[JSON] call replacer function with correct holder in JSON.stringify

src/json-stringifier.h

Index: src/json-stringifier.h
diff --git a/src/json-stringifier.h b/src/json-stringifier.h
index 5ce8f50cb1b565fa554a6d185d6316923edc22e0..e72bd9d3d2205e9b124fa78b1d83da90bf36f64e 100644
--- a/src/json-stringifier.h
+++ b/src/json-stringifier.h
@@ -31,7 +31,7 @@ class JsonStringifier BASE_EMBEDDED {
       Handle<Object> object,
       Handle<Object> key);
   MUST_USE_RESULT MaybeHandle<Object> ApplyReplacerFunction(
-      Handle<Object> object, Handle<Object> key);
+      Handle<Object> value, Handle<Object> key, Handle<Object> initial_holder);
 
   // Entry point to serialize the object.
   INLINE(Result SerializeObject(Handle<Object> obj)) {
@@ -99,7 +99,8 @@ class JsonStringifier BASE_EMBEDDED {
   INLINE(void Unindent() { indent_--; });
   INLINE(void Separator(bool first));
 
-  Handle<JSReceiver> CurrentHolder(Handle<Object> value);
+  Handle<JSReceiver> CurrentHolder(Handle<Object> value,
+                                   Handle<Object> inital_holder);
 
   Result StackPush(Handle<Object> object);
   void StackPop();