Fix bug 813, harmless assert triggered by ARM inside o3d.

src/arm/virtual-frame-arm.h

 // Copyright 2009 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 483 matching lines @@
   inline void LowerHeight(int count) {
     element_count_ -= count;
     if (count >= kTOSKnownSmiMapSize) {
       tos_known_smi_map_ = 0;
     } else {
       tos_known_smi_map_ >>= count;
     }
   }
 
   inline void RaiseHeight(int count, unsigned known_smi_map = 0) {
-    ASSERT(known_smi_map < (1u << count));
+    ASSERT(count >= 32 || known_smi_map < (1u << count));
     element_count_ += count;
     if (count >= kTOSKnownSmiMapSize) {
       tos_known_smi_map_ = known_smi_map;
     } else {
       tos_known_smi_map_ = ((tos_known_smi_map_ << count) | known_smi_map);
     }
   }
 
   friend class JumpTarget;
 };
 
 
 } }  // namespace v8::internal
 
 #endif  // V8_ARM_VIRTUAL_FRAME_ARM_H_