Avoid some crashes when running without snapshots.

src/heap.h

Index: src/heap.h
diff --git a/src/heap.h b/src/heap.h
index 1ee2841b12b6066e43ac0bb4679e96a0180944c2..fbe89e8f85baa441ad55bc69e7c0be98a8411afe 100644
--- a/src/heap.h
+++ b/src/heap.h
@@ -1929,8 +1929,7 @@ class SpaceIterator : public Malloced {
 
 // A HeapIterator provides iteration over the whole heap. It
 // aggregates the specific iterators for the different spaces as
-// these can only iterate over one space only.  It can only be guaranteed
-// to iterate over live objects.
+// these can only iterate over one space only.
 //
 // HeapIterator can skip free list nodes (that is, de-allocated heap
 // objects that still remain in the heap). As implementation of free
@@ -1941,18 +1940,28 @@ class HeapObjectsFilter;
 
 class HeapIterator BASE_EMBEDDED {
  public:
+  enum HeapObjectsFiltering {
+    kNoFiltering,
+    kFilterFreeListNodes,
+    kFilterUnreachable
+  };
+
   HeapIterator();
+  explicit HeapIterator(HeapObjectsFiltering filtering);
   ~HeapIterator();
 
-  HeapObject* Next();
-  void Reset();
+  HeapObject* next();
+  void reset();
 
  private:
   // Perform the initialization.
   void Init();
   // Perform all necessary shutdown (destruction) work.
   void Shutdown();
+  HeapObject* NextObject();
 
+  HeapObjectsFiltering filtering_;
+  HeapObjectsFilter* filter_;
   // Space iterator for iterating all the spaces.
   SpaceIterator* space_iterator_;
   // Object iterator for the space currently being iterated.
@@ -2355,10 +2364,13 @@ class IntrusiveMarking {
     ASSERT(IsMarked(object));
   }
 
-  static int SizeOfMarkedObject(HeapObject* object) {
+  static Map* MapOfMarkedObject(HeapObject* object) {
     uintptr_t map_word = object->map_word().ToRawValue();
-    Map* map = MapWord::FromRawValue(map_word | kNotMarkedBit).ToMap();
-    return object->SizeFromMap(map);
+    return MapWord::FromRawValue(map_word | kNotMarkedBit).ToMap();
+  }
+
+  static int SizeOfMarkedObject(HeapObject* object) {
+    return object->SizeFromMap(MapOfMarkedObject(object));
   }
 
  private: