Test and fix for polymorphic named call deoptimization.

test/mjsunit/regress/number-named-call-deopt.js

Index: test/mjsunit/regress/number-named-call-deopt.js
diff --git a/test/mjsunit/regress/regress-634-debug.js b/test/mjsunit/regress/number-named-call-deopt.js
similarity index 87%
copy from test/mjsunit/regress/regress-634-debug.js
copy to test/mjsunit/regress/number-named-call-deopt.js
index 17ca828c68cd4de35f6bf0608a980fe1adebb355..1598af12b4914aaab50171628c2d482351e09b84 100644
--- a/test/mjsunit/regress/regress-634-debug.js
+++ b/test/mjsunit/regress/number-named-call-deopt.js
@@ -27,15 +27,15 @@
 
 // Flags: --allow-natives-syntax
 
-function f() {
-  %SetAllocationTimeout(1, 0, false);
-  a = new Array(0);
-  assertEquals(0, a.length);
-  assertEquals(0, a.length);
-  %SetAllocationTimeout(-1, -1, true);
+function f(x, deopt, osr) {
+  var res = "result";
+  void(x.toString(10, deopt + 0));
+  if (osr) for (var i = 0; i < 100000; i++) { }
+  return res;
 }
 
-f();
-f();
+f(4, 0, false);
+f(4, 0, false);
+f(4, 0, false);
 %OptimizeFunctionOnNextCall(f);
-f();
+assertEquals("result", f(4, "deopt", true));