Bug 863950 - Crash with outdated CaretPosition object, r=bz