[runtime] Remove the very dangerous %_CallFunction intrinsic.

test/mjsunit/call-runtime-tail.js

Index: test/mjsunit/call-runtime-tail.js
diff --git a/test/mjsunit/call-runtime-tail.js b/test/mjsunit/call-runtime-tail.js
index 2b38b339e221b9b4aaca5d1ed07aff099a300f7f..9f404a80890c19ea3966dff27e65611348f6897d 100644
--- a/test/mjsunit/call-runtime-tail.js
+++ b/test/mjsunit/call-runtime-tail.js
@@ -16,7 +16,7 @@ tailee1 = function() {
   if (count1-- == 0) {
     return this;
   }
-  return %_CallFunction(this, tailee1);
+  return %_Call(tailee1, this);
 };
 
 %OptimizeFunctionOnNextCall(tailee1);
@@ -33,7 +33,7 @@ tailee2 = function(px) {
   if ((count2 | 0) === 0) {
     return this;
   }
-  return %_CallFunction(this, px, tailee2);
+  return %_Call(tailee2, this, px);
 };
 
 %OptimizeFunctionOnNextCall(tailee2);
@@ -47,7 +47,7 @@ tailee3 = function(px) {
   if (count3-- == 0) {
     return this;
   }
-  return %_CallFunction(px, this, tailee3);
+  return %_Call(tailee3, px, this);
 };
 
 %OptimizeFunctionOnNextCall(tailee3);
@@ -61,7 +61,7 @@ tailee4 = function(px) {
   if (count4-- == 0) {
     return this;
   }
-  return %_CallFunction(this, px, undefined, tailee4);
+  return %_Call(tailee4, this, px, undefined);
 };
 
 %OptimizeFunctionOnNextCall(tailee4);
@@ -75,7 +75,7 @@ tailee5 = function(px) {
   if (count5-- == 0) {
     return this;
   }
-  return %_CallFunction(this, tailee5);
+  return %_Call(tailee5, this);
 };
 
 %OptimizeFunctionOnNextCall(tailee5);