Fix bug in assigned variables analysis....

src/data-flow.cc

 // Copyright 2010 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 1342 matching lines @@
     CatchExtensionObject* expr) {
   ASSERT(av_.IsEmpty());
   Visit(expr->key());
   ProcessExpression(expr->value());
 }
 
 
 void AssignedVariablesAnalyzer::VisitAssignment(Assignment* expr) {
   ASSERT(av_.IsEmpty());
 
-  Visit(expr->target());
+  if (expr->target()->AsProperty() != NULL) {
+    // Visit receiver and key of property store and rhs.
+    Visit(expr->target()->AsProperty()->obj());
+    ProcessExpression(expr->target()->AsProperty()->key());
+    ProcessExpression(expr->value());
 
-  ProcessExpression(expr->value());
+    // If we have a variable as a receiver in a property store, check if
+    // we can mark it as trivial.
+    MarkIfTrivial(expr->target()->AsProperty()->obj());
+  } else {
+    Visit(expr->target());
+    ProcessExpression(expr->value());
 
-  Variable* var = expr->target()->AsVariableProxy()->AsVariable();
-  if (var != NULL) RecordAssignedVar(var);
-
-  // If we have a variable as a receiver in a property store, check if
-  // we can mark it as trivial.
-  if (expr->target()->AsProperty() != NULL) {
-    MarkIfTrivial(expr->target()->AsProperty()->obj());
+    Variable* var = expr->target()->AsVariableProxy()->AsVariable();
+    if (var != NULL) RecordAssignedVar(var);
   }
 }
 
 
 void AssignedVariablesAnalyzer::VisitThrow(Throw* expr) {
   ASSERT(av_.IsEmpty());
   Visit(expr->exception());
 }
 
 
@@ skipping 590 matching lines @@
 
   // Step 2: Compute KILL and GEN for each block node, initialize RD.
   for (int i = block_count - 1; i >= 0; i--) {
     postorder_->at(i)->InitializeReachingDefinitions(definition_count,
                                                      &variables_);
   }
 }
 
 
 } }  // namespace v8::internal