Intrinsics on the prototype chain aren't serialized correctly

[sebmarkbage]

arr = Object.create(Array.prototype);

incorrectly turns into:

arr = {};

This seems to happen with any form including:

num = new Number(123);

[hermanventer]

I've created fixes for the two specific examples above. More fixes are needed to fix the entire class of related issues.

[NTillmann]

There are really two different things to consider here:

1. Creation of objects with internal slots. We are tracking that issue Serialization of objects with internal slots #416.
2. Objects (which might or might not have corresponding internal slots) with an intrinsic prototype.

Here's a test case that shows how we fail to do 2) properly:

(function() {
    var x = {}
    x.__proto__ = Number.prototype;
    inspect = function() { return x.__proto__.constructor.name; }
})();

[NTillmann]

The general issue has been cleaned up by the referenced pull requests, and error messages are emitted for any unsupported object kinds.