Bailout for large object allocations in full code EmitFastOneByteArrayJoin.

test/mjsunit/regress/regress-542823.js

Index: test/mjsunit/regress/regress-542823.js
diff --git a/test/mjsunit/regress/regress-542823.js b/test/mjsunit/regress/regress-542823.js
new file mode 100644
index 0000000000000000000000000000000000000000..d9c23396d4ac2f7189af528276bd5736bfcdf736
--- /dev/null
+++ b/test/mjsunit/regress/regress-542823.js
@@ -0,0 +1,12 @@
+// Copyright 2015 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+__v_0 = 100000;
+__v_1 = new Array();
+for (var __v_2 = 0; __v_2 < __v_0; __v_2++) {
+  __v_1[__v_2] = 0.5;
+}
+for (var __v_2 = 0; __v_2 < 10; __v_2++) {
+  var __v_0 = __v_1 + 0.5;
+}