ArrayPush builtin handlified.

src/elements.h

Index: src/elements.h
diff --git a/src/elements.h b/src/elements.h
index 50a75ebc9be6baef0a047dd90e1b64755bb5e33a..d9376b2ae41eac18bf55a72a9448bfa18c962499 100644
--- a/src/elements.h
+++ b/src/elements.h
@@ -142,6 +142,14 @@ class ElementsAccessor {
   // the source JSObject or JSArray in source_holder. If the holder's backing
   // store is available, it can be passed in source and source_holder is
   // ignored.
+  virtual void CopyElements(
+      Handle<JSObject> source_holder,
+      uint32_t source_start,
+      ElementsKind source_kind,
+      Handle<FixedArrayBase> destination,
+      uint32_t destination_start,
+      int copy_size,
+      Handle<FixedArrayBase> source = Handle<FixedArrayBase>::null()) = 0;
   MUST_USE_RESULT virtual MaybeObject* CopyElements(
       JSObject* source_holder,
       uint32_t source_start,