Merge 105685 - Crash in WebCore::RenderTableSection::rowLogicalHeightChanged

Source/WebCore/rendering/RenderTableSection.cpp

Index: Source/WebCore/rendering/RenderTableSection.cpp
===================================================================
--- Source/WebCore/rendering/RenderTableSection.cpp	(revision 105791)
+++ Source/WebCore/rendering/RenderTableSection.cpp	(working copy)
@@ -1155,6 +1155,22 @@
     setNeedsLayout(true);
 }
 
+// FIXME: This function could be made O(1) in certain cases (like for the non-most-constrainive cells' case).
+void RenderTableSection::rowLogicalHeightChanged(unsigned rowIndex)
+{
+    if (needsCellRecalc())
+        return;
+
+    setRowLogicalHeightToRowStyleLogicalHeightIfNotRelative(m_grid[rowIndex]);
+
+    for (RenderObject* cell = m_grid[rowIndex].rowRenderer->firstChild(); cell; cell = cell->nextSibling()) {
+        if (!cell->isTableCell())
+            continue;
+
+        updateLogicalHeightForCell(m_grid[rowIndex], toRenderTableCell(cell));
+    }
+}
+
 void RenderTableSection::setNeedsCellRecalc()
 {
     m_needsCellRecalc = true;