Delegate throwing in RegExpExecStub to CEntryStub.

test/mjsunit/regress/regress-crbug-467047.js

Index: test/mjsunit/regress/regress-crbug-467047.js
diff --git a/test/mjsunit/regress/regress-crbug-467047.js b/test/mjsunit/regress/regress-crbug-467047.js
new file mode 100644
index 0000000000000000000000000000000000000000..373e984a2c9913810e2de99de3394f8ddf22d387
--- /dev/null
+++ b/test/mjsunit/regress/regress-crbug-467047.js
@@ -0,0 +1,17 @@
+// Copyright 2015 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --stack-size=100
+
+function captureMatch(re) {
+  var local_variable = 0;
+  "abcd".replace(re, function() { });
+  assertEquals("abcd", RegExp.input);
+  assertEquals("a", RegExp.leftContext);
+  assertEquals("bc", RegExp.lastMatch);
+  assertEquals("d", RegExp.rightContext);
+  assertEquals("foo", captureMatch(/^bar/));
+}
+
+assertThrows(function() { captureMatch(/(bc)/) }, RangeError);