Block Add Child Crash

WebKit Bug 84606 - ASSERT(beforeChildAnonymousContainer->isTable()); fails in LayoutBlockFlow::addChildIgnoringAnonymousColumnBlocks.
The test passes if it doesn't CRASH nor ASSERT.-