Merged r19440 into 3.24 branch.

Directly store the transition target on LookupResult in TransitionResult.

BUG=chromium:343964
LOG=N
R=hpayer@chromium.org

Review URL: https://codereview.chromium.org/179163003

git-svn-id: https://v8.googlecode.com/svn/branches/3.24@19551 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merged r19475, r19480, r19530 into 3.24 branch.

Fix Hydrogen bounds check elimination

Fix cornercase in r19475

Fix optimistic BCE to back off after deopt

BUG=chromium:344186,v8:3176
LOG=N
R=svenpanne@chromium.org

Review URL: https://codereview.chromium.org/179933004

git-svn-id: https://v8.googlecode.com/svn/branches/3.24@19555 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merged r19536 into 3.24 branch.

Don't eliminate loads with incompatible types or representations.

BUG=346343
LOG=N
R=jkummerow@chromium.org

Review URL: https://codereview.chromium.org/181403002

git-svn-id: https://v8.googlecode.com/svn/branches/3.24@19557 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merge remote-tracking branch 'upstream/3.24' into 3.24