Fix a failure to correctly set the static type on a frame element at a...

src/frame-element.h

 // Copyright 2009 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 138 matching lines @@
   void set_static_type(StaticType static_type) {
     value_ = value_ & ~StaticTypeField::mask();
     value_ = value_ | StaticTypeField::encode(static_type.static_type_);
   }
 
   bool Equals(FrameElement other) {
     if (value_ == other.value_) return true;
 
     if (type() != other.type() ||
         is_copied() != other.is_copied() ||
-        is_synced() != other.is_synced()) return false;
+        is_synced() != other.is_synced() ||
+        !(static_type() == other.static_type())) {
+      return false;
+    }
 
     if (is_register()) {
       if (!reg().is(other.reg())) return false;
     } else if (is_constant()) {
       if (!handle().is_identical_to(other.handle())) return false;
     } else if (is_copy()) {
       if (index() != other.index()) return false;
     }
 
     return true;
@@ skipping 86 matching lines @@
   class CopiedField: public BitField<uint32_t, 6, 1> {};
   class SyncedField: public BitField<uint32_t, 7, 1> {};
   class DataField: public BitField<uint32_t, 8, 32 - 9> {};
 
   friend class VirtualFrame;
 };
 
 } }  // namespace v8::internal
 
 #endif  // V8_FRAME_ELEMENT_H_