Fix representation of Phis for mutable-heapnumber-in-object-literal properties

test/mjsunit/regress/regress-3392.js

Index: test/mjsunit/regress/regress-3392.js
diff --git a/test/mjsunit/regress/regress-crbug-382513.js b/test/mjsunit/regress/regress-3392.js
similarity index 69%
copy from test/mjsunit/regress/regress-crbug-382513.js
copy to test/mjsunit/regress/regress-3392.js
index 59d2dcac72b5a716ff753f7ffaa0e6517c01bfa4..375f30210ce11272799c78b51463d97fc6b65998 100644
--- a/test/mjsunit/regress/regress-crbug-382513.js
+++ b/test/mjsunit/regress/regress-3392.js
@@ -4,7 +4,14 @@
 
 // Flags: --allow-natives-syntax
 
-function foo() { return [+0,false].indexOf(-(4/3)); }
+function foo() {
+  var a = {b: -1.5};
+  for (var i = 0; i < 1; i++) {
+    a.b = 1;
+  }
+  assertTrue(0 <= a.b);
+}
+
 foo();
 foo();
 %OptimizeFunctionOnNextCall(foo);