GitLab

This patch fixes painting floats in self-painting inline.

To support this, this changes |PaintFloatingItems| to use
|NGInlineCursor| to traverse descendants.

Bug: 982194
Change-Id: I234ec7f32f895add62fe782aef133705fa7a7e61
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2078379
Commit-Queue: Ian Kilpatrick <ikilpatrick@chromium.org>
Reviewed-by: Morten Stenshorne <mstensho@chromium.org>
Reviewed-by: Ian Kilpatrick <ikilpatrick@chromium.org>
Cr-Commit-Position: refs/heads/master@{#745486}