[builtins] implement JSBuiltinReducer for ArrayIteratorNext()

src/compiler/js-builtin-reducer.h

Index: src/compiler/js-builtin-reducer.h
diff --git a/src/compiler/js-builtin-reducer.h b/src/compiler/js-builtin-reducer.h
index 76165f0c03da11f9b906ee7644d6185be210761a..ce903c22bb3260c4d9cfd172a289732466dfaa11 100644
--- a/src/compiler/js-builtin-reducer.h
+++ b/src/compiler/js-builtin-reducer.h
@@ -24,6 +24,7 @@ class CommonOperatorBuilder;
 struct FieldAccess;
 class JSGraph;
 class JSOperatorBuilder;
+class MachineOperatorBuilder;

[Benedikt Meurer, 2016/11/08 05:29:49]

Remove this unused forward declaration.

 class SimplifiedOperatorBuilder;
 class TypeCache;
 
@@ -45,6 +46,12 @@ class V8_EXPORT_PRIVATE JSBuiltinReducer final
   Reduction Reduce(Node* node) final;
 
  private:
+  Reduction ReduceArrayIterator(Node* node, IterationKind kind);
+  Reduction ReduceArrayIteratorNext(Node* node);
+  Reduction ReduceFastArrayIteratorNext(Handle<Map> iterator_map, Node* node,
+                                        IterationKind kind);
+  Reduction ReduceTypedArrayIteratorNext(Handle<Map> iterator_map, Node* node,
+                                         IterationKind kind);
   Reduction ReduceArrayPop(Node* node);
   Reduction ReduceArrayPush(Node* node);
   Reduction ReduceDateGetTime(Node* node);
@@ -100,6 +107,9 @@ class V8_EXPORT_PRIVATE JSBuiltinReducer final
   Node* ToNumber(Node* value);
   Node* ToUint32(Node* value);
 
+  bool CanTreatHoleAsUndefined(Handle<Map> receiver_map);

[Benedikt Meurer, 2016/11/08 05:29:49]

These helpers are unnecessary, see comments in .cc file.

+  bool CanTreatHoleAsUndefined(std::vector<Handle<Map>> const& receiver_maps);
+
   Flags flags() const { return flags_; }
   Graph* graph() const;
   Factory* factory() const;