Fix off by one in creating a RasterShape

Source/core/rendering/shapes/RasterShape.cpp

 /*
  * Copyright (C) 2013 Adobe Systems Incorporated. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1. Redistributions of source code must retain the above
  *    copyright notice, this list of conditions and the following
  *    disclaimer.
@@ skipping 68 matching lines @@
     OwnPtr<RasterShapeIntervals> result = adoptPtr(new RasterShapeIntervals(marginIntervalsSize, std::max(shapeMargin, offset())));
     MarginIntervalGenerator marginIntervalGenerator(shapeMargin);
 
     for (int y = bounds().y(); y < bounds().maxY(); ++y) {
         const IntShapeInterval& intervalAtY = intervalAt(y);
         if (intervalAtY.isEmpty())
             continue;
 
         marginIntervalGenerator.set(y, intervalAtY);
         int marginY0 = std::max(minY(), y - shapeMargin);
-        int marginY1 = std::min(maxY(), y + shapeMargin);
+        int marginY1 = std::min(maxY(), y + shapeMargin + 1);
 
         for (int marginY = y - 1; marginY >= marginY0; --marginY) {
             if (marginY > bounds().y() && intervalAt(marginY).contains(intervalAtY))
                 break;
             result->intervalAt(marginY).unite(marginIntervalGenerator.intervalAt(marginY));
         }
 
         result->intervalAt(y).unite(marginIntervalGenerator.intervalAt(y));
 
-        for (int marginY = y + 1; marginY <= marginY1; ++marginY) {
+        for (int marginY = y + 1; marginY < marginY1; ++marginY) {
             if (marginY < bounds().maxY() && intervalAt(marginY).contains(intervalAtY))
                 break;
             result->intervalAt(marginY).unite(marginIntervalGenerator.intervalAt(marginY));
         }
     }
 
     result->initializeBounds();
     return result.release();
 }
 
@@ skipping 59 matching lines @@
     for (int y = y1; y < y2;  y++)
         excludedInterval.unite(intervals.intervalAt(y));
 
     // Note: |marginIntervals()| returns end-point exclusive
     // intervals. |excludedInterval.x2()| contains the left-most pixel
     // offset to the right of the calculated union.
     result.append(LineSegment(excludedInterval.x1(), excludedInterval.x2()));
 }
 
 } // namespace WebCore