[crankshaft] Fix another deopt loop in slow mode for-in.

test/mjsunit/regress/regress-3650-3.js

Index: test/mjsunit/regress/regress-3650-3.js
diff --git a/test/mjsunit/regress/regress-crbug-577112.js b/test/mjsunit/regress/regress-3650-3.js
similarity index 56%
copy from test/mjsunit/regress/regress-crbug-577112.js
copy to test/mjsunit/regress/regress-3650-3.js
index 504f921a335801a51fd1c0c1a39a8b08e8872722..013e4df2834e20435982300303eb6260eb41b2be 100644
--- a/test/mjsunit/regress/regress-crbug-577112.js
+++ b/test/mjsunit/regress/regress-3650-3.js
@@ -4,12 +4,14 @@
 
 // Flags: --allow-natives-syntax
 
-Array.prototype.__proto__ = null;
-var prototype = Array.prototype;
-function f() {
-  prototype.lastIndexOf({});
+function foo(a) {
+  for (var d in a) {
+    delete a[1];
+  }
 }
-f();
-f();
-%OptimizeFunctionOnNextCall(f);
-f();
+
+foo([1,2,3]);
+foo([2,3,4]);
+%OptimizeFunctionOnNextCall(foo);
+foo([1,2,3]);
+assertOptimized(foo);