Move math-related typed arrays off js builtins object..

src/js/math.js

Index: src/js/math.js
diff --git a/src/js/math.js b/src/js/math.js
index 071566ff014150d4fd9c5e051dfa598053bef89c..4d0b1f7282a4caae07f7cc7d4abc908bc1ac011b 100644
--- a/src/js/math.js
+++ b/src/js/math.js
@@ -2,8 +2,6 @@
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
-var rngstate;  // Initialized to a Uint32Array during genesis.
-
 (function(global, utils) {
 "use strict";
 
@@ -16,8 +14,13 @@ var GlobalMath = global.Math;
 var GlobalObject = global.Object;
 var InternalArray = utils.InternalArray;
 var NaN = %GetRootNaN();
+var rngstate;
 var toStringTagSymbol = utils.ImportNow("to_string_tag_symbol");
 
+utils.SetupTypedArray(function(arg1, arg2, arg3) {
+  rngstate = arg1;
+});
+
 //-------------------------------------------------------------------
 
 // ECMA 262 - 15.8.2.1