Bugfix for 349874: we incorrectly believe we saw a growing store

test/mjsunit/regress/regress-349885.js

Index: test/mjsunit/regress/regress-349885.js
diff --git a/test/mjsunit/regress/regress-347542.js b/test/mjsunit/regress/regress-349885.js
similarity index 64%
copy from test/mjsunit/regress/regress-347542.js
copy to test/mjsunit/regress/regress-349885.js
index 901d798fb7fbea45f0d9f3d8ba6c7a9846bf6dd6..dd3e79526041b0362434608b81429d83e18ae8ef 100644
--- a/test/mjsunit/regress/regress-347542.js
+++ b/test/mjsunit/regress/regress-349885.js
@@ -4,8 +4,12 @@
 
 // Flags: --allow-natives-syntax
 
-function foo() {}
-foo();
+// The bug 349885
+
+function foo(a) {
+  a[292755462] = new Object();
+}
+foo(new Array(5));
+foo(new Array(5));
 %OptimizeFunctionOnNextCall(foo);
-foo();
-%NeverOptimizeFunction(foo);
+foo(new Array(10));