Merged r12504, r12531, r12562, r12563, r12655 into 3.13 branch.

test/mjsunit/regress/regress-crbug-150729.js

Index: test/mjsunit/regress/regress-crbug-150729.js
diff --git a/test/mjsunit/regress/regress-1898.js b/test/mjsunit/regress/regress-crbug-150729.js
similarity index 89%
copy from test/mjsunit/regress/regress-1898.js
copy to test/mjsunit/regress/regress-crbug-150729.js
index 5440446fbf78ca593e8748cd54ea2aefad047542..15aa587d184a1fdc67f0c47bae4137beffb266f2 100644
--- a/test/mjsunit/regress/regress-1898.js
+++ b/test/mjsunit/regress/regress-crbug-150729.js
@@ -27,11 +27,13 @@
 
 // Flags: --allow-natives-syntax
 
-function f(x) {
-  Math.log(Math.min(0.1, Math.abs(x)));
+var t = 0;
+function burn() {
+  i = [t, 1];
+  var M = [i[0], Math.cos(t) + i[7074959]];
+  t += .05;
+}
+for (var j = 0; j < 5; j++) {
+  if (j == 2) %OptimizeFunctionOnNextCall(burn);
+  burn();
 }
-
-f(0.1);
-f(0.1);
-%OptimizeFunctionOnNextCall(f);
-f(0.1);