Avoid TLS accesses in Object::Lookup and Object::GetPrototype.

src/builtins.cc

Index: src/builtins.cc
diff --git a/src/builtins.cc b/src/builtins.cc
index e404b5107c78b1860ef7cdea308443ea61206dee..279594e0fe84fa7d13d4d6399382eb24115dcbec 100644
--- a/src/builtins.cc
+++ b/src/builtins.cc
@@ -1222,7 +1222,7 @@ static inline Object* FindHidden(Heap* heap,
                                  Object* object,
                                  FunctionTemplateInfo* type) {
   if (object->IsInstanceOf(type)) return object;
-  Object* proto = object->GetPrototype();
+  Object* proto = object->GetPrototype(heap->isolate());
   if (proto->IsJSObject() &&
       JSObject::cast(proto)->map()->is_hidden_prototype()) {
     return FindHidden(heap, proto, type);