Fixed handling of polymorphic array accesses with constant index

test/mjsunit/regress/regress-351319.js

Index: test/mjsunit/regress/regress-351319.js
diff --git a/test/mjsunit/regress/regress-334708.js b/test/mjsunit/regress/regress-351319.js
similarity index 88%
copy from test/mjsunit/regress/regress-334708.js
copy to test/mjsunit/regress/regress-351319.js
index f0291bbdab61128baad9df89457d045b66644f1b..a2afbb6a98adb01eee37fe7f8c6472d300020e2b 100644
--- a/test/mjsunit/regress/regress-334708.js
+++ b/test/mjsunit/regress/regress-351319.js
@@ -27,16 +27,13 @@
 
 // Flags: --allow-natives-syntax
 
-function foo(x, y) {
-  return Math.floor(x / y);
+function __f_0(a, base) {
+  a[base] = 1;
+  a[base] = -1749557862;
 }
-
-function bar(x, y) {
-  return foo(x + 1, y + 1);
-}
-
-foo(16, "4");
-
-bar(64, 2);
-%OptimizeFunctionOnNextCall(bar);
-bar(64, 2);
+var __v_0 = new Array(1024);
+var __v_1 = new Array(128);
+__f_0(__v_0, 1);
+__f_0(__v_1, -2);
+%OptimizeFunctionOnNextCall(__f_0);
+__f_0(__v_0, -2);