Bug 930101 - Fix an exact rooting hazard in JSObjectFromInterface; r=smaug