Table conent is rendered over the border when colspan present with rowspan.

Source/core/rendering/RenderTableSection.cpp

 /*
  * Copyright (C) 1997 Martin Jones (mjones@kde.org)
  *           (C) 1997 Torben Weis (weis@kde.org)
  *           (C) 1998 Waldo Bastian (bastian@kde.org)
  *           (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  * Copyright (C) 2003, 2004, 2005, 2006, 2008, 2009, 2010 Apple Inc. All rights reserved.
  * Copyright (C) 2006 Alexey Proskuryakov (ap@nypop.com)
  *
  * This library is free software; you can redistribute it and/or
@@ skipping 402 matching lines @@
     if (cellIsFullyIncludedInOtherCell(cell1, cell2))
         return true;
     // Sorting lower row index first because first we need to apply the extra height of spanning cell which
     // comes first in the table so lower rows's position would increment in sequence.
     if (cellIsFullyIncludedInOtherCell(cell2, cell1))
         return (cell1->rowIndex() < cell2->rowIndex());
 
     return false;
 }
 
+bool RenderTableSection::isHeightNeededForRowHavingOnlySpanningCells(unsigned row)
+{
+    unsigned totalCols = m_grid[row].row.size();
+
+    if (!totalCols)
+        return false;
+
+    for (unsigned col = 0; col < totalCols; col++) {
+        const CellStruct& rowSpanCell = cellAt(row, col);
+
+        if (rowSpanCell.cells.size()) {
+            RenderTableCell* cell = rowSpanCell.cells[0];
+            const unsigned rowIndex = cell->rowIndex();
+            const unsigned rowSpan = cell->rowSpan();
+            unsigned totalRowSpanCellHeight = 0;
+
+            for (unsigned row = 0; row < rowSpan; row++) {
+                unsigned actualRow = row + rowIndex;
+                totalRowSpanCellHeight += m_rowPos[actualRow + 1] - m_rowPos[actualRow];
+            }
+            totalRowSpanCellHeight -= borderSpacingForRow(rowIndex + rowSpan - 1);
+
+            if (totalRowSpanCellHeight < cell->logicalHeightForRowSizing())
+                return true;
+        }
+    }
+
+    return false;
+}

[Julien - ping for review, 2013/09/20 18:34:53]

This really looks like it should be folded into rowHasOnlySpanningCells, it
looks weird to now have 2 independent conditions for this case.

+
 unsigned RenderTableSection::calcRowHeightHavingOnlySpanningCells(unsigned row)
 {
     ASSERT(rowHasOnlySpanningCells(row));
 
     unsigned totalCols = m_grid[row].row.size();
 
     if (!totalCols)
         return 0;
 
     unsigned rowHeight = 0;
@@ skipping 12 matching lines @@
     ASSERT(spanningRowsHeight.rowHeight.size());
 
     int accumulatedPositionIncrease = 0;
     const unsigned rowSpan = cell->rowSpan();
     const unsigned rowIndex = cell->rowIndex();
 
     ASSERT(rowSpan == spanningRowsHeight.rowHeight.size());
 
     for (unsigned row = 0; row < spanningRowsHeight.rowHeight.size(); row++) {
         unsigned actualRow = row + rowIndex;
-        if (!spanningRowsHeight.rowHeight[row] && rowHasOnlySpanningCells(actualRow)) {
+        if (!spanningRowsHeight.rowHeight[row] && rowHasOnlySpanningCells(actualRow) && isHeightNeededForRowHavingOnlySpanningCells(actualRow)) {

[Julien - ping for review, 2013/09/20 18:34:53]

Is the !spanningRowsHeight.rowHeight[row] still needed now that we actually
compare the total spanned height against the cell's height?

[suchit.agrawal, 2013/09/20 22:12:00]

Yes !spanningRowsHeight.rowHeight[row] is needed because row will get this type
of height only when spanningRowsHeight.rowHeight[row] is 0 and spanning cell's
height is less then expected.
Spanning cell's height cann't be compared with any one row because it spans is
multiple rows.

             spanningRowsHeight.rowHeight[row] = calcRowHeightHavingOnlySpanningCells(actualRow);
             accumulatedPositionIncrease += spanningRowsHeight.rowHeight[row];
         }
         m_rowPos[actualRow + 1] += accumulatedPositionIncrease;
     }
 
     spanningRowsHeight.totalRowsHeight += accumulatedPositionIncrease;
 }
 
 // Distribute rowSpan cell height in rows those comes in rowSpan cell based on the ratio of row's height if
@@ skipping 1313 matching lines @@
     if (!style()->isLeftToRightDirection())
         cellLocation.setX(table()->columnPositions()[table()->numEffCols()] - table()->columnPositions()[table()->colToEffCol(cell->col() + cell->colSpan())] + horizontalBorderSpacing);
     else
         cellLocation.setX(table()->columnPositions()[effectiveColumn] + horizontalBorderSpacing);
 
     cell->setLogicalLocation(cellLocation);
     view()->addLayoutDelta(oldCellLocation - cell->location());
 }
 
 } // namespace WebCore