Disable ArrayShift hydrogen support

src/hydrogen.cc

Index: src/hydrogen.cc
diff --git a/src/hydrogen.cc b/src/hydrogen.cc
index b296b9372379bf8bcfc91809d7750d0d9207c03d..40386aaaae26882cc865f7be039b93fbb627b552 100644
--- a/src/hydrogen.cc
+++ b/src/hydrogen.cc
@@ -7927,6 +7927,10 @@ bool HOptimizedGraphBuilder::TryInlineBuiltinMethodCall(
       return true;
     }
     case kArrayShift: {
+      // Something in here seems to be causing crbug.com/374838.
+      // TODO(bmeurer): Investigate the problem and re-enable this code.
+      return false;
+
       if (receiver_map.is_null()) return false;
       if (receiver_map->instance_type() != JS_ARRAY_TYPE) return false;
       ElementsKind kind = receiver_map->elements_kind();