Have DOMPatchSupport and DocumentFragment deal with Document references

Source/core/html/HTMLElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008 Apple Inc. All rights reserved.
  * Copyright (C) 2009 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/)
  * Copyright (C) 2011 Motorola Mobility. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 353 matching lines @@
     RefPtr<Node> node = next ? next->previousSibling() : 0;
     if (!es.hadException() && node && node->isTextNode())
         mergeWithNextTextNode(node.release(), es);
 
     if (!es.hadException() && prev && prev->isTextNode())
         mergeWithNextTextNode(prev.release(), es);
 }
 
 PassRefPtr<DocumentFragment> HTMLElement::textToFragment(const String& text, ExceptionState& es)
 {
-    RefPtr<DocumentFragment> fragment = DocumentFragment::create(&document());
+    RefPtr<DocumentFragment> fragment = DocumentFragment::create(document());
     unsigned int i, length = text.length();
     UChar c = 0;
     for (unsigned int start = 0; start < length; ) {
 
         // Find next line break.
         for (i = start; i < length; i++) {
           c = text[i];
           if (c == '\r' || c == '\n')
               break;
         }
@@ skipping 717 matching lines @@
 #ifndef NDEBUG
 
 // For use in the debugger
 void dumpInnerHTML(WebCore::HTMLElement*);
 
 void dumpInnerHTML(WebCore::HTMLElement* element)
 {
     printf("%s\n", element->innerHTML().ascii().data());
 }
 #endif