Fixes #890, fixes #814.

Changelog:

• Fixed incorrect NaN and negative index handling of string charAt, charCodeAt, slice, substr, substring
• Fixed String.prototype.substr evaluating length expression twice
• Fixed indexing string out of bounds being an empty string instead of undefined