[turbofan] Sanitize typing of Date builtins.

src/compiler/typer.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/typer.h"
 
 #include <iomanip>
 
 #include "src/base/flags.h"
 #include "src/bootstrapper.h"
@@ skipping 1318 matching lines @@
         case kMathAtan2:
         case kMathPow:
         case kMathMax:
         case kMathMin:
           return Type::Number();
         case kMathImul:
           return Type::Signed32();
         case kMathClz32:
           return t->cache_.kZeroToThirtyTwo;
         // Date functions.
+        case kDateGetDate:
+          return t->cache_.kJSDateDayType;
+        case kDateGetDay:
+          return t->cache_.kJSDateWeekdayType;
         case kDateGetFullYear:
-          return Type::Union(Type::Range(-271821.0, 275760.0, t->zone()),
-                             Type::NaN(), t->zone());
-        case kDateGetDate:
-          return Type::Union(Type::Range(1.0, 31.0, t->zone()), Type::NaN(),
+          return t->cache_.kJSDateYearType;
+        case kDateGetHours:
+          return t->cache_.kJSDateHourType;
+        case kDateGetMilliseconds:
+          return Type::Union(Type::Range(0.0, 999.0, t->zone()), Type::NaN(),
                              t->zone());
-        case kDateGetHours:
-          return Type::Union(Type::Range(0.0, 23.0, t->zone()), Type::NaN(),
-                             t->zone());
-        case kDateGetMilliseconds:
-          return Type::Union(Type::Range(0.0, 59.0, t->zone()), Type::NaN(),
-                             t->zone());
+        case kDateGetMinutes:
+          return t->cache_.kJSDateMinuteType;
         case kDateGetMonth:
-          return Type::Union(Type::Range(0.0, 11.0, t->zone()), Type::NaN(),
-                             t->zone());
+          return t->cache_.kJSDateMonthType;
         case kDateGetSeconds:
-          return Type::Union(Type::Range(0.0, 59.0, t->zone()), Type::NaN(),
-                             t->zone());
+          return t->cache_.kJSDateSecondType;
         case kDateGetTime:
           return t->cache_.kJSDateValueType;
         // Number functions.
         case kNumberParseInt:
           return t->cache_.kIntegerOrMinusZeroOrNaN;
         case kNumberToString:
           return Type::String();
         // String functions.
         case kStringCharCodeAt:
           return Type::Union(Type::Range(0, kMaxUInt16, t->zone()), Type::NaN(),
@@ skipping 354 matching lines @@
 Type* Typer::Visitor::TypeConstant(Handle<Object> value) {
   if (Type::IsInteger(*value)) {
     return Type::Range(value->Number(), value->Number(), zone());
   }
   return Type::Constant(value, zone());
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8