Fix GC bug...

src/ic.cc

Index: src/ic.cc
===================================================================
--- src/ic.cc	(revision 3627)
+++ src/ic.cc	(working copy)
@@ -378,7 +378,7 @@
   return *delegate;
 }
 
-void CallIC::ReceiverToObject(Object* object) {
+void CallIC::ReceiverToObject(Handle<Object> object) {
   HandleScope scope;
   Handle<Object> receiver(object);
 
@@ -387,7 +387,7 @@
   StackFrameLocator locator;
   JavaScriptFrame* frame = locator.FindJavaScriptFrame(0);
   int index = frame->ComputeExpressionsCount() - (argc + 1);
-  frame->SetExpression(index, object->ToObject());
+  frame->SetExpression(index, *Factory::ToObject(object));
 }
 
 
@@ -401,7 +401,7 @@
   }
 
   if (object->IsString() || object->IsNumber() || object->IsBoolean()) {
-    ReceiverToObject(*object);
+    ReceiverToObject(object);
   }
 
   // Check if the name is trivially convertible to an index and get