Account for embedded constant pool pointer in Live Edit frame.

src/debug/liveedit.h

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef V8_DEBUG_LIVEEDIT_H_
 #define V8_DEBUG_LIVEEDIT_H_
 
 
 // Live Edit feature implementation.
 // User should be able to change script on already running VM. This feature
@@ skipping 154 matching lines @@
    *      - 3 context/type words of a regular InternalFrame
    *      - fp
    *   ---
    *      Topmost JavaScript frame
    *   ---
    *   ...
    *   --- Bottom
    */
   // A size of frame base including fp. Padding words starts right above
   // the base.
-  static const int kFrameDropperFrameSize = 4;
+  static const int kFrameDropperFrameSize =
+      4 + StandardFrameConstants::kCPSlotCount;
   // A number of words that should be reserved on stack for the LiveEdit use.
   // Stored on stack in form of Smi.
   static const int kFramePaddingInitialSize = 1;
   // A value that padding words are filled with (in form of Smi). Going
   // bottom-top, the first word not having this value is a counter word.
   static const int kFramePaddingValue = kFramePaddingInitialSize + 1;
 };
 
 
 // A general-purpose comparator between 2 arrays.
@@ skipping 175 matching lines @@
   static const int kSharedInfoOffset_ = 3;
   static const int kSize_ = 4;
 
   friend class JSArrayBasedStruct<SharedInfoWrapper>;
 };
 
 }  // namespace internal
 }  // namespace v8
 
 #endif /* V8_DEBUG_LIVEEDIT_H_ */