Oilpan: Workaround for crash on quora and geek-and-poke. There is a finalization issue that we need…

Source/core/css/CSSCursorImageValue.h

 /*
  * Copyright (C) 2006 Rob Buis <buis@kde.org>
  * Copyright (C) 2008 Apple Inc. All right reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 49 matching lines @@
 
     void traceAfterDispatch(Visitor*);
 
 private:
     CSSCursorImageValue(PassRefPtrWillBeRawPtr<CSSValue> imageValue, bool hasHotSpot, const IntPoint& hotSpot);
 
     bool isSVGCursor() const;
     String cachedImageURL();
     void clearImageResource();
 
-    RefPtrWillBeMember<CSSValue> m_imageValue;
+    // FIXME: oilpan: This should be a Member but we need to resolve
+    // finalization order issues first. The CSSCursorImageValue
+    // destructor uses m_imageValue. Leaving it as a RefPtr as a
+    // workaround for now.
+    RefPtr<CSSValue> m_imageValue;
 
     bool m_hasHotSpot;
     IntPoint m_hotSpot;
     RefPtr<StyleImage> m_image;
     bool m_accessedImage;
 
     HashSet<SVGElement*> m_referencedElements;
 };
 
 DEFINE_CSS_VALUE_TYPE_CASTS(CSSCursorImageValue, isCursorImageValue());
 
 } // namespace WebCore
 
 #endif // CSSCursorImageValue_h