JIT did not handle array length correctly

###### Version

chakra-1.11.24.0, 1.13.0.0-beta

###### Test case

```js
function foo() {
var IntArr2 = new Int32Array();
IntArr2.__defineGetter__("length", function () {
return 1;
});
IntArr2[5] = 429496725;
IntArr2[IntArr2.length] = 3;
return [IntArr2,IntArr2.length]
}
for(let i = 0;i<100000;i++) foo()
print(foo())

```

###### Execution steps

.ch Testcase.js

###### Output
```
,0
```

###### Expected result
,1

###### Description

The correct output of the test case should be `,1` while chakra yields `,0` . This may be caused by the incorrect implementation of chakra JIT compiler.