Bug 506267 - [r=bzbarsky sr=dbaron]

layout/tables/nsCellMap.cpp

@@ -289,7 +289,9 @@ nsTableCellMap::Synchronize(nsTableFrame* aTableFrame)
     if (map) {
       if (!maps.AppendElement(map)) {
         delete map;
+        map = nsnull;
         NS_WARNING("Could not AppendElement");
+        break;
       }
     }
   }