Use CheckedNumeric when converting SkIRect to gfx::Rect.

cc/output/filter_operation.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stddef.h>
 
 #include <algorithm>
 
 #include "base/trace_event/trace_event_argument.h"
 #include "base/values.h"
@@ skipping 343 matching lines @@
       if (direction == SkImageFilter::kReverse_MapDirection)
         mapped_drop_shadow_offset = -mapped_drop_shadow_offset;
       result += gfx::Vector2dF(mapped_drop_shadow_offset.x(),
                                mapped_drop_shadow_offset.y());
       result.Union(gfx::RectF(rect));
       return gfx::ToEnclosingRect(result);
     }
     case FilterOperation::REFERENCE: {
       if (!op.image_filter())
         return rect;
-      return gfx::SkIRectToRect(op.image_filter()->filterBounds(
-          gfx::RectToSkIRect(rect), matrix, direction));
+      return gfx::SkIRectToRectChecked(op.image_filter()->filterBounds(
+          gfx::RectToSkIRectChecked(rect), matrix, direction));
     }
     default:
       return rect;
   }
 }
 
 }  // namespace
 
 gfx::Rect FilterOperation::MapRect(const gfx::Rect& rect,
                                    const SkMatrix& matrix) const {
   return MapRectInternal(*this, rect, matrix,
                          SkImageFilter::kForward_MapDirection);
 }
 
 gfx::Rect FilterOperation::MapRectReverse(const gfx::Rect& rect,
                                           const SkMatrix& matrix) const {
   return MapRectInternal(*this, rect, matrix,
                          SkImageFilter::kReverse_MapDirection);
 }
 
 }  // namespace cc