Merged r13480, r13481 into trunk branch.

Always fail when trying to store to an undeclared global variable, even if it was found.

Fix corner case when JSFunction is evicted from flusher.

BUG=chromium:168801

R=jkummerow@chromium.org

Review URL: https://codereview.chromium.org/12040042

git-svn-id: http://v8.googlecode.com/svn/trunk@13482 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
8 files changed