[JSON] call replacer function with correct holder in JSON.stringify

src/json-stringifier.h

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef V8_JSON_STRINGIFIER_H_
 #define V8_JSON_STRINGIFIER_H_
 
 #include "src/objects.h"
 #include "src/string-builder.h"
 
@@ skipping 13 matching lines @@
  private:
   enum Result { UNCHANGED, SUCCESS, EXCEPTION };
 
   bool InitializeReplacer(Handle<Object> replacer);
   bool InitializeGap(Handle<Object> gap);
 
   MUST_USE_RESULT MaybeHandle<Object> ApplyToJsonFunction(
       Handle<Object> object,
       Handle<Object> key);
   MUST_USE_RESULT MaybeHandle<Object> ApplyReplacerFunction(
-      Handle<Object> object, Handle<Object> key);
+      Handle<Object> value, Handle<Object> key, Handle<Object> initial_holder);
 
   // Entry point to serialize the object.
   INLINE(Result SerializeObject(Handle<Object> obj)) {
     return Serialize_<false>(obj, false, factory()->empty_string());
   }
 
   // Serialize an array element.
   // The index may serve as argument for the toJSON function.
   INLINE(Result SerializeElement(Isolate* isolate,
                                  Handle<Object> object,
@@ skipping 47 matching lines @@
   INLINE(void SerializeString_(Handle<String> string));
 
   template <typename Char>
   INLINE(static bool DoNotEscape(Char c));
 
   INLINE(void NewLine());
   INLINE(void Indent() { indent_++; });
   INLINE(void Unindent() { indent_--; });
   INLINE(void Separator(bool first));
 
-  Handle<JSReceiver> CurrentHolder(Handle<Object> value);
+  Handle<JSReceiver> CurrentHolder(Handle<Object> value,
+                                   Handle<Object> inital_holder);
 
   Result StackPush(Handle<Object> object);
   void StackPop();
 
   Factory* factory() { return isolate_->factory(); }
 
   Isolate* isolate_;
   IncrementalStringBuilder builder_;
   Handle<String> tojson_string_;
   Handle<JSArray> stack_;
   Handle<FixedArray> property_list_;
   Handle<JSReceiver> replacer_function_;
   uc16* gap_;
   int indent_;
 
   static const int kJsonEscapeTableEntrySize = 8;
   static const char* const JsonEscapeTable;
 };
 
 }  // namespace internal
 }  // namespace v8
 
 #endif  // V8_JSON_STRINGIFIER_H_