Fix sticky bottom is not applied with both sticky position

third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp

Index: third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp
diff --git a/third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp b/third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp
index 54951eb17f9f976c2ef257245e5792797d1e35e7..1542d1952fe83ff4ae9161193e5e9adba930ad0e 100644
--- a/third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp
+++ b/third_party/WebKit/Source/core/layout/LayoutBoxModelObject.cpp
@@ -999,8 +999,7 @@ void LayoutBoxModelObject::updateStickyPositionConstraints() const {
   if (!style()->left().isAuto() && !style()->right().isAuto()) {
     if (horizontalOffsets >
             scrollContainerRelativeContainingBlockRect.width() ||
-        horizontalOffsets + scrollContainerRelativeContainingBlockRect.width() >
-            constrainingSize.width()) {
+        horizontalOffsets + stickyBoxRect.width() > constrainingSize.width()) {
       skipRight = style()->isLeftToRightDirection();
       skipLeft = !skipRight;
     }
@@ -1031,8 +1030,7 @@ void LayoutBoxModelObject::updateStickyPositionConstraints() const {
                             LayoutUnit(constrainingSize.height()));
   if (!style()->top().isAuto() && !style()->bottom().isAuto()) {
     if (verticalOffsets > scrollContainerRelativeContainingBlockRect.height() ||
-        verticalOffsets + scrollContainerRelativeContainingBlockRect.height() >
-            constrainingSize.height()) {
+        verticalOffsets + stickyBoxRect.height() > constrainingSize.height()) {
       skipBottom = true;
     }
   }