Bug 1092187 - crash in mozilla::a11y::XULListboxAccessible::ColCount(), r=davidb