Bug 1289025 - Ensure enough ballast space in MakeMRegExpHoistable. r=arai

js/src/jit/IonAnalysis.cpp

@@ -2139,6 +2139,8 @@ jit::MakeMRegExpHoistable(MIRGraph& graph)
             // faster than a not movable regexp.
             RegExpObject* source = regexp->source();
             if (source->sticky() || source->global()) {
+                if (!graph.alloc().ensureBallast())
+                    return false;
                 MConstant* zero = MConstant::New(graph.alloc(), Int32Value(0));
                 regexp->block()->insertAfter(regexp, zero);