Propagate updated offsets in BoundsCheckBbData.

test/mjsunit/regress/regress-350863.js

Index: test/mjsunit/regress/regress-350863.js
diff --git a/test/mjsunit/regress/regress-346343.js b/test/mjsunit/regress/regress-350863.js
similarity index 83%
copy from test/mjsunit/regress/regress-346343.js
copy to test/mjsunit/regress/regress-350863.js
index e4c10663138db599a682880df98f3310e0754b63..616792b82c02b0f920d14742406c9e31497dbc75 100644
--- a/test/mjsunit/regress/regress-346343.js
+++ b/test/mjsunit/regress/regress-350863.js
@@ -24,19 +24,22 @@
 // THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-
+//
 // Flags: --allow-natives-syntax
 
-function f(o) {
-  for (var i = 1; i < 2; ++i) {
-    var y = o.y;
+var __v_7 = { };
+function __f_8(base, condition) {
+  __v_7[base + 3] = 0;
+  __v_7[base + 4] = 0;
+  if (condition) {
+    __v_7[base + 0] = 0;
+    __v_7[base + 5] = 0;
+  } else {
+    __v_7[base + 0] = 0;
+    __v_7[base + 18] = 0;
   }
 }
-f({y:1.1});
-f({y:1.1});
-
-function g(x) { f({z:x}); }
-g(1);
-g(2);
-%OptimizeFunctionOnNextCall(g);
-g(1);
+__f_8(1, true);
+__f_8(1, false);
+%OptimizeFunctionOnNextCall(__f_8);
+__f_8(5, false);