[turbofan] Initial support for transitioning stores.

src/type-cache.h

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef V8_TYPE_CACHE_H_
 #define V8_TYPE_CACHE_H_
 
 #include "src/types.h"
 
 namespace v8 {
@@ skipping 42 matching lines @@
       CreateRange(0.0, FixedArray::kMaxLength), Type::TaggedSigned());
 
   // The FixedDoubleArray::length property always containts a smi in the range
   // [0, FixedDoubleArray::kMaxLength].
   Type* const kFixedDoubleArrayLengthType = CreateNative(
       CreateRange(0.0, FixedDoubleArray::kMaxLength), Type::TaggedSigned());
 
   // The JSArray::length property always contains a tagged number in the range
   // [0, kMaxUInt32].
   Type* const kJSArrayLengthType =
-      CreateNative(CreateRange(0.0, kMaxUInt32), Type::Tagged());
+      CreateNative(Type::Unsigned32(), Type::Tagged());
 
   // The String::length property always contains a smi in the range
   // [0, String::kMaxLength].
   Type* const kStringLengthType =
       CreateNative(CreateRange(0.0, String::kMaxLength), Type::TaggedSigned());
 
 #define TYPED_ARRAY(TypeName, type_name, TYPE_NAME, ctype, size) \
   Type* const k##TypeName##Array = CreateArray(k##TypeName);
   TYPED_ARRAYS(TYPED_ARRAY)
 #undef TYPED_ARRAY
@@ skipping 22 matching lines @@
     return Type::Range(min, max, zone());
   }
 
   Zone* zone() { return &zone_; }
 };
 
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_TYPE_CACHE_H_