Reload the map of typed arrays after performing ToNumber.

test/mjsunit/regress/regress-507980.js

Index: test/mjsunit/regress/regress-507980.js
diff --git a/test/message/destructuring-modify-const.js b/test/mjsunit/regress/regress-507980.js
similarity index 56%
copy from test/message/destructuring-modify-const.js
copy to test/mjsunit/regress/regress-507980.js
index cabd924b37ea9f178259f4c979c3b3268920c713..d1a1f79f24e4458317fc6b8de5baa8bf45c0d1d9 100644
--- a/test/message/destructuring-modify-const.js
+++ b/test/mjsunit/regress/regress-507980.js
@@ -2,8 +2,7 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-// Flags: --harmony-destructuring
-'use strict';
-
-const { x : x, y : y } = { x : 1, y : 2 };
-x++;
+__v_1 = new Float64Array(1);
+__v_8 = { valueOf: function() { __v_13.y = "bar"; return 42; }};
+__v_13 = __v_1;
+__v_13[0] = __v_8;