init r10182
V8 dynamic taint analysis
small fixes for x64, updated ia32, taint test run OK for ia32
V8 benchmark suite is modified to support tainted data with -- taint_level=x% argument
fixes for chrome build, makeing sure that the initial snapshot is
build with taint support
.
allow to have to taint engine hooks, one before an operation and one after
lots of fixes
.
Refactored taint policy engine. Now, we have array of functions
that should be invoked before an operation and after the operation
via RunTaintPolicyBeforeFunctions() and RunTaintPolicyAfterFunctions().

Every JSObject has a special field that contains a reference to its
Tainted wrapper object, if the object is taint, and NULL otherwise.
This field allows us to identify if a give JSObject is tainted or not,
and thus prevent double-tainting the same object.:
.
* fixed opening tainted handlers
* fixed problem with policy conflicts: policy engine decision vs default decision
* JSON stringify
* Untaintable objects
.
.
enabling taint wrapping around arithmetic stubs
- prototype for binary operations
- figure out the story with caching of wrapper stub!
fixed TaintWrapperStub minor and major keys
fixed TaintWrapperStub caching
fixed bug in native allocation of tainted objects
added flag use_taint_spec
1. redesigned generation of taint wrapper stubs
2. introduced special flags to binary and unary
stubs that signals if they have a taint wrapper
3. taint wrapper and wrapped stubs act as a single
stub they never patched/cached/used in separate
added logging for ToBooleanIC