[CSS Shapes] line height grows around polygon and incorrectly causes text to wrap to next line

Source/core/rendering/shapes/PolygonShape.cpp

 /*
  * Copyright (C) 2012 Adobe Systems Incorporated. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1. Redistributions of source code must retain the above
  *    copyright notice, this list of conditions and the following
  *    disclaimer.
@@ skipping 51 matching lines @@
     if (y == minY())
         return vertex1().y() < vertex2().y() ? vertex1().x() : vertex2().x();
     if (y == maxY())
         return vertex1().y() > vertex2().y() ? vertex1().x() : vertex2().x();
 
     return vertex1().x() + ((y - vertex1().y()) * (vertex2().x() - vertex1().x()) / (vertex2().y() - vertex1().y()));
 }
 
 FloatShapeInterval OffsetPolygonEdge::clippedEdgeXRange(float y1, float y2) const
 {
-    if (!overlapsYRange(y1, y2) || (y1 == maxY() && vertex2().y() < vertex1().y()))
+    if (!overlapsYRange(y1, y2) || (y1 == maxY() && minY() <= y1) || (y2 == minY() && maxY() >= y2))
         return FloatShapeInterval();
 
     if (isWithinYRange(y1, y2))
         return FloatShapeInterval(minX(), maxX());
 
     // Clip the edge line segment to the vertical range y1,y2 and then return
     // the clipped line segment's horizontal range.
 
     FloatPoint minYVertex;
     FloatPoint maxYVertex;
@@ skipping 71 matching lines @@
 {
     if (!m_polygon.numberOfVertices())
         return;
     paths.shape.moveTo(m_polygon.vertexAt(0));
     for (size_t i = 1; i < m_polygon.numberOfVertices(); ++i)
         paths.shape.addLineTo(m_polygon.vertexAt(i));
     paths.shape.closeSubpath();
 }
 
 } // namespace WebCore