:-webkit-any pseudo with escaped '(' should not crash.

Source/core/css/CSSParserValues.h

 /*
  * Copyright (C) 2003 Lars Knoll (knoll@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2008, 2009, 2010 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 103 matching lines @@
         if (length() < strLength)
             return false;
         return is8Bit() ? WTF::equalIgnoringCase(str, characters8(), strLength) : WTF::equalIgnoringCase(str, characters16(), strLength);
     }
 
     operator String() const { return is8Bit() ? String(m_data.characters8, m_length) : StringImpl::create8BitIfPossible(m_data.characters16, m_length); }
     operator AtomicString() const { return is8Bit() ? AtomicString(m_data.characters8, m_length) : AtomicString(m_data.characters16, m_length); }
 
     AtomicString atomicSubstring(unsigned position, unsigned length) const;
 
+    bool isFunction() const { return length() > 0 && (*this)[length() - 1] == '('; }
+
     union {
         const LChar* characters8;
         const UChar* characters16;
     } m_data;
     unsigned m_length;
     bool m_is8Bit;
 };
 
 struct CSSParserFunction;
 
@@ skipping 125 matching lines @@
 inline void CSSParserValue::setFromFunction(CSSParserFunction* function)
 {
     id = CSSValueInvalid;
     this->function = function;
     unit = Function;
 }
 
 }
 
 #endif