Ticket #2757: 2757.patch

editor/_source/classes/fckdomrange.js

@@ -470 +470 @@
                 // Also note that the node that we use for "address base" would change during backtracking.
                 var addrStart = this._Range.startContainer ;
                 var addrEnd = this._Range.endContainer ;
-                while ( curStart && addrStart.nodeType == 3 )
+                while ( curStart && curStart.nodeType == 3 && addrStart.nodeType == 3 )
                 {
                         bookmark.Start[0] += curStart.length ;
                         addrStart = curStart ;
                         curStart = curStart.previousSibling ;
                 }
-                while ( curEnd && addrEnd.nodeType == 3 )
+                while ( curEnd && curEnd.nodeType == 3 && addrEnd.nodeType == 3 )
                 {
                         bookmark.End[0] += curEnd.length ;
                         addrEnd = curEnd ;