Use correct receiver for DOM accessors on the prototype chain

src/api.cc

Index: src/api.cc
diff --git a/src/api.cc b/src/api.cc
index a45510d606ce5e8c9360e5bd95c1555b144e08bb..32b2fe4b5320d56edd24a88cd713615b9cc1db5d 100644
--- a/src/api.cc
+++ b/src/api.cc
@@ -3610,7 +3610,8 @@ Local<Value> v8::Object::GetRealNamedPropertyInPrototypeChain(
   i::Handle<i::String> key_obj = Utils::OpenHandle(*key);
   i::PrototypeIterator iter(isolate, self_obj);
   if (iter.IsAtEnd()) return Local<Value>();
-  i::LookupIterator it(i::PrototypeIterator::GetCurrent(iter), key_obj,
+  i::Handle<i::Object> proto = i::PrototypeIterator::GetCurrent(iter);
+  i::LookupIterator it(self_obj, key_obj, i::Handle<i::JSReceiver>::cast(proto),
                        i::LookupIterator::PROTOTYPE_CHAIN_PROPERTY);
   return GetPropertyByLookup(&it);
 }