Oilpan: move core/workers to oilpan's heap.

Source/core/workers/Worker.h

Index: Source/core/workers/Worker.h
diff --git a/Source/core/workers/Worker.h b/Source/core/workers/Worker.h
index 1f1067bdd2663de34797b3c710e1a5cf73a7bad9..efc683c4faae768ddf59d5a6a66f5d797283c7df 100644
--- a/Source/core/workers/Worker.h
+++ b/Source/core/workers/Worker.h
@@ -48,7 +48,7 @@ class WorkerScriptLoader;
 
 class Worker FINAL : public AbstractWorker, public ScriptWrappable, private WorkerScriptLoaderClient {
 public:
-    static PassRefPtr<Worker> create(ExecutionContext*, const String& url, ExceptionState&);
+    static PassRefPtrWillBeRawPtr<Worker> create(ExecutionContext*, const String& url, ExceptionState&);
     virtual ~Worker();
 
     virtual const AtomicString& interfaceName() const OVERRIDE;
@@ -62,6 +62,8 @@ public:
 
     DEFINE_ATTRIBUTE_EVENT_LISTENER(message);
 
+    void trace(Visitor*);

[Mads Ager (chromium), 2014/02/24 13:27:53]

This will not work if you have a pointer with type AbstractWorker.

Make the trace method virtual and make sure that it dispatches explicitly to the
super class:

virtual void trace(Visitor* visitor)
{
    AbstractWorker::trace(visitor);
    ...
}

+
 private:
     explicit Worker(ExecutionContext*);
 
@@ -69,7 +71,7 @@ private:
     virtual void didReceiveResponse(unsigned long identifier, const ResourceResponse&) OVERRIDE;
     virtual void notifyFinished() OVERRIDE;
 
-    RefPtr<WorkerScriptLoader> m_scriptLoader;
+    RefPtrWillBeMember<WorkerScriptLoader> m_scriptLoader;
     WorkerGlobalScopeProxy* m_contextProxy; // The proxy outlives the worker to perform thread shutdown.

[haraken, 2014/02/24 13:28:36]

It's not obvious to me that this raw pointer is safe. In particular, it looks
dangerous that Worker's destructor is touching the raw pointer.

 };