Move delete-last-fast-property code from CSA to C++

test/mjsunit/regress/regress-crbug-716912.js

Index: test/mjsunit/regress/regress-crbug-716912.js
diff --git a/test/mjsunit/regress/regress-crbug-716912.js b/test/mjsunit/regress/regress-crbug-716912.js
new file mode 100644
index 0000000000000000000000000000000000000000..ca1663d61a9dc1907a91b8d9e1118bee2d6da0f2
--- /dev/null
+++ b/test/mjsunit/regress/regress-crbug-716912.js
@@ -0,0 +1,23 @@
+// Copyright 2017 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+// Flags: --expose-gc --invoke-weak-callbacks
+
+function __f_6() {
+this.a4 = {};
+}
+__v_6 = new __f_6();
+__v_6.prototype = __v_6;
+__v_6 = new __f_6();
+gc();
+gc();
+
+buf = new ArrayBuffer(8);
+__v_8 = new Int32Array(buf);
+__v_9 = new Float64Array(buf);
+
+__v_8[0] = 1;
+__v_6.a4 = {a: 0};
+delete __v_6.a4;
+__v_6.boom = __v_9[0];