Put the type feedback vector in the unoptimized JavaScript frame.

src/ia32/macro-assembler-ia32.h

Index: src/ia32/macro-assembler-ia32.h
diff --git a/src/ia32/macro-assembler-ia32.h b/src/ia32/macro-assembler-ia32.h
index e62c7d8b4d23d6013b0cddda89db67be31c96773..20e49851ecb6c138451f36bc4c0b31c209bc1439 100644
--- a/src/ia32/macro-assembler-ia32.h
+++ b/src/ia32/macro-assembler-ia32.h
@@ -959,6 +959,10 @@ class MacroAssembler: public Assembler {
   void JumpIfDictionaryInPrototypeChain(Register object, Register scratch0,
                                         Register scratch1, Label* found);
 
+  // OSR needs to adjust locals on the stack down one word over the vector.
+  void OSRDropVectorFromStack(int unoptimized_slot_count, Register scratch0,
+                              Register scratch1);
+
  private:
   bool generating_stub_;
   bool has_frame_;