[turbofan] Introduce new JSCallWithArrayLike operator.

test/mjsunit/messages.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --stack-size=100 --harmony
 
 function test(f, expected, type) {
   try {
     f();
   } catch (e) {
@@ skipping 10 matching lines @@
 test(function() {
   var o = {};
   o.__proto__ = o;
 }, "Cyclic __proto__ value", Error);
 
 
 // === TypeError ===
 
 // kApplyNonFunction
 test(function() {
-  Function.prototype.apply.call(1, []);
+  Reflect.apply(1, []);
 }, "Function.prototype.apply was called on 1, which is a number " +
    "and not a function", TypeError);
 
 // kArrayFunctionsOnFrozen
 test(function() {
   var a = [1, 2];
   Object.freeze(a);
   a.splice(1, 1, [1]);
 }, "Cannot modify frozen array elements", TypeError);
 
@@ skipping 407 matching lines @@
   Number(1).toString(100);
 }, "toString() radix argument must be between 2 and 36", RangeError);
 
 
 // === URIError ===
 
 // kURIMalformed
 test(function() {
   decodeURI("%%");
 }, "URI malformed", URIError);