Fix integer overflow in ComputedStyle::computedLineHeight

Source/core/layout/style/LayoutStyle.cpp

Index: Source/core/layout/style/LayoutStyle.cpp
diff --git a/Source/core/layout/style/LayoutStyle.cpp b/Source/core/layout/style/LayoutStyle.cpp
index 238f0ee44cbabd0726dd4a26f7933e36a6fd9ace..316f1305f00314447d1b74427ba7f63d6d35b7ef 100644
--- a/Source/core/layout/style/LayoutStyle.cpp
+++ b/Source/core/layout/style/LayoutStyle.cpp
@@ -1254,9 +1254,9 @@ int LayoutStyle::computedLineHeight() const
         return fontMetrics().lineSpacing();
 
     if (lh.isPercent())
-        return minimumValueForLength(lh, fontSize());
+        return LayoutUnit::clamp(minimumValueForLength(lh, fontSize()));

[pdr., 2015/03/18 03:49:42]

This fix seems too deep if it's only for shapes. Do we only hit this with shape
code? I wonder if this should be closer to the "The shape-outside image is too
large" warning?

 
-    return lh.value();
+    return std::min(static_cast<double>(std::numeric_limits<int>::max()), static_cast<double>(lh.value()));
 }
 
 void LayoutStyle::setWordSpacing(float wordSpacing)