[deoptimizer] Materialize JSFunction objects without context.

test/mjsunit/compiler/escape-analysis-materialize.js

Index: test/mjsunit/compiler/escape-analysis-materialize.js
diff --git a/test/mjsunit/compiler/escape-analysis-materialize.js b/test/mjsunit/compiler/escape-analysis-materialize.js
new file mode 100644
index 0000000000000000000000000000000000000000..e72797d8238ceb091c79457f73c9cbd4aff66255
--- /dev/null
+++ b/test/mjsunit/compiler/escape-analysis-materialize.js
@@ -0,0 +1,29 @@
+// Copyright 2016 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --allow-natives-syntax --turbo --turbo-escape
+
+(function TestMaterializeArray() {
+  function f() {
+    var a = [1,2,3];
+    %_DeoptimizeNow();
+    return a.length;
+  }
+  assertEquals(3, f());
+  assertEquals(3, f());
+  %OptimizeFunctionOnNextCall(f);
+  assertEquals(3, f());
+})();
+
+(function TestMaterializeFunction() {
+  function g() {
+    function fun(a, b) {}
+    %_DeoptimizeNow();
+    return fun.length;
+  }
+  assertEquals(2, g());
+  assertEquals(2, g());
+  %OptimizeFunctionOnNextCall(g);
+  assertEquals(2, g());
+})();