Move DOMArrayBuffer, DOMArrayBufferViews and DataView to the heap.

third_party/WebKit/Source/core/dom/DOMArrayPiece.cpp

Index: third_party/WebKit/Source/core/dom/DOMArrayPiece.cpp
diff --git a/third_party/WebKit/Source/core/dom/DOMArrayPiece.cpp b/third_party/WebKit/Source/core/dom/DOMArrayPiece.cpp
index bdf69e975a0f559d9389f4ecc82b9f26aa71e995..51dafc03f370ad7c486270e2f5f98bdb35b86c21 100644
--- a/third_party/WebKit/Source/core/dom/DOMArrayPiece.cpp
+++ b/third_party/WebKit/Source/core/dom/DOMArrayPiece.cpp
@@ -11,11 +11,10 @@ namespace blink {
 DOMArrayPiece::DOMArrayPiece(const ArrayBufferOrArrayBufferView& arrayBufferOrView, InitWithUnionOption option)
 {
     if (arrayBufferOrView.isArrayBuffer()) {
-        RefPtr<DOMArrayBuffer> arrayBuffer = arrayBufferOrView.getAsArrayBuffer();
+        DOMArrayBuffer* arrayBuffer = arrayBufferOrView.getAsArrayBuffer();
         initWithData(arrayBuffer->data(), arrayBuffer->byteLength());
     } else if (arrayBufferOrView.isArrayBufferView()) {
-        RefPtr<DOMArrayBufferView> arrayBufferView =
-            arrayBufferOrView.getAsArrayBufferView();
+        DOMArrayBufferView* arrayBufferView = arrayBufferOrView.getAsArrayBufferView();
         initWithData(arrayBufferView->baseAddress(), arrayBufferView->byteLength());
     } else if (arrayBufferOrView.isNull() && option == AllowNullPointToNullWithZeroSize) {
         initWithData(nullptr, 0);