Stage --harmony-species flag, enabling Symbol.species

This patch moves Symbol.species support to the "experimental JavaScript
features" flag. While @@species is still a performance hit, it doesn't seem
like it would make the web unusably slow; shipping would still have to
wait on fixing the performance regression, but staging this version should
yield valuable web compatibility information.

R=cbruni
BUG=v8:4093
LOG=Y

Review URL: https://codereview.chromium.org/1678143002

Cr-Commit-Position: refs/heads/master@{#33827}

src/flag-definitions.h

@@ -211,7 +211,6 @@ DEFINE_IMPLICATION(es_staging, move_object_start)
   V(harmony_simd, "harmony simd")                                            \
   V(harmony_do_expressions, "harmony do-expressions")                        \
   V(harmony_tailcalls, "harmony tail calls")                                 \
-  V(harmony_species, "harmony Symbol.species")                               \
   V(harmony_object_values_entries, "harmony Object.values / Object.entries") \
   V(harmony_object_own_property_descriptors,                                 \
     "harmony Object.getOwnPropertyDescriptors()")
@@ -219,6 +218,7 @@ DEFINE_IMPLICATION(es_staging, move_object_start)
 // Features that are complete (but still behind --harmony/es-staging flag).
 #define HARMONY_STAGED(V)                                   \
   V(harmony_regexp_lookbehind, "harmony regexp lookbehind") \
+  V(harmony_species, "harmony Symbol.species")              \
   V(harmony_unicode_regexps, "harmony unicode regexps")
 
 // Features that are shipping (turned on by default, but internal flag remains).

test/test262/test262.status

@@ -55,48 +55,6 @@
   # the iteration's results in a new generator; this postpones exceptions.
   'built-ins/Reflect/enumerate/return-abrupt-from-result': [FAIL],
 
-  # https://code.google.com/p/v8/issues/detail?id=4093
-  'built-ins/Array/Symbol.species/length': [FAIL],
-  'built-ins/Array/Symbol.species/symbol-species': [FAIL],
-  'built-ins/Array/Symbol.species/symbol-species-name': [FAIL],
-  'built-ins/ArrayBuffer/Symbol.species/length': [FAIL],
-  'built-ins/ArrayBuffer/Symbol.species/symbol-species': [FAIL],
-  'built-ins/ArrayBuffer/Symbol.species/symbol-species-name': [FAIL],
-  'built-ins/ArrayBuffer/prototype/slice/species-constructor-is-not-object': [FAIL],
-  'built-ins/ArrayBuffer/prototype/slice/species-returns-smaller-arraybuffer': [FAIL],
-  'built-ins/ArrayBuffer/prototype/slice/species-is-not-object': [FAIL],
-  'built-ins/ArrayBuffer/prototype/slice/species-is-not-constructor': [FAIL],
-  'built-ins/ArrayBuffer/prototype/slice/species-returns-larger-arraybuffer': [FAIL],
-  'built-ins/ArrayBuffer/prototype/slice/species-returns-not-arraybuffer': [FAIL],
-  'built-ins/ArrayBuffer/prototype/slice/species-returns-same-arraybuffer': [FAIL],
-  'built-ins/ArrayBuffer/prototype/slice/species': [FAIL],
-  'built-ins/Map/Symbol.species/length': [FAIL],
-  'built-ins/Map/Symbol.species/symbol-species': [FAIL],
-  'built-ins/Map/Symbol.species/symbol-species-name': [FAIL],
-  'built-ins/Promise/Symbol.species/prop-desc': [FAIL],
-  'built-ins/Promise/Symbol.species/return-value': [FAIL],
-  'built-ins/Promise/all/species-get-error': [PASS, FAIL],
-  'built-ins/Promise/prototype/then/ctor-custom': [FAIL],
-  'built-ins/Promise/prototype/then/ctor-throws': [FAIL],
-  'built-ins/Promise/race/species-get-error': [PASS, FAIL],
-  'built-ins/Promise/Symbol.species/length': [FAIL],
-  'built-ins/Promise/Symbol.species/symbol-species': [FAIL],
-  'built-ins/Promise/Symbol.species/symbol-species-name': [FAIL],
-  'built-ins/RegExp/Symbol.species/length': [FAIL],
-  'built-ins/RegExp/Symbol.species/symbol-species': [FAIL],
-  'built-ins/RegExp/Symbol.species/symbol-species-name': [FAIL],
-  'built-ins/Set/Symbol.species/length': [FAIL],
-  'built-ins/Set/Symbol.species/symbol-species': [FAIL],
-  'built-ins/Set/Symbol.species/symbol-species-name': [FAIL],
-  'built-ins/Symbol/species/basic': [FAIL],
-  'built-ins/Symbol/species/builtin-getter-name': [FAIL],
-  'built-ins/Symbol/species/subclassing': [FAIL],
-  'built-ins/TypedArray/Symbol.species/length': [FAIL],
-  'built-ins/TypedArray/Symbol.species/name': [FAIL],
-  'built-ins/TypedArray/Symbol.species/symbol-species': [FAIL],
-  'built-ins/TypedArray/Symbol.species/symbol-species-name': [FAIL],
-  'language/statements/class/subclass/builtin-objects/ArrayBuffer/regular-subclassing': [FAIL],
-
   # https://code.google.com/p/v8/issues/detail?id=4163
   'built-ins/GeneratorPrototype/next/context-constructor-invocation': [FAIL],
 
@@ -331,6 +289,7 @@
   'built-ins/ArrayBuffer/length-is-absent': [FAIL],
   'built-ins/ArrayBuffer/length-is-not-number': [FAIL],
   'built-ins/ArrayBuffer/positive-integer-length': [FAIL],
+  'language/statements/class/subclass/builtin-objects/ArrayBuffer/regular-subclassing': [FAIL],
 
   # https://bugs.chromium.org/p/v8/issues/detail?id=4633
   'built-ins/Promise/reject-function-name': [FAIL],
@@ -591,6 +550,7 @@
   'built-ins/String/prototype/includes/this-is-undefined-throws': [SKIP],
   'built-ins/String/prototype/repeat/this-is-undefined-throws': [SKIP],
   'built-ins/String/prototype/startsWith/this-is-undefined-throws': [SKIP],
+  'built-ins/Promise/prototype/then/ctor-custom': [SKIP],
   'built-ins/String/prototype/trim/15.5.4.20-1-1': [SKIP],
   'language/block-scope/leave/nested-block-let-declaration-only-shadows-outer-parameter-value-1': [SKIP],
   'language/block-scope/leave/nested-block-let-declaration-only-shadows-outer-parameter-value-2': [SKIP],