Oilpan: Move the EventListener hierarchy to Oilpan's heap

Source/core/svg/animation/SVGSMILElement.h

Index: Source/core/svg/animation/SVGSMILElement.h
diff --git a/Source/core/svg/animation/SVGSMILElement.h b/Source/core/svg/animation/SVGSMILElement.h
index 8959bc296c1829795b5d6fd60e89e8953b809f46..69210459be3136d56ecece7e6cd5b5358b4aa62b 100644
--- a/Source/core/svg/animation/SVGSMILElement.h
+++ b/Source/core/svg/animation/SVGSMILElement.h
@@ -200,7 +200,7 @@ private:
         SVGSMILElement* syncBase() const { return m_syncBase.get(); }
         void setSyncBase(SVGSMILElement* element) { m_syncBase = element; }
         ConditionEventListener* eventListener() const { return m_eventListener.get(); }
-        void setEventListener(PassRefPtr<ConditionEventListener>);
+        void setEventListener(PassRefPtrWillBeRawPtr<ConditionEventListener>);
 
     private:
         Type m_type;
@@ -210,7 +210,7 @@ private:
         SMILTime m_offset;
         int m_repeat;
         RefPtrWillBeMember<SVGSMILElement> m_syncBase;
-        RefPtr<ConditionEventListener> m_eventListener;
+        RefPtrWillBeMember<ConditionEventListener> m_eventListener;
     };
     bool parseCondition(const String&, BeginOrEnd beginOrEnd);
     void parseBeginOrEnd(const String&, BeginOrEnd beginOrEnd);