Index: src/compiler/js-call-reducer.cc |
diff --git a/src/compiler/js-call-reducer.cc b/src/compiler/js-call-reducer.cc |
index 79fd6f6d3862d405ef90330c4526bcb957027fb4..e7605f847f6910a9ff6aafd9f47fe646cb6ff453 100644 |
--- a/src/compiler/js-call-reducer.cc |
+++ b/src/compiler/js-call-reducer.cc |
@@ -666,7 +666,8 @@ Reduction JSCallReducer::ReduceCallApiFunction( |
CallInterfaceDescriptor cid = stub.GetCallInterfaceDescriptor(); |
CallDescriptor* call_descriptor = Linkage::GetStubCallDescriptor( |
isolate(), graph()->zone(), cid, |
- cid.GetStackParameterCount() + argc + 1 /* implicit receiver */, |
+ cid.GetStackParameterCount() + argc + |
+ 2 /* implicit receiver + accessor_holder */, |
CallDescriptor::kNeedsFrameState, Operator::kNoProperties, |
MachineType::AnyTagged(), 1); |
ApiFunction api_function(v8::ToCData<Address>(call_handler_info->callback())); |
@@ -681,7 +682,8 @@ Reduction JSCallReducer::ReduceCallApiFunction( |
node->InsertInput(graph()->zone(), 3, holder); |
node->InsertInput(graph()->zone(), 4, |
jsgraph()->ExternalConstant(function_reference)); |
- node->ReplaceInput(5, receiver); |
+ node->InsertInput(graph()->zone(), 5, holder /* as accessor_holder */); |
+ node->ReplaceInput(6, receiver); |
NodeProperties::ChangeOp(node, common()->Call(call_descriptor)); |
return Changed(node); |
} |