partly import changes from tenfourfox:

- update ESR base to 115; update EV roots, pins, TLDs, TZs; security pullup (55284dd80)

js/src/jit/shared/CodeGenerator-shared.cpp

@@ -1389,6 +1389,7 @@ CodeGeneratorShared::callVM(const VMFunction& fun, LInstruction* ins, const Regi
     // when returning from the call.  Failures are handled with exceptions based
     // on the return value of the C functions.  To guard the outcome of the
     // returned value, use another LIR instruction.
+    ensureOsiSpace();
     uint32_t callOffset = masm.callJit(wrapper);
     markSafepointAt(callOffset, ins);