JSObject::findPropertyHashEntry() should take VM instead of ExecState.