Landing fix for bug 414764. Fixing problem with tokens being freed too many times. Patch by mrbkap@gmail.com, sr=jst@mozilla.org

parser/htmlparser/src/CNavDTD.cpp

@@ -1707,6 +1707,7 @@ CNavDTD::HandleEndToken(CToken* aToken)
                   result = HandleToken(theStartToken, mParser);
                   NS_ENSURE_SUCCESS(result, result);
 
+                  IF_HOLD(aToken);
                   result = HandleToken(aToken, mParser);
                 }
               }