Get rid of all non-IC uses of LookupOwnRealNamedProperty

src/lookup-inl.h

Index: src/lookup-inl.h
diff --git a/src/lookup-inl.h b/src/lookup-inl.h
index cdd32f7ed64c1b70b9291d88dc9de7518644b5be..06509975baba6f1f20ee57365441fd274ed2cd4e 100644
--- a/src/lookup-inl.h
+++ b/src/lookup-inl.h
@@ -20,7 +20,10 @@ JSReceiver* LookupIterator::NextHolder(Map* map) {
          next->map()->is_hidden_prototype());
 
   if (!check_derived() &&
-      !(check_hidden() && next->map()->is_hidden_prototype())) {
+      !(check_hidden() && next->map()->is_hidden_prototype()) &&
+      // Always lookup behind the JSGlobalProxy into the JSGlobalObject, even
+      // when not checking other hidden prototypes.
+      !(map->IsJSGlobalProxyMap() && next->IsJSGlobalObject())) {
     return NULL;
   }