Cherry-pick 270421@main (f738f43). https://bugs.webkit.org/show_bug.c…

…gi?id=264442

    Compilation failure using gcc (GCC) 13.2.1 20231011 (Red Hat 13.2.1-4)
    https://bugs.webkit.org/show_bug.cgi?id=264442
    rdar://118141764

    Reviewed by Alex Christensen.

    Fix compilation error "error: possibly dangling reference to a temporary [-Werror=dangling-reference]"
    No change in observable behaviour.

    * Source/WebCore/dom/TreeScope.cpp:
    (WebCore::TreeScope::findAnchor):
    * Source/WebCore/dom/TreeScopeOrderedMap.cpp:
    (WebCore::TreeScopeOrderedMap::get const):

    Canonical link: https://commits.webkit.org/270421@main

Source/WebCore/dom/TreeScope.cpp

@@ -457,8 +457,9 @@ Element* TreeScope::findAnchor(StringView name)
         return nullptr;
     if (Element* element = getElementById(name))
         return element;
-    for (auto& anchor : descendantsOfType<HTMLAnchorElement>(m_rootNode)) {
-        if (m_rootNode.document().inQuirksMode()) {
+    Ref rootNode = m_rootNode;
+    for (auto& anchor : descendantsOfType<HTMLAnchorElement>(rootNode)) {
+        if (rootNode->document().inQuirksMode()) {
             // Quirks mode, ASCII case-insensitive comparison of names.
             // FIXME: This behavior is not mentioned in the HTML specification.
             // We should either remove this or get this into the specification.

Source/WebCore/dom/TreeScopeOrderedMap.cpp

@@ -114,7 +114,8 @@ inline Element* TreeScopeOrderedMap::get(const AtomStringImpl& key, const TreeSc
     }
 
     // We know there's at least one node that matches; iterate to find the first one.
-    for (auto& element : descendantsOfType<Element>(scope.rootNode())) {
+    Ref rootNode = scope.rootNode();
+    for (auto& element : descendantsOfType<Element>(rootNode)) {
         if (!element.isInTreeScope())
             continue;
         if (!keyMatches(key, element))