[runtime] Remove the very dangerous %_CallFunction intrinsic.

src/js/date.js

 // Copyright 2006-2008 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // -------------------------------------------------------------------
 
 (function(global, utils) {
 
 "use strict";
 
@@ skipping 116 matching lines @@
   // Cached time value.
   time: 0,
   // String input for which the cached time is valid.
   string: null
 };
 
 
 function DateConstructor(year, month, date, hours, minutes, seconds, ms) {
   if (!%_IsConstructCall()) {
     // ECMA 262 - 15.9.2
-    return %_CallFunction(new GlobalDate(), DateToString);
+    return %_Call(DateToString, new GlobalDate());
   }
 
   // ECMA 262 - 15.9.3
   var argc = %_ArgumentsLength();
   var value;
   if (argc == 0) {
     value = %DateCurrentTime();
     SET_UTC_DATE_VALUE(this, value);
   } else if (argc == 1) {
     if (IS_NUMBER(year)) {
@@ skipping 182 matching lines @@
   var t = UTC_DATE_VALUE(this);
   if (NUMBER_IS_NAN(t)) return kInvalidDate;
   var time_zone_string = LocalTimezoneString(this);
   return TimeString(this) + time_zone_string;
 }
 
 
 // ECMA 262 - 15.9.5.5
 function DateToLocaleString() {
   CHECK_DATE(this);
-  return %_CallFunction(this, DateToString);
+  return %_Call(DateToString, this);
 }
 
 
 // ECMA 262 - 15.9.5.6
 function DateToLocaleDateString() {
   CHECK_DATE(this);
   var t = UTC_DATE_VALUE(this);
   if (NUMBER_IS_NAN(t)) return kInvalidDate;
   return LongDateString(this);
 }
@@ skipping 377 matching lines @@
 
 
 // ECMA 262 - B.2.6
 //
 // Notice that this does not follow ECMA 262 completely.  ECMA 262
 // says that toGMTString should be the same Function object as
 // toUTCString.  JSC does not do this, so for compatibility we do not
 // do that either.  Instead, we create a new function whose name
 // property will return toGMTString.
 function DateToGMTString() {
-  return %_CallFunction(this, DateToUTCString);
+  return %_Call(DateToUTCString, this);
 }
 
 
 function PadInt(n, digits) {
   if (digits == 1) return n;
   return n < %_MathPow(10, digits - 1) ? '0' + PadInt(n, digits - 1) : n;
 }
 
 
 // ECMA 262 - 20.3.4.36
@@ skipping 126 matching lines @@
   "toUTCString", DateToUTCString,
   "getYear", DateGetYear,
   "setYear", DateSetYear,
   "toISOString", DateToISOString,
   "toJSON", DateToJSON
 ]);
 
 %InstallToContext(["create_date_fun", CreateDate]);
 
 })