Version 3.27.34.8 (merged r22616, r22617)

In GrowMode, force the value to the right representation to avoid deopts between storing the length and storing the value.

Smi arrays are only guaranteed to be initialized in non-holey case

BUG=16459193
LOG=y
R=ishell@chromium.org

Review URL: https://codereview.chromium.org/424623003

git-svn-id: https://v8.googlecode.com/svn/branches/3.27@22736 ce2b1a6d-e550-0410-aec6-3dcde31c8c00