Vector ICs: Introduce an InstanceType for the type feedback vector.

src/objects-debug.cc

Index: src/objects-debug.cc
diff --git a/src/objects-debug.cc b/src/objects-debug.cc
index d6765ddb09a33232dd14749f0608125458f68364..e186a5c1d840a0849c684ea9fb276ffa695d0718 100644
--- a/src/objects-debug.cc
+++ b/src/objects-debug.cc
@@ -67,6 +67,9 @@ void HeapObject::HeapObjectVerify() {
     case FIXED_DOUBLE_ARRAY_TYPE:
       FixedDoubleArray::cast(this)->FixedDoubleArrayVerify();
       break;
+    case FEEDBACK_VECTOR_TYPE:
+      TypeFeedbackVector::cast(this)->TypeFeedbackVectorVerify();
+      break;
     case BYTE_ARRAY_TYPE:
       ByteArray::cast(this)->ByteArrayVerify();
       break;
@@ -402,6 +405,14 @@ void FixedDoubleArray::FixedDoubleArrayVerify() {
 }
 
 
+void TypeFeedbackVector::TypeFeedbackVectorVerify() {
+  for (int i = 0; i < length(); i++) {
+    Object* e = get(i);
+    VerifyPointer(e);
+  }
+}
+
+
 void JSGeneratorObject::JSGeneratorObjectVerify() {
   // In an expression like "new g()", there can be a point where a generator
   // object is allocated but its fields are all undefined, as it hasn't yet been