Merged r19862 into 3.23 branch.

Use intrinsics for builtin ArrayBuffer property accesses

BUG=chromium:351787
LOG=N
R=yangguo@chromium.org

Review URL: https://codereview.chromium.org/197713004

git-svn-id: https://v8.googlecode.com/svn/branches/3.23@19865 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merged r19798, r19896 into 3.23 branch.

Fix bug in constant folding object comparisons.

Correctly retain argument value when deopting from Math.round on x64.

BUG=351624
LOG=N
R=machenbach@chromium.org

Review URL: https://codereview.chromium.org/196383025

git-svn-id: https://v8.googlecode.com/svn/branches/3.23@19974 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merged r19693, r19694 into 3.23 branch.

Fix HConstants with Smi-ranged HeapNumber values

Fix for failing asserts in HBoundsCheck code generation on x64: use proper cmp operation width instead of asserting that Integer32 values should be zero extended. Similar to chromium:345820.

BUG=349878,349465
LOG=N
R=machenbach@chromium.org

Review URL: https://codereview.chromium.org/198503004

git-svn-id: https://v8.googlecode.com/svn/branches/3.23@19982 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merged r18548 into 3.23 branch.

Fix of Hydrogen environment building for function "apply" calls.

R=machenbach@chromium.org
BUG=v8:3084
LOG=N

Review URL: https://codereview.chromium.org/201563004

git-svn-id: https://v8.googlecode.com/svn/branches/3.23@19987 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merge r19847 and r19893 to 3.23 branch.

R=verwaest@chromium.org
BUG=350884
LOG=N

Review URL: https://codereview.chromium.org/196413031

git-svn-id: https://v8.googlecode.com/svn/branches/3.23@20060 ce2b1a6d-e550-0410-aec6-3dcde31c8c00
Merge remote-tracking branch 'upstream/3.23' into 3.23