[turbofan] Switch from a whitelist to a blacklist for NeedsFrameStateInput

test/mjsunit/regress/regress-crbug-644631.js

Index: test/mjsunit/regress/regress-crbug-644631.js
diff --git a/test/message/syntactic-tail-call-in-binop-rhs.js b/test/mjsunit/regress/regress-crbug-644631.js
similarity index 59%
copy from test/message/syntactic-tail-call-in-binop-rhs.js
copy to test/mjsunit/regress/regress-crbug-644631.js
index a586cc84ee0fa2c6ab0b55879b2cc29042392721..5e649a49463791f960bc635f207c3ab69d3b2169 100644
--- a/test/message/syntactic-tail-call-in-binop-rhs.js
+++ b/test/mjsunit/regress/regress-crbug-644631.js
@@ -2,13 +2,11 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-// Flags: --harmony-explicit-tailcalls
-"use strict";
+// Flags: --turbo --always-opt
 
 function f() {
-  return 1;
+  new Int8Array(new ArrayBuffer(2147483648));
 }
 
-function g() {
-  return b + continue f()  ;
-}
+// Should not crash
+assertThrows(f, RangeError);