Migrated several tests from blink to V8 repository.

test/webkit/dfg-value-to-int32-with-side-effect.js

Index: test/webkit/dfg-value-to-int32-with-side-effect.js
diff --git a/test/webkit/concat-while-having-a-bad-time.js b/test/webkit/dfg-value-to-int32-with-side-effect.js
similarity index 78%
copy from test/webkit/concat-while-having-a-bad-time.js
copy to test/webkit/dfg-value-to-int32-with-side-effect.js
index dfda1e08a0b36194b787a44ee12a9693acd8aeaf..d001bab19b56a1b9d0e06d06d4239bf1dcf23050 100644
--- a/test/webkit/concat-while-having-a-bad-time.js
+++ b/test/webkit/dfg-value-to-int32-with-side-effect.js
@@ -22,10 +22,19 @@
 // SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 description(
-"Tests the behavior of Array.prototype.concat while the array is having a bad time due to one of the elements we are concatenating."
+"Tests that a side-effecting ValueToInt32 only executes once when there is an OSR exit."
 );
 
-Object.defineProperty(Array.prototype, 0, { writable: false });
-shouldBe("[42].concat()", "[42]");
+function foo(a, b) {
+    var result = a | b.f;
+    return [result, a];
+}
 
+var counter = 0;
+for (var i = 0; i < 100; ++i) {
+    var result = foo({valueOf:function() { counter++; return 1; }}, {f:i == 99 ? 5.5 : 5});
+    shouldBe("result.length", "2");
+    shouldBe("result[0]", "5");
+}
 
+shouldBe("counter", "100");