[turbofan] Osr value typing + dynamic type checks on entry.

src/compiler/js-frame-specialization.cc

Index: src/compiler/js-frame-specialization.cc
diff --git a/src/compiler/js-frame-specialization.cc b/src/compiler/js-frame-specialization.cc
index 769d615e4a4ddc5fba4d19f0b6152e1d1932df9f..c2c13d6a010f520acb9ce1ff0a93d64fc796ab97 100644
--- a/src/compiler/js-frame-specialization.cc
+++ b/src/compiler/js-frame-specialization.cc
@@ -28,7 +28,7 @@ Reduction JSFrameSpecialization::Reduce(Node* node) {
 Reduction JSFrameSpecialization::ReduceOsrValue(Node* node) {
   DCHECK_EQ(IrOpcode::kOsrValue, node->opcode());
   Handle<Object> value;
-  int const index = OpParameter<int>(node);
+  int index = OsrValueIndexOf(node->op());
   int const parameters_count = frame()->ComputeParametersCount() + 1;
   if (index == Linkage::kOsrContextSpillSlotIndex) {
     value = handle(frame()->context(), isolate());