Created attachment 581129 [details] testcase ###!!! ASSERTION: vertical damage extends outside table: '(aValue).YMost() <= GetRowCount()', file layout/tables/nsTableFrame.cpp, line 3810
Created attachment 584450 [details] [diff] [review] patch
review hint http://mxr.mozilla.org/mozilla-central/source/layout/tables/nsCellMap.cpp#2150 we need both the colspan and the rowspan as effective (aka in real cellmap coordinates) this code is from http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/tables/nsCellMap.cpp&rev=3.44
Bernd, did you intend to ask me to review this patch?
Comment on attachment 584450 [details] [diff] [review] patch Yes, the problem is old but currently its the only remainder of the damagearea patch.