Bug 1005590.  MNot can also end up with a known-not-object type even while we think it might emulate undefined.  Guard against that.  r=jandem