Fix handling of named interceptors in optimized code.

src/ast.cc

 // Copyright 2011 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 717 matching lines @@
   SharedFunctionInfo* info = target->shared();
   // If the number of formal parameters of the target function does
   // not match the number of arguments we're passing, we don't want to
   // deal with it. Otherwise, we can call it directly.
   return !target->NeedsArgumentsAdaption() ||
       info->formal_parameter_count() == arity;
 }
 
 
 bool Call::ComputeTarget(Handle<Map> type, Handle<String> name) {
+  // If there is an interceptor, we can't compute the target for
+  // a direct call.
+  if (type->has_named_interceptor()) return false;
+
   if (check_type_ == RECEIVER_MAP_CHECK) {
     // For primitive checks the holder is set up to point to the
     // corresponding prototype object, i.e. one step of the algorithm
     // below has been already performed.
     // For non-primitive checks we clear it to allow computing targets
     // for polymorphic calls.
     holder_ = Handle<JSObject>::null();
   }
   while (true) {
     LookupResult lookup(type->GetIsolate());
@@ skipping 463 matching lines @@
                        int pos)
     : label_(label),
       statements_(statements),
       position_(pos),
       compare_type_(NONE),
       compare_id_(AstNode::GetNextId(isolate)),
       entry_id_(AstNode::GetNextId(isolate)) {
 }
 
 } }  // namespace v8::internal