[turbofan] Fix wrong parameter indices in JSFrameSpecialization.

test/mjsunit/regress/regress-crbug-552304.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 (function() {
   "use asm";
-  return function(x) {
-    for (var i = 0; i < 100000; ++i) {}
-    return x;
+  return function() {
+    for (var i = 0; i < 100000; delete unresolved_name) {++i}
+    return 0;
   }
 })()(this + "i");