SVGRoot's writing-mode should not affect SVGText/SVGForeign's location

third_party/WebKit/Source/core/layout/LayoutBox.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2005 Allan Sandfeld Jensen (kde@carewolf.com)
  *           (C) 2005, 2006 Samuel Weinig (sam.weinig@gmail.com)
  * Copyright (C) 2005, 2006, 2007, 2008, 2009, 2010 Apple Inc.
  *               All rights reserved.
  * Copyright (C) 2013 Adobe Systems Incorporated. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
@@ skipping 5159 matching lines @@
     return point;
 
   // The child is going to add in its x(), so we have to make sure it ends up in
   // the right place.
   return LayoutPoint(point.x() + size().width() - child->size().width() -
                          (2 * child->location().x()),
                      point.y());
 }
 
 LayoutBox* LayoutBox::locationContainer() const {
+  // Location of a non-root SVG object derived from LayoutBox should not be
+  // affected by writing-mode of the containing box (SVGRoot).
+  if (isSVG() && !isSVGRoot())
+    return nullptr;
+
   // Normally the box's location is relative to its containing box.
   LayoutObject* container = this->container();
   while (container && !container->isBox())
     container = container->container();
   return toLayoutBox(container);
 }
 
 LayoutPoint LayoutBox::topLeftLocation(
     const LayoutBox* flippedBlocksContainer) const {
   const LayoutBox* containerBox;
@@ skipping 429 matching lines @@
   LayoutRect rect = frameRect();
 
   LayoutBlock* block = containingBlock();
   if (block)
     block->adjustChildDebugRect(rect);
 
   return rect;
 }
 
 }  // namespace blink