Fix prepareElementsForSort crash bug=117879.  This is a back
port to 3.10 of r11588
Review URL: https://chromiumcodereview.appspot.com/10414023

git-svn-id: http://v8.googlecode.com/svn/branches/3.10@11610 ce2b1a6d-e550-0410-aec6-3dcde31c8c00

• src/arm/full-codegen-arm.cc[diff]
• src/array.js[diff]
• src/hydrogen.cc[diff]
• src/ia32/full-codegen-ia32.cc[diff]
• src/mips/full-codegen-mips.cc[diff]
• src/runtime.cc[diff]
• src/runtime.h[diff]
• src/version.cc[diff]
• src/x64/full-codegen-x64.cc[diff]