Simpler repro for bug 2989.

test/mjsunit/regress/regress-2989.js

Index: test/mjsunit/regress/regress-2989.js
diff --git a/test/webkit/instanceof-operator.js b/test/mjsunit/regress/regress-2989.js
similarity index 87%
copy from test/webkit/instanceof-operator.js
copy to test/mjsunit/regress/regress-2989.js
index 1230181584337c86a13846618b2cefe510239e59..49c4a1cb03ba45b8938e08ab024f0b8d13a66ed6 100644
--- a/test/webkit/instanceof-operator.js
+++ b/test/mjsunit/regress/regress-2989.js
@@ -21,13 +21,15 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 // SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-description(
-"instanceof test"
-);
+// Flags: --allow-natives-syntax
 
-getterCalled = false;
-try {
-    ({} instanceof { get prototype(){ getterCalled = true; } });
-} catch (e) {
-}
-shouldBeFalse("getterCalled");
+(function ArgumentsObjectChange() {
+  function f(x) {
+      x = 42;
+      return f.arguments[0];
+  }
+
+  f(0);
+  %OptimizeFunctionOnNextCall(f);
+  assertEquals(42, f(0));
+})();