Oilpan: move LiveNodeList collections to the heap.

Source/core/html/HTMLMapElement.cpp

Index: Source/core/html/HTMLMapElement.cpp
diff --git a/Source/core/html/HTMLMapElement.cpp b/Source/core/html/HTMLMapElement.cpp
index f3cf6ff49631294fc1e843053e56154f48998ea2..a9f0be91bb550a7a3908e546591e862f77a48bf9 100644
--- a/Source/core/html/HTMLMapElement.cpp
+++ b/Source/core/html/HTMLMapElement.cpp
@@ -72,7 +72,7 @@ bool HTMLMapElement::mapMouseEvent(LayoutPoint location, const LayoutSize& size,
 
 HTMLImageElement* HTMLMapElement::imageElement()
 {
-    RefPtr<HTMLCollection> images = document().images();
+    RefPtrWillBeRawPtr<HTMLCollection> images = document().images();
     for (unsigned i = 0; Element* curr = images->item(i); i++) {
         ASSERT(isHTMLImageElement(curr));
 
@@ -114,7 +114,7 @@ void HTMLMapElement::parseAttribute(const QualifiedName& name, const AtomicStrin
     HTMLElement::parseAttribute(name, value);
 }
 
-PassRefPtr<HTMLCollection> HTMLMapElement::areas()
+PassRefPtrWillBeRawPtr<HTMLCollection> HTMLMapElement::areas()
 {
     return ensureCachedHTMLCollection(MapAreas);
 }