Fix trigonometric intrinsics: if allocation fails remember to release the loaded value on FPU stack.

runtime/vm/intrinsifier_ia32.cc

 // Copyright (c) 2011, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 //
 // The intrinsic code below is executed before a method has built its frame.
 // The return address is on the stack and the arguments below it.
 // Registers EDX (arguments descriptor) and ECX (function) must be preserved.
 // Each intrinsification method returns true if the corresponding
 // Dart method was intrinsified.
 
@@ skipping 1035 matching lines @@
   __ Bind(&double_op);
   switch (kind) {
     case kSine:   __ fsin(); break;
     case kCosine: __ fcos(); break;
     default:
       UNREACHABLE();
   }
   const Class& double_class = Class::ZoneHandle(
       Isolate::Current()->object_store()->double_class());
   __ LoadObject(EBX, double_class);
+  Label alloc_failed;
   AssemblerMacros::TryAllocate(assembler,
                                double_class,
                                EBX,  // Class register.
-                               &fall_through,
+                               &alloc_failed,
                                EAX);  // Result register.
   __ fstpl(FieldAddress(EAX, Double::value_offset()));
   __ ret();
 
   __ Bind(&is_smi);  // smi -> double.
   __ SmiUntag(EAX);
   __ pushl(EAX);
   __ filds(Address(ESP, 0));
   __ popl(EAX);
   __ jmp(&double_op);
 
+  __ Bind(&alloc_failed);
+  __ ffree(0);
+  __ fincstp();
+
   __ Bind(&fall_through);
 }
 
 
 static bool Math_sin(Assembler* assembler) {
   EmitTrigonometric(assembler, kSine);
   return false;  // Compile method for slow case.
 }
 
 
@@ skipping 216 matching lines @@
   }                                                                            \
 
 INTRINSIC_LIST(FIND_INTRINSICS);
 #undef FIND_INTRINSICS
   return false;
 }
 
 }  // namespace dart
 
 #endif  // defined TARGET_ARCH_IA32