Bug 806206 - InlineFrameIterator: provide default scope chain value if unused. r=dvander

js/src/ion/IonFrames.cpp

@@ -1042,8 +1042,12 @@ InlineFrameIterator::scopeChain() const
 
     // scopeChain
     Value v = s.read();
-    JS_ASSERT(v.isObject());
-    return &v.toObject();
+    if (v.isObject()) {
+        JS_ASSERT_IF(script()->hasAnalysis(), script()->analysis()->usesScopeChain());
+        return &v.toObject();
+    }
+
+    return callee()->environment();
 }
 
 JSObject *