Merged r14638 into 3.17 branch.

test/mjsunit/regress/regress-crbug-233737.js

Index: test/mjsunit/regress/regress-crbug-233737.js
diff --git a/test/mjsunit/regress/regress-2451.js b/test/mjsunit/regress/regress-crbug-233737.js
similarity index 86%
copy from test/mjsunit/regress/regress-2451.js
copy to test/mjsunit/regress/regress-crbug-233737.js
index 465e4e68c26f3e3e119cbaf82d50c8f83c6efa9a..835726b22429ec3cca68df956255d47c53fcfd25 100644
--- a/test/mjsunit/regress/regress-2451.js
+++ b/test/mjsunit/regress/regress-crbug-233737.js
@@ -27,15 +27,16 @@
 
 // Flags: --allow-natives-syntax
 
-function f() {
-  assertEquals(-1.0, Math.round(-1.5));
-  assertEquals(-2.0, Math.round(-2.5));
-  assertEquals(-1.0, Math.round(-0.5000000000000001));
-}
+var a = new Array(2);
+a[0] = 1;
+assertTrue(%HasFastSmiElements(a));
+assertTrue(%HasFastHoleyElements(a));
 
-f();
-f();
-%OptimizeFunctionOnNextCall(f);
-f();
-assertTrue(%GetOptimizationStatus(f) != 2);
+function hole(i) {
+  return a[i] << 0;
+}
 
+assertEquals(1, hole(0));
+assertEquals(1, hole(0));
+%OptimizeFunctionOnNextCall(hole);
+assertEquals(0, hole(1));