Ticket #8520: 8520.patch

_source/core/dom/node.js

@@ -231 +231 @@
                         return new CKEDITOR.dom.document( this.$.ownerDocument || this.$.parentNode.ownerDocument );
                 },
 
-                getIndex : function( normalized )
+                getIndex :  CKEDITOR.env.ie && CKEDITOR.env.version < 9 ? function( normalized )
                 {
                         // Attention: getAddress depends on this.$
 
+                        var parent = this.$.parentNode,
+                                childs = parent.childNodes,
+                                count = childs.length,
+                                current,
+                                index = 0;
+
+                        for ( var i = 0; i < count; i++ )
+                        {
+                                if ( ( current = childs[ i ] ) == this.$ )
+                                        break;
+
+                                // sibling traversal may throw exceptions in old IEs.
+                                try
+                                {
+                                        // When normalizing, do not count it if this is an
+                                        // empty text node or if it's a text node following another one.
+                                        if ( normalized && current.nodeType == 3 &&
+                                                 ( !current.nodeValue.length ||
+                                                   ( current.previousSibling && current.previousSibling.nodeType == 3 ) ) )
+                                        {
+                                                continue;
+                                        }
+                                }
+                                catch(er){}
+
+                                index++;
+                        }
+
+                        return index;
+                }
+                :
+                function( normalized )
+                {
+                        // Attention: getAddress depends on this.$
+
                         var current = this.$,
                                 index = 0;
 

_source/plugins/selection/plugin.js

@@ -730 +730 @@
                                                         return  { container : parent, offset : 0 };
 
                                                 var siblings = parent.children,
+                                                        childNodes = parent.childNodes,
                                                         child,
                                                         sibling,
                                                         testRange = range.duplicate(),
@@ -820 +821 @@
                                                         if ( !distance )
                                                                 return { container : parent, offset : getNodeIndex( child ) + ( position > 0 ? 0 : 1 ) };
 
+                                                        i = getNodeIndex( child );
                                                         // Start the measuring until distance overflows, meanwhile count the text nodes.
                                                         while ( distance > 0 )
                                                         {
                                                                 try
                                                                 {
-                                                                        sibling = child[ position > 0 ? 'previousSibling' : 'nextSibling' ];
+                                                                        sibling = childNodes[ i -= position ];
+                                                                        // Fix an exception when node value access on certain IE internal marker (~) got it broken. (#8520)
                                                                         distance -= sibling.nodeValue.length;
                                                                         child = sibling;
                                                                 }
-                                                                // Measurement in IE could be somtimes wrong because of <select> element. (#4611)
                                                                 catch( e )
                                                                 {
-                                                                        return { container : parent, offset : getNodeIndex( child ) };
-                                                                }
-                                                        }
+                                                                        // Fix an exception with wrong measurement in IE < 8 because of <select> element. (#4611)
+                                                                        if ( !sibling )
+                                                                        {
+                                                                                return { container : parent, offset : getNodeIndex( child ) };
+                                                                        }
+                                                                }
+                                                        }
 
                                                         return { container : child, offset : position > 0 ? -distance : child.nodeValue.length + distance };
                                                 }