Make sure we don't leak map transitions from AccessorPairs to the Javascript world.

test/mjsunit/regress/regress-133211.js

Index: test/mjsunit/regress/regress-133211.js
diff --git a/src/arm/frames-arm.cc b/test/mjsunit/regress/regress-133211.js
similarity index 83%
copy from src/arm/frames-arm.cc
copy to test/mjsunit/regress/regress-133211.js
index a805d280cad070f444d99b7aac1a5e4f2948681c..f9473d1ddf5cfc3d15eeac83984306287c2d0df9 100644
--- a/src/arm/frames-arm.cc
+++ b/test/mjsunit/regress/regress-133211.js
@@ -25,21 +25,11 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-#include "v8.h"
-
-#if defined(V8_TARGET_ARCH_ARM)
-
-#include "frames-inl.h"
-
-namespace v8 {
-namespace internal {
-
-
-Address ExitFrame::ComputeStackPointer(Address fp) {
-  return Memory::Address_at(fp + ExitFrameConstants::kSPOffset);
-}
-
-
-} }  // namespace v8::internal
-
-#endif  // V8_TARGET_ARCH_ARM
+// Make sure we don't leak maps when reading intermediate property descriptors.
+
+var o = {};
+var x = {};
+Object.defineProperty(o, "foo", { get: undefined });
+Object.defineProperty(x, "foo", { get: undefined, set: undefined });
+var pd = Object.getOwnPropertyDescriptor(o, "foo");
+assertEquals(undefined, pd.set);