Don't delete nodes in the float interval tree while traversing it.

Source/core/rendering/shapes/ShapeOutsideInfo.cpp

Index: Source/core/rendering/shapes/ShapeOutsideInfo.cpp
diff --git a/Source/core/rendering/shapes/ShapeOutsideInfo.cpp b/Source/core/rendering/shapes/ShapeOutsideInfo.cpp
index f269bf875874f9555f7ff4be63c404d414825454..135457282bc7153127edf25ac80e2f3d24a0519a 100644
--- a/Source/core/rendering/shapes/ShapeOutsideInfo.cpp
+++ b/Source/core/rendering/shapes/ShapeOutsideInfo.cpp
@@ -142,6 +142,8 @@ const Shape& ShapeOutsideInfo::computedShape() const
     if (Shape* shape = m_shape.get())
         return *shape;
 
+    TemporaryChange<bool> isInComputingShape(m_isComputingShape, true);
+
     const RenderStyle& style = *m_renderer.style();
     ASSERT(m_renderer.containingBlock());
     const RenderStyle& containingBlockStyle = *m_renderer.containingBlock()->style();