Oilpan: move DOM string collection objects to the Oilpan heap.

Source/core/html/HTMLElement.h

Index: Source/core/html/HTMLElement.h
diff --git a/Source/core/html/HTMLElement.h b/Source/core/html/HTMLElement.h
index 9b3f37aa814447891776f8d9c3d72cbfe5c91324..a721ec12189df5b41c8c2d67cffc01f2a41195ad 100644
--- a/Source/core/html/HTMLElement.h
+++ b/Source/core/html/HTMLElement.h
@@ -91,6 +91,8 @@ public:
     virtual bool matchesReadOnlyPseudoClass() const OVERRIDE;
     virtual bool matchesReadWritePseudoClass() const OVERRIDE;
 
+    virtual void trace(Visitor*) OVERRIDE;

[Mads Ager (chromium), 2014/05/08 11:52:43]

It looks like this one is only calling the super class trace method. We can
remove it.

[sof, 2014/05/08 14:05:22]

Removed it. (Perhaps I just imagined it, but think I added it on behest of the
GC plugin originally.)

+
 protected:
     HTMLElement(const QualifiedName& tagName, Document&, ConstructionType);