vector-based ICs did not update type feedback counts correctly.

src/ic/ic-state.h

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef V8_IC_STATE_H_
 #define V8_IC_STATE_H_
 
 #include "src/macro-assembler.h"
 
 namespace v8 {
 namespace internal {
 
 
 const int kMaxKeyedPolymorphism = 4;
 
 
 class ICUtility : public AllStatic {
  public:
   // Clear the inline cache to initial state.
   static void Clear(Isolate* isolate, Address address,
                     ConstantPoolArray* constant_pool);
+  // Clear a vector-based inline cache to initial state.
+  static void Clear(Isolate* isolate, Code::Kind kind, Code* host,
+                    TypeFeedbackVector* vector, FeedbackVectorICSlot slot);
 };
 
 
 class CallICState FINAL BASE_EMBEDDED {
  public:
   explicit CallICState(ExtraICState extra_ic_state);
 
   enum CallType { METHOD, FUNCTION };
 
   CallICState(int argc, CallType call_type)
@@ skipping 197 matching lines @@
  private:
   class ContextualModeBits : public BitField<ContextualMode, 0, 1> {};
   STATIC_ASSERT(static_cast<int>(NOT_CONTEXTUAL) == 0);
 
   const ExtraICState state_;
 };
 }
 }
 
 #endif  // V8_IC_STATE_H_