CopyPackedSmiToDoubleElements should fill the FixedDoubleArray with holes

test/mjsunit/regress/regress-2433.js

Index: test/mjsunit/regress/regress-2433.js
diff --git a/test/mjsunit/regress/regress-observe-empty-double-array.js b/test/mjsunit/regress/regress-2433.js
similarity index 87%
copy from test/mjsunit/regress/regress-observe-empty-double-array.js
copy to test/mjsunit/regress/regress-2433.js
index aea9c73b2291010870a01d496f2a299f6b40dcb2..dfe7131b59a49e5a0c936065c4e59d6565e9b2ee 100644
--- a/test/mjsunit/regress/regress-observe-empty-double-array.js
+++ b/test/mjsunit/regress/regress-2433.js
@@ -25,13 +25,12 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-// Flags: --harmony-observation --allow-natives-syntax
+// Transitioning from a PackedSmi to PackedDouble should fill the destination
+// with holes.
 //
-// Test passes if it does not crash.
+// See http://code.google.com/p/v8/issues/detail?id=2433 for details.
 
-arr = [1.1];
-Object.observe(arr, function(){});
-arr.length = 0;
-assertTrue(%HasFastDoubleElements(arr));
-// Should not crash
-arr.push(1.1);
+arr = [];
+arr[0] = 0;
+arr[0] = 1.1;
+assertEquals(undefined, arr[1]);