Bug 617637 nsTableFrame::PushChildren imagines it can pass null to [@ nsFrameList::RemoveFrame] violating its preconditions

r=bz
This commit is contained in:
timeless@mozdev.org 2010-12-09 11:57:03 +01:00
parent 8f21b2430e
commit 35c135159c

View File

@ -1953,7 +1953,7 @@ nsTableFrame::PushChildren(const RowGroupArray& aRowGroups,
PRUint32 childX;
for (childX = aPushFrom; childX < aRowGroups.Length(); ++childX) {
nsTableRowGroupFrame* rgFrame = aRowGroups[childX];
if (!rgFrame || !rgFrame->IsRepeatable()) {
if (!rgFrame->IsRepeatable()) {
mFrames.RemoveFrame(rgFrame);
frames.AppendFrame(nsnull, rgFrame);
}