Fix mapRectToPaintInvalidationBacking() wrong callers

Previously the callers called mapRectToPaintInvalidationBacking with
wrong parameters (passing paintInvalidationState pointer as 'bool fixed'
and the actual paintInvalidationState was 0).

As the 'bool fixed' parameter is only meaningful for RenderView, this
change removed the parameter from mapRectToPaintInvalidationBacking,
added RenderView::mapRectToPaintInvalidationBackingOfView() and let
RenderBox call the latter when the container is RenderView.

For previous wrong callers,
- RenderInline: disable paintInvalidationState offset caching because of
  crbug.com/402994
- RenderLayer: disable paintInvalidationState offset caching because of
  crbug.com/402983

The change in RenderInline fixes bug 402362. Previously as the 'fixed'
parameter was wrongly passed as 'true', the scroll offset of the view was
wrongly added to the repaint rect of some inlines.

BUG=403979,402994,402983
TEST=fast/repaint/inline-style-change-in-scrolled-view.html
TEST=svg/repaint/repaint-in-scrolled-view.html

Review URL: https://codereview.chromium.org/455253003

git-svn-id: svn://svn.chromium.org/blink/trunk@180579 bbb929c8-8fbe-4397-9dbb-9b2b20218538