Merged r20087, r20137, r20155, r20158, r20197 into 3.24 branch.

test/mjsunit/regress/regress-354433.js

Index: test/mjsunit/regress/regress-354433.js
diff --git a/test/mjsunit/regress/regress-350863.js b/test/mjsunit/regress/regress-354433.js
similarity index 79%
copy from test/mjsunit/regress/regress-350863.js
copy to test/mjsunit/regress/regress-354433.js
index 616792b82c02b0f920d14742406c9e31497dbc75..80ea28623021bafc8ab291cc2bdd1078424610fb 100644
--- a/test/mjsunit/regress/regress-350863.js
+++ b/test/mjsunit/regress/regress-354433.js
@@ -24,22 +24,31 @@
 // THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-//
+
 // Flags: --allow-natives-syntax
 
-var __v_7 = { };
-function __f_8(base, condition) {
-  __v_7[base + 3] = 0;
-  __v_7[base + 4] = 0;
-  if (condition) {
-    __v_7[base + 0] = 0;
-    __v_7[base + 5] = 0;
-  } else {
-    __v_7[base + 0] = 0;
-    __v_7[base + 18] = 0;
-  }
+var __v_0 = {};
+var __v_5 = {};
+function __f_2() {
+  this.__defineGetter__('str', function() { return __f_2(this); });
+  this.str = "1";
+  this.toString = function() {
+    return this.str;
+  };
+};
+
+__v_5 = new __f_2();
+__v_0 = new __f_2();
+
+function __f_5(fun,a,b) {
+  __v_5.str = a;
+  __v_0.str = b;
+  fun(__v_5, __v_0);
 }
-__f_8(1, true);
-__f_8(1, false);
+
+function __f_8(a,b) { return a%b };
+
+__f_5(__f_8, 1 << 30, 1);
+__f_5(__f_8, 1, 1 << 30);
 %OptimizeFunctionOnNextCall(__f_8);
-__f_8(5, false);
+__f_5(__f_8, 1, 1 << 30);