Allocate stack item for fragment context elements once

Source/core/html/parser/HTMLTreeBuilder.h

Index: Source/core/html/parser/HTMLTreeBuilder.h
diff --git a/Source/core/html/parser/HTMLTreeBuilder.h b/Source/core/html/parser/HTMLTreeBuilder.h
index eab7356278ac238256f6ebb0291568ae23e0317b..b9941b11efce47f9bd1623a640a4b77ec15b10aa 100644
--- a/Source/core/html/parser/HTMLTreeBuilder.h
+++ b/Source/core/html/parser/HTMLTreeBuilder.h
@@ -169,7 +169,7 @@ private:
     void defaultForAfterHead();
     void defaultForInTableText();
 
-    inline PassRefPtr<HTMLStackItem> adjustedCurrentStackItem() const;
+    inline HTMLStackItem* adjustedCurrentStackItem() const;
     inline bool shouldProcessTokenInForeignContent(AtomicHTMLToken*);
     void processTokenInForeignContent(AtomicHTMLToken*);
 
@@ -201,11 +201,12 @@ private:
         ~FragmentParsingContext();
 
         DocumentFragment* fragment() const { return m_fragment; }
-        Element* contextElement() const { ASSERT(m_fragment); return m_contextElement; }
+        Element* contextElement() const { ASSERT(m_fragment); return m_contextElementStackItem->element(); }
+        PassRefPtr<HTMLStackItem> contextElementStackItem() const { ASSERT(m_fragment); return m_contextElementStackItem; }

[eseidel, 2013/11/14 15:39:41]

I think this can just be HTMLStackItem*, PassRefPTr is for when you expect the
caller to take ownership.  In this case, you expect contextElementStackItem() to
live exactly as long as HTMLTreeBuilder does, hence the raw ptr.

 
     private:
         DocumentFragment* m_fragment;
-        Element* m_contextElement;
+        RefPtr<HTMLStackItem> m_contextElementStackItem;
     };
 
     bool m_framesetOk;