Fix issue 221:...

src/runtime.cc

 // Copyright 2006-2008 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 4043 matching lines @@
   // Find where the 'eval' symbol is bound. It is unaliased only if
   // it is bound in the global context.
   StackFrameLocator locator;
   JavaScriptFrame* frame = locator.FindJavaScriptFrame(0);
   Handle<Context> context(Context::cast(frame->context()));
   int index;
   PropertyAttributes attributes;
   while (!context.is_null()) {
     receiver = context->Lookup(Factory::eval_symbol(), FOLLOW_PROTOTYPE_CHAIN,
                                &index, &attributes);
-    if (attributes != ABSENT) break;
+    // Stop search when eval is found or when the global context is
+    // reached.
+    if (attributes != ABSENT || context->IsGlobalContext()) break;
     if (context->is_function_context()) {
       context = Handle<Context>(Context::cast(context->closure()->context()));
     } else {
       context = Handle<Context>(context->previous());
     }
   }
 
+  // If eval could not be resolved, it has been deleted and we need to
+  // throw a reference error.
+  if (attributes == ABSENT) {
+    Handle<Object> name = Factory::eval_symbol();
+    Handle<Object> reference_error =
+        Factory::NewReferenceError("not_defined", HandleVector(&name, 1));
+    return Top::Throw(*reference_error);
+  }
+
   if (context->IsGlobalContext()) {
     // 'eval' is bound in the global context, but it may have been overwritten.
     // Compare it to the builtin 'GlobalEval' function to make sure.
     Handle<JSFunction> global_eval =
       GetBuiltinFunction(Heap::global_eval_symbol());
     if (global_eval.is_identical_to(callee)) {
       // A direct eval call.
       if (args[1]->IsString()) {
         CONVERT_ARG_CHECKED(String, source, 1);
         // A normal eval call on a string. Compile it and return the
@@ skipping 2009 matching lines @@
   } else {
     // Handle last resort GC and make sure to allow future allocations
     // to grow the heap without causing GCs (if possible).
     Counters::gc_last_resort_from_js.Increment();
     Heap::CollectAllGarbage();
   }
 }
 
 
 } }  // namespace v8::internal