I made a typo in my previous checkin that swapped the arguments of clipToImageBuffer.
Created attachment 64745 [details] Patch
This is covered by pixel test of svg/filters/feComposite.svg
Comment on attachment 64745 [details] Patch LGTM!
Fixed in r65621.