Merged r12086, r12478 into 3.8 branch.

test/mjsunit/regress/regress-2234.js

Index: test/mjsunit/regress/regress-2234.js
diff --git a/test/mjsunit/regress/regress-110509.js b/test/mjsunit/regress/regress-2234.js
similarity index 83%
copy from test/mjsunit/regress/regress-110509.js
copy to test/mjsunit/regress/regress-2234.js
index 132bd233bee32f6c84061049224ea43901dae06a..8da513e30e45352330354d12ab8bcf6e6cf64c02 100644
--- a/test/mjsunit/regress/regress-110509.js
+++ b/test/mjsunit/regress/regress-2234.js
@@ -27,15 +27,15 @@
 
 // Flags: --allow-natives-syntax
 
-// Verify that LRandom preserves rsi correctly.
-
-function foo() {
-  Math.random();
-  new Function("");
+function test(i) {
+  // Overwrite random parts of the transcendental cache.
+  Math.sin(i / 1779 * Math.PI);
+  // Check whether the first cache line has been accidentally overwritten
+  // with incorrect key.
+  assertEquals(0, Math.sin(0));
 }
 
-foo();
-foo();
-foo();
-%OptimizeFunctionOnNextCall(foo);
-foo();
+for (i = 0; i < 10000; ++i) {
+  test(i);
+  if (i == 0) %OptimizeFunctionOnNextCall(test);
+}