No longer use js builtins object as receiver for calls into JS.

src/messages.cc

 // Copyright 2011 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/v8.h"
 
 #include "src/api.h"
 #include "src/execution.h"
 #include "src/messages.h"
 #include "src/string-builder.h"
@@ skipping 286 matching lines @@
   if (arg->IsString()) {
     result_string = Handle<String>::cast(arg);
   } else {
     Handle<String> fmt_str = factory->InternalizeOneByteString(
         STATIC_CHAR_VECTOR("$noSideEffectToString"));
     Handle<JSFunction> fun = Handle<JSFunction>::cast(
         Object::GetProperty(isolate->js_builtins_object(), fmt_str)
             .ToHandleChecked());
 
     MaybeHandle<Object> maybe_result =
-        Execution::TryCall(fun, isolate->js_builtins_object(), 1, &arg);
+        Execution::TryCall(fun, factory->undefined_value(), 1, &arg);
     Handle<Object> result;
     if (!maybe_result.ToHandle(&result) || !result->IsString()) {
       return factory->InternalizeOneByteString(STATIC_CHAR_VECTOR("<error>"));
     }
     result_string = Handle<String>::cast(result);
   }
   MaybeHandle<String> maybe_result_string = MessageTemplate::FormatMessage(
       template_index, result_string, factory->empty_string(),
       factory->empty_string());
   if (!maybe_result_string.ToHandle(&result_string)) {
@@ skipping 136 matching lines @@
   if (obj->IsUndefined()) return default_value;
   if (!obj->IsString()) {
     ASSIGN_RETURN_ON_EXCEPTION(isolate, obj, Execution::ToString(isolate, obj),
                                String);
   }
   return Handle<String>::cast(obj);
 }
 
 }  // namespace internal
 }  // namespace v8