Assertion Failure : isNextFieldDateNegativeVersion5 == false in ChakraCore/lib/Runtime/Library/DateImplementation.cpp, line 1138

###### Version
Branch : master
Version: https://github.com/chakra-core/ChakraCore/commit/c3ead3f8a6e0bb8e32e043adc091c68cba5935e9

###### Build platform
Ubuntu 20.04.5 LTS (Linux 5.4.0-144-generic x86_64)

###### Build steps
- Address Sanitizer=On
- Debug
```sh
./build.sh -d --static --sanitize=address
```

###### POC
testcase

```JavaScript
var e = [ 1 , 2 , 2 ] ;
new Date ( " 1 - 1 0 - a " ) . toString ( ) , new Date ( 0 ) , Object . defineProperty ( e , 1 , { configurable : " abc " } ) ;
```

``` JavaScript
// poc.js
new Date ( " 1 - 1 0 - a " );
```

###### Execution steps & Output

```sh
$ ./ch poc.js
(gdb) bt
#0 0x0000555558912bb5 in Js::DateImplementation::UtcTimeFromStrCore (psz=, ulength=, retVal=, scriptContext=0x622000000158) at /chakracore/lib/Runtime/Library/DateImplementation.cpp:1138
#1 0x000055555890d815 in Js::DateImplementation::UtcTimeFromStr (scriptContext=, pParseString=0x7ffff283f280) at /chakracore/lib/Runtime/Library/DateImplementation.cpp:647
#2 0x0000555558b896bc in Js::JavascriptDate::ParseHelper (scriptContext=0x622000000158, str=0x10007fff7400) at /chakracore/lib/Runtime/Library/JavascriptDate.cpp:833
#3 Js::JavascriptDate::NewInstanceAsConstructor (args=..., scriptContext=0x622000000158, forceCurrentDate=) at /chakracore/lib/Runtime/Library/JavascriptDate.cpp:159
#4 0x0000555558b88567 in Js::JavascriptDate::NewInstance (function=, callInfo=...) at /chakracore/lib/Runtime/Library/JavascriptDate.cpp:97
#5 0x0000555559723c4e in amd64_CallFunction () at /chakracore/lib/Runtime/Library/amd64/JavascriptFunctionA.S:100
#6 0x0000555558c16c5e in Js::JavascriptFunction::CallAsConstructor (v=0x7ffff2860240, overridingNewTarget=, args=..., scriptContext=, spreadIndices=) at /chakracore/lib/Runtime/Library/JavascriptFunction.cpp:972
#7 0x0000555558570f4d in Js::JavascriptOperators::NewScObject (callee=0x0, args=..., scriptContext=, spreadIndices=) at /chakracore/lib/Runtime/Language/JavascriptOperators.cpp:6931
#8 0x0000555558713ed7 in Js::ProfilingHelpers::ProfiledNewScObject (callee=0x7ffff2860240, args=..., callerFunctionBody=, profileId=, inlineCacheIndex=, spreadIndices=)
at /chakracore/lib/Runtime/Language/ProfilingHelpers.cpp:720
#9 0x000055555830774f in Js::InterpreterStackFrame::ProfiledNewScObject_Helper (this=0x7fffffffc680, target=, ArgCount=2, profileId=, inlineCacheIndex=, spreadIndices=)
at /chakracore/lib/Runtime/Language/InterpreterStackFrame.cpp:6596
#10 0x0000555557e01b2e in Js::InterpreterStackFrame::OP_NewScObject_Impl >, true, false>(Js::OpLayoutT_CallI > const __unaligned*, unsigned int, Js::AuxArray const*) (
this=0x7fffffffc680, playout=0x7ffff28ef16d, inlineCacheIndex=4294967295, spreadIndices=0x0) at /chakracore/lib/Runtime/Language/InterpreterStackFrame.cpp:6464
#11 Js::InterpreterStackFrame::OP_ProfiledNewScObject_Impl >, true, false>(Js::OpLayoutT_CallI > const __unaligned*, unsigned int, Js::AuxArray const*) (this=0x7fffffffc680,
playout=0x7ffff28ef16d, inlineCacheIndex=4294967295, spreadIndices=0x0) at /chakracore/lib/Runtime/./Language/InterpreterStackFrame.h:759
#12 Js::InterpreterStackFrame::OP_ProfiledNewScObject > >(Js::OpLayoutDynamicProfile > > const __unaligned*) (this=0x7fffffffc680, playout=0x7ffff28ef16d)
at /chakracore/lib/Runtime/./Language/InterpreterStackFrame.h:767
#13 Js::InterpreterStackFrame::ProcessProfiled (this=) at /chakracore/lib/Runtime/Language/InterpreterHandler.inl:302
#14 0x0000555557c426df in Js::InterpreterStackFrame::Process (this=0x7fffffffc680) at /chakracore/lib/Runtime/Language/InterpreterStackFrame.cpp:3472
#15 0x0000555557c3d150 in Js::InterpreterStackFrame::InterpreterHelper (function=, args=, returnAddress=, addressOfReturnAddress=, asmJsReturn=)
at /chakracore/lib/Runtime/Language/InterpreterStackFrame.cpp:2153
#16 0x0000555557c3a80d in Js::InterpreterStackFrame::InterpreterThunk (layout=0x7ffff26c0fa2) at /chakracore/lib/Runtime/Language/InterpreterStackFrame.cpp:1833
#17 0x00007ffff26c0fa2 in ?? ()
#18 0x00007fffffffcc50 in ?? ()
#19 0x0000555559723c4e in amd64_CallFunction () at /chakracore/lib/Runtime/Library/amd64/JavascriptFunctionA.S:100
```

---
###### Outputs
```
ASSERTION 292943: (/chakracore/lib/Runtime/Library/DateImplementation.cpp, line 1138) isNextFieldDateNegativeVersion5 == false
Failure: (isNextFieldDateNegativeVersion5 == false)
Illegal instruction
```

credits: @EJueon, @Ye0nny of the seclab-yonsei.

Reproduce the failure with the supplied ./ch poc.js command and sanitized debug build. Start at ChakraCore/lib/Runtime/Library/DateImplementation.cpp:1138 in UtcTimeFromStrCore, then follow the call from JavascriptDate.cpp:833. Done means the malformed date input no longer reaches the assertion or produces an illegal-instruction failure.

Written by the indexing model from the issue text.