mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-04-27 10:07:15 +02:00
Previously, the column count was always incremented by 1. This led to a mismatch with `compute_outer_content_sizes()`, which did use the `span` attribute to advance the column index. This mismatch caused an out-of-bounds access when the column index was greater than the expected number of columns.
6 lines
124 B
HTML
6 lines
124 B
HTML
<!DOCTYPE html>
|
|
<table>
|
|
<colgroup><col span="2"><col><col></colgroup>
|
|
<tr><td></td><td></td><td></td></tr>
|
|
</table>
|