Put the type feedback vector in the unoptimized JavaScript frame.

test/webkit/fast/js/deep-recursion-test.js

 // Copyright 2013 the V8 project authors. All rights reserved.
 // Copyright (C) 2005, 2006, 2007, 2008, 2009 Apple Inc. All rights reserved.
 //
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions
 // are met:
 // 1.  Redistributions of source code must retain the above copyright
 //     notice, this list of conditions and the following disclaimer.
 // 2.  Redistributions in binary form must reproduce the above copyright
 //     notice, this list of conditions and the following disclaimer in the
@@ skipping 11 matching lines @@
 // SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 description("This test how deep we can recurse, and that we get an exception when we do, as opposed to a stack overflow.");
 
     function simpleRecursion(depth) {
         if (depth)
             simpleRecursion(depth - 1);
     }
 
     try {
-        simpleRecursion(17472);
+      simpleRecursion(15732);
     } catch (ex) {
         debug("FAIL: " + ex);
     }
 
     try {
         simpleRecursion(10000000);
     } catch (ex) {
         var msg = String(eval(ex));
         shouldBe("msg", "'RangeError: Maximum call stack size exceeded.'");
     }
@@ skipping 26 matching lines @@
         if (depth)
             tooManyArgsRecursion(depth - 1, 1);
     }
 
     try {
         tooManyArgsRecursion(10000000, 1);
     } catch (ex) {
         var msg = String(eval(ex));
         shouldBe("msg", "'RangeError: Maximum call stack size exceeded.'");
     }