[Ignition] Fix incorrect arg evaluation order for some super calls.

src/interpreter/bytecode-generator.cc

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/interpreter/bytecode-generator.h"
 
 #include "src/ast/compile-time-value.h"
 #include "src/ast/scopes.h"
 #include "src/code-stubs.h"
 #include "src/compilation-info.h"
@@ skipping 2500 matching lines @@
   builder()->StoreAccumulatorInRegister(constructor);
 
   ZoneList<Expression*>* args = expr->arguments();
 
   // When a super call contains a spread, a CallSuper AST node is only created
   // if there is exactly one spread, and it is the last argument.
   if (!args->is_empty() && args->last()->IsSpread()) {
     RegisterList args_regs =
         register_allocator()->NewRegisterList(args->length() + 2);
     builder()->MoveRegister(constructor, args_regs[0]);
+    VisitArguments(args, args_regs, 2);
     VisitForRegisterValue(super->new_target_var(), args_regs[1]);
-    VisitArguments(args, args_regs, 2);
     builder()->NewWithSpread(args_regs);
   } else {
     RegisterList args_regs =
         register_allocator()->NewRegisterList(args->length());
     VisitArguments(args, args_regs);
     // The new target is loaded into the accumulator from the
     // {new.target} variable.
     VisitForAccumulatorValue(super->new_target_var());
 
     // Call construct.
@@ skipping 726 matching lines @@
 }
 
 Runtime::FunctionId BytecodeGenerator::StoreKeyedToSuperRuntimeId() {
   return is_strict(language_mode()) ? Runtime::kStoreKeyedToSuper_Strict
                                     : Runtime::kStoreKeyedToSuper_Sloppy;
 }
 
 }  // namespace interpreter
 }  // namespace internal
 }  // namespace v8