Added SES tests for two Chrome bugs. http://codereview.appspot.com/6817116
Added SES tests for two Chrome bugs.
http://codereview.appspot.com/6817116

Added SES tests for two Chrome bugs:
1) If you make an array's length read-only and then add an element to
the array, the length gets changed.
2) In non-strict code, this fails:
var x = (function a() {
  function a() {} // Should mask outer defn
  eval(""); // Just has to be here; removing it changes the behavior
  return a;
});
assert(x() !== x);

The first bug is a violation with no known exploit; the second is safe
because we're in strict mode.

R=felix8a


git-svn-id: eb21526166532bd3afc2c1499c0cf105ce815f5a@5150 360991c0-9f3b-0410-ba87-8b362a00edf4

jasvir/caja,initaldk/caja,jasvir/caja,jasvir/caja,jasvir/caja,googlearchive/caja,googlearchive/caja,cepm-nate/caja,cepm-nate/caja,googlearchive/caja,jasvir/caja,wishabi/caja-1,wishabi/caja-1,cepm-nate/caja,initaldk/caja,googlearchive/caja,cepm-nate/caja,cepm-nate/caja,cepm-nate/caja,wishabi/caja-1,initaldk/caja,googlearchive/caja,initaldk/caja,wishabi/caja-1,wishabi/caja-1,initaldk/caja,initaldk/caja,jasvir/caja,googlearchive/caja,wishabi/caja-1