Version 3.24.31 (based on bleeding_edge revision r19044)

Fix short-circuiting logical and/or in HOptimizedGraphBuilder (Chromium issue 336148).

Elements field of newly allocated JSArray could be left uninitialized in some cases (fast literal case) (Chromium issue 340124).

Re-enable escape analysis.

Performance and stability improvements on all platforms.

git-svn-id: https://v8.googlecode.com/svn/trunk@19045 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merge remote-tracking branch 'upstream/trunk' into trunk