Created attachment 438036 [details]
When an element has display:inline in a parent with writing-mode:vertical-rl, the offsetLeft property of the element is calculated incorrectly. In some cases, a negative number may be returned. This behavior can be observed in the attached test case, which prints the value of offsetLeft to the console.
Created attachment 438141 [details]
Created attachment 438230 [details]
Committed r282447 (241700@main): <https://commits.webkit.org/241700@main>
All reviewed patches have been landed. Closing bug and clearing flags on attachment 438230 [details].