Move ArrayBuffer.prototype.slice implementation to C++

src/objects.h

Index: src/objects.h
diff --git a/src/objects.h b/src/objects.h
index ee86d157739d393f1a8ee3d1edc4e4918cd7c98a..8eff8bbccb6eec62f53efb102bfb7c6e70df4b4e 100644
--- a/src/objects.h
+++ b/src/objects.h
@@ -1437,6 +1437,11 @@ class Object {
   MUST_USE_RESULT static MaybeHandle<Object> ArraySpeciesConstructor(
       Isolate* isolate, Handle<Object> original_array);
 
+  // ES6 section 7.3.20 SpeciesConstructor ( O, defaultConstructor )
+  MUST_USE_RESULT static MaybeHandle<Object> SpeciesConstructor(
+      Isolate* isolate, Handle<JSReceiver> recv,
+      Handle<JSFunction> default_ctor);
+
   // Tries to convert an object to an array length. Returns true and sets the
   // output parameter if it succeeds.
   inline bool ToArrayLength(uint32_t* index);