This revision patches V8 to fix a potential crash in the compiler.

BUG=67732
TEST=fast/canvas/shadow-offset*

Review URL: http://codereview.chromium.org/5964015

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@70606 0039d316-1c4b-4281-b951-d872f2087c98