Revert of Move DOMArrayBuffer, DOMArrayBufferViews and DataView to the heap.

third_party/WebKit/Source/web/WebArrayBufferConverter.cpp

 /*
  * Copyright (C) 2014 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 23 matching lines @@
 
 namespace blink {
 
 v8::Local<v8::Value> WebArrayBufferConverter::toV8Value(WebArrayBuffer* buffer, v8::Local<v8::Object> creationContext, v8::Isolate* isolate)
 {
     // We no longer use |creationContext| because it's often misused and points
     // to a context faked by user script.
     DCHECK(creationContext->CreationContext() == isolate->GetCurrentContext());
     if (!buffer)
         return v8::Local<v8::Value>();
-    return toV8(*buffer, isolate->GetCurrentContext()->Global(), isolate);
+    return toV8(PassRefPtr<DOMArrayBuffer>(*buffer), isolate->GetCurrentContext()->Global(), isolate);
 }
 
 WebArrayBuffer* WebArrayBufferConverter::createFromV8Value(v8::Local<v8::Value> value, v8::Isolate* isolate)
 {
     if (!V8ArrayBuffer::hasInstance(value, isolate))
         return 0;
     return new WebArrayBuffer(V8ArrayBuffer::toImpl(value.As<v8::Object>()));
 }
 
 } // namespace blink