[turbofan] Fix new.target when a function is inlined to a constructor.

test/mjsunit/es6/new-target.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --harmony-reflect --harmony-destructuring --harmony-rest-parameters
 
 
 (function TestClass() {
   'use strict';
 
@@ skipping 367 matching lines @@
   assertSame(f3, new f3({}));
   function f4(...a) { return new.target }
   assertSame(f4, new f4);
   function f5() { 'use strict'; { let x; return new.target } }
   assertSame(f5, new f5);
   function f6() { with ({'new.target': 42}) return new.target }
   assertSame(f6, new f6);
 })();
 
 
+// Has to be top-level to be inlined.
+function get_new_target() { return new.target; }
+(function TestInlining() {
+  "use strict";
+  new function() { assertEquals(undefined, get_new_target()); }
+  new function() { assertEquals(get_new_target, new get_new_target()); }
+
+  class A extends get_new_target {
+    constructor() {
+      var new_target = super();
+      this.new_target = new_target;
+    }
+  }
+  assertEquals(A, new A().new_target);
+})();
+
+
 (function TestEarlyErrors() {
   assertThrows(function() { Function("new.target = 42"); }, ReferenceError);
   assertThrows(function() { Function("var foo = 1; new.target = foo = 42"); }, ReferenceError);
   assertThrows(function() { Function("var foo = 1; foo = new.target = 42"); }, ReferenceError);
   assertThrows(function() { Function("new.target--"); }, ReferenceError);
   assertThrows(function() { Function("--new.target"); }, ReferenceError);
   assertThrows(function() { Function("(new.target)++"); }, ReferenceError);
   assertThrows(function() { Function("++(new.target)"); }, ReferenceError);
   assertThrows(function() { Function("for (new.target of {});"); }, SyntaxError);
 })();