position:fixed content is not offset by relative positioned ancestors

third_party/WebKit/Source/core/layout/LayoutBox.cpp

Index: third_party/WebKit/Source/core/layout/LayoutBox.cpp
diff --git a/third_party/WebKit/Source/core/layout/LayoutBox.cpp b/third_party/WebKit/Source/core/layout/LayoutBox.cpp
index d9673fa25ee06b0138ebd53efbb1bc8e85a0e74b..e09033effcb19066a6b60e4e4b296bd74c34ace6 100644
--- a/third_party/WebKit/Source/core/layout/LayoutBox.cpp
+++ b/third_party/WebKit/Source/core/layout/LayoutBox.cpp
@@ -4166,10 +4166,13 @@ void LayoutBox::computeBlockStaticDistance(
   LayoutUnit staticLogicalTop = child->layer()->staticBlockPosition();
   for (LayoutObject* curr = child->parent(); curr && curr != containerBlock;
        curr = curr->container()) {
-    if (!curr->isBox() || curr->isTableRow())
+    if (!curr->isBox())
       continue;
     const LayoutBox& box = *toLayoutBox(curr);
-    staticLogicalTop += box.logicalTop();
+    if (!curr->isTableRow())
+      staticLogicalTop += box.logicalTop();

[mstensho (USE GERRIT), 2016/12/16 11:53:00]

The table rows change here doesn't look right. I suggest that you revert this
part. Both table cells and table rows are relative to their containing table
section, so you end up adding the offset twice.

[Anton Obzhirov, 2016/12/16 14:46:31]

Will do, probably I already got an issue with a layout test because of this.

+    if (box.isInFlowPositioned())
+      staticLogicalTop += box.offsetForInFlowPosition().height();
     if (!box.isLayoutFlowThread())
       continue;
     // We're walking out of a flowthread here. This flow thread is not in the