Fix mjsunit/compiler/concurrent-invalidate-transition-map.js test.

test/mjsunit/compiler/concurrent-invalidate-transition-map.js

 // Copyright 2013 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 25 matching lines @@
 function new_object() {
   var o = {};
   o.a = 1;
   o.b = 2;
   return o;
 }
 
 function add_field(obj) {
   obj.c = 3;
 }
-
-add_field(new_object());
-add_field(new_object());
+var obj = new_object();
+add_field(obj);

[ulan, 2014/02/25 17:44:29]

If GC happens between the calls and there is no live instance of new_object then
then transition in add_field will be collected, so on the next call to add_field
the obj.c IC will not turn MONOMORPHIC.

+add_field(obj);
 %OptimizeFunctionOnNextCall(add_field, "concurrent");
 
 var o = new_object();
 // Kick off recompilation.
 add_field(o);
 // Invalidate transition map after compile graph has been created.
 o.c = 2.2;
 // In the mean time, concurrent recompiling is still blocked.
 assertUnoptimized(add_field, "no sync");
 // Let concurrent recompilation proceed.
 %UnblockConcurrentRecompilation();
 // Sync with background thread to conclude optimization that bailed out.
 assertUnoptimized(add_field, "sync");
 // Clear type info for stress runs.
 %ClearFunctionTypeFeedback(add_field);