[turbofan] Fix super property calls to act as method calls.

test/mjsunit/regress/regress-4525.js

+// Copyright 2015 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --allow-natives-syntax
+
+function receiver() {
+  return this;
+}
+
+function construct(f) {
+  "use strict";
+  class B {}
+  class C extends B {
+    bar() { return super.foo() }
+  }
+  B.prototype.foo = f;
+  return new C();
+}
+
+function check(x, value, type) {
+  assertEquals("object", typeof x);
+  assertInstanceof(x, type);
+  assertEquals(value, x);
+}
+
+var o = construct(receiver);
+check(o.bar.call(123), Object(123), Number);
+check(o.bar.call("a"), Object("a"), String);
+assertThrows("o.bar.call(null)", TypeError);

[Michael Starzinger, 2015/10/29 15:12:49]

This call throws with the following exception. I am not 100% convinced this is
what the spec wants us to do, but it is what we are implementing (for both,
baseline and TurboFan) at the moment. I will need your help figuring out whether
this is intended or not.

regress-4525.js:15: TypeError: Cannot convert undefined or null to object
    bar() { return super.foo() }
                         ^
TypeError: Cannot convert undefined or null to object
    at bar (regress-4525.js:15:26)
    at regress-4525.js:30:20

[Michael Starzinger, 2015/10/29 16:28:56]

As per offline discussion, I filed a separate issue for this ...

https://code.google.com/p/v8/issues/detail?id=4526

+assertThrows("o.bar.call(undefined)", TypeError);
+
+%OptimizeFunctionOnNextCall(o.bar);
+check(o.bar.call(456), Object(456), Number);
+check(o.bar.call("b"), Object("b"), String);
+assertThrows("o.bar.call(null)", TypeError);
+assertThrows("o.bar.call(undefined)", TypeError);