[turbofan] Fix typed lowering of JSConvertReceiver.

[turbofan] Fix typed lowering of JSConvertReceiver.

We lowered JSConvertReceiver using JSToObject, w/o connecting the
JSToObject to the control chain (which is fine since that ToObject
cannot throw). But then the lowering of the JSToObject would insert
an IfSuccess, which is immediately dead, since it is not used. This
was fine in a sense that it didn't seem to crash anything, but we
now want to do more aggressive checking if IfSuccess/IfException
nodes and so we need to fix this sloppyness in the lowerings.

R=mstarzinger@chromium.org

Committed: https://crrev.com/750202973b39d0c5c794478e394cf76f0e7d9d99
Cr-Commit-Position: refs/heads/master@{#38484}

[Benedikt Meurer, 2016-08-09 10:57:37]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-08-09 10:57:45]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Benedikt Meurer, 2016-08-09 10:58:12]

Hey Michi,

Here's the fix for JSConvertReceiver. Also fixes the operator properties for the
JSConvertReceiver operator.
Please take a look.

Thanks,
Benedikt

[commit-bot: I haz the power, 2016-08-09 11:21:16]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2016-08-09 11:21:17]

Dry run: This issue passed the CQ dry run.

[Michael Starzinger, 2016-08-09 11:22:17]

LGTM.

[Benedikt Meurer, 2016-08-09 11:25:28]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2016-08-09 11:25:39]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-08-09 11:27:41]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-08-09 11:27:59]

Description was changed from

==========
[turbofan] Fix typed lowering of JSConvertReceiver.

We lowered JSConvertReceiver using JSToObject, w/o connecting the
JSToObject to the control chain (which is fine since that ToObject
cannot throw). But then the lowering of the JSToObject would insert
an IfSuccess, which is immediately dead, since it is not used. This
was fine in a sense that it didn't seem to crash anything, but we
now want to do more aggressive checking if IfSuccess/IfException
nodes and so we need to fix this sloppyness in the lowerings.

R=mstarzinger@chromium.org
==========

to

==========
[turbofan] Fix typed lowering of JSConvertReceiver.

We lowered JSConvertReceiver using JSToObject, w/o connecting the
JSToObject to the control chain (which is fine since that ToObject
cannot throw). But then the lowering of the JSToObject would insert
an IfSuccess, which is immediately dead, since it is not used. This
was fine in a sense that it didn't seem to crash anything, but we
now want to do more aggressive checking if IfSuccess/IfException
nodes and so we need to fix this sloppyness in the lowerings.

R=mstarzinger@chromium.org

Committed: https://crrev.com/750202973b39d0c5c794478e394cf76f0e7d9d99
Cr-Commit-Position: refs/heads/master@{#38484}
==========

[commit-bot: I haz the power, 2016-08-09 11:28:00]

Patchset 1 (id:??) landed as
https://crrev.com/750202973b39d0c5c794478e394cf76f0e7d9d99
Cr-Commit-Position: refs/heads/master@{#38484}