Fix 'typeof null' canonicalization in crankshaft

test/mjsunit/regress/regress-opt-typeof-null.js

Index: test/mjsunit/regress/regress-opt-typeof-null.js
diff --git a/test/mjsunit/compiler/regress-dead-throw-inlining.js b/test/mjsunit/regress/regress-opt-typeof-null.js
similarity index 76%
copy from test/mjsunit/compiler/regress-dead-throw-inlining.js
copy to test/mjsunit/regress/regress-opt-typeof-null.js
index 097a20bc41d34760931928c45e4117888295f20a..e4721a18c5e0fb95a3b7cb323f229de9f605b64a 100644
--- a/test/mjsunit/compiler/regress-dead-throw-inlining.js
+++ b/test/mjsunit/regress/regress-opt-typeof-null.js
@@ -4,10 +4,9 @@
 
 // Flags: --allow-natives-syntax
 
-function g() { if (false) throw 0; }
-function f() { g(); }
+function f() {
+  return typeof null === "object";
+};
 
-f();
-f();
 %OptimizeFunctionOnNextCall(f);
-f();
+assertTrue(f());