Array.prototype.reverse should call [[HasProperty]] on elements before [[Get]] (issue 4223).

In RegExp, lastIndex is read with ToLength, not ToInteger (issue 4244).

Stage --harmony-new-target (issue 3887).

Re-ship harmony spread calls and spread arrays (issue 3018).

Expose SIMD.Float32x4 type to Javascript. This CL exposes the constructor function, defines type related information, and implements value type semantics. It also refactors test/mjsunit/samevalue.js to test SameValue and SameValueZero (issue 4124).

Performance and stability improvements on all platforms.

Cr-Commit-Position: refs/heads/4.6.14@{#1}
Cr-Branched-From: 8068b91d15733eee3f97bb741197a1b6da1550e1-refs/heads/master@{#29717}