Oilpan: move core/workers to oilpan's heap.

Source/bindings/v8/WorkerScriptController.cpp

Index: Source/bindings/v8/WorkerScriptController.cpp
diff --git a/Source/bindings/v8/WorkerScriptController.cpp b/Source/bindings/v8/WorkerScriptController.cpp
index d1e48743e86ddaf283a94f49b51e0e8d0a2a0dc1..92164c6760a995b868c6b2e0fd792a6ef002a83a 100644
--- a/Source/bindings/v8/WorkerScriptController.cpp
+++ b/Source/bindings/v8/WorkerScriptController.cpp
@@ -161,7 +161,7 @@ bool WorkerScriptController::initializeContextIfNeeded()
         return false;
     }
 
-    V8DOMWrapper::associateObjectWithWrapper<V8WorkerGlobalScope>(PassRefPtr<WorkerGlobalScope>(m_workerGlobalScope), contextType, jsWorkerGlobalScope, isolate(), WrapperConfiguration::Dependent);
+    V8DOMWrapper::associateObjectWithWrapper<V8WorkerGlobalScope>(PassRefPtrWillBeRawPtr<WorkerGlobalScope>(&m_workerGlobalScope), contextType, jsWorkerGlobalScope, isolate(), WrapperConfiguration::Dependent);

[Mads Ager (chromium), 2014/02/24 13:27:53]

It seems like a lot of stuff has moved to references instead of pointers in the
code base. If PassRefPtr has a constructor from "const U&" we probably should
have that for RawPtr as well so we don't have to explicitly write the & here.

The lifetime is a little bit nasty here. When there is a reference to an object
somewhere (like the reference to a WorkerGlobalScope from
WorkerScriptController) there is the assumption that it is kept alive by
something else. I would be more comfortable if we always traced these pointers
to guarantee that there are no use-after-free bugs hiding. However, that would
get us back where it is not clear whether or not something can be NULL. Another
option would be to teach our visitor more about references and always trace
references if the are referencing something that is garbage collected.
Currently, if you trace a reference that does not mark the object itself, it
only calls the trace method.

This is fine for now, but we need to consider how to best handle these
references.

 
     // Insert the object instance as the prototype of the shadow object.
     v8::Handle<v8::Object> globalObject = v8::Handle<v8::Object>::Cast(m_contextHolder->context()->Global()->GetPrototype());