Invalidate display item clients of inline boxes when destroyed

We should invalidate all display item clients being destroyed,
otherwise the cache will mistakenly use cached item for some new
display item client using the same pointer. We have ensured this
for LayoutObjects and normal scroll bars.

This change is for inline boxes. There may be also a few more CLs
like this one if needed.

(This kind of issues can be discovered with
slimmingPaintUnderInvalidationChecking feature enabled)

TEST=ViewDisplayListTest.InlineReflow

Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=192112

Review URL: https://codereview.chromium.org/1002503003

git-svn-id: svn://svn.chromium.org/blink/trunk@192302 bbb929c8-8fbe-4397-9dbb-9b2b20218538
4 files changed