Fix invalidation of absolute sized SVG content.

third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp

Index: third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp
diff --git a/third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp b/third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp
index 691734c6f921a96e44ac6dc707bae503e4cce547..81dbec96ceec50174735990d09667b889c9b2688 100644
--- a/third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp
+++ b/third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp
@@ -412,6 +412,14 @@ void LayoutBoxModelObject::invalidateTreeIfNeeded(const PaintInvalidationState&
         && (hasOverflowClip() || isLayoutView()))
         newPaintInvalidationState.setForceSubtreeInvalidationRectUpdateWithinContainer();
 
+    // Another variant of crbug.com/490725 -- absolute sized SVG content must be
+    // forcibly invalidated when the paint invalidation rect changes.
+    if (!RuntimeEnabledFeatures::slimmingPaintV2Enabled()
+        && isSVG()
+        && previousPaintInvalidationRect != this->previousPaintInvalidationRect()
+        && !styleRef().isOverflowVisible())
+        newPaintInvalidationState.setForceSubtreeInvalidationRectUpdateWithinContainer();
+
     newPaintInvalidationState.updateForChildren(reason);
     invalidatePaintOfSubtreesIfNeeded(newPaintInvalidationState);
 }