Fix instances of passing raw pointers to RefCounted objects in tasks.

chrome/browser/renderer_host/save_file_resource_handler.cc

Index: chrome/browser/renderer_host/save_file_resource_handler.cc
diff --git a/chrome/browser/renderer_host/save_file_resource_handler.cc b/chrome/browser/renderer_host/save_file_resource_handler.cc
index b71181a532d81d496eed2c2f1f8a7994156e494f..17100bf40448c77a50f574bccde3ba11cb471b25 100644
--- a/chrome/browser/renderer_host/save_file_resource_handler.cc
+++ b/chrome/browser/renderer_host/save_file_resource_handler.cc
@@ -80,8 +80,8 @@ bool SaveFileResourceHandler::OnWillRead(int request_id, net::IOBuffer** buf,
 bool SaveFileResourceHandler::OnReadCompleted(int request_id, int* bytes_read) {
   DCHECK(read_buffer_);
   // We are passing ownership of this buffer to the save file manager.
-  net::IOBuffer* buffer = NULL;
-  read_buffer_.swap(&buffer);
+  scoped_refptr<net::IOBuffer> buffer = NULL;
+  read_buffer_.swap(buffer);
   ChromeThread::PostTask(
       ChromeThread::FILE, FROM_HERE,
       NewRunnableMethod(save_manager_,