[Turbofan]: Add integer multiplication with overflow to typed lowering.

test/mjsunit/math-mul.js

Index: test/mjsunit/math-mul.js
diff --git a/test/mjsunit/math-mul.js b/test/mjsunit/math-mul.js
index 855c32f8a436186726ff574822d2911004be7ea6..027bb6024a26c5896c51507095a8e9c943fda3ab 100644
--- a/test/mjsunit/math-mul.js
+++ b/test/mjsunit/math-mul.js
@@ -2,12 +2,20 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+// Flags: --allow-natives-syntax
+
 function test(x, y) { return x * y; }
 
-assertEquals(8, test(2, 4));
+assertEquals(12, test(3, 4));
+assertEquals(16, test(4, 4));
+
+%OptimizeFunctionOnNextCall(test);
+assertEquals(27, test(9, 3));
+
 assertEquals(-0, test(-3, 0));
 assertEquals(-0, test(0, -0));
 
+
 const SMI_MAX = (1 << 29) - 1 + (1 << 29);  // Create without overflowing.
 const SMI_MIN = -SMI_MAX - 1;  // Create without overflowing.