Fix ASSERT in ListMarkerPainter::paint

Source/core/paint/ListMarkerPainter.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "core/paint/ListMarkerPainter.h"
 
 #include "core/paint/BlockPainter.h"
 #include "core/paint/GraphicsContextAnnotator.h"
 #include "core/paint/RenderDrawingRecorder.h"
@@ skipping 172 matching lines @@
     IntPoint textOrigin = IntPoint(marker.x(), marker.y() + m_renderListMarker.style()->fontMetrics().ascent());
 
     if (type == Asterisks || type == Footnotes) {
         context->drawText(font, textRunPaintInfo, textOrigin);
     } else {
         // Text is not arbitrary. We can judge whether it's RTL from the first character,
         // and we only need to handle the direction RightToLeft for now.
         bool textNeedsReversing = WTF::Unicode::direction(m_renderListMarker.text()[0]) == WTF::Unicode::RightToLeft;
         StringBuilder reversedText;
         if (textNeedsReversing) {
-            int length = m_renderListMarker.text().length();
+            unsigned length = m_renderListMarker.text().length();
             reversedText.reserveCapacity(length);
             for (int i = length - 1; i >= 0; --i)
                 reversedText.append(m_renderListMarker.text()[i]);
-            ASSERT(reversedText.length() == reversedText.capacity());
+            ASSERT(reversedText.length() == length);
             textRun.setText(reversedText.toString());
         }
 
         const UChar suffix = m_renderListMarker.listMarkerSuffix(type, m_renderListMarker.listItem()->value());
         UChar suffixStr[2] = {
             m_renderListMarker.style()->isLeftToRightDirection() ? suffix : ' ',
             m_renderListMarker.style()->isLeftToRightDirection() ? ' ' : suffix
         };
         TextRun suffixRun = constructTextRun(&m_renderListMarker, font, suffixStr, 2, m_renderListMarker.style(), m_renderListMarker.style()->direction());
         TextRunPaintInfo suffixRunInfo(suffixRun);
         suffixRunInfo.bounds = marker;
 
         if (m_renderListMarker.style()->isLeftToRightDirection()) {
             context->drawText(font, textRunPaintInfo, textOrigin);
             context->drawText(font, suffixRunInfo, textOrigin + IntSize(font.width(textRun), 0));
         } else {
             context->drawText(font, suffixRunInfo, textOrigin);
             context->drawText(font, textRunPaintInfo, textOrigin + IntSize(font.width(suffixRun), 0));
         }
     }
 }
 
 } // namespace blink