Bug 1091015 - Inline allocation of Typed Objects in IonMonkey, r=nmatsakis,jandem.