[Webkit-unassigned] [Bug 14274] Right border missing from table with colspan and collapsing border

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=14274





--- Comment #12 from Darin Adler <darin at apple.com>  2011-09-21 15:17:19 PST ---
(From update of attachment 108228)
View in context: https://bugs.webkit.org/attachment.cgi?id=108228&action=review

> Source/WebCore/rendering/RenderTable.h:164
> +        for (unsigned c = 0; effCol < numCols && c + m_columns[effCol].span - 1 < col; ++effCol)

What prevents overflow in the "c + span - 1" expression?

> Source/WebCore/rendering/RenderTable.h:165
> +            c += m_columns[effCol].span;

What prevents overflow in this addition? (I know it’s not new.)

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.