Use viewportConstrainedVisibleContentRect() to get the scrolling offset

Source/web/FindInPageCoordinates.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 69 matching lines @@
         return FloatRect();
 
     // Make the coordinates relative to the container enclosing bounding box.
     // Since we work with rects enclosing quad unions this is still transform-friendly.
     FloatRect normalizedRect = absoluteRect;
     normalizedRect.moveBy(-containerRect.location());
 
     // Fixed positions do not make sense in this coordinate system, but need to leave consistent tickmarks.
     // So, use their position when the view is not scrolled, like an absolute position.
     if (renderer->style()->position() == FixedPosition && container->isRenderView())
-        normalizedRect.move(-toRenderView(container)->frameView()->scrollOffsetForFixedPosition());
+        normalizedRect.move(-toRenderView(container)->frameView()->scrollOffsetForViewportConstrainedObjects());
 
     normalizedRect.scale(1 / containerRect.width(), 1 / containerRect.height());
     return normalizedRect;
 }
 
 FloatRect findInPageRectFromAbsoluteRect(const FloatRect& inputRect, const RenderObject* baseRenderer)
 {
     if (!baseRenderer || inputRect.isEmpty())
         return FloatRect();
 
@@ skipping 27 matching lines @@
 
 FloatRect findInPageRectFromRange(Range* range)
 {
     if (!range || !range->firstNode())
         return FloatRect();
 
     return findInPageRectFromAbsoluteRect(RenderObject::absoluteBoundingBoxRectForRange(range), range->firstNode()->renderer());
 }
 
 } // namespace blink