Fix geometry mapping issues for float under inline

third_party/WebKit/Source/core/layout/LayoutGeometryMap.cpp

Index: third_party/WebKit/Source/core/layout/LayoutGeometryMap.cpp
diff --git a/third_party/WebKit/Source/core/layout/LayoutGeometryMap.cpp b/third_party/WebKit/Source/core/layout/LayoutGeometryMap.cpp
index a088fbd64064f1b60ec27a4641cdc9fca7353aa2..ee0f643bf71cc7f357e415bdeb0456b92e78f9c9 100644
--- a/third_party/WebKit/Source/core/layout/LayoutGeometryMap.cpp
+++ b/third_party/WebKit/Source/core/layout/LayoutGeometryMap.cpp
@@ -204,6 +204,10 @@ static bool canMapBetweenLayoutObjects(const LayoutObject* layoutObject,
 
     if (current == ancestor)
       break;
+
+    if (current->isFloating() && current->parent() &&

[wkorman, 2017/01/04 22:27:08]

Some concern re: unexpected ramifications of this, but indirect callsites look
limited to CompositingInputsUpdater and ScrollingCoordinator. It doesn't look
like there are any existing unit tests for this class. It seems worth adding
some if this is expected to be long-lived code, at least to cover this newly
added logic initially.

Perhaps add eae@ or szager@ to get layout team input.

[Xianzhu, 2017/01/04 22:49:59]

The unit test is here:
https://codereview.chromium.org/2575423003/diff2/100001:160001/third_party/We....

This function should return false if the parent-child relationship of
PaintLayers is different from the container-containee relationship of the
layers' objects.

+        !current->parent()->isLayoutBlock())
+      return false;
   }
 
   return true;