Fix type checks that wrongly ignore malformed types.

runtime/vm/code_generator_ia32.cc

Index: runtime/vm/code_generator_ia32.cc
===================================================================
--- runtime/vm/code_generator_ia32.cc	(revision 5242)
+++ runtime/vm/code_generator_ia32.cc	(working copy)
@@ -1432,7 +1432,8 @@
 
   // Any expression is assignable to the Dynamic type and to the Object type.
   // Skip the test.
-  if (dst_type.IsDynamicType() || dst_type.IsObjectType()) {
+  if (!dst_type.IsMalformed() &&
+      (dst_type.IsDynamicType() || dst_type.IsObjectType())) {
     return;
   }
 
@@ -1467,6 +1468,8 @@
     GenerateCallRuntime(node_id, token_index, kMalformedTypeErrorRuntimeEntry);
     // We should never return here.
     __ int3();
+
+    __ Bind(&done);  // For a null object.
     return;
   }