Reviewed by Dave Hyatt.

        - fix http://bugs.webkit.org/show_bug.cgi?id=15362
          <rdar://problem/5558715> Safari Crashes when opening a JS TreeGrid widget

        Test: fast/dynamic/insert-before-table-part-in-continuation.html

        * rendering/RenderFlow.cpp:
        (WebCore::RenderFlow::addChildWithContinuation): If beforeChild's
        parent is an anonymous table part, let the table figure out where to
        insert the new child.

LayoutTests:

        Reviewed by Dave Hyatt.

        - test for http://bugs.webkit.org/show_bug.cgi?id=15362
          <rdar://problem/5558715> Safari Crashes when opening a JS TreeGrid widget

        * fast/dynamic/insert-before-table-part-in-continuation.html: Added.
        * platform/mac/fast/dynamic/insert-before-table-part-in-continuation-expected.checksum: Added.
        * platform/mac/fast/dynamic/insert-before-table-part-in-continuation-expected.png: Added.
        * platform/mac/fast/dynamic/insert-before-table-part-in-continuation-expected.txt: Added.



git-svn-id: http://svn.webkit.org/repository/webkit/trunk@27051 268f45cc-cd09-0410-ab3c-d52691b4dbfc