Bug 1563051 - Fix a debugger leak of BaselineDebugModeOSRInfo in DebugEpilogue. r=iain

The other caller of EnsureBareExitFrame is when unwinding in the exception
handler and we already call deleteDebugModeOSRInfo there.

Differential Revision: https://phabricator.services.mozilla.com/D36759

--HG--
extra : moz-landing-system : lando

js/src/jit-test/tests/debug/bug1563051.js

@@ -0,0 +1,11 @@
+// |jit-test| error:123
+var g = newGlobal({newCompartment: true});
+var dbg = new Debugger;
+dbg.addDebuggee(g);
+dbg.onEnterFrame = function(frame) {
+    frame.onPop = function() {
+        dbg.removeDebuggee(g);
+        throw 123;
+    }
+}
+g.eval("(function() {})()");

js/src/jit/VMFunctions.cpp

@@ -922,6 +922,7 @@ bool DebugEpilogue(JSContext* cx, BaselineFrame* frame, jsbytecode* pc,
   if (!ok) {
     // Pop this frame by updating packedExitFP, so that the exception
     // handling code will start at the previous frame.
+    frame->deleteDebugModeOSRInfo();
     JitFrameLayout* prefix = frame->framePrefix();
     EnsureBareExitFrame(cx->activation()->asJit(), prefix);
     return false;