Fixed DCHECK crash for radial gradients with very large values

third_party/WebKit/Source/core/css/CSSGradientValue.cpp

 /*
  * Copyright (C) 2008 Apple Inc.  All rights reserved.
  * Copyright (C) 2015 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 995 matching lines @@
 
     }
 
     result.append(')');
     return result.toString();
 }
 
 float CSSRadialGradientValue::resolveRadius(CSSPrimitiveValue* radius, const CSSToLengthConversionData& conversionData, float* widthOrHeight)
 {
     float result = 0;
     if (radius->isNumber()) // Can the radius be a percentage?

[dstockwell, 2016/08/19 02:33:43]

What's up with this comment?

[sashab, 2016/08/24 06:46:06]

From
https://chromium.googlesource.com/chromium/src/+/3b6f3437968728d621be8412fa50...,
before we accounted for percentages :) removed.

         result = radius->getFloatValue() * conversionData.zoom();
     else if (widthOrHeight && radius->isPercentage())
         result = *widthOrHeight * radius->getFloatValue() / 100;
     else
         result = radius->computeLength<float>(conversionData);
 
-    return std::max(result, 0.0f);
+    return clampTo<float>(std::max(result, 0.0f));
 }
 
 namespace {
 
 enum EndShapeType {
     CircleEndShape,
     EllipseEndShape
 };
 
 // Compute the radius to the closest/farthest side (depending on the compare functor).
@@ skipping 193 matching lines @@
     visitor->trace(m_firstRadius);
     visitor->trace(m_secondRadius);
     visitor->trace(m_shape);
     visitor->trace(m_sizingBehavior);
     visitor->trace(m_endHorizontalSize);
     visitor->trace(m_endVerticalSize);
     CSSGradientValue::traceAfterDispatch(visitor);
 }
 
 } // namespace blink