Proxies: Fix receiver for setters inherited from proxies.

test/mjsunit/harmony/proxies.js

 // Copyright 2011 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 554 matching lines @@
   get: function(pr, pk) { throw "myexn" }
 }))
 
 TestSetThrow(Proxy.create({
   get: function(pr, pk) {
     return function(r, k, v) { throw "myexn" }
   }
 }))
 
 
+var rec
 var key
 var val
 
 function TestSetForDerived(handler) {
   TestWithProxies(TestSetForDerived2, handler)
 }
 
 function TestSetForDerived2(create, handler) {
   var p = create(handler)
   var o = Object.create(p, {x: {value: 88, writable: true},
@@ skipping 19 matching lines @@
   assertEquals(44, o.p_writable = 44)
   assertEquals("p_writable", key)
   assertEquals(44, o.p_writable)
 
   assertEquals(45, o.p_nonwritable = 45)
   assertEquals("p_nonwritable", key)
   assertEquals(45, o.p_nonwritable)
 
   assertEquals(46, o.p_setter = 46)
   assertEquals("p_setter", key)
+  assertSame(o, rec)
   assertEquals(46, val)  // written to parent
   assertFalse(Object.prototype.hasOwnProperty.call(o, "p_setter"))
 
   val = ""
   assertEquals(47, o.p_nosetter = 47)
   assertEquals("p_nosetter", key)
   assertEquals("", val)  // not written at all
   assertFalse(Object.prototype.hasOwnProperty.call(o, "p_nosetter"));
 
   key = ""
@@ skipping 10 matching lines @@
   assertThrows(function(){ o.p_setterthrow = 52 }, "myexn")
   assertEquals("p_setterthrow", key)
 }
 
 TestSetForDerived({
   getPropertyDescriptor: function(k) {
     key = k;
     switch (k) {
       case "p_writable": return {writable: true, configurable: true}
       case "p_nonwritable": return {writable: false, configurable: true}
-      case "p_setter":return {set: function(x) { val = x }, configurable: true}
-      case "p_nosetter": return {get: function() { return 1 }, configurable: true}
+      case "p_setter":return {
+        set: function(x) { rec = this; val = x },
+        configurable: true
+      }
+      case "p_nosetter": return {
+        get: function() { return 1 },
+        configurable: true
+      }
       case "p_nonconf":return {}
       case "p_throw": throw "myexn"
       case "p_setterthrow": return {set: function(x) { throw "myexn" }}
       default: return undefined
     }
   }
 })
 
 
 // Evil proxy-induced side-effects shouldn't crash.
@@ skipping 1613 matching lines @@
 function TestConstructorWithProxyPrototype2(create, handler) {
   function C() {};
   C.prototype = create(handler);
 
   var o = new C;
   assertSame(C.prototype, o.__proto__);
   assertSame(C.prototype, Object.getPrototypeOf(o));
 }
 
 TestConstructorWithProxyPrototype();