Rollback of r19549 in 3.24 branch.

test/mjsunit/regress/regress-crbug-345820.js

-// Copyright 2014 the V8 project authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-// Flags: --allow-natives-syntax --debug-code
-
-var __v_6 = {};
-__v_6 = new Int32Array(5);
-for (var i = 0; i < __v_6.length; i++) __v_6[i] = 0;
-
-function __f_7(N) {
-  for (var i = -1; i < N; i++) {
-    __v_6[i] = i;
-  }
-}
-__f_7(1);
-%OptimizeFunctionOnNextCall(__f_7);
-__f_7(__v_6.length);