[turbofan] Add inlined Array.prototype.pop support.

test/mjsunit/compiler/inlined-array-pop-getter1.js

Index: test/mjsunit/compiler/inlined-array-pop-getter1.js
diff --git a/test/mjsunit/regress/regress-3650-3.js b/test/mjsunit/compiler/inlined-array-pop-getter1.js
similarity index 52%
copy from test/mjsunit/regress/regress-3650-3.js
copy to test/mjsunit/compiler/inlined-array-pop-getter1.js
index 013e4df2834e20435982300303eb6260eb41b2be..8eb1c308a30824a4fc09d6e8211cd2a6ea040024 100644
--- a/test/mjsunit/regress/regress-3650-3.js
+++ b/test/mjsunit/compiler/inlined-array-pop-getter1.js
@@ -5,13 +5,14 @@
 // Flags: --allow-natives-syntax
 
 function foo(a) {
-  for (var d in a) {
-    delete a[1];
-  }
+  return a.pop();
 }
 
-foo([1,2,3]);
-foo([2,3,4]);
+var a = new Array(4);
+
+assertEquals(undefined, foo(a));
+assertEquals(undefined, foo(a));
 %OptimizeFunctionOnNextCall(foo);
-foo([1,2,3]);
-assertOptimized(foo);
+assertEquals(undefined, foo(a));
+Object.prototype.__defineGetter__(0, function() { return 1; });
+assertEquals(1, foo(a));