[turbofan] Fix receiver binding for inlined callees.

src/compiler/js-intrinsic-lowering.cc

Index: src/compiler/js-intrinsic-lowering.cc
diff --git a/src/compiler/js-intrinsic-lowering.cc b/src/compiler/js-intrinsic-lowering.cc
index aeae0c60ca7db55250e4330761b7a24fa9c6b941..c81433858175e1b296615ef3d7fdc851c23b2df8 100644
--- a/src/compiler/js-intrinsic-lowering.cc
+++ b/src/compiler/js-intrinsic-lowering.cc
@@ -531,7 +531,7 @@ Reduction JSIntrinsicLowering::ReduceToObject(Node* node) {
 
 
 Reduction JSIntrinsicLowering::ReduceCallFunction(Node* node) {
-  CallRuntimeParameters params = OpParameter<CallRuntimeParameters>(node->op());
+  CallRuntimeParameters params = CallRuntimeParametersOf(node->op());
   size_t arity = params.arity();
   Node* function = node->InputAt(static_cast<int>(arity - 1));
   while (--arity != 0) {
@@ -540,9 +540,9 @@ Reduction JSIntrinsicLowering::ReduceCallFunction(Node* node) {
   }
   node->ReplaceInput(0, function);
   NodeProperties::ChangeOp(
-      node,
-      javascript()->CallFunction(params.arity(), NO_CALL_FUNCTION_FLAGS, STRICT,
-                                 VectorSlotPair(), ALLOW_TAIL_CALLS));
+      node, javascript()->CallFunction(
+                params.arity(), NO_CALL_FUNCTION_FLAGS, STRICT,
+                VectorSlotPair(), ConvertReceiverMode::kAny, ALLOW_TAIL_CALLS));
   return Changed(node);
 }