[Atomics] Fix atomic access index validation

test/mjsunit/asm/atomics-sub.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --harmony-sharedarraybuffer
 
 function Module(stdlib, foreign, heap, offset) {
   "use asm";
   var MEM8 = new stdlib.Int8Array(heap, offset);
   var MEM16 = new stdlib.Int16Array(heap, offset);
@@ skipping 61 matching lines @@
   clearArray();
 
   var ta = new taConstr(sab, offset);
   var name = Object.prototype.toString.call(ta);
   ta[0] = 30;
   assertEquals(30, f(0, 10), name);
   assertEquals(20, ta[0]);
   assertEquals(20, f(0, 10), name);
   assertEquals(10, ta[0]);
   // out of bounds
-  assertEquals(0, f(-1, 0), name);
-  assertEquals(0, f(ta.length, 0), name);
+  assertThrows(function() { f(-1, 0); });
+  assertThrows(function() { f(ta.length, 0); });
 }
 
 function testElement(m, offset) {
   testElementType(Int8Array, m.subi8, offset);
   testElementType(Int16Array, m.subi16, offset);
   testElementType(Int32Array, m.subi32, offset);
   testElementType(Uint8Array, m.subu8, offset);
   testElementType(Uint16Array, m.subu16, offset);
   testElementType(Uint32Array, m.subu32, offset);
 }
 
 var offset = 0;
 var sab = new SharedArrayBuffer(16);
 var m1 = Module(this, {}, sab, offset);
 testElement(m1, offset);
 
 offset = 32;
 sab = new SharedArrayBuffer(64);
 var m2 = Module(this, {}, sab, offset);
 testElement(m2, offset);