Function constructor should avoid String.prototype methods

src/v8natives.js

Index: src/v8natives.js
diff --git a/src/v8natives.js b/src/v8natives.js
index db9213215f7514fd78f767dc60a660e260c63170..0f190341e709754944c80ada65502169ca8fa729 100644
--- a/src/v8natives.js
+++ b/src/v8natives.js
@@ -1767,7 +1767,8 @@ function NewFunction(arg1) {  // length == 1
     // If the formal parameters string include ) - an illegal
     // character - it may make the combined function expression
     // compile. We avoid this problem by checking for this early on.
-    if (p.indexOf(')') != -1) throw MakeSyntaxError('paren_in_arg_string',[]);
+    if (StringIndexOf.call(p, ')') != -1)

[wingo, 2013/05/14 15:43:26]

This just trades one prototype lookup for another, doesn't it?  "call" in this
case.  I'll upload a fix.

+      throw MakeSyntaxError('paren_in_arg_string',[]);
     // If the formal parameters include an unbalanced block comment, the
     // function must be rejected. Since JavaScript does not allow nested
     // comments we can include a trailing block comment to catch this.