Merged: [turbofan] Fix loop assignment analysis on ForInStatements.

test/mjsunit/regress/regress-crbug-647887.js

Index: test/mjsunit/regress/regress-crbug-647887.js
diff --git a/test/mjsunit/regress/regress-crbug-642056.js b/test/mjsunit/regress/regress-crbug-647887.js
similarity index 68%
copy from test/mjsunit/regress/regress-crbug-642056.js
copy to test/mjsunit/regress/regress-crbug-647887.js
index ca9fc78ef61bf58a6f0affa217632ccf171b9b19..84e598d5aa99eed39494d387d4784616c8defbf5 100644
--- a/test/mjsunit/regress/regress-crbug-642056.js
+++ b/test/mjsunit/regress/regress-crbug-647887.js
@@ -4,14 +4,11 @@
 
 // Flags: --allow-natives-syntax
 
-function f(o) {
-  return o.x instanceof Array;
+function f(obj) {
+  var key;
+  for (key in obj) { }
+  return key === undefined;
 }
 
-var o = { x : 1.5 };
-o.x = 0;
-
-f(o);
-f(o);
 %OptimizeFunctionOnNextCall(f);
-f(o);
+assertFalse(f({ foo:0 }));