Use invalidation sets for :in-range and :out-of-range.

third_party/WebKit/Source/core/html/HTMLInputElement.cpp

Index: third_party/WebKit/Source/core/html/HTMLInputElement.cpp
diff --git a/third_party/WebKit/Source/core/html/HTMLInputElement.cpp b/third_party/WebKit/Source/core/html/HTMLInputElement.cpp
index ec26ea7b8059d7bb96bead1c12079e645420d14f..c1ef198709fc3bee741667419f01790e794bcf5e 100644
--- a/third_party/WebKit/Source/core/html/HTMLInputElement.cpp
+++ b/third_party/WebKit/Source/core/html/HTMLInputElement.cpp
@@ -1103,6 +1103,10 @@ void HTMLInputElement::setValueInternal(const String& sanitizedValue, TextFieldE
 {
     m_valueIfDirty = sanitizedValue;
     setNeedsValidityCheck();
+    if (m_inputType->isSteppable()) {
+        pseudoStateChanged(CSSSelector::PseudoInRange);
+        pseudoStateChanged(CSSSelector::PseudoOutOfRange);
+    }
     if (document().focusedElement() == this)
         document().frameHost()->chromeClient().didUpdateTextOfFocusedElementByNonUserInput();
 }