Bug 842963 - Check array bounds in nsMsg*GroupThread::RemoveChildAt(). r=Neil