Move DOMArrayBuffer, DOMArrayBufferViews and DataView to the heap.

third_party/WebKit/Source/modules/push_messaging/PushSubscription.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/push_messaging/PushSubscription.h"
 
 #include "bindings/core/v8/CallbackPromiseAdapter.h"
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 #include "bindings/core/v8/V8ObjectBuilder.h"
 #include "modules/push_messaging/PushError.h"
@@ skipping 30 matching lines @@
 
 PushSubscription::~PushSubscription()
 {
 }
 
 KURL PushSubscription::endpoint() const
 {
     return m_endpoint;
 }
 
-PassRefPtr<DOMArrayBuffer> PushSubscription::getKey(const AtomicString& name) const
+DOMArrayBuffer* PushSubscription::getKey(const AtomicString& name) const
 {
     if (name == "p256dh")
         return m_p256dh;
     if (name == "auth")
         return m_auth;
 
     return nullptr;
 }
 
 ScriptPromise PushSubscription::unsubscribe(ScriptState* scriptState)
@@ skipping 21 matching lines @@
         keys.add("auth", WTF::base64URLEncode(static_cast<const char*>(m_auth->data()), m_auth->byteLength()));
 
         result.add("keys", keys);
     }
 
     return result.scriptValue();
 }
 
 DEFINE_TRACE(PushSubscription)
 {
+    visitor->trace(m_p256dh);
+    visitor->trace(m_auth);
     visitor->trace(m_serviceWorkerRegistration);
 }
 
 } // namespace blink