Clobber first two argument GPRs across OMG loop tier-up check in BBQ JIT

[ddegazio]

73c4a75

Clobber first two argument GPRs across OMG loop tier-up check in BBQ JIT
https://bugs.webkit.org/show_bug.cgi?id=253584
rdar://106360294

Reviewed by Justin Michaud and Yusuke Suzuki.

Our current BBQ JIT implementation only clobbers argumentGPR0 and argumentGPR1
across the entry tier-up check, not loop tier-up checks. This patch adds this
clobbering to loop tier-up checks as well, preventing values in these registers
from being overwritten when we return from the tier-up operation.

* JSTests/wasm/stress/live-funcref-across-loop-tier-up.js: Added.
* Source/JavaScriptCore/wasm/WasmBBQJIT.cpp:
(JSC::Wasm::BBQJIT::emitLoopTierUpCheck):

Canonical link: https://commits.webkit.org/261435@main

46aa8a2

Misc	iOS, tvOS & watchOS	macOS	Linux	Windows
✅ 🧪 style	✅ 🛠 ios	✅ 🛠 mac	✅ 🛠 wpe	✅ 🛠 wincairo
	🛠 ios-sim	✅ 🛠 mac-AS-debug	✅ 🧪 wpe-wk2
✅ 🧪 webkitperl	✅ 🧪 ios-wk2	✅ 🧪 api-mac	✅ 🛠 gtk
	✅ 🧪 api-ios	✅ 🧪 mac-wk1	✅ 🧪 gtk-wk2
✅ 🛠 🧪 jsc	✅ 🛠 tv	✅ 🧪 mac-wk2	✅ 🧪 api-gtk
✅ 🛠 🧪 jsc-arm64	✅ 🛠 tv-sim	✅ 🧪 mac-AS-debug-wk2	✅ 🛠 jsc-armv7
	✅ 🛠 watch	✅ 🧪 mac-wk2-stress	✅ 🧪 jsc-armv7-tests
✅ 🛠 🧪 merge	✅ 🛠 watch-sim		✅ 🛠 jsc-mips
			✅ 🧪 jsc-mips-tests

[Constellation]

r=me

[justinmichaud]

r=me

[webkit-early-warning-system]

EWS run on current version of this PR (hash 46aa8a2)

Misc	iOS, tvOS & watchOS	macOS	Linux	Windows
✅ 🧪 style	✅ 🛠 ios	✅ 🛠 mac	✅ 🛠 wpe	✅ 🛠 wincairo
	🛠 ios-sim	✅ 🛠 mac-AS-debug	✅ 🧪 wpe-wk2
✅ 🧪 webkitperl	✅ 🧪 ios-wk2	✅ 🧪 api-mac	✅ 🛠 gtk
	✅ 🧪 api-ios	✅ 🧪 mac-wk1	✅ 🧪 gtk-wk2
✅ 🛠 🧪 jsc	✅ 🛠 tv	✅ 🧪 mac-wk2	✅ 🧪 api-gtk
✅ 🛠 🧪 jsc-arm64	✅ 🛠 tv-sim	✅ 🧪 mac-AS-debug-wk2	✅ 🛠 jsc-armv7
	✅ 🛠 watch	✅ 🧪 mac-wk2-stress	✅ 🧪 jsc-armv7-tests
✅ 🛠 🧪 merge	✅ 🛠 watch-sim		✅ 🛠 jsc-mips
			✅ 🧪 jsc-mips-tests

[webkit-commit-queue]

Committed 261435@main (73c4a75): https://commits.webkit.org/261435@main

Reviewed commits have been landed. Closing PR #11239 and removing active labels.