I'm running into a problem where javascript calls removeChild on a table row and RenderTableCell::destroy() is called. The problem is that CellStruct.cell is not set to zero so RenderTableSection::paint tries to paint a deleted cell. Does anyone know how and where table cells are removed from the render tree? Thanks, Pat