MIPS64: Fix [wasm] Support validation of asm.js modules with != 3 args.

Fix d0e52555

Typo in builtin-mips64.cc caused crashes in test mjsunit/asm/asm-validation.js

TEST=mjsunit/asm/asm-validation
BUG=

Review-Url: https://codereview.chromium.org/2258093002
Cr-Commit-Position: refs/heads/master@{#38757}

src/builtins/mips64/builtins-mips64.cc

@@ -1453,7 +1453,7 @@ void Builtins::Generate_InstantiateAsmJs(MacroAssembler* masm) {
         __ Branch(&over, ne, t2, Operand(j));
       }
       for (int i = j - 1; i >= 0; --i) {
-        __ lw(t2, MemOperand(fp, StandardFrameConstants::kCallerSPOffset +
+        __ ld(t2, MemOperand(fp, StandardFrameConstants::kCallerSPOffset +
                                      i * kPointerSize));
         __ push(t2);
       }
@@ -1477,8 +1477,8 @@ void Builtins::Generate_InstantiateAsmJs(MacroAssembler* masm) {
     __ SmiUntag(t2);
     scope.GenerateLeaveFrame();
 
-    __ Addu(t2, t2, Operand(1));
-    __ Lsa(sp, sp, t2, kPointerSizeLog2);
+    __ Daddu(t2, t2, Operand(1));
+    __ Dlsa(sp, sp, t2, kPointerSizeLog2);
     __ Ret();
 
     __ bind(&failed);