[turbofan] Fix CheckedInt32Mod lowering.

test/mjsunit/compiler/regress-5278.js

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --allow-natives-syntax --turbo

[Benedikt Meurer, 2016/08/10 08:51:07]

Don't add --turbo here.

[epertoso, 2016/08/10 08:53:33]

Done.

 
-function f() {
-  var o = {};
-  o.a = 1;
-}
-function g() {
-  var o = { ['a']: function(){} };
-  f();
-}
-f();
-f();
-%OptimizeFunctionOnNextCall(g);
-g();
+(function CheckedInt32Mod() {

[Benedikt Meurer, 2016/08/10 08:51:07]

Nit: Just use global scope here.

[epertoso, 2016/08/10 08:53:33]

Done.

+  function foo(a, b) {
+    return a % b;
+  }
+  foo(2, 1);
+  foo(2, 1);
+  %OptimizeFunctionOnNextCall(foo);
+  assertEquals(-0, foo(-2, 1));
+})();