Fix several bugs in closure conversion.

runtime/vm/kernel_binary_flowgraph.cc

 // Copyright (c) 2016, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 #include "vm/kernel_binary_flowgraph.h"
 #include "vm/compiler.h"
 #include "vm/longjump.h"
 #include "vm/object_store.h"
 
 #if !defined(DART_PRECOMPILED_RUNTIME)
@@ skipping 3446 matching lines @@
   function_node_helper.ReadUntilExcluding(
       FunctionNodeHelper::kPositionalParameters);
 
   // Positional.
   const intptr_t positional_argument_count = ReadListLength();
 
   // The first argument is the instance of the closure class.  For converted
   // closures its context field contains the context vector that is used by the
   // converted top-level function (target) explicitly and that should be passed
   // to that function as the first parameter.
-  body += LoadLocal(LookupVariable(
-      ReaderOffset() + relative_kernel_offset_));  // 0th variable offset.
+  LocalVariable* var = LookupVariable(ReaderOffset() + relative_kernel_offset_);
+  LocalVariable* parameter =
+      new (Z) LocalVariable(TokenPosition::kNoSource, TokenPosition::kNoSource,
+                            Symbols::TempParam(), var->type());
+  parameter->set_index(parsed_function()->first_parameter_index());
+  if (var->is_captured()) parameter->set_is_captured_parameter(true);
+  body += LoadLocal(parameter);  // 0th variable offset.
   body += flow_graph_builder_->LoadField(Closure::context_offset());
   LocalVariable* context = MakeTemporary();
 
   if (type_param_count > 0) {
     body += LoadLocal(context);
     body += flow_graph_builder_->LoadField(Context::variable_offset(0));
     body += PushArgument();
   }
 
   body += LoadLocal(context);
@@ skipping 4314 matching lines @@
     }
   }
 
   return Array::Handle(Array::null());
 }
 
 }  // namespace kernel
 }  // namespace dart
 
 #endif  // !defined(DART_PRECOMPILED_RUNTIME)