[runtime] Fix ES6 9.2.1 [[Call]] when encountering a classConstructor.

src/x64/code-stubs-x64.cc

 // Copyright 2013 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #if V8_TARGET_ARCH_X64
 
 #include "src/bootstrapper.h"
 #include "src/code-stubs.h"
 #include "src/codegen.h"
 #include "src/ic/handler-compiler.h"
@@ skipping 2090 matching lines @@
     __ movp(rax, args.GetReceiverOperand());
 
     __ JumpIfSmi(rax, &wrap);
 
     __ CmpObjectType(rax, FIRST_SPEC_OBJECT_TYPE, rcx);
     __ j(below, &wrap);
 
     __ bind(&cont);
   }
 
+  {

[Benedikt Meurer, 2015/10/22 11:08:05]

You need to do the same in the CallFunctionStub.

+    Label non_classConstructor;
+    __ movp(rdx, FieldOperand(rdi, JSFunction::kSharedFunctionInfoOffset));
+    // Check whether the current function is a classConstructor
+    __ testb(FieldOperand(rdx, SharedFunctionInfo::kIsArrowByteOffset),
+             Immediate(FunctionKind::kClassConstructor));
+    __ j(zero, &non_classConstructor);

[Benedikt Meurer, 2015/10/22 11:08:05]

You can use Label::kNear here.

[Camillo Bruni, 2015/11/03 16:05:27]

done

+    // In the case of a classConstructor, let the CallFunction builtin handle
+    // throwing a TypeError.
+    __ Jump(masm->isolate()->builtins()->CallFunction(),
+            RelocInfo::CODE_TARGET);
+    __ bind(&non_classConstructor);
+  }
+
   __ InvokeFunction(rdi, actual, JUMP_FUNCTION, NullCallWrapper());

[Benedikt Meurer, 2015/10/22 11:08:05]

Please check if it's viable to use __Jump(builtin->CallFunction()) here.

 
   __ bind(&slow);
   EmitSlowCase(masm, &args, argc);
 
   if (CallAsMethod()) {
     __ bind(&wrap);
     EmitWrapCase(masm, &args, &cont);
   }
 
   __ bind(&extra_checks_or_miss);
@@ skipping 3473 matching lines @@
                            kStackSpace, nullptr, return_value_operand, NULL);
 }
 
 
 #undef __
 
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_TARGET_ARCH_X64