[heap] Filter out stale left-trimmed handles for scavenges

test/mjsunit/regress/regress-621869.js

Index: test/mjsunit/regress/regress-621869.js
diff --git a/test/mjsunit/regress/regress-621869.js b/test/mjsunit/regress/regress-621869.js
deleted file mode 100644
index db34064457cc30a4ef4ee84e07988bef30380b28..0000000000000000000000000000000000000000
--- a/test/mjsunit/regress/regress-621869.js
+++ /dev/null
@@ -1,18 +0,0 @@
-// Copyright 2016 the V8 project authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-// Flags: --expose-gc
-
-var o0 = [];
-var o1 = [];
-var cnt = 0;
-var only_scavenge = true;
-o1.__defineGetter__(0, function() {
-  if (cnt++ > 2) return;
-  o0.shift();
-  gc(only_scavenge);
-  o0.push((64));
-  o0.concat(o1);
-});
-o1[0];