Pass the ast_id to HandleKeyed to make sure it's the right one (e.g., CountOperation, not just the …

test/mjsunit/keyed-named-access.js

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --allow-natives-syntax
 
 var k = "x";
 var o1 = {x: 10};
 var o2 = {x: 11, y: 20};
 var o3 = {x: 12, y: 20, z: 100};
@@ skipping 16 matching lines @@
 f(o2);
 f(o2);
 %OptimizeFunctionOnNextCall(f);
 assertEquals(1100, f(o2));
 
 f(o3);
 f(o3);
 f(o3);
 %OptimizeFunctionOnNextCall(f);
 assertEquals(1200, f(o3));
+
+(function CountOperationDeoptimizationGetter() {
+  var global = {};
+  global.__defineGetter__("A", function () { return "x"; });
+
+  function h() {
+    return "A";
+  }
+
+  function g(a, b, c) {
+    try {
+      return a + b.toString() + c;
+    } catch (e) { }
+  }
+
+  function test(o)  {
+   return g(1, o[h()]--, 10);
+  }
+
+  test(global);
+  test(global);
+  %OptimizeFunctionOnNextCall(test);
+  print(test(global));
+})();
+
+
+(function CountOperationDeoptimizationPoint() {
+  function test()  {
+   this[0, ""]--;
+  }
+
+  test();
+  test();
+  %OptimizeFunctionOnNextCall(test);
+  test();
+})();