Bug 945512: IonMonkey: Make regexp only hoistable after analysis it is safe, r=sstangl