[turbofan] Pass new target to JSCreate nodes.

src/compiler/js-inlining.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/compiler/js-inlining.h"
 
 #include "src/ast.h"
 #include "src/ast-numbering.h"
 #include "src/compiler.h"
 #include "src/compiler/all-nodes.h"
@@ skipping 434 matching lines @@
   Node* end = visitor.GetCopy(graph.end());
   Node* frame_state = call.frame_state_after();
 
   // Insert nodes around the call that model the behavior required for a
   // constructor dispatch and turn the constructor call into a regular call.
   // This models the behavior usually accomplished by our {JSConstructStub}.
   // Note that the context has to be the callers context (input to call node).
   if (node->opcode() == IrOpcode::kJSCallConstruct) {
     Node* effect = NodeProperties::GetEffectInput(node);
     Node* context = NodeProperties::GetContextInput(node);
-    Node* create = jsgraph_->graph()->NewNode(jsgraph_->javascript()->Create(),
-                                              call.target(), context, effect);
+    Node* create = jsgraph_->graph()->NewNode(
+        jsgraph_->javascript()->Create(), call.target(),
+        call.original_constructor(), context, effect);
     NodeProperties::ReplaceEffectInput(node, create);
-    // TODO(4544): For now {JSCreate} requires the actual constructor to
-    // coincide with the original constructor. Adapt JSGenericLowering to fix.
-    // Also Runtime_GetOriginalConstructor depends on this for now. Fix as well!
+    // TODO(4544): For now Runtime_GetOriginalConstructor depends on the actual
+    // constructor to coincide with the original constructor. Fix this!
     CHECK_EQ(call.target(), call.original_constructor());
     // TODO(4544): For derived constructors we should not allocate an implicit
     // receiver and also the return value should not be checked afterwards.
     CHECK(!IsClassConstructor(function->shared()->kind()));
     // Swizzle the inputs of the {JSCallConstruct} node to look like inputs to
     // any {JSCallFunction} node so that the rest of the inlining machinery
     // behaves as if we were dealing with a regular function invocation.
     node->RemoveInput(call.formal_arguments() + 1);  // Drop new.target.
     node->InsertInput(jsgraph_->graph()->zone(), 1, create);
     // Insert a check of the return value to determine whether the return value
@@ skipping 46 matching lines @@
         node, frame_state, call.formal_arguments(),
         FrameStateType::kArgumentsAdaptor, info.shared_info());
   }
 
   return InlineCall(node, context, frame_state, start, end);
 }
 
 }  // namespace compiler
 }  // namespace internal
 }  // namespace v8