Fix Assert failure for test case bug7714.html

Source/core/rendering/RenderTableSection.cpp

Index: Source/core/rendering/RenderTableSection.cpp
diff --git a/Source/core/rendering/RenderTableSection.cpp b/Source/core/rendering/RenderTableSection.cpp
index 282e7fa45ab0745dbbfa2c5ae61cf3c6524ae5f8..b28cc9867a14ec8a632ef94768c7d5749df04996 100644
--- a/Source/core/rendering/RenderTableSection.cpp
+++ b/Source/core/rendering/RenderTableSection.cpp
@@ -425,8 +425,10 @@ void RenderTableSection::distributeRowSpanHeightToRows(SpanningRenderTableCells&
 
         populateSpanningRowsHeightFromCell(cell, spanningRowsHeight);
 
-        if (!spanningRowsHeight.totalRowsHeight || spanningRowsHeight.spanningCellHeightIgnoringBorderSpacing <= spanningRowsHeight.totalRowsHeight)
+        if (!spanningRowsHeight.totalRowsHeight || spanningRowsHeight.spanningCellHeightIgnoringBorderSpacing <= spanningRowsHeight.totalRowsHeight) {
+            m_rowPos[rowIndex + rowSpan] -= extraHeightToPropagate;

[Julien - ping for review, 2013/08/06 18:08:08]

*sigh*, this is called wac-a-molling. The minute you add an extra continue
somewhere in this loop, we have another bug.

You landed the change with the let-s-add-and-remove-the-same-quantity which is
super dumb and with this bug, it really prompts the question of whether the
approach couldn't be improved.

             continue;
+        }
 
         int totalPercent = 0;
         int totalAutoRowsHeight = 0;