Add machinery to support arguments escaping to safe builtins

src/hydrogen.h

Index: src/hydrogen.h
diff --git a/src/hydrogen.h b/src/hydrogen.h
index b4e4074e37837f726dbdcf8b15e3c99c8422aa0d..59d258617b987a1d9081c01e59c782c865dea450 100644
--- a/src/hydrogen.h
+++ b/src/hydrogen.h
@@ -2293,6 +2293,13 @@ class HOptimizedGraphBuilder : public HGraphBuilder, public AstVisitor {
 
   // Visit a list of expressions from left to right, each in a value context.
   void VisitExpressions(ZoneList<Expression*>* exprs);
+  // Like VisitExpressions for the argument list for a call to function.
+  // If the function supports safe usage of arguments and args contain
+  // arguments, the caller must succeed in inlining the call as a builtin
+  // or bailout manually.
+  void VisitCallArguments(ZoneList<Expression*>* args,
+                          HValue* function,
+                          bool* args_contain_arguments);
 
   // Remove the arguments from the bailout environment and emit instructions
   // to push them as outgoing parameters.
@@ -2366,6 +2373,10 @@ class HOptimizedGraphBuilder : public HGraphBuilder, public AstVisitor {
   bool TryInlineIndirectCall(Handle<JSFunction> function,
                              Call* expr,
                              int arguments_count);
+  void InlineBuiltinWithArguments(Call* expr,
+                                  HValue* function,
+                                  Handle<Map> receiver_map,
+                                  int args_count_no_receiver);
   bool TryInlineBuiltinMethodCall(Call* expr,
                                   Handle<JSFunction> function,
                                   Handle<Map> receiver_map,