Box painting is incorrect for overflow into variable width regions. This is because we were clamping the region range for children to their containing block ranges. It's better to have the range for a box be completely accurate and unclamped, and only when querying containing block region info should we clamp. This fixes overflow rendering to be fully correct.
Created attachment 110203 [details]
Fixed in r96975.