Merge r10224 from the 3.6 to the 3.5 branch.

Merge r10224 from the 3.6 to the 3.5 branch.

Merge r10215 from the bleeding_edge to the 3.6 branch.

Ensure that non-optimized code objects are not flushed for inlined functions.

Collector was flushing them if optimized code was reachable only through the stack (not through the JSFunction object) which happens when you have a pending lazy deoptimization.

Also prevent v8::Script::New from leaking internal objects allocated by the compiler into outer HandleScope.

R=kmillikin@chromium.org
BUG=http://crbug.com/97116
TEST=test/mjsunit/regress/regress-97116.js
Committed: http://code.google.com/p/v8/source/detail?r=10227

[Kevin Millikin (Chromium), 2011-12-09 12:41:12]

LGTM.