Bug 76842: Crash in WebCore::RenderTableSection::rowLogicalHeightChanged

This test passes if it does not crash nor ASSERT.