Update :in-range/:out-of-range when steppable min/max/value changes.

third_party/WebKit/Source/core/html/forms/InputType.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011 Apple Inc. All
  * rights reserved.
  *           (C) 2006 Alexey Proskuryakov (ap@nypop.com)
  * Copyright (C) 2007 Samuel Weinig (sam@webkit.org)
  * Copyright (C) 2009, 2010, 2011, 2012 Google Inc. All rights reserved.
  * Copyright (C) 2012 Samsung Electronics. All rights reserved.
@@ skipping 279 matching lines @@
   const Decimal numericValue = parseToNumberOrNaN(value);
   if (!numericValue.isFinite())
     return false;
 
   StepRange stepRange(createStepRange(RejectAny));
   return stepRange.hasRangeLimitations() &&
          (numericValue < stepRange.minimum() ||
           numericValue > stepRange.maximum());
 }
 
+void InputType::inRangeChanged() const {
+  if (isSteppable()) {
+    element().pseudoStateChanged(CSSSelector::PseudoInRange);
+    element().pseudoStateChanged(CSSSelector::PseudoOutOfRange);
+  }
+}
+
 bool InputType::stepMismatch(const String& value) const {
   if (!isSteppable())
     return false;
 
   const Decimal numericValue = parseToNumberOrNaN(value);
   if (!numericValue.isFinite())
     return false;
 
   return createStepRange(RejectAny).stepMismatch(numericValue);
 }
@@ skipping 597 matching lines @@
 
 void InputType::addWarningToConsole(const char* messageFormat,
                                     const String& value) const {
   element().document().addConsoleMessage(ConsoleMessage::create(
       RenderingMessageSource, WarningMessageLevel,
       String::format(messageFormat,
                      JSONValue::quoteString(value).utf8().data())));
 }
 
 }  // namespace blink