Don't create layout objects for children of display-none iframes.

third_party/WebKit/Source/core/layout/VisualRectMappingTest.cpp

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/layout/LayoutTestHelper.h"
 #include "core/layout/LayoutView.h"
 #include "core/layout/PaintInvalidationState.h"
 #include "core/paint/PaintLayer.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
@@ skipping 202 matching lines @@
                                           ProgrammaticScroll);
   LayoutRect originalRect(4, 60, 20, 80);
   LayoutRect rect = originalRect;
   EXPECT_TRUE(frameDiv->mapToVisualRectInAncestorSpace(frameContainer, rect));
   EXPECT_EQ(rect, LayoutRect(4, 13, 20, 37));
 
   Element* frameElement = document().getElementById("frame");
   frameElement->setInlineStyleProperty(CSSPropertyDisplay, "none");
   document().view()->updateAllLifecyclePhases();
 
-  rect = originalRect;
-  EXPECT_FALSE(frameDiv->mapToVisualRectInAncestorSpace(&layoutView(), rect));
-  EXPECT_EQ(rect, LayoutRect());
+  frameBody = toLayoutBlock(childDocument().body()->layoutObject());
+  EXPECT_EQ(nullptr, frameBody);
 }
 
 TEST_F(VisualRectMappingTest, SelfFlippedWritingMode) {
   setBodyInnerHTML(
       "<div id='target' style='writing-mode: vertical-rl; box-shadow: 40px "
       "20px black;"
       "    width: 100px; height: 50px; position: absolute; top: 111px; left: "
       "222px'>"
       "</div>");
 
@@ skipping 455 matching lines @@
   LayoutRect targetVisualRect = target->localVisualRect();
   EXPECT_EQ(LayoutRect(0, 0, 400, 400), targetVisualRect);
   LayoutRect rect = targetVisualRect;
   EXPECT_TRUE(target->mapToVisualRectInAncestorSpace(&layoutView(), rect));
   EXPECT_EQ(LayoutRect(0, 0, 200, 200), rect);
   checkPaintInvalidationStateRectMapping(rect, targetVisualRect, *target,
                                          layoutView(), layoutView());
 }
 
 }  // namespace blink