<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head><meta http-equiv="content-type" content="text/html; charset=utf-8" />
<title>[194926] trunk/Source/WebCore</title>
</head>
<body>

<style type="text/css"><!--
#msg dl.meta { border: 1px #006 solid; background: #369; padding: 6px; color: #fff; }
#msg dl.meta dt { float: left; width: 6em; font-weight: bold; }
#msg dt:after { content:':';}
#msg dl, #msg dt, #msg ul, #msg li, #header, #footer, #logmsg { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt;  }
#msg dl a { font-weight: bold}
#msg dl a:link    { color:#fc3; }
#msg dl a:active  { color:#ff0; }
#msg dl a:visited { color:#cc6; }
h3 { font-family: verdana,arial,helvetica,sans-serif; font-size: 10pt; font-weight: bold; }
#msg pre { overflow: auto; background: #ffc; border: 1px #fa0 solid; padding: 6px; }
#logmsg { background: #ffc; border: 1px #fa0 solid; padding: 1em 1em 0 1em; }
#logmsg p, #logmsg pre, #logmsg blockquote { margin: 0 0 1em 0; }
#logmsg p, #logmsg li, #logmsg dt, #logmsg dd { line-height: 14pt; }
#logmsg h1, #logmsg h2, #logmsg h3, #logmsg h4, #logmsg h5, #logmsg h6 { margin: .5em 0; }
#logmsg h1:first-child, #logmsg h2:first-child, #logmsg h3:first-child, #logmsg h4:first-child, #logmsg h5:first-child, #logmsg h6:first-child { margin-top: 0; }
#logmsg ul, #logmsg ol { padding: 0; list-style-position: inside; margin: 0 0 0 1em; }
#logmsg ul { text-indent: -1em; padding-left: 1em; }#logmsg ol { text-indent: -1.5em; padding-left: 1.5em; }
#logmsg > ul, #logmsg > ol { margin: 0 0 1em 0; }
#logmsg pre { background: #eee; padding: 1em; }
#logmsg blockquote { border: 1px solid #fa0; border-left-width: 10px; padding: 1em 1em 0 1em; background: white;}
#logmsg dl { margin: 0; }
#logmsg dt { font-weight: bold; }
#logmsg dd { margin: 0; padding: 0 0 0.5em 0; }
#logmsg dd:before { content:'\00bb';}
#logmsg table { border-spacing: 0px; border-collapse: collapse; border-top: 4px solid #fa0; border-bottom: 1px solid #fa0; background: #fff; }
#logmsg table th { text-align: left; font-weight: normal; padding: 0.2em 0.5em; border-top: 1px dotted #fa0; }
#logmsg table td { text-align: right; border-top: 1px dotted #fa0; padding: 0.2em 0.5em; }
#logmsg table thead th { text-align: center; border-bottom: 1px solid #fa0; }
#logmsg table th.Corner { text-align: left; }
#logmsg hr { border: none 0; border-top: 2px dashed #fa0; height: 1px; }
#header, #footer { color: #fff; background: #636; border: 1px #300 solid; padding: 6px; }
#patch { width: 100%; }
#patch h4 {font-family: verdana,arial,helvetica,sans-serif;font-size:10pt;padding:8px;background:#369;color:#fff;margin:0;}
#patch .propset h4, #patch .binary h4 {margin:0;}
#patch pre {padding:0;line-height:1.2em;margin:0;}
#patch .diff {width:100%;background:#eee;padding: 0 0 10px 0;overflow:auto;}
#patch .propset .diff, #patch .binary .diff  {padding:10px 0;}
#patch span {display:block;padding:0 10px;}
#patch .modfile, #patch .addfile, #patch .delfile, #patch .propset, #patch .binary, #patch .copfile {border:1px solid #ccc;margin:10px 0;}
#patch ins {background:#dfd;text-decoration:none;display:block;padding:0 10px;}
#patch del {background:#fdd;text-decoration:none;display:block;padding:0 10px;}
#patch .lines, .info {color:#888;background:#fff;}
--></style>
<div id="msg">
<dl class="meta">
<dt>Revision</dt> <dd><a href="http://trac.webkit.org/projects/webkit/changeset/194926">194926</a></dd>
<dt>Author</dt> <dd>hyatt@apple.com</dd>
<dt>Date</dt> <dd>2016-01-12 14:18:19 -0800 (Tue, 12 Jan 2016)</dd>
</dl>

<h3>Log Message</h3>
<pre>Avoid downloading the wrong image for &lt;picture&gt; elements.
https://bugs.webkit.org/show_bug.cgi?id=153027

Reviewed by Dean Jackson.

I was unable to write a reliable test for this feature (I welcome suggestions regarding
how this could be tested).

