[hydrogen] Add crash-hunting instrumentation to Hydrogen too

src/ic/x64/ic-x64.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #if V8_TARGET_ARCH_X64
 
 #include "src/codegen.h"
 #include "src/ic/ic.h"
 #include "src/ic/ic-compiler.h"
 #include "src/ic/stub-cache.h"
@@ skipping 662 matching lines @@
   Counters* counters = masm->isolate()->counters();
   __ IncrementCounter(counters->load_miss(), 1);
 
   LoadIC_PushArgs(masm);
 
   Register receiver = LoadDescriptor::ReceiverRegister();
 
   // Sanity check: The receiver must be a JS-exposed kind of object,
   // not something internal (like a Map, or FixedArray). Check this here
   // to chase after a rare but recurring crash bug.
-  // TODO(jkummerow): Remove this when it has generated a few crash reports.
+  // TODO(chromium:527994): Remove this when we have a few crash reports.
 
   Label ok, sound_alarm;
   __ JumpIfSmi(receiver, &ok, Label::kNear);
   __ movp(rbx, FieldOperand(receiver, HeapObject::kMapOffset));
   __ CompareRoot(rbx, Heap::kMetaMapRootIndex);
   __ j(equal, &sound_alarm);
   __ CompareRoot(rbx, Heap::kFixedArrayMapRootIndex);
   __ j(not_equal, &ok, Label::kNear);
 
   // This cmpp instruction is only here to identify which of several kinds
@@ skipping 222 matching lines @@
   Condition cc =
       (check == ENABLE_INLINED_SMI_CHECK)
           ? (*jmp_address == Assembler::kJncShortOpcode ? not_zero : zero)
           : (*jmp_address == Assembler::kJnzShortOpcode ? not_carry : carry);
   *jmp_address = static_cast<byte>(Assembler::kJccShortPrefix | cc);
 }
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_TARGET_ARCH_X64