Range#createBookmark2 incorrectly normalize offsets when element is selected

[Piotrek Koszuliński]

Unit test can be found in t/10812.

Manual TCs:

TC1 (IE and sometimes FF)

1. Load this HTML: <h1>Apollo 11<img alt="Saturn V carrying Apollo 11" src="assets/sample.jpg" /></h1>
2. Select image and press align right.
3. Undo.

• Expected: image is selected after undoing (although selection may differ visually from the old one)
• Actual: selection is lost.

TC2 (all browsers)

<table border="1" cellpadding="1" cellspacing="1" style="width:500px">
	<tbody>
		<tr>
			<td>a</td>
			<td>b</td>
		</tr>
		<tr>
			<td>c</td>
			<td>d</td>
		</tr>
	</tbody>
</table>

1. Load the above HTML.
2. Select table (using elements path).
3. Apply bold.
4. Try to undo.

• Expected: entire table is selected after undoing.
• Actual: selection is lost.

[Piotrek Koszuliński]

Pushed t/10812 with a test.