Oilpan: Disable lazy seeping for ImageLoaders

Source/core/loader/ImageLoader.h

Index: Source/core/loader/ImageLoader.h
diff --git a/Source/core/loader/ImageLoader.h b/Source/core/loader/ImageLoader.h
index c7588f8a37224a4dc50f78bc019686e2927a3710..a938d7d01abc7f9d0956cba3828298aadb23014b 100644
--- a/Source/core/loader/ImageLoader.h
+++ b/Source/core/loader/ImageLoader.h
@@ -62,6 +62,13 @@ class CORE_EXPORT ImageLoader : public NoBaseWillBeGarbageCollectedFinalized<Ima
 public:
     explicit ImageLoader(Element*);
     virtual ~ImageLoader();
+
+    // We must run the destructor in the eager sweeping phase and call
+    // m_image->removeClient(this). Otherwise, the ImageResource can invoke
+    // didAddClient() for the ImageLoader that is about to die in the current
+    // lazy sweeping, and the didAddClient() can access on-heap objects that
+    // have already been finalized in the current lazy sweeping.
+    EAGERLY_FINALIZE();
     DECLARE_TRACE();
 
     enum UpdateFromElementBehavior {