I can reproduce a crash every time in the editing layout tests. I have a fix in the works.
Created attachment 11180 [details] patch that fixes assertion failure, does some related cleanup
Comment on attachment 11180 [details] patch that fixes assertion failure, does some related cleanup r=me
Committed revision 17202.