Bug 959208 - Handle OOM in CloneObject. r=jandem

--HG--
extra : rebase_source : 3832f184a7a0f81efcead90460dfcb95efb90f41

js/src/vm/SelfHosting.cpp

@@ -891,7 +891,7 @@ CloneObject(JSContext *cx, HandleObject srcObj, CloneMemory &clonedObjects)
             clone = CloneFunctionObject(cx, fun, cx->global(), kind, TenuredObject);
             // To be able to re-lazify the cloned function, its name in the
             // self-hosting compartment has to be stored on the clone.
-            if (hasName)
+            if (clone && hasName)
                 clone->as<JSFunction>().setExtendedSlot(0, StringValue(fun->atom()));
         }
     } else if (srcObj->is<RegExpObject>()) {