Merge r3285, r3313, and r3318 to branches/1.3.

src/runtime.cc

Index: src/runtime.cc
===================================================================
--- src/runtime.cc	(revision 3320)
+++ src/runtime.cc	(working copy)
@@ -4336,8 +4336,6 @@
 
   Object* result = Heap::AllocateArgumentsObject(callee, length);
   if (result->IsFailure()) return result;
-  ASSERT(Heap::InNewSpace(result));
-
   // Allocate the elements if needed.
   if (length > 0) {
     // Allocate the fixed array.
@@ -4350,8 +4348,7 @@
     for (int i = 0; i < length; i++) {
       array->set(i, *--parameters, mode);
     }
-    JSObject::cast(result)->set_elements(FixedArray::cast(obj),
-                                         SKIP_WRITE_BARRIER);
+    JSObject::cast(result)->set_elements(FixedArray::cast(obj));
   }
   return result;
 }