[Interpreter] Fix getIgnitionDispatchCounters crash with modified Object prototype.

[Interpreter] Fix getIgnitionDispatchCounters crash with modified Object prototype.

Changes to the Object prototype may cause getIgnitionDispatchCounters()
to fail when building the counters table object. Using DefineOwnProperty
instead of Set solves the issue by ignoring the prototype chain.

BUG=chromium:613567
LOG=N

Committed: https://crrev.com/26569a47d156cc24b39083ce924daa4674c12042
Cr-Commit-Position: refs/heads/master@{#36447}

[Stefano Sanfilippo, 2016-05-23 15:51:50]

ssanfilippo@chromium.org changed reviewers:
+ mstarzinger@chromium.org

[Stefano Sanfilippo, 2016-05-23 15:51:51]

This fixes Chromium issue 613567. An unhandled exception is still reported by
d8, but it should be fine. PTAL.

[Stefano Sanfilippo, 2016-05-23 15:52:01]

The CQ bit was checked by ssanfilippo@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-05-23 15:52:04]

Dry run: CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/2000203002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/2000203002/1

[Stefano Sanfilippo, 2016-05-23 15:53:03]

Description was changed from

==========
[Interpreter] Fix getIgnitionDispatchCounters crash with modified Object
prototype.

Changes to the Object prototype may cause getIgnitionDispatchCounters()
to fail when building the counters table object. Using DefineOwnProperty
instead of Set solves the issue by ignoring the prototype chain.

BUG=https://bugs.chromium.org/p/chromium/issues/detail?id=613567
LOG=N
==========

to

==========
[Interpreter] Fix getIgnitionDispatchCounters crash with modified Object
prototype.

Changes to the Object prototype may cause getIgnitionDispatchCounters()
to fail when building the counters table object. Using DefineOwnProperty
instead of Set solves the issue by ignoring the prototype chain.

BUG=chromium:613567
LOG=N
==========

[Michael Starzinger, 2016-05-23 16:08:25]

LGTM.

[rmcilroy, 2016-05-23 16:12:58]

LGTM, thanks.

[commit-bot: I haz the power, 2016-05-23 16:26:20]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-05-23 16:26:21]

Dry run: This issue passed the CQ dry run.

[Stefano Sanfilippo, 2016-05-23 16:38:15]

The CQ bit was checked by ssanfilippo@chromium.org

[commit-bot: I haz the power, 2016-05-23 16:38:20]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/2000203002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/2000203002/1

[commit-bot: I haz the power, 2016-05-23 16:40:06]

Description was changed from

==========
[Interpreter] Fix getIgnitionDispatchCounters crash with modified Object
prototype.

Changes to the Object prototype may cause getIgnitionDispatchCounters()
to fail when building the counters table object. Using DefineOwnProperty
instead of Set solves the issue by ignoring the prototype chain.

BUG=chromium:613567
LOG=N
==========

to

==========
[Interpreter] Fix getIgnitionDispatchCounters crash with modified Object
prototype.

Changes to the Object prototype may cause getIgnitionDispatchCounters()
to fail when building the counters table object. Using DefineOwnProperty
instead of Set solves the issue by ignoring the prototype chain.

BUG=chromium:613567
LOG=N
==========

[commit-bot: I haz the power, 2016-05-23 16:40:07]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-05-23 16:41:36]

Description was changed from

==========
[Interpreter] Fix getIgnitionDispatchCounters crash with modified Object
prototype.

Changes to the Object prototype may cause getIgnitionDispatchCounters()
to fail when building the counters table object. Using DefineOwnProperty
instead of Set solves the issue by ignoring the prototype chain.

BUG=chromium:613567
LOG=N
==========

to

==========
[Interpreter] Fix getIgnitionDispatchCounters crash with modified Object
prototype.

Changes to the Object prototype may cause getIgnitionDispatchCounters()
to fail when building the counters table object. Using DefineOwnProperty
instead of Set solves the issue by ignoring the prototype chain.

BUG=chromium:613567
LOG=N

Committed: https://crrev.com/26569a47d156cc24b39083ce924daa4674c12042
Cr-Commit-Position: refs/heads/master@{#36447}
==========

[commit-bot: I haz the power, 2016-05-23 16:41:37]

Patchset 1 (id:??) landed as
https://crrev.com/26569a47d156cc24b39083ce924daa4674c12042
Cr-Commit-Position: refs/heads/master@{#36447}