clipRects = *parent()->clipRects(clipRectsContext); is unsafe.
Created attachment 290208 [details] Patch
Comment on attachment 290208 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=290208&action=review > Source/WebCore/rendering/RenderLayer.cpp:-5572 > - clipRects = *parent()->clipRects(clipRectsContext); This is actually safe although non obvious. I suggest we update updateClipRects() to return the cached value and return that.
Created attachment 290232 [details] Patch
Comment on attachment 290232 [details] Patch Gorgeous, r=me
Created attachment 290335 [details] Patch
Comment on attachment 290335 [details] Patch Clearing flags on attachment: 290335 Committed r206639: <http://trac.webkit.org/changeset/206639>
All reviewed patches have been landed. Closing bug.