| Index: src/ic/ia32/handler-compiler-ia32.cc
 | 
| diff --git a/src/ic/ia32/handler-compiler-ia32.cc b/src/ic/ia32/handler-compiler-ia32.cc
 | 
| index b34c8925fe2fc30f4ce7732bcc4af8874e7d34e0..4beca479aea082e1341a92c11fb5f1956c481db9 100644
 | 
| --- a/src/ic/ia32/handler-compiler-ia32.cc
 | 
| +++ b/src/ic/ia32/handler-compiler-ia32.cc
 | 
| @@ -92,7 +92,7 @@ void PropertyHandlerCompiler::GenerateDictionaryNegativeLookup(
 | 
|    __ j(not_zero, miss_label);
 | 
|  
 | 
|    // Check that receiver is a JSObject.
 | 
| -  __ CmpInstanceType(scratch0, FIRST_SPEC_OBJECT_TYPE);
 | 
| +  __ CmpInstanceType(scratch0, FIRST_JS_RECEIVER_TYPE);
 | 
|    __ j(below, miss_label);
 | 
|  
 | 
|    // Load properties array.
 | 
| 
 |