Traverse into subdocuments when mapping plugin rects from absolute to local space.

third_party/WebKit/Source/web/WebPluginContainerImpl.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  * Copyright (C) 2014 Opera Software ASA. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 181 matching lines @@
 
     void calculateGeometry(
         IntRect& windowRect,
         IntRect& clipRect,
         IntRect& unobscuredRect,
         Vector<IntRect>& cutOutRects);
     void windowCutOutRects(
         const IntRect& frameRect,
         Vector<IntRect>& cutOutRects);
 
+    friend class WebPluginContainerTest;
+
     RawPtrWillBeMember<HTMLPlugInElement> m_element;
     WebPlugin* m_webPlugin;
 #if !ENABLE(OILPAN)
     Vector<WebPluginLoadObserver*> m_pluginLoadObservers;
 #endif
 
     WebLayer* m_webLayer;
 
     IntRect m_pendingInvalidationRect;
 
     TouchEventRequestType m_touchEventRequestType;
     bool m_wantsWheelEvents;
 
     bool m_inDispose;
 #if ENABLE(OILPAN)
     // Oilpan: if true, the plugin container must dispose
     // of its plugin when being finalized.
     bool m_shouldDisposePlugin;
 #endif
 };
 
 DEFINE_TYPE_CASTS(WebPluginContainerImpl, Widget, widget, widget->isPluginContainer(), widget.isPluginContainer());
 // Unlike Widget, we need not worry about object type for container.
 // WebPluginContainerImpl is the only subclass of WebPluginContainer.
 DEFINE_TYPE_CASTS(WebPluginContainerImpl, WebPluginContainer, container, true, true);
 
 } // namespace blink
 
 #endif