m_visitedLinkState is created in Document ctor and never cleared. We can return a reference from visitedLinkState() instead of a pointer.
Created attachment 209106 [details]
Comment on attachment 209106 [details]
As an added precaution, you should make Document::m_visitedLinkState const.
That way it can't be assigned to outside of the Document ctor initializer list.
Committed r154291: <http://trac.webkit.org/changeset/154291>