Fix reflection mask bounds to include visual overflow

Source/core/paint/ReplicaPainter.cpp

Index: Source/core/paint/ReplicaPainter.cpp
diff --git a/Source/core/paint/ReplicaPainter.cpp b/Source/core/paint/ReplicaPainter.cpp
index 05dcdc1f3f321083bd01270d3f332c7e69552654..a92b6b52678dc185d9d91abe2fa3787658fd923e 100644
--- a/Source/core/paint/ReplicaPainter.cpp
+++ b/Source/core/paint/ReplicaPainter.cpp
@@ -28,8 +28,7 @@ void ReplicaPainter::paint(const PaintInfo& paintInfo, const LayoutPoint& paintO
         PaintLayerFlags flags = PaintLayerHaveTransparency | PaintLayerAppliedTransform | PaintLayerUncachedClipRects | PaintLayerPaintingReflection;
         DeprecatedPaintLayerPainter(*m_layoutReplica.layer()->parent()).paintLayer(paintInfo.context, paintingInfo, flags);
     } else if (paintInfo.phase == PaintPhaseMask) {
-        LayoutRect paintRect(adjustedPaintOffset, m_layoutReplica.size());
-        LayoutObjectDrawingRecorder drawingRecorder(*paintInfo.context, m_layoutReplica, paintInfo.phase, paintRect);
+        LayoutObjectDrawingRecorder drawingRecorder(*paintInfo.context, m_layoutReplica, paintInfo.phase, m_layoutReplica.visualOverflowRect());
         if (!drawingRecorder.canUseCachedDrawing())
             m_layoutReplica.paintMask(paintInfo, adjustedPaintOffset);
     }