Merged r20087, r20137, r20155, r20158, r20197 into 3.24 branch.

test/mjsunit/regress/regress-354357.js

Index: test/mjsunit/regress/regress-354357.js
diff --git a/test/mjsunit/regress/regress-convert-function-to-double.js b/test/mjsunit/regress/regress-354357.js
similarity index 92%
copy from test/mjsunit/regress/regress-convert-function-to-double.js
copy to test/mjsunit/regress/regress-354357.js
index fca44f96324383a43daf393174f845d14f94bd9e..84b7ebd620b7448f8a68e044d5a4b93f62d4d825 100644
--- a/test/mjsunit/regress/regress-convert-function-to-double.js
+++ b/test/mjsunit/regress/regress-354357.js
@@ -25,12 +25,14 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-function f(v) {
-  this.func = v;
+// Flags: --always-opt
+
+var v = {};
+function inlined() {
+  return !(v.bar++);
 }
+function outer() {
+  inlined();
+};
 
-var o1 = new f(f);
-var d = 1.4;
-var o2 = new f(d);
-o2.func = 1.8;
-assertEquals(1.4, d)
+outer();