Bug 1055864 - IonMonkey: Remove bogus assert in MTruncateToInt32, r=jandem

js/src/jit-test/tests/ion/bug1055864.js

@@ -0,0 +1,8 @@
+function f() {}
+(function() {
+    f()
+})()
+function g() {
+    new f >> 0
+}
+g()

js/src/jit/MIR.h

@@ -3918,7 +3918,6 @@ class MTruncateToInt32
 
         // An object might have "valueOf", which means it is effectful.
         // ToInt32(symbol) throws.
-        MOZ_ASSERT(def->type() != MIRType_Object);
         if (def->mightBeType(MIRType_Object) || def->mightBeType(MIRType_Symbol))
             setGuard();
     }