[builtins] Fix Object.create(null) special case

test/mjsunit/object-create.js

 // Copyright 2009 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 31 matching lines @@
 }
 
 try {
   Object.create("foo");
   print(2);
   assertTrue(false);
 } catch (e) {
   assertTrue(/Object or null/.test(e));
 }
 
+try {
+  Object.create(null, this);
+  assertTrue(false);
+} catch(e) {
+  assertTrue(/Property description/.test(e))
+}
+
+try {
+  Object.create(null, [1, 2, 3]);
+  assertTrue(false);
+} catch(e) {
+  assertTrue(/Property description/.test(e))
+}
+
+try {
+  Object.create(null, new Proxy([1, 2, 3], {}));
+  assertTrue(false);
+} catch(e) {
+  assertTrue(/Property description/.test(e))
+}
+
 var ctr = 0;
 var ctr2 = 0;
 var ctr3 = 0;
 var ctr4 = 0;
 var ctr5 = 0;
 var ctr6 = 1000;
 
 var protoFoo = { foo: function() { ctr++; }};
 var fooValue = { foo: { writable: true, value: function() { ctr2++; }}};
 var fooGetter = { foo: { get: function() { return ctr3++; }}};
@@ skipping 190 matching lines @@
 
 (function createWithEmptyProtoInfoCreateMap() {
   var proto = {a:1};
   var instance = {__proto__: proto };
   // Try force creation of prototype info on proto by loading a proto property.
   assertEquals(instance.a, 1);
   var result = Object.create(proto, {});
   assertEquals(result.a, 1);
   assertEquals(result.__proto__, proto);
 })()