[turbofan] Fix representation type for JSArray::length.

test/mjsunit/mjsunit.status

 # Copyright 2012 the V8 project authors. All rights reserved.
 # Redistribution and use in source and binary forms, with or without
 # modification, are permitted provided that the following conditions are
 # met:
 #
 #     * Redistributions of source code must retain the above copyright
 #       notice, this list of conditions and the following disclaimer.
 #     * Redistributions in binary form must reproduce the above
 #       copyright notice, this list of conditions and the following
 #       disclaimer in the documentation and/or other materials provided
@@ skipping 134 matching lines @@
   'es6/debug-evaluate-blockscopes': [PASS, NO_VARIANTS],
   # issue 4055:
   'es6/generators-debug-scopes': [PASS, NO_VARIANTS],
 
   # TODO(titzer): --always-opt incorrectly disables CrankShaft soft deopt points
   'result-table-min': [PASS, NO_VARIANTS],
   'result-table-max': [PASS, NO_VARIANTS],
   # TODO(titzer): too slow in --turbo mode due to O(n^2) graph verification.
   'regress/regress-1122': [PASS, NO_VARIANTS],
 
-  # Issue 4493: Bugs due to --turbo-inlining.
-  'sparse-array-reverse': [PASS, NO_VARIANTS],
-
   # Assumptions about optimization need investigation in TurboFan.
   'compiler/inlined-call': [PASS, NO_VARIANTS],
   'deopt-with-fp-regs': [PASS, NO_VARIANTS],
   'regress-sync-optimized-lists': [PASS, NO_VARIANTS],
 
   # issue 4078:
   'allocation-site-info': [PASS, NO_VARIANTS],
 
   ##############################################################################
   # Too slow in debug mode with --stress-opt mode.
@@ skipping 557 matching lines @@
   'd8-worker-sharedarraybuffer': [SKIP],
 }],  # 'predictable == True'
 
 ##############################################################################
 ['arch == ppc and simulator_run == True or arch == ppc64 and simulator_run == True', {
 
   # take too long with the simulator.
   'regress/regress-1132': [SKIP],
 }],  # 'arch == ppc and simulator_run == True'
 ]