Merge bleeding edge up to 9192 into the GC branch.

test/mjsunit/bugs/618.js

 // Copyright 2010 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 14 matching lines @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 // Simple class using inline constructor.
 function C1() {
   this.x = 23;
 };
 var c1 = new C1();
 assertEquals(23, c1.x);
 assertEquals("undefined", typeof c1.y);
-  
+
 // Add setter somewhere on the prototype chain after having constructed the
 // first instance.
 C1.prototype = { set x(value) { this.y = 23; } };
 var c1 = new C1();
 assertEquals("undefined", typeof c1.x);
 assertEquals(23, c1.y);
-  
+
 // Simple class using inline constructor.
 function C2() {
   this.x = 23;
 };
 var c2 = new C2();
 assertEquals(23, c2.x);
 assertEquals("undefined", typeof c2.y);
 
 // Add setter somewhere on the prototype chain after having constructed the
 // first instance.
@@ skipping 24 matching lines @@
 var c4 = new C4();
 assertEquals(23, c4.x);
 assertEquals("undefined", typeof c4.y);
 
 // Add setter somewhere on the prototype chain after having constructed the
 // first instance.
 C4.prototype.__proto__.__defineSetter__('x', function(value) { this.y = 23; });
 var c4 = new C4();
 assertEquals("undefined", typeof c4.x);
 assertEquals(23, c4.y);