Merge r9540 and r9562 to the 3.4 branch.

Merge r9540 and r9562 to the 3.4 branch.

r9540:
Don't count duplicate assignments to the same property as distinct ones.

In the ThisNamedPropertyAssignmentFinder, duplicate assignments to the same
property were counted as distinct assignments.  As a simple fix, subsequent
ones overwrite the previously recorded assignment.

This will reorder the assignments, but it is safe since they are restricted
to have only constants and parameters on the right-hand side (and there are
no assignments to the parameters).

r9562:
Add a regression test for an already fixed issue.

Add a regression test for Chromium issue 99167.

R=vegorov@chromium.org
BUG=
TEST=

Committed: http://code.google.com/p/v8/source/detail?r=9565

[Vyacheslav Egorov (Chromium), 2011-10-10 11:14:57]

lgtm