Merged r16082 into 3.19 branch.

Fix Array index dehoisting.

BUG=264203
R=danno@chromium.org

Review URL: https://chromiumcodereview.appspot.com/22964003

git-svn-id: https://v8.googlecode.com/svn/branches/3.19@16168 ce2b1a6d-e550-0410-aec6-3dcde31c8c00