Property handle read_property exception in fetch_property_address

Otherwise we leak (and corrupt uninitialized_zval).