Merge 88139

Source/WebCore/rendering/svg/SVGTextRunRenderingContext.cpp

Index: Source/WebCore/rendering/svg/SVGTextRunRenderingContext.cpp
===================================================================
--- Source/WebCore/rendering/svg/SVGTextRunRenderingContext.cpp	(revision 88778)
+++ Source/WebCore/rendering/svg/SVGTextRunRenderingContext.cpp	(working copy)
@@ -114,7 +114,8 @@
 
     void walk(const TextRun& run, bool isVerticalText, const String& language, int from, int to)
     {
-        ASSERT(0 <= from && from <= to && to - from <= run.length());
+        if (from < 0 || to < 0 || from > to || from >= run.length() || to > run.length())
+            return;         
 
         const String text = Font::normalizeSpaces(run.data(from), to - from);
         Vector<SVGGlyph::ArabicForm> chars(charactersWithArabicForm(text, run.rtl()));