Version 3.24.28 (based on bleeding_edge revision r18991)

Don't crash in Array.join() if the resulting string exceeds the max string length (Chromium issue 336820).

Implements ES6 String.prototype.normalize method (issue 2943).

Performance and stability improvements on all platforms.

git-svn-id: https://v8.googlecode.com/svn/trunk@18992 ce2b1a6d-e550-0410-aec6-3dcde31c8c00