| Index: third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp
 | 
| diff --git a/third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp b/third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp
 | 
| index 972589c6399330846e16d0ad68286ee1a805c607..0464d77a0dd82085ff6c4c113057e0eeff722d68 100644
 | 
| --- a/third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp
 | 
| +++ b/third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp
 | 
| @@ -2412,7 +2412,7 @@ void LayoutBlockFlow::addOverflowFromFloats() {
 | 
|      const FloatingObject& floatingObject = *it->get();
 | 
|      if (floatingObject.isDescendant())
 | 
|        addOverflowFromChild(
 | 
| -          floatingObject.layoutObject(),
 | 
| +          *floatingObject.layoutObject(),
 | 
|            LayoutSize(xPositionForFloatIncludingMargin(floatingObject),
 | 
|                       yPositionForFloatIncludingMargin(floatingObject)));
 | 
|    }
 | 
| @@ -3909,7 +3909,7 @@ void LayoutBlockFlow::addOverhangingFloats(LayoutBlockFlow* child,
 | 
|        // need to go ahead and add its overflow in to the child now.
 | 
|        if (floatingObject.isDescendant())
 | 
|          child->addOverflowFromChild(
 | 
| -            floatingObject.layoutObject(),
 | 
| +            *floatingObject.layoutObject(),
 | 
|              LayoutSize(xPositionForFloatIncludingMargin(floatingObject),
 | 
|                         yPositionForFloatIncludingMargin(floatingObject)));
 | 
|      }
 | 
| 
 |