Use a separate marker value to allocate the arguments object on deoptimzation...

src/objects-debug.cc

Index: src/objects-debug.cc
===================================================================
--- src/objects-debug.cc	(revision 6199)
+++ src/objects-debug.cc	(working copy)
@@ -369,7 +369,7 @@
     ASSERT(number->IsSmi());
     int value = Smi::cast(number)->value();
     ASSERT(value == 0 || value == 1 || value == -1 ||

[Kevin Millikin (Chromium), 2011/01/06 14:00:47]

This seems a bit silly, but I guess it could catch a corrupted oddball?  Maybe
add a comment that we use distinct negative integers for ToNumber on 'hidden'
oddballs, and then rewrite the assert as:
const int kLeastHiddenOddballNumber = -4;
ASSERT(value <= 1);
ASSERT(value >= kLeastHiddenOddballNumber);

[fschneider, 2011/01/06 16:22:49]

Done.

-           value == -2 || value == -3);
+           value == -2 || value == -3 || value == -4);
   }
 }