[typedarray] Really check that the JSTypedArray::length is always a Smi.

[typedarray] Really check that the JSTypedArray::length is always a Smi.

Even after https://codereview.chromium.org/2371963002 we might still
create JSTypedArray instances where the length field is a HeapNumber,
especially when TurboFan no longer canonicalizes all values in Smi
range to Smis (which we try to achieve currently). This adds strict
checking for this fact now.

R=mstarzinger@chromium.org

Committed: https://crrev.com/bda4774c373738cf7489065d0240f1bc44436176
Cr-Commit-Position: refs/heads/master@{#39771}

[Benedikt Meurer, 2016-09-27 12:55:31]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-09-27 12:55:33]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Benedikt Meurer, 2016-09-27 12:56:36]

Description was changed from

==========
[typedarray] Really ensure that the JSTypedArray::length is always a Smi.

Even after https://codereview.chromium.org/2371963002 we might still
create JSTypedArray instances where the length field is a HeapNumber,
especially when TurboFan no longer canonicalizes all values in Smi
range to Smis (which we try to achieve currently).

R=mstarzinger@chromium.org
==========

to

==========
[typedarray] Really check that the JSTypedArray::length is always a Smi.

Even after https://codereview.chromium.org/2371963002 we might still
create JSTypedArray instances where the length field is a HeapNumber,
especially when TurboFan no longer canonicalizes all values in Smi
range to Smis (which we try to achieve currently). This adds strict
checking for this fact now.

R=mstarzinger@chromium.org
==========

[Michael Starzinger, 2016-09-27 12:58:15]

LGTM.

[Benedikt Meurer, 2016-09-27 13:09:06]

The CQ bit was unchecked by bmeurer@chromium.org

[Benedikt Meurer, 2016-09-27 13:09:12]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2016-09-27 13:09:23]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-09-27 13:23:13]

Description was changed from

==========
[typedarray] Really check that the JSTypedArray::length is always a Smi.

Even after https://codereview.chromium.org/2371963002 we might still
create JSTypedArray instances where the length field is a HeapNumber,
especially when TurboFan no longer canonicalizes all values in Smi
range to Smis (which we try to achieve currently). This adds strict
checking for this fact now.

R=mstarzinger@chromium.org
==========

to

==========
[typedarray] Really check that the JSTypedArray::length is always a Smi.

Even after https://codereview.chromium.org/2371963002 we might still
create JSTypedArray instances where the length field is a HeapNumber,
especially when TurboFan no longer canonicalizes all values in Smi
range to Smis (which we try to achieve currently). This adds strict
checking for this fact now.

R=mstarzinger@chromium.org
==========

[commit-bot: I haz the power, 2016-09-27 13:23:14]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-09-27 13:23:34]

Description was changed from

==========
[typedarray] Really check that the JSTypedArray::length is always a Smi.

Even after https://codereview.chromium.org/2371963002 we might still
create JSTypedArray instances where the length field is a HeapNumber,
especially when TurboFan no longer canonicalizes all values in Smi
range to Smis (which we try to achieve currently). This adds strict
checking for this fact now.

R=mstarzinger@chromium.org
==========

to

==========
[typedarray] Really check that the JSTypedArray::length is always a Smi.

Even after https://codereview.chromium.org/2371963002 we might still
create JSTypedArray instances where the length field is a HeapNumber,
especially when TurboFan no longer canonicalizes all values in Smi
range to Smis (which we try to achieve currently). This adds strict
checking for this fact now.

R=mstarzinger@chromium.org

Committed: https://crrev.com/bda4774c373738cf7489065d0240f1bc44436176
Cr-Commit-Position: refs/heads/master@{#39771}
==========

[commit-bot: I haz the power, 2016-09-27 13:23:35]

Patchset 1 (id:??) landed as
https://crrev.com/bda4774c373738cf7489065d0240f1bc44436176
Cr-Commit-Position: refs/heads/master@{#39771}