Fix layout object lifecycle in HTMLElement.offset*

third_party/WebKit/Source/core/html/HTMLElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  * Copyright (C) 2004-2008, 2013, 2014 Apple Inc. All rights reserved.
  * Copyright (C) 2009 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/)
  * Copyright (C) 2011 Motorola Mobility. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 1036 matching lines @@
 }
 
 const AtomicString& HTMLElement::eventParameterName()
 {
     DEFINE_STATIC_LOCAL(const AtomicString, eventString, ("event"));
     return eventString;
 }
 
 int HTMLElement::offsetLeftForBinding()
 {
-    document().updateStyleAndLayoutIgnorePendingStylesheetsForNode(this);
+    Element* offsetParent = unclosedOffsetParent();
     if (LayoutBoxModelObject* layoutObject = layoutBoxModelObject())
-        return adjustLayoutUnitForAbsoluteZoom(LayoutUnit(layoutObject->pixelSnappedOffsetLeft(unclosedOffsetParent())), layoutObject->styleRef()).round();
+        return adjustLayoutUnitForAbsoluteZoom(LayoutUnit(layoutObject->pixelSnappedOffsetLeft(offsetParent)), layoutObject->styleRef()).round();
     return 0;
 }
 
 int HTMLElement::offsetTopForBinding()
 {
-    document().updateStyleAndLayoutIgnorePendingStylesheetsForNode(this);
+    Element* offsetParent = unclosedOffsetParent();
     if (LayoutBoxModelObject* layoutObject = layoutBoxModelObject())
-        return adjustLayoutUnitForAbsoluteZoom(LayoutUnit(layoutObject->pixelSnappedOffsetTop(unclosedOffsetParent())), layoutObject->styleRef()).round();
+        return adjustLayoutUnitForAbsoluteZoom(LayoutUnit(layoutObject->pixelSnappedOffsetTop(offsetParent)), layoutObject->styleRef()).round();
     return 0;
 }
 
 int HTMLElement::offsetWidthForBinding()
 {
-    document().updateStyleAndLayoutIgnorePendingStylesheetsForNode(this);
+    Element* offsetParent = unclosedOffsetParent();
     if (LayoutBoxModelObject* layoutObject = layoutBoxModelObject())
-        return adjustLayoutUnitForAbsoluteZoom(LayoutUnit(layoutObject->pixelSnappedOffsetWidth(unclosedOffsetParent())), layoutObject->styleRef()).round();
+        return adjustLayoutUnitForAbsoluteZoom(LayoutUnit(layoutObject->pixelSnappedOffsetWidth(offsetParent)), layoutObject->styleRef()).round();
     return 0;
 }
 
 int HTMLElement::offsetHeightForBinding()
 {
-    document().updateStyleAndLayoutIgnorePendingStylesheetsForNode(this);
+    Element* offsetParent = unclosedOffsetParent();
     if (LayoutBoxModelObject* layoutObject = layoutBoxModelObject())
-        return adjustLayoutUnitForAbsoluteZoom(LayoutUnit(layoutObject->pixelSnappedOffsetHeight(unclosedOffsetParent())), layoutObject->styleRef()).round();
+        return adjustLayoutUnitForAbsoluteZoom(LayoutUnit(layoutObject->pixelSnappedOffsetHeight(offsetParent)), layoutObject->styleRef()).round();
     return 0;
 }
 
 Element* HTMLElement::unclosedOffsetParent()
 {
     document().updateStyleAndLayoutIgnorePendingStylesheetsForNode(this);
 
     LayoutObject* layoutObject = this->layoutObject();
     if (!layoutObject)
         return nullptr;
 
     return layoutObject->offsetParent(this);
 }
 
 } // namespace blink
 
 #ifndef NDEBUG
 
 // For use in the debugger
 void dumpInnerHTML(blink::HTMLElement*);
 
 void dumpInnerHTML(blink::HTMLElement* element)
 {
     printf("%s\n", element->innerHTML().ascii().data());
 }
 #endif