Oilpan: move SVG property hierarchy to the heap.

Source/core/svg/properties/SVGPropertyTearOff.h

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 15 matching lines @@
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #ifndef SVGPropertyTearOff_h
 #define SVGPropertyTearOff_h
 
 #include "core/dom/QualifiedName.h"
 #include "core/svg/properties/SVGProperty.h"
+#include "platform/heap/Handle.h"
 #include "wtf/RefCounted.h"
 
 namespace blink {
 
 enum PropertyIsAnimValType {
     PropertyIsNotAnimVal,
     PropertyIsAnimVal
 };
 
-class SVGPropertyTearOffBase : public RefCounted<SVGPropertyTearOffBase> {
+class SVGPropertyTearOffBase : public RefCountedWillBeGarbageCollectedFinalized<SVGPropertyTearOffBase> {
 public:
     virtual ~SVGPropertyTearOffBase() { }
 
     PropertyIsAnimValType propertyIsAnimVal() const
     {
         return m_propertyIsAnimVal;
     }
 
     bool isAnimVal() const
     {
@@ skipping 31 matching lines @@
     {
         ASSERT(!isImmutable());
         ASSERT(contextElement);
         ASSERT(attributeName != QualifiedName::null());
         m_contextElement = contextElement;
         m_attributeName = attributeName;
     }
 
     virtual AnimatedPropertyType type() const = 0;
 
+    virtual void trace(Visitor* visitor)
+    {
+        visitor->trace(m_contextElement);
+    }
+
 protected:
     SVGPropertyTearOffBase(SVGElement* contextElement, PropertyIsAnimValType propertyIsAnimVal, const QualifiedName& attributeName = QualifiedName::null())
         : m_contextElement(contextElement)
         , m_propertyIsAnimVal(propertyIsAnimVal)
         , m_isReadOnlyProperty(false)
         , m_attributeName(attributeName)
     {
     }
 
 private:
     // These references are kept alive from V8 wrapper to prevent reference cycles
-    SVGElement* m_contextElement;
+    RawPtrWillBeMember<SVGElement> m_contextElement;
 
     PropertyIsAnimValType m_propertyIsAnimVal;
     bool m_isReadOnlyProperty;
     QualifiedName m_attributeName;
 };
 
 template <typename Property>
 class SVGPropertyTearOff : public SVGPropertyTearOffBase {
 public:
     Property* target()
     {
         return m_target.get();
     }
 
-    void setTarget(PassRefPtr<Property> target)
+    void setTarget(PassRefPtrWillBeRawPtr<Property> target)
     {
         m_target = target;
     }
 
     virtual AnimatedPropertyType type() const override
     {
         return Property::classType();
     }
 
+    virtual void trace(Visitor* visitor) override
+    {
+        visitor->trace(m_target);
+        SVGPropertyTearOffBase::trace(visitor);
+    }
+
 protected:
-    SVGPropertyTearOff(PassRefPtr<Property> target, SVGElement* contextElement, PropertyIsAnimValType propertyIsAnimVal, const QualifiedName& attributeName = QualifiedName::null())
+    SVGPropertyTearOff(PassRefPtrWillBeRawPtr<Property> target, SVGElement* contextElement, PropertyIsAnimValType propertyIsAnimVal, const QualifiedName& attributeName = QualifiedName::null())
         : SVGPropertyTearOffBase(contextElement, propertyIsAnimVal, attributeName)
         , m_target(target)
     {
         ASSERT(m_target);
     }
 
 private:
-    RefPtr<Property> m_target;
+    RefPtrWillBeMember<Property> m_target;
 };
 
 }
 
 #endif // SVGPropertyTearOff_h