Oilpan: move core/workers to oilpan's heap.

Source/core/workers/Worker.h

 /*
  * Copyright (C) 2008, 2010 Apple Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 30 matching lines @@
 
 namespace WebCore {
 
 class ExceptionState;
 class ExecutionContext;
 class WorkerGlobalScopeProxy;
 class WorkerScriptLoader;
 
 class Worker FINAL : public AbstractWorker, public ScriptWrappable, private WorkerScriptLoaderClient {
 public:
-    static PassRefPtr<Worker> create(ExecutionContext*, const String& url, ExceptionState&);
+    static PassRefPtrWillBeRawPtr<Worker> create(ExecutionContext*, const String& url, ExceptionState&);
     virtual ~Worker();
 
     virtual const AtomicString& interfaceName() const OVERRIDE;
 
     void postMessage(PassRefPtr<SerializedScriptValue> message, const MessagePortArray*, ExceptionState&);
 
     void terminate();
 
     virtual void stop() OVERRIDE;
     virtual bool hasPendingActivity() const OVERRIDE;
 
     DEFINE_ATTRIBUTE_EVENT_LISTENER(message);
 
+    void trace(Visitor*);

[Mads Ager (chromium), 2014/02/24 13:27:53]

This will not work if you have a pointer with type AbstractWorker.

Make the trace method virtual and make sure that it dispatches explicitly to the
super class:

virtual void trace(Visitor* visitor)
{
    AbstractWorker::trace(visitor);
    ...
}

+
 private:
     explicit Worker(ExecutionContext*);
 
     // WorkerScriptLoaderClient callbacks
     virtual void didReceiveResponse(unsigned long identifier, const ResourceResponse&) OVERRIDE;
     virtual void notifyFinished() OVERRIDE;
 
-    RefPtr<WorkerScriptLoader> m_scriptLoader;
+    RefPtrWillBeMember<WorkerScriptLoader> m_scriptLoader;
     WorkerGlobalScopeProxy* m_contextProxy; // The proxy outlives the worker to perform thread shutdown.

[haraken, 2014/02/24 13:28:36]

It's not obvious to me that this raw pointer is safe. In particular, it looks
dangerous that Worker's destructor is touching the raw pointer.

 };
 
 } // namespace WebCore
 
 #endif // Worker_h