Oilpan: move SVG property hierarchy to the heap.

Source/core/svg/SVGGeometryElement.cpp

Index: Source/core/svg/SVGGeometryElement.cpp
diff --git a/Source/core/svg/SVGGeometryElement.cpp b/Source/core/svg/SVGGeometryElement.cpp
index 80cdbcf9ce7a239ce6c7f43b8fc4bc4a992921d1..fada62c1a42a40582d737576a9adb4c733a84904 100644
--- a/Source/core/svg/SVGGeometryElement.cpp
+++ b/Source/core/svg/SVGGeometryElement.cpp
@@ -44,7 +44,7 @@ SVGGeometryElement::SVGGeometryElement(const QualifiedName& tagName, Document& d
 {
 }
 
-bool SVGGeometryElement::isPointInFill(PassRefPtr<SVGPointTearOff> point) const
+bool SVGGeometryElement::isPointInFill(PassRefPtrWillBeRawPtr<SVGPointTearOff> point) const
 {
     document().updateLayoutIgnorePendingStylesheets();
 
@@ -58,7 +58,7 @@ bool SVGGeometryElement::isPointInFill(PassRefPtr<SVGPointTearOff> point) const
     return toRenderSVGShape(renderer())->nodeAtFloatPointInternal(request, point->target()->value(), hitRules);
 }
 
-bool SVGGeometryElement::isPointInStroke(PassRefPtr<SVGPointTearOff> point) const
+bool SVGGeometryElement::isPointInStroke(PassRefPtrWillBeRawPtr<SVGPointTearOff> point) const
 {
     document().updateLayoutIgnorePendingStylesheets();