Fix length check in JSON.stringify.

test/mjsunit/regress/regress-crbug-160010.js

Index: test/mjsunit/regress/regress-crbug-160010.js
diff --git a/test/mjsunit/regress/regress-113924.js b/test/mjsunit/regress/regress-crbug-160010.js
similarity index 95%
copy from test/mjsunit/regress/regress-113924.js
copy to test/mjsunit/regress/regress-crbug-160010.js
index 3ecdec48f219b9ea545702ebf3a396debe7a93f8..266e54532597d060b699788fc210d566941fba60 100644
--- a/test/mjsunit/regress/regress-113924.js
+++ b/test/mjsunit/regress/regress-crbug-160010.js
@@ -25,7 +25,9 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-var count=12000;
-while(count--) {
-  eval("var a = new Object(10); a[2] += 7;");
+var str = "a";
+for (var i = 0; i < 28; i++) {
+  str += str;
 }
+JSON.stringify(str);
+