Oilpan: have PendingScripts trace their script elements.

Source/core/dom/Document.cpp

Index: Source/core/dom/Document.cpp
diff --git a/Source/core/dom/Document.cpp b/Source/core/dom/Document.cpp
index 9a539716bb24931040285c6e207c7d8fd6825959..4bd1d49faf7c0bbb710f924af8a5cef61d72712c 100644
--- a/Source/core/dom/Document.cpp
+++ b/Source/core/dom/Document.cpp
@@ -536,7 +536,6 @@ Document::~Document()
 
     if (m_templateDocument)
         m_templateDocument->m_templateDocumentHost = nullptr; // balanced in ensureTemplateDocument().
-#endif
 
     m_scriptRunner.clear();
 
@@ -544,7 +543,6 @@ Document::~Document()
     // not notify the inspector instrumentation that the event listeners are
     // gone. The Document and all the nodes in the document are gone, so maybe
     // that is OK?
-#if !ENABLE(OILPAN)
     removeAllEventListenersRecursively();
 
     // Currently we believe that Document can never outlive the parser.
@@ -5766,6 +5764,7 @@ void Document::trace(Visitor* visitor)
     visitor->trace(m_titleElement);
     visitor->trace(m_markers);
     visitor->trace(m_currentScriptStack);
+    visitor->trace(m_scriptRunner);
     visitor->trace(m_transformSourceDocument);
     visitor->trace(m_listsInvalidatedAtDocument);
 #if ENABLE(OILPAN)