Reland^2 "Filter invalid slots out from the SlotsBuffer after marking."

Reland^2 "Filter invalid slots out from the SlotsBuffer after marking."

And reland "Use a slot that is located on a heap page when removing
invalid entries from the SlotsBuffer."

This reverts commits de018fbda32e8ac57d8440e8fe6c3d3386bb9b11 and
d23a9f7a3e509bd405e1e4b0b851e463a4a736c2.

Reason for relanding: looking fine on Canary, let's get these fixes back in.

BUG=chromium:454297,chromium:470801
LOG=y
TBR=ishell@chromium.org

Review URL: https://codereview.chromium.org/1043703003

Cr-Commit-Position: refs/heads/master@{#27507}