Revert of Move DOMArrayBuffer, DOMArrayBufferViews and DataView to the heap.

third_party/WebKit/Source/core/dom/FlexibleArrayBufferView.h

Index: third_party/WebKit/Source/core/dom/FlexibleArrayBufferView.h
diff --git a/third_party/WebKit/Source/core/dom/FlexibleArrayBufferView.h b/third_party/WebKit/Source/core/dom/FlexibleArrayBufferView.h
index d37f5c3f9b49955ac9111bb06df1e19da244d021..7f09a29fe8bf284dfb3cc465a157df73e1f3732e 100644
--- a/third_party/WebKit/Source/core/dom/FlexibleArrayBufferView.h
+++ b/third_party/WebKit/Source/core/dom/FlexibleArrayBufferView.h
@@ -42,7 +42,7 @@
     DOMArrayBufferView* full() const
     {
         DCHECK(isFull());
-        return m_full;
+        return m_full.get();
     }
 
     // WARNING: The pointer returned by baseAddressMaybeOnStack() may point to
@@ -69,7 +69,7 @@
     operator bool() const { return !isEmpty(); }
 
 private:
-    Member<DOMArrayBufferView> m_full;
+    RefPtr<DOMArrayBufferView> m_full;
 
     void* m_smallData;
     size_t m_smallLength;