Refactor HCheckInstanceType to allow mask/tag tests.

src/hydrogen-instructions.cc

Index: src/hydrogen-instructions.cc
diff --git a/src/hydrogen-instructions.cc b/src/hydrogen-instructions.cc
index caeebae67368fe72ed11cb71037cdee42be691b6..8cee973e860c5b0810fb30cbff88af895f0d9250 100644
--- a/src/hydrogen-instructions.cc
+++ b/src/hydrogen-instructions.cc
@@ -754,7 +754,9 @@ void HChange::PrintDataTo(StringStream* stream) {
 HCheckInstanceType* HCheckInstanceType::NewIsJSObjectOrJSFunction(
     HValue* value)  {
   STATIC_ASSERT((LAST_JS_OBJECT_TYPE + 1) == JS_FUNCTION_TYPE);
-  return new HCheckInstanceType(value, FIRST_JS_OBJECT_TYPE, JS_FUNCTION_TYPE);
+  return new HCheckInstanceType(value,
+                                FIRST_JS_OBJECT_TYPE, JS_FUNCTION_TYPE,
+                                0, 0);
 }