Move Frame to the Oilpan heap.

Source/web/WebFrame.cpp

Index: Source/web/WebFrame.cpp
diff --git a/Source/web/WebFrame.cpp b/Source/web/WebFrame.cpp
index b6832d30b735811ea7c4940a581f6364b0182073..b76906969f53d5a6ccbae4697a5c97a329bc0c66 100644
--- a/Source/web/WebFrame.cpp
+++ b/Source/web/WebFrame.cpp
@@ -220,4 +220,20 @@ WebFrame::~WebFrame()
     m_openedFrameTracker.reset(0);
 }
 
+void WebFrame::trace(Visitor* visitor, WebFrame* frame)

[haraken, 2014/09/08 07:25:59]

It looks dangerous to do something non-trivial in trace methods (although I
haven't checked if this particular trace method is safe or not), because trace
methods can be called while constructing an object.

Can we restructure the code so that trace methods just call
visitor->trace(m_member)'s?

[sof, 2014/09/08 21:17:46]

Perhaps the (static) method should be renamed as traceChildren()? This is
tracing the children of a WebFrame, allowing that tracing code to be shared
between local and remote "impl" objects.

+{
+#if ENABLE(OILPAN)
+    // Trace the children frames.
+    WebFrame* child = frame ? frame->firstChild() : 0;
+    while (child) {
+        if (child->isWebLocalFrame())
+            visitor->trace(toWebLocalFrameImpl(child));
+        else
+            visitor->trace(toWebRemoteFrameImpl(child));
+
+        child = child->nextSibling();
+    }
+#endif
+}
+
 } // namespace blink