Remove new.target value from construct stub frames.

src/x64/builtins-x64.cc

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #if V8_TARGET_ARCH_X64
 
 #include "src/code-factory.h"
 #include "src/codegen.h"
 #include "src/deoptimizer.h"
 #include "src/full-codegen/full-codegen.h"
@@ skipping 258 matching lines @@
       // rdi: constructor
       // rdx: new target
       // rbx: newly allocated object
       __ bind(&allocated);
 
       // Retrieve smi-tagged arguments count from the stack.
       __ movp(rax, Operand(rsp, 0));
       __ SmiToInteger32(rax, rax);
     }
 
-    // Push new.target onto the construct frame. This is stored just below the
-    // receiver on the stack.
-    __ Push(rdx);
-
     if (create_implicit_receiver) {
       // Push the allocated receiver to the stack. We need two copies
       // because we may have to return the original one and the calling
       // conventions dictate that the called function pops the receiver.
       __ Push(rbx);
       __ Push(rbx);
     } else {
       __ PushRoot(Heap::kTheHoleValueRootIndex);
     }
 
@@ skipping 43 matching lines @@
       STATIC_ASSERT(LAST_JS_RECEIVER_TYPE == LAST_TYPE);
       __ CmpObjectType(rax, FIRST_JS_RECEIVER_TYPE, rcx);
       __ j(above_equal, &exit);
 
       // Throw away the result of the constructor invocation and use the
       // on-stack receiver as the result.
       __ bind(&use_receiver);
       __ movp(rax, Operand(rsp, 0));
 
       // Restore the arguments count and leave the construct frame. The
-      // arguments count is stored below the reciever and the new.target.
+      // arguments count is stored below the receiver.
       __ bind(&exit);
-      __ movp(rbx, Operand(rsp, 2 * kPointerSize));
+      __ movp(rbx, Operand(rsp, 1 * kPointerSize));
     } else {
-      __ movp(rbx, Operand(rsp, kPointerSize));
+      __ movp(rbx, Operand(rsp, 0));
     }
 
     // Leave construct frame.
   }
 
   // Remove caller arguments from the stack and return.
   __ PopReturnAddressTo(rcx);
   SmiIndex index = masm->SmiToIndex(rbx, rbx, kPointerSizeLog2);
   __ leap(rsp, Operand(rsp, index.reg, index.scale, 1 * kPointerSize));
   __ PushReturnAddressFrom(rcx);
@@ skipping 1679 matching lines @@
   __ ret(0);
 }
 
 
 #undef __
 
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_TARGET_ARCH_X64