Oilpan: move SVG property hierarchy to the heap.

Source/core/svg/SVGTransformTearOff.cpp

Index: Source/core/svg/SVGTransformTearOff.cpp
diff --git a/Source/core/svg/SVGTransformTearOff.cpp b/Source/core/svg/SVGTransformTearOff.cpp
index d10b8cc422f7c149ce0ed6b86ef9e10eb8f1a117..847c7b4e64679d19428b1aadb7e1cacdfc17816a 100644
--- a/Source/core/svg/SVGTransformTearOff.cpp
+++ b/Source/core/svg/SVGTransformTearOff.cpp
@@ -33,10 +33,11 @@
 
 #include "bindings/core/v8/ExceptionState.h"
 #include "core/dom/ExceptionCode.h"
+#include "core/svg/SVGElement.h"
 
 namespace blink {
 
-SVGTransformTearOff::SVGTransformTearOff(PassRefPtr<SVGTransform> target, SVGElement* contextElement, PropertyIsAnimValType propertyIsAnimVal, const QualifiedName& attributeName)
+SVGTransformTearOff::SVGTransformTearOff(PassRefPtrWillBeRawPtr<SVGTransform> target, SVGElement* contextElement, PropertyIsAnimValType propertyIsAnimVal, const QualifiedName& attributeName)
     : SVGPropertyTearOff<SVGTransform>(target, contextElement, propertyIsAnimVal, attributeName)
 {
 }
@@ -45,6 +46,12 @@ SVGTransformTearOff::~SVGTransformTearOff()
 {
 }
 
+void SVGTransformTearOff::trace(Visitor* visitor)
+{
+    visitor->trace(m_matrixTearoff);
+    SVGPropertyTearOff<SVGTransform>::trace(visitor);
+}
+
 SVGMatrixTearOff* SVGTransformTearOff::matrix()
 {
     if (!m_matrixTearoff) {
@@ -54,7 +61,7 @@ SVGMatrixTearOff* SVGTransformTearOff::matrix()
     return m_matrixTearoff.get();
 }
 
-void SVGTransformTearOff::setMatrix(PassRefPtr<SVGMatrixTearOff> matrix, ExceptionState& exceptionState)
+void SVGTransformTearOff::setMatrix(PassRefPtrWillBeRawPtr<SVGMatrixTearOff> matrix, ExceptionState& exceptionState)
 {
     if (isImmutable()) {
         exceptionState.throwDOMException(NoModificationAllowedError, "The attribute is read-only.");