Migrated several tests from blink to V8 repository.

test/webkit/dfg-proven-sqrt-backwards-propagation.js

Index: test/webkit/dfg-proven-sqrt-backwards-propagation.js
diff --git a/test/webkit/concat-while-having-a-bad-time.js b/test/webkit/dfg-proven-sqrt-backwards-propagation.js
similarity index 72%
copy from test/webkit/concat-while-having-a-bad-time.js
copy to test/webkit/dfg-proven-sqrt-backwards-propagation.js
index dfda1e08a0b36194b787a44ee12a9693acd8aeaf..5bc66d945d080a4cf5be9358d58836eed52ccc4e 100644
--- a/test/webkit/concat-while-having-a-bad-time.js
+++ b/test/webkit/dfg-proven-sqrt-backwards-propagation.js
@@ -22,10 +22,29 @@
 // SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 description(
-"Tests the behavior of Array.prototype.concat while the array is having a bad time due to one of the elements we are concatenating."
+"Tests that the DFG knows that a Math.sqrt could potentially use value in arbitrary ways, and not just in a context that converts values to numbers."
 );
 
-Object.defineProperty(Array.prototype, 0, { writable: false });
-shouldBe("[42].concat()", "[42]");
+function foo(array, i) {
+    var x = array[i];
+    return Math.sqrt(x);
+}
 
+function bar(value) {
+    return value;
+}
+
+for (var i = 0; i < 200; ++i) {
+    if (i == 190)
+        Math.sqrt = bar;
+    var array, expected;
+    if (i >= 190) {
+        array = [, 1.5];
+        expected = "void 0";
+    } else {
+        array = [1.5];
+        expected = "Math.sqrt(1.5)";
+    }
+    shouldBe("foo(array, 0)", expected);
+}