Fix uninitialized new.target register in InvokeBuiltin.

src/arm64/macro-assembler-arm64.cc

Index: src/arm64/macro-assembler-arm64.cc
diff --git a/src/arm64/macro-assembler-arm64.cc b/src/arm64/macro-assembler-arm64.cc
index d1e4106dabe8d720c51ea6770bf489c40e65c4ea..c561e26feec4d3bf5d5672d526b21da32ab312f3 100644
--- a/src/arm64/macro-assembler-arm64.cc
+++ b/src/arm64/macro-assembler-arm64.cc
@@ -1707,6 +1707,9 @@ void MacroAssembler::InvokeBuiltin(int native_context_index, InvokeFlag flag,
   // You can't call a builtin without a valid frame.
   DCHECK(flag == JUMP_FUNCTION || has_frame());
 
+  // Always initialize new target.
+  LoadRoot(x3, Heap::kUndefinedValueRootIndex);
+
   // Get the builtin entry in x2 and setup the function object in x1.
   LoadNativeContextSlot(native_context_index, x1);
   Ldr(x2, FieldMemOperand(x1, JSFunction::kCodeEntryOffset));