CallIC must update type feedback info correctly.

src/ic.h

Index: src/ic.h
diff --git a/src/ic.h b/src/ic.h
index 606da14b8d6abff45ad908faeb18c902f1be75e9..72cc3f62c6b9248800a51cf5d3f0de17d4a45af9 100644
--- a/src/ic.h
+++ b/src/ic.h
@@ -175,6 +175,9 @@ class IC {
   static inline void SetTargetAtAddress(Address address,
                                         Code* target,
                                         ConstantPoolArray* constant_pool);
+  static void OnTypeFeedbackChanged(Isolate* isolate, Address address,
+                                    State old_state, State new_state,
+                                    bool target_remains_ic_stub);
   static void PostPatching(Address address, Code* target, Code* old_target);
 
   // Compute the handler either by compiling or by retrieving a cached version.
@@ -377,6 +380,10 @@ class CallIC: public IC {
 
   static void Clear(Isolate* isolate, Address address, Code* target,
                     ConstantPoolArray* constant_pool);
+
+ private:
+  void UpdateTypeFeedbackInfo(Object* old_feedback, Object* new_feedback);
+  inline IC::State FeedbackObjectToState(Object* feedback) const;
 };