Ticket #6225: 6225.patch

_source/core/dom/range.js

@@ -1429 +1429 @@
                         // Fixing invalid range end inside dtd empty elements.
                         if( endNode.type == CKEDITOR.NODE_ELEMENT
                                 && CKEDITOR.dtd.$empty[ endNode.getName() ] )
-                                endNode = endNode.getParent(), endOffset = endNode.getIndex() + 1;
+                                endOffset = endNode.getIndex(), endNode = endNode.getParent();
 
                         this.endContainer       = endNode;
                         this.endOffset          = endOffset;