Fixing bug due to missing parentheses. Bug 344258 followup, no bug.

content/base/src/nsDocument.h

@@ -310,8 +310,8 @@ public:
     static KeyTypePointer KeyToPointer(KeyType& aKey) { return &aKey; }
     static PLDHashNumber HashKey(KeyTypePointer aKey)
     {
-      return NS_PTR_TO_INT32(aKey->mCallback) >> 2 +
-             NS_PTR_TO_INT32(aKey->mData);
+      return (NS_PTR_TO_INT32(aKey->mCallback) >> 2) ^
+             (NS_PTR_TO_INT32(aKey->mData));
     }
     enum { ALLOW_MEMMOVE = PR_TRUE };