[turbofan] Fix various issues with --turbo-inlining enabled.

src/compiler/js-inlining-heuristic.cc

Index: src/compiler/js-inlining-heuristic.cc
diff --git a/src/compiler/js-inlining-heuristic.cc b/src/compiler/js-inlining-heuristic.cc
index 515618da759c7147f43e5be36ea2a7693f425015..2836c09dd313153ee862f088c58ebfe37cfb3969 100644
--- a/src/compiler/js-inlining-heuristic.cc
+++ b/src/compiler/js-inlining-heuristic.cc
@@ -56,6 +56,7 @@ Reduction JSInliningHeuristic::Reduce(Node* node) {
 
   // Gather feedback on how often this call site has been hit before.
   CallFunctionParameters p = CallFunctionParametersOf(node->op());
+  if (!p.feedback().IsValid()) return NoChange();  // No feedback.

[Benedikt Meurer, 2015/10/15 11:18:23]

Nit: Can we set call count to zero in this case? I'd prefer to also be able to
inline call sites that were never executed so far based on other criteria.

[Michael Starzinger, 2015/10/15 11:29:30]

Done. As discussed offline, I used {-1} instead of {0} to be in sync with the
default value that CallICNexus::ExtractCallCount returns. Left a comment in that
regard as well.

   CallICNexus nexus(p.feedback().vector(), p.feedback().slot());
   int calls = nexus.ExtractCallCount();