Merge 105542 - Crash in RenderTable::borderBefore

Source/WebCore/rendering/RenderTable.h

 /*
  * Copyright (C) 1997 Martin Jones (mjones@kde.org)
  *           (C) 1997 Torben Weis (weis@kde.org)
  *           (C) 1998 Waldo Bastian (bastian@kde.org)
  *           (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  * Copyright (C) 2003, 2004, 2005, 2006, 2009, 2010 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
@@ skipping 256 matching lines @@
     mutable bool m_needsSectionRecalc : 1;
     
     short m_hSpacing;
     short m_vSpacing;
     LayoutUnit m_borderStart;
     LayoutUnit m_borderEnd;
 };
 
 inline RenderTableSection* RenderTable::topSection() const
 {
+    ASSERT(!needsSectionRecalc());
     if (m_head)
         return m_head;
     if (m_firstBody)
         return m_firstBody;
     return m_foot;
 }
 
 inline RenderTable* toRenderTable(RenderObject* object)
 {
     ASSERT(!object || object->isTable());
     return static_cast<RenderTable*>(object);
 }
 
 inline const RenderTable* toRenderTable(const RenderObject* object)
 {
     ASSERT(!object || object->isTable());
     return static_cast<const RenderTable*>(object);
 }
 
 // This will catch anyone doing an unnecessary cast.
 void toRenderTable(const RenderTable*);
 
 } // namespace WebCore
 
 #endif // RenderTable_h