Bug 1040027: Cast index to uint32 when comparing it with count in IsArrayEscaped; r=efaust