[oilpan] Completely move HTMLFormControlElement's hierarchy to the managed heap

Source/core/html/NumberInputType.cpp

Index: Source/core/html/NumberInputType.cpp
diff --git a/Source/core/html/NumberInputType.cpp b/Source/core/html/NumberInputType.cpp
index e66394bd095e91108c0b04f06e4c7dc60376d3a4..50d5ec5a2a51d4f9fe77a3ecb6229e104974ae43 100644
--- a/Source/core/html/NumberInputType.cpp
+++ b/Source/core/html/NumberInputType.cpp
@@ -96,7 +96,7 @@ static RealNumberRenderSize calculateRenderSize(const Decimal& value)
     return RealNumberRenderSize(sizeOfSign + sizeOfZero , numberOfZeroAfterDecimalPoint + sizeOfDigits);
 }
 
-PassOwnPtr<InputType> NumberInputType::create(HTMLInputElement* element)
+PassOwnPtr<InputType> NumberInputType::create(Handle<HTMLInputElement> element)
 {
     return adoptPtr(new NumberInputType(element));
 }