Bug 894881 - Fix JIT fast paths to work with typed array properties. r=bhackett