Oilpan: move editing objects to the heap.

Source/core/editing/ReplaceNodeWithSpanCommand.cpp

Index: Source/core/editing/ReplaceNodeWithSpanCommand.cpp
diff --git a/Source/core/editing/ReplaceNodeWithSpanCommand.cpp b/Source/core/editing/ReplaceNodeWithSpanCommand.cpp
index a682948a5142b5c64f38b24cc30ae4c8a3fee7a7..5fde26426624b41cd662c9208e7cee82f7de4575 100644
--- a/Source/core/editing/ReplaceNodeWithSpanCommand.cpp
+++ b/Source/core/editing/ReplaceNodeWithSpanCommand.cpp
@@ -51,7 +51,7 @@ ReplaceNodeWithSpanCommand::ReplaceNodeWithSpanCommand(PassRefPtrWillBeRawPtr<HT
 static void swapInNodePreservingAttributesAndChildren(HTMLElement* newNode, HTMLElement& nodeToReplace)
 {
     ASSERT(nodeToReplace.inDocument());
-    RefPtr<ContainerNode> parentNode = nodeToReplace.parentNode();
+    RefPtrWillBeRawPtr<ContainerNode> parentNode = nodeToReplace.parentNode();
     parentNode->insertBefore(newNode, &nodeToReplace);
 
     NodeVector children;
@@ -81,4 +81,11 @@ void ReplaceNodeWithSpanCommand::doUnapply()
     swapInNodePreservingAttributesAndChildren(m_elementToReplace.get(), *m_spanElement);
 }
 
+void ReplaceNodeWithSpanCommand::trace(Visitor* visitor)
+{
+    visitor->trace(m_elementToReplace);
+    visitor->trace(m_spanElement);
+    SimpleEditCommand::trace(visitor);
+}
+
 } // namespace WebCore