Reland "Fix stack trace accessor behavior."

test/mjsunit/stack-traces-overflow.js

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 43 matching lines @@
 } catch (e) {
   assertTrue(e.stack.indexOf("rec1") > 0);
   assertInstanceof(e, RangeError);
 }
 
 
 // Check setting/getting stack property on the prototype chain.
 function testErrorPrototype(prototype) {
   var object = {};
   object.__proto__ = prototype;
-  object.stack = "123";
-  assertEquals("123", object.stack);
+  object.stack = "123";  // Overwriting stack property fails.
+  assertEquals(prototype.stack, object.stack);
   assertTrue("123" != prototype.stack);
 }
 
 try {
   rec1(0);
 } catch (e) {
   e.stack;
   testErrorPrototype(e);
 }
 
@@ skipping 43 matching lines @@
   rec1(0);
 } catch (e) {
   assertTrue(e.stack.split('\n').length > 100);
 }
 
 Error.stackTraceLimit = "not a number";
 try {
   rec1(0);
 } catch (e) {
   assertEquals(undefined, e.stack);
+  e.stack = "abc";
+  assertEquals("abc", e.stack);
 }
 
 Error.stackTraceLimit = 3;
 Error = "";  // Overwrite Error in the global object.
 try {
   rec1(0);
 } catch (e) {
   assertEquals(4, e.stack.split('\n').length);
 }