Oilpan: Allocate all EventTarget derived types on the manged heap.

Source/modules/speech/SpeechRecognition.h

Index: Source/modules/speech/SpeechRecognition.h
diff --git a/Source/modules/speech/SpeechRecognition.h b/Source/modules/speech/SpeechRecognition.h
index c682b61c90933ef4fa0a991ad25a73a6fd1dc9d5..9bc5a793f1930046223df0c76ea0c0d4c567217a 100644
--- a/Source/modules/speech/SpeechRecognition.h
+++ b/Source/modules/speech/SpeechRecognition.h
@@ -45,7 +45,8 @@ class SpeechRecognitionController;
 class SpeechRecognitionError;
 
 class SpeechRecognition FINAL : public RefCountedWillBeRefCountedGarbageCollected<SpeechRecognition>, public ScriptWrappable, public ActiveDOMObject, public EventTargetWithInlineData {
-    DEFINE_EVENT_TARGET_REFCOUNTING(RefCountedWillBeRefCountedGarbageCollected<SpeechRecognition>);
+    REFCOUNTED_EVENT_TARGET(SpeechRecognition);
+    WILL_BE_USING_GARBAGE_COLLECTED_MIXIN(SpeechRecognition);
 public:
     static PassRefPtrWillBeRawPtr<SpeechRecognition> create(ExecutionContext*);
     virtual ~SpeechRecognition();
@@ -100,7 +101,7 @@ public:
     DEFINE_ATTRIBUTE_EVENT_LISTENER(start);
     DEFINE_ATTRIBUTE_EVENT_LISTENER(end);
 
-    void trace(Visitor*);
+    virtual void trace(Visitor*) OVERRIDE;
 
 private:
     friend class RefCounted<SpeechRecognition>;