[WIP] DOMMatrixReadOnly::m_matrix is changed to OwnPtr<>.

Source/core/dom/DOMMatrix.cpp

Index: Source/core/dom/DOMMatrix.cpp
diff --git a/Source/core/dom/DOMMatrix.cpp b/Source/core/dom/DOMMatrix.cpp
index 22a9df9770576e61f14d7bf6247da6f41821f074..d89e0fe05e682e0dabe5a15b3e566c346f13aa93 100644
--- a/Source/core/dom/DOMMatrix.cpp
+++ b/Source/core/dom/DOMMatrix.cpp
@@ -34,7 +34,7 @@ DOMMatrix* DOMMatrix::multiplySelf(DOMMatrix* other)
     if (!other->is2D())
         m_is2D = false;
 
-    m_matrix = m_matrix * other->matrix();
+    m_matrix.multiply(other->matrix());

[zino, 2014/09/04 14:18:52]

I think this sentence is reasonable but it makes a crash on linux_blink_dbg.
(other os and release are okay)

I don't exactly know what the problem is. However, as my investigating,
I guess it occurs if we define TRANSFORMATION_MATRIX_USE_X86_64_SSE2 [1]
and DOMMatrix is derived garbage collected class.
If we don't use garbage collected class, it is okay.

m_matrix.multiply(other->matrix());    // crash
m_matrix = TransformationMatrix(m_matrix).multiply(other->matrix()); // normal

Could you please help me? Am I missing something here?

[1] The code path :
https://code.google.com/p/chromium/codesearch#chromium/src/third_party/WebKit...

 
     return this;
 }