Don't generate keyed store ICs for global proxies.

test/mjsunit/regress/regress-keyed-store-global.js

Index: test/mjsunit/regress/regress-keyed-store-global.js
diff --git a/test/mjsunit/regress/regress-store-global-proxy.js b/test/mjsunit/regress/regress-keyed-store-global.js
similarity index 57%
copy from test/mjsunit/regress/regress-store-global-proxy.js
copy to test/mjsunit/regress/regress-keyed-store-global.js
index c85531c5fd917daa67b54e87141a164b90f3729b..1b127776d6c3635bbf6e57b2256319288b8f411c 100644
--- a/test/mjsunit/regress/regress-store-global-proxy.js
+++ b/test/mjsunit/regress/regress-keyed-store-global.js
@@ -2,11 +2,11 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-delete Object.prototype.__proto__;
-
-function f() {
-  this.toString = 1;
+// Flags: --allow-natives-syntax --verify-heap
+function f(a) {
+  for (var i = 0; i < 256; i++) a[i] = i;
 }
 
-f.apply({});
-f();
+f([]);
+f([]);
+f(this);