Merged: [turbofan] Fix effect chain for polymorphic array access.

test/mjsunit/regress/regress-crbug-655004.js

Index: test/mjsunit/regress/regress-crbug-655004.js
diff --git a/test/mjsunit/regress/regress-3650-3.js b/test/mjsunit/regress/regress-crbug-655004.js
similarity index 70%
copy from test/mjsunit/regress/regress-3650-3.js
copy to test/mjsunit/regress/regress-crbug-655004.js
index 013e4df2834e20435982300303eb6260eb41b2be..1cba1efc826969960d63ae3ebaa677c076a62412 100644
--- a/test/mjsunit/regress/regress-3650-3.js
+++ b/test/mjsunit/regress/regress-crbug-655004.js
@@ -5,13 +5,11 @@
 // Flags: --allow-natives-syntax
 
 function foo(a) {
-  for (var d in a) {
-    delete a[1];
-  }
+  a.x = 0;
+  if (a.x === 0) a[1] = 0.1;
+  a.x = {};
 }
-
-foo([1,2,3]);
-foo([2,3,4]);
+foo(new Array(1));
+foo(new Array(1));
 %OptimizeFunctionOnNextCall(foo);
-foo([1,2,3]);
-assertOptimized(foo);
+foo(new Array(1));