Assertion failure in GlobOpt::SetLoopFieldInitialValue()

Hello, executiong following code in ch 1.11.24(debug), an assertion will be thrown.
```
function opt(obj) {
obj.method();
}

for(let i = 0; i < 1000; i++) {
var obj = {
method() {
fromA = super['fromA'];
}
};
opt(obj);
}
```
output:
```
ASSERTION 35284: (c:\users\sunlili\documents\workspace\jsenginesfordebug\chakracore-1.11.24\lib\backend\globopt.cpp, line 3228) !profiledValueType.IsDefinite()
Failure: (!profiledValueType.IsDefinite())
FATAL ERROR: ch.exe failed due to exception code c0000420
```

There is no Likely tag in profiledValueType, so the assertion fails. I am confused about this crash, however, it should be a JIT compiler bug.

ISec Lab.
2020.12.16