Revert of Move DOMArrayBuffer, DOMArrayBufferViews and DataView to the heap.

third_party/WebKit/Source/core/fileapi/Blob.h

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 23 matching lines @@
 #include "bindings/core/v8/ScriptWrappable.h"
 #include "bindings/core/v8/UnionTypesCore.h"
 #include "core/CoreExport.h"
 #include "core/dom/DOMArrayBuffer.h"
 #include "core/dom/DOMArrayBufferView.h"
 #include "core/html/URLRegistry.h"
 #include "core/imagebitmap/ImageBitmapSource.h"
 #include "platform/blob/BlobData.h"
 #include "platform/heap/Handle.h"
 #include "wtf/PassRefPtr.h"
+#include "wtf/RefCounted.h"
 #include "wtf/text/WTFString.h"
 
 namespace blink {
 
 class BlobPropertyBag;
 class ExceptionState;
 class ExecutionContext;
 
 class CORE_EXPORT Blob : public GarbageCollectedFinalized<Blob>, public ScriptWrappable, public URLRegistrable, public ImageBitmapSource {
     DEFINE_WRAPPERTYPEINFO();
@@ skipping 55 matching lines @@
 
 protected:
     explicit Blob(PassRefPtr<BlobDataHandle>);
 
     template<typename ItemType>
     static void populateBlobData(BlobData* blobData, const HeapVector<ItemType>& parts, bool normalizeLineEndingsToNative)
     {
         for (size_t i = 0; i < parts.size(); ++i) {
             const ItemType& item = parts[i];
             if (item.isArrayBuffer()) {
-                DOMArrayBuffer* arrayBuffer = item.getAsArrayBuffer();
+                RefPtr<DOMArrayBuffer> arrayBuffer = item.getAsArrayBuffer();
                 blobData->appendBytes(arrayBuffer->data(), arrayBuffer->byteLength());
             } else if (item.isArrayBufferView()) {
-                DOMArrayBufferView* arrayBufferView = item.getAsArrayBufferView();
+                RefPtr<DOMArrayBufferView> arrayBufferView = item.getAsArrayBufferView();
                 blobData->appendBytes(arrayBufferView->baseAddress(), arrayBufferView->byteLength());
             } else if (item.isBlob()) {
                 item.getAsBlob()->appendTo(*blobData);
             } else if (item.isString()) {
                 blobData->appendText(item.getAsString(), normalizeLineEndingsToNative);
             } else {
                 ASSERT_NOT_REACHED();
             }
         }
     }
 
     static void clampSliceOffsets(long long size, long long& start, long long& end);
 private:
     Blob();
 
     RefPtr<BlobDataHandle> m_blobDataHandle;
     bool m_hasBeenClosed;
 };
 
 } // namespace blink
 
 #endif // Blob_h