Second reland: Fix incorrect sign in scroll and content box offset in absoluteToLocalPoint.

third_party/WebKit/Source/core/layout/LayoutView.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 377 matching lines @@
 
     if (mode & UseTransforms && shouldUseTransformFromContainer(0)) {
         TransformationMatrix t;
         getTransformFromContainer(0, LayoutSize(), t);
         transformState.applyTransform(t);
     }
 
     if (mode & TraverseDocumentBoundaries) {
         if (LayoutPart* parentDocLayoutObject = frame()->ownerLayoutObject()) {
             parentDocLayoutObject->mapAbsoluteToLocalPoint(mode, transformState);
-
-            transformState.move(-parentDocLayoutObject->contentBoxOffset());
-            transformState.move(frame()->view()->scrollOffset());
+            transformState.move(parentDocLayoutObject->contentBoxOffset());
+            transformState.move(-frame()->view()->scrollOffset());
         }
     }
 }
 
 void LayoutView::computeSelfHitTestRects(Vector<LayoutRect>& rects, const LayoutPoint&) const
 {
     // Record the entire size of the contents of the frame. Note that we don't just
     // use the viewport size (containing block) here because we want to ensure this includes
     // all children (so we can avoid walking them explicitly).
     rects.append(LayoutRect(LayoutPoint::zero(), LayoutSize(frameView()->contentsSize())));
@@ skipping 585 matching lines @@
 }
 
 void LayoutView::sendMediaPositionChangeNotifications(const IntRect& visibleRect)
 {
     for (auto& media : m_mediaForPositionNotification) {
         media->notifyPositionMayHaveChanged(visibleRect);
     }
 }
 
 } // namespace blink