Version 4.2.77.17 (cherry-pick)

test/mjsunit/regress/regress-indirect-push-unchecked.js

Index: test/mjsunit/regress/regress-indirect-push-unchecked.js
diff --git a/test/mjsunit/regress/regress-449291.js b/test/mjsunit/regress/regress-indirect-push-unchecked.js
similarity index 54%
copy from test/mjsunit/regress/regress-449291.js
copy to test/mjsunit/regress/regress-indirect-push-unchecked.js
index fb56027b67f3f176f1432c11b39075aec6cc8429..dca7e96d4e86e8f85566dcb1ba8d42f96fd3b8e5 100644
--- a/test/mjsunit/regress/regress-449291.js
+++ b/test/mjsunit/regress/regress-indirect-push-unchecked.js
@@ -4,16 +4,17 @@
 
 // Flags: --allow-natives-syntax
 
-a = {y:1.5};
-a.y = 1093445778;
-b = a.y;
-c = {y:{}};
+var a = [1.5];
 
-function f() {
-  return {y: b};
+function p() {
+  Array.prototype.push.call(a, 1.7);
 }
 
-f();
-f();
-%OptimizeFunctionOnNextCall(f);
-assertEquals(f().y, 1093445778);
+p();
+p();
+p();
+%OptimizeFunctionOnNextCall(p);
+p();
+a.push({});
+p();
+assertEquals(1.7, a[a.length - 1]);