Move properties from JSObject to JSReceiver

src/factory.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/factory.h"
 
 #include "src/allocation-site-scopes.h"
 #include "src/base/bits.h"
 #include "src/bootstrapper.h"
 #include "src/conversions.h"
@@ skipping 2007 matching lines @@
     if (target->IsConstructor()) {
       map = Handle<Map>(isolate()->proxy_constructor_map());
     } else {
       map = Handle<Map>(isolate()->proxy_callable_map());
     }
   } else {
     map = Handle<Map>(isolate()->proxy_map());
   }
   DCHECK(map->prototype()->IsNull());
   Handle<JSProxy> result = New<JSProxy>(map, NEW_SPACE);
+  result->initialize_properties();

[jochen (gone - plz use gerrit), 2016/01/12 14:51:05]

is there any other way to allocate a JSProxy? some inline assembly or hydrogen
hidden somewhere?

[Toon Verwaest, 2016/01/12 15:03:25]

Not afaik

   result->set_target(*target);
   result->set_handler(*handler);
   result->set_hash(*undefined_value(), SKIP_WRITE_BARRIER);
   return result;
 }
 
 
 Handle<JSGlobalProxy> Factory::NewUninitializedJSGlobalProxy() {
   // Create an empty shell of a JSGlobalProxy that needs to be reinitialized
   // via ReinitializeJSGlobalProxy later.
@@ skipping 360 matching lines @@
 }
 
 
 Handle<Object> Factory::ToBoolean(bool value) {
   return value ? true_value() : false_value();
 }
 
 
 }  // namespace internal
 }  // namespace v8