[oilpan] Completely move HTMLFormControlElement's hierarchy to the managed heap

Source/core/html/NumberInputType.cpp

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  * Copyright (C) 2011 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 78 matching lines @@
         // In case of "123.456"
         return RealNumberRenderSize(sizeOfSign + sizeBeforeDecimalPoint, sizeOfDigits - sizeBeforeDecimalPoint);
     }
 
     // In case of "0.00012345"
     const unsigned sizeOfZero = 1;
     const unsigned numberOfZeroAfterDecimalPoint = -sizeBeforeDecimalPoint;
     return RealNumberRenderSize(sizeOfSign + sizeOfZero , numberOfZeroAfterDecimalPoint + sizeOfDigits);
 }
 
-PassOwnPtr<InputType> NumberInputType::create(HTMLInputElement* element)
+PassOwnPtr<InputType> NumberInputType::create(Handle<HTMLInputElement> element)
 {
     return adoptPtr(new NumberInputType(element));
 }
 
 void NumberInputType::attach()
 {
     TextFieldInputType::attach();
     observeFeatureIfVisible(UseCounter::InputTypeNumber);
 }
 
@@ skipping 190 matching lines @@
 
 void NumberInputType::stepAttributeChanged()
 {
     InputType::stepAttributeChanged();
 
     if (element()->renderer())
         element()->renderer()->setNeedsLayoutAndPrefWidthsRecalc();
 }
 
 } // namespace WebCore