Check elimination now sets known successor branch of HCompareObjectEqAndBranch (correctness fix).

test/mjsunit/regress/regress-crbug-352058.js

Index: test/mjsunit/regress/regress-crbug-352058.js
diff --git a/test/mjsunit/regress/regress-347909.js b/test/mjsunit/regress/regress-crbug-352058.js
similarity index 63%
copy from test/mjsunit/regress/regress-347909.js
copy to test/mjsunit/regress/regress-crbug-352058.js
index 90a8e6a759eab76afef1dc968c814bd9d324b147..e270d830074319a9d4631d95b60a37bc363876d5 100644
--- a/test/mjsunit/regress/regress-347909.js
+++ b/test/mjsunit/regress/regress-crbug-352058.js
@@ -2,17 +2,15 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-// Flags: --allow-natives-syntax
+// Flags: --allow-natives-syntax --check-elimination --stress-opt
 
-var a = {y:1.5};
-a.y = 0;
-var b = a.y;
-a.y = {};
-var d = 1;
+var v0 = this;
+var v2 = this;
 function f() {
-  d = 0;
-  return {y: b};
+  v2 = [1.2, 2.3];
+  v0 = [12, 23];
 }
+
 f();
 f();
 %OptimizeFunctionOnNextCall(f);