Add --trace-array-abuse to help find OOB accesses.

src/objects.cc

Index: src/objects.cc
diff --git a/src/objects.cc b/src/objects.cc
index 46539311de9625d9c7ffccc54bd476ab5510a47b..b3a5658ca03181502734054f0a640d4a75a854e6 100644
--- a/src/objects.cc
+++ b/src/objects.cc
@@ -10405,6 +10405,11 @@ MaybeObject* JSObject::SetElementWithoutInterceptor(uint32_t index,
          HasDictionaryArgumentsElements() ||
          (attr & (DONT_DELETE | DONT_ENUM | READ_ONLY)) == 0);
   Isolate* isolate = GetIsolate();
+  if (FLAG_trace_array_abuse) {
+    if (IsExternalArrayElementsKind(GetElementsKind())) {
+      CheckArrayAbuse(this, "external elements write", index);
+    }
+  }
   switch (GetElementsKind()) {
     case FAST_SMI_ELEMENTS:
     case FAST_ELEMENTS: