Use a trampoline stub to load the type feedback vector for CallICs.

src/ia32/interface-descriptors-ia32.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/v8.h"
 
 #if V8_TARGET_ARCH_IA32
 
 #include "src/interface-descriptors.h"
 
@@ skipping 110 matching lines @@
 void CallFunctionWithFeedbackDescriptor::Initialize(
     CallInterfaceDescriptorData* data) {
   Register registers[] = {esi, edi, edx};
   Representation representations[] = {Representation::Tagged(),
                                       Representation::Tagged(),
                                       Representation::Smi()};
   data->Initialize(arraysize(registers), registers, representations);
 }
 
 
+void CallFunctionWithFeedbackAndVectorDescriptor::Initialize(
+    CallInterfaceDescriptorData* data) {
+  Register registers[] = {esi, edi, edx, ebx};
+  Representation representations[] = {
+      Representation::Tagged(), Representation::Tagged(), Representation::Smi(),
+      Representation::Tagged()};
+  data->Initialize(arraysize(registers), registers, representations);
+}
+
+
 void CallConstructDescriptor::Initialize(CallInterfaceDescriptorData* data) {
   // eax : number of arguments
   // ebx : feedback vector
   // edx : (only if ebx is not the megamorphic symbol) slot in feedback
   //       vector (Smi)
   // edi : constructor function
   // TODO(turbofan): So far we don't gather type feedback and hence skip the
   // slot parameter, but ArrayConstructStub needs the vector to be undefined.
   Register registers[] = {esi, eax, edi, ebx};
   data->Initialize(arraysize(registers), registers, NULL);
@@ skipping 187 matching lines @@
       Representation::Tagged(),    // call_data
       Representation::Tagged(),    // holder
       Representation::External(),  // api_function_address
   };
   data->Initialize(arraysize(registers), registers, representations);
 }
 }
 }  // namespace v8::internal
 
 #endif  // V8_TARGET_ARCH_IA32