[turbofan] Introduce initial support for TypedArrays.

src/compiler/js-builtin-reducer.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/js-builtin-reducer.h"
 
 #include "src/compiler/access-builder.h"
 #include "src/compiler/js-graph.h"
 #include "src/compiler/node-matchers.h"
 #include "src/compiler/node-properties.h"
@@ skipping 714 matching lines @@
         simplified()->LoadField(AccessBuilder::ForJSArrayBufferBitField()),
         receiver_buffer, effect, control);
     Node* check = graph()->NewNode(
         simplified()->NumberEqual(),
         graph()->NewNode(
             simplified()->NumberBitwiseAnd(), receiver_buffer_bitfield,
             jsgraph()->Constant(JSArrayBuffer::WasNeutered::kMask)),
         jsgraph()->ZeroConstant());
 
     // Default to zero if the {receiver}s buffer was neutered.
-    Node* value =
-        graph()->NewNode(common()->Select(MachineRepresentation::kTagged),
-                         check, receiver_length, jsgraph()->ZeroConstant());
+    Node* value = graph()->NewNode(
+        common()->Select(MachineRepresentation::kTagged, BranchHint::kTrue),
+        check, receiver_length, jsgraph()->ZeroConstant());
 
     ReplaceWithValue(node, value, effect, control);
     return Replace(value);
   }
   return NoChange();
 }
 
 Reduction JSBuiltinReducer::Reduce(Node* node) {
   Reduction reduction = NoChange();
   JSCallReduction r(node);
@@ skipping 164 matching lines @@
 }
 
 
 SimplifiedOperatorBuilder* JSBuiltinReducer::simplified() const {
   return jsgraph()->simplified();
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8