Fix non-Oilpan ref pointer usage over DOMTokenLists.

third_party/WebKit/Source/core/dom/ElementRareData.h

 /*
  * Copyright (C) 2008, 2009, 2010 Apple Inc. All rights reserved.
  * Copyright (C) 2008 David Smith <catfish.man@gmail.com>
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 70 matching lines @@
     }
 
     NamedNodeMap* attributeMap() const { return m_attributeMap.get(); }
     void setAttributeMap(PassOwnPtrWillBeRawPtr<NamedNodeMap> attributeMap) { m_attributeMap = attributeMap; }
 
     ComputedStyle* ensureComputedStyle() const { return m_computedStyle.get(); }
     void setComputedStyle(PassRefPtr<ComputedStyle> computedStyle) { m_computedStyle = computedStyle; }
     void clearComputedStyle() { m_computedStyle = nullptr; }
 
     ClassList* classList() const { return m_classList.get(); }
-    void setClassList(PassRefPtrWillBeRawPtr<ClassList> classList) { m_classList = classList; }
+    void setClassList(PassRefPtrWillBeRawPtr<ClassList> classList) { m_classList = classList.leakRef(); }
     void clearClassListValueForQuirksMode()
     {
         if (!m_classList)
             return;
         m_classList->clearValueForQuirksMode();
     }
 
     DatasetDOMStringMap* dataset() const { return m_dataset.get(); }
     void setDataset(PassOwnPtrWillBeRawPtr<DatasetDOMStringMap> dataset) { m_dataset = dataset; }
 
@@ skipping 37 matching lines @@
     CompositorProxiedPropertySet& ensureCompositorProxiedPropertySet();
     void clearCompositorProxiedPropertySet() { m_proxiedProperties = nullptr; }
 
     short m_tabindex;
 
     LayoutSize m_minimumSizeForResizing;
     IntSize m_savedLayerScrollOffset;
 
     OwnPtrWillBeMember<DatasetDOMStringMap> m_dataset;
     OwnPtrWillBeMember<ElementShadow> m_shadow;
-    RefPtrWillBeMember<ClassList> m_classList;
+    RawPtrWillBeMember<ClassList> m_classList;
     OwnPtrWillBeMember<NamedNodeMap> m_attributeMap;
     OwnPtrWillBeMember<AttrNodeList> m_attrNodeList;
     OwnPtrWillBeMember<InlineCSSStyleDeclaration> m_cssomWrapper;
     OwnPtr<CompositorProxiedPropertySet> m_proxiedProperties;
 
     PersistentWillBeMember<ElementAnimations> m_elementAnimations;
     PersistentWillBeMember<NodeIntersectionObserverData> m_intersectionObserverData;
 
     RefPtr<ComputedStyle> m_computedStyle;
     RefPtrWillBeMember<CustomElementDefinition> m_customElementDefinition;
 
     RefPtrWillBeMember<PseudoElement> m_generatedBefore;
     RefPtrWillBeMember<PseudoElement> m_generatedAfter;
     RefPtrWillBeMember<PseudoElement> m_generatedFirstLetter;
     RefPtrWillBeMember<PseudoElement> m_backdrop;
 
     explicit ElementRareData(LayoutObject*);
 };
 
 inline LayoutSize defaultMinimumSizeForResizing()
 {
     return LayoutSize(LayoutUnit::max(), LayoutUnit::max());
 }
 
 inline ElementRareData::ElementRareData(LayoutObject* layoutObject)
     : NodeRareData(layoutObject)
     , m_tabindex(0)
     , m_minimumSizeForResizing(defaultMinimumSizeForResizing())
+    , m_classList(nullptr)
 {
     m_isElementRareData = true;
 }
 
 inline ElementRareData::~ElementRareData()
 {
 #if !ENABLE(OILPAN)
     if (m_elementAnimations)
         m_elementAnimations->dispose();
     if (m_intersectionObserverData)
@@ skipping 78 matching lines @@
 inline CompositorProxiedPropertySet& ElementRareData::ensureCompositorProxiedPropertySet()
 {
     if (!m_proxiedProperties)
         m_proxiedProperties = CompositorProxiedPropertySet::create();
     return *m_proxiedProperties;
 }
 
 } // namespace blink
 
 #endif // ElementRareData_h