ASSERTION FAILED: !m_parsedCalculation in CSSPropertyParser::parseCalculation

Source/core/css/parser/CSSPropertyParser.cpp

Index: Source/core/css/parser/CSSPropertyParser.cpp
diff --git a/Source/core/css/parser/CSSPropertyParser.cpp b/Source/core/css/parser/CSSPropertyParser.cpp
index 599d299e6335f7d45ddb302ded51cdd55ccf01a8..d25319097e7e05e5519176ae8fd3f92950f1f560 100644
--- a/Source/core/css/parser/CSSPropertyParser.cpp
+++ b/Source/core/css/parser/CSSPropertyParser.cpp
@@ -5554,7 +5554,8 @@ PassRefPtrWillBeRawPtr<CSSValueList> CSSPropertyParser::parseShadow(CSSParserVal
                 return nullptr;
 
             // Blur radius must be non-negative.
-            if (context.allowBlur && !validUnit(val, FLength | FNonNeg, HTMLStandardMode))
+            if (context.allowBlur && ((m_parsedCalculation && m_parsedCalculation->isNegative())
+                || !validUnit(val, FLength | FNonNeg, HTMLStandardMode)))

[rune, 2015/02/18 19:09:54]

Won't this still hit the assert for positive calc expressions?
(m_parsedCalculation && !m_parsedCalculation->isNegative() will call
validUnit())

                 return nullptr;
 
             // A length is allowed here.  Construct the value and add it.