In r187639, the LLInt should have restored callee saves registers before making a tail call, but it did not.
Created attachment 257951 [details] Patch
Committed r187674: <http://trac.webkit.org/changeset/187674>
Comment on attachment 257951 [details] Patch Cleared review? from attachment 257951 [details] so that this bug does not appear in http://webkit.org/pending-review. If you would like this patch reviewed, please attach it to a new bug (or re-open this bug before marking it for review again).