Allow in-object properties in JSFunctions.

Allow in-object properties in JSFunctions.

This CL also fixes HeapObject::IterateFast() and HeapObject::IterateBodyFast().

BUG=v8:4531
LOG=Y

Committed: https://crrev.com/4dcba71de7308a7bf2dbd0bf27389bcf6e025b9b
Cr-Commit-Position: refs/heads/master@{#32195}

[Igor Sheludko, 2015-11-23 13:49:37]

ishell@chromium.org changed reviewers:
+ hpayer@chromium.org

[Igor Sheludko, 2015-11-23 13:49:38]

PTAL

[Igor Sheludko, 2015-11-23 13:49:42]

The CQ bit was checked by ishell@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2015-11-23 13:49:48]

Dry run: CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1469883002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1469883002/1

[commit-bot: I haz the power, 2015-11-23 14:12:29]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2015-11-23 14:12:30]

Dry run: This issue passed the CQ dry run.

[Hannes Payer (out of office), 2015-11-24 08:48:16]

lgtm

[Igor Sheludko, 2015-11-24 08:53:49]

The CQ bit was checked by ishell@chromium.org

[commit-bot: I haz the power, 2015-11-24 08:53:59]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1469883002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1469883002/1

[commit-bot: I haz the power, 2015-11-24 08:55:13]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2015-11-24 08:55:30]

Patchset 1 (id:??) landed as
https://crrev.com/4dcba71de7308a7bf2dbd0bf27389bcf6e025b9b
Cr-Commit-Position: refs/heads/master@{#32195}