[crankshaft] Fix environment handling after leaving inlined tail call.

test/mjsunit/regress/regress-crbug-537444.js

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --harmony-tailcalls --allow-natives-syntax
 
 "use strict";
 
-function deopt_function(func) {
-  %DeoptimizeFunction(func);
-}
-
 function f(x) {
-  return deopt_function(h);
+  return x;
 }
 
 function g(x) {
-  return f(x, 1);
+  return false ? 0 : f(x, 1);
 }
 
 function h(x) {
-  g(x, 1);
+  var z = g(x, 1);
+  return z + 1;
 }
 
 %SetForceInlineFlag(g);
 %SetForceInlineFlag(f);
-%NeverOptimizeFunction(deopt_function);
 
 h(1);
 h(1);
 %OptimizeFunctionOnNextCall(h);
-h(1);
+h("a");