Array constructor shouldn't require a Cell, just an AllocationSite.

src/runtime.cc

Index: src/runtime.cc
diff --git a/src/runtime.cc b/src/runtime.cc
index 8697a91ce5a4edfbc20e2c4447bba64d773eb0f0..8e01d6dfe2a26dd9259c59edbaca2d8eab9c544c 100644
--- a/src/runtime.cc
+++ b/src/runtime.cc
@@ -14780,9 +14780,8 @@ RUNTIME_FUNCTION(MaybeObject*, Runtime_ArrayConstructor) {
   Handle<AllocationSite> site;
   if (!type_info.is_null() &&
       *type_info != isolate->heap()->undefined_value() &&
-      Cell::cast(*type_info)->value()->IsAllocationSite()) {
-    site = Handle<AllocationSite>(
-        AllocationSite::cast(Cell::cast(*type_info)->value()), isolate);
+      type_info->IsAllocationSite()) {

[Benedikt Meurer, 2014/01/21 06:32:39]

Maybe I'm missing something, but if the type_info is not undefined, then it has
to be an AllocationSite, right? So we should probably turn the
IsAllocationSite() test into an ASSERT here?

[mvstanton, 2014/01/21 15:58:18]

I agree. I can just remove the line because
Handle<AllocationSite>::cast(type_info) does that in debug mode.

+    site = Handle<AllocationSite>::cast(type_info);
     ASSERT(!site->SitePointsToLiteral());
   }