NULL-deref in RenderBox::clippedOverflowRectForRepaint