StubCallInterfaceDescriptor takes a context register.

src/ia32/lithium-ia32.h

Index: src/ia32/lithium-ia32.h
diff --git a/src/ia32/lithium-ia32.h b/src/ia32/lithium-ia32.h
index 6afe809ac23cabd5e7fc42bfe7928fa5ffc7733a..e7eba096a62aef5d8db289eade5ae9462d57ab44 100644
--- a/src/ia32/lithium-ia32.h
+++ b/src/ia32/lithium-ia32.h
@@ -1863,15 +1863,16 @@ class LCallJSFunction V8_FINAL : public LTemplateInstruction<1, 1, 0> {
 
 class LCallWithDescriptor V8_FINAL : public LTemplateResultInstruction<1> {
  public:
-  LCallWithDescriptor(const CallInterfaceDescriptor* descriptor,
+  LCallWithDescriptor(const InterfaceDescriptor* descriptor,
                       const ZoneList<LOperand*>& operands,
                       Zone* zone)
-    : inputs_(descriptor->environment_length() + 1, zone) {
-    ASSERT(descriptor->environment_length() + 1 == operands.length());
+    : inputs_(descriptor->environment_length() + 2, zone) {
+    ASSERT(descriptor->environment_length() + 2 == operands.length());
     inputs_.AddAll(operands, zone);
   }
 
   LOperand* target() const { return inputs_[0]; }
+  LOperand* context() const { return inputs_[1]; }
 
  private:
   DECLARE_CONCRETE_INSTRUCTION(CallWithDescriptor, "call-with-descriptor")
@@ -1879,7 +1880,7 @@ class LCallWithDescriptor V8_FINAL : public LTemplateResultInstruction<1> {
 
   virtual void PrintDataTo(StringStream* stream) V8_OVERRIDE;
 
-  int arity() const { return hydrogen()->argument_count() - 1; }
+  int arity() const { return hydrogen()->argument_count() - 2; }
 
   ZoneList<LOperand*> inputs_;