This assertion always fails because IME asks for an out of bounds character position: ASSERT(charPos->dwCharPos == 0 || targetFrame->editor()->hasComposition()); We can't make assertions about IME request arguments, as we don't control their values.
Created attachment 45824 [details] proposed patch
Committed <http://trac.webkit.org/changeset/52755>.