Fix fragmentation freeze at tall trailing fieldset border.

The legend may stretch the fieldset border-box block-size, so that we
may have to override the block-size constraining CSS properties, to
encompass the legend in the fieldset. This should of course result in
the same override at every fragment, since ComputeBlockSizeForFragment()
works on total / "stitched" block-sizes.

Bug: 1323250
Change-Id: I48aec9a308cff40d19127e6a5a2dcc69abcedb41
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3634342
Reviewed-by: Alison Maher <almaher@microsoft.com>
Commit-Queue: Morten Stenshorne <mstensho@chromium.org>
Reviewed-by: Ian Kilpatrick <ikilpatrick@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1001406}
diff --git a/css/css-multicol/crashtests/nested-multicol-fieldset-tall-trailing-border-freeze.html b/css/css-multicol/crashtests/nested-multicol-fieldset-tall-trailing-border-freeze.html
new file mode 100644
index 0000000..014073a
--- /dev/null
+++ b/css/css-multicol/crashtests/nested-multicol-fieldset-tall-trailing-border-freeze.html
@@ -0,0 +1,12 @@
+<!DOCTYPE html>
+<link rel="author" title="Morten Stenshorne" href="mailto:mstensho@chromium.org">
+<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1323250">
+<div style="columns:2; height:100px; column-fill:auto;">
+  <div style="height:10px;"></div>
+  <div style="columns:1; height:100px; column-fill:auto;">
+    <fieldset style="height:100px; border:none; padding:0; margin:0; border:1px solid; padding-bottom:19px;">
+      <legend style="padding:0; margin:0;"></legend>
+      <div></div>
+    </fieldset>
+  </div>
+</div>