Fix selection handles in vertical writing modes.

third_party/WebKit/Source/web/tests/data/composited_selection_bounds_vertical_rl.html

Index: third_party/WebKit/Source/web/tests/data/composited_selection_bounds_vertical_rl.html
diff --git a/third_party/WebKit/Source/web/tests/data/composited_selection_bounds_basic.html b/third_party/WebKit/Source/web/tests/data/composited_selection_bounds_vertical_rl.html
similarity index 75%
copy from third_party/WebKit/Source/web/tests/data/composited_selection_bounds_basic.html
copy to third_party/WebKit/Source/web/tests/data/composited_selection_bounds_vertical_rl.html
index 962418581e36ae592045e802c0453b07ec632c27..3ddfb245d34fe7f40522d4fb7f847cf7a809523e 100644
--- a/third_party/WebKit/Source/web/tests/data/composited_selection_bounds_basic.html
+++ b/third_party/WebKit/Source/web/tests/data/composited_selection_bounds_vertical_rl.html
@@ -6,6 +6,9 @@
     * {
         font-family: ahem;
     }
+    body {
+      -webkit-writing-mode: vertical-rl;
+    }
 </style>
 <span id="text">
     The quick brown fox jumped over the lazy dog.
@@ -17,6 +20,6 @@
     range.setEnd(textNode, 25);
     document.getSelection().addRange(range);
 
-    window.expectedResult = [document, 68, 8, 68, 20, document, 248, 8, 248, 20];
+    window.expectedResult = [document, 620, 68, 632, 68, document, 632, 248, 620, 248];
 </script>