Merged r19591, r19599 into trunk branch.

test/mjsunit/regress/regress-347909.js

Index: test/mjsunit/regress/regress-347909.js
diff --git a/test/mjsunit/regress/regress-crbug-345715.js b/test/mjsunit/regress/regress-347909.js
similarity index 52%
copy from test/mjsunit/regress/regress-crbug-345715.js
copy to test/mjsunit/regress/regress-347909.js
index a3753417dfb6f8440ec36f883dc6ac1be4a6c8ce..90a8e6a759eab76afef1dc968c814bd9d324b147 100644
--- a/test/mjsunit/regress/regress-crbug-345715.js
+++ b/test/mjsunit/regress/regress-347909.js
@@ -4,23 +4,16 @@
 
 // Flags: --allow-natives-syntax
 
-a = {y:1.5};
+var a = {y:1.5};
 a.y = 0;
-b = a.y;
-c = {y:{}};
-
+var b = a.y;
+a.y = {};
+var d = 1;
 function f() {
-  return 1;
-}
-
-function g() {
-  var e = {y: b};
-  var d = {x:f()};
-  var d = {x:f()};
-  return [e, d];
+  d = 0;
+  return {y: b};
 }
-
-g();
-g();
-%OptimizeFunctionOnNextCall(g);
-assertEquals(1, g()[1].x);
+f();
+f();
+%OptimizeFunctionOnNextCall(f);
+f();