Bug 470143 - Part 2/2 - TrackedOptimization changes for TypeOfNoSuchVar. r=shu

js/public/TrackedOptimizationInfo.h

@@ -144,6 +144,7 @@ namespace JS {
                                                                         \
     _(ICNameStub_ReadSlot)                                              \
     _(ICNameStub_CallGetter)                                            \
+    _(ICNameStub_TypeOfNoProperty)                                      \
                                                                         \
     _(CantInlineGeneric)                                                \
     _(CantInlineNoTarget)                                               \

js/src/doc/JITOptimizations/Outcomes.md

@@ -407,6 +407,11 @@ a scope chain object.
 An inline cache element which loads a bare variable name by calling a
 getter function on the global object.
 
+### ICNameStub_TypeOfNoProperty
+
+An inline cache element which loads undefined for the type
+of a missing property.
+
 ## Call Inlining Outcomes
 
 Optimization outcomes of attempts to inline function calls.

js/src/jit/IonCaches.cpp

@@ -4952,9 +4952,8 @@ NameIC::attachTypeOfNoProperty(JSContext* cx, HandleScript outerScript, IonScrip
     masm.bind(&failures);
     attacher.jumpNextStub(masm);
 
-    // TODO: ICNameStub_TypeOfNoProperty
     return linkAndAttachStub(cx, masm, attacher, ion, "generic",
-                             JS::TrackedOutcome::ICNameStub_ReadSlot);
+                             JS::TrackedOutcome::ICNameStub_TypeOfNoProperty);
 }
 
 static bool