Migrated several tests from blink to V8 repository.

test/webkit/dfg-create-inlined-arguments-in-closure-inline.js

Index: test/webkit/dfg-create-inlined-arguments-in-closure-inline.js
diff --git a/test/webkit/concat-while-having-a-bad-time.js b/test/webkit/dfg-create-inlined-arguments-in-closure-inline.js
similarity index 73%
copy from test/webkit/concat-while-having-a-bad-time.js
copy to test/webkit/dfg-create-inlined-arguments-in-closure-inline.js
index dfda1e08a0b36194b787a44ee12a9693acd8aeaf..371638c8fd0dfb89f208096b80a7229f92e579a8 100644
--- a/test/webkit/concat-while-having-a-bad-time.js
+++ b/test/webkit/dfg-create-inlined-arguments-in-closure-inline.js
@@ -22,10 +22,22 @@
 // SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 description(
-"Tests the behavior of Array.prototype.concat while the array is having a bad time due to one of the elements we are concatenating."
+"Tests that if the DFG tries to create inlined arguments from within a inlined call frame corresponding to a closure call, then we don't crash."
 );
 
-Object.defineProperty(Array.prototype, 0, { writable: false });
-shouldBe("[42].concat()", "[42]");
-
+function foo(x, f) {
+    return f(x, 5)[0];
+}
 
+for (var i = 0; i < 200; ++i) {
+    var value = foo(i < 190 ? i : 0.5, function() {
+        var result = 0;
+        for (var j = 0; j < arguments.length; ++j)
+            result += arguments[j];
+        return [result, arguments];
+    });
+    if (i < 190)
+        shouldBe("value", "" + (i + 5));
+    else
+        shouldBe("value", "5.5");
+}