Support ES6 Map and Set in heap profiler

Support ES6 Map and Set in heap profiler

Added special handling for Map and Set in the heap snapshot generator.

Extracted common base type from JSMap/JSSet similar to JSWeakMap/JSWeakSet.

After handling collection specific properties all collections are processed as regular JSObject to make sure all regular properties set on them are present in the heap snapshot.

BUG=v8:3368
LOG=Y
R=alph@chromium.org, rossberg@chromium.org

Committed: https://code.google.com/p/v8/source/detail?r=22311

Committed: https://code.google.com/p/v8/source/detail?r=22316

[alph, 2014-07-08 17:13:55]

lgtm

[yurys, 2014-07-08 17:15:54]

Yang: please do OWNERS review.

[Yang, 2014-07-09 07:48:33]

looking good, but I'd like to run the Object hierarchy change by Andreas.

[rossberg, 2014-07-09 10:26:10]

On 2014/07/09 07:48:33, Yang wrote:
> looking good, but I'd like to run the Object hierarchy change by Andreas.

Looks good, but it would probably make sense to make JSWeakCollection inherit
from JSCollection now.

[rossberg, 2014-07-09 10:36:17]

On 2014/07/09 10:26:10, rossberg wrote:
> On 2014/07/09 07:48:33, Yang wrote:
> > looking good, but I'd like to run the Object hierarchy change by Andreas.
> 
> Looks good, but it would probably make sense to make JSWeakCollection inherit
> from JSCollection now.

On second thought, strike that. Their tables have different types, we should not
conflate them.

So LGTM.

(In fact, I'm not sure it's the best move to conflate the also different table
types of maps and sets either, but currently we don't have typed accessors
anyway.)

[yurys, 2014-07-10 07:25:03]

Committed patchset #2 manually as r22311 (presubmit successful).

[yurys, 2014-07-10 10:55:00]

Committed patchset #2 manually as r22316 (presubmit successful).