[ic] Use validity cells to protect keyed element stores against object's prototype chain modificati…

src/ic/accessor-assembler-impl.h

Index: src/ic/accessor-assembler-impl.h
diff --git a/src/ic/accessor-assembler-impl.h b/src/ic/accessor-assembler-impl.h
index 01e9bf18203ad669aeff6a4977ff19f459e2c1b3..41b6e06a43eef96a8082119e56099e0ccc4b9c71 100644
--- a/src/ic/accessor-assembler-impl.h
+++ b/src/ic/accessor-assembler-impl.h
@@ -81,12 +81,12 @@ class AccessorAssemblerImpl : public CodeStubAssembler {
     Node* value;
   };
 
-  void HandleStoreICHandlerCase(const StoreICParameters* p, Node* handler,
-                                Label* miss);
-
- private:
   enum ElementSupport { kOnlyProperties, kSupportElements };
+  void HandleStoreICHandlerCase(
+      const StoreICParameters* p, Node* handler, Label* miss,
+      ElementSupport support_elements = kOnlyProperties);
 
+ private:
   // Stub generation entry points.
 
   void LoadIC(const LoadICParameters* p);
@@ -142,6 +142,9 @@ class AccessorAssemblerImpl : public CodeStubAssembler {
 
   // StoreIC implementation.
 
+  void HandleStoreICElementHandlerCase(const StoreICParameters* p,
+                                       Node* handler, Label* miss);
+
   void HandleStoreICProtoHandler(const StoreICParameters* p, Node* handler,
                                  Label* miss);
   // If |transition| is nullptr then the normal field store is generated or