Throw if first argument to TypedArray.set is a number.

test/mjsunit/external-array-no-sse2.js

 // Copyright 2012 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 588 matching lines @@
 
 // Mixed types of same size.
 var a61 = new Float32Array([1.2, 12.3])
 var a62 = new Int32Array(2)
 a62.set(a61)
 assertArrayPrefix([1, 12], a62)
 a61.set(a62)
 assertArrayPrefix([1, 12], a61)
 
 // Invalid source
-a.set(0); // does not throw
+assertThrows(function() { a.set(0); }, TypeError);
 assertArrayPrefix([1,2,3,4,5,6], a);
 a.set({}); // does not throw
 assertArrayPrefix([1,2,3,4,5,6], a);
 
 
 // Test arraybuffer.slice
 
 var a0 = new Int8Array([1, 2, 3, 4, 5, 6])
 var b0 = a0.buffer
 
@@ skipping 52 matching lines @@
 
 built_in_array = new Array(1.5, 2, 3, 4, 5, 6);
 assertEquals(1.5, goo(built_in_array, 0));
 assertEquals(1.5, goo(built_in_array, 0));
 %OptimizeFunctionOnNextCall(goo);
 %OptimizeFunctionOnNextCall(boo);
 boo(built_in_array, 0, 2.5);
 assertEquals(2.5, goo(built_in_array, 0));
 %ClearFunctionTypeFeedback(goo);
 %ClearFunctionTypeFeedback(boo);