Remove CallFunctionStub, always call through the Call builtin (also from CallIC)

test/mjsunit/regress/regress-4525.js

Index: test/mjsunit/regress/regress-4525.js
diff --git a/test/mjsunit/regress/regress-4525.js b/test/mjsunit/regress/regress-4525.js
index dd2de701f7f4ac21f1cee64ea34513cb53c6139a..b962dc07ca04b11fd09881f33174461b42cac24e 100644
--- a/test/mjsunit/regress/regress-4525.js
+++ b/test/mjsunit/regress/regress-4525.js
@@ -27,13 +27,11 @@ function check(x, value, type) {
 var o = construct(receiver);
 check(o.bar.call(123), Object(123), Number);
 check(o.bar.call("a"), Object("a"), String);
-// TODO(4526): Should convert to global receiver instead of throwing TypeError.
-// check(o.bar.call(undefined), this, Object);
-// check(o.bar.call(null), this, Object);
+check(o.bar.call(undefined), this, Object);
+check(o.bar.call(null), this, Object);
 
 %OptimizeFunctionOnNextCall(o.bar);
 check(o.bar.call(456), Object(456), Number);
 check(o.bar.call("b"), Object("b"), String);
-// TODO(4526): Should convert to global receiver instead of throwing TypeError.
-// check(o.bar.call(undefined), this, Object);
-// check(o.bar.call(null), this, Object);
+check(o.bar.call(undefined), this, Object);
+check(o.bar.call(null), this, Object);