Fix painting background for composited table cells in a non-composited row.

third_party/WebKit/Source/core/paint/TablePaintInvalidator.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/paint/TablePaintInvalidator.h"
 
 #include "core/layout/LayoutTable.h"
 #include "core/layout/LayoutTableCell.h"
 #include "core/layout/LayoutTableCol.h"
 #include "core/layout/LayoutTableRow.h"
@@ skipping 32 matching lines @@
         !section
              ->shouldCheckForPaintInvalidationRegardlessOfPaintInvalidationState())
       continue;
     for (LayoutTableRow* row = section->firstRow(); row; row = row->nextRow()) {
       if (!hasColChangedBackground &&
           !section->backgroundChangedSinceLastPaintInvalidation() &&
           !row->backgroundChangedSinceLastPaintInvalidation())
         continue;
       for (LayoutTableCell* cell = row->firstCell(); cell;
            cell = cell->nextCell()) {
+        cell->ensureIsReadyForPaintInvalidation();
         bool invalidated = false;
         // Table cells paint container's background on the container's backing
         // instead of its own (if any), so we must invalidate it by the
         // containers.
         if (section->backgroundChangedSinceLastPaintInvalidation()) {
           sectionInvalidator
               .slowSetPaintingLayerNeedsRepaintAndInvalidateDisplayItemClient(
-                  *cell, PaintInvalidationStyleChange);
+                  cell->backgroundDisplayItemClient(),
+                  PaintInvalidationStyleChange);
           invalidated = true;
         } else if (hasColChangedBackground) {
           LayoutTable::ColAndColGroup colAndColGroup =
               m_table.colElementAtAbsoluteColumn(cell->absoluteColumnIndex());
           LayoutTableCol* column = colAndColGroup.col;
           LayoutTableCol* columnGroup = colAndColGroup.colgroup;
           if ((columnGroup &&
                columnGroup->backgroundChangedSinceLastPaintInvalidation()) ||
               (column &&
                column->backgroundChangedSinceLastPaintInvalidation())) {
             sectionInvalidator
                 .slowSetPaintingLayerNeedsRepaintAndInvalidateDisplayItemClient(
-                    *cell, PaintInvalidationStyleChange);
+                    cell->backgroundDisplayItemClient(),
+                    PaintInvalidationStyleChange);
             invalidated = true;
           }
         }
         if ((!invalidated || row->hasSelfPaintingLayer()) &&
-            row->backgroundChangedSinceLastPaintInvalidation())
+            row->backgroundChangedSinceLastPaintInvalidation()) {
           ObjectPaintInvalidator(*row)
               .slowSetPaintingLayerNeedsRepaintAndInvalidateDisplayItemClient(
-                  *cell, PaintInvalidationStyleChange);
+                  cell->backgroundDisplayItemClient(),
+                  PaintInvalidationStyleChange);
+        }
       }
     }
   }
 
   return reason;
 }
 
 }  // namespace blink