* html/HTMLImageElement.cpp:
(WebCore::HTMLImageElement::HTMLImageElement):
(WebCore::HTMLImageElement::~HTMLImageElement):
(WebCore::HTMLImageElement::bestFitSourceFromPictureElement):
(WebCore::HTMLImageElement::insertedInto):
(WebCore::HTMLImageElement::removedFrom):
(WebCore::HTMLImageElement::pictureNode):
(WebCore::HTMLImageElement::setPictureNode):
* html/HTMLImageElement.h:
* html/parser/HTMLConstructionSite.cpp:
(WebCore::HTMLConstructionSite::createHTMLElement):

Images that are built underneath a &lt;picture&gt; element are now connected
to that picture element via a setPictureNode call from the parser. This
ensures that the correct &lt;source&gt; elements are examined before checking the image.

This connection between images and their picture owners is handled using a static
HashMap in HTMLImageElement. This connection is made both from the parser and from
DOM insertions, and the map is queried now instead of looking directly at the
image's parentNode().

Also note the change to pass the document element's computed style in for media
query evaluation. Just as with the preload scanner, the image's style can't be
used as it has not been determined yet.</pre>

<h3>Modified Paths</h3>
<ul>
<li><a href="#trunkSourceWebCoreChangeLog">trunk/Source/WebCore/ChangeLog</a></li>
<li><a href="#trunkSourceWebCorehtmlHTMLImageElementcpp">trunk/Source/WebCore/html/HTMLImageElement.cpp</a></li>
<li><a href="#trunkSourceWebCorehtmlHTMLImageElementh">trunk/Source/WebCore/html/HTMLImageElement.h</a></li>
<li><a href="#trunkSourceWebCorehtmlparserHTMLConstructionSitecpp">trunk/Source/WebCore/html/parser/HTMLConstructionSite.cpp</a></li>
</ul>

