JSR and JSRR now store the correct return address.