Prerender need to be on the Oilpan heap.

third_party/WebKit/public/platform/WebPrerender.h

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 19 matching lines @@
 
 #ifndef WebPrerender_h
 #define WebPrerender_h
 
 #include "WebCommon.h"
 #include "WebPrivatePtr.h"
 #include "WebReferrerPolicy.h"
 #include "WebString.h"
 #include "WebURL.h"
 
-#if INSIDE_BLINK
-#include "wtf/PassRefPtr.h"
-#endif
-
 namespace blink {
 
 class Prerender;
 
 // WebPrerenderRelType is a bitfield since multiple rel attributes can be set on the same prerender.
 enum WebPrerenderRelType {
     PrerenderRelTypePrerender = 0x1,
     PrerenderRelTypeNext = 0x2,
 };
 
 class WebPrerender {
 public:
     class ExtraData {
     public:
         virtual ~ExtraData() { }
     };
 
     ~WebPrerender() { reset(); }
     WebPrerender() { }
     WebPrerender(const WebPrerender& other) { assign(other); }
     WebPrerender& operator=(const WebPrerender& other)
     {
         assign(other);
         return *this;
     }
 
 #if INSIDE_BLINK
-    BLINK_PLATFORM_EXPORT explicit WebPrerender(PassRefPtr<Prerender>);
+    BLINK_PLATFORM_EXPORT explicit WebPrerender(Prerender*);
 
     BLINK_PLATFORM_EXPORT const Prerender* toPrerender() const;
 #endif
 
     BLINK_PLATFORM_EXPORT void reset();
     BLINK_PLATFORM_EXPORT void assign(const WebPrerender&);
     BLINK_PLATFORM_EXPORT bool isNull() const;
 
     BLINK_PLATFORM_EXPORT WebURL url() const;
     BLINK_PLATFORM_EXPORT WebString referrer() const;
     BLINK_PLATFORM_EXPORT unsigned relTypes() const;
     BLINK_PLATFORM_EXPORT WebReferrerPolicy referrerPolicy() const;
 
     BLINK_PLATFORM_EXPORT void setExtraData(ExtraData*);
     BLINK_PLATFORM_EXPORT const ExtraData* getExtraData() const;
 
     BLINK_PLATFORM_EXPORT void didStartPrerender();
     BLINK_PLATFORM_EXPORT void didStopPrerender();
     BLINK_PLATFORM_EXPORT void didSendLoadForPrerender();
     BLINK_PLATFORM_EXPORT void didSendDOMContentLoadedForPrerender();
 
 private:
     WebPrivatePtr<Prerender> m_private;
 };
 
 } // namespace blink
 
 #endif // WebPrerender_h