Added ASSERT cases to FixNext child handling.

js/rhino/org/mozilla/javascript/regexp/NativeRegExp.java

@@ -631,6 +631,8 @@ public class NativeRegExp extends ScriptableObject implements Function {
           case REOP_OPT:
           case REOP_LPAREN:
           case REOP_LPARENNON:
+          case REOP_ASSERT:
+          case REOP_ASSERT_NOT:
             fixNext(state, (RENode) ren1.kid, ren2, oldnext);
             break;
           default:;

js/rhino/src/org/mozilla/javascript/regexp/NativeRegExp.java

@@ -631,6 +631,8 @@ public class NativeRegExp extends ScriptableObject implements Function {
           case REOP_OPT:
           case REOP_LPAREN:
           case REOP_LPARENNON:
+          case REOP_ASSERT:
+          case REOP_ASSERT_NOT:
             fixNext(state, (RENode) ren1.kid, ren2, oldnext);
             break;
           default:;