[oilpan] Completely move HTMLFormControlElement's hierarchy to the managed heap

Source/core/rendering/RenderMenuList.h

 /*
  * This file is part of the select element renderer in WebCore.
  *
  * Copyright (C) 2010 Nokia Corporation and/or its subsidiary(-ies).
  * Copyright (C) 2006, 2007, 2008, 2009, 2010, 2011 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
@@ skipping 34 matching lines @@
     void showPopup();
     void hidePopup();
 
     void setOptionsChanged(bool changed) { m_optionsChanged = changed; }
 
     void didSetSelectedIndex(int listIndex);
 
     String text() const;
 
 private:
-    HTMLSelectElement* selectElement() const;
+    Result<HTMLSelectElement> selectElement() const;
 
     virtual bool isMenuList() const { return true; }
 
     virtual void addChild(RenderObject* newChild, RenderObject* beforeChild = 0);
     virtual void removeChild(RenderObject*);
     virtual bool createsAnonymousWrapper() const { return true; }
 
     virtual void updateFromElement();
 
     virtual LayoutRect controlClipRect(const LayoutPoint&) const;
@@ skipping 80 matching lines @@
     ASSERT_WITH_SECURITY_IMPLICATION(!object || object->isMenuList());
     return static_cast<RenderMenuList*>(object);
 }
 
 // This will catch anyone doing an unnecessary cast.
 void toRenderMenuList(const RenderMenuList*);
 
 }
 
 #endif