Render string sequences of more than 64k characters.

Source/core/rendering/InlineIterator.h

 /*
  * Copyright (C) 2000 Lars Knoll (knoll@kde.org)
  * Copyright (C) 2003, 2004, 2006, 2007, 2008, 2009, 2010 Apple Inc. All right reserved.
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
@@ skipping 606 matching lines @@
 
 private:
     unsigned m_nestedIsolateCount;
     bool m_haveAddedFakeRunForRootIsolate;
     LineMidpointState m_midpointStateForRootIsolate;
     BidiRunList<BidiRun>& m_runs;
 };
 
 static void inline appendRunObjectIfNecessary(RenderObject* obj, unsigned start, unsigned end, InlineBidiResolver& resolver, AppendRunBehavior behavior, IsolateTracker& tracker)
 {
-    if (behavior == AppendingFakeRun)
-        tracker.addFakeRunIfNecessary(obj, start, end, resolver);
-    else
-        resolver.runs().addRun(createRun(start, end, obj, resolver));
+    // Trailing space code creates empty BidiRun objects, start == end, so
+    // that case needs to be handled specifically.
+    bool addEmptyRun = (end == start);
+
+    // Append BidiRun objects, at most 64K chars at a time, until all
+    // text between |start| and |end| is represented.
+    while (end > start || addEmptyRun) {
+        addEmptyRun = false;
+        const int limit = USHRT_MAX; // InlineTextBox stores text length as unsigned short.
+        unsigned limitedEnd = end;
+        if (end - start > limit)
+            limitedEnd = start + limit;
+        if (behavior == AppendingFakeRun)
+            tracker.addFakeRunIfNecessary(obj, start, limitedEnd, resolver);
+        else
+            resolver.runs().addRun(createRun(start, limitedEnd, obj, resolver));
+        start = limitedEnd;
+    }
 }
 
 static void adjustMidpointsAndAppendRunsForObjectIfNeeded(RenderObject* obj, unsigned start, unsigned end, InlineBidiResolver& resolver, AppendRunBehavior behavior, IsolateTracker& tracker)
 {
     if (start > end || RenderBlockFlow::shouldSkipCreatingRunsForObject(obj))
         return;
 
     LineMidpointState& lineMidpointState = resolver.midpointState();
     bool haveNextMidpoint = (lineMidpointState.currentMidpoint() < lineMidpointState.numMidpoints());
     InlineIterator nextMidpoint;
@@ skipping 81 matching lines @@
         m_sor = m_eor;
     }
 
     m_direction = WTF::Unicode::OtherNeutral;
     m_status.eor = WTF::Unicode::OtherNeutral;
 }
 
 }
 
 #endif // InlineIterator_h