Oilpan: keep ImageData on the heap by default.

Source/core/html/HTMLCanvasElement.cpp

Index: Source/core/html/HTMLCanvasElement.cpp
diff --git a/Source/core/html/HTMLCanvasElement.cpp b/Source/core/html/HTMLCanvasElement.cpp
index 493993eca4b00d1e8096751cba398776fcd077a3..9505cdd9c9efb34c18ce1a80798f3022002dab03 100644
--- a/Source/core/html/HTMLCanvasElement.cpp
+++ b/Source/core/html/HTMLCanvasElement.cpp
@@ -484,14 +484,13 @@ String HTMLCanvasElement::toDataURLInternal(const String& mimeType, const double
 
     String encodingMimeType = toEncodingMimeType(mimeType);
     if (!m_context) {
-        RefPtrWillBeRawPtr<ImageData> imageData = ImageData::create(m_size);
+        ImageData* imageData = ImageData::create(m_size);

[Justin Novosad, 2015/05/06 20:14:03]

In this case the image data is just a temporary local, and it can be wrapping a
pretty large buffer. Would it be worth forcibly destroying it instead of just
letting it go out of scope?

         return ImageDataBuffer(imageData->size(), imageData->data()->data()).toDataURL(encodingMimeType, quality);
     }
 
     if (m_context->is3d()) {
         // Get non-premultiplied data because of inaccurate premultiplied alpha conversion of buffer()->toDataURL().
-        RefPtrWillBeRawPtr<ImageData> imageData =
-            toWebGLRenderingContextBase(m_context.get())->paintRenderingResultsToImageData(sourceBuffer);
+        ImageData* imageData = toWebGLRenderingContextBase(m_context.get())->paintRenderingResultsToImageData(sourceBuffer);

[Justin Novosad, 2015/05/06 20:14:03]

same here

         if (imageData)
             return ImageDataBuffer(imageData->size(), imageData->data()->data()).toDataURL(encodingMimeType, quality);
         m_context->paintRenderingResultsToCanvas(sourceBuffer);