Upgrade to V8 3.4
Merge 3.4.14.35
Simple merge required updates to makefiles only.
Bug: 568872
Change-Id: I403a38452c547e06fcfa951c12eca12a1bc40978
diff --git a/test/mjsunit/regress/regress-1160.js b/test/mjsunit/regress/regress-1160.js
index 8e6e29b..10d3bc3 100644
--- a/test/mjsunit/regress/regress-1160.js
+++ b/test/mjsunit/regress/regress-1160.js
@@ -32,15 +32,10 @@
// when keyed store on the array does not work as expected because of
// the setter on its prototype.
-try {
- var N = 100;
- var array = Array(N);
- for (var i = 0; i < N; ++i) {
- array[i] = i;
- }
- Array.prototype.__defineSetter__(32, function() { });
- // The next line throws. We should make it work even with changed
- // prototype. See http://code.google.com/p/v8/issues/detail?id=1161
- array.join(",");
- assertUnreachable();
-} catch (e) { }
+var N = 10;
+var array = Array(N);
+for (var i = 0; i < N; ++i) {
+ array[i] = i;
+}
+Array.prototype.__defineSetter__(2, function() { });
+assertEquals("0,1,2,3,4,5,6,7,8,9", array.join(","));