Oilpan: move LiveNodeList collections to the heap.

Source/core/html/forms/RangeInputType.cpp

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  * Copyright (C) 2011 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 335 matching lines @@
 
 void RangeInputType::updateTickMarkValues()
 {
     if (!m_tickMarkValuesDirty)
         return;
     m_tickMarkValues.clear();
     m_tickMarkValuesDirty = false;
     HTMLDataListElement* dataList = element().dataList();
     if (!dataList)
         return;
-    RefPtr<HTMLCollection> options = dataList->options();
+    RefPtrWillBeRawPtr<HTMLCollection> options = dataList->options();
     m_tickMarkValues.reserveCapacity(options->length());
     for (unsigned i = 0; i < options->length(); ++i) {
         Element* element = options->item(i);
         HTMLOptionElement* optionElement = toHTMLOptionElement(element);
         String optionValue = optionElement->value();
         if (!this->element().isValidValue(optionValue))
             continue;
         m_tickMarkValues.append(parseToNumber(optionValue, Decimal::nan()));
     }
     m_tickMarkValues.shrinkToFit();
@@ skipping 27 matching lines @@
             right = middle;
     }
     const Decimal closestLeft = middle ? m_tickMarkValues[middle - 1] : Decimal::infinity(Decimal::Negative);
     const Decimal closestRight = middle != m_tickMarkValues.size() ? m_tickMarkValues[middle] : Decimal::infinity(Decimal::Positive);
     if (closestRight - value < value - closestLeft)
         return closestRight;
     return closestLeft;
 }
 
 } // namespace WebCore