[strong] Implement per-object restrictions behaviour for prototype setting

[strong] Implement per-object restrictions behaviour for prototype setting

Implements the strong mode proposal's restrictions on the ability of user code
to modify the prototype of strong objects.

Setting the strong bit is still wip, so this change will only affect those
objects that have the bit correctly set. The tests reflect this, and will be
expanded as more objects can be marked as strong.

BUG=v8:3956
LOG=N

Committed: https://crrev.com/629d2750732236b2ac128bd253b97928026d3435
Cr-Commit-Position: refs/heads/master@{#28664}

[conradw, 2015-05-15 14:18:55]

conradw@chromium.org changed reviewers:
+ rossberg@chromium.org

[conradw, 2015-05-15 14:18:56]

PTAL

[arv (Not doing code reviews), 2015-05-15 14:24:31]

arv@chromium.org changed reviewers:
+ arv@chromium.org

[arv (Not doing code reviews), 2015-05-15 14:24:31]

LGTM

[rossberg, 2015-05-18 13:47:52]

lgtm

[conradw, 2015-05-21 21:57:40]

Patchset #7 (id:120001) has been deleted

[conradw, 2015-05-21 22:49:48]

PTAL, updated

[rossberg, 2015-05-22 12:56:45]

lgtm

https://codereview.chromium.org/1143623002/diff/140001/src/messages.h
File src/messages.h (right):

https://codereview.chromium.org/1143623002/diff/140001/src/messages.h#newcode230
src/messages.h:230: T(StrongSetProto, "Cannot set internal prototype of strong
object %")        \
Nit: stylise error message

https://codereview.chromium.org/1143623002/diff/140001/test/mjsunit/strong/ob...
File test/mjsunit/strong/object-set-prototype.js (right):

https://codereview.chromium.org/1143623002/diff/140001/test/mjsunit/strong/ob...
test/mjsunit/strong/object-set-prototype.js:40: for (let o of nonStrongObjects)
{
nit: nonStrong -> weak

https://codereview.chromium.org/1143623002/diff/140001/test/mjsunit/strong/ob...
test/mjsunit/strong/object-set-prototype.js:54: let setProtoBuiltin =
function(o){Object.setPrototypeOf(o, {})};
Nit: move these out of the loops to share defs

[conradw, 2015-05-22 13:49:59]

https://codereview.chromium.org/1143623002/diff/140001/src/messages.h
File src/messages.h (right):

https://codereview.chromium.org/1143623002/diff/140001/src/messages.h#newcode230
src/messages.h:230: T(StrongSetProto, "Cannot set internal prototype of strong
object %")        \
On 2015/05/22 12:56:44, rossberg wrote:
> Nit: stylise error message

Done.

https://codereview.chromium.org/1143623002/diff/140001/test/mjsunit/strong/ob...
File test/mjsunit/strong/object-set-prototype.js (right):

https://codereview.chromium.org/1143623002/diff/140001/test/mjsunit/strong/ob...
test/mjsunit/strong/object-set-prototype.js:40: for (let o of nonStrongObjects)
{
On 2015/05/22 12:56:44, rossberg wrote:
> nit: nonStrong -> weak

Done.

https://codereview.chromium.org/1143623002/diff/140001/test/mjsunit/strong/ob...
test/mjsunit/strong/object-set-prototype.js:54: let setProtoBuiltin =
function(o){Object.setPrototypeOf(o, {})};
On 2015/05/22 12:56:44, rossberg wrote:
> Nit: move these out of the loops to share defs

I want to make sure the function was clear of type feedback etc for each object.
Probably paranoia but there's some lowering of builtins and other stuff that I
didn't want to trust.

[conradw, 2015-05-27 17:01:30]

The CQ bit was checked by conradw@chromium.org

[conradw, 2015-05-27 17:01:30]

The patchset sent to the CQ was uploaded after l-g-t-m from arv@chromium.org,
rossberg@chromium.org
Link to the patchset: https://codereview.chromium.org/1143623002/#ps180001
(title: "rebase")

[commit-bot: I haz the power, 2015-05-27 17:01:43]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1143623002/180001

[commit-bot: I haz the power, 2015-05-27 17:06:41]

Committed patchset #9 (id:180001)

[commit-bot: I haz the power, 2015-05-27 17:06:56]

Patchset 9 (id:??) landed as
https://crrev.com/629d2750732236b2ac128bd253b97928026d3435
Cr-Commit-Position: refs/heads/master@{#28664}