Reapply descriptor array sharing.

test/mjsunit/regress/regress-crbug-148376.js

Index: test/mjsunit/regress/regress-crbug-148376.js
diff --git a/test/mjsunit/regress/regress-1898.js b/test/mjsunit/regress/regress-crbug-148376.js
similarity index 90%
copy from test/mjsunit/regress/regress-1898.js
copy to test/mjsunit/regress/regress-crbug-148376.js
index 5440446fbf78ca593e8748cd54ea2aefad047542..55bb5f16fa79870973e4c347420210460672767d 100644
--- a/test/mjsunit/regress/regress-1898.js
+++ b/test/mjsunit/regress/regress-crbug-148376.js
@@ -25,13 +25,11 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-// Flags: --allow-natives-syntax
-
-function f(x) {
-  Math.log(Math.min(0.1, Math.abs(x)));
+function defineSetter(o) {
+  o.__defineSetter__('property', function() {});
 }
 
-f(0.1);
-f(0.1);
-%OptimizeFunctionOnNextCall(f);
-f(0.1);
+defineSetter(Object.prototype);
+property = 0;
+defineSetter(this);
+var keys = Object.keys(this);