</div>
<div id="patch">
<h3>Diff</h3>
<a id="trunkSourceWebCoreChangeLog"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/ChangeLog (194925 => 194926)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/ChangeLog        2016-01-12 22:06:46 UTC (rev 194925)
+++ trunk/Source/WebCore/ChangeLog        2016-01-12 22:18:19 UTC (rev 194926)
</span><span class="lines">@@ -1,3 +1,38 @@
</span><ins>+2016-01-12  Dave Hyatt  &lt;hyatt@apple.com&gt;
+
+        Avoid downloading the wrong image for &lt;picture&gt; elements.
+        https://bugs.webkit.org/show_bug.cgi?id=153027
+
+        Reviewed by Dean Jackson.
+
+        I was unable to write a reliable test for this feature (I welcome suggestions regarding
+        how this could be tested).
+
+        * html/HTMLImageElement.cpp:
+        (WebCore::HTMLImageElement::HTMLImageElement):
+        (WebCore::HTMLImageElement::~HTMLImageElement):
+        (WebCore::HTMLImageElement::bestFitSourceFromPictureElement):
+        (WebCore::HTMLImageElement::insertedInto):
+        (WebCore::HTMLImageElement::removedFrom):
+        (WebCore::HTMLImageElement::pictureNode):
+        (WebCore::HTMLImageElement::setPictureNode):
+        * html/HTMLImageElement.h:
+        * html/parser/HTMLConstructionSite.cpp:
+        (WebCore::HTMLConstructionSite::createHTMLElement):
+
+        Images that are built underneath a &lt;picture&gt; element are now connected
+        to that picture element via a setPictureNode call from the parser. This
+        ensures that the correct &lt;source&gt; elements are examined before checking the image.
+
+        This connection between images and their picture owners is handled using a static
+        HashMap in HTMLImageElement. This connection is made both from the parser and from
+        DOM insertions, and the map is queried now instead of looking directly at the
+        image's parentNode().
+
+        Also note the change to pass the document element's computed style in for media
+        query evaluation. Just as with the preload scanner, the image's style can't be
+        used as it has not been determined yet.
+
</ins><span class="cx"> 2016-01-12  Myles C. Maxfield  &lt;mmaxfield@apple.com&gt;
</span><span class="cx"> 
</span><span class="cx">         Cleanup in font loading code
</span></span></pre></div>
<a id="trunkSourceWebCorehtmlHTMLImageElementcpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/html/HTMLImageElement.cpp (194925 => 194926)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/html/HTMLImageElement.cpp        2016-01-12 22:06:46 UTC (rev 194925)
+++ trunk/Source/WebCore/html/HTMLImageElement.cpp        2016-01-12 22:18:19 UTC (rev 194926)
</span><span class="lines">@@ -53,6 +53,9 @@
</span><span class="cx"> 
</span><span class="cx"> using namespace HTMLNames;
</span><span class="cx"> 
</span><ins>+typedef HashMap&lt;const Node*, Node*&gt; PictureOwnerMap;
+static PictureOwnerMap* gPictureOwnerMap = nullptr;
+
</ins><span class="cx"> HTMLImageElement::HTMLImageElement(const QualifiedName&amp; tagName, Document&amp; document, HTMLFormElement* form)
</span><span class="cx">     : HTMLElement(tagName, document)
</span><span class="cx">     , m_imageLoader(*this)
</span><span class="lines">@@ -82,6 +85,7 @@
</span><span class="cx"> {
</span><span class="cx">     if (m_form)
</span><span class="cx">         m_form-&gt;removeImgElement(this);
</span><ins>+    setPictureNode(nullptr);
</ins><span class="cx"> }
</span><span class="cx"> 
</span><span class="cx"> Ref&lt;HTMLImageElement&gt; HTMLImageElement::createForJSConstructor(Document&amp; document, const int* optionalWidth, const int* optionalHeight)
</span><span class="lines">@@ -140,13 +144,13 @@
</span><span class="cx"> 
</span><span class="cx"> ImageCandidate HTMLImageElement::bestFitSourceFromPictureElement()
</span><span class="cx"> {
</span><del>-    auto* parent = parentNode();
-    if (!is&lt;HTMLPictureElement&gt;(parent))
</del><ins>+    auto* pictureOwner = pictureNode();
+    if (!pictureOwner)
</ins><span class="cx">         return { };
</span><del>-    auto* picture = downcast&lt;HTMLPictureElement&gt;(parent);
</del><ins>+    auto* picture = downcast&lt;HTMLPictureElement&gt;(pictureOwner);
</ins><span class="cx">     picture-&gt;clearViewportDependentResults();
</span><span class="cx">     document().removeViewportDependentPicture(*picture);
</span><del>-    for (Node* child = parent-&gt;firstChild(); child &amp;&amp; child != this; child = child-&gt;nextSibling()) {
</del><ins>+    for (Node* child = picture-&gt;firstChild(); child &amp;&amp; child != this; child = child-&gt;nextSibling()) {
</ins><span class="cx">         if (!is&lt;HTMLSourceElement&gt;(*child))
</span><span class="cx">             continue;
</span><span class="cx">         auto&amp; source = downcast&lt;HTMLSourceElement&gt;(*child);
</span><span class="lines">@@ -163,7 +167,7 @@
</span><span class="cx">             if (!type.isEmpty() &amp;&amp; !MIMETypeRegistry::isSupportedImageMIMEType(type) &amp;&amp; type != &quot;image/svg+xml&quot;)
</span><span class="cx">                 continue;
</span><span class="cx">         }
</span><del>-        MediaQueryEvaluator evaluator(document().printing() ? &quot;print&quot; : &quot;screen&quot;, document().frame(), computedStyle());
</del><ins>+        MediaQueryEvaluator evaluator(document().printing() ? &quot;print&quot; : &quot;screen&quot;, document().frame(), document().documentElement()-&gt;computedStyle());
</ins><span class="cx">         bool evaluation = evaluator.evalCheckingViewportDependentResults(source.mediaQuerySet(), picture-&gt;viewportDependentResults());
