[turbofan] Properly handle dictionary maps in the prototype chain.

[turbofan] Properly handle dictionary maps in the prototype chain.

Dictionary prototypes don't have stable maps, but still don't matter for
element access. Generalized the JSNativeContextSpecialization a bit to
handle everything that Crankshaft can handle in this regard.

R=jarin@chromium.org
BUG=chromium:616709
Committed: https://crrev.com/1c7bdc7f6f4d9512f4982590bd949f265ee9c8c3
Cr-Commit-Position: refs/heads/master@{#37019}

[Benedikt Meurer, 2016-06-16 04:54:02]

Hey Jaro,

Here's the fix for the prototype chain dictionary maps.
Please take a look.

Thanks,
Benedikt

[Jarin, 2016-06-16 05:10:25]

lgtm

[Benedikt Meurer, 2016-06-16 05:11:36]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2016-06-16 05:11:38]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-06-16 05:11:40]

This CL has an open dependency (Issue 2073683002 Patch 1). Please resolve the
dependency and try again.
If you are sure that there is no real dependency, please use one of the options
listed in https://goo.gl/9Es4OR to land the CL.

[Benedikt Meurer, 2016-06-16 05:12:19]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-06-16 05:12:29]

Dry run: CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/2067423003/1

[Benedikt Meurer, 2016-06-16 05:22:15]

The CQ bit was unchecked by bmeurer@chromium.org

[Benedikt Meurer, 2016-06-16 05:22:20]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2016-06-16 05:22:29]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/2067423003/1

[commit-bot: I haz the power, 2016-06-16 05:24:40]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-06-16 05:24:43]

CQ bit was unchecked

[commit-bot: I haz the power, 2016-06-16 05:27:25]

Description was changed from

==========
[turbofan] Properly handle dictionary maps in the prototype chain.

Dictionary prototypes don't have stable maps, but still don't matter for
element access. Generalized the JSNativeContextSpecialization a bit to
handle everything that Crankshaft can handle in this regard.

R=jarin@chromium.org
BUG=chromium:616709
==========

to

==========
[turbofan] Properly handle dictionary maps in the prototype chain.

Dictionary prototypes don't have stable maps, but still don't matter for
element access. Generalized the JSNativeContextSpecialization a bit to
handle everything that Crankshaft can handle in this regard.

R=jarin@chromium.org
BUG=chromium:616709

Committed: https://crrev.com/1c7bdc7f6f4d9512f4982590bd949f265ee9c8c3
Cr-Commit-Position: refs/heads/master@{#37019}
==========

[commit-bot: I haz the power, 2016-06-16 05:27:26]

Patchset 1 (id:??) landed as
https://crrev.com/1c7bdc7f6f4d9512f4982590bd949f265ee9c8c3
Cr-Commit-Position: refs/heads/master@{#37019}

[Benedikt Meurer, 2016-06-16 09:14:42]

A revert of this CL (patchset #1 id:1) has been created in
https://codereview.chromium.org/2076493002/ by bmeurer@chromium.org.

The reason for reverting is: As discussed offline with Toon, this is not the
correct fix here..