Move ArrayBuffer.prototype.slice implementation to C++

src/objects.h

Index: src/objects.h
diff --git a/src/objects.h b/src/objects.h
index d7a47cf2c91924bb84cea7efc44d97af66c39fcc..ae5d013e90b1f3d94dd48201c621967c09995c75 100644
--- a/src/objects.h
+++ b/src/objects.h
@@ -1438,6 +1438,11 @@ class Object {
   MUST_USE_RESULT static MaybeHandle<Object> ArraySpeciesConstructor(
       Isolate* isolate, Handle<Object> original_array);
 
+  // ES6 section 7.3.20 SpeciesConstructor ( O, defaultConstructor )
+  MUST_USE_RESULT static MaybeHandle<Object> SpeciesConstructor(
+      Isolate* isolate, Handle<JSReceiver> recv,
+      Handle<JSFunction> default_ctor);
+
   // Tries to convert an object to an array length. Returns true and sets the
   // output parameter if it succeeds.
   inline bool ToArrayLength(uint32_t* index);