Avoid crash in replaced layout, and fix behavior for non-auto aspect-ratio (#34006)

Also, it was assuming that the aspect ratio would work with the content
box dimensions, but that isn't the case for `aspect-ratio: <ratio>` with
`box-sizing: border-box`.

Signed-off-by: Oriol Brufau <obrufau@igalia.com>

tests/wpt/meta/MANIFEST.json

@@ -553,6 +553,17 @@
         ]
        ]
       }
+     },
+     "visudet": {
+      "crashtests": {
+       "canvas-huge-min-max-sizes.html": [
+        "63413085347c0d85a9e8c0b5f2b7c13467dba962",
+        [
+         null,
+         {}
+        ]
+       ]
+      }
      }
     },
     "compositing": {
@@ -569016,6 +569027,13 @@
         {}
        ]
       ],
+      "replaced-element-042.html": [
+       "2a301c3e1930d3351435ad17938b19c67ad85e8d",
+       [
+        null,
+        {}
+       ]
+      ],
       "sign-function-aspect-ratio.html": [
        "e5ba1a8321a42918cccee4ee164527fa25078e4f",
        [