Don't overflow LocalFrameView size.

BUG=841791
R=skobes@chromium.org

Change-Id: I41ebc90803c4398aaaab3a8713e34fd3824595c5
Reviewed-on: https://chromium-review.googlesource.com/1055675Reviewed-by: Stefan Zager <szager@chromium.org>
Reviewed-by: Steve Kobes <skobes@chromium.org>
Commit-Queue: Stefan Zager <szager@chromium.org>
Cr-Commit-Position: refs/heads/master@{#558161}

third_party/blink/renderer/core/frame/local_frame_view.cc

@@ -644,8 +644,10 @@ IntPoint LocalFrameView::Location() const {
   if (owner) {
     LayoutView* owner_layout_view = owner->View();
     DCHECK(owner_layout_view);
-    if (owner_layout_view->HasOverflowClip())
-      location.Move(-owner_layout_view->ScrolledContentOffset());
+    if (owner_layout_view->HasOverflowClip()) {
+      IntSize scroll_offset(owner_layout_view->ScrolledContentOffset());
+      location.SaturatedMove(-scroll_offset.Width(), -scroll_offset.Height());
+    }
   }
   return location;
 }