Merged r12531, r12562, r12563 into 3.12 branch.

test/cctest/test-api.cc

Index: test/cctest/test-api.cc
diff --git a/test/cctest/test-api.cc b/test/cctest/test-api.cc
index 8419e739477701fed3b1ecfcad1b46ae4b52a2cb..3bc393fdb032d0f647371a05b16c3187bc20c682 100644
--- a/test/cctest/test-api.cc
+++ b/test/cctest/test-api.cc
@@ -17182,3 +17182,13 @@ THREADED_TEST(Regress137496) {
   CompileRun("try { throw new Error(); } finally { gc(); }");
   CHECK(try_catch.HasCaught());
 }
+
+
+THREADED_TEST(Regress149912) {
+  v8::HandleScope scope;
+  LocalContext context;
+  Handle<FunctionTemplate> templ = FunctionTemplate::New();
+  AddInterceptor(templ, EmptyInterceptorGetter, EmptyInterceptorSetter);
+  context->Global()->Set(v8_str("Bug"), templ->GetFunction());
+  CompileRun("Number.prototype.__proto__ = new Bug; var x = 0; x.foo();");
+}