Fix deoptimization address patching in Turbofan to use safepoints.

Fix deoptimization address patching in Turbofan to use safepoints.

Since the deopt patch address needs to be available during GC to
resolve safepoints, we need to move it to the code object (instead of
the deoptimization input data) - accessing a separate fixed array
is not safe during GC. This CL adds a deoptimization_pc field to
each safepoint. The fields points to the deoptimization block.

The CL also fixes wrong register allocator constraints for
frame states on calls. These should always live on the stack
because registers are not preserved during a call.

BUG=
R=bmeurer@chromium.org

Committed: https://code.google.com/p/v8/source/detail?r=23334

[Jarin, 2014-08-22 22:46:23]

Could you take a look, please?

[Benedikt Meurer, 2014-08-25 06:50:37]

LGTM

[Jarin, 2014-08-25 07:02:35]

Committed patchset #3 manually as 23334 (presubmit successful).