Tweak the TurboFan pipeline for stub compilation.

src/compiler/js-intrinsic-lowering.cc

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/js-intrinsic-lowering.h"
 
 #include "src/compiler/access-builder.h"
 #include "src/compiler/js-graph.h"
 #include "src/compiler/node-properties.h"
 
@@ skipping 14 matching lines @@
     case Runtime::kInlineDeoptimizeNow:
       return ReduceInlineDeoptimizeNow(node);
     case Runtime::kInlineIsSmi:
       return ReduceInlineIsSmi(node);
     case Runtime::kInlineIsNonNegativeSmi:
       return ReduceInlineIsNonNegativeSmi(node);
     case Runtime::kInlineIsArray:
       return ReduceInlineIsInstanceType(node, JS_ARRAY_TYPE);
     case Runtime::kInlineIsFunction:
       return ReduceInlineIsInstanceType(node, JS_FUNCTION_TYPE);
+    case Runtime::kInlineJSValueValue:
+      return ReduceInlineJSValueValue(node);
     case Runtime::kInlineConstructDouble:
       return ReduceInlineConstructDouble(node);
     case Runtime::kInlineDoubleLo:
       return ReduceInlineDoubleLo(node);
     case Runtime::kInlineDoubleHi:
       return ReduceInlineDoubleHi(node);
     case Runtime::kInlineIsRegExp:
       return ReduceInlineIsInstanceType(node, JS_REGEXP_TYPE);
     case Runtime::kInlineMathFloor:
       return ReduceInlineMathFloor(node);
     case Runtime::kInlineMathSqrt:
       return ReduceInlineMathSqrt(node);
+    case Runtime::kInlineStringLength:
+      return ReduceInlineStringLength(node);
     case Runtime::kInlineValueOf:
       return ReduceInlineValueOf(node);
     default:
       break;
   }
   return NoChange();
 }
 
 
 Reduction JSIntrinsicLowering::ReduceInlineDeoptimizeNow(Node* node) {
@@ skipping 39 matching lines @@
 Reduction JSIntrinsicLowering::ReduceInlineIsSmi(Node* node) {
   return Change(node, simplified()->ObjectIsSmi());
 }
 
 
 Reduction JSIntrinsicLowering::ReduceInlineIsNonNegativeSmi(Node* node) {
   return Change(node, simplified()->ObjectIsNonNegativeSmi());
 }
 
 
+Reduction JSIntrinsicLowering::ReduceInlineJSValueValue(Node* node) {
+  Node* value = NodeProperties::GetValueInput(node, 0);
+  Node* effect = NodeProperties::GetEffectInput(node);
+  Node* control = NodeProperties::GetControlInput(node);
+
+  Node* result =
+      graph()->NewNode(simplified()->LoadField(AccessBuilder::ForValue()),
+                       value, effect, control);
+  NodeProperties::ReplaceWithValue(node, result);

[titzer, 2015/03/18 09:25:53]

This looks like a good candidate to mutate in place. You should be able to just
do:

NodeProperties::ReplaceWithValue(node, node)

[Sven Panne, 2015/03/18 10:40:08]

Done.

+  return Replace(value);
+}
+
+
 Reduction JSIntrinsicLowering::ReduceInlineConstructDouble(Node* node) {
   Node* high = NodeProperties::GetValueInput(node, 0);
   Node* low = NodeProperties::GetValueInput(node, 1);
   Node* value =
       graph()->NewNode(machine()->Float64InsertHighWord32(),
                        graph()->NewNode(machine()->Float64InsertLowWord32(),
                                         jsgraph()->Constant(0), low),
                        high);
   NodeProperties::ReplaceWithValue(node, value);
   return Replace(value);
@@ skipping 54 matching lines @@
   if (!machine()->HasFloat64RoundDown()) return NoChange();
   return Change(node, machine()->Float64RoundDown());
 }
 
 
 Reduction JSIntrinsicLowering::ReduceInlineMathSqrt(Node* node) {
   return Change(node, machine()->Float64Sqrt());
 }
 
 
+Reduction JSIntrinsicLowering::ReduceInlineStringLength(Node* node) {
+  Node* value = NodeProperties::GetValueInput(node, 0);
+  Node* effect = NodeProperties::GetEffectInput(node);
+  Node* control = NodeProperties::GetControlInput(node);
+
+  Node* result = graph()->NewNode(
+      simplified()->LoadField(AccessBuilder::ForStringLength()), value, effect,
+      control);
+  NodeProperties::ReplaceWithValue(node, result);

[titzer, 2015/03/18 09:25:53]

Same as above.

[Sven Panne, 2015/03/18 10:40:08]

Done.

+  return Replace(value);
+}
+
+
 Reduction JSIntrinsicLowering::ReduceInlineValueOf(Node* node) {
   // if (%_IsSmi(value)) {
   //   return value;
   // } else if (%_GetInstanceType(%_GetMap(value)) == JS_VALUE_TYPE) {
   //   return %_GetValue(value);
   // } else {
   //   return value;
   // }
   const Operator* const merge_op = common()->Merge(2);
   const Operator* const ephi_op = common()->EffectPhi(2);
@@ skipping 80 matching lines @@
 }
 
 
 MachineOperatorBuilder* JSIntrinsicLowering::machine() const {
   return jsgraph()->machine();
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8