Fix typo in MathRandomRaw.

src/js/math.js

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 (function(global, utils) {
 "use strict";
 
 %CheckIsBootstrapping();
 
 // -------------------------------------------------------------------
@@ skipping 130 matching lines @@
   rngstate.b = r0 >>> 16;
   rngstate.c = r1 & 0xFFFF;
   rngstate.d = r1 >>> 16;
   var r = r0 ^ r1;
   // Construct a double number 1.<32-bits of randomness> and subtract 1.
   return %_ConstructDouble(0x3FF00000 | (r & 0x000FFFFF), r & 0xFFF00000) - 1;
 }
 
 function MathRandomRaw() {
   var r0 = (MathImul(18030, rngstate.a) + rngstate.b) | 0;
-  var r1 = (MathImul(36969, rngstate.d) + rngstate.c) | 0;
+  var r1 = (MathImul(36969, rngstate.c) + rngstate.d) | 0;
   rngstate.a = r0 & 0xFFFF;
   rngstate.b = r0 >>> 16;
   rngstate.c = r1 & 0xFFFF;
   rngstate.d = r1 >>> 16;
   var r = r0 ^ r1;
   return r & 0x3FFFFFFF;
 }
 
 // ECMA 262 - 15.8.2.15
 function MathRound(x) {
@@ skipping 191 matching lines @@
 utils.Export(function(to) {
   to.MathAbs = MathAbs;
   to.MathExp = MathExp;
   to.MathFloor = MathFloorJS;
   to.IntRandom = MathRandomRaw;
   to.MathMax = MathMax;
   to.MathMin = MathMin;
 });
 
 })