Fix behavior of HTMLInputElement.maxLength/minLength getter

third_party/WebKit/Source/core/html/HTMLInputElement.cpp

Index: third_party/WebKit/Source/core/html/HTMLInputElement.cpp
diff --git a/third_party/WebKit/Source/core/html/HTMLInputElement.cpp b/third_party/WebKit/Source/core/html/HTMLInputElement.cpp
index b516a88512ac7f75842d34bffa22692d14b3cb04..d19ce10396571a1d0746998bcbd46a539ee08714 100644
--- a/third_party/WebKit/Source/core/html/HTMLInputElement.cpp
+++ b/third_party/WebKit/Source/core/html/HTMLInputElement.cpp
@@ -1365,11 +1365,15 @@ const AtomicString& HTMLInputElement::alt() const
 
 int HTMLInputElement::maxLength() const
 {
+    if (!hasAttribute(maxlengthAttr) || m_maxLength == maximumLength)

[tkent, 2016/02/08 23:48:21]

input.maxLength for <input maxlength="524288"> returns -1.  It's not right.

+        return -1;
     return m_maxLength;
 }
 
 int HTMLInputElement::minLength() const
 {
+    if (!hasAttribute(minlengthAttr))

[tkent, 2016/02/08 23:48:21]

We should have a test for this change.

I think we can change the initial value of m_minLength to -1.

+        return -1;
     return m_minLength;
 }