| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
See http://trac.webkit.org/changeset/94541
Bug: 6328992
Change-Id: Ib21562da28126db4d1c2898af818f8f5569236e0
|
|
|
|
|
|
|
| |
See http://trac.webkit.org/changeset/88854
Bug: 6328992
Change-Id: I87cfd2aa0d76dec9b511067ba150db700d297a63
|
|
|
|
|
|
|
|
|
| |
fast/css/fontsize-unit-rems-crash.html
See http://trac.webkit.org/changeset/106251
Bug: 6329315
Change-Id: I2d4208a280f71dcd2d69f5d34fae9604680abb58
|
|
|
|
|
|
|
|
|
| |
fast/multicol/clone-block-children-inline-mismatch-crash.html
See http://trac.webkit.org/changeset/105769
Bug: 6329129
Change-Id: Ia48c7e50adb7de3fc1e897a0de90b62a1ca63786
|
|
|
|
|
|
|
|
|
| |
r105769
See http://trac.webkit.org/changeset/94543
Bug: 6329129
Change-Id: I02da7a9f891a6eec394398529f64b0992cbfce70
|
|
|
|
|
|
|
|
|
| |
svg/foreignObject/absolute-position-foreign-object-child-crash.html
See http://trac.webkit.org/changeset/99731
Bug: 6329122
Change-Id: Ibee43b565d69507c4abace7e1ab298c660de137f
|
|
|
|
|
|
|
|
|
| |
fast/canvas/crash-set-font.html
See http://trac.webkit.org/changeset/96122
Bug: 6328797
Change-Id: I9d9fdbffb19e61615d352c20e24946cf01306903
|
|
|
|
|
|
|
|
|
| |
editing/execCommand/ident-crashes-topnode-is-text.html
See http://trac.webkit.org/changeset/94841
Bug: 6329306
Change-Id: Ic27f31beae3b390a4aba1797c13c8d36422911f5
|
|
|
|
|
|
|
|
|
| |
fast/dom/Range/range-delete-contents-event-fire-crash.html
See http://trac.webkit.org/changeset/94511
Bug: 6329028
Change-Id: I00cc0e6520831f20f6177f18f4e86d471003ea58
|
|
|
|
|
|
|
|
|
| |
fast/gradients/css3-radial-gradient-crash.html
See http://trac.webkit.org/changeset/94215
Bug: 6328935
Change-Id: I4414885e54a60aa05346c002c40835334685b1cb
|
|
|
|
|
|
|
|
|
|
|
|
| |
editing/input/search-field-crash-in-designmode.html
Manually resolved a merge conflict in CSSStyleSelector::isAtShadowBoundary()
due to http://trac.webkit.org/changeset/88476.
See http://trac.webkit.org/changeset/92139
Bug: 6329073
Change-Id: If869bd58a689bb918ef47048c4f5d2e84e4b6f89
|
|
|
|
|
|
|
| |
See http://trac.webkit.org/changeset/87227
Bug: 6329073
Change-Id: I18c371c96547d5a2011847647c8fc398b0adb18d
|
|
|
|
|
|
|
| |
See http://trac.webkit.org/changeset/85267
Bug: 6329073
Change-Id: I7c46eab459647059890732214a9b953adef0a647
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
fast/flexbox/crash-button-input-autofocus.html
fast/flexbox/crash-button-keygen.html
fast/flexbox/crash-button-relayout.html
Patch manually applied due to file rename.
See http://trac.webkit.org/changeset/90568
Bug: 6328974
Change-Id: I0cee4daaea2e6fa2b9fae7d7dd81b4541561e969
|
|
|
|
|
|
|
| |
See http://trac.webkit.org/changeset/86098
Bug: 6328974
Change-Id: If526b33142144f1ed466325898f9177adf27e6ee
|
|
|
|
|
|
|
|
|
| |
fast/dom/shadow/frameless-media-element-crash.html
See http://trac.webkit.org/changeset/89762
Bug: 6329068
Change-Id: I73db520557e2ab4c04a4a2198276439e6c7932ec
|
|
|
|
|
|
|
|
|
| |
fast/css/webkit-keyframes-crash.html
See http://trac.webkit.org/changeset/88474
Bug: 6328781
Change-Id: I9ae7d323b48ff6e55c720595fd27249176e87b8f
|
|
|
|
|
|
|
|
|
| |
No functional change.
See corresponding frameworks/base
change https://android-git.corp.google.com/g/#change,125699
Change-Id: Iad7260fd506c13e773ee7a6c2225cbc71e8acdab
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
See http://trac.webkit.org/changeset/96779
Note that a conflict occurred in Source/WebCore/platform/qt/KURLQt.cpp but the
change is not required.
