[turbofan] Correctify FrameState before operations in JSTypeFeedbackSpecializer.
authortitzer <titzer@chromium.org>
Tue, 12 May 2015 12:57:32 +0000 (05:57 -0700)
committerCommit bot <commit-bot@chromium.org>
Tue, 12 May 2015 12:57:31 +0000 (12:57 +0000)
commit7f2636e0677193e916dca36a45f6ad6eb5e47efa
tree814ee7750d18a9a0ee23455410496df8a3f57980
parente5d5cac7d91eb369e599ae8efe65a710ad101b60
[turbofan] Correctify FrameState before operations in JSTypeFeedbackSpecializer.

Handle missing or improper FrameStates more gracefully.
Uses the operator properties to determine if the node contains a FrameState
before, then checks if a valid bailout id exists.

R=jarin@chromium.org
BUG=

Review URL: https://codereview.chromium.org/1135243002

Cr-Commit-Position: refs/heads/master@{#28364}
src/compiler/js-type-feedback.cc
src/compiler/js-type-feedback.h