From e6dac5ec9386ce1dd06497e4768a65401359b96d Mon Sep 17 00:00:00 2001
From: "mats.palmgren%bredband.net"
 <mats.palmgren%bredband.net@18797224-902f-48f8-a5cc-f745e15eee43>
Date: Mon, 28 Apr 2008 21:15:50 +0000
Subject: [PATCH] b=430814 r=bernd sr=roc a=dveditz

git-svn-id: svn://10.0.0.236/branches/MOZILLA_1_8_BRANCH@250885 18797224-902f-48f8-a5cc-f745e15eee43
---
 mozilla/layout/tables/nsTablePainter.cpp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/mozilla/layout/tables/nsTablePainter.cpp b/mozilla/layout/tables/nsTablePainter.cpp
index ee6128188e4..4a3443fa2fa 100644
--- a/mozilla/layout/tables/nsTablePainter.cpp
+++ b/mozilla/layout/tables/nsTablePainter.cpp
@@ -587,6 +587,9 @@ TableBackgroundPainter::PaintCell(nsTableCellFrame* aCell,
 
   PRInt32 colIndex;
   aCell->GetColIndex(colIndex);
+  NS_ASSERTION(colIndex < mNumCols, "prevent array boundary violation");
+  if (mNumCols <= colIndex)
+    return NS_OK;
 
   //Paint column group background
   if (mCols && mCols[colIndex].mColGroup && mCols[colIndex].mColGroup->IsVisible()) {