Upgrade V8 to version 4.9.385.28

https://chromium.googlesource.com/v8/v8/+/4.9.385.28

FPIIM-449

Change-Id: I4b2e74289d4bf3667f2f3dc8aa2e541f63e26eb4
diff --git a/test/mjsunit/regress/regress-3718.js b/test/mjsunit/regress/regress-3718.js
new file mode 100644
index 0000000..26d96d4
--- /dev/null
+++ b/test/mjsunit/regress/regress-3718.js
@@ -0,0 +1,21 @@
+// Copyright 2015 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+"use strict";
+
+function getTypeName(receiver) {
+  Error.prepareStackTrace = function(e, stack) { return stack; }
+  var stack = (function() { return new Error().stack; }).call(receiver);
+  Error.prepareStackTrace = undefined;
+  return stack[0].getTypeName();
+}
+
+assertNull(getTypeName(undefined));
+assertNull(getTypeName(null));
+assertEquals("Number", getTypeName(1));
+assertEquals("String", getTypeName(""));
+assertEquals("Boolean", getTypeName(false));
+assertEquals("Object", getTypeName({}));
+assertEquals("Array", getTypeName([]));
+assertEquals("Custom", getTypeName(new (function Custom(){})()));