Track the script state a listener was created in

third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp

Index: third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp
diff --git a/third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp b/third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp
index ffcaded6aaf24665be5d45937c13ae20bf4ae75f..a9ecf18b72070af76ab0576e925bd967030c7db3 100644
--- a/third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp
+++ b/third_party/WebKit/Source/modules/webgl/WebGLRenderingContextBase.cpp
@@ -6848,13 +6848,13 @@ void WebGLRenderingContextBase::preserveObjectWrapper(ScriptState* scriptState,
         name.length()).ToLocalChecked();
     if (targetObject) {
         V8HiddenValue::setHiddenValue(
-            isolate,
+            scriptState,
             sourceObject->newLocalWrapper(isolate),
             jsName,
             targetObject->newLocalWrapper(isolate));
     } else {
         V8HiddenValue::deleteHiddenValue(
-            isolate,
+            scriptState,
             sourceObject->newLocalWrapper(isolate),
             jsName);
     }