Bug 847139 - Crash with caretPositionFromPoint. r=heycam