Version 3.23.6

Limit size of dehoistable array indices. (Chromium issues 319835, 319860)

Limit the size for typed arrays to MaxSmi. (Chromium issue 319722)

Performance and stability improvements on all platforms.

git-svn-id: https://v8.googlecode.com/svn/trunk@17817 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merge remote-tracking branch 'upstream/trunk' into trunk