Reland and fix "Allow ICs to be generated for own global proxy."

test/mjsunit/regress/regress-store-global-proxy.js

Index: test/mjsunit/regress/regress-store-global-proxy.js
diff --git a/test/mjsunit/regress/regress-crbug-346141.js b/test/mjsunit/regress/regress-store-global-proxy.js
similarity index 61%
copy from test/mjsunit/regress/regress-crbug-346141.js
copy to test/mjsunit/regress/regress-store-global-proxy.js
index 798b7704ec2cc0eb928966fdfe9f979d0fe51f94..c85531c5fd917daa67b54e87141a164b90f3729b 100644
--- a/test/mjsunit/regress/regress-crbug-346141.js
+++ b/test/mjsunit/regress/regress-store-global-proxy.js
@@ -2,10 +2,11 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-// Flags: --harmony-symbols
+delete Object.prototype.__proto__;
 
-var s = Symbol()
-var o = {}
-o[s] = 2
-o[""] = 3
-Object.getOwnPropertySymbols(o)
+function f() {
+  this.toString = 1;
+}
+
+f.apply({});
+f();