[PATCH] mshtml: check null before release the elem object