Avoid N^2 walk placing renderers when building the render tree

Source/core/dom/ContainerNodeAlgorithms.h

Index: Source/core/dom/ContainerNodeAlgorithms.h
diff --git a/Source/core/dom/ContainerNodeAlgorithms.h b/Source/core/dom/ContainerNodeAlgorithms.h
index f02eb7f8112349de45de79c7e0e709bba834eb3c..992fac515beaa9d48a5b16d815671a3ab7b6163b 100644
--- a/Source/core/dom/ContainerNodeAlgorithms.h
+++ b/Source/core/dom/ContainerNodeAlgorithms.h
@@ -218,14 +218,15 @@ inline void ChildNodeInsertionNotifier::notify(Node* node)
 
     RefPtr<Document> protectDocument(node->document());
     RefPtr<Node> protectNode(node);
+    InsertionCallbackDeferer insertionCallbackDeferer;
 
     if (m_insertionPoint->inDocument())
         notifyNodeInsertedIntoDocument(node);
     else if (node->isContainerNode())
         notifyNodeInsertedIntoTree(toContainerNode(node));
 
-    for (size_t i = 0; i < m_postInsertionNotificationTargets.size(); ++i)
-        m_postInsertionNotificationTargets[i]->didNotifySubtreeInsertions(m_insertionPoint);
+    for (size_t i = m_postInsertionNotificationTargets.size(); i; --i)
+        m_postInsertionNotificationTargets[i - 1]->didNotifySubtreeInsertions(m_insertionPoint);
 }