Now that ObjShrink landed, we have to load the initialized length from the slots vector instead of the object.
Created attachment 579266 [details] [diff] [review]
This patch adds MElements to read obj->elements. A large part of the patch is renaming "slots" to "elements" for MLoadElement, MStoreElement and MInitializedLength. Now "slots" refers to property slots (obj->slots) and "elements" refers to dense array elements (obj->elements).