<div id="div" contenteditable="true"><input type="text"></div>
Click inside the div and select the input field. It's selected but it's not painted as though it's selected.
ASSERTION FAILED: m_end.isNull()
(WebCore/editing/Selection.cpp:310 void WebCore::Selection::validate())
Also fails to receive tint if it is the last thing selected.