Move MediaQuery classes off BlinkGC heap

third_party/WebKit/Source/core/css/MediaQueryList.cpp

Index: third_party/WebKit/Source/core/css/MediaQueryList.cpp
diff --git a/third_party/WebKit/Source/core/css/MediaQueryList.cpp b/third_party/WebKit/Source/core/css/MediaQueryList.cpp
index ad55949bd1a490d13daf854638a2b2dc8e7643bd..29495b4f8863f1afbb4d163874b3a1892c8b2d0d 100644
--- a/third_party/WebKit/Source/core/css/MediaQueryList.cpp
+++ b/third_party/WebKit/Source/core/css/MediaQueryList.cpp
@@ -29,13 +29,13 @@ namespace blink {
 
 MediaQueryList* MediaQueryList::create(ExecutionContext* context,
                                        MediaQueryMatcher* matcher,
-                                       MediaQuerySet* media) {
-  return new MediaQueryList(context, matcher, media);
+                                       RefPtr<MediaQuerySet> media) {
+  return new MediaQueryList(context, matcher, RefPtr<MediaQuerySet>(media));
 }
 
 MediaQueryList::MediaQueryList(ExecutionContext* context,
                                MediaQueryMatcher* matcher,
-                               MediaQuerySet* media)
+                               RefPtr<MediaQuerySet> media)
     : ContextLifecycleObserver(context),
       m_matcher(matcher),
       m_media(media),
@@ -116,7 +116,6 @@ bool MediaQueryList::matches() {
 
 DEFINE_TRACE(MediaQueryList) {
   visitor->trace(m_matcher);
-  visitor->trace(m_media);
   visitor->trace(m_listeners);
   EventTargetWithInlineData::trace(visitor);
   ContextLifecycleObserver::trace(visitor);