[turbofan] Fix typing rule for number addition.

test/mjsunit/regress/regress-crbug-629435.js

Index: test/mjsunit/regress/regress-crbug-629435.js
diff --git a/test/mjsunit/regress/regress-crbug-614292.js b/test/mjsunit/regress/regress-crbug-629435.js
similarity index 73%
copy from test/mjsunit/regress/regress-crbug-614292.js
copy to test/mjsunit/regress/regress-crbug-629435.js
index 3a67c17f6010b3bf60a8b7c9aa019ff369ddfadf..b73f601c71fcf9fac7a321da8648d056dbe1edd4 100644
--- a/test/mjsunit/regress/regress-crbug-614292.js
+++ b/test/mjsunit/regress/regress-crbug-629435.js
@@ -4,11 +4,16 @@
 
 // Flags: --allow-natives-syntax
 
-function foo() {
-  return [] | 0 && values[0] || false;
+function bar(v) {
+  v.constructor;
 }
 
+bar([]);
+bar([]);
+
+function foo() {
+  var x = -0;
+  bar(x + 1);
+}
 %OptimizeFunctionOnNextCall(foo);
-try {
-  foo();
-} catch (e) {}
+foo();