Convert a few more CFI blacklist entries into DISABLE_CFI_PERF attributes.

third_party/WebKit/Source/core/layout/PaintInvalidationState.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/layout/PaintInvalidationState.h"
 
 #include "core/frame/FrameView.h"
 #include "core/frame/LocalFrame.h"
 #include "core/frame/Settings.h"
 #include "core/layout/LayoutInline.h"
 #include "core/layout/LayoutPart.h"
 #include "core/layout/LayoutView.h"
 #include "core/layout/api/LayoutAPIShim.h"
 #include "core/layout/api/LayoutPartItem.h"
 #include "core/layout/svg/LayoutSVGRoot.h"
 #include "core/layout/svg/SVGLayoutSupport.h"
 #include "core/paint/PaintInvalidator.h"
 #include "core/paint/PaintLayer.h"
 #include "core/paint/PaintPropertyTreeBuilder.h"
 
 namespace blink {
 
+DISABLE_CFI_PERF
 static bool supportsCachedOffsets(const LayoutObject& object) {
   // Can't compute paint offsets across objects with transforms, but if they are
   // paint invalidation containers, we don't actually need to compute *across*
   // the container, just up to it. (Also, such objects are the containing block
   // for all children.)
   return !(object.hasTransformRelatedProperty() &&
            !object.isPaintInvalidationContainer()) &&
          !object.hasFilterInducingProperty() && !object.isLayoutFlowThread() &&
          !object.isLayoutMultiColumnSpannerPlaceholder() &&
          !object.styleRef().isFlippedBlocksWritingMode() &&
@@ skipping 377 matching lines @@
       object.localToAncestorPoint(point, &ancestor, TraverseDocumentBoundaries);
   // Paint invalidation does not include scroll of the ancestor.
   if (ancestor.isBox()) {
     const LayoutBox* box = toLayoutBox(&ancestor);
     if (box->hasOverflowClip())
       result.move(box->scrolledContentOffset());
   }
   return result;
 }
 
+DISABLE_CFI_PERF
 LayoutPoint
 PaintInvalidationState::computePositionFromPaintInvalidationBacking() const {
 #if ENABLE(ASSERT)
   DCHECK(!m_didUpdateForChildren);
 #endif
 
   FloatPoint point;
   if (m_paintInvalidationContainer != &m_currentObject) {
     if (m_cachedOffsetsEnabled) {
       if (m_currentObject.isSVG() && !m_currentObject.isSVGRoot())
@@ skipping 204 matching lines @@
 }
 
 void PaintInvalidatorContextAdapter::mapLocalRectToPaintInvalidationBacking(
     const LayoutObject& object,
     LayoutRect& rect) const {
   DCHECK(&object == &m_paintInvalidationState.currentObject());
   m_paintInvalidationState.mapLocalRectToPaintInvalidationBacking(rect);
 }
 
 }  // namespace blink