Test for wrong arguments object materialization.

Test for wrong arguments object materialization.

The test demonstrates a bad interaction between arguments object
materialization, escape analysis and exception handling.

We can return a wrong arguments object if we materialize arguments
object (using f.arguments) and then throw around f's frame so that f
does not clean up the materialized frame information (see the
MaterializedObjectStore in deoptimizer.h/.cc). If we enter another
function that has the same frame pointer and request an arguments object
of (or lazily deoptimize) that function, we can get the materialized
object of the original function.

We should clean up the materialized object store when we unwind the
stack.

BUG=v8:3985
LOG=n

Committed: https://crrev.com/0f94c96cbcdc8147ee2951ad162184fe44bffd4e
Cr-Commit-Position: refs/heads/master@{#27406}

[Jarin, 2015-03-24 12:54:41]

jarin@chromium.org changed reviewers:
+ mstarzinger@chromium.org

[Jarin, 2015-03-24 12:56:19]

Could you take a look, please?

[Michael Starzinger, 2015-03-24 13:00:26]

LGTM.

[Jarin, 2015-03-24 13:01:20]

The CQ bit was checked by jarin@chromium.org

[commit-bot: I haz the power, 2015-03-24 13:01:31]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1032623003/1

[commit-bot: I haz the power, 2015-03-24 13:20:16]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2015-03-24 13:20:28]

Patchset 1 (id:??) landed as
https://crrev.com/0f94c96cbcdc8147ee2951ad162184fe44bffd4e
Cr-Commit-Position: refs/heads/master@{#27406}