Index: src/ia32/virtual-frame-ia32.cc |
=================================================================== |
--- src/ia32/virtual-frame-ia32.cc (revision 5332) |
+++ src/ia32/virtual-frame-ia32.cc (working copy) |
@@ -1143,9 +1143,9 @@ |
// and receiver on the stack. |
Handle<Code> ic(Builtins::builtin(Builtins::JSConstructCall)); |
// Duplicate the function before preparing the frame. |
- PushElementAt(arg_count + 1); |
+ PushElementAt(arg_count); |
Result function = Pop(); |
- PrepareForCall(arg_count + 1, arg_count + 1); // Spill args and receiver. |
+ PrepareForCall(arg_count + 1, arg_count + 1); // Spill function and args. |
function.ToRegister(edi); |
// Constructors are called with the number of arguments in register |