Move MediaQuery classes off BlinkGC heap

third_party/WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp

Index: third_party/WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp
diff --git a/third_party/WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp b/third_party/WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp
index 7236302e033dc536640579bb826da73e88410c4c..1add4e03b4f2e1a13ac63a2ed928bb098b1867f2 100644
--- a/third_party/WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp
+++ b/third_party/WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp
@@ -127,9 +127,9 @@ static String initiatorFor(const StringImpl* tagImpl) {
 
 static bool mediaAttributeMatches(const MediaValuesCached& mediaValues,
                                   const String& attributeValue) {
-  MediaQuerySet* mediaQueries = MediaQuerySet::create(attributeValue);
+  RefPtr<MediaQuerySet> mediaQueries = MediaQuerySet::create(attributeValue);
   MediaQueryEvaluator mediaQueryEvaluator(mediaValues);
-  return mediaQueryEvaluator.eval(mediaQueries);
+  return mediaQueryEvaluator.eval(*mediaQueries);
 }
 
 class TokenPreloadScanner::StartTagScanner {