Bug 614724 followup. Fix crash due to silly assumptions about order of argument evaluation. a=orange

content/base/src/nsDocument.cpp

@@ -4371,7 +4371,7 @@ nsDocument::CreateElementNS(const nsAString& aNamespaceURI,
   NS_ENSURE_SUCCESS(rv, rv);
 
   PRInt32 ns = nodeInfo->NamespaceID();
-  return NS_NewElement(aReturn, nodeInfo->NamespaceID(),
+  return NS_NewElement(aReturn, ns,
                        nodeInfo.forget(), NOT_FROM_PARSER);
 }