Pass in the map while creating JSFunction, and set prototype in the client.

BUG=
R=ishell@chromium.org

Review URL: https://codereview.chromium.org/263083008

git-svn-id: https://v8.googlecode.com/svn/branches/bleeding_edge@21166 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

src/factory.h

@@ -676,13 +676,12 @@ class Factory V8_FINAL {
   // type JS_FUNCTION_TYPE benefit from the use of this function.
   inline void InitializeFunction(Handle<JSFunction> function,
                                  Handle<SharedFunctionInfo> info,
-                                 Handle<Context> context,
-                                 MaybeHandle<Object> maybe_prototype);
+                                 Handle<Context> context);
 
   // Creates a function initialized with a shared part.
-  inline Handle<JSFunction> NewFunction(Handle<SharedFunctionInfo> info,
+  inline Handle<JSFunction> NewFunction(Handle<Map> map,
+                                        Handle<SharedFunctionInfo> info,
                                         Handle<Context> context,
-                                        MaybeHandle<Object> maybe_prototype,
                                         PretenureFlag pretenure = TENURED);
 
   // Create a new map cache.