenContext creates an instance of both
PlatformGraphicsSkia and GraphicsContext for ImageBuffer. However,
ImageBuffer will only call delete on the GraphicsContext. In normal
GC usage, the PlatformGraphicsContext's lifecycle is longer than the
GCs, and is cleaned up by itself. This will result in leaking the
PlatformGraphicsSkia context, though. We need to make sure to call
delete on the PlatformGraphicsSkia context if we were initialized
with the deleteUs() flag, which is used to indicate just this scenario.
Change-Id: I73aa623182a039bd75d378d198cc3bd2d4d185ef
|
|\ \ \ \ |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
bug:6947623
Multiple shaders share the opacity variable, so reset the cache when swapping
programs.
Change-Id: I752575d6089077aa8034c171c5c016e5e4e80606
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Bug: 6789548
Change-Id: I2c6de52862f71881fbb885680a9f917d87d293df
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Everything goes through either PlatformGraphicsContext or recordingCanvas()
Change-Id: I375a4294d2e8d4b467b70c6b8a7f0b96f402f252
|
|\ \ \ \ \
| | |/ / /
| |/| | |
| | | | |
| | | | |
| | | | |
| | | | | |
tiles are rendered black"
* commit 'dd5962d2534b8c3cc215492c8dcf463e923f73c2':
Fix browser rendering issue: pure color tiles are rendered black
|
| |\ \ \ \
| | |_|/ /
| |/| | /
| | | |/
| | |/|
| | | |
| | | | |
rendered black"
* commit '47387cc7716048dcea1cc5f9bf37da65d38e10be':
Fix browser rendering issue: pure color tiles are rendered black
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
The “pure color tile” optimization finds the pure-color tiles and
then draws the tiles simply with the color (otherwise the texture).
But the RGBA color pointer type is char, which may overflow when
the value is larger than 127. In such case, the tiles in question
are rendered black, because of the wrong color. This bug is fixed
by defining the pointer as unsigned char.
Change-Id: I5c7214423fa6961e707bde72f0e18c610374745d
Author: Yuyang Du <yuyang.du@intel.com>
Signed-off-by: Yuyang Du <yuyang.du@intel.com>
Signed-off-by: Jack Ren <jack.ren@intel.com>
Signed-off-by: Bruce Beare <bruce.j.beare@intel.com>
|