Fix evaluation order of Object.prototype.hasOwnProperty

test/mjsunit/has-own-property-evaluation-order.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-assertThrows(function() {
-  [0].every(function(){ Object.seal((new Int8Array())); });
-})
+function MyError() {}
 
 assertThrows(function() {
-  "use strict";
-  const v = 42;
-  v += 1;
-});
+  Object.prototype.hasOwnProperty.call(null, {
+    toString() {
+      throw new MyError();
+    }
+  });
+}, MyError);