Rebaseline fast/js/JSON-stringify.html

This changes some FAIL to PASS lines, likely cause was the V8 roll in
https://codereview.chromium.org/184163003, specifically
https://github.com/v8/v8/commit/1e02b1d60095b06ac2f7ef372ca2af6028609119

CC=jkummerow@chromium.org,verwaest@chromium.org
TBR=yangguo@chromium.org
BUG=

Review URL: https://codereview.chromium.org/183583003

git-svn-id: svn://svn.chromium.org/blink/trunk@168404 bbb929c8-8fbe-4397-9dbb-9b2b20218538
Speculative fix for crash in Canvas2DLayerBridge::freeReleasedMailbox

BUG=348702
R=senorblanco@chromium.org

Review URL: https://codereview.chromium.org/186023003

git-svn-id: svn://svn.chromium.org/blink/trunk@168405 bbb929c8-8fbe-4397-9dbb-9b2b20218538