The following test was broken by e260bd5356f19d8538dcadfe6d619922106719a3 (https://codereview.chromium.org/1768123002) and still crashes on ToT.


out/x64.debug/d8 --predictable --ignition --allow-natives-syntax test/mjsunit/mjsunit.js test.js --no-turbo --no-crankshaft

===== test.js =====
(function() {
  function tcf1(a) {
    return 153;
  }

  function tcf2(a) {
    try {
      throw new Error("boom");
    } catch(e) {
      return 153;
    } finally {
      print(tcf2.name);
    }
  }

  function test() {
    tcf1();
    tcf2();
  }
  test();
})();