[stubs] Fixing issues found by machine graph verifier in code stubs.

src/builtins/builtins-internal.cc

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/builtins/builtins-utils.h"
 #include "src/builtins/builtins.h"
 #include "src/code-stub-assembler.h"
 #include "src/interface-descriptors.h"
 #include "src/macro-assembler.h"
 
@@ skipping 57 matching lines @@
 
   CodeStubAssembler::ParameterMode mode = assembler.OptimalParameterMode();
   Node* length = assembler.UntagParameter(
       assembler.LoadFixedArrayBaseLength(source), mode);
 
   // Check if we can allocate in new space.
   ElementsKind kind = FAST_ELEMENTS;
   int max_elements = FixedArrayBase::GetMaxLengthForNewSpaceAllocation(kind);
   Label if_newspace(&assembler), if_oldspace(&assembler);
   assembler.Branch(
-      assembler.UintPtrLessThan(
-          length, assembler.IntPtrOrSmiConstant(max_elements, mode)),
+      assembler.UintPtrOrSmiLessThan(
+          length, assembler.IntPtrOrSmiConstant(max_elements, mode), mode),
       &if_newspace, &if_oldspace);
 
   assembler.Bind(&if_newspace);
   {
     Node* target = assembler.AllocateFixedArray(kind, length, mode);
     assembler.CopyFixedArrayElements(kind, source, target, length,
                                      SKIP_WRITE_BARRIER, mode);
     assembler.StoreObjectField(object, JSObject::kElementsOffset, target);
     assembler.Return(target);
   }
@@ skipping 216 matching lines @@
   // Allocate the actual FixedArray for the elements.
   Generate_NewArgumentsElements(&assembler, frame, length);
 
   // No rest parameters, return an empty FixedArray.
   assembler.Bind(&if_empty);
   assembler.Return(assembler.EmptyFixedArrayConstant());
 }
 
 }  // namespace internal
 }  // namespace v8