[turbofan] Extend undefined-to-number truncation to all oddballs.

src/compiler/type-hint-analyzer.cc

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/type-hint-analyzer.h"
 
 #include "src/assembler.h"
 #include "src/code-stubs.h"
 #include "src/compiler/type-hints.h"
 #include "src/ic/ic-state.h"
 
 namespace v8 {
 namespace internal {
 namespace compiler {
 
 namespace {
 
 // TODO(bmeurer): This detour via types is ugly.
 BinaryOperationHints::Hint ToBinaryOperationHint(Type* type) {
   if (type->Is(Type::None())) return BinaryOperationHints::kNone;
   if (type->Is(Type::SignedSmall())) return BinaryOperationHints::kSignedSmall;
   if (type->Is(Type::Signed32())) return BinaryOperationHints::kSigned32;
-  if (type->Is(Type::Number())) return BinaryOperationHints::kNumberOrUndefined;
+  if (type->Is(Type::Number())) return BinaryOperationHints::kNumberOrOddball;
   if (type->Is(Type::String())) return BinaryOperationHints::kString;
   return BinaryOperationHints::kAny;
 }
 
 CompareOperationHints::Hint ToCompareOperationHint(
     CompareICState::State state) {
   switch (state) {
     case CompareICState::UNINITIALIZED:
       return CompareOperationHints::kNone;
     case CompareICState::BOOLEAN:
       return CompareOperationHints::kBoolean;
     case CompareICState::SMI:
       return CompareOperationHints::kSignedSmall;
     case CompareICState::NUMBER:
-      return CompareOperationHints::kNumber;
+      return CompareOperationHints::kNumberOrOddball;
     case CompareICState::STRING:
       return CompareOperationHints::kString;
     case CompareICState::INTERNALIZED_STRING:
       return CompareOperationHints::kInternalizedString;
     case CompareICState::UNIQUE_NAME:
       return CompareOperationHints::kUniqueName;
     case CompareICState::RECEIVER:
     case CompareICState::KNOWN_RECEIVER:
       return CompareOperationHints::kReceiver;
     case CompareICState::GENERIC:
@@ skipping 83 matching lines @@
         // Ignore the remaining code objects.
         break;
     }
   }
   return new (zone()) TypeHintAnalysis(infos, zone());
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8