Use correct creation context during Iterable.forEach iteration

third_party/WebKit/Source/bindings/core/v8/Iterable.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef Iterable_h
 #define Iterable_h
 
 #include "bindings/core/v8/V8IteratorResultValue.h"
 #include "bindings/core/v8/V8ScriptRunner.h"
 #include "core/dom/Iterator.h"
@@ skipping 28 matching lines @@
         return new IterableIterator<EntrySelector>(source);
     }
 
     void forEachForBinding(ScriptState* scriptState, const ScriptValue& thisValue, const ScriptValue& callback, const ScriptValue& thisArg, ExceptionState& exceptionState)
     {
         IterationSource* source = this->startIteration(scriptState, exceptionState);
 
         v8::Isolate* isolate = scriptState->isolate();
         v8::TryCatch tryCatch(isolate);
 
-        v8::Local<v8::Object> creationContext(scriptState->context()->Global());
+        v8::Local<v8::Object> creationContext(thisValue.v8Value().As<v8::Object>());
         v8::Local<v8::Function> v8Callback(callback.v8Value().As<v8::Function>());
         v8::Local<v8::Value> v8ThisArg(thisArg.v8Value());
         v8::Local<v8::Value> args[3];
 
         args[2] = thisValue.v8Value();
 
         while (true) {
             KeyType key;
             ValueType value;
 
@@ skipping 139 matching lines @@
 public:
     Iterator* iterator(ScriptState* scriptState, ExceptionState& exceptionState)
     {
         return this->entriesForBinding(scriptState, exceptionState);
     }
 };
 
 } // namespace blink
 
 #endif // Iterable_h