Move hash code from hidden string to a private symbol

test/mjsunit/global-hash.js

Index: test/mjsunit/global-hash.js
diff --git a/test/mjsunit/global-hash.js b/test/mjsunit/global-hash.js
new file mode 100644
index 0000000000000000000000000000000000000000..54dfc4c7796807d5633921faa3835040127551e2
--- /dev/null
+++ b/test/mjsunit/global-hash.js
@@ -0,0 +1,19 @@
+// Copyright 2015 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+var global = this;
+
+assertEquals("object", typeof global);  // Global object.
+
+var s = new Set();
+s.add(global); // Puts a hash code on the global object.
+assertTrue(s.has(global));
+for (var i = 0; i < 100; i++) {
+  // Force rehash. Global object is placed according to the hash code that it
+  // gets in the C++ runtime.
+  s.add(i);
+}
+
+// Hopefully still findable using the JS hash code.
+assertTrue(s.has(global));