You need to fix SCROLL_GetScrollBarRect for the SB_CTL case instead.
SCROLL_GetScrollBarRect is used is used in multiple places where client coordinates are expected, and it isn't just the SB_CTL case that needs to be changed, in fact it was the SB_VERT case that I noticed first.
EqualRect is better than memcmp.