To pass this testcase it should not crash.
<div contenteditable="true" id="div"><hkern><span contenteditable="false"><dl>000A0<script>
var sel = window.getSelection();
-sel.setPosition(div, 2000000000);
+sel.collapse(div, div.childNodes.length);
document.execCommand("Delete");
</script>