Fix typed lowering to number comparison.

test/mjsunit/regress/regress-3564.js

Index: test/mjsunit/regress/regress-3564.js
diff --git a/test/mjsunit/regress/regress-3476.js b/test/mjsunit/regress/regress-3564.js
similarity index 55%
copy from test/mjsunit/regress/regress-3476.js
copy to test/mjsunit/regress/regress-3564.js
index f4333dbbfc0702085b4d36c493c8b6dcc0a481db..a0b9eb299456f6e8e10266b37c3c0c3b9b9b0d5e 100644
--- a/test/mjsunit/regress/regress-3476.js
+++ b/test/mjsunit/regress/regress-3564.js
@@ -9,13 +9,13 @@ function MyWrapper(v) {
 }
 
 function f() {
-  assertEquals("truex", true + "x");
-  assertEquals("truey", true + new String("y"));
-  assertEquals("truez", true + new MyWrapper("z"));
+  assertTrue("a" < "x");
+  assertTrue("a" < new String("y"));
+  assertTrue("a" < new MyWrapper("z"));
 
-  assertEquals("xtrue", "x" + true);
-  assertEquals("ytrue", new String("y") + true);
-  assertEquals("ztrue", new MyWrapper("z") + true);
+  assertFalse("a" > "x");
+  assertFalse("a" > new String("y"));
+  assertFalse("a" > new MyWrapper("z"));
 }
 
 f();