Use logicalBottom when computing baselines in vertical-lr inline-blocks

third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp

Index: third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp
diff --git a/third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp b/third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp
index c642ec88a47a0df38f3b2fdb82a4712b5ca6d786..07a4c18aae21d12f44900a218a193e71d9e92c83 100644
--- a/third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp
+++ b/third_party/WebKit/Source/core/layout/LayoutBlockFlow.cpp
@@ -2563,6 +2563,13 @@ int LayoutBlockFlow::inlineBlockBaseline(
     DCHECK(fontData);
     if (!fontData)
       return -1;
+    // InlineFlowBox::placeBoxesInBlockDirection will flip lines in
+    // case of verticalLR mode, so we can assume verticalRL for now.
+    if (style()->isFlippedLinesWritingMode()) {
+      return (logicalHeight() - lastLineBox()->logicalBottom() +
+              fontData->getFontMetrics().ascent(lastRootBox()->baselineType()))
+          .toInt();
+    }
     return (lastLineBox()->logicalTop() +
             fontData->getFontMetrics().ascent(lastRootBox()->baselineType()))
         .toInt();