Harden Runtime_LiveEditCheckAndDropActivations against unsafe args.

test/mjsunit/regress/regress-crbug-390925.js

Index: test/mjsunit/regress/regress-crbug-390925.js
diff --git a/test/mjsunit/regress/regress-355486.js b/test/mjsunit/regress/regress-crbug-390925.js
similarity index 64%
copy from test/mjsunit/regress/regress-355486.js
copy to test/mjsunit/regress/regress-crbug-390925.js
index 55362a13416335b72bfa1ff92bc29f7a04edbd65..24873df17b8051d21f35c3f73f2db79a6162a3db 100644
--- a/test/mjsunit/regress/regress-355486.js
+++ b/test/mjsunit/regress/regress-crbug-390925.js
@@ -4,10 +4,6 @@
 
 // Flags: --allow-natives-syntax
 
-function f() { var v = arguments[0]; }
-function g() { f(); }
-
-g();
-g();
-%OptimizeFunctionOnNextCall(g);
-g();
+var a = new Array();
+Object.freeze(a);
+assertThrows(function() { %LiveEditCheckAndDropActivations(a, true); });