[turbofan] Initial support for Array constructor specialization.

src/compiler/verifier.cc

Index: src/compiler/verifier.cc
diff --git a/src/compiler/verifier.cc b/src/compiler/verifier.cc
index cb7b38fb93a2fef252dd3bbb93f4c950ef1dd419..6a825de2a6928426fb44ae2f6a3735fa11addfe9 100644
--- a/src/compiler/verifier.cc
+++ b/src/compiler/verifier.cc
@@ -511,6 +511,10 @@ void Verifier::Visitor::Check(Node* node) {
       // Type is OtherObject.
       CheckUpperIs(node, Type::OtherObject());
       break;
+    case IrOpcode::kJSCreateArray:
+      // Type is OtherObject.
+      CheckUpperIs(node, Type::OtherObject());
+      break;
     case IrOpcode::kJSCreateClosure:
       // Type is Function.
       CheckUpperIs(node, Type::OtherObject());
@@ -544,6 +548,7 @@ void Verifier::Visitor::Check(Node* node) {
       break;
 
     case IrOpcode::kJSLoadContext:
+    case IrOpcode::kJSLoadNativeContext:

[Michael Starzinger, 2015/11/20 12:06:47]

nit: Move it down one line, to not split variable loads.

[Benedikt Meurer, 2015/11/20 12:28:53]

Done.

     case IrOpcode::kJSLoadDynamic:
       // Type can be anything.
       CheckUpperIs(node, Type::Any());