commit 241c024c10a8c1b5d7309299ef61f887363b00a0
author bmeurer <bmeurer@chromium.org> Fri Nov 18 06:30:57 2016
committer Commit bot <commit-bot@chromium.org> Fri Nov 18 06:31:42 2016
tree c80b55ca174f15ac637fb8067495f35e589172cd
parent 5beb5ee7e68e0e9925dcf49cf8626d7e82248bc6

[turbofan] Properly optimize instanceof (even in the presence of @@hasInstance).

This is the TurboFan counterpart of http://crrev.com/2504263004, but it
is a bit more involved, since in TurboFan we always inline the appropriate
call to the @@hasInstance handler, and by that we can optimize a lot more
patterns of instanceof than Crankshaft, and even yield fast instanceof
for custom @@hasInstance handlers (which we can now properly inline as
well).

Also we now properly optimize Function.prototype[@@hasInstance], even if
the right hand side of an instanceof doesn't have the Function.prototype
as its direct prototype.

For the baseline case, we still rely on the global protector cell, but
we can address that in a follow-up as well, and make it more robust in
general.

TEST=mjsunit/compiler/instanceof
BUG=v8:5640
R=yangguo@chromium.org

Review-Url: https://codereview.chromium.org/2511223003
Cr-Commit-Position: refs/heads/master@{#41092}