[turbofan] Specialize JSCallFunction based on CallIC feedback.

[turbofan] Specialize JSCallFunction based on CallIC feedback.

If the CallIC collected a known target function for a callsite, add
a runtime check to ensure that the feedback remains the same and
specialize the JSCallFunction node to the known target function so that
inlining and typed lowering can pick up the feedback.

R=mstarzinger@chromium.org
BUG=v8:4470, v8:4493
LOG=n

Committed: https://crrev.com/961fef2dd2852db5165de3dbdbd13162792448fe
Cr-Commit-Position: refs/heads/master@{#31689}

[Benedikt Meurer, 2015-10-30 11:34:30]

Hey Michi,

As discussed offline, consuming feedback from CallIC.
Please take a look.

Thanks,
Benedikt

[Michael Starzinger, 2015-10-30 12:40:21]

LGTM.

[Benedikt Meurer, 2015-10-30 12:42:24]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2015-10-30 12:42:40]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1428923002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1428923002/1

[Benedikt Meurer, 2015-10-30 12:55:49]

The CQ bit was unchecked by bmeurer@chromium.org

[Benedikt Meurer, 2015-10-30 12:55:54]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2015-10-30 12:55:58]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1428923002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1428923002/1

[commit-bot: I haz the power, 2015-10-30 12:57:27]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2015-10-30 12:57:57]

Patchset 1 (id:??) landed as
https://crrev.com/961fef2dd2852db5165de3dbdbd13162792448fe
Cr-Commit-Position: refs/heads/master@{#31689}