Bug 950438 - IonMonkey: The intersection of two ranges that both contain NaN is not empty. r=nbp, a=1.1.x+