Check the state of the current binary op IC before patching smi code

test/mjsunit/regress/regress-recurse-patch-binary-op.js

Index: test/mjsunit/regress/regress-recurse-patch-binary-op.js
diff --git a/test/mjsunit/ignition/dead-code-source-position.js b/test/mjsunit/regress/regress-recurse-patch-binary-op.js
similarity index 65%
copy from test/mjsunit/ignition/dead-code-source-position.js
copy to test/mjsunit/regress/regress-recurse-patch-binary-op.js
index 95bb9183b880229a703e58503e9aec2a673015aa..842cc79fc8f1e0b5632c37b08e32fd234c066484 100644
--- a/test/mjsunit/ignition/dead-code-source-position.js
+++ b/test/mjsunit/regress/regress-recurse-patch-binary-op.js
@@ -2,8 +2,9 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-function f() {
-  for (f(x) in []) { f(new f()) }
+var i = 0
+function valueOf() {
+  while (true) return i++ < 4 ? 1 + this : 2
 }
 
-f();
+1 + ({valueOf})