X87: Use Cells to check prototype chain validity (disabled by default).
port
0179ec57975c5063bbecd98e11cdda77ddad8996 (r27846).
original commit message:
The cells are stored on prototypes (in their map's PrototypeInfo). When a
prototype object changes its map, then both its own validity cell and those
of all "downsstream" prototypes are invalidated; handlers for a given receiver
embed the currently valid cell for that receiver's prototype during their
compilation and check it on execution.
BUG=
Review URL: https://codereview.chromium.org/
1090803002
Cr-Commit-Position: refs/heads/master@{#27877}