Bug: 2159848
Change-Id: I56e645b2f187302c6f1858c8c6c291209f130cad
|
|\ \
| |/ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This is to make sure URL parsing behaviour is up-to-date prior to fixing
window.location. See bug for details.
Note that a manual edit to HTMLAnchorElement::port() was required to avoid the
use of emptyString().
See http://trac.webkit.org/changeset/94132
Bug: 2159848
Change-Id: I13ef58e18df46c1d4592c102d4eb80f54ae53020
|
|\ \
| |/ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This is a prerequisite for http://trac.webkit.org/changeset/96779 to fix
window.location.
Note that a conflict occurred in
Source/WebKit2/WebProcess/WebCoreSupport/WebFrameLoaderClient.cpp but the
change is not required.
See http://trac.webkit.org/changeset/87623
Bug: 2159848
Change-Id: I5614b3588f30508f81b562aa7fb2f9027c2bda72
|
|\ \
| |/ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This is to make sure URL parsing behaviour is up-to-date prior to fixing
window.location. See bug for details.
Note that the 'http:example.com/' test case in fast/url/standard-url.html fails
with DRT2 because of an assumption in the test that it is served as a file
scheme URL.
See http://trac.webkit.org/changeset/84762
Bug: 2159848
Change-Id: Ie680debcad3d285efd40134932b72d429c0d2222
|
|\ \ |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Note that the use of RenderObject::isDeprecatedFlexibleBox() in the patch had
to be changed to RenderObject::isFlexibleBox(). This method was renamed in
http://trac.webkit.org/changeset/90773, which is not in Android's version of
WebKit.
The LayoutTest added in r91386 no longer crashes.
See http://trac.webkit.org/changeset/91386
Bug: 5492762
Change-Id: Id43e55e89b4f107285b33c1a2c37a634cf10aad7
|
|\ \ \ |
|
| |/ /
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Note that this change does not apply cleanly in RenderBlock::destroy() without
r85869.
r85869 was intended to be an optimization only, with no functional change.
However, it introduced two crashes, one of which is fixed in r90068 and the
other in r86060. To avoid the need to cherry-pick both r85869 and r86060 as
prerequisites, the patch for r90068 was applied manually to give the correct
end result in RenderBlock::destroy().
We now pass the LayoutTests added in r90068 and the LayoutTest added in r86060
does not crash.
See http://trac.webkit.org/changeset/90068
Bug: 5496903
Change-Id: Ica6dc2c70a4cd5c781ae77df95a8a4033c097708
|
|\ \ \ |
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Bug 6300264
Change-Id: I29ffffa9be33884a3e6a1c9fc5bb5cac95585cdc
|
|\ \ \ \ |
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Bug: 6317798
Change-Id: Idea47af14e282b42c902c8158f08f6742ba576da
|
|\ \ \ \ \ |
|
| | |/ / /
| |/| | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add null checks for m_baseLayer. Refactor common code to a separate
getLayerTransform() function that returns a draw tranform ptr.
Bug: 6239165
Change-Id: I7c2079e58b49c10a780b099fea9e3d7959b7fe00
|
|\ \ \ \ \ |
|
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Multiple paths were redundant, as they both synchronized the layers, and drew
the base if needed.
depends on frameworks/base change: https://android-git.corp.google.com/g/#/c/179964/
largely reverts 3adbe453816c9282bfe1d212e813661ce2590955
Change-Id: Ic60f79521dc62e7c2281302bc51a3dfde16d396f
|
|\ \ \ \ \ \ |
|
| |/ / / / /
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
bug:6275189
Change-Id: Ib9cabadb77777244c6ef707c32ce53db3ebf3181
|
|\ \ \ \ \ \ |
|
| |/ / / / /
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Was ignoring transform calculation
bug:6317028
Change-Id: I9d5d491ef9eb853535e18a8ad10ab387d77e2d80
|
|\ \ \ \ \ \
| |_|/ / / /
|/| | | | | |
|
| |/ / / /
| | | | |
| | | | |
| | | | |
| | | | | |
bug:5636249
Change-Id: Ic99ab5a386009fcfb52ceaffc4881fe2f1d8d627
|
|\ \ \ \ \ |
|
| | | | | |
| | | | | |
| | | | | | |
This reverts commit eb4152454774fa6e38c8be1a2810bc893d494de3
|
|\ \ \ \ \ \ |
|
| | |/ / / /
| |/| | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Additionally, paint area outside the content bounds with content bg color in
software rendering path.
bug:6304213
Change-Id: I6fe5246e82d30fe000e570c8dccb605d46fc428d
|
|\ \ \ \ \ \
| | |/ / / /
| |/| | | | |
|
| | | | | |
| | | | | |
| | | | | | |
This reverts commit 76a09fb547aa97b2f0e9cbb1e4a800d61b30a477
|