Bug 775552 - Don't access siblings of nodes that might be deleted; r=ehsan

editor/libeditor/html/nsHTMLEditRules.cpp

@@ -2834,10 +2834,8 @@ nsHTMLEditRules::DeleteNonTableElements(nsINode* aNode)
     return mHTMLEditor->DeleteNode(aNode->AsDOMNode());
   }
 
-  for (nsCOMPtr<nsIContent> child = aNode->GetLastChild();
-       child;
-       child = child->GetPreviousSibling()) {
-    nsresult rv = DeleteNonTableElements(child);
+  for (PRInt32 i = aNode->GetChildCount() - 1; i >= 0; --i) {
+    nsresult rv = DeleteNonTableElements(aNode->GetChildAt(i));
     NS_ENSURE_SUCCESS(rv, rv);
   }
   return NS_OK;