Bug 535499 - Copy the return state over when loading HTML5 tokenizer state from another tokenizer. rs=sicking.

parser/html/nsHtml5Tokenizer.cpp

@@ -3903,6 +3903,7 @@ nsHtml5Tokenizer::loadState(nsHtml5Tokenizer* other)
   }
   nsHtml5ArrayCopy::arraycopy(other->longStrBuf, longStrBuf, longStrBufLen);
   stateSave = other->stateSave;
+  returnStateSave = other->returnStateSave;
   lastCR = other->lastCR;
   index = other->index;
   forceQuirks = other->forceQuirks;