Merged r19804, r19890, r19894, r19935 into 3.24 branch.

test/mjsunit/regress/regress-migrate-callbacks.js

Index: test/mjsunit/regress/regress-migrate-callbacks.js
diff --git a/test/mjsunit/regress/regress-347904.js b/test/mjsunit/regress/regress-migrate-callbacks.js
similarity index 54%
copy from test/mjsunit/regress/regress-347904.js
copy to test/mjsunit/regress/regress-migrate-callbacks.js
index 1a27b054a4b89b8e8841c9311f1c155aea7ce4d7..b1979ea44207884d2554614c40e8cf67c753a4e8 100644
--- a/test/mjsunit/regress/regress-347904.js
+++ b/test/mjsunit/regress/regress-migrate-callbacks.js
@@ -2,11 +2,10 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-// Flags: --allow-natives-syntax --stress-runs=2
-
-var v = /abc/;
-function f() {
-  v = 1578221999;
-};
-%OptimizeFunctionOnNextCall(f);
-f();
+var o1 = {};
+o1.x = 1
+o1.y = 1.5
+var o2 = {}
+o2.x = 1.5;
+o2.__defineSetter__('y', function(v) { });
+o1.y;