[SPInvalidation] Use GeometryMapper in PaintLayerClipper for paint.

third_party/WebKit/Source/web/PageWidgetDelegate.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 65 matching lines @@
     // not be used within Blink paint code.
     float scaleFactor = page.deviceScaleFactor();
     paintContext.setDeviceScaleFactor(scaleFactor);
 
     AffineTransform scale;
     scale.scale(scaleFactor);
     TransformRecorder scaleRecorder(paintContext, pictureBuilder, scale);
 
     IntRect dirtyRect(rect);
     FrameView* view = root.view();
+    view->updateAllLifecyclePhasesExceptPaint();

[chrishtr, 2017/02/12 19:24:34]

Fixed this bug in patch set 15. This call site happens on Android
for painting disambiguation dialogs, in response to a hit test. But hit
testing currently does not run pre-paint.

     if (view) {
       ClipRecorder clipRecorder(paintContext, pictureBuilder,
                                 DisplayItem::kPageWidgetDelegateClip,
                                 dirtyRect);
       view->paint(paintContext, globalPaintFlags, CullRect(dirtyRect));
     } else {
       DrawingRecorder drawingRecorder(
           paintContext, pictureBuilder,
           DisplayItem::kPageWidgetDelegateBackgroundFallback, dirtyRect);
       paintContext.fillRect(dirtyRect, Color::white);
@@ skipping 171 matching lines @@
     const WebTouchEvent& event,
     const std::vector<const WebInputEvent*>& coalescedEvents) {
   WebTouchEvent transformedEvent =
       TransformWebTouchEvent(mainFrame.view(), event);
   return mainFrame.eventHandler().handleTouchEvent(
       transformedEvent,
       TransformWebTouchEventVector(mainFrame.view(), coalescedEvents));
 }
 
 }  // namespace blink