[oilpan] Wrap NodeVector into CollectionRoot for ensure that contained nodes stay alive.

Source/core/dom/ContainerNode.h

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2009, 2010, 2011 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
@@ skipping 254 matching lines @@
     if (getFlag(NeedsShadowTreeWalkerFlag))
         return true;
     Handle<ContainerNode> parent = parentOrShadowHostNode();
     return parent && parent->getFlag(NeedsShadowTreeWalkerFlag);
 }
 
 // This constant controls how much buffer is initially allocated
 // for a Node Vector that is used to store child Nodes of a given Node.
 // FIXME: Optimize the value.
 const int initialNodeVectorSize = 11;
-typedef Vector<Member<Node>, initialNodeVectorSize> NodeVector;
+typedef CollectionRoot<Vector<Member<Node>, initialNodeVectorSize> > NodeVector;
 
 inline void getChildNodes(Node* node, NodeVector& nodes)
 {
-    ASSERT(!nodes.size());
+    ASSERT(!nodes->size());
     for (Handle<Node> child = node->firstChild(); child; child = child->nextSibling()) {
         NoHandleScope scope;
-        nodes.append(child);
+        nodes->append(child);
     }
 }
 
 
 class ChildNodesLazySnapshot {
     WTF_MAKE_NONCOPYABLE(ChildNodesLazySnapshot);
     WTF_MAKE_FAST_ALLOCATED;
     DISALLOW_ALLOCATION()
 public:
     explicit ChildNodesLazySnapshot(const Handle<Node>& parentNode)
@@ skipping 73 matching lines @@
         m_node->resumePostAttachCallbacks();
     }
 
 private:
     Handle<ContainerNode> m_node;
 };
 
 } // namespace WebCore
 
 #endif // ContainerNode_h