Bug 1194859 - Crash in mozilla::a11y::ARIAGridCellAccessible::GroupPosition(), part2. r=marcoz, a=sledru

--HG--
extra : transplant_source : %EB%84%E5%F9%C6d%00%11%F5%B2%1D%BE%7D%A2%C1%AD%9B%1D%5C%F4

accessible/generic/ARIAGridAccessible.cpp

@@ -690,8 +690,8 @@ GroupPos
 ARIAGridCellAccessible::GroupPosition()
 {
   int32_t count = 0, index = 0;
-  Accessible* table = Table()->AsAccessible();
-  if (table && nsCoreUtils::GetUIntAttr(table->GetContent(),
+  TableAccessible* table = Table();
+  if (table && nsCoreUtils::GetUIntAttr(table->AsAccessible()->GetContent(),
                                         nsGkAtoms::aria_colcount, &count) &&
       nsCoreUtils::GetUIntAttr(mContent, nsGkAtoms::aria_colindex, &index)) {
     return GroupPos(0, index, count);

accessible/html/HTMLTableAccessible.cpp

@@ -147,8 +147,8 @@ GroupPos
 HTMLTableCellAccessible::GroupPosition()
 {
   int32_t count = 0, index = 0;
-  Accessible* table = Table()->AsAccessible();
-  if (table && nsCoreUtils::GetUIntAttr(table->GetContent(),
+  TableAccessible* table = Table();
+  if (table && nsCoreUtils::GetUIntAttr(table->AsAccessible()->GetContent(),
                                         nsGkAtoms::aria_colcount, &count) &&
       nsCoreUtils::GetUIntAttr(mContent, nsGkAtoms::aria_colindex, &index)) {
     return GroupPos(0, index, count);