Fix GC hazard.

R=jkummerow@chromium.org
BUG=v8:1698
TEST=

Review URL: http://codereview.chromium.org/7977021

git-svn-id: http://v8.googlecode.com/svn/branches/bleeding_edge@9358 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

src/objects.cc

@@ -2441,10 +2441,10 @@ MaybeObject* JSObject::SetPropertyForResult(LookupResult* result,
                 "no_setter_in_callback", HandleVector(args, ARRAY_SIZE(args)));
             return isolate->Throw(*error);
           }
-          // The proxy does not define the property as an accessor.
-          // Consequently, it has no effect on setting the receiver.
-          return self->AddProperty(*hname, *hvalue, attributes, strict_mode);
         }
+        // The proxy does not define the property as an accessor.
+        // Consequently, it has no effect on setting the receiver.
+        return self->AddProperty(*hname, *hvalue, attributes, strict_mode);
       }
     }
   }

test/mjsunit/mjsunit.status

@@ -27,9 +27,6 @@
 
 prefix mjsunit
 
-# BUG(1698): Fix Harmony-related crashes in these tests
-harmony/proxies: SKIP
-
 # All tests in the bug directory are expected to fail.
 bugs: FAIL