offsetWidth on a table cell with fixed width is wrong

Source/core/rendering/RenderBox.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2005 Allan Sandfeld Jensen (kde@carewolf.com)
  *           (C) 2005, 2006 Samuel Weinig (sam.weinig@gmail.com)
  * Copyright (C) 2005, 2006, 2007, 2008, 2009, 2010 Apple Inc. All rights reserved.
  * Copyright (C) 2013 Adobe Systems Incorporated. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
@@ skipping 402 matching lines @@
     RenderStyle* style = this->style();
     return !style->width().isFixed()
         || !style->minWidth().isFixed()
         || (!style->maxWidth().isUndefined() && !style->maxWidth().isFixed())
         || !style->paddingLeft().isFixed()
         || !style->paddingRight().isFixed()
         || style->resize() != RESIZE_NONE
         || style->boxSizing() == BORDER_BOX
         || !isRenderBlock()
         || !isRenderBlockFlow()
-        || isFlexItemIncludingDeprecated();
+        || isFlexItemIncludingDeprecated()
+        // TableCells can expand beyond a specified width.
+        || isTableCell();

[eae, 2013/09/27 19:56:56]

This should probably be isTableCell() && !table->isFixedLayout()

[Julien - ping for review, 2013/09/27 20:03:54]

I don't think so. Fixed table layout will also force the table cells' widths.

Note that I think that anything that depend on a cell's size should also trigger
a layout (table, row, row-group, column and column-group).

 }
 
 LayoutUnit RenderBox::fixedOffsetWidth() const
 {
     ASSERT(!requiresLayoutToDetermineWidth());
 
     RenderStyle* style = this->style();
 
     LayoutUnit width = std::max(LayoutUnit(style->minWidth().value()), LayoutUnit(style->width().value()));
     if (style->maxWidth().isFixed())
@@ skipping 4331 matching lines @@
         return 0;
 
     if (!layoutState && !flowThreadContainingBlock())
         return 0;
 
     RenderBlock* containerBlock = containingBlock();
     return containerBlock->offsetFromLogicalTopOfFirstPage() + logicalTop();
 }
 
 } // namespace WebCore