Merge 59495 - 20100514 Abhishek Arya <inferno@chromium.org>...

Merge 59495 - 20100514  Abhishek Arya  <inferno@chromium.org>;

        Reviewed by David Hyatt.

        Tests that large colspan in a fixed table layout does not result in crash.
        https://bugs.webkit.org/show_bug.cgi?id=38261

        * fast/table/fixedtablelayoutlargecolspancrashexpected.txt: Added.
        * fast/table/fixedtablelayoutlargecolspancrash.html: Added.
20100514  Abhishek Arya  <inferno@chromium.org>;

        Reviewed by David Hyatt.

        Move the m_width(Length) and m_columns(RenderTable::ColumnStruct)
        vector outofbounds check out of the ASSERT into the main code.
        https://bugs.webkit.org/show_bug.cgi?id=38261

        Test: fast/table/fixedtablelayoutlargecolspancrash.html

        * rendering/FixedTableLayout.cpp:
        (WebCore::FixedTableLayout::calcWidthArray):

BUG=42723
TBR=eric@webkit.org

Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=48059