https://bugs.webkit.org/show_bug.cgi?id=77999

Reviewed by Ryosuke Niwa.

Source/WebCore:

Add RefPtr to protect premature deletion of this due to mutation events.

Tests: fast/dom/remove-body-during-body-replacement.html
       fast/dom/remove-body-during-body-replacement2.html

* dom/ContainerNode.cpp:
(WebCore::ContainerNode::insertBefore):
(WebCore::ContainerNode::replaceChild):
(WebCore::ContainerNode::removeChild):
(WebCore::ContainerNode::appendChild):

LayoutTests:

* fast/dom/remove-body-during-body-replacement-expected.txt: Added.
* fast/dom/remove-body-during-body-replacement.html: Added.
* fast/dom/remove-body-during-body-replacement2-expected.txt: Added.
* fast/dom/remove-body-during-body-replacement2.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@106972 268f45cc-cd09-0410-ab3c-d52691b4dbfc