We see the same problem as in bug 167239 on linux x86 (32-bits). The same solution (adjusting sp first) seems to fix it.
Created attachment 342052 [details] Patch The patch. Seems to fix the issue in my tests. I also added the untag/tag calls though I'm not entirely sure how they work or if we want them on 32-bit too.
Comment on attachment 342052 [details] Patch r=me
Comment on attachment 342052 [details] Patch Clearing flags on attachment: 342052 Committed r232568: <https://trac.webkit.org/changeset/232568>
All reviewed patches have been landed. Closing bug.
<rdar://problem/40878480>