Avoid calling ToObject on JSFunction receiver arguments for Function.call and Function.apply.

src/mips/builtins-mips.cc

Index: src/mips/builtins-mips.cc
diff --git a/src/mips/builtins-mips.cc b/src/mips/builtins-mips.cc
index fdcb7c73c0ff65fdb67a111805c23e365c8bc32b..866efb7b2640434198e3c6fd97cfc512c9441f58 100644
--- a/src/mips/builtins-mips.cc
+++ b/src/mips/builtins-mips.cc
@@ -1223,8 +1223,7 @@ void Builtins::Generate_FunctionCall(MacroAssembler* masm) {
     __ Branch(&use_global_receiver, eq, a2, Operand(a3));
 
     __ GetObjectType(a2, a3, a3);
-    __ Branch(&convert_to_object, lt, a3, Operand(FIRST_JS_OBJECT_TYPE));
-    __ Branch(&shift_arguments, le, a3, Operand(LAST_JS_OBJECT_TYPE));
+    __ Branch(&shift_arguments, ge, a3, Operand(FIRST_JS_OBJECT_TYPE));

[Vyacheslav Egorov (Chromium), 2011/05/23 14:58:01]

add an assertion that LAST_TYPE == JS_FUNCTION_TYPE?

 
     __ bind(&convert_to_object);
     __ EnterInternalFrame();  // In order to preserve argument count.
@@ -1402,8 +1401,7 @@ void Builtins::Generate_FunctionApply(MacroAssembler* masm) {
   // Check if the receiver is already a JavaScript object.
   // a0: receiver
   __ GetObjectType(a0, a1, a1);
-  __ Branch(&call_to_object, lt, a1, Operand(FIRST_JS_OBJECT_TYPE));
-  __ Branch(&push_receiver, le, a1, Operand(LAST_JS_OBJECT_TYPE));
+  __ Branch(&push_receiver, ge, a1, Operand(FIRST_JS_OBJECT_TYPE));
 
   // Convert the receiver to a regular object.
   // a0: receiver