Prevent SharedArrayBuffer views from being used in bindings

third_party/WebKit/LayoutTests/fast/dom/geometry-interfaces-dom-matrix-readonly.html

Index: third_party/WebKit/LayoutTests/fast/dom/geometry-interfaces-dom-matrix-readonly.html
diff --git a/third_party/WebKit/LayoutTests/fast/dom/geometry-interfaces-dom-matrix-readonly.html b/third_party/WebKit/LayoutTests/fast/dom/geometry-interfaces-dom-matrix-readonly.html
index 72c1c8fb4ac58d9478838dd64638fb56790436f2..959b47c9268cdf60f4e43071909dc1c319f92e40 100644
--- a/third_party/WebKit/LayoutTests/fast/dom/geometry-interfaces-dom-matrix-readonly.html
+++ b/third_party/WebKit/LayoutTests/fast/dom/geometry-interfaces-dom-matrix-readonly.html
@@ -177,6 +177,19 @@ test(() => {
     "fromFloat64Array function only accepts 1 Float64Array with 6 or 16 elements");
 }, "DOMMatrixReadOnly fromFloat*Array - invalid array size");
 
+if (window.internals && internals.runtimeFlags.sharedArrayBufferEnabled && window.SharedArrayBuffer) {
+
+  test(() => {
+    assert_throws(new TypeError(), () => { DOMMatrixReadOnly.fromFloat32Array(new Float32Array(new SharedArrayBuffer(16))) },
+      "fromFloat32Array function should throw when passed a SharedArrayBuffer Float32Array");
+  });
+
+  test(() => {
+    assert_throws(new TypeError(), () => { DOMMatrixReadOnly.fromFloat64Array(new Float64Array(new SharedArrayBuffer(16))) },
+      "fromFloat64Array function should throw when passed a SharedArrayBuffer Float64Array");
+  });
+}
+
 test(() => {
   var matrix = DOMMatrixReadOnly.fromMatrix();
   assert_identity_2d_matrix(matrix);