Oilpan: add missing tracing of SVGSMILElement condition.

third_party/WebKit/Source/core/svg/animation/SVGSMILElement.cpp

Index: third_party/WebKit/Source/core/svg/animation/SVGSMILElement.cpp
diff --git a/third_party/WebKit/Source/core/svg/animation/SVGSMILElement.cpp b/third_party/WebKit/Source/core/svg/animation/SVGSMILElement.cpp
index 577acb3cf170d2551d6b430723a5b36ad10de63e..fd7c8a45fbcda9446bb6d81d4fd108f24cf9a4fe 100644
--- a/third_party/WebKit/Source/core/svg/animation/SVGSMILElement.cpp
+++ b/third_party/WebKit/Source/core/svg/animation/SVGSMILElement.cpp
@@ -39,6 +39,7 @@
 #include "core/svg/SVGURIReference.h"
 #include "core/svg/animation/SMILTimeContainer.h"
 #include "platform/FloatConversion.h"
+#include "platform/heap/Handle.h"
 #include "wtf/MathExtras.h"
 #include "wtf/StdLibExtras.h"
 #include "wtf/Vector.h"
@@ -129,6 +130,7 @@ public:
     DEFINE_INLINE_VIRTUAL_TRACE()
     {
         visitor->trace(m_animation);
+        visitor->trace(m_condition);
         EventListener::trace(visitor);
     }
 
@@ -143,7 +145,7 @@ private:
     void handleEvent(ExecutionContext*, Event*) override;
 
     RawPtrWillBeMember<SVGSMILElement> m_animation;
-    SVGSMILElement::Condition* m_condition;
+    RawPtrWillBeMember<SVGSMILElement::Condition> m_condition;
 };
 
 bool ConditionEventListener::operator==(const EventListener& listener) const