[svg] in img element doesn't render correctly when height is changed dynamically.

Source/core/rendering/svg/RenderSVGRoot.h

Index: Source/core/rendering/svg/RenderSVGRoot.h
diff --git a/Source/core/rendering/svg/RenderSVGRoot.h b/Source/core/rendering/svg/RenderSVGRoot.h
index 0d8c998b11e09f9d6246dae9ba2ffaa1eb46136e..88f9b9ef5b31e8ab04851b154b8df854127e20b1 100644
--- a/Source/core/rendering/svg/RenderSVGRoot.h
+++ b/Source/core/rendering/svg/RenderSVGRoot.h
@@ -53,7 +53,12 @@ public:
     virtual void setNeedsTransformUpdate() OVERRIDE { m_needsBoundariesOrTransformUpdate = true; }
 
     IntSize containerSize() const { return m_containerSize; }
-    void setContainerSize(const IntSize& containerSize) { m_containerSize = containerSize; }
+    void setContainerSize(const IntSize& containerSize)
+    {
+        if (m_containerSize != containerSize)
+            setNeedsLayout();

[f(malita), 2014/03/24 16:23:12]

This can be hit during paint(), which would normally be a big no-no.

But SVGImage::draw() performs a view layout before painting, so as long as
setContainerSize() happens before that and doesn't bubble outside the view scope
(which I don't think it does) it should be fine. Maybe you can add a comment
explaining why this is ok.

Come to think of it, we should probably ASSERT(!view->needsLayout()) in
SVGImage::draw(), after view->paint(...).

+        m_containerSize = containerSize;
+    }
 
     virtual bool hasRelativeIntrinsicLogicalWidth() const OVERRIDE;
     virtual bool hasRelativeLogicalHeight() const OVERRIDE;