Second part of fix of issue http://code.google.com/p/chromium/issues/detail?i...

webkit/port/bindings/v8/V8NPObject.cpp

 // Copyright (c) 2008, Google Inc.
 // All rights reserved.
 // 
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 // 
 //     * Redistributions of source code must retain the above copyright
 // notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
@@ skipping 86 matching lines @@
     case INVOKE_METHOD:
         if (npobject->_class->invoke) {
             v8::Handle<v8::String> function_name(v8::String::Cast(*args.Data()));
             NPIdentifier ident = getStringIdentifier(function_name);
             npobject->_class->invoke(npobject, ident, npArgs, argc, &result);
         }
         break;
     case INVOKE_DEFAULT:
         if (npobject->_class->invokeDefault)
             npobject->_class->invokeDefault(npobject, npArgs, argc, &result);
+        // The call might be a construct call on an NPObject.
+        // See http://code.google.com/p/chromium/issues/detail?id=3285
+        //
+        // TODO: when V8 passes in the correct flag args.is_construct_call_,
+        // make a separate NPN_Construct case.
+        else if (npobject->_class->construct)
+            npobject->_class->construct(npobject, npArgs, argc, &result);
         break;
     default:
         break;
     }
 
     for (int i=0; i < argc; i++)
         NPN_ReleaseVariantValue(&npArgs[i]);
     delete[] npArgs;
 
     // unwrap return values
@@ skipping 50 matching lines @@
         npobject->_class->getProperty) {
 
         NPVariant result;
         VOID_TO_NPVARIANT(result);
         if (!npobject->_class->getProperty(npobject, ident, &result))
             return v8::Handle<v8::Value>();
 
         v8::Handle<v8::Value> rv = convertNPVariantToV8Object(&result, npobject);
         NPN_ReleaseVariantValue(&result);
         return rv;
-    } else if (key->IsString() && npobject->_class->hasMethod && npobject->_class->hasMethod(npobject, ident)) {
+
+    } else if (key->IsString() &&
+               npobject->_class->hasMethod &&
+               npobject->_class->hasMethod(npobject, ident)) {
+
         PrivateIdentifier* id = static_cast<PrivateIdentifier*>(ident);
         v8::Persistent<v8::FunctionTemplate> desc = static_template_map.get(id);
         // Cache templates using identifier as the key.
         if (desc.IsEmpty()) {
             // Create a new template
             v8::Local<v8::FunctionTemplate> temp = v8::FunctionTemplate::New();
             temp->SetCallHandler(NPObjectMethodHandler, key);
             desc = v8::Persistent<v8::FunctionTemplate>::New(temp);
             static_template_map.set(id, desc);
         }
@@ skipping 172 matching lines @@
 void ForgetV8ObjectForNPObject(NPObject* object)
 {
     if (staticNpobjectMap.contains(object)) {
         v8::HandleScope scope;
         v8::Persistent<v8::Object> handle(staticNpobjectMap.get(object));
         WebCore::V8Proxy::SetDOMWrapper(handle, WebCore::V8ClassIndex::NPOBJECT, NULL);
         staticNpobjectMap.forget(object);
         NPN_ReleaseObject(object);
     }
 }