Merge 145822 "REGRESSION(r145305) Performance: 1.3% mac-release-..."

Source/WebCore/rendering/RenderTableCell.cpp

Index: Source/WebCore/rendering/RenderTableCell.cpp
===================================================================
--- Source/WebCore/rendering/RenderTableCell.cpp	(revision 147363)
+++ Source/WebCore/rendering/RenderTableCell.cpp	(working copy)
@@ -251,7 +251,7 @@
     // for layout (the padding required to push the contents of the cell down to the row's baseline) is included in our new height and baseline and makes both
     // of them wrong. So if our content's intrinsic height has changed push the new content up into the intrinsic padding and relayout so that the rest of
     // table and row layout can use the correct baseline and height for this cell.
-    if (isBaselineAligned() && cellBaselinePosition() > section()->rowBaseline(rowIndex())) {
+    if (isBaselineAligned() && section()->rowBaseline(rowIndex()) && cellBaselinePosition() > section()->rowBaseline(rowIndex())) {
         int newIntrinsicPaddingBefore = max<LayoutUnit>(0, intrinsicPaddingBefore() - max<LayoutUnit>(0, cellBaselinePosition() - oldCellBaseline));
         setIntrinsicPaddingBefore(newIntrinsicPaddingBefore);
         setNeedsLayout(true, MarkOnlyThis);