2012-05-21 Lucas Forschler Merge 117537 2012-05-17 Dan Bernstein Problems with flipped writing modes and compositing https://bugs.webkit.org/show_bug.cgi?id=86032 Reviewed by Anders Carlsson. * compositing/bounds-in-flipped-writing-mode-expected.txt: Added. * compositing/bounds-in-flipped-writing-mode.html: Added. 2012-05-21 Lucas Forschler Merge 117523 2012-05-17 Filip Pizlo Setting array index -1 and looping over array causes bad behavior https://bugs.webkit.org/show_bug.cgi?id=86733 Reviewed by Oliver Hunt. * fast/js/dfg-negative-array-index-expected.txt: Added. * fast/js/dfg-negative-array-index.html: Added. * fast/js/script-tests/dfg-negative-array-index.js: Added. (foo): 2012-05-21 Lucas Forschler Merge 117366 2012-05-16 Jon Lee Animated GIFs in page cache get updated https://bugs.webkit.org/show_bug.cgi?id=86668 Reviewed by Brady Eidson. This test loads pages with subframes that display the same animated gif. When one of the pages goes into the page cache, we want to make sure that we do not crash as a side effect of the page's images getting updated. * fast/loader/image-in-page-cache-expected.txt: Added. * fast/loader/image-in-page-cache.html: Added. * fast/loader/resources/animated-image-subframe.html: Added. * fast/loader/resources/animated-image.html: Added. * fast/loader/resources/animated-image2.html: Added. * fast/loader/resources/animated-image3.html: Added. 2012-05-21 Lucas Forschler Merge 117365 2012-05-16 Tim Horton Crash if SVG gradient stop has display: none set https://bugs.webkit.org/show_bug.cgi?id=86686 Reviewed by Dean Jackson. Add a test that ensures that we don't crash if "display: none" is set on an SVGStopElement. * svg/custom/gradient-stop-display-none-crash-expected.txt: Added. * svg/custom/gradient-stop-display-none-crash.svg: Added. 2012-05-21 Lucas Forschler Merge 117326 2012-05-16 Jer Noble