[oilpan] Completely move HTMLFormControlElement's hierarchy to the managed heap

Source/core/css/SelectorChecker.cpp

Index: Source/core/css/SelectorChecker.cpp
diff --git a/Source/core/css/SelectorChecker.cpp b/Source/core/css/SelectorChecker.cpp
index e13a5f3353ec930902abbd51be6157baa23e506f..e8db28b50ada764abdfc3c1dc876a3720e9fe8b4 100644
--- a/Source/core/css/SelectorChecker.cpp
+++ b/Source/core/css/SelectorChecker.cpp
@@ -556,7 +556,7 @@ bool SelectorChecker::checkOne(const SelectorCheckingContext& context, const Sib
         case CSSSelector::PseudoAutofill:
             if (!element || !element->isFormControlElement())
                 break;
-            if (HTMLInputElement* inputElement = element->toInputElement())
+            if (Handle<HTMLInputElement> inputElement = element->toInputElement())
                 return inputElement->isAutofilled();
             break;
         case CSSSelector::PseudoAnyLink:
@@ -644,7 +644,7 @@ bool SelectorChecker::checkOne(const SelectorCheckingContext& context, const Sib
                 // Even though WinIE allows checked and indeterminate to co-exist, the CSS selector spec says that
                 // you can't be both checked and indeterminate. We will behave like WinIE behind the scenes and just
                 // obey the CSS spec here in the test for matching the pseudo.
-                HTMLInputElement* inputElement = element->toInputElement();
+                Handle<HTMLInputElement> inputElement = element->toInputElement();
                 if (inputElement && inputElement->shouldAppearChecked() && !inputElement->shouldAppearIndeterminate())
                     return true;
                 if (element->hasTagName(optionTag) && toHTMLOptionElement(element)->selected())