Merged r14481 into 3.17 branch.

test/mjsunit/regress/regress-235311.js

Index: test/mjsunit/regress/regress-235311.js
diff --git a/test/mjsunit/regress/regress-crbug-172345.js b/test/mjsunit/regress/regress-235311.js
similarity index 91%
copy from test/mjsunit/regress/regress-crbug-172345.js
copy to test/mjsunit/regress/regress-235311.js
index 711501caa791f2974635ac4dd894568a2e3fc982..300714718f75e3ab084687af21aa1bf145e16678 100644
--- a/test/mjsunit/regress/regress-crbug-172345.js
+++ b/test/mjsunit/regress/regress-235311.js
@@ -25,10 +25,8 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-function f(a,i) {
-  return a[i];
+var new_space_string = "";
+for (var i = 0; i < 12800; ++i) {
+  new_space_string +=
+      String.fromCharCode(Math.random() * 26 + (4294967295) | 0);
 }
-
-f([1,2,3], "length");
-f([1,2,3], "length");
-f([1,2,3], 2);