Migrated several tests from blink to V8 repository.

test/webkit/dfg-check-structure-elimination-for-non-cell.js

Index: test/webkit/dfg-check-structure-elimination-for-non-cell.js
diff --git a/test/webkit/concat-while-having-a-bad-time.js b/test/webkit/dfg-check-structure-elimination-for-non-cell.js
similarity index 69%
copy from test/webkit/concat-while-having-a-bad-time.js
copy to test/webkit/dfg-check-structure-elimination-for-non-cell.js
index dfda1e08a0b36194b787a44ee12a9693acd8aeaf..264473c727d21de5bbf19e5b8ce7b34ca347c48f 100644
--- a/test/webkit/concat-while-having-a-bad-time.js
+++ b/test/webkit/dfg-check-structure-elimination-for-non-cell.js
@@ -22,10 +22,28 @@
 // SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 description(
-"Tests the behavior of Array.prototype.concat while the array is having a bad time due to one of the elements we are concatenating."
+"Tests that we do the right things when we prove that we can eliminate a structure check, but haven't proved that the value is definitely an object - i.e. we've proved that it's either an object with a specific structure, or it's not an object at all."
 );
 
-Object.defineProperty(Array.prototype, 0, { writable: false });
-shouldBe("[42].concat()", "[42]");
+function foo(o, p) {
+    var x = o.f;
+    if (p)
+        o = null;
+    return x + o.g();
+}
 
+function bar() {
+    return 24;
+}
 
+function baz(i) {
+    try {
+        return foo({f:42, g:bar}, i == 190);
+    } catch (e) {
+        debug("Caught exception: " + e);
+        return "ERROR";
+    }
+}
+
+for (var i = 0; i < 200; ++i)
+    shouldBe("baz(i)", i == 190 ? "\"ERROR\"" : "66");