Move DOMArrayBuffer, DOMArrayBufferViews and DataView to the heap.

third_party/WebKit/Source/bindings/core/v8/DictionaryHelperForCore.cpp

Index: third_party/WebKit/Source/bindings/core/v8/DictionaryHelperForCore.cpp
diff --git a/third_party/WebKit/Source/bindings/core/v8/DictionaryHelperForCore.cpp b/third_party/WebKit/Source/bindings/core/v8/DictionaryHelperForCore.cpp
index 22f27920198b4a287490131c9740ceb7cc15f203..8ecf673416ca36d824ef5445dccf717a627aeb21 100644
--- a/third_party/WebKit/Source/bindings/core/v8/DictionaryHelperForCore.cpp
+++ b/third_party/WebKit/Source/bindings/core/v8/DictionaryHelperForCore.cpp
@@ -309,6 +309,15 @@ CORE_EXPORT bool DictionaryHelper::get(const Dictionary& dictionary, const Strin
     return true;
 }
 
-template CORE_EXPORT bool DictionaryHelper::get(const Dictionary&, const String& key, RefPtr<DOMUint8Array>& value);
+template<>
+CORE_EXPORT bool DictionaryHelper::get(const Dictionary& dictionary, const String& key, DOMUint8Array*& value)
+{
+    v8::Local<v8::Value> v8Value;
+    if (!dictionary.get(key, v8Value))
+        return false;
+
+    value = V8Uint8Array::toImplWithTypeCheck(dictionary.isolate(), v8Value);
+    return true;
+}
 
 } // namespace blink