[turbofan] Fix various bailout points for AstGraphBuilder.

test/mjsunit/compiler/accessor-exceptions2.js

Index: test/mjsunit/compiler/accessor-exceptions2.js
diff --git a/test/mjsunit/regress/regress-crbug-629823.js b/test/mjsunit/compiler/accessor-exceptions2.js
similarity index 52%
copy from test/mjsunit/regress/regress-crbug-629823.js
copy to test/mjsunit/compiler/accessor-exceptions2.js
index bbf74b80afd2fa52b020a03b19553c6d257d43ff..ed6e3e21c0ac07f0198c1f6c9e33540570d1ea9d 100644
--- a/test/mjsunit/regress/regress-crbug-629823.js
+++ b/test/mjsunit/compiler/accessor-exceptions2.js
@@ -5,13 +5,17 @@
 // Flags: --allow-natives-syntax
 
 var o = {}
-function bar() {
-  o[0] = +o[0];
-  o = /\u23a1|__v_4/;
+Object.defineProperty(o, "x", {
+  set: function(v) { throw 7; }
+});
+
+function foo(o) {
+  var x = 1;
+  try { o.x = 2; } catch (e) { x = e; }
+  return x;
 }
-bar();
-bar();
-bar();
-function foo() { bar(); }
+
+assertEquals(7, foo(o));
+assertEquals(7, foo(o));
 %OptimizeFunctionOnNextCall(foo);
-foo();
+assertEquals(7, foo(o));