ADT.CritBit: use after free in iterator

The tree iterator keeps the tree root node but did not update it
when the tree was modified during iteration. This could lead to
access in freed memory.