[turbofan] Fix OSR-ed callee trigged ty do-expressions.

src/compiler/ast-graph-builder.cc

Index: src/compiler/ast-graph-builder.cc
diff --git a/src/compiler/ast-graph-builder.cc b/src/compiler/ast-graph-builder.cc
index ad17c2c781e8a74106bf3ef85f2c86e65fdb7494..d25fba457249beb2f0e00e29a82463aa3ce1a918 100644
--- a/src/compiler/ast-graph-builder.cc
+++ b/src/compiler/ast-graph-builder.cc
@@ -1657,6 +1657,7 @@ void AstGraphBuilder::VisitNativeFunctionLiteral(NativeFunctionLiteral* expr) {
 void AstGraphBuilder::VisitDoExpression(DoExpression* expr) {
   VisitBlock(expr->block());
   VisitVariableProxy(expr->result());
+  ast_context()->ReplaceValue();

[caitp (gmail), 2015/10/27 17:19:05]

Question: why does this matter? It looks like it just keeps the operand stack in
exactly the same state that it's already in

 }
 
 
@@ -2459,7 +2460,7 @@ void AstGraphBuilder::VisitCall(Call* expr) {
   const Operator* call = javascript()->CallFunction(args->length() + 2, flags,
                                                     language_mode(), feedback);
   Node* value = ProcessArguments(call, args->length() + 2);
-  environment()->Push(callee_value);
+  environment()->Push(value->InputAt(0));  // The callee passed to the call.
   PrepareFrameState(value, expr->ReturnId(), OutputFrameStateCombine::Push());
   environment()->Drop(1);
   ast_context()->ProduceValue(value);