[ic] Handle JSArray::length in CodeStubAssembler::CallGetterIfAccessor.

[ic] Handle JSArray::length in CodeStubAssembler::CallGetterIfAccessor.

When accessing JSArray::length property from GenericPropertyLoad
(i.e. via a megamorphic KEYED_LOAD_IC), we'd always go to the runtime
at this point, because the CallGetterIfAccessor method didn't support
AccessorInfos at all. Now there's initial support for JSArray::length,
which reduces the number of %KeyedGetProperty calls we see in the
Speedometer/EmberJS test by 5000.

Also-By: ishell@chromium.org
BUG=v8:5269
TBR=ishell@chromium.org

Review-Url: https://codereview.chromium.org/2842373005
Cr-Commit-Position: refs/heads/master@{#44957}
Committed: https://chromium.googlesource.com/v8/v8/+/0be5596cdb2becaf746a2de3564cac9547be4874

[Benedikt Meurer, 2017-04-28 03:51:49]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-04-28 03:51:53]

Dry run: CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Benedikt Meurer, 2017-04-28 03:52:02]

The CQ bit was unchecked by bmeurer@chromium.org

[Benedikt Meurer, 2017-04-28 03:52:05]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2017-04-28 03:52:13]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-04-28 04:20:23]

CQ is committing da patch.

Bot data: {"patchset_id": 1, "attempt_start_ts": 1493351525975300, "parent_rev":
"874d77b9cb3221a720674ebfbabe61301a077ff3", "commit_rev":
"0be5596cdb2becaf746a2de3564cac9547be4874"}

[commit-bot: I haz the power, 2017-04-28 04:20:28]

Description was changed from

==========
[ic] Handle JSArray::length in CodeStubAssembler::CallGetterIfAccessor.

When accessing JSArray::length property from GenericPropertyLoad
(i.e. via a megamorphic KEYED_LOAD_IC), we'd always go to the runtime
at this point, because the CallGetterIfAccessor method didn't support
AccessorInfos at all. Now there's initial support for JSArray::length,
which reduces the number of %KeyedGetProperty calls we see in the
Speedometer/EmberJS test by 5000.

Also-By: ishell@chromium.org
BUG=v8:5269
TBR=ishell@chromium.org
==========

to

==========
[ic] Handle JSArray::length in CodeStubAssembler::CallGetterIfAccessor.

When accessing JSArray::length property from GenericPropertyLoad
(i.e. via a megamorphic KEYED_LOAD_IC), we'd always go to the runtime
at this point, because the CallGetterIfAccessor method didn't support
AccessorInfos at all. Now there's initial support for JSArray::length,
which reduces the number of %KeyedGetProperty calls we see in the
Speedometer/EmberJS test by 5000.

Also-By: ishell@chromium.org
BUG=v8:5269
TBR=ishell@chromium.org

Review-Url: https://codereview.chromium.org/2842373005
Cr-Commit-Position: refs/heads/master@{#44957}
Committed:
https://chromium.googlesource.com/v8/v8/+/0be5596cdb2becaf746a2de3564cac9547b...
==========

[commit-bot: I haz the power, 2017-04-28 04:20:28]

Committed patchset #1 (id:1) as
https://chromium.googlesource.com/v8/v8/+/0be5596cdb2becaf746a2de3564cac9547b...