Merge bleeding edge up to 9192 into the GC branch.

test/mjsunit/regress/regress-95113.js

Index: test/mjsunit/regress/regress-95113.js
diff --git a/test/mjsunit/regress/regress-1110.js b/test/mjsunit/regress/regress-95113.js
similarity index 79%
copy from test/mjsunit/regress/regress-1110.js
copy to test/mjsunit/regress/regress-95113.js
index 204a87ba3d16743a945fb2fb5817538fd43e7315..f01b27004cffa4b54261bea10380104961739a24 100644
--- a/test/mjsunit/regress/regress-1110.js
+++ b/test/mjsunit/regress/regress-95113.js
@@ -25,14 +25,24 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-// Test that the illegal continue is thrown at parse time.
+// Flags: --allow-natives-syntax
 
-try {
-  function Crash() { continue;if (Crash) {
-    } } 
-  Crash();
-  assertTrue(false);
-} catch (e) {
-  assertTrue(e instanceof SyntaxError);
-  assertTrue(/continue/.test(e.message));
+function get_double_array() {
+  var a = new Array(100000);
+  var i = 0;
+  while (!%HasFastDoubleElements(a)) {
+    a[i] = i;
+    i++;
+  }
+  assertTrue(%HasFastDoubleElements(a));
+  a.length = 1;
+  a[0] = 1.5;
+  a.length = 2;
+  a[1] = 2.5;
+  assertEquals(a[0], 1.5);
+  assertEquals(a[1], 2.5);
+  assertTrue(%HasFastDoubleElements(a));
+  return a;
 }
+
+var a = get_double_array();