InitCBReflowState() copies the mCBReflowState from the parent reflow state for table frames, which is null for "dummy" states, so it would lead to a crash in InitConstraints() which assumes non-dummy states has a non-null mCBReflowState.