Add missing FrameState for Runtime_DeliverObservationChangeRecords.

R=bmeurer@chromium.org
TEST=cctest,mjsunit/es7/object-observe-debug-event

Review URL: https://codereview.chromium.org/790413005

Cr-Commit-Position: refs/heads/master@{#26199}

src/compiler/linkage.cc

@@ -155,6 +155,7 @@ bool Linkage::NeedsFrameState(Runtime::FunctionId function) {
     case Runtime::kDefineAccessorPropertyUnchecked:
     case Runtime::kDefineDataPropertyUnchecked:
     case Runtime::kDeleteProperty:
+    case Runtime::kDeliverObservationChangeRecords:
     case Runtime::kDeoptimizeFunction:
     case Runtime::kFunctionBindArguments:
     case Runtime::kGetDefaultReceiver:

test/cctest/cctest.status

@@ -96,11 +96,8 @@
   'test-debug/DebugStepFunctionCall': [PASS, NO_VARIANTS],
 
   # TODO(jarin): Some tests don't like --turbo-deoptimzation very much.
-  'test-api/ApiUncaughtExceptionInObjectObserve': [PASS, NO_VARIANTS],
   'test-api/GetPrototypeAccessControl': [PASS, NO_VARIANTS],
   'test-api/Regress93759': [PASS, NO_VARIANTS],
-  'test-debug/DebugBreakOnExceptionInObserveCallback': [PASS, NO_VARIANTS],
-  'test-object-observe/DeliveryCallbackThrows': [PASS, NO_VARIANTS],
 
   # TODO(titzer): Triggers bug in late control reduction.
   'test-run-inlining/InlineLoopGuardedEmpty': [SKIP],

test/mjsunit/mjsunit.status

@@ -106,7 +106,6 @@
   # TODO(jarin): Some tests don't like --turbo-deoptimzation very much.
   'asm/embenchen/lua_binarytrees': [SKIP],
   'es6/symbols': [PASS, NO_VARIANTS],
-  'es7/object-observe-debug-event': [PASS, NO_VARIANTS],
   'harmony/classes': [PASS, NO_VARIANTS],
   'regress/regress-354433': [PASS, NO_VARIANTS],  # only on ARM simulator.
   'regress/regress-crbug-259300': [PASS, NO_VARIANTS],