Fix RangeController's RangeSelection#splice to work with negative offsets.