Fix for 435073: CHECK failure in CHECK(p->IsSmi()) failed.

test/mjsunit/regress/regress-435073.js

Index: test/mjsunit/regress/regress-435073.js
diff --git a/test/mjsunit/regress/regress-keyed-store-global.js b/test/mjsunit/regress/regress-435073.js
similarity index 70%
copy from test/mjsunit/regress/regress-keyed-store-global.js
copy to test/mjsunit/regress/regress-435073.js
index 1b127776d6c3635bbf6e57b2256319288b8f411c..dbaa612afae9d33e63c96ea7d639c76896bbd9a2 100644
--- a/test/mjsunit/regress/regress-keyed-store-global.js
+++ b/test/mjsunit/regress/regress-435073.js
@@ -3,10 +3,10 @@
 // found in the LICENSE file.
 
 // Flags: --allow-natives-syntax --verify-heap
-function f(a) {
-  for (var i = 0; i < 256; i++) a[i] = i;
-}
 
-f([]);
-f([]);
-f(this);
+function test(x) { [x,,]; }
+
+test(0);
+test(0);
+%OptimizeFunctionOnNextCall(test);
+test(0);