[turbofan] Adds speculative opcodes for shift right.

test/mjsunit/compiler/turbo-number-feedback.js

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --allow-natives-syntax --turbo-type-feedback
 
 (function AddSubtractSmis() {
   function f0(a, b, c) {
     return a + b - c;
   }
@@ skipping 60 matching lines @@
 (function ShiftLeftNumbers() {
   function f5(a, b) {
     return a << b;
   }
 
   assertEquals(24, f5(3.3, 3.4));
   assertEquals(40, f5(5.1, 3.9));
   %OptimizeFunctionOnNextCall(f5);
   assertEquals(64, f5(4.9, 4.1));
 })();
+
+(function ShiftRightNumbers() {
+  function f6(a, b) {
+    return a >> b;
+  }
+
+  assertEquals(1, f6(8.3, 3.4));
+  assertEquals(-2, f6(-16.1, 3.9));
+  %OptimizeFunctionOnNextCall(f6);
+  assertEquals(0, f6(16.2, 5.1));
+})();
+
+(function ShiftRightLogicalNumbers() {
+  function f7(a, b) {
+    return a >>> b;
+  }
+
+  assertEquals(1, f7(8.3, 3.4));
+  assertEquals(536870910, f7(-16.1, 3.9));
+  %OptimizeFunctionOnNextCall(f7);
+  assertEquals(0, f7(16.2, 5.1));
+})();