Handle captured objects in OptimizedFrame::Summarize.

test/mjsunit/regress/regress-3029.js

Index: test/mjsunit/regress/regress-3029.js
diff --git a/test/mjsunit/regress/regress-crbug-242870.js b/test/mjsunit/regress/regress-3029.js
similarity index 89%
copy from test/mjsunit/regress/regress-crbug-242870.js
copy to test/mjsunit/regress/regress-3029.js
index 7183375ca811cedc81c870d34e694e98cf727f9b..ae412dff2ba98b52468cd2fa02d7bfc0653cffb9 100644
--- a/test/mjsunit/regress/regress-crbug-242870.js
+++ b/test/mjsunit/regress/regress-3029.js
@@ -27,17 +27,19 @@
 
 // Flags: --allow-natives-syntax
 
-var non_const_true = true;
+function c(x) {
+  undefined.boom();
+}
 
 function f() {
-  return (non_const_true || true && g());
+  return new c();
 }
 
 function g() {
-  for (;;) {}
+  f();
 }
 
-assertTrue(f());
-assertTrue(f());
-%OptimizeFunctionOnNextCall(f);
-assertTrue(f());
+assertThrows("g()", TypeError);
+assertThrows("g()", TypeError);
+%OptimizeFunctionOnNextCall(g);
+assertThrows("g()", TypeError);