Put the type feedback vector in the unoptimized JavaScript frame.

src/isolate.cc

Index: src/isolate.cc
diff --git a/src/isolate.cc b/src/isolate.cc
index bdf82926ceea02c8663061278c0c3e7846d2c845..f5abd7bc63dda811d506c4816102eea11cc208da 100644
--- a/src/isolate.cc
+++ b/src/isolate.cc
@@ -1065,9 +1065,10 @@ Object* Isolate::FindHandler() {
       // Compute the stack pointer from the frame pointer. This ensures that
       // operand stack slots are dropped for nested statements. Also restore
       // correct context for the handler which is pushed within the try-block.
-      Address return_sp = frame->fp() -
-                          StandardFrameConstants::kFixedFrameSizeFromFp -
-                          stack_slots * kPointerSize;
+      Address return_sp =
+          frame->fp() -
+          JavaScriptFrameConstants::kUnoptimizedFixedFrameSizeFromFp -
+          stack_slots * kPointerSize;
       STATIC_ASSERT(TryBlockConstant::kElementCount == 1);
       context = Context::cast(Memory::Object_at(return_sp - kPointerSize));