[compiler] Support Object.create(null) inlining in TF

src/runtime/runtime-array.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/runtime/runtime-utils.h"
 
 #include "src/arguments.h"
 #include "src/code-stubs.h"
 #include "src/conversions-inl.h"
 #include "src/elements.h"
@@ skipping 478 matching lines @@
     index = start_from;
   } else {
     index = len + start_from;
     if (index < 0) {
       index = 0;
     }
   }
 
   // If the receiver is not a special receiver type, and the length is a valid
   // element index, perform fast operation tailored to specific ElementsKinds.
-  if (object->map()->instance_type() > LAST_SPECIAL_RECEIVER_TYPE &&
-      len < kMaxUInt32 &&
+  if (!object->map()->IsSpecialReceiverMap() && len < kMaxUInt32 &&
       JSObject::PrototypeHasNoElements(isolate, JSObject::cast(*object))) {
     Handle<JSObject> obj = Handle<JSObject>::cast(object);
     ElementsAccessor* elements = obj->GetElementsAccessor();
     Maybe<bool> result = elements->IncludesValue(isolate, obj, search_element,
                                                  static_cast<uint32_t>(index),
                                                  static_cast<uint32_t>(len));
     MAYBE_RETURN(result, isolate->heap()->exception());
     return *isolate->factory()->ToBoolean(result.FromJust());
   }
 
@@ skipping 77 matching lines @@
     index = start_from;
   } else {
     index = len + start_from;
     if (index < 0) {
       index = 0;
     }
   }
 
   // If the receiver is not a special receiver type, and the length is a valid
   // element index, perform fast operation tailored to specific ElementsKinds.
-  if (object->map()->instance_type() > LAST_SPECIAL_RECEIVER_TYPE &&
-      len < kMaxUInt32 &&
+  if (!object->map()->IsSpecialReceiverMap() && len < kMaxUInt32 &&
       JSObject::PrototypeHasNoElements(isolate, JSObject::cast(*object))) {
     Handle<JSObject> obj = Handle<JSObject>::cast(object);
     ElementsAccessor* elements = obj->GetElementsAccessor();
     Maybe<int64_t> result = elements->IndexOfValue(isolate, obj, search_element,
                                                    static_cast<uint32_t>(index),
                                                    static_cast<uint32_t>(len));
     MAYBE_RETURN(result, isolate->heap()->exception());
     return *isolate->factory()->NewNumberFromInt64(result.FromJust());
   }
 
@@ skipping 33 matching lines @@
         isolate, spread,
         Execution::Call(isolate, spread_iterable_function,
                         isolate->factory()->undefined_value(), 1, &spread));
   }
 
   return *spread;
 }
 
 }  // namespace internal
 }  // namespace v8