[turbofan] Properly run TypeHintAnalyzer and AstLoopAssignmentAnalyzer on inlinees.

src/compiler/js-inlining.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/js-inlining.h"
 
+#include "src/ast/ast-numbering.h"
 #include "src/ast/ast.h"
-#include "src/ast/ast-numbering.h"
 #include "src/ast/scopes.h"
 #include "src/compiler.h"
 #include "src/compiler/all-nodes.h"
 #include "src/compiler/ast-graph-builder.h"
+#include "src/compiler/ast-loop-assignment-analyzer.h"
 #include "src/compiler/common-operator.h"
 #include "src/compiler/graph-reducer.h"
 #include "src/compiler/js-operator.h"
 #include "src/compiler/node-matchers.h"
 #include "src/compiler/node-properties.h"
 #include "src/compiler/operator-properties.h"
+#include "src/compiler/type-hint-analyzer.h"
 #include "src/isolate-inl.h"
 #include "src/parsing/parser.h"
 #include "src/parsing/rewriter.h"
 
 namespace v8 {
 namespace internal {
 namespace compiler {
 
 #define TRACE(...)                                      \
   do {                                                  \
@@ skipping 410 matching lines @@
   info_->AddInlinedFunction(shared_info);
 
   // ----------------------------------------------------------------
   // After this point, we've made a decision to inline this function.
   // We shall not bailout from inlining if we got here.
 
   TRACE("Inlining %s into %s\n",
         shared_info->DebugName()->ToCString().get(),
         info_->shared_info()->DebugName()->ToCString().get());
 
+  // Run the loop assignment analyzer on the inlinee.
+  AstLoopAssignmentAnalyzer loop_assignment_analyzer(&zone, &info);
+  LoopAssignmentAnalysis* loop_assignment = loop_assignment_analyzer.Analyze();
+
+  // Run the type hint analyzer on the inlinee.
+  TypeHintAnalyzer type_hint_analyzer(&zone);
+  TypeHintAnalysis* type_hint_analysis =
+      type_hint_analyzer.Analyze(handle(shared_info->code(), info.isolate()));
+
   // TODO(mstarzinger): We could use the temporary zone for the graph because
   // nodes are copied. This however leads to Zone-Types being allocated in the
   // wrong zone and makes the engine explode at high speeds. Explosion bad!
   Graph graph(jsgraph_->zone());
   JSGraph jsgraph(info.isolate(), &graph, jsgraph_->common(),
                   jsgraph_->javascript(), jsgraph_->simplified(),
                   jsgraph_->machine());
-  AstGraphBuilder graph_builder(local_zone_, &info, &jsgraph);
+  AstGraphBuilder graph_builder(local_zone_, &info, &jsgraph, loop_assignment,
+                                type_hint_analysis);
   graph_builder.CreateGraph(false);
 
   CopyVisitor visitor(&graph, jsgraph_->graph(), &zone);
   visitor.CopyGraph();
 
   Node* start = visitor.GetCopy(graph.start());
   Node* end = visitor.GetCopy(graph.end());
   Node* frame_state = call.frame_state_after();
   Node* new_target = jsgraph_->UndefinedConstant();
 
@@ skipping 87 matching lines @@
         node, frame_state, call.formal_arguments(),
         FrameStateType::kArgumentsAdaptor, shared_info);
   }
 
   return InlineCall(node, new_target, context, frame_state, start, end);
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8