[test] Increase test coverage for Array constructor inlining.

[test] Increase test coverage for Array constructor inlining.

This still doesn't cover all the paths yet, since some paths are
impossible to trigger at this point due to the way the CanInlineCall
predicate works on the AllocationSite, which says multiple things:

 - In case of Array(len), the len was always a Smi so far.
 - In case of Array(...args), storing the args didn't change the
   elements kind.
 - In case of Array(len), the len was always less than the initial
   maximum fast element array size.

These conditions are tailored towards Crankshaft and don't really
make a lot of sense in the TurboFan world. We'd need more fine
grained protections, which we will achieve by refactoring the Array
constructor.

BUG=chromium:715404, v8:6262
TBR=machenbach@chromium.org

Review-Url: https://codereview.chromium.org/2843033002
Cr-Commit-Position: refs/heads/master@{#44901}
Committed: https://chromium.googlesource.com/v8/v8/+/23bb8fa9c035191f292826398780267a888b2228

[Benedikt Meurer, 2017-04-26 17:13:56]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-04-26 17:13:59]

Dry run: CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Benedikt Meurer, 2017-04-26 17:14:06]

The CQ bit was unchecked by bmeurer@chromium.org

[Benedikt Meurer, 2017-04-26 17:14:10]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2017-04-26 17:14:19]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-04-26 17:36:32]

CQ is committing da patch.

Bot data: {"patchset_id": 1, "attempt_start_ts": 1493226850570090, "parent_rev":
"a1a3090479cf8da10a2376f58ef2f33cc045eedb", "commit_rev":
"23bb8fa9c035191f292826398780267a888b2228"}

[commit-bot: I haz the power, 2017-04-26 17:36:39]

Description was changed from

==========
[test] Increase test coverage for Array constructor inlining.

This still doesn't cover all the paths yet, since some paths are
impossible to trigger at this point due to the way the CanInlineCall
predicate works on the AllocationSite, which says multiple things:

 - In case of Array(len), the len was always a Smi so far.
 - In case of Array(...args), storing the args didn't change the
   elements kind.
 - In case of Array(len), the len was always less than the initial
   maximum fast element array size.

These conditions are tailored towards Crankshaft and don't really
make a lot of sense in the TurboFan world. We'd need more fine
grained protections, which we will achieve by refactoring the Array
constructor.

BUG=chromium:715404,v8:6262
TBR=machenbach@chromium.org
==========

to

==========
[test] Increase test coverage for Array constructor inlining.

This still doesn't cover all the paths yet, since some paths are
impossible to trigger at this point due to the way the CanInlineCall
predicate works on the AllocationSite, which says multiple things:

 - In case of Array(len), the len was always a Smi so far.
 - In case of Array(...args), storing the args didn't change the
   elements kind.
 - In case of Array(len), the len was always less than the initial
   maximum fast element array size.

These conditions are tailored towards Crankshaft and don't really
make a lot of sense in the TurboFan world. We'd need more fine
grained protections, which we will achieve by refactoring the Array
constructor.

BUG=chromium:715404,v8:6262
TBR=machenbach@chromium.org

Review-Url: https://codereview.chromium.org/2843033002
Cr-Commit-Position: refs/heads/master@{#44901}
Committed:
https://chromium.googlesource.com/v8/v8/+/23bb8fa9c035191f292826398780267a888...
==========

[commit-bot: I haz the power, 2017-04-26 17:36:40]

Committed patchset #1 (id:1) as
https://chromium.googlesource.com/v8/v8/+/23bb8fa9c035191f292826398780267a888...

[Michael Achenbach, 2017-04-27 07:19:41]

lgtm, thanks, nice fuzzer inputs :)

Note, that line 821 in
https://storage.googleapis.com/chromium-v8/linux64_gcov_rel/10980eb56e65b9c54...
is still not covered. But I assume that's what you meant in the CL description.