Allow new-space JSFunction objects as constant-function properties.

src/x64/stub-cache-x64.cc

Index: src/x64/stub-cache-x64.cc
===================================================================
--- src/x64/stub-cache-x64.cc	(revision 9574)
+++ src/x64/stub-cache-x64.cc	(working copy)
@@ -421,7 +421,7 @@
   // -----------------------------------
   // Get the function and setup the context.
   JSFunction* function = optimization.constant_function();
-  __ Move(rdi, Handle<JSFunction>(function));
+  __ LoadHeapObject(rdi, Handle<JSFunction>(function));
   __ movq(rsi, FieldOperand(rdi, JSFunction::kContextOffset));
 
   // Pass the additional arguments.
@@ -1087,7 +1087,7 @@
                                         Register scratch1,
                                         Register scratch2,
                                         Register scratch3,
-                                        Object* value,
+                                        JSFunction* value,
                                         String* name,
                                         Label* miss) {
   // Check that the receiver isn't a smi.
@@ -1098,7 +1098,7 @@
                   scratch1, scratch2, scratch3, name, miss);
 
   // Return the constant value.
-  __ Move(rax, Handle<Object>(value));
+  __ LoadHeapObject(rax, Handle<JSFunction>(value));
   __ ret(0);
 }
 
@@ -2729,7 +2729,7 @@
 
 MaybeObject* LoadStubCompiler::CompileLoadConstant(JSObject* object,
                                                    JSObject* holder,
-                                                   Object* value,
+                                                   JSFunction* value,
                                                    String* name) {
   // ----------- S t a t e -------------
   //  -- rax    : receiver
@@ -2898,7 +2898,7 @@
 MaybeObject* KeyedLoadStubCompiler::CompileLoadConstant(String* name,
                                                         JSObject* receiver,
                                                         JSObject* holder,
-                                                        Object* value) {
+                                                        JSFunction* value) {
   // ----------- S t a t e -------------
   //  -- rax    : key
   //  -- rdx    : receiver