[regexp][liveedit] Fix inconsistent JSArrays

[regexp][liveedit] Fix inconsistent JSArrays

The hand-written KeyedLoadIC_Megamorphic stub didn't care about JSArray
lengths, which made it lenient towards said lengths being wrong, but it
will soon fix that bug and thereby become more strict.

LiveEdit: factory->NewJSArray(capacity) doesn't set a length, so set it
manually.
RegExp: to avoid having to take care of array length updating in the
RegExpExecStub, just use a JSObject instead.

Committed: https://crrev.com/bb9707c8d2f7b930ecd83d1fb7f7c3c59beaa29e
Cr-Commit-Position: refs/heads/master@{#38624}

[Jakob Kummerow, 2016-08-12 14:01:03]

jkummerow@chromium.org changed reviewers:
+ yangguo@chromium.org

[Jakob Kummerow, 2016-08-12 14:01:04]

As discussed, PTAL.

[Yang, 2016-08-12 14:06:37]

lgtm

[Jakob Kummerow, 2016-08-12 14:07:46]

The CQ bit was checked by jkummerow@chromium.org

[commit-bot: I haz the power, 2016-08-12 14:07:52]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-08-12 14:29:55]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-08-12 14:30:06]

Description was changed from

==========
[regexp][liveedit] Fix inconsistent JSArrays

The hand-written KeyedLoadIC_Megamorphic stub didn't care about JSArray
lengths, which made it lenient towards said lengths being wrong, but it
will soon fix that bug and thereby become more strict.

LiveEdit: factory->NewJSArray(capacity) doesn't set a length, so set it
manually.
RegExp: to avoid having to take care of array length updating in the
RegExpExecStub, just use a JSObject instead.
==========

to

==========
[regexp][liveedit] Fix inconsistent JSArrays

The hand-written KeyedLoadIC_Megamorphic stub didn't care about JSArray
lengths, which made it lenient towards said lengths being wrong, but it
will soon fix that bug and thereby become more strict.

LiveEdit: factory->NewJSArray(capacity) doesn't set a length, so set it
manually.
RegExp: to avoid having to take care of array length updating in the
RegExpExecStub, just use a JSObject instead.

Committed: https://crrev.com/bb9707c8d2f7b930ecd83d1fb7f7c3c59beaa29e
Cr-Commit-Position: refs/heads/master@{#38624}
==========

[commit-bot: I haz the power, 2016-08-12 14:30:07]

Patchset 1 (id:??) landed as
https://crrev.com/bb9707c8d2f7b930ecd83d1fb7f7c3c59beaa29e
Cr-Commit-Position: refs/heads/master@{#38624}