Merge r8072 and r8884 to 3.2.

r8072 "Do not allow inlining functions with direct arguments access."
r8884 "Fix fun.apply(receiver, arguments) optimization."


R=kmillikin@chromium.org
BUG=v8:1592
TEST=mjsunit/regress/regress-1592.js
Review URL: http://codereview.chromium.org/7622014

git-svn-id: http://v8.googlecode.com/svn/branches/3.2@8904 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

• src/ast.cc[diff]
• src/bootstrapper.cc[diff]
• src/hydrogen.cc[diff]
• src/hydrogen.h[diff]
• src/objects.h[diff]
• src/version.cc[diff]
• test/mjsunit/regress/regress-1592.js[Added - diff]