Fix another IC patching range check (bug 602333 part 4, r=dmandelin, a=b8+).

js/src/methodjit/PolyIC.cpp

@@ -2117,10 +2117,8 @@ GetElementIC::attachGetProp(JSContext *cx, JSObject *obj, const Value &v, jsid i
 
     if (hasLastStringStub && !buffer.verifyRange(lastStringStub))
         return disable(cx, "code memory is out of range");
-    if ((shouldPatchInlineTypeGuard() || shouldPatchUnconditionalClaspGuard()) &&
-        !buffer.verifyRange(cx->fp()->jit())) {
+    if (!buffer.verifyRange(cx->fp()->jit()))
         return disable(cx, "code memory is out of range");
-    }
 
     // Patch all guards.
     buffer.maybeLink(atomIdGuard, slowPathStart);