EvacuateNewSpaceAndCandidates should explicitly skip dead large objects.

src/mark-compact.cc

 // Copyright 2011 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 3017 matching lines @@
                                      code_slots_filtering_required);
   if (FLAG_trace_fragmentation) {
     PrintF("  migration slots buffer: %d\n",
            SlotsBuffer::SizeOfChain(migration_slots_buffer_));
   }
 
   if (compacting_ && was_marked_incrementally_) {
     // It's difficult to filter out slots recorded for large objects.
     LargeObjectIterator it(heap_->lo_space());
     for (HeapObject* obj = it.Next(); obj != NULL; obj = it.Next()) {
+      // LargeObjectSpace is not swept yet thus we have to skip
+      // dead objects explicitly.
+      if (!IsMarked(obj)) continue;
+
       Page* p = Page::FromAddress(obj->address());
       if (p->IsFlagSet(Page::RESCAN_ON_EVACUATION)) {
         obj->Iterate(&updating_visitor);
         p->ClearFlag(Page::RESCAN_ON_EVACUATION);
       }
     }
   }
 
   int npages = evacuation_candidates_.length();
   for (int i = 0; i < npages; i++) {
@@ skipping 792 matching lines @@
   while (buffer != NULL) {
     SlotsBuffer* next_buffer = buffer->next();
     DeallocateBuffer(buffer);
     buffer = next_buffer;
   }
   *buffer_address = NULL;
 }
 
 
 } }  // namespace v8::internal