add access checks to receivers on function callbacks

src/hydrogen.cc

Index: src/hydrogen.cc
diff --git a/src/hydrogen.cc b/src/hydrogen.cc
index 230939fe56ef6bc639b486f810928af1efaebfd1..bb3b2e8592f93bab32ca8e9623c27083e0f9bb81 100644
--- a/src/hydrogen.cc
+++ b/src/hydrogen.cc
@@ -8659,6 +8659,11 @@ bool HOptimizedGraphBuilder::TryInlineApiCall(Handle<JSFunction> function,
       receiver_maps->first(), &holder_lookup);
   if (holder_lookup == CallOptimization::kHolderNotFound) return false;
 
+  // Don't inline calls to receivers requiring accesschecks.
+  for (int i = 0; i < receiver_maps->length(); ++i) {
+    if (receiver_maps->at(i)->is_access_check_needed()) return false;
+  }
+
   if (FLAG_trace_inlining) {
     PrintF("Inlining api function ");
     function->ShortPrint();