deps: cherry-pick e560815 from upstream v8
Original commit message:
[runtime] Fix Array.prototype.concat with complex @@ species Array.prototype.concat does not properly handle JSProxy species that will modify the currently visited array.
BUG=682194
Review-Url: https://codereview.chromium.org/2655623004 Cr-Commit-Position: refs/heads/master@{#42640}
This is already fixed on V8 5.7 and 5.8. Needs to be fixed on V8 5.5 (Node 7) and V8 5.1 (Node 6).
Checklist
-
make -j4 test
(UNIX), orvcbuild test
(Windows) passes -
commit message follows commit guidelines
Affected core subsystem(s)
deps:v8
CI: https://ci.nodejs.org/job/node-test-pull-request/7781/ V8 CI: https://ci.nodejs.org/view/All/job/node-test-commit-v8-linux/675/