AX: crash at WebCore::Range::selectNodeContents(WebCore::Node*, int&)