Fix deserializer to understand direct pointers from code to cell payloads.

src/mips/assembler-mips-inl.h

Index: src/mips/assembler-mips-inl.h
===================================================================
--- src/mips/assembler-mips-inl.h	(revision 12224)
+++ src/mips/assembler-mips-inl.h	(working copy)
@@ -208,10 +208,7 @@
 
 JSGlobalPropertyCell* RelocInfo::target_cell() {
   ASSERT(rmode_ == RelocInfo::GLOBAL_PROPERTY_CELL);
-  Address address = Memory::Address_at(pc_);
-  Object* object = HeapObject::FromAddress(
-      address - JSGlobalPropertyCell::kValueOffset);
-  return reinterpret_cast<JSGlobalPropertyCell*>(object);
+  return JSGlobalPropertyCell::FromValueAddress(Memory::Address_at(pc_));
 }