Test and fix for polymorphic named call deoptimization.

Test and fix for polymorphic named call deoptimization.

The fix removes wrong simulates from the number branch of polymorphic
call/field access handling.

The change also fixes the same thing for polymorphic named field
access even thourgh the field access is probably safe in practice
(because it cannot deoptimize). It is better to keep all our simulates
in sync with full codegen.

R=jkummerow@chromium.org
BUG=

Committed: https://code.google.com/p/v8/source/detail?r=19375

[Jakob Kummerow, 2014-02-14 10:30:02]

lgtm

[Jarin, 2014-02-14 12:02:46]

Committed patchset #1 manually as r19375 (presubmit successful).