[typedarrays] Move %TypedArray%.prototype.slice to C++

src/elements.h

Index: src/elements.h
diff --git a/src/elements.h b/src/elements.h
index d693092bfbea2ac3de3ed048a7d2e2a4d4cad25d..587cb4c87b40a83a9eb46c7c4b9e6c942f2509eb 100644
--- a/src/elements.h
+++ b/src/elements.h
@@ -142,8 +142,11 @@ class ElementsAccessor {
   virtual uint32_t Unshift(Handle<JSArray> receiver,
                            Arguments* args, uint32_t unshift_size) = 0;
 
-  virtual Handle<JSArray> Slice(Handle<JSObject> receiver,
-                                uint32_t start, uint32_t end) = 0;
+  virtual Handle<JSObject> Slice(Handle<JSObject> receiver, uint32_t start,
+                                 uint32_t end) = 0;
+
+  virtual Handle<JSObject> Slice(Handle<JSObject> receiver, uint32_t start,
+                                 uint32_t end, Handle<JSObject> result) = 0;
 
   virtual Handle<JSArray> Splice(Handle<JSArray> receiver,
                                  uint32_t start, uint32_t delete_count,