[turbofan] JSTypeFeedbackSpecializer is now an AdvancedReducer.

test/unittests/compiler/js-type-feedback-unittest.cc

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler.h"
 
 #include "src/compiler/access-builder.h"
 #include "src/compiler/js-graph.h"
 #include "src/compiler/js-operator.h"
 #include "src/compiler/js-type-feedback.h"
@@ skipping 23 matching lines @@
   ~JSTypeFeedbackTest() override { dependencies_.Rollback(); }
 
  protected:
   Reduction Reduce(Node* node) {
     Handle<GlobalObject> global_object(
         isolate()->native_context()->global_object(), isolate());
 
     MachineOperatorBuilder machine(zone());
     JSGraph jsgraph(isolate(), graph(), common(), javascript(), &machine);
     JSTypeFeedbackTable table(zone());
-    JSTypeFeedbackSpecializer reducer(&jsgraph, &table, nullptr, global_object,
-                                      &dependencies_);
+    // TODO(titzer): mock the GraphReducer here for better unit testing.
+    GraphReducer graph_reducer(graph(), zone());
+    JSTypeFeedbackSpecializer reducer(&graph_reducer, &jsgraph, &table, nullptr,
+                                      global_object, &dependencies_);
     return reducer.Reduce(node);
   }
 
   Node* EmptyFrameState() {
     MachineOperatorBuilder machine(zone());
     JSGraph jsgraph(isolate(), graph(), common(), javascript(), &machine);
     return jsgraph.EmptyFrameState();
   }
 
   JSOperatorBuilder* javascript() { return &javascript_; }
@@ skipping 215 matching lines @@
       dependencies()->Rollback();
     } else {
       ASSERT_FALSE(r.Changed());
       EXPECT_TRUE(dependencies()->IsEmpty());
     }
   }
 }
 }
 }
 }