Fix reflection mask bounds to include visual overflow

Fix reflection mask bounds to include visual overflow

When ReplicaPainter::paint painted masks it would use LayoutBox::size
which does not account for visual overflow. This patch switches to
using LayoutBox::visualOverflowRect, also fixing cases where zoom != 1.

TEST=fast/reflections/reflection-masks-outset.html with slimming paint
and SlimmingPaintStrictCullRectClipping enabled.

BUG=496316
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=196647

[pdr., 2015-06-07 00:25:02]

pdr@chromium.org changed reviewers:
+ chrishtr@chromium.org, wangxianzhu@chromium.org

[Xianzhu, 2015-06-07 17:29:50]

lgtm

[pdr., 2015-06-07 23:11:31]

The CQ bit was checked by pdr@chromium.org

[commit-bot: I haz the power, 2015-06-07 23:11:37]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1166043003/1

[commit-bot: I haz the power, 2015-06-08 02:35:03]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2015-06-08 02:35:04]

Try jobs failed on following builders:
  win_blink_rel on tryserver.blink (JOB_FAILED,
http://build.chromium.org/p/tryserver.blink/builders/win_blink_rel/builds/65580)

[pdr., 2015-06-08 02:59:54]

The CQ bit was checked by pdr@chromium.org

[commit-bot: I haz the power, 2015-06-08 03:00:03]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1166043003/1

[commit-bot: I haz the power, 2015-06-08 03:59:06]

Committed patchset #1 (id:1) as
https://src.chromium.org/viewvc/blink?view=rev&revision=196647