Index: src/ia32/builtins-ia32.cc |
diff --git a/src/ia32/builtins-ia32.cc b/src/ia32/builtins-ia32.cc |
index 18966c293f238569eeac345b75ec2d5a7c093bf4..b9a27c37b7d293982c2dda0c3e7964185fd338ed 100644 |
--- a/src/ia32/builtins-ia32.cc |
+++ b/src/ia32/builtins-ia32.cc |
@@ -519,6 +519,9 @@ void Builtins::Generate_JSConstructStubForDerived(MacroAssembler* masm) { |
__ push(eax); |
__ SmiUntag(eax); |
+ // Push new.target. |
+ __ push(edx); |
+ |
// receiver is the hole. |
__ push(Immediate(masm->isolate()->factory()->the_hole_value())); |
@@ -535,6 +538,7 @@ void Builtins::Generate_JSConstructStubForDerived(MacroAssembler* masm) { |
__ dec(ecx); |
__ j(greater_equal, &loop); |
+ __ inc(eax); // Pushed new.target. |
ParameterCount actual(eax); |
__ InvokeFunction(edi, actual, CALL_FUNCTION, NullCallWrapper()); |