Created attachment 581129 [details]
###!!! ASSERTION: vertical damage extends outside table: '(aValue).YMost() <= GetRowCount()', file layout/tables/nsTableFrame.cpp, line 3810
Created attachment 581130 [details]
Created attachment 584450 [details] [diff] [review]
we need both the colspan and the rowspan as effective (aka in real cellmap coordinates)
this code is from http://bonsai.mozilla.org/cvsblame.cgi?file=mozilla/layout/tables/nsCellMap.cpp&rev=3.44
Bernd, did you intend to ask me to review this patch?
Comment on attachment 584450 [details] [diff] [review]
Yes, the problem is old but currently its the only remainder of the damagearea patch.