[MERGE #519] delete the right indexed property
[MERGE #519] delete the right indexed property

Merge pull request #519 from jianchun:deletebug
In one delete property code path "propertyRecord->IsNumeric()" (bool) is
passed for "uint32 index" parameter. Don't know why the compiler doesn't
complain about it. So if it is run we always delete property "1".

Seems the bug can only be hit through JSRT and also requires the object to
use SimpleDictionaryTypeHandler.

mrkmarron/ChakraCore,mrkmarron/ChakraCore,Microsoft/ChakraCore,Microsoft/ChakraCore,mrkmarron/ChakraCore,Microsoft/ChakraCore,Microsoft/ChakraCore,Microsoft/ChakraCore,Microsoft/ChakraCore,mrkmarron/ChakraCore,mrkmarron/ChakraCore,mrkmarron/ChakraCore,mrkmarron/ChakraCore