When invalidating InlineBox ensure its painting layer is setNeedsRepaint

third_party/WebKit/Source/core/layout/LayoutObject.cpp

Index: third_party/WebKit/Source/core/layout/LayoutObject.cpp
diff --git a/third_party/WebKit/Source/core/layout/LayoutObject.cpp b/third_party/WebKit/Source/core/layout/LayoutObject.cpp
index c5b41801e3386164d1245b4d02636d74b820dac5..487a40c172e0987a77e7a545a3f3f9a0090e421e 100644
--- a/third_party/WebKit/Source/core/layout/LayoutObject.cpp
+++ b/third_party/WebKit/Source/core/layout/LayoutObject.cpp
@@ -1236,6 +1236,8 @@ void LayoutObject::invalidateDisplayItemClient(const DisplayItemClient& client,
     // It's caller's responsibility to ensure enclosingSelfPaintingLayer's needsRepaint is set.
     // Don't set the flag here because getting enclosingSelfPaintLayer has cost and the caller can use
     // various ways (e.g. PaintInvalidatinState::enclosingSelfPaintingLayer()) to reduce the cost.
+    DCHECK(!paintingLayer() || paintingLayer()->needsRepaint());
+
     client.setDisplayItemsUncached();
 
     if (FrameView* frameView = this->frameView())