Fix assert in InvokeConstructor (bug 602088, r=luke).

js/src/jsinterp.cpp

@@ -762,7 +762,7 @@ Invoke(JSContext *cx, const CallArgs &argsRef, uint32 flags)
     PutActivationObjects(cx, fp);
 
     args.rval() = fp->returnValue();
-    JS_ASSERT_IF(flags & JSINVOKE_CONSTRUCT, !args.rval().isPrimitive());
+    JS_ASSERT_IF(ok && (flags & JSINVOKE_CONSTRUCT), !args.rval().isPrimitive());
 
     return ok;
 }

js/src/trace-test/tests/basic/bug602088.js

@@ -0,0 +1,6 @@
+// |trace-test| error: TypeError
+/* vim: set ts=4 sw=4 tw=99 et: */
+
+var p = Proxy.createFunction({}, function(x, y) { undefined.x(); });
+print(new p(1, 2));
+