ASSERTION FAILED: : this != replacement()
Created attachment 283675 [details] Patch
Comment on attachment 283675 [details] Patch r=me Any chance that you could reduce the test case?
Committed r203239: <http://trac.webkit.org/changeset/203239>