[turbofan] Add inlined Array.prototype.pop support.

[turbofan] Add inlined Array.prototype.pop support.

This adds a very first version of inlined Array.prototype.pop into
TurboFan optimized code. We currently limit the inlining to fast
object or smi elements, until the unclear situation around hole NaNs
is resolved and we have a clear semantics inside the compiler.

It's also probably overly defensive in when it's safe to inline
the call to Array.prototype.pop, but we can always extend that
later once we have sufficient trust in the implementation and see
an actual need to extend it.

BUG=v8:2229, v8:3952, v8:5267
R=epertoso@chromium.org

Committed: https://crrev.com/b8f475045c27536e2666a55d826c556ce4cdbb3e
Cr-Commit-Position: refs/heads/master@{#38578}

[Benedikt Meurer, 2016-08-11 12:34:59]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-08-11 12:35:05]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Benedikt Meurer, 2016-08-11 12:52:42]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-08-11 12:52:44]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[epertoso, 2016-08-11 12:55:55]

lgtm

[Benedikt Meurer, 2016-08-11 12:56:07]

The CQ bit was unchecked by bmeurer@chromium.org

[Benedikt Meurer, 2016-08-11 12:56:15]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2016-08-11 12:56:27]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-08-11 13:13:14]

Committed patchset #2 (id:20001)

[commit-bot: I haz the power, 2016-08-11 13:13:30]

Description was changed from

==========
[turbofan] Add inlined Array.prototype.pop support.

This adds a very first version of inlined Array.prototype.pop into
TurboFan optimized code. We currently limit the inlining to fast
object or smi elements, until the unclear situation around hole NaNs
is resolved and we have a clear semantics inside the compiler.

It's also probably overly defensive in when it's safe to inline
the call to Array.prototype.pop, but we can always extend that
later once we have sufficient trust in the implementation and see
an actual need to extend it.

BUG=v8:2229,v8:3952,v8:5267
R=epertoso@chromium.org
==========

to

==========
[turbofan] Add inlined Array.prototype.pop support.

This adds a very first version of inlined Array.prototype.pop into
TurboFan optimized code. We currently limit the inlining to fast
object or smi elements, until the unclear situation around hole NaNs
is resolved and we have a clear semantics inside the compiler.

It's also probably overly defensive in when it's safe to inline
the call to Array.prototype.pop, but we can always extend that
later once we have sufficient trust in the implementation and see
an actual need to extend it.

BUG=v8:2229,v8:3952,v8:5267
R=epertoso@chromium.org

Committed: https://crrev.com/b8f475045c27536e2666a55d826c556ce4cdbb3e
Cr-Commit-Position: refs/heads/master@{#38578}
==========

[commit-bot: I haz the power, 2016-08-11 13:13:31]

Patchset 2 (id:??) landed as
https://crrev.com/b8f475045c27536e2666a55d826c556ce4cdbb3e
Cr-Commit-Position: refs/heads/master@{#38578}