Use [[DefineOwnProperty]] to put 'constructor' field on the protoype object.

src/runtime.cc

Index: src/runtime.cc
diff --git a/src/runtime.cc b/src/runtime.cc
index 48ff69f5d273071e0615743e2b2760f2abb71e70..215dada014f36c965583dc23acaaa8f0fd445cb8 100644
--- a/src/runtime.cc
+++ b/src/runtime.cc
@@ -6927,6 +6927,7 @@ static MaybeObject* Runtime_NewObject(Arguments args) {
 
   bool first_allocation = !shared->live_objects_may_exist();
   Handle<JSObject> result = Factory::NewJSObject(function);
+  RETURN_IF_EMPTY_HANDLE(result);

[Mads Ager (chromium), 2011/02/17 20:55:41]

Shouldn't we be able to create a test case for this. The change looks good, but
can we test it?

[antonm, 2011/02/18 10:40:28]

I quickly inspected the code and apparently now it's impossible to throw an
exception, so I cannot imagine a regression test for it right now.

Good news is I first added this check and got an expected exception and only
then changes semantics of constructor property installation.

Still I cannot think of a regression test for this line right now.

   // Delay setting the stub if inobject slack tracking is in progress.
   if (first_allocation && !shared->IsInobjectSlackTrackingInProgress()) {
     TrySettingInlineConstructStub(function);