Merged r12485, r12486, r12491, r12494, r12495 into trunk branch.

test/mjsunit/regress/regress-crbug-148376.js

Index: test/mjsunit/regress/regress-crbug-148376.js
diff --git a/test/mjsunit/regress/regress-2119.js b/test/mjsunit/regress/regress-crbug-148376.js
similarity index 90%
copy from test/mjsunit/regress/regress-2119.js
copy to test/mjsunit/regress/regress-crbug-148376.js
index 54840c238b977590ba3c850c6fa9d5f1a3c5fe34..55bb5f16fa79870973e4c347420210460672767d 100644
--- a/test/mjsunit/regress/regress-2119.js
+++ b/test/mjsunit/regress/regress-crbug-148376.js
@@ -25,12 +25,11 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-// Flags: --nouse-ic
-
-function strict_function() {
-  "use strict"
-  undeclared = 1;
+function defineSetter(o) {
+  o.__defineSetter__('property', function() {});
 }
 
-assertThrows(strict_function);
-
+defineSetter(Object.prototype);
+property = 0;
+defineSetter(this);
+var keys = Object.keys(this);