offset-rotate: Clamp rotation to float prior to assignment

third_party/WebKit/Source/core/css/resolver/StyleBuilderConverter.cpp

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
  * copyright notice, this list of conditions and the following disclaimer
  * in the documentation and/or other materials provided with the
  * distribution.
  *     * Neither the name of Google Inc. nor the names of its
@@ skipping 877 matching lines @@
 
   const CSSValueList& list = toCSSValueList(value);
   ASSERT(list.length() == 1 || list.length() == 2);
   for (const auto& item : list) {
     if (item->isIdentifierValue() &&
         toCSSIdentifierValue(*item).getValueID() == CSSValueAuto) {
       result.type = OffsetRotationAuto;
     } else if (item->isIdentifierValue() &&
                toCSSIdentifierValue(*item).getValueID() == CSSValueReverse) {
       result.type = OffsetRotationAuto;
-      result.angle += 180;
+      result.angle = clampTo<float>(result.angle + 180);
     } else {
       const CSSPrimitiveValue& primitiveValue = toCSSPrimitiveValue(*item);
-      result.angle += primitiveValue.computeDegrees();
+      result.angle =
+          clampTo<float>(result.angle + primitiveValue.computeDegrees());
     }
   }
-  result.angle = clampTo<float>(result.angle);
 
   return result;
 }
 
 LengthPoint StyleBuilderConverter::convertPosition(StyleResolverState& state,
                                                    const CSSValue& value) {
   const CSSValuePair& pair = toCSSValuePair(value);
   return LengthPoint(
       convertPositionLength<CSSValueLeft, CSSValueRight>(state, pair.first()),
       convertPositionLength<CSSValueTop, CSSValueBottom>(state, pair.second()));
@@ skipping 380 matching lines @@
       // Instead of the actual zoom, use 1 to avoid potential rounding errors
       Length length = primitiveValue.convertToLength(
           state.cssToLengthConversionData().copyWithAdjustedZoom(1));
       return *CSSPrimitiveValue::create(length, 1);
     }
   }
   return value;
 }
 
 }  // namespace blink