Fix extra decref in rare IC path (bug 635968, r=dmandelin, a=blocking).

js/src/methodjit/MonoIC.cpp

@@ -232,10 +232,8 @@ AttachSetGlobalNameStub(VMFrame &f, ic::SetGlobalNameIC *ic, JSObject *obj, cons
         return Lookup_Error;
     }
 
-    if (!linker.verifyRange(jit)) {
-        ep->release();
+    if (!linker.verifyRange(jit))
         return Lookup_Uncacheable;
-    }
 
     linker.link(done, ic->fastPathStart.labelAtOffset(ic->fastRejoinOffset));
     linker.link(guard, ic->slowPathStart);