Rely on the map being a dictionary map rather than not having a backpointer

test/mjsunit/regress/regress-500173.js

Index: test/mjsunit/regress/regress-500173.js
diff --git a/test/message/super-in-function.js b/test/mjsunit/regress/regress-500173.js
similarity index 57%
copy from test/message/super-in-function.js
copy to test/mjsunit/regress/regress-500173.js
index edaa0e4eadc7befdb7ed28a3e06eaa827c4388f0..b7083b2c516f540d1d18feb5ac738082f5a6cd1c 100644
--- a/test/message/super-in-function.js
+++ b/test/mjsunit/regress/regress-500173.js
@@ -1,10 +1,12 @@
 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
-//
-// Flags: --harmony-classes
-'use strict';
 
-function f() {
-  super.x();
+function f(a) {
+  a.foo = {};
+  a[0] = 1;
+  a.__defineGetter__('foo', function() {});
+  a[0] = {};
+  a.bar = 0;
 }
+f(new Array());