Avoid overflowing motion-rotation when converting double to float

third_party/WebKit/Source/core/css/resolver/StyleBuilderConverter.cpp

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
  * copyright notice, this list of conditions and the following disclaimer
  * in the documentation and/or other materials provided with the
  * distribution.
  *     * Neither the name of Google Inc. nor the names of its
@@ skipping 732 matching lines @@
         const CSSPrimitiveValue& primitiveValue = toCSSPrimitiveValue(*item);
         if (primitiveValue.getValueID() == CSSValueAuto) {
             result.type = MotionRotationAuto;
         } else if (primitiveValue.getValueID() == CSSValueReverse) {
             result.type = MotionRotationAuto;
             result.angle += 180;
         } else {
             result.angle += primitiveValue.computeDegrees();
         }
     }
+    result.angle = clampTo<float>(result.angle);
 
     return result;
 }
 
 template <CSSValueID cssValueFor0, CSSValueID cssValueFor100>
 Length StyleBuilderConverter::convertPositionLength(StyleResolverState& state, const CSSValue& value)
 {
     if (value.isValuePair()) {
         const CSSValuePair& pair = toCSSValuePair(value);
         Length length = StyleBuilderConverter::convertLength(state, pair.second());
@@ skipping 310 matching lines @@
 
 PassRefPtr<StylePath> StyleBuilderConverter::convertPathOrNone(StyleResolverState& state, const CSSValue& value)
 {
     if (value.isPathValue())
         return toCSSPathValue(value).stylePath();
     ASSERT(value.isPrimitiveValue() && toCSSPrimitiveValue(value).getValueID() == CSSValueNone);
     return nullptr;
 }
 
 } // namespace blink