[turbofan] Create helper for inserting map checks

... in the case of unreliable receiver maps in JSCallReducer.

Change-Id: I68aea1f74fe98f3ac9bc7251f1af789f2cf9bc56
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/1532332Reviewed-by: Jaroslav Sevcik <jarin@chromium.org>
Commit-Queue: Georg Neis <neis@chromium.org>
Cr-Commit-Position: refs/heads/master@{#60458}

src/compiler/js-call-reducer.h

@@ -8,6 +8,7 @@
 #include "src/base/flags.h"
 #include "src/compiler/frame-states.h"
 #include "src/compiler/graph-reducer.h"
+#include "src/compiler/node-properties.h"
 #include "src/deoptimize-reason.h"
 
 namespace v8 {
@@ -28,6 +29,7 @@ struct FieldAccess;
 class JSGraph;
 class JSHeapBroker;
 class JSOperatorBuilder;
+class NodeProperties;
 class SimplifiedOperatorBuilder;
 
 // Performs strength reduction on {JSConstruct} and {JSCall} nodes,
@@ -188,6 +190,11 @@ class V8_EXPORT_PRIVATE JSCallReducer final : public AdvancedReducer {
 
   Reduction ReduceNumberConstructor(Node* node);
 
+  Node* InsertMapChecksIfUnreliableReceiverMaps(
+      NodeProperties::InferReceiverMapsResult result,
+      ZoneHandleSet<Map> const& receiver_maps, VectorSlotPair const& feedback,
+      Node* receiver, Node* effect, Node* control);
+
   // Returns the updated {to} node, and updates control and effect along the
   // way.
   Node* DoFilterPostCallbackWork(ElementsKind kind, Node** control,