Open: <div contenteditable="true"> <div>foo</div> bar </div> Create a selection that starts in the first paragraph and ends in the second. Delete. The position that marks the end of the selection being removed fails to get updated during the deletion, and so is invalid when used during merging.
I'm wondering if this was fixed in <http://trac.webkit.org/projects/webkit/changeset/27796>
Ya, this is fixed.