</span><span class="cx">         if (picture-&gt;hasViewportDependentResults())
</span><span class="cx">             document().addViewportDependentPicture(*picture);
</span><span class="lines">@@ -313,8 +317,10 @@
</span><span class="cx">     if (insertionPoint.inDocument() &amp;&amp; !m_lowercasedUsemap.isNull())
</span><span class="cx">         document().addImageElementByLowercasedUsemap(*m_lowercasedUsemap.impl(), *this);
</span><span class="cx"> 
</span><del>-    if (is&lt;HTMLPictureElement&gt;(parentNode()))
</del><ins>+    if (is&lt;HTMLPictureElement&gt;(parentNode())) {
+        setPictureNode(parentNode());
</ins><span class="cx">         selectImageSource();
</span><ins>+    }
</ins><span class="cx"> 
</span><span class="cx">     // If we have been inserted from a renderer-less document,
</span><span class="cx">     // our loader may have not fetched the image, so do it now.
</span><span class="lines">@@ -331,11 +337,34 @@
</span><span class="cx"> 
</span><span class="cx">     if (insertionPoint.inDocument() &amp;&amp; !m_lowercasedUsemap.isNull())
</span><span class="cx">         document().removeImageElementByLowercasedUsemap(*m_lowercasedUsemap.impl(), *this);
</span><del>-
</del><ins>+    
+    if (is&lt;HTMLPictureElement&gt;(parentNode()))
+        setPictureNode(nullptr);
+    
</ins><span class="cx">     m_form = nullptr;
</span><span class="cx">     HTMLElement::removedFrom(insertionPoint);
</span><span class="cx"> }
</span><span class="cx"> 
</span><ins>+Node* HTMLImageElement::pictureNode() const
+{
+    if (!gPictureOwnerMap)
+        return nullptr;
+    return gPictureOwnerMap-&gt;get(this);
+}
+    
+void HTMLImageElement::setPictureNode(Node* node)
+{
+    if (!node) {
+        if (gPictureOwnerMap)
+            gPictureOwnerMap-&gt;remove(this);
+        return;
+    }
+    
+    if (!gPictureOwnerMap)
+        gPictureOwnerMap = new PictureOwnerMap();
+    gPictureOwnerMap-&gt;add(this, node);
+}
+    
</ins><span class="cx"> int HTMLImageElement::width(bool ignorePendingStylesheets)
</span><span class="cx"> {
</span><span class="cx">     if (!renderer()) {
</span></span></pre></div>
<a id="trunkSourceWebCorehtmlHTMLImageElementh"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/html/HTMLImageElement.h (194925 => 194926)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/html/HTMLImageElement.h        2016-01-12 22:06:46 UTC (rev 194925)
+++ trunk/Source/WebCore/html/HTMLImageElement.h        2016-01-12 22:18:19 UTC (rev 194926)
</span><span class="lines">@@ -87,6 +87,9 @@
</span><span class="cx">     virtual const AtomicString&amp; imageSourceURL() const override;
</span><span class="cx"> 
</span><span class="cx">     bool hasShadowControls() const { return m_experimentalImageMenuEnabled; }
</span><ins>+    
+    Node* pictureNode() const;
+    void setPictureNode(Node*);
</ins><span class="cx"> 
</span><span class="cx"> protected:
</span><span class="cx">     HTMLImageElement(const QualifiedName&amp;, Document&amp;, HTMLFormElement* = 0);
</span><span class="lines">@@ -127,6 +130,7 @@
</span><span class="cx">     HTMLImageLoader m_imageLoader;
</span><span class="cx">     HTMLFormElement* m_form;
</span><span class="cx">     HTMLFormElement* m_formSetByParser;
</span><ins>+
</ins><span class="cx">     CompositeOperator m_compositeOperator;
</span><span class="cx">     AtomicString m_bestFitImageURL;
</span><span class="cx">     AtomicString m_currentSrc;
</span></span></pre></div>
<a id="trunkSourceWebCorehtmlparserHTMLConstructionSitecpp"></a>
<div class="modfile"><h4>Modified: trunk/Source/WebCore/html/parser/HTMLConstructionSite.cpp (194925 => 194926)</h4>
<pre class="diff"><span>
<span class="info">--- trunk/Source/WebCore/html/parser/HTMLConstructionSite.cpp        2016-01-12 22:06:46 UTC (rev 194925)
+++ trunk/Source/WebCore/html/parser/HTMLConstructionSite.cpp        2016-01-12 22:18:19 UTC (rev 194926)
</span><span class="lines">@@ -36,9 +36,11 @@
</span><span class="cx"> #include &quot;HTMLElementFactory.h&quot;
</span><span class="cx"> #include &quot;HTMLFormElement.h&quot;
</span><span class="cx"> #include &quot;HTMLHtmlElement.h&quot;
</span><ins>+#include &quot;HTMLImageElement.h&quot;
</ins><span class="cx"> #include &quot;HTMLOptGroupElement.h&quot;
</span><span class="cx"> #include &quot;HTMLOptionElement.h&quot;
</span><span class="cx"> #include &quot;HTMLParserIdioms.h&quot;
</span><ins>+#include &quot;HTMLPictureElement.h&quot;
</ins><span class="cx"> #include &quot;HTMLScriptElement.h&quot;
</span><span class="cx"> #include &quot;HTMLTemplateElement.h&quot;
</span><span class="cx"> #include &quot;NotImplemented.h&quot;
</span><span class="lines">@@ -640,6 +642,13 @@
</span><span class="cx">     Document&amp; ownerDocument = ownerDocumentForCurrentNode();
</span><span class="cx">     bool insideTemplateElement = !ownerDocument.frame();
</span><span class="cx">     RefPtr&lt;Element&gt; element = HTMLElementFactory::createElement(tagName, ownerDocument, insideTemplateElement ? nullptr : form(), true);
</span><ins>+    
+    // FIXME: This is a hack to connect images to pictures before the image has
+    // been inserted into the document. It can be removed once asynchronous image
+    // loading is working.
+    if (is&lt;HTMLPictureElement&gt;(currentNode()) &amp;&amp; is&lt;HTMLImageElement&gt;(*element.get()))
+        downcast&lt;HTMLImageElement&gt;(*element.get()).setPictureNode(&amp;currentNode());
+
</ins><span class="cx">     setAttributes(element.get(), token, m_parserContentPolicy);
</span><span class="cx">     ASSERT(element-&gt;isHTMLElement());
</span><span class="cx">     return element.release();
</span></span></pre>
</div>
</div>

</body>
</html>