Oilpan: Make the Node hierarchy RefCountedGarbageCollected instead of TreeShared.

Source/core/html/forms/TextFieldInputType.cpp

Index: Source/core/html/forms/TextFieldInputType.cpp
diff --git a/Source/core/html/forms/TextFieldInputType.cpp b/Source/core/html/forms/TextFieldInputType.cpp
index 1b78abe81c6802df9dd34458a9f75859217cdbb0..b094159a74c3abfa1b3c91dfe4a68f20c93cc170 100644
--- a/Source/core/html/forms/TextFieldInputType.cpp
+++ b/Source/core/html/forms/TextFieldInputType.cpp
@@ -115,8 +115,10 @@ TextFieldInputType::TextFieldInputType(HTMLInputElement& element)
 
 TextFieldInputType::~TextFieldInputType()
 {
+#if !ENABLE(OILPAN)
     if (SpinButtonElement* spinButton = spinButtonElement())
         spinButton->removeSpinButtonOwner();

[Erik Corry, 2014/05/06 08:29:40]

m_spinButtonOwner is a raw pointer, and this CL does not change that

[Mads Ager (chromium), 2014/05/06 09:16:51]

This is safe because these nodes are in the same shadow tree and are therefore
live and die together (the owner is implicitly traced because they are in the
same tree). However, it is nasty and we should make the SpinButtonOwner traced.
We cannot do that at this point because one subclass of SpinButtonOwner is not
on the heap.

+#endif
 }
 
 SpinButtonElement* TextFieldInputType::spinButtonElement() const