[turbofan] Replace uninitialized JSConstruct nodes with SOFT deopt.

[turbofan] Replace uninitialized JSConstruct nodes with SOFT deopt.

Similar to JSCall, we can also replace uninitialized JSConstruct nodes
with SOFT deopts to ensure that we don't generate unnecessary dead code.
This for example shows up in the hot parts of the Node event emitter
currently where the generic code for handling events with 4 or more
parameters might not have been run, but we still generate most of the
code because the new Array call in the beginning is not turned into
a SOFT deopt immediately.

Drive-by-fix: Also refactor the BytecodeGraphBuilder's handling of
Construct bytecodes a bit to reduce the amount of code duplication.

BUG=v8:4551, v8:5267
R=jarin@chromium.org

Review-Url: https://codereview.chromium.org/2958253002
Cr-Commit-Position: refs/heads/master@{#46339}
Committed: https://chromium.googlesource.com/v8/v8/+/fd24deb0b2b540a30dc48b06d3cd62b356169003

[Benedikt Meurer, 2017-06-28 11:23:52]

The CQ bit was checked by bmeurer@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2017-06-28 11:23:59]

Dry run: CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-06-28 11:52:30]

The CQ bit was unchecked by commit-bot@chromium.org

[commit-bot: I haz the power, 2017-06-28 11:52:31]

Dry run: This issue passed the CQ dry run.

[Jarin, 2017-06-30 07:48:55]

lgtm

[Benedikt Meurer, 2017-06-30 07:49:15]

The CQ bit was checked by bmeurer@chromium.org

[commit-bot: I haz the power, 2017-06-30 07:49:17]

CQ is trying da patch.

Follow status at:
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2017-06-30 08:18:43]

CQ is committing da patch.

Bot data: {"patchset_id": 1, "attempt_start_ts": 1498808955426030, "parent_rev":
"2b1eb978c1c8d4ad32527105d497b193c20f816a", "commit_rev":
"fd24deb0b2b540a30dc48b06d3cd62b356169003"}

[commit-bot: I haz the power, 2017-06-30 08:18:50]

Description was changed from

==========
[turbofan] Replace uninitialized JSConstruct nodes with SOFT deopt.

Similar to JSCall, we can also replace uninitialized JSConstruct nodes
with SOFT deopts to ensure that we don't generate unnecessary dead code.
This for example shows up in the hot parts of the Node event emitter
currently where the generic code for handling events with 4 or more
parameters might not have been run, but we still generate most of the
code because the new Array call in the beginning is not turned into
a SOFT deopt immediately.

Drive-by-fix: Also refactor the BytecodeGraphBuilder's handling of
Construct bytecodes a bit to reduce the amount of code duplication.

BUG=v8:4551, v8:5267
R=jarin@chromium.org
==========

to

==========
[turbofan] Replace uninitialized JSConstruct nodes with SOFT deopt.

Similar to JSCall, we can also replace uninitialized JSConstruct nodes
with SOFT deopts to ensure that we don't generate unnecessary dead code.
This for example shows up in the hot parts of the Node event emitter
currently where the generic code for handling events with 4 or more
parameters might not have been run, but we still generate most of the
code because the new Array call in the beginning is not turned into
a SOFT deopt immediately.

Drive-by-fix: Also refactor the BytecodeGraphBuilder's handling of
Construct bytecodes a bit to reduce the amount of code duplication.

BUG=v8:4551, v8:5267
R=jarin@chromium.org

Review-Url: https://codereview.chromium.org/2958253002
Cr-Commit-Position: refs/heads/master@{#46339}
Committed:
https://chromium.googlesource.com/v8/v8/+/fd24deb0b2b540a30dc48b06d3cd62b3561...
==========

[commit-bot: I haz the power, 2017-06-30 08:18:51]

Committed patchset #1 (id:1) as
https://chromium.googlesource.com/v8/v8/+/fd24deb0b2b540a30dc48b06d3cd62b3561...