[turbofan] Add length operand to LoadElement and StoreElement.

[turbofan] Add length operand to LoadElement and StoreElement.

This is preliminary work, required to properly support bounds checking for typed array loads/stores.

TEST=compiler-unittests,cctest
R=mstarzinger@chromium.org

Committed: https://code.google.com/p/v8/source/detail?r=24172

[Benedikt Meurer, 2014-09-24 08:49:56]

PTAL

[Michael Starzinger, 2014-09-24 08:59:12]

Looking good.

https://codereview.chromium.org/602563002/diff/1/src/compiler/generic-node.h
File src/compiler/generic-node.h (right):

https://codereview.chromium.org/602563002/diff/1/src/compiler/generic-node.h#...
src/compiler/generic-node.h:44: inline void RemoveInput(int index);
There is a copy of this method in js-generic-lowering.cc, now that you added
this one, please use it in JSGenericLowering::ReplaceWithCompareIC as well. Just
look for TODO(jarin) there.

Also, let's add a unit test for this to test-node.cc as well (just one unit test
would be good enough for me).

[Benedikt Meurer, 2014-09-24 09:24:48]

https://codereview.chromium.org/602563002/diff/1/src/compiler/generic-node.h
File src/compiler/generic-node.h (right):

https://codereview.chromium.org/602563002/diff/1/src/compiler/generic-node.h#...
src/compiler/generic-node.h:44: inline void RemoveInput(int index);
On 2014/09/24 08:59:12, Michael Starzinger wrote:
> There is a copy of this method in js-generic-lowering.cc, now that you added
> this one, please use it in JSGenericLowering::ReplaceWithCompareIC as well.
Just
> look for TODO(jarin) there.
> 
> Also, let's add a unit test for this to test-node.cc as well (just one unit
test
> would be good enough for me).

Done.

[Michael Starzinger, 2014-09-24 09:28:29]

LGTM.

[Benedikt Meurer, 2014-09-24 09:29:11]

Committed patchset #3 (id:40001) manually as 24172 (presubmit successful).