Move MediaQuery classes off BlinkGC heap

third_party/WebKit/Source/core/css/MediaQueryList.cpp

Index: third_party/WebKit/Source/core/css/MediaQueryList.cpp
diff --git a/third_party/WebKit/Source/core/css/MediaQueryList.cpp b/third_party/WebKit/Source/core/css/MediaQueryList.cpp
index c8d8670cb3eb82945cd368f53b614b58e5ab9e05..a23dc18faa60f2d16ba80af852bb5da48cb02892 100644
--- a/third_party/WebKit/Source/core/css/MediaQueryList.cpp
+++ b/third_party/WebKit/Source/core/css/MediaQueryList.cpp
@@ -29,13 +29,13 @@ namespace blink {
 
 MediaQueryList* MediaQueryList::Create(ExecutionContext* context,
                                        MediaQueryMatcher* matcher,
-                                       MediaQuerySet* media) {
-  return new MediaQueryList(context, matcher, media);
+                                       PassRefPtr<MediaQuerySet> media) {
+  return new MediaQueryList(context, matcher, RefPtr<MediaQuerySet>(media));
 }
 
 MediaQueryList::MediaQueryList(ExecutionContext* context,
                                MediaQueryMatcher* matcher,
-                               MediaQuerySet* media)
+                               PassRefPtr<MediaQuerySet> media)
     : ContextLifecycleObserver(context),
       matcher_(matcher),
       media_(media),
@@ -116,7 +116,6 @@ bool MediaQueryList::matches() {
 
 DEFINE_TRACE(MediaQueryList) {
   visitor->Trace(matcher_);
-  visitor->Trace(media_);
   visitor->Trace(listeners_);
   EventTargetWithInlineData::Trace(visitor);
   ContextLifecycleObserver::Trace(visitor);