source location information is (probably) all wrong

[dherman]

Source location tracking is untested and probably all wrong. I think there's a serious fencepost problem with ending spans -- it uses the start position of the current token, but that completely loses the end position of the preceding token, which could be arbitrarily far away.