The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/f73b8a9314d1730f80600d0c89d55fac4ab20624

commit f73b8a9314d1730f80600d0c89d55fac4ab20624
Author: dgrogan <dgrogan@chromium.org>
Date: Tue Jun 07 02:44:40 2016

[css] Don't let table parts be layout boundaries

This fixes another crash when table parts are set as containment roots.

<table> elements still don't honor layout containment when calculating
their dimensions, though.

BUG= 616643 

Review-Url: https://codereview.chromium.org/2046813002
Cr-Commit-Position: refs/heads/master@{#398207}

[add] https://crrev.com/f73b8a9314d1730f80600d0c89d55fac4ab20624/third_party/WebKit/LayoutTests/fast/table/containment-crash-expected.txt
[add] https://crrev.com/f73b8a9314d1730f80600d0c89d55fac4ab20624/third_party/WebKit/LayoutTests/fast/table/containment-crash.html
[modify] https://crrev.com/f73b8a9314d1730f80600d0c89d55fac4ab20624/third_party/WebKit/Source/core/layout/LayoutObject.cpp
[modify] https://crrev.com/f73b8a9314d1730f80600d0c89d55fac4ab20624/third_party/WebKit/Source/core/layout/LayoutTableSection.cpp