Debugger: use debug break slots instead of ICs (except for calls).

test/mjsunit/debug-stepframe.js

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --expose-debug-as debug
 
 function f0() {
   var v00 = 0;              // Break 1
   var v01 = 1;
   // Normal function call in a catch scope.
   try {
     throw 1;
   } catch (e) {
-    try{
+    try {
       f1();
     } catch (e) {
       var v02 = 2;          // Break 13
     }
   }
   var v03 = 3;
   var v04 = 4;
+  eval('var v05 = 5;        // Break 14');
+  var v06 = 6;              // Break 15
 }
 
 function f1() {
   var v10 = 0;              // Break 2
   var v11 = 1;
   // Getter call.
   var v12 = o.get;
   var v13 = 3               // Break 4
   // Setter call.
   o.set = 2;
@@ skipping 65 matching lines @@
     exception = e;
   }
 }
 
 for (step_size = 1; step_size < 6; step_size++) {
   print("step size = " + step_size);
   break_count = 0;
   Debug.setListener(listener);
   debugger;                 // Break 0
   f0();
-  Debug.setListener(null);  // Break 14
+  Debug.setListener(null);  // Break 16
   assertTrue(break_count > 14);
 }
 
 assertNull(exception);