Pass undefined to JS builtins when called with implicit receiver.

src/hydrogen.cc

Index: src/hydrogen.cc
diff --git a/src/hydrogen.cc b/src/hydrogen.cc
index 6e520bd85acf933872d52855e3cfe7ec4ef45f45..849354e6f2b866435cc39bad847446fe6ddb963d 100644
--- a/src/hydrogen.cc
+++ b/src/hydrogen.cc
@@ -5884,10 +5884,11 @@ HEnvironment* HEnvironment::CopyForInlining(
       inner->SetValueAt(i, push);
     }
   }
-  // If the function we are inlining is a strict mode function, pass
-  // undefined as the receiver for function calls (instead of the
-  // global receiver).
-  if (function->strict_mode() && call_kind == CALL_AS_FUNCTION) {
+  // If the function we are inlining is a strict mode function or a
+  // builtin function, pass undefined as the receiver for function
+  // calls (instead of the global receiver).
+  if ((target->shared()->es5_native() || function->strict_mode()) &&
+      call_kind == CALL_AS_FUNCTION) {
     inner->SetValueAt(0, undefined);
   }
   inner->SetValueAt(arity + 1, outer->LookupContext());