[CSS Shapes] inset does not properly clamp large corner radii

Source/core/rendering/shapes/Shape.cpp

Index: Source/core/rendering/shapes/Shape.cpp
diff --git a/Source/core/rendering/shapes/Shape.cpp b/Source/core/rendering/shapes/Shape.cpp
index ea562f3e557f13772f8f1679cb0aa14f318488c7..06c76fd138fb4ba5166d1f5352242ef366b283c5 100644
--- a/Source/core/rendering/shapes/Shape.cpp
+++ b/Source/core/rendering/shapes/Shape.cpp
@@ -100,7 +100,7 @@ static inline FloatSize physicalSizeToLogical(const FloatSize& size, WritingMode
     return size.transposedSize();
 }
 
-static inline void ensureRadiiDoNotOverlap(FloatRect &bounds, FloatSize &radii)
+static inline void ensureRadiiDoNotOverlap(FloatRect& bounds, FloatSize& radii)
 {
     float widthRatio = bounds.width() / (2 * radii.width());
     float heightRatio = bounds.height() / (2 * radii.height());
@@ -241,6 +241,8 @@ PassOwnPtr<Shape> Shape::createShape(const BasicShape* basicShape, const LayoutS
             floatSizeForLengthSize(inset.bottomLeftRadius(), boxSize),
             floatSizeForLengthSize(inset.bottomRightRadius(), boxSize));
 
+        cornerRadii.scale(calcBorderRadiiConstraintScaleFor(logicalRect, cornerRadii));
+
         shape = createInsetShape(FloatRoundedRect(logicalRect, cornerRadii));
         break;
     }