From 5e0a1a771005db54771bcb9eb4f4a98c8dfb7434 Mon Sep 17 00:00:00 2001
From: "bzbarsky%mit.edu" <bzbarsky%mit.edu>
Date: Mon, 7 Jul 2003 05:15:41 +0000
Subject: [PATCH] Make sure the for loop terminates.  Also caught by bryner,
 r+sr=me

---
 layout/html/table/src/nsTableRowFrame.cpp | 2 +-
 layout/tables/nsTableRowFrame.cpp         | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/layout/html/table/src/nsTableRowFrame.cpp b/layout/html/table/src/nsTableRowFrame.cpp
index c9c8ad391a1..9558e6de846 100644
--- a/layout/html/table/src/nsTableRowFrame.cpp
+++ b/layout/html/table/src/nsTableRowFrame.cpp
@@ -285,7 +285,7 @@ nsTableRowFrame::InsertFrames(nsIPresContext* aPresContext,
   nsTableCellFrame* prevCellFrame = (nsTableCellFrame *)nsTableFrame::GetFrameAtOrBefore(aPresContext, this, aPrevFrame, cellFrameType);
   nsVoidArray cellChildren;
   for (nsIFrame* childFrame = aFrameList; childFrame;
-       childFrame->GetNextSibling()) {
+       childFrame = childFrame->GetNextSibling()) {
     nsCOMPtr<nsIAtom> frameType;
     childFrame->GetFrameType(getter_AddRefs(frameType));
     if (IS_TABLE_CELL(frameType.get())) {
diff --git a/layout/tables/nsTableRowFrame.cpp b/layout/tables/nsTableRowFrame.cpp
index c9c8ad391a1..9558e6de846 100644
--- a/layout/tables/nsTableRowFrame.cpp
+++ b/layout/tables/nsTableRowFrame.cpp
@@ -285,7 +285,7 @@ nsTableRowFrame::InsertFrames(nsIPresContext* aPresContext,
   nsTableCellFrame* prevCellFrame = (nsTableCellFrame *)nsTableFrame::GetFrameAtOrBefore(aPresContext, this, aPrevFrame, cellFrameType);
   nsVoidArray cellChildren;
   for (nsIFrame* childFrame = aFrameList; childFrame;
-       childFrame->GetNextSibling()) {
+       childFrame = childFrame->GetNextSibling()) {
     nsCOMPtr<nsIAtom> frameType;
     childFrame->GetFrameType(getter_AddRefs(frameType));
     if (IS_TABLE_CELL(frameType.get())) {