Merge 107749

Source/WebCore/dom/ContainerNodeAlgorithms.h

Index: Source/WebCore/dom/ContainerNodeAlgorithms.h
===================================================================
--- Source/WebCore/dom/ContainerNodeAlgorithms.h	(revision 109362)
+++ Source/WebCore/dom/ContainerNodeAlgorithms.h	(working copy)
@@ -135,8 +135,10 @@
                     head = n;
 
                 tail = n;
-            } else
+            } else {
+                RefPtr<GenericNode> protect(n); // removedFromDocument may remove remove all references to this node.
                 NodeRemovalDispatcher<GenericNode, ShouldDispatchRemovalNotification<GenericNode>::value>::dispatch(n);
+            }
         }
 
         container->setFirstChild(0);