JSON serializer should fail gracefully for special value wrappers.

test/mjsunit/regress/regress-crbug-471702.js

Index: test/mjsunit/regress/regress-crbug-471702.js
diff --git a/test/mjsunit/regress/regress-450895.js b/test/mjsunit/regress/regress-crbug-471702.js
similarity index 73%
copy from test/mjsunit/regress/regress-450895.js
copy to test/mjsunit/regress/regress-crbug-471702.js
index 48aa00d956c6f84fdcfe2e02cfc286c0f07180ba..dcd9f9bfe4faf0db0b66f9a84d36cbbaa172199c 100644
--- a/test/mjsunit/regress/regress-450895.js
+++ b/test/mjsunit/regress/regress-crbug-471702.js
@@ -4,6 +4,4 @@
 
 // Flags: --allow-natives-syntax
 
-var v = new Array();
-Object.freeze(v);
-v = v.concat(0.5);
+assertThrows(function() { JSON.stringify(%DebugGetLoadedScripts()); });