Avoid crashing for cases when cell/row parenting is not like a real table.

third_party/WebKit/Source/core/layout/LayoutBox.cpp

Index: third_party/WebKit/Source/core/layout/LayoutBox.cpp
diff --git a/third_party/WebKit/Source/core/layout/LayoutBox.cpp b/third_party/WebKit/Source/core/layout/LayoutBox.cpp
index 2f0c98f78df8b94055def04cbc67dc3db7bdd15f..1fd6813ae086dda8cb1009d2f7b2a6735f7d732c 100644
--- a/third_party/WebKit/Source/core/layout/LayoutBox.cpp
+++ b/third_party/WebKit/Source/core/layout/LayoutBox.cpp
@@ -2161,8 +2161,9 @@ bool LayoutBox::mapToVisualRectInAncestorSpace(const LayoutBoxModelObject* ances
     LayoutBox* tableRowContainer = nullptr;
     // Skip table row because cells and rows are in the same coordinate space
     // (see below, however for more comments about when |ancestor| is the table row).
-    if (container->isTableRow()) {
-        DCHECK(isTableCell() && parentBox() == container);
+    // The second and third conditionals below are to skip cases where content has display: table-row or display: table-cell but is not
+    // parented like a cell/row combo.
+    if (container->isTableRow() && isTableCell() && parentBox() == container) {
         if (container != ancestor)
             container = container->parent();
         else