Vector stores Expression object as OwnPtr instead of raw pointer in XPath.

Source/core/xml/XPathPath.cpp

 /*
  * Copyright (C) 2005 Frerich Raabe <raabe@kde.org>
  * Copyright (C) 2006, 2009 Apple Inc.
  * Copyright (C) 2007 Alexey Proskuryakov <ap@webkit.org>
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1. Redistributions of source code must retain the above copyright
@@ skipping 19 matching lines @@
 
 #include "core/dom/Document.h"
 #include "core/xml/XPathPredicate.h"
 #include "core/xml/XPathStep.h"
 #include "core/xml/XPathValue.h"
 
 namespace WebCore {
 namespace XPath {
 
 Filter::Filter(Expression* expr, const Vector<Predicate*>& predicates)
-    : m_expr(expr), m_predicates(predicates)
+    : m_expr(adoptPtr(expr))

[abarth-chromium, 2013/10/11 20:28:05]

Again, |expr| should have the type PassOwnPtr<Expression>

 {
+    m_predicates.reserveInitialCapacity(predicates.size());
+    for (size_t i = 0; i < predicates.size(); i++)
+        m_predicates.append(adoptPtr(predicates[i]));

[abarth-chromium, 2013/10/11 20:28:05]

Calling adoptPtr manually here is wrong for the same reason.

+
     setIsContextNodeSensitive(m_expr->isContextNodeSensitive());
     setIsContextPositionSensitive(m_expr->isContextPositionSensitive());
     setIsContextSizeSensitive(m_expr->isContextSizeSensitive());
 }
 
 Filter::~Filter()
 {
-    delete m_expr;
-    deleteAllValues(m_predicates);
 }
 
 Value Filter::evaluate() const
 {
     Value v = m_expr->evaluate();
 
     NodeSet& nodes = v.modifiableNodeSet();
     nodes.sort();
 
     EvaluationContext& evaluationContext = Expression::evaluationContext();
@@ skipping 145 matching lines @@
     Value v = m_filter->evaluate();
 
     NodeSet& nodes = v.modifiableNodeSet();
     m_path->evaluate(nodes);
 
     return v;
 }
 
 }
 }