[maglev] Fix updating accumulator in ForEachValue

Bug: v8:7700
Change-Id: I43ef07414326ee656b36e17aa739ae0015c88d57
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/3560640Reviewed-by: Leszek Swirski <leszeks@chromium.org>
Commit-Queue: Victor Gomes <victorgomes@chromium.org>
Cr-Commit-Position: refs/heads/main@{#79679}

src/maglev/maglev-interpreter-frame-state.h

@@ -161,7 +161,7 @@ class CompactInterpreterFrameState {
   template <typename Function>
   void ForEachValue(const MaglevCompilationUnit& info, Function&& f) {
     ForEachRegister(info, f);
-    ForAccumulator(info, [&](ValueNode* value) {
+    ForAccumulator(info, [&](ValueNode*& value) {
       f(value, interpreter::Register::virtual_accumulator());
     });
   }
@@ -169,7 +169,7 @@ class CompactInterpreterFrameState {
   template <typename Function>
   void ForEachValue(const MaglevCompilationUnit& info, Function&& f) const {
     ForEachRegister(info, f);
-    ForAccumulator(info, [&](ValueNode*& value) {
+    ForAccumulator(info, [&](ValueNode* value) {
       f(value, interpreter::Register::virtual_accumulator());
     });
   }