Fix materialization of accessor frames with captured receivers

test/mjsunit/regress/regress-359441.js

Index: test/mjsunit/regress/regress-359441.js
diff --git a/test/mjsunit/regress/regress-347909.js b/test/mjsunit/regress/regress-359441.js
similarity index 65%
copy from test/mjsunit/regress/regress-347909.js
copy to test/mjsunit/regress/regress-359441.js
index 90a8e6a759eab76afef1dc968c814bd9d324b147..d96468c3359763a275f79bf0932ef633c907aa29 100644
--- a/test/mjsunit/regress/regress-347909.js
+++ b/test/mjsunit/regress/regress-359441.js
@@ -4,16 +4,20 @@
 
 // Flags: --allow-natives-syntax
 
-var a = {y:1.5};
-a.y = 0;
-var b = a.y;
-a.y = {};
-var d = 1;
+function g() {
+  this.x = {};
+}
+
 function f() {
-  d = 0;
-  return {y: b};
+  new g();
 }
+
+function deopt(x) {
+  %DeoptimizeFunction(f);
+}
+
 f();
 f();
 %OptimizeFunctionOnNextCall(f);
+Object.prototype.__defineSetter__('x', deopt);
 f();