Do security checks in the promise constructor

src/code-stub-assembler.cc

Index: src/code-stub-assembler.cc
diff --git a/src/code-stub-assembler.cc b/src/code-stub-assembler.cc
index 1fb8a2152ee587eb5176e6c46707fbf7f679efd5..c85dd1ca28fa0d62261a0e3529daef03e6d79006 100644
--- a/src/code-stub-assembler.cc
+++ b/src/code-stub-assembler.cc
@@ -2976,6 +2976,14 @@ Node* CodeStubAssembler::IsJSFunction(Node* object) {
   return HasInstanceType(object, JS_FUNCTION_TYPE);
 }
 
+Node* CodeStubAssembler::IsJSFunctionInstanceType(Node* instance_type) {

[Igor Sheludko, 2017/01/12 10:12:57]

I think it would be nice to have one helper method like
  IsInstanceType(Node* instance_type, InstanceType type)
or even
  InstanceTypeEqual(...)
instead.

And please put it below IsJSReceiverInstanceType().

+  return Word32Equal(instance_type, Int32Constant(JS_FUNCTION_TYPE));
+}
+
+Node* CodeStubAssembler::IsJSBoundFunctionInstanceType(Node* instance_type) {
+  return Word32Equal(instance_type, Int32Constant(JS_BOUND_FUNCTION_TYPE));
+}
+
 Node* CodeStubAssembler::StringCharCodeAt(Node* string, Node* index,
                                           ParameterMode parameter_mode) {
   CSA_ASSERT(this, IsString(string));