the string buffer allocated in ctor missed null terminator.
 the xmlChar* members of ElementList are leaked.
 the CElement* pointer does not keep the document alive.
 CDocument::getElementsByTagNameNS calls CElementList ctor with wrong args.

 capture listener was not called for first node in vector.
 (assuming that it was intended to be called)

 instead CDocument now has a CEventDispatcher member.

 put a WeakReference<XNode> into nodemap_t, and check it in getCNode.
 check for race between removeCNode and getCNode in removeCNode.
 remove pointless call of removeCNode.

 CNode::getCNode now returns rtl::Reference<CNode>, preventing leaks.

 prevents the document containing the nodes from being released.