[typedarrays] Move %TypedArray%.prototype.slice to C++

src/elements.h

Index: src/elements.h
diff --git a/src/elements.h b/src/elements.h
index 1a601b0222c8ed66839183672da38f3df22b7937..3fdef3d98792e8593534a801e9bfd32912a3d0b9 100644
--- a/src/elements.h
+++ b/src/elements.h
@@ -142,8 +142,11 @@ class ElementsAccessor {
   virtual uint32_t Unshift(Handle<JSArray> receiver,
                            Arguments* args, uint32_t unshift_size) = 0;
 
-  virtual Handle<JSArray> Slice(Handle<JSObject> receiver,
-                                uint32_t start, uint32_t end) = 0;
+  virtual Handle<JSObject> Slice(Handle<JSObject> receiver, uint32_t start,
+                                 uint32_t end) = 0;
+
+  virtual Handle<JSObject> Slice(Handle<JSObject> receiver, uint32_t start,
+                                 uint32_t end, Handle<JSObject> result) = 0;
 
   virtual Handle<JSArray> Splice(Handle<JSArray> receiver,
                                  uint32_t start, uint32_t delete_count,