[turbofan] Collect and use type feedback on ToNumber.

src/interpreter/interpreter-assembler.h

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef V8_INTERPRETER_INTERPRETER_ASSEMBLER_H_
 #define V8_INTERPRETER_INTERPRETER_ASSEMBLER_H_
 
 #include "src/allocation.h"
 #include "src/builtins/builtins.h"
 #include "src/code-stub-assembler.h"
@@ skipping 191 matching lines @@
   compiler::Node* Dispatch();
 
   // Dispatch to bytecode handler.
   compiler::Node* DispatchToBytecodeHandler(compiler::Node* handler) {
     return DispatchToBytecodeHandler(handler, BytecodeOffset());
   }
 
   // Dispatch bytecode as wide operand variant.
   void DispatchWide(OperandScale operand_scale);
 
+  // Convert any |object| to a Number and store the type feedback in
+  // |var_type_feedback|.
+  compiler::Node* ToNumberWithFeedback(compiler::Node* context,
+                                       compiler::Node* object,
+                                       Variable* var_type_feedback);
+
   // Truncate tagged |value| to word32 and store the type feedback in
   // |var_type_feedback|.
   compiler::Node* TruncateTaggedToWord32WithFeedback(
       compiler::Node* context, compiler::Node* value,
       Variable* var_type_feedback);
 
   // Abort with the given bailout reason.
   void Abort(BailoutReason bailout_reason);
   void AbortIfWordNotEqual(compiler::Node* lhs, compiler::Node* rhs,
                            BailoutReason bailout_reason);
@@ skipping 133 matching lines @@
   compiler::Node* stack_pointer_before_call_;
 
   DISALLOW_COPY_AND_ASSIGN(InterpreterAssembler);
 };
 
 }  // namespace interpreter
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_INTERPRETER_INTERPRETER_ASSEMBLER_H_