Wallpaper a crash. b=430814 r=bernd sr=roc a1.9=mconnor

layout/tables/nsTablePainter.cpp

@@ -613,6 +613,9 @@ TableBackgroundPainter::PaintCell(nsTableCellFrame* aCell,
 
   PRInt32 colIndex;
   aCell->GetColIndex(colIndex);
+  NS_ASSERTION(colIndex < mNumCols, "prevent array boundary violation");
+  if (mNumCols <= colIndex)
+    return NS_OK;
 
   //Paint column group background
   if (mCols && mCols[colIndex].mColGroup && mCols[colIndex].mColGroup->IsVisible()) {