[interpreter] Properly collect for-in slow mode feedback.

test/unittests/interpreter/register-translator-unittest.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <stack>
 
 #include "src/v8.h"
 
 #include "src/interpreter/register-translator.h"
 #include "src/isolate.h"
@@ skipping 231 matching lines @@
 
 TEST_F(RegisterTranslatorTest, BadRange2) {
   // Bytecode::kForInNext with invalid range operand (kRegPair8)
   Register receiver(192);
   Register receiver_translated(receiver.index() + window_width());
   Register index(193);
   Register index_translated(index.index() + window_width());
   Register cache_info_pair(194);
   Register cache_info_pair_translated(cache_info_pair.index() + window_width());
   uint32_t operands[] = {receiver.ToRawOperand(), index.ToRawOperand(),
-                         cache_info_pair.ToRawOperand()};
+                         cache_info_pair.ToRawOperand(), 1};
   ASSERT_DEATH_IF_SUPPORTED(
-      translator()->TranslateInputRegisters(Bytecode::kForInNext, operands, 3),
+      translator()->TranslateInputRegisters(Bytecode::kForInNext, operands, 4),
       kBadOperandRegex);
 }
 
 }  // namespace interpreter
 }  // namespace internal
 }  // namespace v8