Revert 3.20 branch to 3.20.17.7

Revert 3.20 branch to 3.20.17.7

Committed: http://code.google.com/p/v8/source/detail?r=16950

[Hannes Payer (out of office), 2013-09-25 19:35:51]

LGTM

[Jakob Kummerow, 2013-09-25 19:38:48]

Committed patchset #1 manually as r16950 (presubmit successful).

[tjfontaine, 2013-09-25 20:20:52]

On 2013/09/25 19:38:48, Jakob wrote:
> Committed patchset #1 manually as r16950 (presubmit successful).

FWIW I only needed to revert "Merged r16346, r16357, r16381 into 3.20 branch" to
be stable in node, it would be excellent if we could get "Merged r16566, r16471"
back in the 3.20 branch

[Jakob Kummerow, 2013-09-25 20:26:39]

We want to get all the reverted patches back into the branch, as soon as we
figure out what caused the crashes we were seeing in Chrome.

Do you happen to have a repro case for the issues you were seeing?

[tjfontaine, 2013-09-25 20:32:55]

On 2013/09/25 20:26:39, Jakob wrote:
> We want to get all the reverted patches back into the branch, as soon as we
> figure out what caused the crashes we were seeing in Chrome.
> 
> Do you happen to have a repro case for the issues you were seeing?

https://github.com/joyent/node/issues/6214#issuecomment-24464837 is the test
case we hit it with on node on osx, but it's not particularly standalone for
something like d8. More or less lots of fast GC pressure being created in an
array -- I will try and slim it down further for you.

I have so far only been able to reliably hit this on OSX, not on sunos/smartos