Oilpan: move 2D Canvas and WebGL objects to the heap.

Source/core/html/canvas/WebGLContextGroup.h

Index: Source/core/html/canvas/WebGLContextGroup.h
diff --git a/Source/core/html/canvas/WebGLContextGroup.h b/Source/core/html/canvas/WebGLContextGroup.h
index 6c2f995354013332bda0e70ba332cefb2c2f7aec..7631e79b2e689c9e33af5af4af5531ea1587c2f8 100644
--- a/Source/core/html/canvas/WebGLContextGroup.h
+++ b/Source/core/html/canvas/WebGLContextGroup.h
@@ -58,13 +58,19 @@ public:
 
     void loseContextGroup(WebGLRenderingContextBase::LostContextMode);
 
-  private:
+private:
     friend class WebGLObject;
 
     WebGLContextGroup();
 
     void detachAndRemoveAllObjects();
 
+    // FIXME: Oilpan: this object is not on the heap, but keeps bare
+    // pointers to garbage collected objects in the two hash sets
+    // below. The objects are responsible for managing their
+    // registration with WebGLContextGroup, and vice versa, the
+    // WebGLContextGroup takes care of detaching the group objects if
+    // the set of WebGLRenderingContextBase contexts becomes empty.
     HashSet<WebGLRenderingContextBase*> m_contexts;
     HashSet<WebGLSharedObject*> m_groupObjects;
 };