Oilpan: move editing objects to the heap.

Source/core/editing/ReplaceNodeWithSpanCommand.h

 /*
  * Copyright (c) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 22 matching lines @@
 
 #include "core/editing/CompositeEditCommand.h"
 
 namespace WebCore {
 
 class HTMLElement;
 
 // More accurately, this is ReplaceElementWithSpanPreservingChildrenAndAttributesCommand
 class ReplaceNodeWithSpanCommand FINAL : public SimpleEditCommand {
 public:
-    static PassRefPtr<ReplaceNodeWithSpanCommand> create(PassRefPtrWillBeRawPtr<HTMLElement> element)
+    static PassRefPtrWillBeRawPtr<ReplaceNodeWithSpanCommand> create(PassRefPtrWillBeRawPtr<HTMLElement> element)
     {
-        return adoptRef(new ReplaceNodeWithSpanCommand(element));
+        return adoptRefWillBeNoop(new ReplaceNodeWithSpanCommand(element));
     }
 
     HTMLElement* spanElement() { return m_spanElement.get(); }
 
+    virtual void trace(Visitor*) OVERRIDE;
+
 private:
     explicit ReplaceNodeWithSpanCommand(PassRefPtrWillBeRawPtr<HTMLElement>);
 
     virtual void doApply() OVERRIDE;
     virtual void doUnapply() OVERRIDE;
 
-    RefPtrWillBePersistent<HTMLElement> m_elementToReplace;
-    RefPtrWillBePersistent<HTMLElement> m_spanElement;
+    RefPtrWillBeMember<HTMLElement> m_elementToReplace;
+    RefPtrWillBeMember<HTMLElement> m_spanElement;
 };
 
 } // namespace WebCore
 
 #endif // ReplaceNodeWithSpanCommand