%ObjectFreeze needs to exclude non-fast-path objects.

test/mjsunit/regress/regress-380049.js

Index: test/mjsunit/regress/regress-380049.js
diff --git a/test/mjsunit/regress/regress-355486.js b/test/mjsunit/regress/regress-380049.js
similarity index 64%
copy from test/mjsunit/regress/regress-355486.js
copy to test/mjsunit/regress/regress-380049.js
index 55362a13416335b72bfa1ff92bc29f7a04edbd65..0b2b265fef27a8933bd825515fdeb814930751ef 100644
--- a/test/mjsunit/regress/regress-355486.js
+++ b/test/mjsunit/regress/regress-380049.js
@@ -4,10 +4,9 @@
 
 // Flags: --allow-natives-syntax
 
-function f() { var v = arguments[0]; }
-function g() { f(); }
-
-g();
-g();
-%OptimizeFunctionOnNextCall(g);
-g();
+function foo(a,b,c) { return arguments; }
+var f = foo(false, null, 40);
+try {
+  %ObjectFreeze(f);

[Yang, 2014/06/03 07:20:28]

how about assertThrows

+} catch(e) {
+}