[compiler] Mark JSStoreInArrayLiteral as needing a frame state

Bug: chromium:1161357
Change-Id: I7a4237fd682689742e67cd1f35e6ef91815386e0
Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/2611249
Auto-Submit: Georg Neis <neis@chromium.org>
Reviewed-by: Mythri Alle <mythria@chromium.org>
Commit-Queue: Mythri Alle <mythria@chromium.org>
Cr-Commit-Position: refs/heads/master@{#71943}

src/compiler/operator-properties.cc

@@ -193,16 +193,17 @@ bool OperatorProperties::HasFrameStateInput(const Operator* op) {
     case IrOpcode::kJSCloneObject:
 
     // Property access operations
+    case IrOpcode::kJSDeleteProperty:
+    case IrOpcode::kJSLoadGlobal:
     case IrOpcode::kJSLoadNamed:
     case IrOpcode::kJSLoadNamedFromSuper:
-    case IrOpcode::kJSStoreNamed:
     case IrOpcode::kJSLoadProperty:
-    case IrOpcode::kJSStoreProperty:
-    case IrOpcode::kJSLoadGlobal:
+    case IrOpcode::kJSStoreDataPropertyInLiteral:
+    case IrOpcode::kJSStoreInArrayLiteral:
     case IrOpcode::kJSStoreGlobal:
+    case IrOpcode::kJSStoreNamed:
     case IrOpcode::kJSStoreNamedOwn:
-    case IrOpcode::kJSStoreDataPropertyInLiteral:
-    case IrOpcode::kJSDeleteProperty:
+    case IrOpcode::kJSStoreProperty:
 
     // Conversions
     case IrOpcode::kJSToLength: