JS wrappers for all DOM nodes from the same detached DOM tree should get into single "Detached DOM Tree" entry in the JS heap snapshot. We need a layout test for this to avoid problems like https://bugs.webkit.org/show_bug.cgi?id=107819
Created attachment 185254 [details] Patch
(In reply to comment #1) > Created an attachment (id=185254) [details] > Patch This patch depends on V8 change https://code.google.com/p/v8/source/detail?r=13486 which is not rolled yet.
Comment on attachment 185254 [details] Patch Attachment 185254 [details] did not pass chromium-ews (chromium-xvfb): Output: http://queues.webkit.org/results/16198210 New failing tests: inspector-protocol/heap-snapshot-with-detached-dom-tree.html
Created attachment 185258 [details] Patch
Comment on attachment 185258 [details] Patch I'm excited to have this test, but I'm not familiar enough with the testing harness to review it.
Comment on attachment 185258 [details] Patch looks good. I'd also check that the detached dom tree has expected number of wrappers inside and there is no second detached dom tree.
Created attachment 185474 [details] Patch
(In reply to comment #6) > (From update of attachment 185258 [details]) > looks good. I'd also check that the detached dom tree has expected number of wrappers inside and there is no second detached dom tree. Done.
Created attachment 185485 [details] Patch
Comment on attachment 185485 [details] Patch lgtm
Comment on attachment 185485 [details] Patch Attachment 185485 [details] did not pass chromium-ews (chromium-xvfb): Output: http://queues.webkit.org/results/16218563 New failing tests: inspector-protocol/heap-profiler/heap-snapshot-with-detached-dom-tree.html
Committed r141393: <http://trac.webkit.org/changeset/141393>