Bug 899051 - IonMonkey: Don't generate fastpath for dense setelem with sparse property after a boundscheck failure, r=bhackett