RBTree: insertFixup