Fixing http://bugzilla.mozilla.org/show_bug.cgi?id=203402 :

In Codegen do not pass trueLabel, falseLabel to recursive
generateCodeFromNode from ADD node and use -1 , -1 instead to indicate non-jump node.

js/rhino/src/org/mozilla/javascript/optimizer/Codegen.java

@@ -1239,9 +1239,8 @@ public class Codegen extends Interpreter {
                 break;
 
               case TokenStream.ADD: {
-                    generateCodeFromNode(child, node, trueLabel, falseLabel);
-                    generateCodeFromNode(child.getNext(),
-                                                 node, trueLabel, falseLabel);
+                    generateCodeFromNode(child, node, -1, -1);
+                    generateCodeFromNode(child.getNext(), node, -1, -1);
                     switch (node.getIntProp(Node.ISNUMBER_PROP, -1)) {
                         case Node.BOTH:
                             addByteCode(ByteCode.DADD);