[turbofan] Remove frame state input from speculative ops.

src/compiler/operator-properties.cc

Index: src/compiler/operator-properties.cc
diff --git a/src/compiler/operator-properties.cc b/src/compiler/operator-properties.cc
index 320548e4560dda643064d46efc6d2be1595a40f2..05641472f0dc59aeff9783545751d68cad9ab2f2 100644
--- a/src/compiler/operator-properties.cc
+++ b/src/compiler/operator-properties.cc
@@ -80,11 +80,6 @@ int OperatorProperties::GetFrameStateInputCount(const Operator* op) {
     case IrOpcode::kJSStackCheck:
       return 1;
 
-    // We record the frame state immediately before and immediately after
-    // every property or global variable access.
-
-      return 2;
-
     // Binary operators that can deopt in the middle the operation (e.g.,
     // as a result of lazy deopt in ToNumber conversion) need a second frame
     // state so that we can resume before the operation.
@@ -110,9 +105,6 @@ int OperatorProperties::GetFrameStateInputCount(const Operator* op) {
     case IrOpcode::kJSLessThanOrEqual:
       return 2;
 
-    // Simplified operators with type feedback.
-    case IrOpcode::kSpeculativeNumberAdd:
-    case IrOpcode::kSpeculativeNumberSubtract:
     // Checked conversions.
     case IrOpcode::kCheckedUint32ToInt32:
     case IrOpcode::kCheckedFloat64ToInt32: