Revert "[Arguments] Merge (7442,7496] from bleeding_edge."

src/frames.cc

Index: src/frames.cc
diff --git a/src/frames.cc b/src/frames.cc
index 8acc1e6ffe9fce2fbc0cfc27cc375169a6a4aa59..79aa2507fba0c31230192a6bb6754a3d5599ce95 100644
--- a/src/frames.cc
+++ b/src/frames.cc
@@ -617,7 +617,7 @@ Object* JavaScriptFrame::GetParameter(int index) const {
 
 int JavaScriptFrame::ComputeParametersCount() const {
   Address base  = caller_sp() + JavaScriptFrameConstants::kReceiverOffset;
-  Address limit = fp() + JavaScriptFrameConstants::kLastParameterOffset;
+  Address limit = fp() + JavaScriptFrameConstants::kSavedRegistersOffset;
   return static_cast<int>((base - limit) / kPointerSize);
 }
 
@@ -1084,7 +1084,7 @@ void JavaScriptFrame::Iterate(ObjectVisitor* v) const {
 
 void JavaScriptFrame::IterateArguments(ObjectVisitor* v) const {
   // Traverse callee-saved registers, receiver, and parameters.
-  const int kBaseOffset = JavaScriptFrameConstants::kLastParameterOffset;
+  const int kBaseOffset = JavaScriptFrameConstants::kSavedRegistersOffset;
   const int kLimitOffset = JavaScriptFrameConstants::kReceiverOffset;
   Object** base = &Memory::Object_at(fp() + kBaseOffset);
   Object** limit = &Memory::Object_at(caller_sp() + kLimitOffset) + 1;