ChakraCore allows writing to a non-writable, non-configurable property through Annex B 3.3 edge case

Test case:

```js
Object.defineProperty(this, 'f', {})
eval('{function f() {}}')
print(Object.getOwnPropertyDescriptor(this, 'f').value)
```

ChakraCore outputs the function, whereas three other engines output `undefined`. ChakraCore ignored the fact that the property was non-writable and non-configurable to get this output.