Version 3.24.28 (based on bleeding_edge revision r18991)

Don't crash in Array.join() if the resulting string exceeds the max string length (Chromium issue 336820).

Implements ES6 String.prototype.normalize method (issue 2943).

Performance and stability improvements on all platforms.

git-svn-id: https://v8.googlecode.com/svn/trunk@18992 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merge remote-tracking branch 'upstream/trunk' into trunk