[Atomics] Fix atomic access index validation

test/mjsunit/asm/atomics-xor.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --harmony-sharedarraybuffer
 
 function Module(stdlib, foreign, heap, offset) {
   "use asm";
   var MEM8 = new stdlib.Int8Array(heap, offset);
   var MEM16 = new stdlib.Int16Array(heap, offset);
@@ skipping 60 matching lines @@
 function testElementType(taConstr, f, offset) {
   clearArray();
 
   var ta = new taConstr(sab, offset);
   var name = Object.prototype.toString.call(ta);
   assertEquals(0, f(0, 0xf), name);
   assertEquals(0xf, ta[0]);
   assertEquals(0xf, f(0, 0x11), name);
   assertEquals(0x1e, ta[0]);
   // out of bounds
-  assertEquals(0, f(-1, 0), name);
-  assertEquals(0, f(ta.length, 0), name);
+  assertThrows(function() { f(-1, 0); });
+  assertThrows(function() { f(ta.length, 0); });
 }
 
 function testElement(m, offset) {
   testElementType(Int8Array, m.xori8, offset);
   testElementType(Int16Array, m.xori16, offset);
   testElementType(Int32Array, m.xori32, offset);
   testElementType(Uint8Array, m.xoru8, offset);
   testElementType(Uint16Array, m.xoru16, offset);
   testElementType(Uint32Array, m.xoru32, offset);
 }
 
 var offset = 0;
 var sab = new SharedArrayBuffer(16);
 var m1 = Module(this, {}, sab, offset);
 testElement(m1, offset);
 
 offset = 32;
 sab = new SharedArrayBuffer(64);
 var m2 = Module(this, {}, sab, offset);
 testElement(m2, offset);