Fix a bug in typed array speculation (bug 841462, r=jandem, a=bbajaj).
Bug 842262 - Keep ProfD == ProfLD on Android; r=glandium a=bajaj