[turbofan] Fix receiver binding for inlined callees.

[turbofan] Fix receiver binding for inlined callees.

This introduces a JSConvertReceiver operator to model the implicit
conversion of receiver values for sloppy callees. It is used by the
JSInliner for now, but can also be used to model direction function
calls that bypass call stubs.

Also note that a hint is passed to said operator whenever the source
structure constrains the receiver value type. This hint allows for
optimizations in the lowering of the operator.

The underlying specification in ES6, section 9.2.1.2 is the basis for
this implementation.

R=bmeurer@chromium.org
TEST=mjsunit/compiler/receiver-conversion
BUG=v8:4493, v8:4470
LOG=n

Committed: https://crrev.com/37f5e23b5c81ce45b1c7d79637f92ec4ceb16d3e
Cr-Commit-Position: refs/heads/master@{#31598}

[Benedikt Meurer, 2015-10-27 11:24:42]

https://codereview.chromium.org/1412223015/diff/1/src/compiler/js-operator.cc
File src/compiler/js-operator.cc (right):

https://codereview.chromium.org/1412223015/diff/1/src/compiler/js-operator.cc...
src/compiler/js-operator.cc:56: }
Nit: UNREACHABLE(); return os;

https://codereview.chromium.org/1412223015/diff/1/test/mjsunit/compiler/recei...
File test/mjsunit/compiler/receiver-conversion.js (right):

https://codereview.chromium.org/1412223015/diff/1/test/mjsunit/compiler/recei...
test/mjsunit/compiler/receiver-conversion.js:5: // Flags: --allow-natives-syntax
--function-context-specialization
Can we have a test that does not require --function-context-specialization?

[Michael Starzinger, 2015-10-27 11:35:56]

https://codereview.chromium.org/1412223015/diff/1/src/compiler/js-operator.cc
File src/compiler/js-operator.cc (right):

https://codereview.chromium.org/1412223015/diff/1/src/compiler/js-operator.cc...
src/compiler/js-operator.cc:56: }
On 2015/10/27 11:24:42, Benedikt Meurer wrote:
> Nit: UNREACHABLE(); return os;

Done.

https://codereview.chromium.org/1412223015/diff/1/test/mjsunit/compiler/recei...
File test/mjsunit/compiler/receiver-conversion.js (right):

https://codereview.chromium.org/1412223015/diff/1/test/mjsunit/compiler/recei...
test/mjsunit/compiler/receiver-conversion.js:5: // Flags: --allow-natives-syntax
--function-context-specialization
On 2015/10/27 11:24:42, Benedikt Meurer wrote:
> Can we have a test that does not require --function-context-specialization?

Done.

[Benedikt Meurer, 2015-10-27 11:37:34]

LGTM with one final issue.

https://codereview.chromium.org/1412223015/diff/60001/src/compiler/js-inlinin...
File src/compiler/js-inlining.cc (right):

https://codereview.chromium.org/1412223015/diff/60001/src/compiler/js-inlinin...
src/compiler/js-inlining.cc:425: if (is_sloppy(info.language_mode()) &&
!function->IsBuiltin()) {
I think this has to check shared_info->native() instead of
function->IsBuiltin().

[Michael Starzinger, 2015-10-27 11:43:17]

https://codereview.chromium.org/1412223015/diff/60001/src/compiler/js-inlinin...
File src/compiler/js-inlining.cc (right):

https://codereview.chromium.org/1412223015/diff/60001/src/compiler/js-inlinin...
src/compiler/js-inlining.cc:425: if (is_sloppy(info.language_mode()) &&
!function->IsBuiltin()) {
On 2015/10/27 11:37:34, Benedikt Meurer wrote:
> I think this has to check shared_info->native() instead of
> function->IsBuiltin().

Done.

[Michael Starzinger, 2015-10-27 12:08:21]

The CQ bit was checked by mstarzinger@chromium.org

[Michael Starzinger, 2015-10-27 12:08:22]

The patchset sent to the CQ was uploaded after l-g-t-m from bmeurer@chromium.org
Link to the patchset: https://codereview.chromium.org/1412223015/#ps100001
(title: "Addressed comments.")

[commit-bot: I haz the power, 2015-10-27 12:08:27]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1412223015/100001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1412223015/100001

[commit-bot: I haz the power, 2015-10-27 12:13:39]

Committed patchset #6 (id:100001)

[commit-bot: I haz the power, 2015-10-27 12:14:01]

Patchset 6 (id:??) landed as
https://crrev.com/37f5e23b5c81ce45b1c7d79637f92ec4ceb16d3e
Cr-Commit-Position: refs/heads/master@{#31598}