[turbofan] Work around negative parameter count.

test/mjsunit/regress/regress-crbug-500824.js

Index: test/mjsunit/regress/regress-crbug-500824.js
diff --git a/test/mjsunit/regress/regress-460937.js b/test/mjsunit/regress/regress-crbug-500824.js
similarity index 51%
copy from test/mjsunit/regress/regress-460937.js
copy to test/mjsunit/regress/regress-crbug-500824.js
index cd57f93328beb1e2bab4e814afb3445e6843abe0..08d0d107cad78c876d6f92e30c9159c3bb10d76a 100644
--- a/test/mjsunit/regress/regress-460937.js
+++ b/test/mjsunit/regress/regress-crbug-500824.js
@@ -4,16 +4,20 @@
 
 // Flags: --allow-natives-syntax
 
-function f() {
-  var a = new Array(100000);
-  var i = 0;
-  while (!%HasFastDoubleElements(a)) {
-    a[i] = i;
-    i += 0.1;
-  }
-  a[1] = 1.5;
+function get_thrower() {
+  "use strict";
+  return Object.getOwnPropertyDescriptor(arguments, "callee").get;
 }
 
-f();
+var f = (function(v) {
+  "use asm";
+  function fun() {
+    switch (v) {}
+  }
+  return {
+    fun: fun
+  };
+})(get_thrower()).fun;
+
 %OptimizeFunctionOnNextCall(f);
 f();